Robot | Path | Permission |
GoogleBot | / | ✔ |
BingBot | / | ✔ |
BaiduSpider | / | ✔ |
YandexBot | / | ✔ |
Title | Spook.js |
Description | Spook.js Attacking Google Chrome’s Strict Site Isolation via Speculative Execution and Type Confusion What is it? Spook.js is a new transient execution si |
Keywords | N/A |
WebSite | spookjs.com |
Host IP | 216.239.34.21 |
Location | United States |
Site | Rank |
US$1,998,517
Last updated: 2023-05-10 04:44:04
spookjs.com has Semrush global rank of 5,296,079. spookjs.com has an estimated worth of US$ 1,998,517, based on its estimated Ads revenue. spookjs.com receives approximately 230,599 unique visitors each day. Its web server is located in United States, with IP address 216.239.34.21. According to SiteAdvisor, spookjs.com is safe to visit. |
Purchase/Sale Value | US$1,998,517 |
Daily Ads Revenue | US$1,845 |
Monthly Ads Revenue | US$55,344 |
Yearly Ads Revenue | US$664,123 |
Daily Unique Visitors | 15,374 |
Note: All traffic and earnings values are estimates. |
Host | Type | TTL | Data |
spookjs.com. | A | 3600 | IP: 216.239.34.21 |
spookjs.com. | A | 3600 | IP: 216.239.38.21 |
spookjs.com. | A | 3600 | IP: 216.239.32.21 |
spookjs.com. | A | 3600 | IP: 216.239.36.21 |
spookjs.com. | AAAA | 3600 | IPV6: 2001:4860:4802:38::15 |
spookjs.com. | AAAA | 3600 | IPV6: 2001:4860:4802:32::15 |
spookjs.com. | AAAA | 3600 | IPV6: 2001:4860:4802:34::15 |
spookjs.com. | AAAA | 3600 | IPV6: 2001:4860:4802:36::15 |
spookjs.com. | NS | 21600 | NS Record: ns-cloud-b4.googledomains.com. |
spookjs.com. | NS | 21600 | NS Record: ns-cloud-b1.googledomains.com. |
spookjs.com. | NS | 21600 | NS Record: ns-cloud-b2.googledomains.com. |
spookjs.com. | NS | 21600 | NS Record: ns-cloud-b3.googledomains.com. |
spookjs.com. | MX | 3600 | MX Record: 20 alt2.gmr-smtp-in.l.google.com. |
spookjs.com. | MX | 3600 | MX Record: 5 gmr-smtp-in.l.google.com. |
spookjs.com. | MX | 3600 | MX Record: 40 alt4.gmr-smtp-in.l.google.com. |
spookjs.com. | MX | 3600 | MX Record: 10 alt1.gmr-smtp-in.l.google.com. |
spookjs.com. | MX | 3600 | MX Record: 30 alt3.gmr-smtp-in.l.google.com. |
Spook.js Attacking Google Chrome’s Strict Site Isolation via Speculative Execution and Type Confusion What is it? Spook.js is a new transient execution side channel attack which targets the Chrome web browser. We show that despite Google’s attempts to mitigate Spectre by deploying Strict Site Isolation , information extraction via malicious JavaScript code is still possible in some cases. More specifically, we show that an attacker-controlled webpage can know which other pages from the same websites a user is currently browsing, retrieve sensitive information from these pages, and even recover login credentials (e.g., username and password) when they are autofilled. We further demonstrate that the attacker can retrieve data from Chrome extensions (such as credential managers) if a user installs a malicous extension. Download the Paper (PDF) Cite (BibTeX) Cite Spook.js @inproceedings{spookjs, title = {Spook.js: Attacking Chrome Strict Site Isolation via Speculative Execution}, author = |
HTTP/1.1 301 Moved Permanently Location: https://www.spookjs.com Date: Tue, 02 Nov 2021 04:07:47 GMT Content-Type: text/html; charset=UTF-8 Server: ghs Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN HTTP/2 200 server: GitHub.com content-type: text/html; charset=utf-8 last-modified: Wed, 08 Sep 2021 18:47:18 GMT access-control-allow-origin: * strict-transport-security: max-age=31556952 etag: "61390536-a3cb" expires: Tue, 02 Nov 2021 04:17:47 GMT cache-control: max-age=600 x-proxy-cache: MISS x-github-request-id: 363E:0B23:A3A706:113FA8F:6180B993 accept-ranges: bytes date: Tue, 02 Nov 2021 04:07:47 GMT via: 1.1 varnish age: 0 x-served-by: cache-stl4845-STL x-cache: MISS x-cache-hits: 0 x-timer: S1635826067.378908,VS0,VE115 vary: Accept-Encoding x-fastly-request-id: 0f2d58dc78b8b6887477db6693ddc67631725579 content-length: 41931 |
Domain Name: SPOOKJS.COM Registry Domain ID: 2602698165_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.google.com Registrar URL: http://domains.google.com Updated Date: 2021-04-04T02:44:16Z Creation Date: 2021-04-04T02:44:15Z Registry Expiry Date: 2022-04-04T02:44:15Z Registrar: Google LLC Registrar IANA ID: 895 Registrar Abuse Contact Email: registrar-abuse@google.com Registrar Abuse Contact Phone: +1.8772376466 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: NS-CLOUD-B1.GOOGLEDOMAINS.COM Name Server: NS-CLOUD-B2.GOOGLEDOMAINS.COM Name Server: NS-CLOUD-B3.GOOGLEDOMAINS.COM Name Server: NS-CLOUD-B4.GOOGLEDOMAINS.COM DNSSEC: signedDelegation DNSSEC DS Data: 56839 8 2 30CF12061C9E1FE69366F4C6BA62BF7B626E446E82A3ED30ECBA1C6F1A0A9072 >>> Last update of whois database: 2021-09-20T12:40:38Z <<< |