Hacker News new | ask | show | jobs
by toomuchtodo 3510 days ago
http://archive.is/gRSfN
1 comments

This too is not immune. I get it here too.
Well, the HTML contains some very shady (encoded and obfuscated) JavaScript code.

If you want to investigate further replace the "return r;" in the very end of those two "evals" with "console.log(r);" then get the decoded code from the browser's console. Then run through code beautifier (built-in in Firefox JS debugger) to get readable code. But there are more code obfuscations later, though easy to reverse but I don't have the time right now.

OpenDNS blocks the domain it looks like
There is what looks like another site hosted by the other person who partnered on this: http://colinoflynn.com/iotworm/
You can use http://archive.is/gRSfN/image to get a screenshot of the page.