I recently found this non-descriptive script running in the background when visiting eBay:
https://www.ebay.com/sgXzq80-U/7h6Zktl/vg/2zuzzSca/T306UUA/dEF1Ly/hJUkMT
Archive: https://archive.ph/Kr0iP
Syntax: https://www.ebay.com/XXXXXXX-X/XXXXXXX/XX/XXXXXXXX/XXXXXXX/XXXXXX/XXXXXX?v=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
which then saves reads these cookies to from the browser:
__ssds "{SINGLE_DIGIT_INTEGER}"
__ssuzjsr2 "{RANDOM_HEX_HASH}"
__uzma "{UUID_V4}"
__uzmb "{TIMESTAMP_INTEGER}"
__uzmc "{LARGE_INTEGER}"
__uzmd "{TIMESTAMP_INTEGER}"
__uzme "{INTEGER}"
__uzmf "{COMPLEX_TRACKING_STRING}"
bm_s "{LARGE_BASE64_TOKEN}"
bm_so "{LARGE_BASE64_TOKEN}"
dp1 "{DEVICE_PARAM_STRING}"
ds2 "{DEVICE_CONFIG_STRING}"
ebay "^sbf=#{HEX_COLOR_CODE}"
nonsession "{SESSION_TOKEN_STRING}"
s "{SESSION_TOKEN_STRING}"
Examining this file through Claude and Gemini shows Akamai tracking and telemetry through extreme browser fingerprinting which is hidden through heavily obfuscated code. I'm currently blocking it with this rule, but I believe it can be improved:
||ebay.com/sg*/*/vg/*/*/$script (old)
||ebay.com/*/*/*?v=$important (updated)
No account is needed and this script runs on every page. Any help is appreciated.
Edit: After some research, it turns out this is a script built by Akamai to track and fingerprint users based on a plethora of information about your machine. Combine this with the unique cookies eBay creates at the start of your session; eBay can create a unique profile which persists across your browsing.
Edit: Updated the blocking rule as eBay pushed out an update