/    Sign up×
Community /Pin to ProfileBookmark

New domain displaying strange JavaScript

I recently obtained a domain name from GoDaddy, and pointed it to my VPS providers (PHP Webhosting) name servers.

It seems to have resolved, but when I view the page, I just get the following. What is this code doing? It looks benign enough, however, I haven’t confirmed that the linked jquery file is truly jquery.

Does anyone know what this is about? Thanks

[code=html]<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>

<html xmlns=”http://www.w3.org/1999/xhtml” >
<head id=”ctl00_Head1″><title>
mydomain.com
</title>
<style type=”text/css”>body{margin:0;padding:0;}img{border-style:none;}#container {background-color:#FFF;}</style>

</head>

<body>
<div></div>

<script type=”text/javascript” src=”http://ak2.imgaft.com/script/jquery-1.3.1.min.js”></script>

<img id=”impspacer” alt=”” height=”1″ width=”1″ />
<script type=”text/javascript” language=”javascript”>
var impspacer = document.getElementById(‘impspacer’);
if (impspacer) { impspacer.src = ‘/img.aspx?q=L3MkWGAkAQtkAGZ4ZQD0AGRlZQxlAQL3ZvHlAzpyZ3RmAwtyZwMyWGAkWGV2ovHmpGNyZwMwWGAkZPHlAzIzWGAkZPHlAzLyZ3RyZwMyMlHmpGVjZGDjZmN3ZQx1ZGN1WGV2L3xyZ3RkWGV2qTpyZ3RyZwM4WGAkWGV2MzqjWGAkZPHlAzuhMlHmpGRyZwMjpPHmpHuTWGV2L2tyZ3Rj-1’; }
</script>

<!– pageok –>
<!– 01 –>
<!– 368 –>
<!– 7.12–>
<!– Copyright –>

</body>
</html>
[/code]

to post a comment
JavaScript

5 Comments(s)

Copy linkTweet thisAlerts:
@Kevin2Mar 07.2014 — Probably the standard "placeholder" page for that company. Delete it, rename it, whatever, and replace with your own "index.php" or "index.htm" or similar.
Copy linkTweet thisAlerts:
@NotionCommotionauthorMar 07.2014 — Probably the standard "placeholder" page for that company. Delete it, rename it, whatever, and replace with your own "index.php" or "index.htm" or similar.[/QUOTE]
I currently have another index.php at the expected location, and it is definitely doesn't render the above posted HTML.

Do you know what the JavaScript is doing? What is imgaft.com?
Copy linkTweet thisAlerts:
@Kevin2Mar 07.2014 — Do you know what the JavaScript is doing?[/QUOTE]

Possibly importing an image based on certain criteria.


What is imgaft.com?[/QUOTE]

Do your own WhoIs. But it seems to be a subsidiary of GoDaddy according to the WhoIs I ran.
Copy linkTweet thisAlerts:
@NotionCommotionauthorMar 07.2014 — Possibly importing an image based on certain criteria.[/QUOTE]Seems like a strange way to do so.

Do your own WhoIs. But it seems to be a subsidiary of GoDaddy according to the WhoIs I ran.[/QUOTE]Yea, I had already done so. Remarkably little information.

Thanks, I guess I will not worry about it, and assume the domain name is still in process of resolving.
Copy linkTweet thisAlerts:
@rootMar 09.2014 — Without the actual function to decode the URL, you have no idea what the URL contains, it looks to be encoded to a bespoke encoding method, if it were Base64 then it would have = as a padding character (in most cases)
×

Success!

Help @NotionCommotion spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 BETA 5.29,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @AriseFacilitySolutions09,
tipped: article
amount: 1000 SATS,

tipper: @Yussuf4331,
tipped: article
amount: 1000 SATS,

tipper: @darkwebsites540,
tipped: article
amount: 10 SATS,
)...