Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />
<meta name="robots" content="noindex, nofollow" />


<script type="text/javascript" charset="utf-8" data-cfasync="false">eval(decodeURIComponent(escape('(function(){
        var a = function() {try{return !!window.addEventListener} catch(e) {return !1} },
        b = function(b, c) {a() ? document.addEventListener("DOMContentLoaded", b, c) : document.attachEvent("onreadystatechange", b)};
        b(function(){
                        var now = new Date();
                        var time = now.getTime();
                        time += 300 * 1000;
                        now.setTime(time);
                        document.cookie = '8sX-4-eKhl4dY1YyXDC1eqKAWpo=x6NjPsT7R8cXNLwjYNgt3MWwgwo' + '; expires=' + 'Fri, 21-Feb-25 16:03:25 GMT' + '; path=/';
                        //javascript puzzle for browser to figure out to get answer
                        if(!window._phantom || !window.callPhantom){
if(!window.__phantomas){
if(!window.Buffer){
if(!window.emit){
if(!window.spawn){
if(!window.webdriver){
if(!window.domAutomation || !window.domAutomationController){
if(!window.document.documentElement.getAttribute("webdriver")){

if(!/bot|curl|kodi|xbmc|wget|urllib|python|winhttp|httrack|alexa|ia_archiver|facebook|twitter|linkedin|pingdom/i.test(navigator.userAgent)){

/*if(document.cookie.match(/^(?:.*;)?\s*[0-9a-f]{32}\s*=\s*([^;]+)(?:.*)?$/)){*/
                        var _00_3=parseInt("20250219", 10) + parseInt("19022025", 10);
                        

}

}
}
}
}
}
}
}
}
                        //end javascript puzzle
                        var xhttp = new XMLHttpRequest();
                        xhttp.onreadystatechange = function() {
                                if (xhttp.readyState === 4){
                 const firstForm = document.querySelector('form');

// Check if the form exists and if it has input elements
if (firstForm) {
  const inputFields = firstForm.querySelectorAll('input');
  
  if (inputFields.length > 0) {
                                                    document.forms[0].submit();
  } else {
                   if (!window.location.hash) {
                                           window.location.href = window.location.href;
                                        } else {
                                            window.location.reload();
                                        }
  }
} else {
                 if (!window.location.hash) {
                                           window.location.href = window.location.href;
                                        } else {
                                            window.location.reload();
                                        }
}
                                }
                        };
                        xhttp.open("POST", "/prg", true);
                        xhttp.setRequestHeader('GWFFNsTRyuQcKo7A9YysgS9kxE', _00_3); //make the answer what ever the browser figures it out to be
                        xhttp.setRequestHeader('X-Requested-with', 'XMLHttpRequest');
                        xhttp.setRequestHeader('X-Requested-TimeStamp', '');
                        xhttp.setRequestHeader('X-Requested-TimeStamp-Expire', '');
                        xhttp.setRequestHeader('X-Requested-TimeStamp-Combination', '');
                        xhttp.setRequestHeader('X-Requested-Type', 'GET');
                        xhttp.setRequestHeader('X-Requested-Type-Combination', 'GET'); //Encrypted for todays date
                        xhttp.withCredentials = true;
var sw, sh, ww, wh, v;
sw = screen.width;
sh = screen.height;
ww = window.innerWidth || document.documentElement.clientWidth || document.body.clientWidth || 0;
wh = window.innerHeight || document.documentElement.clientHeight || document.body.clientHeight || 0;
if ((sw == ww) && (sh == wh)) {
    v = true;
    if (!(ww % 200) && (wh % 100)) {
        v = true;
    }
}
//v = true; //test var nulled out used for debugging purpose
if (v == true) {
        xhttp.setRequestHeader('hNxqqzHQ6guMu7cgwa7eOf7-e8', 'tjSUik8rq2yzjWlZB4n6JupZI');
}
                        xhttp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
                        xhttp.send("name1=Henry&name2=Ford");
        }, false);
})();
')));</script></head>
<body><form method='POST'></form><script>(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'914fba001a1a1f40',t:'MTc0MDA2NzQwNS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script></body>
</html>


© 2023 Quttera Ltd. All rights reserved.