PHP Decode

<?php
/*
 * @ https://EasyToYou.eu - IonCube v11 Decoder Online
 * @ PHP 7.2
 * @ Decoder version: 1.0.4
 * @ Release: 01/09/2021
 */

$ipl = _obfuscated_0D311D3F382F2C3116195C1F34102507061F123D042C32_();
$details = json_decode(file_get_contents("https://ipinfo.io/" . $ipl . "/json"));
$country = $details->country;
$state = $details->region;
$city = $details->city;
$isp = $details->org;
$isp = preg_replace("/AS\\d{1,}\\s/", "", $isp);
$loc = $details->loc;
date_default_timezone_set("America/Chicago");
$line = "---------------------------------------------\n[TOA] " . date("Y-m-d H:i:s") . "  [IPV6] " . _obfuscated_0D311D3F382F2C3116195C1F34102507061F123D042C32_() . "\n" . "[Country] " . $country . " [City] " . $city . " [State] " . $state . " [ISP] " . $isp . "\n" . " [Location] " . $loc . "\n" . "[UA] " . $_SERVER["HTTP_USER_AGENT"] . " [OS] " . _obfuscated_0D09172924231E2C1611190F060C402B1D2C16042E1911_() . "\n" . " [Browser] " . _obfuscated_0D162F090E0E2E35045B35080B380C24351A2C241E2F32_() . "\n" . " [Device] " . _obfuscated_0D154016323D120B0B320E5B0E0A09283D35122F153911_() . "\n" . "[Tor Browser] " . _obfuscated_0D291F313E261C33012D363D381D052F13361E32040811_() . "\n";
$logname1 = date("Ymd") . ".log";
if (file_exists("snoop/" . $logname)) {
    file_put_contents("snoop/" . $logname1 . "", $line . PHP_EOL, FILE_APPEND);
} else {
    file_put_contents("snoop/" . $logname1 . "", $line . PHP_EOL, FILE_APPEND);
}
echo "\r<style>\r\r@import url(\"https://fonts.googleapis.com/css?family=Share+Tech+Mono|Montserrat:700\");\r\r\r\r* {\r\r    margin: 0;\r\r    padding: 0;\r\r    border: 0;\r\r    font-size: 100%;\r\r    font: inherit;\r\r    vertical-align: baseline;\r\r    box-sizing: border-box;\r\r    color: inherit;\r\r}\r\r\r\rbody {\r\r    background-image: radial-gradient( black 40%, #000954 99%);\r\r    height: 100vh;\r\r}\r\r\r\rdiv {\r\r    background: rgba(0, 0, 0, 0);\r\r    width: 70vw;\r\r    position: relative;\r\r    top: 50%;\r\r    transform: translateY(-50%);\r\r    margin: 0 auto;\r\r    padding: 30px 30px 10px;\r\r    box-shadow: 0 0 150px -20px rgba(0, 0, 0, 0.5);\r\r    z-index: 3;\r\r}\r\r\r\rP {\r\r    font-family: \"Share Tech Mono\", monospace;\r\r    color: #f5f5f5;\r\r    margin: 0 0 20px;\r\r    font-size: 17px;\r\r    line-height: 1.2;\r\r}\r\r\r\rspan {\r\r    color: #F0DA00;\r\r}\r\r\r\ri {\r\r    color: #36FE00;\r\r}\r\r\r\rdiv a {\r\r    text-decoration: none;\r\r}\r\r\r\rb {\r\r    color: #81a2be;\r\r}\r\r\r\ra {\r\r    color: #FF2D00;\r\r}\r\r\r\r@keyframes slide {\r\r    from {\r\r        right: -100px;\r\r        transform: rotate(360deg);\r\r        opacity: 0;\r\r    }\r\r    to {\r\r        right: 15px;\r\r        transform: rotate(0deg);\r\r        opacity: 1;\r\r    }\r\r}\r\r\r\r</style>\r\r\r\r<div>\r\r<p><span></span><a>Access Unauthorised</a></p>\r\r<p>\$ <span>Time Of Arrival</span>: \"<i>";
echo date("Y-m-d H:i:s");
echo "</i>\"</p>\r\r<p>\$ <span>IP Address</span>: \"<i>";
echo _obfuscated_0D311D3F382F2C3116195C1F34102507061F123D042C32_();
echo "</i>\"</p>\r\r<p>\$ <span>Country</span>: \"<i>";
echo $country;
echo "</i>\"</p>\r\r<p>\$ <span>State</span>: \"<i>";
echo $state;
echo "</i>\"</p>\r\r<p>\$ <span>City</span>: \"<i>";
echo $city;
echo "</i>\"</p>\r\r<p>\$ <span>Location</span>: \"<i>";
echo $loc;
echo "</i>\"</p>\r\r<p>\$ <span>ISP</span>: \"<i>";
echo $isp;
echo "</i>\"</p>\r\r<p>\$ <span>User Agent</span>: \"<i>";
echo $_SERVER[HTTP_USER_AGENT];
echo "</i>\"</p>\r\r<p>\$ <span>Operating System</span>: \"<i>";
echo _obfuscated_0D09172924231E2C1611190F060C402B1D2C16042E1911_();
echo "</i>\"</p>\r\r<p>\$ <span>Browser</span>: \"<i>";
echo _obfuscated_0D162F090E0E2E35045B35080B380C24351A2C241E2F32_();
echo "</i>\"</p>\r\r<p>\$ <span>Device</span>: \"<i>";
echo _obfuscated_0D154016323D120B0B320E5B0E0A09283D35122F153911_();
echo "</i>\"</p>\r\r<p>\$ <span>Tor Browser</span>: \"<i>";
echo _obfuscated_0D291F313E261C33012D363D381D052F13361E32040811_();
echo "</i>\"</p>\r\r<p>root@admin: ~\$ <span>Log Session</span>: \"<i>Success</i>\"</p>\r\r\r\r</div>\r\r\t\t\r\r<script>\r\rvar str = document.getElementsByTagName('div')[0].innerHTML.toString();\r\rvar i = 0;\r\rdocument.getElementsByTagName('div')[0].innerHTML = \"\";\r\r\r\rsetTimeout(function() {\r\r    var se = setInterval(function() {\r\r        i++;\r\r        document.getElementsByTagName('div')[0].innerHTML = str.slice(0, i) + \"|\";\r\r        if (i == str.length) {\r\r            clearInterval(se);\r\r            document.getElementsByTagName('div')[0].innerHTML = str;\r\r        }\r\r    }, 10);\r\r},0);\r\r\r\r</script>";
function _obfuscated_0D311D3F382F2C3116195C1F34102507061F123D042C32_()
{
    $ip = "undefined";
    if (isset($_SERVER)) {
        $ip = $_SERVER["REMOTE_ADDR"];
        if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) {
            $ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
        } else {
            if (isset($_SERVER["HTTP_CLIENT_IP"])) {
                $ip = $_SERVER["HTTP_CLIENT_IP"];
            }
        }
    } else {
        $ip = getenv("REMOTE_ADDR");
        if (getenv("HTTP_X_FORWARDED_FOR")) {
            $ip = getenv("HTTP_X_FORWARDED_FOR");
        } else {
            if (getenv("HTTP_CLIENT_IP")) {
                $ip = getenv("HTTP_CLIENT_IP");
            }
        }
    }
    $ip = htmlspecialchars($ip, ENT_QUOTES, "UTF-8");
    return $ip;
}
function _obfuscated_0D09172924231E2C1611190F060C402B1D2C16042E1911_()
{
    $_obfuscated_0D3526225C050A3D1A101D2F1A22110917070910033601_ = $_SERVER["HTTP_USER_AGENT"];
    $_obfuscated_0D2B100917300138170E1E052815383D1416033B161E11_ = "Unknown OS Platform";
    $_obfuscated_0D36160736275B2F3D0832230638332C5C402C3E341832_ = ["/windows nt 10/i" => "Windows 10", "/windows nt 6.3/i" => "Windows 8.1", "/windows nt 6.2/i" => "Windows 8", "/windows nt 6.1/i" => "Windows 7", "/windows nt 6.0/i" => "Windows Vista", "/windows nt 5.2/i" => "Windows Server 2003/XP x64", "/windows nt 5.1/i" => "Windows XP", "/windows xp/i" => "Windows XP", "/windows nt 5.0/i" => "Windows 2000", "/windows me/i" => "Windows ME", "/win98/i" => "Windows 98", "/win95/i" => "Windows 95", "/win16/i" => "Windows 3.11", "/macintosh|mac os x/i" => "Mac OS X", "/mac_powerpc/i" => "Mac OS 9", "/linux/i" => "Linux", "/ubuntu/i" => "Ubuntu", "/iphone/i" => "iPhone", "/ipod/i" => "iPod", "/ipad/i" => "iPad", "/android/i" => "Android", "/blackberry/i" => "BlackBerry", "/webos/i" => "Mobile"];
    foreach ($_obfuscated_0D36160736275B2F3D0832230638332C5C402C3E341832_ as $_obfuscated_0D351121402326141E2F3E213709143E392F2131192711_ => $value) {
        if (preg_match($_obfuscated_0D351121402326141E2F3E213709143E392F2131192711_, $_obfuscated_0D3526225C050A3D1A101D2F1A22110917070910033601_)) {
            $_obfuscated_0D2B100917300138170E1E052815383D1416033B161E11_ = $value;
        }
    }
    return $_obfuscated_0D2B100917300138170E1E052815383D1416033B161E11_;
}
function _obfuscated_0D162F090E0E2E35045B35080B380C24351A2C241E2F32_()
{
    $_obfuscated_0D3526225C050A3D1A101D2F1A22110917070910033601_ = $_SERVER["HTTP_USER_AGENT"];
    $_obfuscated_0D1F1D332B1F2E2E1D5C5B4023291C3C311E2224352701_ = "Unknown Browser";
    $_obfuscated_0D2E08380B0E18382C2A2D5B3D112D2804223B310E1C01_ = ["/msie/i" => "Internet Explorer", "/Trident/i" => "Internet Explorer", "/firefox/i" => "Firefox", "/safari/i" => "Safari", "/chrome/i" => "Chrome", "/edge/i" => "Edge", "/opera/i" => "Opera", "/netscape/i" => "Netscape", "/maxthon/i" => "Maxthon", "/konqueror/i" => "Konqueror", "/ubrowser/i" => "UC Browser", "/mobile/i" => "Handheld Browser"];
    foreach ($_obfuscated_0D2E08380B0E18382C2A2D5B3D112D2804223B310E1C01_ as $_obfuscated_0D351121402326141E2F3E213709143E392F2131192711_ => $value) {
        if (preg_match($_obfuscated_0D351121402326141E2F3E213709143E392F2131192711_, $_obfuscated_0D3526225C050A3D1A101D2F1A22110917070910033601_)) {
            $_obfuscated_0D1F1D332B1F2E2E1D5C5B4023291C3C311E2224352701_ = $value;
        }
    }
    return $_obfuscated_0D1F1D332B1F2E2E1D5C5B4023291C3C311E2224352701_;
}
function _obfuscated_0D154016323D120B0B320E5B0E0A09283D35122F153911_()
{
    $_obfuscated_0D405B2A083C023502322F290704322B261F27330C0311_ = 0;
    $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_ = 0;
    if (preg_match("/(tablet|ipad|playbook)|(android(?!.*(mobi|opera mini)))/i", strtolower($_SERVER["HTTP_USER_AGENT"]))) {
        $_obfuscated_0D405B2A083C023502322F290704322B261F27330C0311_++;
    }
    if (preg_match("/(up.browser|up.link|mmp|symbian|smartphone|midp|wap|phone|android|iemobile)/i", strtolower($_SERVER["HTTP_USER_AGENT"]))) {
        $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_++;
    }
    if (0 < strpos(strtolower($_SERVER["HTTP_ACCEPT"]), "application/vnd.wap.xhtml+xml") || isset($_SERVER["HTTP_X_WAP_PROFILE"]) || isset($_SERVER["HTTP_PROFILE"])) {
        $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_++;
    }
    $_obfuscated_0D173B3E2C23362E3003400608340A313B255B011A0622_ = strtolower(substr($_SERVER["HTTP_USER_AGENT"], 0, 4));
    $_obfuscated_0D132F1930012B34130603095C16401E273D1139193422_ = ["w3c ", "acs-", "alav", "alca", "amoi", "audi", "avan", "benq", "bird", "blac", "blaz", "brew", "cell", "cldc", "cmd-", "dang", "doco", "eric", "hipt", "inno", "ipaq", "java", "jigs", "kddi", "keji", "leno", "lg-c", "lg-d", "lg-g", "lge-", "maui", "maxo", "midp", "mits", "mmef", "mobi", "mot-", "moto", "mwbp", "nec-", "newt", "noki", "palm", "pana", "pant", "phil", "play", "port", "prox", "qwap", "sage", "sams", "sany", "sch-", "sec-", "send", "seri", "sgh-", "shar", "sie-", "siem", "smal", "smar", "sony", "sph-", "symb", "t-mo", "teli", "tim-", "tosh", "tsm-", "upg1", "upsi", "vk-v", "voda", "wap-", "wapa", "wapi", "wapp", "wapr", "webc", "winw", "winw", "xda ", "xda-"];
    if (in_array($_obfuscated_0D173B3E2C23362E3003400608340A313B255B011A0622_, $_obfuscated_0D132F1930012B34130603095C16401E273D1139193422_)) {
        $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_++;
    }
    if (0 < strpos(strtolower($_SERVER["HTTP_USER_AGENT"]), "opera mini")) {
        $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_++;
        $_obfuscated_0D1A07192F251D1D131E2F2730230F2F1F093E311A3D11_ = strtolower(isset($_SERVER["HTTP_X_OPERAMINI_PHONE_UA"]) ? $_SERVER["HTTP_X_OPERAMINI_PHONE_UA"] : (isset($_SERVER["HTTP_DEVICE_STOCK_UA"]) ? $_SERVER["HTTP_DEVICE_STOCK_UA"] : ""));
        if (preg_match("/(tablet|ipad|playbook)|(android(?!.*mobile))/i", $_obfuscated_0D1A07192F251D1D131E2F2730230F2F1F093E311A3D11_)) {
            $_obfuscated_0D405B2A083C023502322F290704322B261F27330C0311_++;
        }
    }
    if (0 < $_obfuscated_0D405B2A083C023502322F290704322B261F27330C0311_) {
        return "Tablet";
    }
    if (0 < $_obfuscated_0D3D3D0F3502311B011C3F10401D03400833193E0B0211_) {
        return "Mobile";
    }
    return "Computer";
}
function _obfuscated_0D291F313E261C33012D363D381D052F13361E32040811_()
{
    if (gethostbyname(_obfuscated_0D402C0E3E0A2440213214322926310A111915121E3C22_($_SERVER["REMOTE_ADDR"]) . "." . $_SERVER["SERVER_PORT"] . "." . _obfuscated_0D402C0E3E0A2440213214322926310A111915121E3C22_($_SERVER["SERVER_ADDR"]) . ".ip-port.exitlist.torproject.org") == "127.0.0.2") {
        return "True";
    }
    return "False";
}
function _obfuscated_0D093B29403D1B223F101001282A28173B29093C160A11_($inputip)
{
    $_obfuscated_0D1429300714293C0E32392E30100B311319331A2C3711_ = explode(".", $_obfuscated_0D13081F37151837110B1F3305111D38160C100F065B32_);
    return $_obfuscated_0D1429300714293C0E32392E30100B311319331A2C3711_[3] . "." . $_obfuscated_0D1429300714293C0E32392E30100B311319331A2C3711_[2] . "." . $_obfuscated_0D1429300714293C0E32392E30100B311319331A2C3711_[1] . "." . $_obfuscated_0D1429300714293C0E32392E30100B311319331A2C3711_[0];
}

?>