All-in-one free web application security tool. Web application vulnerability and privacy scanner with support for HTTP cookies, Flash, HTML5 localStorage, sessionStorage, CANVAS, Supercookies, Evercookies. Includes a free SSL/TLS, HTML and HTTP vulnerability scanner and URL malware scanner.
On 2020-08-02T06:14:41.108608+00:00 we found pattern generic_javascript_obfuscation5, type: Suspicious, (JavaScript obfuscation is frequently used to hide malicious code (or with hope to protect intellectual property)) in the page https://www.googletagmanager.com/gtag/j… referenced from https://saddlebackmaine.com/ .
Code sample:
b'["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["nonGooglePixels"],ecl:["cl"],ehl:["hl"],hl:["ehl"],html:["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",' … b'["nonGooglePixels"],ecl:["cl"],ehl:["hl"],hl:["ehl"],html:["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",' … b'["cl"],ehl:["hl"],hl:["ehl"],html:["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",' … b'["hl"],hl:["ehl"],html:["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",' … b'["ehl"],html:["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",' … b'["customScripts","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],customScripts:["html","r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l","nonGooglePixels","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl","\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac"],nonGooglePixels:[],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%y\'+\xc2\x8a\xc2\x9bl:["nonGooglePixels"],\xc2\x9e\xc2\x89\xc3\x86\xc2\xa2\xc2\x88%x\xc2\x87\xc3\xabjg\xc2\xac:["nonGooglePixels"]},vg={cl:["ecl"],r\xc3\xab-\xc2\xa2c\xc3\xa2\xc3\x85\xc3\xa9l:["customScripts",'
This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).