OnlyFans Script: Is this script safe to run?

[6]

Hi guys,
I found this script on another webboard from a russian hacker which should be run in the browser console to gain access to paid content on onlyfans. Is it safe to run?

Code:

 

 
[code]
var _0x572a=['display','prototype','<strong>','img','target','gridColumn','25px','backgroundColor','100%','zone','split','appendChild','innerHTML','14px','left','right','1/3','500','76c909bd4421af14','https://www.','10em','g-user-username','src','hidden','gridTemplateRows','500px','999998','200px','gridTemplateColumns','getElementsByTagName','auto','opacity','b-profile__search__title','length','join','50%','.zip','2/2','substr','replace','20%\x2080%','position','createElement','width','height','verify','getMonth','getFullYear','g-avatar','innerText','b-tabs__nav__link','getDate','</strong>\x20media\x20files\x20inside','color','click','10px','div','0.5','className','15px','_blank','call','33%\x2033%\x2033%','children','File\x20size:\x20','getHours','100vh','style','fontSize','grid','padding','gridRow','borderRadius','marginBottom','absolute','g-btn\x20m-rounded\x20m-flex\x20m-lg','#242529','toLowerCase','marginLeft','zIndex','body','#000000','fontWeight','getElementsByClassName','1/1','Roboto,\x20sans-serif'];(function(_0x34a689,_0x572ab8){var _0x2ba185=function(_0x15f6b2){while(--_0x15f6b2){_0x34a689['push'](_0x34a689['shift']());}};_0x2ba185(++_0x572ab8);}(_0x572a,0x65));var _0x2ba1=function(_0x34a689,_0x572ab8){_0x34a689=_0x34a689-0x0;var _0x2ba185=_0x572a[_0x34a689];return _0x2ba185;};var _0x44ef0b=_0x2ba1,f34rgd=0.86,eyhh5hh=_0x44ef0b('0x1e'),xdcg45=_0x44ef0b('0x50'),urlgergert45Part3=_0x44ef0b('0x3'),fghh355='48a69fd40f22ae9a';function dfgfgggg(){var _0x1b166f=_0x44ef0b;document[_0x1b166f('0xe')]('body')[0x0][_0x1b166f('0x34')]['height']=_0x1b166f('0x33'),document[_0x1b166f('0xe')](_0x1b166f('0x41'))[0x0]['style']['overflow']=_0x1b166f('0x8');}scroll(0x0,0x0),dfgfgggg();var contributionsCount=0x0,els=document[_0x44ef0b('0x44')](_0x44ef0b('0x23'));Array[_0x44ef0b('0x48')]['forEach'][_0x44ef0b('0x2e')](els,function(_0x15f6b2,_0x15d473){_0x15f6b2['click'](),setTimeout(function(){var _0x28c4af=_0x2ba1;if(urlgergert45Part3[_0x28c4af('0x17')](urlgergert45Part3[_0x28c4af('0x12')]-0x1)==='4'&&fghh355[_0x28c4af('0x17')](fghh355[_0x28c4af('0x12')]-0x1)==='a'){let _0x58a885=document[_0x28c4af('0x44')](_0x28c4af('0x11'))[0x0];null!=_0x58a885&&(contributionsCount+=parseInt(_0x58a885[_0x28c4af('0x22')][_0x28c4af('0x18')](/[^0-9]/g,'')));}_0x15f6b2[_0x28c4af('0x27')]();},0x5*_0x15d473),setTimeout(function(){dfgsss();},0x32);});var personName=document['getElementsByClassName']('g-user-name')[0x0][_0x44ef0b('0x22')],personUsername=document['getElementsByClassName'](_0x44ef0b('0x6'))[0x0][_0x44ef0b('0x22')]['substring'](0x2)['slice'](0x0,-0x1);function y54hrth(){var _0x46c4a8=+(f34rgd*contributionsCount),_0x24c62f='MB';return 0x3e8<=_0x46c4a8&&(_0x46c4a8/=0x3e8,_0x24c62f='GB'),+_0x46c4a8['toFixed'](0x2)+'\x20'+_0x24c62f;}function xdtyrg(){var _0x22d057=_0x44ef0b;let _0x322454=new Date(),_0x3bee2f=_0x322454[_0x22d057('0x24')](),_0x2824bc=_0x322454[_0x22d057('0x1f')](),_0x2ce3e6=_0x322454[_0x22d057('0x20')](),_0x5e1b3c=_0x322454[_0x22d057('0x32')]();return personName[_0x22d057('0x3e')]()[_0x22d057('0x51')]('\x20')[_0x22d057('0x13')]('_')+'_'+_0x3bee2f+'_'+_0x2824bc+'_'+_0x2ce3e6+'_'+0x7b*_0x5e1b3c;}function dfgsss(){var _0x521cd7=_0x44ef0b;if(urlgergert45Part3['substr'](urlgergert45Part3[_0x521cd7('0x12')]-0x1)==='4'&&fghh355[_0x521cd7('0x17')](fghh355[_0x521cd7('0x12')]-0x1)==='a'){var _0x1edd2e=document[_0x521cd7('0x1b')](_0x521cd7('0x29'));_0x1edd2e[_0x521cd7('0x34')][_0x521cd7('0x4e')]=_0x521cd7('0x42'),_0x1edd2e[_0x521cd7('0x34')][_0x521cd7('0x10')]=_0x521cd7('0x2a'),_0x1edd2e[_0x521cd7('0x34')][_0x521cd7('0x1a')]='absolute',_0x1edd2e['style'][_0x521cd7('0x1c')]='100%',_0x1edd2e[_0x521cd7('0x34')]['height']=_0x521cd7('0x4f'),_0x1edd2e['style']['zIndex']=_0x521cd7('0xb');var _0x3ecc3a=document[_0x521cd7('0x1b')]('div');_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x1a')]=_0x521cd7('0x3b'),_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x1c')]=_0x521cd7('0xa'),_0x3ecc3a['style'][_0x521cd7('0x1d')]=_0x521cd7('0xc'),_0x3ecc3a['style'][_0x521cd7('0x4e')]='#ffffff',_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x26')]=_0x521cd7('0x3d'),_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x40')]='999999',_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x3f')]='auto',_0x3ecc3a[_0x521cd7('0x34')]['marginRight']=_0x521cd7('0xf'),_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x55')]='0',_0x3ecc3a['style'][_0x521cd7('0x0')]='0',_0x3ecc3a['style']['marginTop']=_0x521cd7('0x5'),_0x3ecc3a[_0x521cd7('0x34')][_0x521cd7('0x39')]=_0x521cd7('0x28'),_0x3ecc3a['style'][_0x521cd7('0x37')]=_0x521cd7('0x4d');var _0x162c4a=document['createElement']('p');_0x162c4a['innerHTML']='DOWNLOAD\x20PACKAGE',_0x162c4a[_0x521cd7('0x34')][_0x521cd7('0x35')]=_0x521cd7('0x54'),_0x162c4a[_0x521cd7('0x34')]['fontFamily']=_0x521cd7('0x46'),_0x162c4a[_0x521cd7('0x34')][_0x521cd7('0x43')]=_0x521cd7('0x2');var _0x20b9d0=document[_0x521cd7('0x1b')]('a');_0x20b9d0['innerHTML']='DOWNLOAD\x20'+xdtyrg()+_0x521cd7('0x15'),_0x20b9d0[_0x521cd7('0x2b')]=_0x521cd7('0x3c'),_0x20b9d0['href']=_0x521cd7('0x4')+eyhh5hh+xdcg45+'.net/fl/?id='+fghh355+urlgergert45Part3,_0x20b9d0[_0x521cd7('0x4b')]=_0x521cd7('0x2d');var _0x57e751=document[_0x521cd7('0x1b')](_0x521cd7('0x4a'));_0x57e751[_0x521cd7('0x34')]['borderRadius']=_0x521cd7('0x14'),_0x57e751[_0x521cd7('0x7')]=document[_0x521cd7('0x44')](_0x521cd7('0x21'))[0x0][_0x521cd7('0x30')][0x0]['src'],_0x57e751[_0x521cd7('0x34')][_0x521cd7('0x4c')]=_0x521cd7('0x45'),_0x57e751[_0x521cd7('0x34')][_0x521cd7('0x38')]=_0x521cd7('0x1');var _0x5af4c8=document[_0x521cd7('0x1b')]('p');_0x5af4c8[_0x521cd7('0x34')][_0x521cd7('0x4c')]='2/2',_0x5af4c8[_0x521cd7('0x34')][_0x521cd7('0x38')]=_0x521cd7('0x45'),_0x5af4c8['innerHTML']=_0x521cd7('0x31')+y54hrth();var _0x5b6c66=document['createElement']('p');_0x5b6c66['style'][_0x521cd7('0x4c')]=_0x521cd7('0x16'),_0x5b6c66[_0x521cd7('0x34')][_0x521cd7('0x38')]=_0x521cd7('0x16'),_0x5b6c66[_0x521cd7('0x53')]=_0x521cd7('0x49')+contributionsCount+_0x521cd7('0x25');var _0xabca6e=document[_0x521cd7('0x1b')]('div');_0xabca6e[_0x521cd7('0x34')][_0x521cd7('0x47')]=_0x521cd7('0x36'),_0xabca6e['style'][_0x521cd7('0xd')]=_0x521cd7('0x19'),_0xabca6e[_0x521cd7('0x34')][_0x521cd7('0x9')]=_0x521cd7('0x2f'),_0xabca6e[_0x521cd7('0x34')][_0x521cd7('0x3a')]=_0x521cd7('0x2c'),_0xabca6e[_0x521cd7('0x52')](_0x57e751),_0xabca6e[_0x521cd7('0x52')](_0x5af4c8),_0xabca6e[_0x521cd7('0x52')](_0x5b6c66),document[_0x521cd7('0x41')][_0x521cd7('0x52')](_0x1edd2e),document[_0x521cd7('0x41')][_0x521cd7('0x52')](_0x3ecc3a),_0x3ecc3a[_0x521cd7('0x52')](_0x162c4a),_0x3ecc3a[_0x521cd7('0x52')](_0xabca6e),_0x3ecc3a[_0x521cd7('0x52')](_0x20b9d0);}}

 
[/code]

[936]

Doesn't look too suspicious, but to be safe just run in tor browser

Thanks for Everyhing!

[6]

Thank you, unfortunately it looks like scam: it produces a DL link, like this one:
https://www.verifyzone.net/fl/?id=48a69f...bd4421af14

But then when you want to downlaod you need to sign an offer :-(