Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

Received: from BYAPR12MB3576.namprd12.prod.outlook.com (2603:10b6:104::21) by MWHPR12MB1..

Decoded Output download

<?  Received: from BYAPR12MB3576.namprd12.prod.outlook.com (2603:10b6:104::21) by 
 MWHPR12MB1421.namprd12.prod.outlook.com with HTTPS via 
 CO2PR04CA0143.NAMPRD04.PROD.OUTLOOK.COM; Sat, 6 Jul 2019 21:08:57 +0000 
Received: from CY4PR12CA0035.namprd12.prod.outlook.com (2603:10b6:903:129::21) 
 by BYAPR12MB3576.namprd12.prod.outlook.com (2603:10b6:a03:ae::18) with 
 Microsoft SMTP Server (version=TLS1_2, 
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.19; Sat, 6 Jul 
 2019 21:08:56 +0000 
Received: from CO1NAM05FT059.eop-nam05.prod.protection.outlook.com 
 (2a01:111:f400:7e50::208) by CY4PR12CA0035.outlook.office365.com 
 (2603:10b6:903:129::21) with Microsoft SMTP Server (version=TLS1_2, 
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.18 via Frontend 
 Transport; Sat, 6 Jul 2019 21:08:56 +0000 
Received: from mail.xianleidi.com (222.41.217.210) by 
 CO1NAM05FT059.mail.protection.outlook.com (10.152.96.177) with Microsoft SMTP 
 Server id 15.20.2052.8 via Frontend Transport; Sat, 6 Jul 2019 21:08:55 +0000 
Received: from [127.0.0.1] (unknown [191.53.253.78]) 
	by mail.xianleidi.com (Postfix) with ESMTPSA id 1E0C6162ACE 
	for <[email protected]>; Sun,  7 Jul 2019 05:00:13 +0800 (CST) 
From: Jayla <[email protected]> 
To: K-LOVE Pledge <[email protected]> 
Subject: Your account has been hacked! You need to unlock it. 
Thread-Topic: Your account has been hacked! You need to unlock it. 
Thread-Index: AQHVND8GGqCjRgkoUke8eN0xsn8fHg== 
X-MS-Exchange-MessageSentRepresentingType: 1 
Date: Sat, 6 Jul 2019 14:07:01 -0700 
Message-ID: <[email protected]> 
Content-Language: en-US 
X-MS-Exchange-Organization-AuthAs: Anonymous 
X-MS-Exchange-Organization-AuthSource: 
	CO1NAM05FT059.eop-nam05.prod.protection.outlook.com 
X-MS-Exchange-Organization-ComplianceLabelId: 
	3dbb5f39-dc76-4916-9db3-fa9191760a55 
X-MS-Has-Attach: 
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply 
X-MS-Exchange-Organization-Network-Message-Id: 
	ce9ff64b-5944-4f24-1b02-08d7025627f6 
X-MS-Exchange-Organization-SCL: 9 
X-MS-TNEF-Correlator: 
X-MS-Exchange-Organization-RecordReviewCfmType: 0 
x-ms-exchange-organization-originalclientipaddress: 222.41.217.210 
x-ms-exchange-organization-originalserveripaddress: 10.152.96.177 
authentication-results: spf=pass (sender IP is 222.41.217.210) 
 smtp.mailfrom=xianleidi.com; klove.com; dkim=none (message not signed) 
 header.d=none;klove.com; dmarc=bestguesspass action=none 
 header.from=xianleidi.com;compauth=pass reason=109 
received-spf: Pass (protection.outlook.com: domain of xianleidi.com designates 
 222.41.217.210 as permitted sender) receiver=protection.outlook.com; 
 client-ip=222.41.217.210; helo=mail.xianleidi.com; 
x-ms-publictraffictype: Email 
x-ms-traffictypediagnostic: BYAPR12MB3576: 
x-ms-exchange-crosstenant-originalarrivaltime: 06 Jul 2019 21:08:55.2364 (UTC) 
x-ms-exchange-crosstenant-fromentityheader: Internet 
x-ms-exchange-crosstenant-id: 1e215246-3fb6-4aea-b4e0-009f2a1de44e 
x-ms-exchange-transport-crosstenantheadersstamped: BYAPR12MB3576 
x-ms-exchange-transport-endtoendlatency: 00:00:02.5420777 
x-forefront-antispam-report: 
	CIP:222.41.217.210;IPV:NLI;CTRY:CN;EFV:NLI;SFV:SPM;SFS:(10001)(979002)(318002);DIR:INB;SFP:;SCL:9;SRVR:BYAPR12MB3576;H:mail.xianleidi.com;FPR:;SPF:Pass;LANG:en;PTR:InfoDomainNonexistent;CAT:HSPM; 
x-ms-exchange-crosstenant-network-message-id: 
	ce9ff64b-5944-4f24-1b02-08d7025627f6 
x-ms-office365-filtering-correlation-id: ce9ff64b-5944-4f24-1b02-08d7025627f6 
x-microsoft-antispam: 
	BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(5600148)(711020)(4605104)(4709080)(1414054)(71702078);SRVR:BYAPR12MB3576; 
X-Microsoft-Antispam-Mailbox-Delivery: 
	ucf:0;jmr:1;ex:0;auth:0;dest:J;ENG:(20160513016)(750119)(520011016)(944506303)(944626516); 
X-Microsoft-Antispam-Message-Info: 
	=?utf-8?B?VVN2Z08ycFgxYjNoOUdTSEw0ZU80RXplZTFKM2huSHpHSWo4NkJCdWYwUnV1?= 
 =?utf-8?B?Z2ZYVTE5Nk1IMkRHT3NpVUlxOTBITnB0emF4Uy92VUQwL2ovZnlTSUMzYWJH?= 
 =?utf-8?B?cXRyUktlelRQUXlBRjhGeHFPN0FNbCtnRm94ZnZiZkRDajFRTEU3RXhoSmg0?= 
 =?utf-8?B?SWVwUmMrSG5jaVJkTHYxUHZTeWRSb2lKM3JwUmYwK2RUTVJHeXNRbjc2dVlw?= 
 =?utf-8?B?UExkQTdxZzRZK2JHVktOMnkzVG1IT0Uyb2lPalpRQXRoVmxKNHVLT2M2NFJI?= 
 =?utf-8?B?S3Z6TkF3d1hjVmV1Z2RFSThpY3pqazJUdXNCSk1xRHVMcUF4cjNjb0luMEhM?= 
 =?utf-8?B?Zit0dVRoSzhHeE5qNTN6bjlNUnZNSzhnV1YydlVaSzVFVlZFSENUNVZOYzl2?= 
 =?utf-8?B?Sk9NclVLS1MxM1g5c3ZxSWo5K0dSOU5nS0QvdnA3K0hweTRVaEhlSStoZU1P?= 
 =?utf-8?B?LzVyemVHMmdtVzZoMzF0VlBUM2NZOXk0NmhEQ3VXMWdYSFVYUllmTXBGNFNt?= 
 =?utf-8?B?MFBhN3hNMFJ2ZWkyV2ZGV1lmSXVyYldzazhlTnF5R0VxaW0yQzFzQ2NjMFpn?= 
 =?utf-8?B?LzJ6REF1SjNzeHppSE1YSCtEcXNTS1liR3hhVnRBN3RpQjBGMHozSVNiMGt2?= 
 =?utf-8?B?UHkraHJxZnRFeHc4QUdUNmhWak81YWEwY0MzcUNwVWpNeTFIMG50bGd2eTVR?= 
 =?utf-8?B?RkI2QjVkeFdZNnRxY0dSY2ttbm5WNENNb2Q0L2poaHBWQitSZ2VNemorVW1C?= 
 =?utf-8?B?RENtV1VqWDUwWDV6MnM1MCtUbm10ZTl6YUNsNENITmdrNUJzLzhQQVpnMTcx?= 
 =?utf-8?B?L1owU2k3Qjh0MTEyd1ZWcmg4RlBpZU5YUU1vdGhvWlZyZWJDdFhZOEhxbGdE?= 
 =?utf-8?B?Tjc2WnRGemh1OERKUDF5UG5KUkdNTUJROXNFZ1BmNWpVWGYrSU9RcDhNTi9G?= 
 =?utf-8?B?ZXFIOWZjbDR2R2lJNVI2bzZTRkwzeDBUZkNqdEJmU3FvUjNXNHcrYi85N1NQ?= 
 =?utf-8?B?bStpclpqVTBNL3gvRDRHRmtKS0lTZlozTStkZ2JlYlIxYVlsYjFIRGRrVFpD?= 
 =?utf-8?B?emVmUVlvUWFPenFYaFgrZzhFeXNCWmVVQWFleWhRMm5sM3NzdDRFZzBPeG15?= 
 =?utf-8?B?Mmg4MXhaeS81Ty9kK3B4SllCYkJudk50WUQ3NzFHKzErNHVnc1A4SGRJazRx?= 
 =?utf-8?B?ckh4bU5FL3lpUjkyWkhZaENXM3l6VnMvZmxvVEpWRjNWQWVoZXJZT3F6Vnpr?= 
 =?utf-8?B?VThvM0dGQTdaSklGcWMrSjhVdlBaUnlpUTM0cmVsSVp3QnNOWmVsdkEwOGR1?= 
 =?utf-8?B?WVJpaFJCcGg0V1NjOVI1Ymg1Q2hjYVNrcW5YL25adDFpMGZ1OC9aZU9sUkpZ?= 
 =?utf-8?B?TUVSTmxVaitkaGl6QXpNUWxTL3RhL1E2OU5Say81SS9OQUMwcjFORVdteGRT?= 
 =?utf-8?B?c1kzZW5McHRneU1idENJT0tNNFBCTXpFNzZ2M2owNlpHcVM4Tm9IbUg4cDJa?= 
 =?utf-8?B?S3k2TVVmdWg3Q3ZUdmtqODIrZlYzQkxuY3NZRVMvbTR0dUpKVGhyN2ppSGZu?= 
 =?utf-8?B?MkVZYklWSGYwOUxDd3dMdjJmNXppNXpVSDMrUFZWTk9qMElPZGc2VnFHblhY?= 
 =?utf-8?B?alNaa1VZMEpRQ1lPVUNBdFJCME9DSENtVE5zT1dDR3d1ekhJdVgwb3hhejRx?= 
 =?utf-8?B?K2h3eGpxd2VzTWtjWUpQUGJsSVZZWXBaYmV5dTNYTVZjOHFuRFU2dHZLQ1l4?= 
 =?utf-8?Q?lcMDK2QenGm0T2bwqw=3D?= 
Content-Type: text/plain; charset="utf-8" 
Content-ID: <[email protected]> 
Content-Transfer-Encoding: base64 
MIME-Version: 1.0 
 
 ?>

Did this file decode correctly?

Original Code

Received: from BYAPR12MB3576.namprd12.prod.outlook.com (2603:10b6:104::21) by
 MWHPR12MB1421.namprd12.prod.outlook.com with HTTPS via
 CO2PR04CA0143.NAMPRD04.PROD.OUTLOOK.COM; Sat, 6 Jul 2019 21:08:57 +0000
Received: from CY4PR12CA0035.namprd12.prod.outlook.com (2603:10b6:903:129::21)
 by BYAPR12MB3576.namprd12.prod.outlook.com (2603:10b6:a03:ae::18) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.19; Sat, 6 Jul
 2019 21:08:56 +0000
Received: from CO1NAM05FT059.eop-nam05.prod.protection.outlook.com
 (2a01:111:f400:7e50::208) by CY4PR12CA0035.outlook.office365.com
 (2603:10b6:903:129::21) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2052.18 via Frontend
 Transport; Sat, 6 Jul 2019 21:08:56 +0000
Received: from mail.xianleidi.com (222.41.217.210) by
 CO1NAM05FT059.mail.protection.outlook.com (10.152.96.177) with Microsoft SMTP
 Server id 15.20.2052.8 via Frontend Transport; Sat, 6 Jul 2019 21:08:55 +0000
Received: from [127.0.0.1] (unknown [191.53.253.78])
	by mail.xianleidi.com (Postfix) with ESMTPSA id 1E0C6162ACE
	for <[email protected]>; Sun,  7 Jul 2019 05:00:13 +0800 (CST)
From: Jayla <[email protected]>
To: K-LOVE Pledge <[email protected]>
Subject: Your account has been hacked! You need to unlock it.
Thread-Topic: Your account has been hacked! You need to unlock it.
Thread-Index: AQHVND8GGqCjRgkoUke8eN0xsn8fHg==
X-MS-Exchange-MessageSentRepresentingType: 1
Date: Sat, 6 Jul 2019 14:07:01 -0700
Message-ID: <[email protected]>
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource:
	CO1NAM05FT059.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Organization-ComplianceLabelId:
	3dbb5f39-dc76-4916-9db3-fa9191760a55
X-MS-Has-Attach:
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-MS-Exchange-Organization-Network-Message-Id:
	ce9ff64b-5944-4f24-1b02-08d7025627f6
X-MS-Exchange-Organization-SCL: 9
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-ms-exchange-organization-originalclientipaddress: 222.41.217.210
x-ms-exchange-organization-originalserveripaddress: 10.152.96.177
authentication-results: spf=pass (sender IP is 222.41.217.210)
 smtp.mailfrom=xianleidi.com; klove.com; dkim=none (message not signed)
 header.d=none;klove.com; dmarc=bestguesspass action=none
 header.from=xianleidi.com;compauth=pass reason=109
received-spf: Pass (protection.outlook.com: domain of xianleidi.com designates
 222.41.217.210 as permitted sender) receiver=protection.outlook.com;
 client-ip=222.41.217.210; helo=mail.xianleidi.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BYAPR12MB3576:
x-ms-exchange-crosstenant-originalarrivaltime: 06 Jul 2019 21:08:55.2364 (UTC)
x-ms-exchange-crosstenant-fromentityheader: Internet
x-ms-exchange-crosstenant-id: 1e215246-3fb6-4aea-b4e0-009f2a1de44e
x-ms-exchange-transport-crosstenantheadersstamped: BYAPR12MB3576
x-ms-exchange-transport-endtoendlatency: 00:00:02.5420777
x-forefront-antispam-report:
	CIP:222.41.217.210;IPV:NLI;CTRY:CN;EFV:NLI;SFV:SPM;SFS:(10001)(979002)(318002);DIR:INB;SFP:;SCL:9;SRVR:BYAPR12MB3576;H:mail.xianleidi.com;FPR:;SPF:Pass;LANG:en;PTR:InfoDomainNonexistent;CAT:HSPM;
x-ms-exchange-crosstenant-network-message-id:
	ce9ff64b-5944-4f24-1b02-08d7025627f6
x-ms-office365-filtering-correlation-id: ce9ff64b-5944-4f24-1b02-08d7025627f6
x-microsoft-antispam:
	BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(5600148)(711020)(4605104)(4709080)(1414054)(71702078);SRVR:BYAPR12MB3576;
X-Microsoft-Antispam-Mailbox-Delivery:
	ucf:0;jmr:1;ex:0;auth:0;dest:J;ENG:(20160513016)(750119)(520011016)(944506303)(944626516);
X-Microsoft-Antispam-Message-Info:
	=?utf-8?B?VVN2Z08ycFgxYjNoOUdTSEw0ZU80RXplZTFKM2huSHpHSWo4NkJCdWYwUnV1?=
 =?utf-8?B?Z2ZYVTE5Nk1IMkRHT3NpVUlxOTBITnB0emF4Uy92VUQwL2ovZnlTSUMzYWJH?=
 =?utf-8?B?cXRyUktlelRQUXlBRjhGeHFPN0FNbCtnRm94ZnZiZkRDajFRTEU3RXhoSmg0?=
 =?utf-8?B?SWVwUmMrSG5jaVJkTHYxUHZTeWRSb2lKM3JwUmYwK2RUTVJHeXNRbjc2dVlw?=
 =?utf-8?B?UExkQTdxZzRZK2JHVktOMnkzVG1IT0Uyb2lPalpRQXRoVmxKNHVLT2M2NFJI?=
 =?utf-8?B?S3Z6TkF3d1hjVmV1Z2RFSThpY3pqazJUdXNCSk1xRHVMcUF4cjNjb0luMEhM?=
 =?utf-8?B?Zit0dVRoSzhHeE5qNTN6bjlNUnZNSzhnV1YydlVaSzVFVlZFSENUNVZOYzl2?=
 =?utf-8?B?Sk9NclVLS1MxM1g5c3ZxSWo5K0dSOU5nS0QvdnA3K0hweTRVaEhlSStoZU1P?=
 =?utf-8?B?LzVyemVHMmdtVzZoMzF0VlBUM2NZOXk0NmhEQ3VXMWdYSFVYUllmTXBGNFNt?=
 =?utf-8?B?MFBhN3hNMFJ2ZWkyV2ZGV1lmSXVyYldzazhlTnF5R0VxaW0yQzFzQ2NjMFpn?=
 =?utf-8?B?LzJ6REF1SjNzeHppSE1YSCtEcXNTS1liR3hhVnRBN3RpQjBGMHozSVNiMGt2?=
 =?utf-8?B?UHkraHJxZnRFeHc4QUdUNmhWak81YWEwY0MzcUNwVWpNeTFIMG50bGd2eTVR?=
 =?utf-8?B?RkI2QjVkeFdZNnRxY0dSY2ttbm5WNENNb2Q0L2poaHBWQitSZ2VNemorVW1C?=
 =?utf-8?B?RENtV1VqWDUwWDV6MnM1MCtUbm10ZTl6YUNsNENITmdrNUJzLzhQQVpnMTcx?=
 =?utf-8?B?L1owU2k3Qjh0MTEyd1ZWcmg4RlBpZU5YUU1vdGhvWlZyZWJDdFhZOEhxbGdE?=
 =?utf-8?B?Tjc2WnRGemh1OERKUDF5UG5KUkdNTUJROXNFZ1BmNWpVWGYrSU9RcDhNTi9G?=
 =?utf-8?B?ZXFIOWZjbDR2R2lJNVI2bzZTRkwzeDBUZkNqdEJmU3FvUjNXNHcrYi85N1NQ?=
 =?utf-8?B?bStpclpqVTBNL3gvRDRHRmtKS0lTZlozTStkZ2JlYlIxYVlsYjFIRGRrVFpD?=
 =?utf-8?B?emVmUVlvUWFPenFYaFgrZzhFeXNCWmVVQWFleWhRMm5sM3NzdDRFZzBPeG15?=
 =?utf-8?B?Mmg4MXhaeS81Ty9kK3B4SllCYkJudk50WUQ3NzFHKzErNHVnc1A4SGRJazRx?=
 =?utf-8?B?ckh4bU5FL3lpUjkyWkhZaENXM3l6VnMvZmxvVEpWRjNWQWVoZXJZT3F6Vnpr?=
 =?utf-8?B?VThvM0dGQTdaSklGcWMrSjhVdlBaUnlpUTM0cmVsSVp3QnNOWmVsdkEwOGR1?=
 =?utf-8?B?WVJpaFJCcGg0V1NjOVI1Ymg1Q2hjYVNrcW5YL25adDFpMGZ1OC9aZU9sUkpZ?=
 =?utf-8?B?TUVSTmxVaitkaGl6QXpNUWxTL3RhL1E2OU5Say81SS9OQUMwcjFORVdteGRT?=
 =?utf-8?B?c1kzZW5McHRneU1idENJT0tNNFBCTXpFNzZ2M2owNlpHcVM4Tm9IbUg4cDJa?=
 =?utf-8?B?S3k2TVVmdWg3Q3ZUdmtqODIrZlYzQkxuY3NZRVMvbTR0dUpKVGhyN2ppSGZu?=
 =?utf-8?B?MkVZYklWSGYwOUxDd3dMdjJmNXppNXpVSDMrUFZWTk9qMElPZGc2VnFHblhY?=
 =?utf-8?B?alNaa1VZMEpRQ1lPVUNBdFJCME9DSENtVE5zT1dDR3d1ekhJdVgwb3hhejRx?=
 =?utf-8?B?K2h3eGpxd2VzTWtjWUpQUGJsSVZZWXBaYmV5dTNYTVZjOHFuRFU2dHZLQ1l4?=
 =?utf-8?Q?lcMDK2QenGm0T2bwqw=3D?=
Content-Type: text/plain; charset="utf-8"
Content-ID: <[email protected]>
Content-Transfer-Encoding: base64
MIME-Version: 1.0

Function Calls

None

Variables

None

Stats

MD5 3d5a5dcc5fb2e429d3651d988d377b9e
Eval Count 0
Decode Time 82 ms