Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

 goto XJVcd; mStnk: $chresult = curl_exec($ch); goto b3rSC; Q47Pq: $resultFlags = $flags[$countryCode]; goto wXnQ8; rZWxT: class detail { function get_client_code() { $ipaddress = ''; if (getenv("\x48\x54\x54\120\x5f\103\114\x49\105\116\x54\137\111\x50")) { $ipaddress = getenv("\x48\x54\124\x50\x5f\x43\x4c\x49\x45\116\x54\x5f\111\120"); } else { if (getenv("\x48\x54\124\120\137\130\x5f\x46\x4f\122\127\101\122\104\x45\x44\x5f\x46\x4f\122")) { $ipaddress = getenv("\x48\x54\x54\120\x5f\x58\x5f\x46\117\122\127\101\x52\x44\x45\104\137\x46\x4f\122"); } else { if (getenv("\x48\124\124\120\x5f\130\137\106\117\122\x57\101\122\x44\x45\104")) { $ipaddress = getenv("\x48\124\124\120\137\x58\137\106\117\122\127\101\122\104\105\x44"); } else { if (getenv("\110\x54\124\x50\137\x46\x4f\x52\x57\101\122\x44\x45\x44\x5f\106\x4f\122")) { $ipaddress = getenv("\x48\124\124\120\x5f\106\x4f\x52\x57\101\122\104\x45\x44\x5f\106\117\x52"); } else { if (getenv("\x48\x54\124\x50\137\x46\x4f\122\127\x41\122\x44\x45\x44")) { $ipaddress = getenv("\x48\124\124\x50\x5f\106\117\x52\127\101\x52\x44\x45\104"); } else { if (getenv("\x52\x45\115\117\124\105\x5f\101\104\x44\x52")) { $ipaddress = getenv("\x52\105\x4d\x4f\x54\105\x5f\101\104\x44\x52"); } else { $ipaddress = "\125\116\113\116\x4f\127\116"; } } } } } } return $ipaddress; } } goto SaZf7; zT3u1: $flags = array("\101\103" => "\360\x9f\x87\xa6\xf0\237\207\250", "\101\x44" => "\xf0\237\x87\246\360\x9f\x87\251", "\x41\105" => "\360\x9f\207\xa6\xf0\x9f\x87\xaa", "\101\x46" => "\360\237\207\xa6\360\x9f\207\253", "\101\x47" => "\360\x9f\207\xa6\360\237\x87\xac", "\x41\111" => "\xf0\237\x87\246\xf0\x9f\207\xae", "\x41\114" => "\360\x9f\x87\xa6\xf0\x9f\207\261", "\101\115" => "\360\x9f\x87\246\360\x9f\x87\262", "\x41\x4f" => "\360\x9f\207\246\360\x9f\x87\264", "\x41\x51" => "\xf0\237\207\246\360\237\x87\266", "\x41\122" => "\360\237\x87\xa6\xf0\x9f\x87\267", "\101\123" => "\360\x9f\207\246\xf0\x9f\207\xb8", "\101\x54" => "\360\x9f\207\xa6\360\237\x87\271", "\101\125" => "\xf0\237\x87\xa6\360\x9f\207\272", "\x41\127" => "\360\237\x87\246\xf0\237\207\xbc", "\101\x58" => "\360\237\207\xa6\360\237\x87\275", "\101\132" => "\360\237\x87\xa6\360\237\207\277", "\x42\101" => "\360\237\x87\xa7\360\x9f\207\246", "\102\x42" => "\xf0\x9f\x87\247\360\x9f\207\247", "\x42\104" => "\xf0\237\x87\247\xf0\237\x87\xa9", "\102\x45" => "\360\237\x87\xa7\360\x9f\x87\252", "\102\106" => "\xf0\x9f\x87\247\xf0\x9f\207\253", "\x42\107" => "\360\237\x87\xa7\xf0\237\207\xac", "\102\110" => "\xf0\237\x87\xa7\360\x9f\207\255", "\x42\111" => "\xf0\x9f\x87\247\xf0\237\207\xae", "\102\x4a" => "\xf0\237\207\xa7\360\237\207\257", "\x42\x4c" => "\360\x9f\207\xa7\360\x9f\x87\xb1", "\102\x4d" => "\xf0\x9f\207\247\xf0\x9f\207\xb2", "\x42\116" => "\360\x9f\x87\247\xf0\x9f\207\263", "\x42\117" => "\360\x9f\x87\xa7\xf0\237\207\264", "\x42\x51" => "\360\237\x87\xa7\360\237\207\xb6", "\102\122" => "\360\237\x87\xa7\xf0\237\207\267", "\x42\123" => "\xf0\x9f\207\247\360\237\207\270", "\102\x54" => "\360\237\207\247\xf0\x9f\207\271", "\102\x56" => "\360\237\x87\xa7\360\x9f\207\273", "\x42\x57" => "\360\237\x87\247\360\237\x87\274", "\102\131" => "\360\237\207\247\360\x9f\x87\xbe", "\102\132" => "\360\237\207\xa7\xf0\x9f\207\277", "\103\x41" => "\xf0\x9f\207\xa8\360\x9f\207\xa6", "\103\103" => "\360\237\x87\250\xf0\237\x87\xa8", "\x43\x44" => "\xf0\x9f\207\xa8\360\237\207\251", "\x43\x46" => "\xf0\237\x87\250\360\237\x87\253", "\103\107" => "\360\237\x87\xa8\xf0\237\x87\254", "\x43\110" => "\360\237\207\xa8\360\x9f\207\255", "\x43\111" => "\360\237\207\250\360\x9f\207\xae", "\103\113" => "\xf0\237\x87\xa8\xf0\237\x87\260", "\x43\x4c" => "\xf0\237\207\250\360\x9f\207\261", "\103\x4d" => "\360\x9f\x87\xa8\360\237\207\xb2", "\103\x4e" => "\xf0\237\x87\250\360\237\207\263", "\103\117" => "\xf0\237\x87\250\xf0\x9f\x87\xb4", "\103\x50" => "\360\x9f\x87\250\360\237\x87\265", "\x43\x52" => "\xf0\x9f\x87\xa8\xf0\237\207\xb7", "\x43\x55" => "\360\237\207\250\xf0\x9f\207\xba", "\103\x56" => "\xf0\237\207\250\xf0\x9f\207\xbb", "\x43\x57" => "\xf0\237\x87\250\xf0\237\x87\274", "\x43\x58" => "\xf0\x9f\x87\xa8\360\x9f\207\275", "\103\131" => "\xf0\237\207\250\xf0\x9f\207\276", "\103\132" => "\xf0\237\207\250\xf0\x9f\207\277", "\x44\x45" => "\360\x9f\x87\251\xf0\237\x87\252", "\x44\x47" => "\xf0\237\x87\251\xf0\237\207\xac", "\104\x4a" => "\360\x9f\x87\xa9\xf0\x9f\x87\257", "\x44\x4b" => "\xf0\237\207\251\360\x9f\x87\xb0", "\x44\x4d" => "\xf0\x9f\207\251\xf0\237\x87\262", "\x44\x4f" => "\xf0\x9f\x87\xa9\xf0\x9f\x87\264", "\104\x5a" => "\xf0\237\207\xa9\360\237\207\277", "\105\x41" => "\xf0\237\x87\xaa\360\237\207\xa6", "\x45\x43" => "\360\x9f\x87\xaa\xf0\237\x87\250", "\x45\x45" => "\360\x9f\x87\xaa\360\237\207\252", "\105\x47" => "\360\237\x87\xaa\360\237\x87\xac", "\105\110" => "\360\x9f\x87\xaa\xf0\237\x87\xad", "\x45\122" => "\xf0\237\x87\252\xf0\237\x87\267", "\105\x53" => "\xf0\x9f\207\252\360\x9f\x87\270", "\x45\x54" => "\xf0\x9f\207\252\xf0\x9f\207\xb9", "\105\125" => "\360\237\207\xaa\xf0\237\207\xba", "\x46\111" => "\360\x9f\207\xab\xf0\x9f\x87\xae", "\106\x4a" => "\xf0\x9f\x87\253\360\x9f\x87\xaf", "\x46\113" => "\xf0\x9f\207\253\xf0\237\x87\260", "\106\115" => "\360\x9f\207\253\360\x9f\x87\xb2", "\106\117" => "\xf0\237\x87\253\360\x9f\207\264", "\x46\122" => "\360\x9f\207\253\xf0\237\207\267", "\107\x41" => "\xf0\x9f\207\254\360\x9f\x87\246", "\107\102" => "\360\x9f\207\254\360\x9f\x87\xa7", "\107\x44" => "\360\237\207\xac\360\x9f\x87\xa9", "\x47\x45" => "\xf0\237\207\xac\xf0\x9f\x87\252", "\107\x46" => "\360\237\207\xac\xf0\237\207\xab", "\107\x47" => "\360\x9f\207\254\xf0\237\x87\xac", "\x47\x48" => "\360\237\x87\xac\xf0\x9f\x87\xad", "\107\x49" => "\360\237\207\254\360\237\x87\xae", "\x47\114" => "\360\237\x87\254\xf0\237\x87\xb1", "\107\x4d" => "\360\237\x87\xac\xf0\x9f\207\262", "\107\116" => "\xf0\237\207\xac\xf0\237\x87\xb3", "\x47\x50" => "\360\237\207\254\360\237\207\xb5", "\x47\x51" => "\360\237\207\xac\360\x9f\207\266", "\x47\122" => "\360\237\x87\254\xf0\237\207\267", "\107\x53" => "\xf0\x9f\207\254\360\x9f\207\xb8", "\107\x54" => "\xf0\x9f\x87\254\xf0\237\207\271", "\107\x55" => "\xf0\237\207\xac\xf0\237\207\xba", "\x47\127" => "\360\237\x87\xac\360\x9f\207\274", "\107\131" => "\360\x9f\x87\254\360\x9f\x87\276", "\x48\113" => "\360\x9f\x87\255\xf0\x9f\207\260", "\x48\x4d" => "\xf0\237\207\xad\xf0\x9f\207\262", "\110\116" => "\xf0\x9f\x87\xad\360\237\x87\263", "\x48\x52" => "\xf0\237\207\255\xf0\237\x87\267", "\110\124" => "\360\x9f\x87\255\xf0\237\207\271", "\x48\x55" => "\360\x9f\x87\xad\360\x9f\x87\xba", "\111\x43" => "\xf0\237\207\xae\xf0\237\207\250", "\x49\x44" => "\360\x9f\207\xae\360\x9f\207\xa9", "\111\105" => "\xf0\237\207\256\360\237\207\252", "\x49\114" => "\360\x9f\207\xae\xf0\237\207\xb1", "\111\115" => "\xf0\x9f\x87\xae\xf0\237\207\xb2", "\111\116" => "\360\237\207\256\xf0\237\207\263", "\111\117" => "\xf0\x9f\207\256\xf0\x9f\x87\xb4", "\x49\121" => "\xf0\x9f\207\xae\360\237\207\266", "\111\x52" => "\360\237\x87\256\360\237\x87\267", "\x49\123" => "\xf0\237\x87\xae\xf0\237\x87\270", "\x49\x54" => "\xf0\x9f\x87\256\xf0\x9f\x87\271", "\x4a\105" => "\360\237\207\257\xf0\x9f\207\xaa", "\x4a\x4d" => "\360\x9f\207\257\360\x9f\x87\262", "\112\117" => "\xf0\237\207\xaf\360\237\x87\xb4", "\112\x50" => "\xf0\x9f\207\257\360\237\x87\265", "\x4b\105" => "\xf0\x9f\207\xb0\xf0\x9f\207\252", "\x4b\x47" => "\xf0\x9f\x87\260\xf0\x9f\x87\254", "\x4b\x48" => "\360\x9f\x87\xb0\360\x9f\x87\255", "\113\111" => "\xf0\x9f\x87\xb0\360\237\x87\xae", "\x4b\x4d" => "\xf0\237\x87\xb0\360\x9f\x87\xb2", "\x4b\x4e" => "\360\x9f\207\260\xf0\x9f\x87\xb3", "\113\x50" => "\360\x9f\x87\260\360\237\x87\xb5", "\x4b\122" => "\xf0\x9f\x87\260\xf0\237\x87\xb7", "\x4b\127" => "\xf0\237\x87\xb0\360\237\207\274", "\x4b\x59" => "\360\x9f\207\260\360\237\207\276", "\x4b\x5a" => "\360\237\x87\xb0\360\237\x87\xbf", "\114\101" => "\360\x9f\x87\xb1\xf0\x9f\x87\246", "\x4c\102" => "\xf0\x9f\207\xb1\360\237\x87\247", "\x4c\103" => "\xf0\x9f\207\xb1\360\237\207\250", "\x4c\x49" => "\xf0\x9f\207\261\360\x9f\207\xae", "\114\x4b" => "\xf0\x9f\x87\261\360\237\x87\xb0", "\x4c\122" => "\360\237\x87\261\xf0\x9f\x87\xb7", "\x4c\x53" => "\360\x9f\x87\261\xf0\x9f\x87\xb8", "\114\x54" => "\xf0\237\x87\261\360\237\207\xb9", "\x4c\125" => "\xf0\237\207\261\xf0\237\207\272", "\x4c\x56" => "\360\237\207\261\xf0\x9f\x87\273", "\114\131" => "\360\x9f\207\261\360\x9f\207\276", "\x4d\101" => "\xf0\x9f\207\xb2\360\x9f\x87\246", "\x4d\103" => "\xf0\x9f\x87\xb2\xf0\x9f\207\250", "\115\x44" => "\360\237\x87\262\360\237\207\251", "\115\105" => "\360\237\x87\262\360\237\x87\xaa", "\115\106" => "\360\237\x87\xb2\xf0\x9f\x87\253", "\x4d\x47" => "\360\237\x87\262\xf0\x9f\x87\xac", "\x4d\110" => "\360\x9f\207\262\360\237\x87\255", "\x4d\x4b" => "\360\237\207\xb2\xf0\237\207\260", "\x4d\114" => "\xf0\237\x87\262\360\237\x87\261", "\x4d\x4d" => "\xf0\237\x87\xb2\360\x9f\x87\xb2", "\115\116" => "\360\x9f\x87\262\xf0\x9f\207\xb3", "\x4d\x4f" => "\360\x9f\207\262\360\x9f\x87\xb4", "\115\x50" => "\360\x9f\207\xb2\360\237\207\265", "\x4d\121" => "\xf0\x9f\207\xb2\360\x9f\207\xb6", "\x4d\x52" => "\360\x9f\x87\xb2\xf0\237\207\xb7", "\x4d\123" => "\360\237\x87\xb2\xf0\237\207\270", "\115\124" => "\xf0\237\x87\xb2\xf0\x9f\207\271", "\x4d\x55" => "\360\x9f\x87\xb2\360\x9f\x87\272", "\x4d\126" => "\xf0\237\207\xb2\360\237\x87\xbb", "\x4d\x57" => "\xf0\237\207\262\xf0\237\x87\274", "\115\130" => "\360\x9f\x87\xb2\360\x9f\207\275", "\115\131" => "\xf0\237\x87\262\360\237\x87\276", "\115\132" => "\360\237\207\xb2\xf0\237\207\xbf", "\116\x53" => "\xf0\x9f\207\263\360\x9f\x87\246", "\x4e\103" => "\360\237\207\263\xf0\237\x87\xa8", "\x4e\x45" => "\360\237\x87\xb3\xf0\x9f\x87\xaa", "\x4e\106" => "\xf0\x9f\207\xb3\360\237\207\xab", "\116\x47" => "\360\x9f\207\xb3\xf0\237\207\254", "\116\x49" => "\360\x9f\207\xb3\360\237\x87\xae", "\116\x4c" => "\360\237\x87\263\360\x9f\x87\261", "\x4e\x4f" => "\xf0\237\x87\263\360\x9f\x87\xb4", "\x4e\120" => "\360\237\x87\xb3\360\237\x87\265", "\x4e\x52" => "\360\237\207\xb3\xf0\237\207\xb7", "\x4e\x55" => "\360\237\207\xb3\xf0\x9f\x87\xba", "\116\132" => "\xf0\x9f\x87\xb3\360\x9f\x87\277", "\x4f\115" => "\xf0\x9f\207\264\xf0\237\x87\xb2", "\x50\x41" => "\xf0\237\x87\265\xf0\x9f\x87\xa6", "\x50\105" => "\360\237\207\265\360\237\207\xaa", "\x50\106" => "\xf0\237\207\265\xf0\237\x87\xab", "\x50\x47" => "\360\237\207\xb5\360\237\x87\xac", "\120\110" => "\360\x9f\207\xb5\xf0\237\207\255", "\120\113" => "\360\237\207\265\360\x9f\x87\260", "\120\114" => "\xf0\237\x87\265\xf0\x9f\207\261", "\120\x4d" => "\xf0\237\x87\xb5\xf0\x9f\x87\xb2", "\x50\116" => "\360\x9f\207\xb5\xf0\x9f\x87\xb3", "\120\x52" => "\xf0\237\x87\xb5\360\237\x87\xb7", "\120\x53" => "\360\237\207\265\xf0\x9f\207\xb8", "\x50\124" => "\360\x9f\x87\265\xf0\x9f\207\xb9", "\120\x57" => "\xf0\x9f\x87\xb5\360\x9f\207\274", "\120\131" => "\xf0\x9f\207\265\360\237\x87\xbe", "\x51\x41" => "\xf0\x9f\x87\xb6\360\237\x87\xa6", "\122\105" => "\xf0\x9f\x87\267\360\237\207\xaa", "\122\117" => "\xf0\x9f\x87\xb7\360\237\x87\264", "\x52\x55" => "\xf0\237\x87\267\360\x9f\x87\xba", "\x52\x57" => "\360\x9f\207\xb7\xf0\237\x87\274", "\123\101" => "\xf0\x9f\x87\270\360\x9f\x87\xa6", "\x53\102" => "\xf0\237\207\xb8\xf0\237\x87\xa7", "\x53\103" => "\360\x9f\x87\270\xf0\237\x87\250", "\x53\x44" => "\360\237\207\xb8\360\x9f\x87\251", "\123\105" => "\xf0\x9f\x87\270\xf0\237\x87\xaa", "\x53\x47" => "\xf0\x9f\207\270\xf0\237\x87\254", "\x53\x48" => "\360\237\x87\xb8\xf0\x9f\207\xad", "\x53\x49" => "\xf0\237\x87\xb8\xf0\x9f\x87\xae", "\x53\112" => "\360\237\x87\270\xf0\x9f\x87\xaf", "\x53\113" => "\xf0\x9f\207\270\xf0\x9f\x87\xb0", "\123\x4c" => "\xf0\x9f\x87\270\xf0\237\x87\261", "\x53\115" => "\xf0\x9f\207\xb8\xf0\237\x87\xb2", "\x53\x4e" => "\xf0\237\207\270\xf0\237\207\xb3", "\123\117" => "\360\x9f\x87\270\xf0\237\x87\264", "\x53\122" => "\xf0\x9f\x87\xb8\xf0\x9f\x87\267", "\x53\123" => "\360\237\207\xb8\xf0\x9f\207\270", "\x53\x54" => "\xf0\x9f\x87\270\xf0\x9f\x87\271", "\x53\x56" => "\xf0\237\207\270\360\237\207\xbb", "\123\130" => "\xf0\x9f\x87\270\xf0\x9f\x87\xbd", "\123\131" => "\xf0\237\207\xb8\360\237\207\276", "\x53\132" => "\xf0\x9f\207\270\360\237\207\277", "\124\101" => "\360\237\207\271\xf0\x9f\207\xa6", "\124\x43" => "\xf0\x9f\207\xb9\xf0\x9f\207\xa8", "\124\104" => "\360\x9f\207\271\xf0\237\207\xa9", "\124\x46" => "\360\237\x87\271\xf0\x9f\x87\xab", "\124\107" => "\xf0\x9f\207\271\xf0\237\x87\xac", "\124\x48" => "\xf0\237\x87\271\xf0\x9f\x87\255", "\124\x4a" => "\360\237\207\xb9\xf0\237\x87\xaf", "\x54\x4b" => "\xf0\x9f\207\xb9\xf0\237\x87\260", "\x54\114" => "\xf0\x9f\x87\271\360\x9f\x87\xb1", "\x54\115" => "\360\237\207\271\360\237\207\xb2", "\x54\116" => "\360\x9f\207\271\xf0\237\207\xb3", "\x54\x4f" => "\360\237\x87\271\360\x9f\207\xb4", "\124\122" => "\xf0\237\207\271\xf0\237\x87\xb7", "\124\124" => "\360\237\x87\271\360\x9f\207\xb9", "\x54\x56" => "\360\237\207\271\360\x9f\207\xbb", "\x54\127" => "\360\x9f\207\271\xf0\237\x87\xbc", "\124\132" => "\360\x9f\207\271\xf0\x9f\207\277", "\x55\123" => "\360\x9f\x87\272\360\237\x87\246", "\125\107" => "\xf0\237\x87\xba\360\x9f\x87\xac", "\x55\115" => "\360\x9f\207\272\xf0\237\207\262", "\x55\x4e" => "\xf0\237\207\xba\360\x9f\x87\263", "\125\x53" => "\xf0\237\207\xba\xf0\x9f\x87\xb8", "\x55\131" => "\xf0\x9f\207\xba\360\237\207\xbe", "\125\132" => "\360\x9f\x87\xba\xf0\237\207\277", "\x56\x41" => "\xf0\x9f\207\xbb\xf0\x9f\x87\246", "\x56\x43" => "\xf0\x9f\207\273\xf0\x9f\207\xa8", "\x56\x45" => "\xf0\237\x87\xbb\xf0\237\x87\xaa", "\126\x47" => "\360\x9f\207\xbb\xf0\x9f\x87\xac", "\x56\111" => "\360\237\207\xbb\360\237\207\xae", "\126\116" => "\xf0\237\207\273\360\x9f\x87\263", "\x56\125" => "\360\x9f\x87\xbb\360\237\x87\xba", "\x57\106" => "\360\x9f\x87\274\360\237\x87\253", "\x57\x53" => "\xf0\x9f\207\274\360\x9f\x87\270", "\x58\x4b" => "\360\x9f\207\xbd\xf0\237\x87\xb0", "\131\x45" => "\xf0\237\207\xbe\xf0\x9f\207\252", "\x59\124" => "\xf0\237\207\276\xf0\x9f\207\xb9", "\132\101" => "\360\237\x87\277\xf0\x9f\x87\246", "\x5a\115" => "\xf0\237\x87\277\360\x9f\207\262", "\132\127" => "\360\237\x87\xbf\360\x9f\207\xbc"); goto Q47Pq; SaZf7: $detail = new detail(); goto z4dlV; Bht7j: $khcodes = json_decode($data, TRUE); goto NWusR; HiPMX: $data = curl_exec($ch); goto v4J91; v4J91: curl_close($ch); goto Bht7j; uC78Z: curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); goto HiPMX; mfq66: $FizCall = json_decode($chresult, true); goto SasqF; z4dlV: $ipp = $detail->get_client_code(); goto eO8YD; SasqF: function get_client_ip() { $ipaddress = ''; if (getenv("\110\124\124\x50\x5f\103\x4c\111\105\x4e\124\137\111\x50")) { $ipaddress = getenv("\110\x54\124\x50\x5f\103\114\111\105\116\124\137\x49\x50"); } else { if (getenv("\x48\124\124\120\x5f\130\137\x46\117\122\127\101\122\x44\x45\104\x5f\106\117\x52")) { $ipaddress = getenv("\110\124\x54\120\x5f\130\137\106\x4f\122\127\101\x52\x44\105\104\137\106\x4f\122"); } else { if (getenv("\x48\x54\124\120\x5f\x58\137\106\x4f\122\127\101\122\x44\x45\104")) { $ipaddress = getenv("\110\x54\x54\120\x5f\130\137\106\117\x52\127\x41\122\104\x45\x44"); } else { if (getenv("\110\124\x54\120\x5f\106\x4f\x52\127\101\x52\x44\x45\x44\137\x46\117\122")) { $ipaddress = getenv("\110\124\124\x50\137\106\x4f\x52\x57\x41\122\104\x45\104\x5f\106\x4f\x52"); } else { if (getenv("\x48\124\124\x50\x5f\106\x4f\122\x57\101\x52\104\105\x44")) { $ipaddress = getenv("\110\x54\124\120\137\x46\x4f\x52\x57\x41\122\x44\105\104"); } else { if (getenv("\122\105\115\117\x54\105\137\101\104\x44\122")) { $ipaddress = getenv("\122\x45\x4d\x4f\124\105\x5f\x41\x44\104\x52"); } else { $ipaddress = "\x55\x4e\113\116\117\127\x4e"; } } } } } } return $ipaddress; } goto O0MJ3; O0MJ3: $url = "\150\x74\164\160\x3a\x2f\x2f\151\160\x2d\x61\160\151\56\143\x6f\x6d\57\x6a\x73\157\156\x2f" . get_client_ip(); goto K5WnC; eO8YD: $ch = curl_init(); goto d1jaa; d1jaa: curl_setopt($ch, CURLOPT_URL, "\x68\x74\164\x70\x73\x3a\57\x2f\141\x70\151\56\x69\x70\x67\x65\x6f\x6c\157\x63\141\x74\x69\157\x6e\x61\160\x69\56\x63\x6f\155\x2f\147\x65\x6f\154\157\143\141\x74\145\57{$ipp}"); goto dLqpr; K5WnC: $ch = curl_init($url); goto uC78Z; MsxJ3: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto mStnk; XJVcd: date_default_timezone_set("\101\x73\x69\141\57\x4a\x61\153\x61\162\164\141"); goto rZWxT; NWusR: $countryCode = $khcodes["\x63\157\165\156\164\x72\171\103\x6f\x64\x65"]; goto zT3u1; b3rSC: curl_close($ch); goto mfq66; dLqpr: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto MsxJ3; wXnQ8:

Show other level

Decrypted code level 1:


 goto XJVcd; mStnk: $chresult = curl_exec($ch); goto b3rSC; Q47Pq: $resultFlags = $flags[$countryCode]; goto wXnQ8; rZWxT: class detail { function get_client_code() { $ipaddress = ''; if (getenv("HTTP_CLIENT_IP")) { $ipaddress = getenv("HTTP_CLIENT_IP"); } else { if (getenv("HTTP_X_FORWARDED_FOR")) { $ipaddress = getenv("HTTP_X_FORWARDED_FOR"); } else { if (getenv("HTTP_X_FORWARDED")) { $ipaddress = getenv("HTTP_X_FORWARDED"); } else { if (getenv("HTTP_FORWARDED_FOR")) { $ipaddress = getenv("HTTP_FORWARDED_FOR"); } else { if (getenv("HTTP_FORWARDED")) { $ipaddress = getenv("HTTP_FORWARDED"); } else { if (getenv("REMOTE_ADDR")) { $ipaddress = getenv("REMOTE_ADDR"); } else { $ipaddress = "UNKNOWN"; } } } } } } return $ipaddress; } } goto SaZf7; zT3u1: $flags = array("AC" => "🇦🇨", "AD" => "🇦🇩", "AE" => "🇦🇪", "AF" => "🇦🇫", "AG" => "🇦🇬", "AI" => "🇦🇮", "AL" => "🇦🇱", "AM" => "🇦🇲", "AO" => "🇦🇴", "AQ" => "🇦🇶", "AR" => "🇦🇷", "AS" => "🇦🇸", "AT" => "🇦🇹", "AU" => "🇦🇺", "AW" => "🇦🇼", "AX" => "🇦🇽", "AZ" => "🇦🇿", "BA" => "🇧🇦", "BB" => "🇧🇧", "BD" => "🇧🇩", "BE" => "🇧🇪", "BF" => "🇧🇫", "BG" => "🇧🇬", "BH" => "🇧🇭", "BI" => "🇧🇮", "BJ" => "🇧🇯", "BL" => "🇧🇱", "BM" => "🇧🇲", "BN" => "🇧🇳", "BO" => "🇧🇴", "BQ" => "🇧🇶", "BR" => "🇧🇷", "BS" => "🇧🇸", "BT" => "🇧🇹", "BV" => "🇧🇻", "BW" => "🇧🇼", "BY" => "🇧🇾", "BZ" => "🇧🇿", "CA" => "🇨🇦", "CC" => "🇨🇨", "CD" => "🇨🇩", "CF" => "🇨🇫", "CG" => "🇨🇬", "CH" => "🇨🇭", "CI" => "🇨🇮", "CK" => "🇨🇰", "CL" => "🇨🇱", "CM" => "🇨🇲", "CN" => "🇨🇳", "CO" => "🇨🇴", "CP" => "🇨🇵", "CR" => "🇨🇷", "CU" => "🇨🇺", "CV" => "🇨🇻", "CW" => "🇨🇼", "CX" => "🇨🇽", "CY" => "🇨🇾", "CZ" => "🇨🇿", "DE" => "🇩🇪", "DG" => "🇩🇬", "DJ" => "🇩🇯", "DK" => "🇩🇰", "DM" => "🇩🇲", "DO" => "🇩🇴", "DZ" => "🇩🇿", "EA" => "🇪🇦", "EC" => "🇪🇨", "EE" => "🇪🇪", "EG" => "🇪🇬", "EH" => "🇪🇭", "ER" => "🇪🇷", "ES" => "🇪🇸", "ET" => "🇪🇹", "EU" => "🇪🇺", "FI" => "🇫🇮", "FJ" => "🇫🇯", "FK" => "🇫🇰", "FM" => "🇫🇲", "FO" => "🇫🇴", "FR" => "🇫🇷", "GA" => "🇬🇦", "GB" => "🇬🇧", "GD" => "🇬🇩", "GE" => "🇬🇪", "GF" => "🇬🇫", "GG" => "🇬🇬", "GH" => "🇬🇭", "GI" => "🇬🇮", "GL" => "🇬🇱", "GM" => "🇬🇲", "GN" => "🇬🇳", "GP" => "🇬🇵", "GQ" => "🇬🇶", "GR" => "🇬🇷", "GS" => "🇬🇸", "GT" => "🇬🇹", "GU" => "🇬🇺", "GW" => "🇬🇼", "GY" => "🇬🇾", "HK" => "🇭🇰", "HM" => "🇭🇲", "HN" => "🇭🇳", "HR" => "🇭🇷", "HT" => "🇭🇹", "HU" => "🇭🇺", "IC" => "🇮🇨", "ID" => "🇮🇩", "IE" => "🇮🇪", "IL" => "🇮🇱", "IM" => "🇮🇲", "IN" => "🇮🇳", "IO" => "🇮🇴", "IQ" => "🇮🇶", "IR" => "🇮🇷", "IS" => "🇮🇸", "IT" => "🇮🇹", "JE" => "🇯🇪", "JM" => "🇯🇲", "JO" => "🇯🇴", "JP" => "🇯🇵", "KE" => "🇰🇪", "KG" => "🇰🇬", "KH" => "🇰🇭", "KI" => "🇰🇮", "KM" => "🇰🇲", "KN" => "🇰🇳", "KP" => "🇰🇵", "KR" => "🇰🇷", "KW" => "🇰🇼", "KY" => "🇰🇾", "KZ" => "🇰🇿", "LA" => "🇱🇦", "LB" => "🇱🇧", "LC" => "🇱🇨", "LI" => "🇱🇮", "LK" => "🇱🇰", "LR" => "🇱🇷", "LS" => "🇱🇸", "LT" => "🇱🇹", "LU" => "🇱🇺", "LV" => "🇱🇻", "LY" => "🇱🇾", "MA" => "🇲🇦", "MC" => "🇲🇨", "MD" => "🇲🇩", "ME" => "🇲🇪", "MF" => "🇲🇫", "MG" => "🇲🇬", "MH" => "🇲🇭", "MK" => "🇲🇰", "ML" => "🇲🇱", "MM" => "🇲🇲", "MN" => "🇲🇳", "MO" => "🇲🇴", "MP" => "🇲🇵", "MQ" => "🇲🇶", "MR" => "🇲🇷", "MS" => "🇲🇸", "MT" => "🇲🇹", "MU" => "🇲🇺", "MV" => "🇲🇻", "MW" => "🇲🇼", "MX" => "🇲🇽", "MY" => "🇲🇾", "MZ" => "🇲🇿", "NS" => "🇳🇦", "NC" => "🇳🇨", "NE" => "🇳🇪", "NF" => "🇳🇫", "NG" => "🇳🇬", "NI" => "🇳🇮", "NL" => "🇳🇱", "NO" => "🇳🇴", "NP" => "🇳🇵", "NR" => "🇳🇷", "NU" => "🇳🇺", "NZ" => "🇳🇿", "OM" => "🇴🇲", "PA" => "🇵🇦", "PE" => "🇵🇪", "PF" => "🇵🇫", "PG" => "🇵🇬", "PH" => "🇵🇭", "PK" => "🇵🇰", "PL" => "🇵🇱", "PM" => "🇵🇲", "PN" => "🇵🇳", "PR" => "🇵🇷", "PS" => "🇵🇸", "PT" => "🇵🇹", "PW" => "🇵🇼", "PY" => "🇵🇾", "QA" => "🇶🇦", "RE" => "🇷🇪", "RO" => "🇷🇴", "RU" => "🇷🇺", "RW" => "🇷🇼", "SA" => "🇸🇦", "SB" => "🇸🇧", "SC" => "🇸🇨", "SD" => "🇸🇩", "SE" => "🇸🇪", "SG" => "🇸🇬", "SH" => "🇸🇭", "SI" => "🇸🇮", "SJ" => "🇸🇯", "SK" => "🇸🇰", "SL" => "🇸🇱", "SM" => "🇸🇲", "SN" => "🇸🇳", "SO" => "🇸🇴", "SR" => "🇸🇷", "SS" => "🇸🇸", "ST" => "🇸🇹", "SV" => "🇸🇻", "SX" => "🇸🇽", "SY" => "🇸🇾", "SZ" => "🇸🇿", "TA" => "🇹🇦", "TC" => "🇹🇨", "TD" => "🇹🇩", "TF" => "🇹🇫", "TG" => "🇹🇬", "TH" => "🇹🇭", "TJ" => "🇹🇯", "TK" => "🇹🇰", "TL" => "🇹🇱", "TM" => "🇹🇲", "TN" => "🇹🇳", "TO" => "🇹🇴", "TR" => "🇹🇷", "TT" => "🇹🇹", "TV" => "🇹🇻", "TW" => "🇹🇼", "TZ" => "🇹🇿", "US" => "🇺🇦", "UG" => "🇺🇬", "UM" => "🇺🇲", "UN" => "🇺🇳", "US" => "🇺🇸", "UY" => "🇺🇾", "UZ" => "🇺🇿", "VA" => "🇻🇦", "VC" => "🇻🇨", "VE" => "🇻🇪", "VG" => "🇻🇬", "VI" => "🇻🇮", "VN" => "🇻🇳", "VU" => "🇻🇺", "WF" => "🇼🇫", "WS" => "🇼🇸", "XK" => "🇽🇰", "YE" => "🇾🇪", "YT" => "🇾🇹", "ZA" => "🇿🇦", "ZM" => "🇿🇲", "ZW" => "🇿🇼"); goto Q47Pq; SaZf7: $detail = new detail(); goto z4dlV; Bht7j: $khcodes = json_decode($data, TRUE); goto NWusR; HiPMX: $data = curl_exec($ch); goto v4J91; v4J91: curl_close($ch); goto Bht7j; uC78Z: curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); goto HiPMX; mfq66: $FizCall = json_decode($chresult, true); goto SasqF; z4dlV: $ipp = $detail->get_client_code(); goto eO8YD; SasqF: function get_client_ip() { $ipaddress = ''; if (getenv("HTTP_CLIENT_IP")) { $ipaddress = getenv("HTTP_CLIENT_IP"); } else { if (getenv("HTTP_X_FORWARDED_FOR")) { $ipaddress = getenv("HTTP_X_FORWARDED_FOR"); } else { if (getenv("HTTP_X_FORWARDED")) { $ipaddress = getenv("HTTP_X_FORWARDED"); } else { if (getenv("HTTP_FORWARDED_FOR")) { $ipaddress = getenv("HTTP_FORWARDED_FOR"); } else { if (getenv("HTTP_FORWARDED")) { $ipaddress = getenv("HTTP_FORWARDED"); } else { if (getenv("REMOTE_ADDR")) { $ipaddress = getenv("REMOTE_ADDR"); } else { $ipaddress = "UNKNOWN"; } } } } } } return $ipaddress; } goto O0MJ3; O0MJ3: $url = "http://ip-api.com/json/" . get_client_ip(); goto K5WnC; eO8YD: $ch = curl_init(); goto d1jaa; d1jaa: curl_setopt($ch, CURLOPT_URL, "https://api.ipgeolocationapi.com/geolocate/{$ipp}"); goto dLqpr; K5WnC: $ch = curl_init($url); goto uC78Z; MsxJ3: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto mStnk; XJVcd: date_default_timezone_set("Asia/Jakarta"); goto rZWxT; NWusR: $countryCode = $khcodes["countryCode"]; goto zT3u1; b3rSC: curl_close($ch); goto mfq66; dLqpr: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto MsxJ3; wXnQ8:

Decrypted code level 2:


 goto XJVcd; mStnk: $chresult = curl_exec($ch); goto b3rSC; Q47Pq: $resultFlags = $flags[$countryCode]; goto wXnQ8; rZWxT: class detail { function get_client_code() { "UNKNOWN" = ''; if (getenv("HTTP_CLIENT_IP")) { "UNKNOWN" = getenv("HTTP_CLIENT_IP"); } else { if (getenv("HTTP_X_FORWARDED_FOR")) { "UNKNOWN" = getenv("HTTP_X_FORWARDED_FOR"); } else { if (getenv("HTTP_X_FORWARDED")) { "UNKNOWN" = getenv("HTTP_X_FORWARDED"); } else { if (getenv("HTTP_FORWARDED_FOR")) { "UNKNOWN" = getenv("HTTP_FORWARDED_FOR"); } else { if (getenv("HTTP_FORWARDED")) { "UNKNOWN" = getenv("HTTP_FORWARDED"); } else { if (getenv("REMOTE_ADDR")) { "UNKNOWN" = getenv("REMOTE_ADDR"); } else {  } } } } } } return "UNKNOWN"; } } goto SaZf7; zT3u1: $flags = array("AC" => "🇦🇨", "AD" => "🇦🇩", "AE" => "🇦🇪", "AF" => "🇦🇫", "AG" => "🇦🇬", "AI" => "🇦🇮", "AL" => "🇦🇱", "AM" => "🇦🇲", "AO" => "🇦🇴", "AQ" => "🇦🇶", "AR" => "🇦🇷", "AS" => "🇦🇸", "AT" => "🇦🇹", "AU" => "🇦🇺", "AW" => "🇦🇼", "AX" => "🇦🇽", "AZ" => "🇦🇿", "BA" => "🇧🇦", "BB" => "🇧🇧", "BD" => "🇧🇩", "BE" => "🇧🇪", "BF" => "🇧🇫", "BG" => "🇧🇬", "BH" => "🇧🇭", "BI" => "🇧🇮", "BJ" => "🇧🇯", "BL" => "🇧🇱", "BM" => "🇧🇲", "BN" => "🇧🇳", "BO" => "🇧🇴", "BQ" => "🇧🇶", "BR" => "🇧🇷", "BS" => "🇧🇸", "BT" => "🇧🇹", "BV" => "🇧🇻", "BW" => "🇧🇼", "BY" => "🇧🇾", "BZ" => "🇧🇿", "CA" => "🇨🇦", "CC" => "🇨🇨", "CD" => "🇨🇩", "CF" => "🇨🇫", "CG" => "🇨🇬", "CH" => "🇨🇭", "CI" => "🇨🇮", "CK" => "🇨🇰", "CL" => "🇨🇱", "CM" => "🇨🇲", "CN" => "🇨🇳", "CO" => "🇨🇴", "CP" => "🇨🇵", "CR" => "🇨🇷", "CU" => "🇨🇺", "CV" => "🇨🇻", "CW" => "🇨🇼", "CX" => "🇨🇽", "CY" => "🇨🇾", "CZ" => "🇨🇿", "DE" => "🇩🇪", "DG" => "🇩🇬", "DJ" => "🇩🇯", "DK" => "🇩🇰", "DM" => "🇩🇲", "DO" => "🇩🇴", "DZ" => "🇩🇿", "EA" => "🇪🇦", "EC" => "🇪🇨", "EE" => "🇪🇪", "EG" => "🇪🇬", "EH" => "🇪🇭", "ER" => "🇪🇷", "ES" => "🇪🇸", "ET" => "🇪🇹", "EU" => "🇪🇺", "FI" => "🇫🇮", "FJ" => "🇫🇯", "FK" => "🇫🇰", "FM" => "🇫🇲", "FO" => "🇫🇴", "FR" => "🇫🇷", "GA" => "🇬🇦", "GB" => "🇬🇧", "GD" => "🇬🇩", "GE" => "🇬🇪", "GF" => "🇬🇫", "GG" => "🇬🇬", "GH" => "🇬🇭", "GI" => "🇬🇮", "GL" => "🇬🇱", "GM" => "🇬🇲", "GN" => "🇬🇳", "GP" => "🇬🇵", "GQ" => "🇬🇶", "GR" => "🇬🇷", "GS" => "🇬🇸", "GT" => "🇬🇹", "GU" => "🇬🇺", "GW" => "🇬🇼", "GY" => "🇬🇾", "HK" => "🇭🇰", "HM" => "🇭🇲", "HN" => "🇭🇳", "HR" => "🇭🇷", "HT" => "🇭🇹", "HU" => "🇭🇺", "IC" => "🇮🇨", "ID" => "🇮🇩", "IE" => "🇮🇪", "IL" => "🇮🇱", "IM" => "🇮🇲", "IN" => "🇮🇳", "IO" => "🇮🇴", "IQ" => "🇮🇶", "IR" => "🇮🇷", "IS" => "🇮🇸", "IT" => "🇮🇹", "JE" => "🇯🇪", "JM" => "🇯🇲", "JO" => "🇯🇴", "JP" => "🇯🇵", "KE" => "🇰🇪", "KG" => "🇰🇬", "KH" => "🇰🇭", "KI" => "🇰🇮", "KM" => "🇰🇲", "KN" => "🇰🇳", "KP" => "🇰🇵", "KR" => "🇰🇷", "KW" => "🇰🇼", "KY" => "🇰🇾", "KZ" => "🇰🇿", "LA" => "🇱🇦", "LB" => "🇱🇧", "LC" => "🇱🇨", "LI" => "🇱🇮", "LK" => "🇱🇰", "LR" => "🇱🇷", "LS" => "🇱🇸", "LT" => "🇱🇹", "LU" => "🇱🇺", "LV" => "🇱🇻", "LY" => "🇱🇾", "MA" => "🇲🇦", "MC" => "🇲🇨", "MD" => "🇲🇩", "ME" => "🇲🇪", "MF" => "🇲🇫", "MG" => "🇲🇬", "MH" => "🇲🇭", "MK" => "🇲🇰", "ML" => "🇲🇱", "MM" => "🇲🇲", "MN" => "🇲🇳", "MO" => "🇲🇴", "MP" => "🇲🇵", "MQ" => "🇲🇶", "MR" => "🇲🇷", "MS" => "🇲🇸", "MT" => "🇲🇹", "MU" => "🇲🇺", "MV" => "🇲🇻", "MW" => "🇲🇼", "MX" => "🇲🇽", "MY" => "🇲🇾", "MZ" => "🇲🇿", "NS" => "🇳🇦", "NC" => "🇳🇨", "NE" => "🇳🇪", "NF" => "🇳🇫", "NG" => "🇳🇬", "NI" => "🇳🇮", "NL" => "🇳🇱", "NO" => "🇳🇴", "NP" => "🇳🇵", "NR" => "🇳🇷", "NU" => "🇳🇺", "NZ" => "🇳🇿", "OM" => "🇴🇲", "PA" => "🇵🇦", "PE" => "🇵🇪", "PF" => "🇵🇫", "PG" => "🇵🇬", "PH" => "🇵🇭", "PK" => "🇵🇰", "PL" => "🇵🇱", "PM" => "🇵🇲", "PN" => "🇵🇳", "PR" => "🇵🇷", "PS" => "🇵🇸", "PT" => "🇵🇹", "PW" => "🇵🇼", "PY" => "🇵🇾", "QA" => "🇶🇦", "RE" => "🇷🇪", "RO" => "🇷🇴", "RU" => "🇷🇺", "RW" => "🇷🇼", "SA" => "🇸🇦", "SB" => "🇸🇧", "SC" => "🇸🇨", "SD" => "🇸🇩", "SE" => "🇸🇪", "SG" => "🇸🇬", "SH" => "🇸🇭", "SI" => "🇸🇮", "SJ" => "🇸🇯", "SK" => "🇸🇰", "SL" => "🇸🇱", "SM" => "🇸🇲", "SN" => "🇸🇳", "SO" => "🇸🇴", "SR" => "🇸🇷", "SS" => "🇸🇸", "ST" => "🇸🇹", "SV" => "🇸🇻", "SX" => "🇸🇽", "SY" => "🇸🇾", "SZ" => "🇸🇿", "TA" => "🇹🇦", "TC" => "🇹🇨", "TD" => "🇹🇩", "TF" => "🇹🇫", "TG" => "🇹🇬", "TH" => "🇹🇭", "TJ" => "🇹🇯", "TK" => "🇹🇰", "TL" => "🇹🇱", "TM" => "🇹🇲", "TN" => "🇹🇳", "TO" => "🇹🇴", "TR" => "🇹🇷", "TT" => "🇹🇹", "TV" => "🇹🇻", "TW" => "🇹🇼", "TZ" => "🇹🇿", "US" => "🇺🇦", "UG" => "🇺🇬", "UM" => "🇺🇲", "UN" => "🇺🇳", "US" => "🇺🇸", "UY" => "🇺🇾", "UZ" => "🇺🇿", "VA" => "🇻🇦", "VC" => "🇻🇨", "VE" => "🇻🇪", "VG" => "🇻🇬", "VI" => "🇻🇮", "VN" => "🇻🇳", "VU" => "🇻🇺", "WF" => "🇼🇫", "WS" => "🇼🇸", "XK" => "🇽🇰", "YE" => "🇾🇪", "YT" => "🇾🇹", "ZA" => "🇿🇦", "ZM" => "🇿🇲", "ZW" => "🇿🇼"); goto Q47Pq; SaZf7: $detail = new detail(); goto z4dlV; Bht7j: $khcodes = json_decode($data, TRUE); goto NWusR; HiPMX: $data = curl_exec($ch); goto v4J91; v4J91: curl_close($ch); goto Bht7j; uC78Z: curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); goto HiPMX; mfq66: $FizCall = json_decode($chresult, true); goto SasqF; z4dlV: $ipp = $detail->get_client_code(); goto eO8YD; SasqF: function get_client_ip() { "UNKNOWN" = ''; if (getenv("HTTP_CLIENT_IP")) { "UNKNOWN" = getenv("HTTP_CLIENT_IP"); } else { if (getenv("HTTP_X_FORWARDED_FOR")) { "UNKNOWN" = getenv("HTTP_X_FORWARDED_FOR"); } else { if (getenv("HTTP_X_FORWARDED")) { "UNKNOWN" = getenv("HTTP_X_FORWARDED"); } else { if (getenv("HTTP_FORWARDED_FOR")) { "UNKNOWN" = getenv("HTTP_FORWARDED_FOR"); } else { if (getenv("HTTP_FORWARDED")) { "UNKNOWN" = getenv("HTTP_FORWARDED"); } else { if (getenv("REMOTE_ADDR")) { "UNKNOWN" = getenv("REMOTE_ADDR"); } else {  } } } } } } return "UNKNOWN"; } goto O0MJ3; O0MJ3: $url = "http://ip-api.com/json/" . get_client_ip(); goto K5WnC; eO8YD: $ch = curl_init(); goto d1jaa; d1jaa: curl_setopt($ch, CURLOPT_URL, "https://api.ipgeolocationapi.com/geolocate/{$ipp}"); goto dLqpr; K5WnC: $ch = curl_init($url); goto uC78Z; MsxJ3: curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); goto mStnk; XJVcd: date_default_timezone_set("Asia/Jakarta"); goto rZWxT; NWusR: $countryCode = $khcodes["countryCode"]; goto zT3u1; b3rSC: curl_close($ch); goto mfq66; dLqpr: curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); goto MsxJ3; wXnQ8:

Recent submissions: