Phishing kit forensics

JS Deobfuscator & IOC extractor

Paste obfuscated JavaScript or a suspicious URL — we unwrap eval, decode atob/hex/unicode, resolve string-array tricks via webcrack, and pull out Telegram bot tokens, wallets, secrets and exfil endpoints. Runs entirely in your browser.

100% client-side No upload Live Telegram bot lookup For defensive research

Transforms

Beautify Hex \x Unicode \u atob() fromCharCode String arrays Unwrap eval Smart Deobfuscate (webcrack)

IOC Extraction

Extract IOCs Live Telegram API

Detection

Secrets Paths Scan Targets

Language

JS HTML Auto

Don't have code yet? Paste a URL — we'll fetch the JS server-side

Smart Analyze — full deobfuscation + scoring · Raw fetch — list scripts, you pick one · direct .js URL also works: https://example.com/app.js

INPUT js

Drop file here

OUTPUT js

Decoded output appears here

Paste obfuscated code on the left, or fetch a URL above
Hit or press Ctrl+↵
Review decoded JS + IOCs (Telegram bots, wallets, secrets)

First time? Click Try a sample in the intro card above.

Deobfuscating...

IOC SCAN RESULTS