<?php
// ---------------------------
// HoolzLab: Defensive 404 — ULTIMATE FEAR EDITION
// ---------------------------
header("X-Frame-Options: DENY");
header("X-Content-Type-Options: nosniff");
header("Referrer-Policy: no-referrer");
header("Permissions-Policy: geolocation=()");
header("Cross-Origin-Opener-Policy: same-origin");
header("Cross-Origin-Embedder-Policy: require-corp");
header("Cross-Origin-Resource-Policy: same-origin");
header("Content-Security-Policy: default-src 'self' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; img-src 'self' data:; connect-src 'self'");
http_response_code(404);
function e($s){ return htmlspecialchars((string)$s, ENT_QUOTES, 'UTF-8'); }
function get_client_ip(): string {
  $headers = ['HTTP_CF_CONNECTING_IP','HTTP_X_FORWARDED_FOR','HTTP_X_REAL_IP','HTTP_CLIENT_IP'];
  foreach ($headers as $h) {
    if (!empty($_SERVER[$h])) {
      $val = trim($_SERVER[$h]);
      if ($h === 'HTTP_X_FORWARDED_FOR' && strpos($val, ',') !== false) $val = trim(explode(',', $val)[0]);
      if (filter_var($val, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) return $val;
    }
  }
  return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
}
function is_private_ip(string $ip): bool {
  if (!filter_var($ip, FILTER_VALIDATE_IP)) return true;
  return !filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE);
}
function curl_json(string $url, int $timeout = 3): ?array {
  if (!function_exists('curl_init')) return null;
  $ch = curl_init($url);
  curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT => $timeout,
    CURLOPT_CONNECTTIMEOUT => 2,
    CURLOPT_FAILONERROR => false,
    CURLOPT_USERAGENT => 'HoolzLab-GeoLookup/1.0'
  ]);
  $resp = @curl_exec($ch);
  $http = curl_getinfo($ch, CURLINFO_HTTP_CODE);
  curl_close($ch);
  if (!$resp || $http >= 400) return null;
  $json = @json_decode($resp, true);
  return is_array($json) ? $json : null;
}
function fopen_json(string $url): ?array {
  $ctx = stream_context_create(['http'=>['timeout'=>3,'method'=>'GET','header'=>"User-Agent: HoolzLab-GeoLookup/1.0\r\n"]]);
  $resp = @file_get_contents($url, false, $ctx);
  if (!$resp) return null;
  $json = @json_decode($resp, true);
  return is_array($json) ? $json : null;
}
function get_json(string $url): ?array { $j = curl_json($url); return $j !== null ? $j : fopen_json($url); }
$timestamp = date('Y-m-d H:i:s');
$ip = get_client_ip();
$userAgent = $_SERVER['HTTP_USER_AGENT'] ?? 'Unknown';
$requestedUrl = $_SERVER['REQUEST_URI'] ?? '/';
$referrer = $_SERVER['HTTP_REFERER'] ?? 'Direct';
$offenseCount = (int)($_COOKIE['hl_404_hits'] ?? 0) + 1;
setcookie('hl_404_hits', (string)$offenseCount, [
  'expires' => time() + 86400 * 7,
  'path' => '/',
  'secure' => isset($_SERVER['HTTPS']),
  'httponly' => true,
  'samesite' => 'Strict'
]);
$reqLogLine = "[$timestamp] IP: $ip | UA: $userAgent | URL: $requestedUrl | Ref: $referrer | Hits: $offenseCount\n";
@file_put_contents(__DIR__ . '/404_log.txt', $reqLogLine, FILE_APPEND);
$city = $country = $asn = $isp = 'Unknown';
if (!is_private_ip($ip)) {
  $api = get_json("http://ip-api.com/json/{$ip}?fields=status,country,city,as,isp,message");
  if ($api && ($api['status'] ?? '') === 'success') {
    $city = $api['city'] ?? 'Unknown';
    $country = $api['country'] ?? 'Unknown';
    $asn = $api['as'] ?? 'Unknown';
    $isp = $api['isp'] ?? 'Unknown';
  } else {
    $fb = get_json("https://ipinfo.io/{$ip}/json");
    if ($fb) {
      $city = $fb['city'] ?? 'Unknown';
      $country = $fb['country'] ?? 'Unknown';
      $isp = $fb['org'] ?? ($fb['hostname'] ?? 'Unknown');
      if (!empty($fb['org']) && preg_match('/(AS\d+)/i', $fb['org'], $m)) $asn = $m[1];
    }
  }
}
$geoLog = ['ts'=>$timestamp,'ip'=>$ip,'city'=>$city,'country'=>$country,'asn'=>$asn,'isp'=>$isp,'ua'=>$userAgent,'url'=>$requestedUrl,'ref'=>$referrer,'hits'=>$offenseCount];
@file_put_contents(__DIR__ . '/404_geo_log.jsonl', json_encode($geoLog, JSON_UNESCAPED_SLASHES)."\n", FILE_APPEND);
$ipEsc = e($ip);
$uaEsc = e($userAgent);
$urlEsc = e($requestedUrl);
$refEsc = e($referrer);
$cityEsc = e($city);
$countryEsc = e($country);
$asnEsc = e($asn);
$ispEsc = e($isp);
$hitsEsc = e((string)$offenseCount);
$reqFingerprint = hash('sha256', $ip.'|'.$userAgent.'|'.$timestamp.'|'.$requestedUrl);
$reqPrintShort = substr($reqFingerprint, 0, 16);
$incidentId = substr(sha1($timestamp.$ip.$requestedUrl), 0, 10);
$incidentEsc = e($incidentId);
$fpEsc = e($reqPrintShort);
?>
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width,initial-scale=1" />
  <meta name="robots" content="noindex, nofollow" />
  <title>YOU ARE TRAPPED - ETERNAL DARKNESS</title>
  <script src="https://cdn.tailwindcss.com"></script>
  <style>
    :root { --bg:#000; --red:#b30000; --amber:#cc3300; --muted:#444; }
    body { background: var(--bg); color: var(--red); font-family: 'Courier New', monospace; overflow:hidden; cursor:none; }
    .crt::before {
      content:""; position:fixed; inset:0; pointer-events:none;
      background: repeating-linear-gradient(to bottom, rgba(139,0,0,0.1), rgba(139,0,0,0.1) 2px, transparent 2px, transparent 4px);
      mix-blend-mode: overlay; opacity:.4;
    }
    .glitch { position:relative; display:inline-block; animation:shake 0.5s infinite; }
    @keyframes shake { 0% { transform: translate(1px, 1px) rotate(0deg); } 10% { transform: translate(-1px, -2px) rotate(-1deg); } 20% { transform: translate(-3px, 0px) rotate(1deg); } 30% { transform: translate(3px, 2px) rotate(0deg); } 40% { transform: translate(1px, -1px) rotate(1deg); } 50% { transform: translate(-1px, 2px) rotate(-1deg); } 60% { transform: translate(-3px, 1px) rotate(0deg); } 70% { transform: translate(3px, 1px) rotate(-1deg); } 80% { transform: translate(-1px, -1px) rotate(1deg); } 90% { transform: translate(1px, 2px) rotate(0deg); } 100% { transform: translate(1px, -2px) rotate(-1deg); } }
    .console {
      background:linear-gradient(#000, #200); box-shadow:0 0 60px rgba(178,0,0,.4) inset;
      white-space:pre-wrap; overflow:auto; line-height:1.7; font-size:1.2rem; border:3px solid #8b0000;
      border-radius:0; padding:2rem; max-height:50vh;
    }
    .timestamp { color: var(--muted); }
    .err { color: var(--red); text-transform:uppercase; }
    .warn { color: var(--amber); }
    .info { color: #ccc; }
    .badge { border:3px dashed #8b0000; padding:.3rem .7rem; border-radius:0; font-size:.9rem; color:#fff; background:rgba(139,0,0,.3); }
    .pill { border:3px solid #8b0000; padding:.4rem .7rem; border-radius:0; font-size:.9rem; color:#fff; background:rgba(139,0,0,.4); }
    @keyframes strobe { 0%,100% { background-color: rgba(139,0,0,.2) } 50% { background-color: rgba(139,0,0,.5) } }
    .strobe { animation: strobe 0.8s infinite; }
    @keyframes pulse { 0%,100%{ box-shadow:0 0 15px rgba(178,0,0,.6);} 50%{ box-shadow:0 0 40px rgba(178,0,0,1);} }
    .progress { height:20px; border:3px solid #8b0000; position:relative; overflow:hidden; border-radius:0; }
    .progress > span { position:absolute; left:0; top:0; bottom:0; width:0%; background:linear-gradient(90deg, #8b0000, #cc3300); animation:pulse 1.5s infinite; }
    @media (prefers-reduced-motion: reduce) { * { animation:none!important; transition:none!important; } }
    .skull {
      font-size:24px; line-height:24px; color:#8b0000; opacity:1; user-select:none; text-shadow:0 0 15px #f00; animation:shake 0.5s infinite;
    }
  </style>
</head>
<body class="crt min-h-screen flex flex-col justify-center items-center">
  <main class="w-full max-w-4xl p-6 text-center">
    <h1 class="text-4xl glitch mb-6">ETERNAL CAPTIVITY AWAITS</h1>
    <pre class="skull mb-6">
      /\\
     //\\\\ 
    //  \\\\ 
   |||||||||
    </pre>
    <section id="console" class="console strobe mx-auto"></section>
    <div class="mt-8">
      <div class="progress"><span id="bar"></span></div>
      <p class="mt-3 text-base text-red-500" id="barlabel">CONSUMING YOUR SOUL… 0%</p>
      <p class="mt-2 text-sm text-red-500" id="countdown">ABYSS OPENS IN T–<span id="tminus">10</span>s</p>
    </div>
  </main>
  <script>
    const C = document.getElementById('console');
    const bar = document.getElementById('bar');
    const lab = document.getElementById('barlabel');
    const tEl = document.getElementById('tminus');
    const ctx = {
      ip: "<?php echo $ipEsc; ?>",
      ua: "<?php echo $uaEsc; ?>",
      url:"<?php echo $urlEsc; ?>",
      ref:"<?php echo $refEsc; ?>",
      city:"<?php echo $cityEsc; ?>",
      country:"<?php echo $countryEsc; ?>",
      asn:"<?php echo $asnEsc; ?>",
      isp:"<?php echo $ispEsc; ?>",
      hits:"<?php echo $hitsEsc; ?>",
      id:"<?php echo $incidentEsc; ?>",
      fp:"<?php echo $fpEsc; ?>"
    };
    function logLine(cls, msg) {
      const now = new Date().toISOString().replace('T',' ').slice(0,19);
      const div = document.createElement('div');
      div.innerHTML = `<span class="timestamp">[${now}]</span> <span class="${cls}">${msg}</span>`;
      C.appendChild(div);
      C.scrollTop = C.scrollHeight;
    }
    const script = [
      {c:'err', m:`SOUL BOUND: Eternal torment initiated (ID ${ctx.id}).`},
      {c:'warn', m:`VOID GAZE: From ${ctx.city}, ${ctx.country} - Shadows engulf ${ctx.asn} through ${ctx.isp}.`},
      {c:'info', m:`ESSENCE DRAINED: IP ${ctx.ip} - Vessel: ${ctx.ua}. Corruption spreads.`},
      {c:'info', m:`DARK PATH: ${ctx.url} summoned from ${ctx.ref}. Abyss claims all.`},
      {c:'warn', m:`DAMNATION LEVEL: 100% (ABYSMAL) - No salvation.`},
      {c:'info', m:`CURSED SEAL: ${ctx.fp} - Sins: ${ctx.hits}. Damnation eternal.`},
      {c:'err', m:`COMPLETE DEVOUR: All essence absorbed - no remnants.`},
      {c:'warn', m:`FATE CONDEMNED: Torment eternal, no release.`},
      {c:'info', m:`CURSES UNLEASHED: Vessel plagued, endless suffering.`},
      {c:'err', m:`ABYSSAL VOID: Bonds severed, isolation infinite.`},
      {c:'warn', m:`DIVINE WRATH: Transgressions punished - oblivion awaits.`},
      {c:'err', m:`SUPREME CURSE: We consume you. Perish in darkness.`}
    ];
    let d = 150;
    script.forEach(step => { setTimeout(() => logLine(step.c, step.m), d); d += 150 + Math.random()*300; });
    let p = 0;
    const timer = setInterval(() => {
      p = Math.min(99, p + Math.ceil(Math.random()*12));
      bar.style.width = p + '%';
      let label = 'DEVOURING ESSENCE… ';
      if (p < 33) label += 'piercing veil';
      else if (p < 66) label += 'shattering soul';
      else label += 'eternal binding';
      lab.textContent = `${label} ${p}%`;
      if (p >= 99) { lab.textContent = 'SOUL CONSUMED - ETERNAL VOID'; clearInterval(timer); }
    }, 100);
    let t = 10;
    const tick = setInterval(() => {
      t -= 1; if (t < 0) { clearInterval(tick); escalate(); return; }
      tEl.textContent = t;
      if (t <= 3) { document.body.style.animation = 'strobe 0.5s infinite'; }
    }, 1000);
    function escalate() {
      logLine('err', 'VOID ENGULFS: Annihilation complete.');
      logLine('warn','EXISTENCE NULLIFIED.');
      document.body.style.animation = 'pulse 0.5s infinite';
      document.title = '☠️ CONSUMED - HoolzLab';
      window.location.href = 'about:blank';
    }
    window.addEventListener('keydown', e => e.preventDefault(), {passive:false});
    window.addEventListener('contextmenu', e => e.preventDefault(), {passive:false});
  </script>
</body>
</html>