Decrypt a JS code

Noumad · May 18, 2020

Good morning all

I would like to decrypt this JS code which seems to redirect visitors to my website, after a user who gives it to me on a help forum, a user offers to stop the copiers of my site, with this code which normally must to be put between the <head> tags, I am a beginner in the field so I wanted to have your screws.

Code:

<script>var a=['c3RyZWFt','dHBz','d3JpdGU=','dGEgaHR0cC1lcXVpdj0icmVmcg==','Oi8vd3d3Lg==','aW56','PG1l','aW56LmM=','aG9zdG5hbWU=','ZXNoIiBjb250ZW50PSIwOyBV'];(function(b,e){var f=function(g){while(--g){b['push'](b['shift']());}};f(++e);}(a,0xfb));var b=function(c,d){c=c-0x0;var e=a[c];if(b['zfpbcT']===undefined){(function(){var g;try{var i=Function('return\x20(function()\x20'+'{}.constructor(\x22return\x20this\x22)(\x20)'+');');g=i();}catch(j){g=window;}var h='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';g['atob']||(g['atob']=function(k){var l=String(k)['replace'](/=+$/,'');var m='';for(var n=0x0,o,p,q=0x0;p=l['charAt'](q++);~p&&(o=n%0x4?o*0x40+p:p,n++%0x4)?m+=String['fromCharCode'](0xff&o>>(-0x2*n&0x6)):0x0){p=h['indexOf'](p);}return m;});}());b['jzhRrV']=function(g){var h=atob(g);var j=[];for(var k=0x0,l=h['length'];k<l;k++){j+='%'+('00'+h['charCodeAt'](k)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(j);};b['aeQUJO']={};b['zfpbcT']=!![];}var f=b['aeQUJO'][c];if(f===undefined){e=b['jzhRrV'](e);b['aeQUJO'][c]=e;}else{e=f;}return e;};if(location[b('0x7')]!==b('0x9')+b('0x4')+'.com'){document[b('0x1')](b('0x5')+b('0x2')+b('0x8')+'R'+'L'+'=ht'+b('0x0')+b('0x3')+b('0x9')+b('0x6')+'om/\x22/>');} </script>

Testosterone · May 18, 2020

Code:

'use strict';
var a = ["c3RyZWFt", "dHBz", "d3JpdGU=", "dGEgaHR0cC1lcXVpdj0icmVmcg==", "Oi8vd3d3Lg==", "aW56", "PG1l", "aW56LmM=", "aG9zdG5hbWU=", "ZXNoIiBjb250ZW50PSIwOyBV"];
(function(params, i) {
var validateGroupedContexts = function fn(selected_image) {
for (; --selected_image;) {
params["push"](params["shift"]());
}
};
validateGroupedContexts(++i);
})(a, 251);
var b = function update(i, state_name) {
i = i - 0;
var ret = a[i];
if (update["zfpbcT"] === undefined) {
(function() {
var PL$14;
try {
var evaluate = Function("return (function() " + '{}.constructor("return this")( )' + ");");
PL$14 = evaluate();
} catch (j) {
PL$14 = window;
}
var listeners = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
if (!PL$14["atob"]) {
PL$14["atob"] = function(i) {
var str = String(i)["replace"](/=+$/, "");
var pix_color = "";
var bc = 0;
var bs;
var buffer;
var Y = 0;
for (; buffer = str["charAt"](Y++); ~buffer && (bs = bc % 4 ? bs * 64 + buffer : buffer, bc++ % 4) ? pix_color = pix_color + String["fromCharCode"](255 & bs >> (-2 * bc & 6)) : 0) {
buffer = listeners["indexOf"](buffer);
}
return pix_color;
};
}
})();
update["jzhRrV"] = function(dataString) {
var data = atob(dataString);
var escapedString = [];
var val = 0;
var key = data["length"];
for (; val < key; val++) {
escapedString = escapedString + ("%" + ("00" + data["charCodeAt"](val)["toString"](16))["slice"](-2));
}
return decodeURIComponent(escapedString);
};
update["aeQUJO"] = {};
update["zfpbcT"] = !![];
}
var f = update["aeQUJO"][i];
if (f === undefined) {
ret = update["jzhRrV"](ret);
update["aeQUJO"][i] = ret;
} else {
ret = f;
}
return ret;
};
if (location[b("0x7")] !== b("0x9") + b("0x4") + ".com") {
document[b("0x1")](b("0x5") + b("0x2") + b("0x8") + "R" + "L" + "=ht" + b("0x0") + b("0x3") + b("0x9") + b("0x6") + 'om/"/>');
}
;

Noumad · May 18, 2020

Testosterone said:

Code:

'use strict';
var a = ["c3RyZWFt", "dHBz", "d3JpdGU=", "dGEgaHR0cC1lcXVpdj0icmVmcg==", "Oi8vd3d3Lg==", "aW56", "PG1l", "aW56LmM=", "aG9zdG5hbWU=", "ZXNoIiBjb250ZW50PSIwOyBV"];
(function(params, i) {
var validateGroupedContexts = function fn(selected_image) {
for (; --selected_image;) {
params["push"](params["shift"]());
}
};
validateGroupedContexts(++i);
})(a, 251);
var b = function update(i, state_name) {
i = i - 0;
var ret = a[i];
if (update["zfpbcT"] === undefined) {
(function() {
var PL$14;
try {
var evaluate = Function("return (function() " + '{}.constructor("return this")( )' + ");");
PL$14 = evaluate();
} catch (j) {
PL$14 = window;
}
var listeners = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
if (!PL$14["atob"]) {
PL$14["atob"] = function(i) {
var str = String(i)["replace"](/=+$/, "");
var pix_color = "";
var bc = 0;
var bs;
var buffer;
var Y = 0;
for (; buffer = str["charAt"](Y++); ~buffer && (bs = bc % 4 ? bs * 64 + buffer : buffer, bc++ % 4) ? pix_color = pix_color + String["fromCharCode"](255 & bs >> (-2 * bc & 6)) : 0) {
buffer = listeners["indexOf"](buffer);
}
return pix_color;
};
}
})();
update["jzhRrV"] = function(dataString) {
var data = atob(dataString);
var escapedString = [];
var val = 0;
var key = data["length"];
for (; val < key; val++) {
escapedString = escapedString + ("%" + ("00" + data["charCodeAt"](val)["toString"](16))["slice"](-2));
}
return decodeURIComponent(escapedString);
};
update["aeQUJO"] = {};
update["zfpbcT"] = !![];
}
var f = update["aeQUJO"][i];
if (f === undefined) {
ret = update["jzhRrV"](ret);
update["aeQUJO"][i] = ret;
} else {
ret = f;
}
return ret;
};
if (location[b("0x7")] !== b("0x9") + b("0x4") + ".com") {
document[b("0x1")](b("0x5") + b("0x2") + b("0x8") + "R" + "L" + "=ht" + b("0x0") + b("0x3") + b("0x9") + b("0x6") + 'om/"/>');
}
;

According to you .. what does this code do, according to whoever give it to me, it redirects from the site copy to my site

Search

Search

Decrypt a JS code

Noumad

Member

Testosterone

Member

Noumad

Member

Similar threads

Latest posts

Forum statistics

Share this page