This is a security research project by 2e.lc ("two elk"), an operating division of Machines Never Sleep, LLC, a cybersecurity research and development company. We're not here to cause harm, sell you a product, or anything else like that. We're just a bunch of curious nerds doing nerd stuff on the internet.
This project is currently online and collecting data. In short, we're testing to see if sites will run (safe) Cross-Site Scripts from a number of unlikely vectors. If we find anything, we'll be contacting the website owners to responsibly notify them and help keep the internet safer.
If you're here because:
- an unexpected resource was loaded by your browser, or
- you have seen DNS traffic for 2e.lc, or
- your console log has told you to go here
Please reach out to us, either via personal contact information on our site or by opening a GitHub issue. We would be interested to hear what happened, and that would significantly aid our research!
Our goal throughout all of this is to be transparent and trustworthy. This repository contains all of 2e.lc, including server-side scripts to ingest and parse data. If a site you were on did load our script, it beacons a small amount of information back to us for diagnostic assistance. How much data? Hardly any! Probably much less than the average advertisement. The data we collect is:
- a random ID (which is ephemeral - it doesn't stick around and isn't tied to you)
- the IP you connect to the internet with, and the country that IP appears to be in
- the time of the connection
- whether or the connection was made over HTTPS
- the URI that was accessed
- the origin of the request
- the referrer, if any
- the user agent of your browser
None of this could be reasonably used by us to identify you. Frankly, we're just not that into you - we're much more interested in what site you were on. If you have concerns about any of this, please contact us - we'd love to discuss.
Sorry, you'll want to check the wiki if you want to learn about our research methodology, system design, etc. This readme is for concerned citizens only while research is running.