Online PHP Javascript Script Decoder

Online PHP and Javascript Decoder decode hidden script to uncover its real functionality

Original code:

[cdc072acfdae4ed10cedf354e29ac42030713676171] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000] - "daisy-market.com.ua" - "POST /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 HTTP/1.1" 200 31 "{\x22invoiceId\x22:\x222603032nmhWkdDQJpVCB\x22,\x22status\x22:\x22success\x22,\x22payMethod\x22:\x22apple\x22,\x22amount\x22:129000,\x22ccy\x22:980,\x22finalAmount\x22:129000,\x22createdDate\x22:\x222026-03-03T17:31:49Z\x22,\x22modifiedDate\x22:\x222026-03-03T17:32:05Z\x22,\x22reference\x22:\x229496\x22,\x22destination\x22:\x22daisy-market.com.ua \xD0\x97\xD0\xB0\xD0\xBC\xD0\xBE\xD0\xB2\xD0\xBB\xD0\xB5\xD0\xBD\xD0\xBD\xD1\x8F \xE2\x84\x969496\x22,\x22paymentInfo\x22:{\x22rrn\x22:\x22002431240085\x22,\x22approvalCode\x22:\x22544899\x22,\x22tranId\x22:\x2222624943384\x22,\x22terminal\x22:\x22MI008939\x22,\x22bank\x22:\x22\xD0\x9E\xD1\x89\xD0\xB0\xD0\xB4\xD0\xB1\xD0\xB0\xD0\xBD\xD0\xBA\x22,\x22paymentSystem\x22:\x22visa\x22,\x22country\x22:\x22804\x22,\x22fee\x22:1677,\x22paymentMethod\x22:\x22apple\x22,\x22maskedPan\x22:\x2244435740******52\x22}}\x0A" "-" "Go-http-client/1.1" "127.0.0.1:9000" Headers: Accept - AL - AE gzip SFS - SFM - SFD - SFU - SCHUA - SCHUAM - SCHUAP - UIR - Host daisy-market.com.ua RM POST URI /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 SC http 0.326 "0.326"




------------------------------++5+65
[cf211c8b0c4e41b2910207cd6c0fd00f30713590502] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000] - "daisy-market.com.ua" - "POST /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 HTTP/1.1" 200 31 "{\x22invoiceId\x22:\x222603032nmhWkdDQJpVCB\x22,\x22status\x22:\x22processing\x22,\x22amount\x22:129000,\x22ccy\x22:980,\x22finalAmount\x22:0,\x22createdDate\x22:\x222026-03-03T17:31:49Z\x22,\x22modifiedDate\x22:\x222026-03-03T17:32:04Z\x22,\x22reference\x22:\x229496\x22,\x22destination\x22:\x22daisy-market.com.ua \xD0\x97\xD0\xB0\xD0\xBC\xD0\xBE\xD0\xB2\xD0\xBB\xD0\xB5\xD0\xBD\xD0\xBD\xD1\x8F \xE2\x84\x969496\x22}\x0A" "-" "Go-http-client/1.1" "127.0.0.1:9000" Headers: Accept - AL - AE gzip SFS - SFM - SFD - SFU - SCHUA - SCHUAM - SCHUAP - UIR - Host daisy-market.com.ua RM POST URI /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 SC http 1.482 "1.482"

Decrypted code:

[cdc072acfdae4ed10cedf354e29ac42030713676171] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000] - "daisy-market.com.ua" - "POST /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 HTTP/1.1" 200 31 "{"invoiceId":"2603032nmhWkdDQJpVCB","status":"success","payMethod":"apple","amount":129000,"ccy":980,"finalAmount":129000,"createdDate":"2026-03-03T17:31:49Z","modifiedDate":"2026-03-03T17:32:05Z","reference":"9496","destination":"daisy-market.com.ua Замовлення №9496","paymentInfo":{"rrn":"002431240085","approvalCode":"544899","tranId":"22624943384","terminal":"MI008939","bank":"Ощадбанк","paymentSystem":"visa","country":"804","fee":1677,"paymentMethod":"apple","maskedPan":"44435740******52"}}
" "-" "Go-http-client/1.1" "127.0.0.1:9000" Headers: Accept - AL - AE gzip SFS - SFM - SFD - SFU - SCHUA - SCHUAM - SCHUAP - UIR - Host daisy-market.com.ua RM POST URI /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 SC http 0.326 "0.326"




------------------------------++5+65
[cf211c8b0c4e41b2910207cd6c0fd00f30713590502] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000] - "daisy-market.com.ua" - "POST /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 HTTP/1.1" 200 31 "{"invoiceId":"2603032nmhWkdDQJpVCB","status":"processing","amount":129000,"ccy":980,"finalAmount":0,"createdDate":"2026-03-03T17:31:49Z","modifiedDate":"2026-03-03T17:32:04Z","reference":"9496","destination":"daisy-market.com.ua Замовлення №9496"}
" "-" "Go-http-client/1.1" "127.0.0.1:9000" Headers: Accept - AL - AE gzip SFS - SFM - SFD - SFU - SCHUA - SCHUAM - SCHUAP - UIR - Host daisy-market.com.ua RM POST URI /payment/update/monobankAcquire/9496_962_daisy-market.com.ua_69a71b0593a66 SC http 1.482 "1.482"

Recent submissions:

[cdc072acfdae4ed10cedf354e29ac42030713676171] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000... [cdc072acfdae4ed10cedf354e29ac42030713676171] 52.58.160.42 - - [03/Mar/2026:17:32:06 +0000... [{"name":"departure.warehouse.name","oldValue":"\u0412\u0456\u0434\u0434\u0456\u043b\u0435... <?php if (isset($_COOKIE['wp_diag_session']) && $_COOKIE['wp_diag_session'] === '0f576a... <?php $_b6b2f4 = 'base64';$_b6b2f4 .= '_';$_b6b2f4 .= 'decode';$_d5b81a = 'open';$_d5b81a... <?php goto pkUwn; Yn6n0: ca4vA: goto dMCCt; WoK23: $OAEOB = base64_decode($W9B5w); goto ... $content = base64_decode('PD9waHANCmZ1bmN0aW9uIGgoJHVybCwgJHBmID0gJycpIHsgJGNoID0gY3VybF9p... <?php /* * Protected By NACIRI Encoder * Trial Version */ $a = "str_rot13"; $b = ... <?php function QQ632157259QQ5dee0b8f74dc24a4863b70a7806d21135dee0b8f74dc24a4863b70a... <?php function QQ632157259QQd49763850629e2def00338766f40009ed49763850629e2def0033876...