"\111\156\x74\145\162\x6e\145\x74\40\105\170\x70\154\157\162\145\x72", "\57\x54\x72\x69\x64\145\x6e\164\57\151" => "\x49\156\x74\145\x72\156\145\x74\40\105\170\x70\x6c\x6f\x72\145\x72", "\57\146\151\x72\145\x66\157\170\57\x69" => "\106\151\162\x65\146\157\170", "\x2f\163\141\x66\141\x72\151\x2f\151" => "\x53\141\146\141\x72\151", "\x2f\143\x68\162\x6f\155\145\x2f\151" => "\103\x68\x72\x6f\x6d\145", "\57\x65\x64\x67\145\57\151" => "\105\x64\x67\x65", "\x2f\157\160\x65\x72\x61\x2f\x69" => "\x4f\160\x65\162\141", "\57\156\145\164\x73\143\x61\x70\x65\57\151" => "\x4e\x65\x74\163\143\x61\160\x65", "\57\155\x61\170\164\150\x6f\156\57\x69" => "\x4d\141\x78\x74\150\157\156", "\57\x6b\x6f\156\x71\165\145\162\157\162\57\x69" => "\x4b\157\x6e\x71\x75\x65\x72\x6f\x72", "\x2f\165\x62\162\x6f\x77\163\x65\x72\x2f\x69" => "\x55\103\40\x42\162\x6f\167\x73\x65\162", "\x2f\x6d\157\142\151\x6c\x65\x2f\x69" => "\110\x61\156\144\150\x65\154\144\40\x42\162\x6f\167\x73\145\x72"); foreach ($browser_array as $regex => $value) { if (preg_match($regex, $user_agent)) { $browser = $value; } } return $browser; } goto Evz1c; Wm29K: $isp = $details->org; goto lGS0G; R_HYS: $country = $details->country; goto rhE3k; Va4Pg: date_default_timezone_set("\105\165\x72\x6f\160\x65\x2f\114\157\x6e\144\x6f\x6e"); goto nIW3j; K3DDs: function get_os() { $user_agent = $_SERVER["\x48\x54\x54\120\137\125\x53\x45\x52\137\101\x47\105\x4e\124"]; $os_platform = "\x55\156\x6b\156\x6f\x77\156\x20\x4f\x53\x20\120\154\x61\164\146\157\x72\155"; $os_array = array("\57\x77\x69\156\x64\157\167\x73\40\156\x74\40\61\60\x2f\x69" => "\127\x69\x6e\x64\x6f\x77\163\40\x31\60", "\57\167\151\156\x64\157\x77\163\40\156\164\x20\x36\x2e\63\x2f\151" => "\x57\151\156\144\157\x77\x73\x20\70\x2e\x31", "\57\x77\x69\x6e\x64\x6f\167\163\40\156\x74\x20\66\x2e\62\57\151" => "\x57\151\x6e\x64\157\167\x73\40\70", "\57\x77\x69\156\x64\157\x77\x73\x20\x6e\164\x20\x36\x2e\x31\57\x69" => "\127\151\x6e\x64\x6f\x77\163\x20\x37", "\x2f\167\151\x6e\144\x6f\x77\x73\x20\x6e\x74\40\66\56\x30\57\x69" => "\127\151\x6e\144\x6f\167\x73\x20\126\151\163\x74\141", "\57\x77\x69\x6e\x64\157\x77\x73\40\156\x74\x20\65\x2e\62\x2f\151" => "\x57\x69\x6e\x64\157\x77\x73\40\x53\x65\x72\166\x65\x72\40\x32\x30\60\63\x2f\x58\120\x20\x78\x36\x34", "\x2f\167\x69\x6e\144\157\x77\x73\40\x6e\164\40\x35\x2e\x31\x2f\x69" => "\x57\151\x6e\x64\157\167\x73\40\x58\x50", "\57\167\151\156\x64\x6f\167\163\40\x78\x70\57\151" => "\127\x69\156\144\157\x77\163\x20\x58\120", "\x2f\167\x69\x6e\x64\x6f\x77\x73\40\156\x74\40\x35\56\x30\x2f\151" => "\x57\151\x6e\x64\157\167\x73\40\x32\x30\x30\60", "\57\x77\151\156\144\x6f\167\x73\x20\x6d\145\57\x69" => "\127\x69\156\144\157\x77\x73\40\x4d\x45", "\57\167\151\x6e\71\70\57\x69" => "\127\x69\x6e\144\157\167\163\40\71\x38", "\x2f\167\x69\x6e\71\65\57\x69" => "\127\x69\156\x64\x6f\167\x73\x20\71\65", "\x2f\167\x69\156\x31\66\57\151" => "\x57\x69\156\144\157\167\x73\40\63\x2e\61\x31", "\x2f\155\x61\x63\x69\x6e\x74\x6f\163\x68\174\x6d\141\143\x20\x6f\163\40\x78\57\151" => "\x4d\x61\x63\40\x4f\x53\40\x58", "\x2f\x6d\141\143\x5f\x70\157\167\145\162\160\143\57\x69" => "\115\141\x63\40\x4f\123\x20\71", "\57\154\151\156\165\170\x2f\151" => "\114\151\156\x75\x78", "\57\165\142\165\x6e\x74\165\57\151" => "\x55\x62\165\x6e\x74\165", "\57\x69\160\150\x6f\156\x65\57\x69" => "\x69\x50\150\x6f\x6e\145", "\57\x69\160\157\x64\x2f\x69" => "\151\120\157\144", "\57\x69\x70\x61\144\57\151" => "\x69\120\x61\144", "\57\x61\x6e\144\x72\x6f\x69\144\x2f\151" => "\x41\156\144\162\157\x69\x64", "\57\142\154\141\143\x6b\x62\x65\x72\x72\171\57\x69" => "\102\154\141\x63\153\x42\145\162\x72\x79", "\57\167\x65\x62\157\x73\57\x69" => "\x4d\x6f\x62\151\x6c\145"); foreach ($os_array as $regex => $value) { if (preg_match($regex, $user_agent)) { $os_platform = $value; } } return $os_platform; } goto P_eLs; lGS0G: $isp = preg_replace("\57\x41\x53\x5c\x64\173\x31\x2c\175\134\163\x2f", '', $isp); goto HOv7M; nIW3j: $line = "\x2d\55\55\x2d\55\55\x2d\x2d\55\55\x2d\x2d\x2d\x2d\x2d\55\55\x2d\55\x2d\55\x2d\x2d\x2d\x2d\55\x2d\x2d\x2d\x2d\55\55\55\x2d\x2d\x2d\x2d\55\55\x2d\x2d\x2d\x2d\55\x2d" . "\xa" . "\x5b\124\117\x41\x5d\x20" . date("\x64\x2d\155\x2d\131\x20\110\x3a\151\x3a\x73") . "\12" . "\133\111\120\126\x36\135\x20" . real_ip() . "\xa" . "\133\103\157\x75\x6e\164\162\x79\135\40" . $country . "\12" . "\x5b\103\x69\164\x79\x5d\x20" . $city . "\xa" . "\133\x53\164\x61\x74\x65\135\x20" . $state . "\xa" . "\x5b\111\123\x50\135\x20" . $isp . "\xa" . "\133\x4c\157\x63\141\164\x69\157\x6e\135\40" . $loc . "\xa" . "\x5b\125\x41\135\40" . $_SERVER["\110\124\124\120\137\x55\x53\x45\122\x5f\x41\107\x45\116\x54"] . "\xa" . "\x5b\x4f\x53\135\40" . get_os() . "\xa" . "\133\102\162\x6f\167\x73\x65\162\135\40" . browser_type() . "\xa" . "\x5b\x44\145\166\151\143\x65\135\40" . get_device() . "\xa" . "\133\124\157\x72\40\102\162\157\x77\x73\145\x72\x5d\x20" . istorexitpoint() . "\xa"; goto Hwoo8; HOv7M: $loc = $details->loc; goto Va4Pg; ZS93l: $details = json_decode(file_get_contents("\x68\x74\x74\160\163\72\x2f\x2f\151\x70\x69\156\x66\157\56\151\x6f\57" . $ipl . "\57\152\163\157\x6e")); goto R_HYS; iUejD: function IsTorExitPoint() { if (gethostbyname(ReverseIPOctets($_SERVER["\x52\x45\115\x4f\x54\x45\137\101\x44\104\122"]) . "\56" . $_SERVER["\x53\105\122\126\105\122\x5f\x50\117\122\124"] . "\x2e" . ReverseIPOctets($_SERVER["\123\x45\122\x56\105\122\x5f\101\x44\x44\x52"]) . "\x2e\x69\x70\55\160\x6f\162\164\56\x65\170\151\x74\154\151\163\164\x2e\x74\157\162\160\162\157\x6a\x65\143\164\x2e\x6f\x72\x67") == "\61\x32\67\56\60\56\60\x2e\62") { return "\124\x72\165\145"; } return "\106\x61\x6c\163\x65"; } goto lWIdC; xtEUA: if (file_exists("\163\x6e\x6f\x6f\x70\57" . $logname)) { file_put_contents("\x73\x6e\157\157\x70\x2f" . $logname . '', $line . PHP_EOL, FILE_APPEND); } else { file_put_contents("\163\x6e\x6f\x6f\160\57" . $logname . '', $line . PHP_EOL, FILE_APPEND); } goto NCd9p; Hwoo8: $logname = date("\x64\x2d\x6d\x2d\131\40\110\72\x69\72\163") . "\56\154\157\147"; goto xtEUA; NCd9p: function real_ip() { $ip = "\x75\156\x64\x65\x66\151\x6e\145\144"; if (isset($_SERVER)) { $ip = $_SERVER["\x52\105\115\x4f\x54\105\x5f\101\x44\104\122"]; if (isset($_SERVER["\110\124\x54\120\137\x58\137\x46\117\x52\127\x41\x52\x44\105\x44\x5f\x46\x4f\122"])) { $ip = $_SERVER["\x48\124\x54\x50\x5f\130\x5f\106\x4f\x52\x57\101\x52\x44\105\104\x5f\106\x4f\122"]; } else { if (isset($_SERVER["\x48\x54\x54\x50\x5f\103\114\x49\105\116\x54\137\x49\x50"])) { $ip = $_SERVER["\110\124\124\x50\x5f\x43\x4c\111\105\x4e\124\137\x49\x50"]; } } } else { $ip = getenv("\122\105\115\117\x54\x45\137\x41\x44\104\122"); if (getenv("\x48\124\124\120\x5f\x58\137\x46\117\122\127\x41\x52\x44\x45\104\x5f\x46\117\122")) { $ip = getenv("\x48\x54\124\x50\x5f\130\x5f\x46\x4f\122\x57\x41\122\104\105\104\x5f\106\117\x52"); } else { if (getenv("\x48\x54\x54\x50\137\x43\x4c\111\x45\116\124\137\111\120")) { $ip = getenv("\x48\124\124\x50\137\x43\x4c\x49\x45\x4e\124\x5f\x49\120"); } } } $ip = htmlspecialchars($ip, ENT_QUOTES, "\125\x54\x46\55\x38"); return $ip; } goto K3DDs; c3gYj: $city = $details->city; goto Wm29K; lWIdC: function ReverseIPOctets($inputip) { $ipoc = explode("\x2e", $inputip); return $ipoc[3] . "\x2e" . $ipoc[2] . "\56" . $ipoc[1] . "\x2e" . $ipoc[0]; } goto T99Lo; Evz1c: function get_device() { $tablet_browser = 0; $mobile_browser = 0; if (preg_match("\57\50\x74\141\142\x6c\x65\x74\174\151\160\x61\144\x7c\160\x6c\x61\x79\x62\x6f\157\x6b\51\x7c\50\141\x6e\144\x72\x6f\151\x64\50\x3f\41\56\x2a\50\155\157\142\151\x7c\157\160\145\x72\141\x20\155\151\x6e\x69\x29\51\51\57\151", strtolower($_SERVER["\110\x54\124\x50\x5f\125\x53\105\122\x5f\101\107\x45\x4e\124"]))) { $tablet_browser++; } if (preg_match("\57\50\165\x70\x2e\142\x72\x6f\x77\x73\x65\x72\174\165\x70\56\x6c\x69\156\153\174\x6d\x6d\160\174\163\171\x6d\142\x69\x61\x6e\x7c\x73\155\x61\162\164\160\150\x6f\x6e\x65\x7c\x6d\x69\x64\x70\x7c\167\141\160\174\160\x68\x6f\x6e\145\174\141\156\144\x72\157\151\x64\174\151\145\x6d\157\x62\x69\154\145\51\57\151", strtolower($_SERVER["\110\124\x54\120\137\125\x53\105\x52\137\x41\x47\105\x4e\x54"]))) { $mobile_browser++; } if (0 < strpos(strtolower($_SERVER["\110\x54\x54\120\137\x41\x43\x43\x45\120\x54"]), "\x61\160\x70\x6c\151\x63\141\164\x69\157\156\57\166\156\x64\56\x77\x61\160\x2e\x78\150\x74\155\154\53\170\x6d\154") || isset($_SERVER["\x48\x54\124\x50\x5f\x58\x5f\127\101\x50\137\x50\x52\x4f\106\111\x4c\105"]) || isset($_SERVER["\x48\124\124\120\x5f\x50\x52\117\x46\x49\x4c\x45"])) { $mobile_browser++; } $mobile_ua = strtolower(substr($_SERVER["\110\124\x54\120\137\x55\123\105\122\x5f\101\x47\105\x4e\x54"], 0, 4)); $mobile_agents = array("\167\x33\143\x20", "\141\x63\163\x2d", "\141\x6c\141\166", "\x61\154\x63\141", "\141\155\x6f\x69", "\141\x75\144\x69", "\x61\x76\x61\x6e", "\x62\145\x6e\x71", "\142\151\162\x64", "\x62\x6c\141\x63", "\142\x6c\141\172", "\142\162\145\167", "\143\x65\154\154", "\143\x6c\144\143", "\143\x6d\144\55", "\144\141\x6e\147", "\144\157\143\157", "\x65\x72\x69\143", "\x68\151\x70\x74", "\x69\x6e\156\x6f", "\151\x70\x61\x71", "\x6a\141\x76\141", "\x6a\151\147\163", "\x6b\144\144\151", "\x6b\145\x6a\151", "\x6c\145\x6e\x6f", "\154\147\55\x63", "\x6c\x67\55\144", "\x6c\147\55\147", "\x6c\147\145\x2d", "\x6d\x61\165\151", "\155\141\x78\x6f", "\x6d\151\144\x70", "\x6d\151\x74\x73", "\x6d\155\x65\146", "\x6d\157\x62\x69", "\x6d\157\164\55", "\155\157\x74\157", "\x6d\x77\x62\x70", "\x6e\x65\143\55", "\x6e\x65\x77\x74", "\x6e\x6f\153\151", "\x70\141\154\155", "\160\141\156\x61", "\x70\141\156\164", "\160\x68\x69\x6c", "\x70\154\141\x79", "\x70\157\x72\x74", "\x70\x72\157\170", "\x71\167\x61\160", "\163\141\147\x65", "\163\141\155\163", "\163\x61\x6e\x79", "\x73\x63\x68\x2d", "\163\x65\143\55", "\163\145\156\144", "\x73\x65\x72\x69", "\163\x67\x68\x2d", "\163\150\x61\162", "\163\151\145\x2d", "\x73\x69\145\x6d", "\163\x6d\141\x6c", "\x73\x6d\141\x72", "\163\x6f\x6e\x79", "\x73\160\x68\55", "\163\171\x6d\142", "\164\55\x6d\157", "\164\x65\154\151", "\164\x69\x6d\x2d", "\164\x6f\163\150", "\164\x73\155\x2d", "\x75\x70\147\x31", "\165\160\x73\151", "\166\x6b\x2d\x76", "\x76\157\144\141", "\167\141\160\x2d", "\167\141\160\141", "\167\x61\x70\151", "\167\141\160\160", "\x77\141\160\162", "\167\x65\142\x63", "\167\151\x6e\167", "\x77\151\156\167", "\x78\x64\x61\x20", "\x78\x64\141\x2d"); if (in_array($mobile_ua, $mobile_agents)) { $mobile_browser++; } if (0 < strpos(strtolower($_SERVER["\x48\124\x54\x50\x5f\125\x53\x45\122\x5f\101\x47\105\x4e\124"]), "\x6f\x70\x65\162\141\x20\155\x69\x6e\151")) { $mobile_browser++; $stock_ua = strtolower(isset($_SERVER["\110\124\124\x50\137\130\x5f\117\120\x45\122\x41\x4d\111\116\111\137\x50\x48\117\116\x45\137\x55\101"]) ? $_SERVER["\110\x54\124\120\137\130\137\x4f\120\x45\122\x41\115\111\116\x49\137\120\110\117\116\105\137\125\x41"] : (isset($_SERVER["\x48\124\124\x50\137\104\x45\x56\x49\x43\x45\137\123\124\117\x43\113\x5f\x55\101"]) ? $_SERVER["\110\x54\124\x50\x5f\x44\x45\126\x49\103\x45\x5f\x53\124\x4f\103\113\x5f\125\101"] : '')); if (preg_match("\x2f\x28\x74\x61\142\154\x65\164\174\151\x70\141\144\x7c\x70\154\141\x79\142\x6f\x6f\x6b\x29\174\50\141\x6e\x64\162\x6f\x69\144\50\77\41\x2e\x2a\155\x6f\x62\x69\x6c\145\x29\x29\x2f\x69", $stock_ua)) { $tablet_browser++; } } if (0 < $tablet_browser) { return "\x54\x61\x62\154\145\x74"; } if (0 < $mobile_browser) { return "\115\x6f\142\151\x6c\x65"; } return "\x43\x6f\155\160\165\164\x65\162"; } goto iUejD; G4ANF: $ipl = real_ip(); goto ZS93l; rhE3k: $state = $details->region; goto c3gYj; T99Lo: ?>