If the attacker is targeting your app specifically, he can use a whitelisted domain like google analytics.
https://www.kaspersky.com/blog/web-skimming-with-ga/35986/
LeoWandersleb / Leo Wandersleb
npub1gm…78rf6
2025-02-09 17:00:16
in reply to nevent1q…hzca
Author Public Key
npub1gm7tuvr9atc6u7q3gevjfeyfyvmrlul4y67k7u7hcxztz67ceexs078rf6Published at
2025-02-09 17:00:16Event JSON
{
"id": "9398add8d289ce54bcc221782686654be9887d2e1a6c874af3a1b44a7f79a68c",
"pubkey": "46fcbe3065eaf1ae7811465924e48923363ff3f526bd6f73d7c184b16bd8ce4d",
"created_at": 1739120416,
"kind": 1,
"tags": [
[
"e",
"f15371d154baa75cb40fb31ebea1439b06b0e9a471c143e60e69f93be8a79f84",
"",
"root"
],
[
"e",
"5d579dca9ab7bfc8a17e512361a8560c13de2f6cb38b1b90125aa9a8c4aac1fe",
"wss://nos.lol",
"reply",
"10dc30b77d65c2884d0226d8ead2d52d50d766703ffdcefbf4a071b3e732fa67"
],
[
"p",
"46fcbe3065eaf1ae7811465924e48923363ff3f526bd6f73d7c184b16bd8ce4d"
],
[
"p",
"10dc30b77d65c2884d0226d8ead2d52d50d766703ffdcefbf4a071b3e732fa67"
],
[
"client",
"noStrudel",
"31990:266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5:1686066542546"
]
],
"content": "If the attacker is targeting your app specifically, he can use a whitelisted domain like google analytics.\n\nhttps://www.kaspersky.com/blog/web-skimming-with-ga/35986/",
"sig": "361023c1a69fcf24d43f9972d8f8ae27ab7bb8ce151a1ff9408d35d3e602f7f6dab90d0eae45aab9ecfcd28355575826da99ba6e6ad5cda4363fe30f19a23a5f"
}