Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

function() {
    'use strict';
    const RexBp = new RegExp(/^\?([^&]+)/);
    const bp = query => document.querySelector(query);
    const elementExists = query => bp(query) !== null;
    const domainCheck = domains => new RegExp(domains).test(location.host);
    function click(query) {bp(query).click();}
    function submit(query) {bp(query).submit();}
    function clickIfElementExists(query, timeInSec = 1, funcName = 'setTimeout') {if (elementExists(query)) {window[funcName](function() {click(query);}, timeInSec * 1000);}}
    function Captchasub(query, act = 'submit', timeInSec = 0.5) {if (elementExists(query)) {var timer = setInterval(function() {if (window.grecaptcha && !!window.grecaptcha.getResponse?.()) {bp(query)[act](); clearInterval(timer);}}, timeInSec * 1000);}}
    function Captchaklik(query, act = 'click', timeInSec = 1) {if (elementExists(query)) {var timer = setInterval(function() {if (window.grecaptcha && !!window.grecaptcha.getResponse?.()) {bp(query)[act](); clearInterval(timer);}}, timeInSec * 1000);}}
    function redirect(url, blog = true) {location = blog ? 'https://shortlinkbypassed.blogspot.com/?url=' + url : url;}
    function BypassedByBloggerPemula(re_domain, data, blog) { if (!re_domain.test(location.host)) return;
        if (typeof data === 'function') return data();
        if (Array.isArray(data)) data = {'/': data};
        if (!(location.pathname in data)) return;
        const [key, value] = data[location.pathname];
        if (typeof key === 'object' && key.test(location.search)) return redirect(value + RegExp.$1, blog);
        const searchParams = new URLSearchParams(location.search);
        if (searchParams.has(key)) redirect(value + searchParams.get(key), blog);}
    function BloggerPemula(domains, data, url, blog, use = null) {const searchParams = new URLSearchParams(location.search);
        if (!domainCheck(domains)) return;
        if (typeof data === 'string' && data.split(',').every(p => searchParams.has(p))) {use ??= data.split(',')[0];
            redirect(url + searchParams.get(use), blog);} else if (typeof data === 'object') {const o = data[location.pathname];
        if (!o) return; BloggerPemula(domains, ...o);}}
    function meta(href) {document.head.appendChild(Object.assign(document.createElement('meta'), { name: 'referrer', content: 'origin'}));
        Object.assign(document.createElement('a'), {href}).click();}
    function waitForElm(query, callback) {setTimeout(function() {if (elementExists(query)) {callback(bp(query));} else {waitForElm(query, callback);}}, 1000);}
    function notify(txt, width = 780) { const m = document.createElement('div');
             m.style.padding = '5px'; m.style.zIndex = 99999999; m.style.position = 'fixed'; m.style.boxSizing = 'border-box';
             m.style.width = `${width}px`; m.style.top = '100px'; m.style.left = `${innerWidth / 2 - width / 2}px`; m.style.font = 'normal bold 20px sans-serif';
             m.style.backgroundColor = 'white'; m.innerText = txt; document.body.appendChild(m);}
    BloggerPemula('ffworld.xyz|doibihar.org', 'link', 'https://go.linkbnao.com/', false);
    BloggerPemula('sport4you.net|nadersoft7.com|manga2day.com|pickhopes.com|gam3ah.com|cars-1year.xyz|m4cut.com', 'link', '', false);
    const sl = (h => {switch (h.host) {
    case 'mobileprice.site': if (h.searchParams.has('alex')) { return 'https://msarzone.com/p/' + h.searchParams.get('alex');} break;
    case 'bestmobilenew.com': if (h.searchParams.has('get')) { return 'https://link2end.com/p/' + h.searchParams.get('get').substring(1);} break;
    case 'adlink.bitcomarket.net': if (h.searchParams.has('go')) { return 'https://adshorti.co/' + h.searchParams.get('go').substring(1);} break;
    case 'theconomy.me': case 'blog.medipost.org': if (h.pathname === '/' && /^\?([^&]+)/.test(h.search)) { meta('https://links.medipost.org/' + RegExp.$1);} break;
    default: break;} })(new URL(location.href)); if (sl) {location.href = sl; }
    BypassedByBloggerPemula(/adbtc.top/, function() {let count =0; setInterval(function(){if(bp("div.col.s4> a") && !bp("div.col.s4> a").className.includes("hide")){count = 0;bp("div.col.s4> a").click();}else{count = count + 1;}},5000);
    window.onbeforeunload = function() {if (unsafeWindow.myWindow) {unsafeWindow.myWindow.close();}if (unsafeWindow.coinwin) {let popc = unsafeWindow.coinwin;unsafeWindow.coinwin = {};popc.close();}};});
    BypassedByBloggerPemula(/dropz.xyz/, function() {if (window.location.href.includes('/captcha')&& !window.location.href.includes('/roll')) {}else if (window.location.href.includes('/site-friends')) {let windowName = "";let currentwindowOpenFunction = unsafeWindow.open;function newwindowOpenFunction(params1, params2) {if (!params2 || params2 == "_blank") {windowName = "popUpWindowMyDropz";} else {windowName = params2;} return currentwindowOpenFunction(params1, windowName);};unsafeWindow.open = newwindowOpenFunction;unsafeWindow.onbeforeunload = function() {currentwindowOpenFunction('', windowName).close();};
    function endsWithNumber(str){return isNaN(str.slice(-1)) ? false : true;}let clicked = false;setInterval(function(){for(let i=0; i< document.querySelectorAll(".btn.btn-info").length; i++){if(!clicked && !endsWithNumber(document.querySelectorAll(".btn.btn-info")[i].getAttribute('id')) && !document.querySelectorAll(".btn.btn-info")[i].innerText.includes("Submits")){document.querySelectorAll(".btn.btn-info")[i].click();break;}}},10000);} else {}});
    BypassedByBloggerPemula(/diudemy.com|freegamestops.com|maqal360.com|appsbull.com/, () =>{function strBetween(s,a,b) { return s.slice(s.indexOf(a)+a.length,s.indexOf(b));}window.setInterval(()=>{if ( bp(`#linkNext`) && bp(`body > script:nth-child(22)`).innerHTML.includes(`function time() {`)) {let str = bp(`body > script:nth-child(22)`).innerHTML;let xAction = strBetween(str,`form action="`,`/$`);let xRandom = strBetween(str,`" class="text-center `,`" method="POST"> <`);
    let xHashed = strBetween(str,`name="hashed" value="`,`"> <${xRandom}`);let xLinkNx = bp(`#linkNext`).value; if (xHashed != "") {let btn = `<form action="${xAction}/${xLinkNx}" class="text-center ${xRandom}" method="POST"><input type="hidden" name="hashed" value="${xHashed}"><${xRandom} id="next" onClick="${xRandom} ()" name="submit" class="blog_btn next_btn" >please Wait...</form>`;console.log(btn);bp(`#appended`).innerHTML = btn;bp(`.${xRandom}`).submit();} else console.log(`empty hashed value.`);bp(`a#next`).click();}}, 3500);});
    // Injecting from start document coded by @JustOlaf
    if (['techcyan.com', 'cryptoon.xyz'].indexOf(location.host) > -1){delete window.document.referrer; window.document.__defineGetter__('referrer', function () {return "https://google.com/";});}
    // Injecting from start document code by https://gist.github.com/lenivene
    if (['magybu.net', 'xervoo.net', 'hurirk.net', 'usfinf.net', 'eloism.net', 'neexulro.net'].indexOf(location.host) > -1){Object.defineProperty(window,"ysmm",{set:function(b){var a=b,c="",d="";for(b=0;b<a.length;b++)0==b%2?c+=a.charAt(b):d=a.charAt(b)+d;a=(c+d).split("");for(b=0;b<a.length;b++)if(!isNaN(a[b]))for(c=b+1;c<a.length;c++)isNaN(a[c])||(d=a[b]^a[c],10>d&&(a[b]=d),b=c,c=a.length);a=a.join("");a=window.atob(a);a=a.substring(a.length-(a.length-16));!(b=a=a.substring(0,a.length-16))||0!==b.indexOf("http://")&&0!==b.indexOf("https://")||("\x3c!--"),window.stop(),window.onbeforeunload=null,window.location=b);}}}
    // Injecting code from start and the end of document coded by @Konf
    if (['interactive', 'complete'].includes(document.readyState)) {onHtmlLoaded();} else {document.addEventListener('DOMContentLoaded', onHtmlLoaded);} function onHtmlLoaded() {if (['shortlinkbypassed.blogspot.com', 'shortlinkbypassed.blogspot.com'].indexOf(location.host) > -1){ } else { const listhide = document.querySelectorAll('#frame,.adb,#iframe,#particles-js,#canvas,.floawing-banner,#orquidea-slideup,.floating-banner,#wcfloatDiv4,#preloader,.vanta-canvas,.particles-js-canvas-el,#s65c,#ofc9,#overlay,#footerads,#d7b2,#_m_a_,#masthead_,.oulcsy,.sticky-bottom,.sticky-bottom1,.sticky-bottom2,.sticky-bottom3,.bElNbEFRL3JvbG89,.separator,html body iframe,html iframe,#cookie-pop,.vmyor,.tnjmvneldp,.full_post_area.rh-container,.sc-content-aside,#ofc9,.floawing-banner');
    for (const element of listhide) {element.remove();}}
    if (location.host === 'jardima.com'){ } else { const listj = document.querySelectorAll('.td-ss-main-content'); for (const element of listj) {element.remove();}}
    if (location.host === 'taiwancnan.com'){ } else { const listr = document.querySelectorAll('.blog-item'); for (const element of listr) {element.remove();}}
    if (location.host === 'up4cash.com'){ } else { const listre = document.querySelectorAll('.banner-inner'); for (const element of listre) {element.remove();}}
    // ============================================
    // Captcha Mode
    // ============================================
    let captchaMode = ['#_mform', '#userForm', '#link-view', '#frmprotect', '#ShortLinkId', '#submit-form', '#lview > form', '#file-captcha', '#btget > form', 'div#login form', 'F1', '#short-captcha-form', '#wpsafelink-landing', '.col-12 > form:nth-child(1)', '.col-md-4 > form:nth-child(1)', '.col-md-6 > form:nth-child(4)', '.contenido > form:nth-child(2)', '#main > div:nth-child(4) > form:nth-child(1)', 'div.col-md-12:nth-child(3) > form:nth-child(1)', '.content > div:nth-child(4) > form:nth-child(1)', '#showMe > center:nth-child(4) > form:nth-child(1)', '.sect > div:nth-child(1) > center:nth-child(7) > form:nth-child(1)', '#showMe > center:nth-child(1) > center:nth-child(4) > form:nth-child(1)', '#adb-not-enabled > div:nth-child(1) > div:nth-child(1) > div:nth-child(1) > div:nth-child(1) > div:nth-child(5) > form:nth-child(1)', 'button#continue.btn.btn-primary.btn-captcha', '.m-2.btn-captcha.btn-outline-primary.btn', '#yuidea-btn-before.yu-btn.yu-blue', '#yuidea-btn-after.yu-blue.yu-btn'];
    for (let i = 0; i < captchaMode.length; i++) {Captchasub(captchaMode[i]);}
    let klikMode = ['button#continue.btn.btn-primary.btn-captcha', '.m-2.btn-captcha.btn-outline-primary.btn', '#yuidea-btn-before.yu-btn.yu-blue', '#yuidea-btn-after.yu-blue.yu-btn'];
    for (let i = 0; i < klikMode.length; i++) {Captchaklik(klikMode[i]);}

function() {
    'use strict';
    const RexBp = new RegExp(/^\?([^&]+)/);
    const bp = query => document.querySelector(query);
    const elementExists = query => bp(query) !== null;
    const domainCheck = domains => new RegExp(domains).test(location.host);
    function click(query) {bp(query).click();}
    function submit(query) {bp(query).submit();}
    function clickIfElementExists(query, timeInSec = 1, funcName = 'setTimeout') {if (elementExists(query)) {window[funcName](function() {click(query);}, timeInSec * 1000);}}
    function Captchasub(query, act = 'submit', timeInSec = 0.5) {if (elementExists(query)) {var timer = setInterval(function() {if (window.grecaptcha && !!window.grecaptcha.getResponse?.()) {bp(query)[act](); clearInterval(timer);}}, timeInSec * 1000);}}
    function Captchaklik(query, act = 'click', timeInSec = 1) {if (elementExists(query)) {var timer = setInterval(function() {if (window.grecaptcha && !!window.grecaptcha.getResponse?.()) {bp(query)[act](); clearInterval(timer);}}, timeInSec * 1000);}}
    function redirect(url, blog = true) {location = blog ? 'https://shortlinkbypassed.blogspot.com/?url=' + url : url;}
    function BypassedByBloggerPemula(re_domain, data, blog) { if (!re_domain.test(location.host)) return;
        if (typeof data === 'function') return data();
        if (Array.isArray(data)) data = {'/': data};
        if (!(location.pathname in data)) return;
        const [key, value] = data[location.pathname];
        if (typeof key === 'object' && key.test(location.search)) return redirect(value + RegExp.$1, blog);
        const searchParams = new URLSearchParams(location.search);
        if (searchParams.has(key)) redirect(value + searchParams.get(key), blog);}
    function BloggerPemula(domains, data, url, blog, use = null) {const searchParams = new URLSearchParams(location.search);
        if (!domainCheck(domains)) return;
        if (typeof data === 'string' && data.split(',').every(p => searchParams.has(p))) {use ??= data.split(',')[0];
            redirect(url + searchParams.get(use), blog);} else if (typeof data === 'object') {const o = data[location.pathname];
        if (!o) return; BloggerPemula(domains, ...o);}}
    function meta(href) {document.head.appendChild(Object.assign(document.createElement('meta'), { name: 'referrer', content: 'origin'}));
        Object.assign(document.createElement('a'), {href}).click();}
    function waitForElm(query, callback) {setTimeout(function() {if (elementExists(query)) {callback(bp(query));} else {waitForElm(query, callback);}}, 1000);}
    function notify(txt, width = 780) { const m = document.createElement('div');
             m.style.padding = '5px'; m.style.zIndex = 99999999; m.style.position = 'fixed'; m.style.boxSizing = 'border-box';
             m.style.width = `${width}px`; m.style.top = '100px'; m.style.left = `${innerWidth / 2 - width / 2}px`; m.style.font = 'normal bold 20px sans-serif';
             m.style.backgroundColor = 'white'; m.innerText = txt; document.body.appendChild(m);}
    BloggerPemula('ffworld.xyz|doibihar.org', 'link', 'https://go.linkbnao.com/', false);
    BloggerPemula('sport4you.net|nadersoft7.com|manga2day.com|pickhopes.com|gam3ah.com|cars-1year.xyz|m4cut.com', 'link', '', false);
    const sl = (h => {switch (h.host) {
    case 'mobileprice.site': if (h.searchParams.has('alex')) { return 'https://msarzone.com/p/' + h.searchParams.get('alex');} break;
    case 'bestmobilenew.com': if (h.searchParams.has('get')) { return 'https://link2end.com/p/' + h.searchParams.get('get').substring(1);} break;
    case 'adlink.bitcomarket.net': if (h.searchParams.has('go')) { return 'https://adshorti.co/' + h.searchParams.get('go').substring(1);} break;
    case 'theconomy.me': case 'blog.medipost.org': if (h.pathname === '/' && /^\?([^&]+)/.test(h.search)) { meta('https://links.medipost.org/' + RegExp.$1);} break;
    default: break;} })(new URL(location.href)); if (sl) {location.href = sl; }
    BypassedByBloggerPemula(/adbtc.top/, function() {let count =0; setInterval(function(){if(bp("div.col.s4> a") && !bp("div.col.s4> a").className.includes("hide")){count = 0;bp("div.col.s4> a").click();}else{count = count + 1;}},5000);
    window.onbeforeunload = function() {if (unsafeWindow.myWindow) {unsafeWindow.myWindow.close();}if (unsafeWindow.coinwin) {let popc = unsafeWindow.coinwin;unsafeWindow.coinwin = {};popc.close();}};});
    BypassedByBloggerPemula(/dropz.xyz/, function() {if (window.location.href.includes('/captcha')&& !window.location.href.includes('/roll')) {}else if (window.location.href.includes('/site-friends')) {let windowName = "";let currentwindowOpenFunction = unsafeWindow.open;function newwindowOpenFunction(params1, params2) {if (!params2 || params2 == "_blank") {windowName = "popUpWindowMyDropz";} else {windowName = params2;} return currentwindowOpenFunction(params1, windowName);};unsafeWindow.open = newwindowOpenFunction;unsafeWindow.onbeforeunload = function() {currentwindowOpenFunction('', windowName).close();};
    function endsWithNumber(str){return isNaN(str.slice(-1)) ? false : true;}let clicked = false;setInterval(function(){for(let i=0; i< document.querySelectorAll(".btn.btn-info").length; i++){if(!clicked && !endsWithNumber(document.querySelectorAll(".btn.btn-info")[i].getAttribute('id')) && !document.querySelectorAll(".btn.btn-info")[i].innerText.includes("Submits")){document.querySelectorAll(".btn.btn-info")[i].click();break;}}},10000);} else {}});
    BypassedByBloggerPemula(/diudemy.com|freegamestops.com|maqal360.com|appsbull.com/, () =>{function strBetween(s,a,b) { return s.slice(s.indexOf(a)+a.length,s.indexOf(b));}window.setInterval(()=>{if ( bp(`#linkNext`) && bp(`body > script:nth-child(22)`).innerHTML.includes(`function time() {`)) {let str = bp(`body > script:nth-child(22)`).innerHTML;let xAction = strBetween(str,`form action="`,`/$`);let xRandom = strBetween(str,`" class="text-center `,`" method="POST"> <`);
    let xHashed = strBetween(str,`name="hashed" value="`,`"> <${xRandom}`);let xLinkNx = bp(`#linkNext`).value; if (xHashed != "") {let btn = `<form action="${xAction}/${xLinkNx}" class="text-center ${xRandom}" method="POST"><input type="hidden" name="hashed" value="${xHashed}"><${xRandom} id="next" onClick="${xRandom} ()" name="submit" class="blog_btn next_btn" >please Wait...</form>`;console.log(btn);bp(`#appended`).innerHTML = btn;bp(`.${xRandom}`).submit();} else console.log(`empty hashed value.`);bp(`a#next`).click();}}, 3500);});
    // Injecting from start document coded by @JustOlaf
    if (['techcyan.com', 'cryptoon.xyz'].indexOf(location.host) > -1){delete window.document.referrer; window.document.__defineGetter__('referrer', function () {return "https://google.com/";});}
    // Injecting from start document code by https://gist.github.com/lenivene
    if (['magybu.net', 'xervoo.net', 'hurirk.net', 'usfinf.net', 'eloism.net', 'neexulro.net'].indexOf(location.host) > -1){Object.defineProperty(window,"ysmm",{set:function(b){var a=b,c="",d="";for(b=0;b<a.length;b++)0==b%2?c+=a.charAt(b):d=a.charAt(b)+d;a=(c+d).split("");for(b=0;b<a.length;b++)if(!isNaN(a[b]))for(c=b+1;c<a.length;c++)isNaN(a[c])||(d=a[b]^a[c],10>d&&(a[b]=d),b=c,c=a.length);a=a.join("");a=window.atob(a);a=a.substring(a.length-(a.length-16));!(b=a=a.substring(0,a.length-16))||0!==b.indexOf("http://")&&0!==b.indexOf("https://")||("<!--"),window.stop(),window.onbeforeunload=null,window.location=b);}}}
    // Injecting code from start and the end of document coded by @Konf
    if (['interactive', 'complete'].includes(document.readyState)) {onHtmlLoaded();} else {document.addEventListener('DOMContentLoaded', onHtmlLoaded);} function onHtmlLoaded() {if (['shortlinkbypassed.blogspot.com', 'shortlinkbypassed.blogspot.com'].indexOf(location.host) > -1){ } else { const listhide = document.querySelectorAll('#frame,.adb,#iframe,#particles-js,#canvas,.floawing-banner,#orquidea-slideup,.floating-banner,#wcfloatDiv4,#preloader,.vanta-canvas,.particles-js-canvas-el,#s65c,#ofc9,#overlay,#footerads,#d7b2,#_m_a_,#masthead_,.oulcsy,.sticky-bottom,.sticky-bottom1,.sticky-bottom2,.sticky-bottom3,.bElNbEFRL3JvbG89,.separator,html body iframe,html iframe,#cookie-pop,.vmyor,.tnjmvneldp,.full_post_area.rh-container,.sc-content-aside,#ofc9,.floawing-banner');
    for (const element of listhide) {element.remove();}}
    if (location.host === 'jardima.com'){ } else { const listj = document.querySelectorAll('.td-ss-main-content'); for (const element of listj) {element.remove();}}
    if (location.host === 'taiwancnan.com'){ } else { const listr = document.querySelectorAll('.blog-item'); for (const element of listr) {element.remove();}}
    if (location.host === 'up4cash.com'){ } else { const listre = document.querySelectorAll('.banner-inner'); for (const element of listre) {element.remove();}}
    // ============================================
    // Captcha Mode
    // ============================================
    let captchaMode = ['#_mform', '#userForm', '#link-view', '#frmprotect', '#ShortLinkId', '#submit-form', '#lview > form', '#file-captcha', '#btget > form', 'div#login form', 'F1', '#short-captcha-form', '#wpsafelink-landing', '.col-12 > form:nth-child(1)', '.col-md-4 > form:nth-child(1)', '.col-md-6 > form:nth-child(4)', '.contenido > form:nth-child(2)', '#main > div:nth-child(4) > form:nth-child(1)', 'div.col-md-12:nth-child(3) > form:nth-child(1)', '.content > div:nth-child(4) > form:nth-child(1)', '#showMe > center:nth-child(4) > form:nth-child(1)', '.sect > div:nth-child(1) > center:nth-child(7) > form:nth-child(1)', '#showMe > center:nth-child(1) > center:nth-child(4) > form:nth-child(1)', '#adb-not-enabled > div:nth-child(1) > div:nth-child(1) > div:nth-child(1) > div:nth-child(1) > div:nth-child(5) > form:nth-child(1)', 'button#continue.btn.btn-primary.btn-captcha', '.m-2.btn-captcha.btn-outline-primary.btn', '#yuidea-btn-before.yu-btn.yu-blue', '#yuidea-btn-after.yu-blue.yu-btn'];
    for (let i = 0; i < captchaMode.length; i++) {Captchasub(captchaMode[i]);}
    let klikMode = ['button#continue.btn.btn-primary.btn-captcha', '.m-2.btn-captcha.btn-outline-primary.btn', '#yuidea-btn-before.yu-btn.yu-blue', '#yuidea-btn-after.yu-blue.yu-btn'];
    for (let i = 0; i < klikMode.length; i++) {Captchaklik(klikMode[i]);}



© 2023 Quttera Ltd. All rights reserved.