generic_javascript_obfuscation5 in consent.cookiebot.com

On 2020-05-23T19:50:09.912945+00:00 we found pattern generic_javascript_obfuscation5, type: Suspicious, (JavaScript obfuscation is frequently used to hide malicious code (or with hope to protect intellectual property)) in the page https://consent.cookiebot.com/c99c74a8-… referenced from https://www.cookiebot.com/de/dsgvo-cook… .

Code sample:

b'["ar","he","fa","az","ur","pa","ps","ug","yi"],x="left";this.textDirection="ltr";for(m=0;m<M.length;m++)if(M[m]===this.userLanguage.toLowerCase()){this.textDirection="rtl",' … b'["pagead/1p-user-list/#","google.com","Anstehend","Session","Pixel","5","","www.google.com"],["ads/ga-audiences","google.com",' … b"['__RequestVerificationToken','ASP.NET_SessionId','\x01#\xc3\x97\x01D\xc3\x87','CookieConsent','ZD-suid','__cfruid','_zendesk_session','_zendesk_shared_session','_zendesk_thirdparty_test','_gh_sess','logged_in','__cfduid','_help_center_session'," … b"['cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['cookiebot.zendesk.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['doubleclick.net','Google','https://policies.google.com/privacy'],['gist.github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy" … b"['cookiebot.zendesk.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['doubleclick.net','Google','https://policies.google.com/privacy'],['gist.github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers" … b"['doubleclick.net','Google','https://policies.google.com/privacy'],['gist.github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-" … b"['gist.github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cookiebot.com','Cookiebot','https://www.cookiebot.c" … b"['github.com','Github','https://help.github.com/articles/github-privacy-statement/'],['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'" … b"['manage.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'],['www.google.com','Google','https://policies.google.com/privacy'],['www.google.ie'," … b"['static.zdassets.com','Zendesk','https://www.zendesk.com/company/customers-\xc2\xa5\xc2\xaa\xc3\xad\xc2\x9d\xc3\xaa\xc3\xac/privacy-policy/'],['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'],['www.google.com','Google','https://policies.google.com/privacy'],['www.google.ie','Google','https://policies.google.com/privacy'],['www.google-analytics.com','Google','" … b"['support.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'],['www.google.com','Google','https://policies.google.com/privacy'],['www.google.ie','Google','https://policies.google.com/privacy'],['www.google-analytics.com','Google','https://policies.google.com/privacy'],['www.googletagmanager.com'," … b"['www.cookiebot.com','Cookiebot','https://www.cookiebot.com/goto/privacy-policy/'],['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'],['www.google.com','Google','https://policies.google.com/privacy'],['www.google.ie','Google','https://policies.google.com/privacy'],['www.google-analytics.com','Google','https://policies.google.com/privacy'],['www.googletagmanager.com'," … b"['www.cybot.com','Cybot','https://www.cybot.com/privacy-policy/'],['www.google.com','Google','https://policies.google.com/privacy'],['www.google.ie','Google','https://policies.google.com/privacy'],['www.google-analytics.com','Google','https://policies.google.com/privacy'],['www.googletagmanager.com',"

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).