Wikileaks.com

[droope]

Hi guys and gals!

Please check wilikeaks.com (not .org) out.

it reads: the current website is NOT currently available

See the source code regarding the spacer?

Code: Select all

<script type="text/javascript" language="javascript">
        var impspacer = document.getElementById('impspacer');
        if(impspacer) {impspacer.src = '/images/spacer.gif?q=L3MkWGAkZwRmZmH2ZQx5AwR1AwVlAQN0ZPHlAzpyZ3RmAwRyZwMyWGAkWGV2ovHmpGNyZwMwWGAkZPHlAzIzWGAkZPHlAzLyZ3RyZwMyMlHmpGVjZGRjZGN4ZGHkZwR2WGV2L3xyZ3RkWGV2qTpyZ3RyZwM4WGAkWGV2MzqjWGAkZPHlAz56WGAkZPHlAzMjWGAkZwZ4WGV2nT5aWGAkZFHlAaOjWGAkFRjyZwMwnPHmpGN=-1';}
    </script>

Doesn't it look like an awful lot of code for a 1x1 px spacer that sits at the bottom of the page and does nothing?

Also, In the source, the following coments are sitting there:

Code: Select all

<!-- pageok -->
<!-- 03 -->
<!-- 361 -->
<!-- 7.12-->
<!-- Copyright -->


That doesn't look like page load time and queries made at all...

What do you think?

[fashizzlepop]

Obviously spacer.gif is more than just a picture as information is being fed to it. Notice the '?' after '.gif' and then the variable of 'q.' When the page loads, spacer.gif is passed that long string (which looks like base64 but isn't because of the =-1 at the end. I'm not sure what it does but it might be interesting to manually feed it some different info and see if any errors come back.

As for those comments, it looks like version type and the load time. Just some extra info.

[Pythous]

This Threat Assessment should help.