ESET NOD32 blocks a link after NoScript installation

[TheExplorer]

The matter is that my ESET NOD32 blocks a link after the installation of NoScript and FlashGot. The link is https://store.uniblue.com

The same happens after the installation of FlashGot as well.

The screenshot is here.

What is it? Simply an advertisement?

Thank you.

[barbaz]

I've seen that uniblue thing too - and ESET NOD32 isn't showing you its full URL.
I think it's just a tracking cookie / tracking pixel.
Not sure why ESET NOD32, an antivirus program, would block that connection, as Uniblue isn't malware.

It's definitely not an ad (AFAIK all the ads on Giorgio's site are currently self-hosted).

[therube]

Well noscript.net has ads & noscript.net does something with store.uniblue.com, so I would think it not unexpected that if you visit noscript.net (or on NoScript update?) that the chance exists that uniblue (or some other site) could turn up & if your "detector" fears that, then it might throw up a message.

Does NOD32 say why it is blocking that?
Because of the site itself, or because it may have been in an <IFRAME>, or because of opacity 0, or?

[barbaz]

IIRC it's a 1x1 GIF that has a URL starting with "store.uniblue.com/cookie?", and it ONLY shows up on the release notes page that is requested by NoScript on an update (so you wouldn't see it if you go back to the release notes page later)

[therube]

I wouldn't know what that's doing?

Code: Select all

function fbcheck() {
   var a = document.createElement("a");
   a.href = "https://store.uniblue.com/";
   a.textContent = "TEST";
   a.style.opacity = 0;
   document.body.appendChild(a);
   var fb = a.offsetWidth ? 0 : 1;
   if (fb) {
 ...

[TheExplorer]

ESET NOD32 doesn't say anything WHY it blocked this or that page. It just blocks...

Anyway thank you for replies!

[barbaz]

You're welcome!

(@therube I think that fb code is something else, also internal to noscript.net - looks like it's trying to deal with some browser-specific weirdness that badly affects the Uniblue ads on noscript.net, & it's some type of feature detection used to determine whether that iframe style hack is needed.)