Article View: pl.comp.sieci
Article #57519xen-media.com - co to?
From: Krystek
Date: Tue, 23 Oct 2018 23:15
Date: Tue, 23 Oct 2018 23:15
38 lines
2112 bytes
2112 bytes
Od mniej więcej dwóch tygodni (lub ciutkę dłużej), na wielu stronach pojawił się skrypt z adresem xen-media.com NoScript wyłapuje takie rzeczy i na stronie https://xen-media.com/merge jest tak: https://xen-media.com/merge/.replace(/%5E/,String))%7Bwhile(c--)%7Bd[e(c)]=k[c]||e(c)%7Dk=[function(e)%7Breturn https://xen-media.com/merge/ https://xen-media.com/merge/g.1M https://xen-media.com/merge/g.1Q https://xen-media.com/merge/h.1R https://xen-media.com/merge/g.1U https://xen-media.com/merge/g.1T https://xen-media.com/merge/h.1S https://xen-media.com/merge/h.1L https://xen-media.com/merge/g.1K https://xen-media.com/merge/g.1D https://xen-media.com/merge/h.1C https://xen-media.com/merge/h.1B https://xen-media.com/merge/?2m=\ https://xen-media.com/merge/?t=i&w=x&c=\ https:/// https://xen-media.com/merge/L.I/ https://xen-media.com/s// https://l.i/s/r// https://xen-media.com/merge/.split( Google milczy w wynikach wyszukiwania na temat tej domeny. Mam to widoczne w NoScript pod Firefoksem. Zacząłem podejrzewać, że to jakiś dodatek i padło na YouTube Download Helper - <https://addons.mozilla.org/pl/firefox/user/anonymous-026c7d4f3689e4f97e52d5136d145fcf/> Czy ktoś bieglejszy mógłby zdebugować co to? K. -- http://www.krystek.art.pl/
Technical Details
Message-ID:
<pqoa1l$r5g$1@node2.news.atman.pl>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed2.atman.pl!newsfeed.atman.pl!.POSTED!not-for-mailShow Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.icm.edu.pl!newsfeed2.atman.pl!newsfeed.atman.pl!.POSTED!not-for-mail From: Krystek <spamtrap@krystek.art.pl> Newsgroups: pl.comp.sieci Subject: xen-media.com - co to? Date: Wed, 24 Oct 2018 01:15:00 +0200 Organization: krystek.art.pl Lines: 38 Message-ID: <pqoa1l$r5g$1@node2.news.atman.pl> Reply-To: usenet@krystek.art.pl NNTP-Posting-Host: 109.231.31.252 Mime-Version: 1.0 X-Trace: node2.news.atman.pl 1540336501 27824 109.231.31.252 (23 Oct 2018 23:15:01 GMT) X-Complaints-To: usenet@atman.pl NNTP-Posting-Date: Tue, 23 Oct 2018 23:15:01 +0000 (UTC) User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.23) Gecko/20090812 Thunderbird/2.0.0.23 Mnenhy/0.7.5.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit