u/AdamCannon

I recently found this non-descriptive script running in the background when visiting eBay:

 

https://www.ebay.com/sgXzq80-U/7h6Zktl/vg/2zuzzSca/T306UUA/dEF1Ly/hJUkMT

Archive: https://archive.ph/Kr0iP

Syntax: https://www.ebay.com/XXXXXXX-X/XXXXXXX/XX/XXXXXXXX/XXXXXXX/XXXXXX/XXXXXX?v=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

 

which then saves these cookies to the browser:

 

__ssds "{SINGLE_DIGIT_INTEGER}"

__ssuzjsr2 "{RANDOM_HEX_HASH}"

__uzma "{UUID_V4}"

__uzmb "{TIMESTAMP_INTEGER}"

__uzmc "{LARGE_INTEGER}"

__uzmd "{TIMESTAMP_INTEGER}"

__uzme "{INTEGER}"

__uzmf "{COMPLEX_TRACKING_STRING}"

bm_s "{LARGE_BASE64_TOKEN}"

bm_so "{LARGE_BASE64_TOKEN}"

dp1 "{DEVICE_PARAM_STRING}"

ds2 "{DEVICE_CONFIG_STRING}"

ebay "^sbf=#{HEX_COLOR_CODE}"

nonsession "{SESSION_TOKEN_STRING}"

s "{SESSION_TOKEN_STRING}"

 

Examining this file through Claude and Gemini shows Akamai tracking and telemetry through extreme browser fingerprinting which is hidden through heavily obfuscated code. I'm currently blocking it with this rule, but I believe it can be improved:

 

||ebay.com/sg*/*/vg/*/*/$script

 

No account is needed and this script runs on every page. Any help is appreciated.

The site owner hates, and I mean HATES that people have the audacity to want and download images from his site, even though his site is a leech that scrapes from everyone and therefore contributes nothing original.

Because of this, he implemented an image DRM that prevents 3rd party apps and downloaders from working to the detriment of its users. This is why the site keeps going in and out of service or why sometimes images do not load or come out scrambled. It’s because those 3rd party apps/downloaders found a workaround to download images, and in panic the Comix owner pushes out emergency bug-ridden updates to their DRM.

He couldn’t care less if the site temporarily breaks or if users have an abysmal reading experience, so long as his precious DRM remains undefeated. His ego doesn’t allow for removing this protection, so it’ll only continue to be a game of cat and mouse.

Official or unofficial sites. Maybe this site was once supported on a tool you use, or no one has bothered to reverse engineer, or maybe it's just considered impossible to implement. Would love to know what sites most people agree on.