Was looking for alternatives to AdSense, and saw an ad for Monetag. Look at their js file they want you to upload the server, then peeped the import. Import is minified js so I had claude take a look at it. The first tool I used identified what it thought was a base64 encoded blob which is a red flag.

This is a pretty scummy way, with those stupid popups, to handle business. The obsfucation, along with what it actually does, is a larger red flag for me than some clown giving away puppies in a van.

About the “base64 blob”

There isn’t one. What looks like a blob is the big string table at the end of minified.js (about 1,135 entries). It isn’t base64. Each letter is just shifted 12 places in the alphabet (a ROT-12 cipher), which is why it looks like gibberish ( tffbe:// is https:// ). Every K.xx in the code looks up an entry in that table.…