Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This too is not immune. I get it here too.


Well, the HTML contains some very shady (encoded and obfuscated) JavaScript code.

If you want to investigate further replace the "return r;" in the very end of those two "evals" with "console.log(r);" then get the decoded code from the browser's console. Then run through code beautifier (built-in in Firefox JS debugger) to get readable code. But there are more code obfuscations later, though easy to reverse but I don't have the time right now.


OpenDNS blocks the domain it looks like


There is what looks like another site hosted by the other person who partnered on this: http://colinoflynn.com/iotworm/


You can use http://archive.is/gRSfN/image to get a screenshot of the page.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: