aes.js being injected into my website?


#1

I was trying to debug my website and when I view source I noticed that there’s a JavaScript file “aes.js” being injected instead of my source code. What gives?

Also it keeps adding ?i=1, ?i=2, ?i=3 to the end of my domain and after the 3rd/4th refresh it will redirect to a Google support page.


#2

hi https://infinityfree.net/support/what-is-the-i-1-suffix/
https://infinityfree.net/support/javascript-error-using-api-or-mobile-android-app/


#3

Okay but why redirect the users to https://support.google.com/accounts/answer/61416 ?


#4

@schadm said:
Okay but why redirect the users to https://support.google.com/accounts/answer/61416 ?

Because the users in question don’t have cookies enabled in their browsers, or because people share URLs with the ?i=3 suffix already set.


#5

@Admin said:
Because the users in question don’t have cookies enabled in their browsers, or because people share URLs with the ?i=3 suffix already set.

For me, it happens when I keep refreshing the page (while testing out my changes)


#6

when you open your page and go to (firefox) developer tools > storage > cookies
there should be a cookie with name __test

probably during testing you also delete cookies and that’s why you see it
always if there is no __test cookie you will get that add-on to URL ?i=1


closed #7