Pin the Tale on the Donkey
The following excerpts of scripts give some insight into the behavior of these Cyrillic-alphabet (Russian language) websites. The metadata scripts may be used to plant data in the headers of vulnerable US domains. For social media, the selected Facebook an Twitter buttons seen on several websites have been opened & their sourcecodes captured - See the Screenshot of Facebook Button  and ... Twitter Button links below. In contrast to the data from AS9123, here the results seem not to indicate that data is being collected from any users; another mechanism by which that data may be collected is not yet apparent ...
Social Media AS24940
24940/www.fermeru.pro/www.fermeru.pro.scripts.txt
<script type='application/ld+json'>{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"https:\/\/www.fermeru.pro\/","name":"\
u0424\u0435\u0440\u043c\u0435\u0440\u0441\u043a\u043e\u0435\u0445\u043e\u0437\u044f\u0439\u0441\u0442\u0432\u043e\u0441\u0432\u043e\u0438
\u043c\u0438\u0440\u0443\u043a\u0430\u043c\u0438","alternateName":"\u0412\u0441\u0435 \u043e\u0444\u0435\u0440\u043c\u0435\u0440\u0441\u0442
\u0432\u0435,  \u0436\u0438\u0432\u043e\u0442\u043d\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0435,\u043f\u0442\u0438\u0446\u0435\u0432
\u043e\u0434\u0441\u0442\u0432\u0435. \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435\u0441\u043e\u0432\u0435\u0442\u044b \u0438 \u0441\
u0435\u043a\u0440\u0435\u0442\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u0436\u0438\u0432\u043e\u0442\u043d\u044b
\u0445 \u0438\u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u043f\u0442\u0438\u0446\u044b \u0434\u043b\u044f\u043d\u0430\u0447\u0438\u043d
\u0430\u044e\u0449\u0438\u0445", "potentialAction":{"@type":"SearchAction","target":"https:\/\/www.fermeru.pro\/?s={search_term_string}","
query-input":"required name=search_term_string"}}</script>

<div class=yashare-auto-init data-yashareL10n=ru
data-yashareQuickServices="vkontakte,facebook,twitter,gplus"
data-yashareTheme=counter></div>
Screenshot of Facebook Button
Screenshot of Twitter Button
24940/www.divanos.com.ua01/www.divanos.com.ua.txt
24940/www.divanos.com.ua02/www.divanos.com.ua.txt
 
<script type="text/javascript">window._wp_rp_static_base_url='https://wprp.zemanta.com/static/';window._wp_rp_wp_ajax_url=
"https://www.divanos.com.ua/wp-admin/admin-ajax.php";window. _wp_rp_plugin_version='3.6.4';window._wp_rp_post_id='3326';
window._wp_rp_num_rel_posts='5';window._wp_rp_thumbnails=true;window._wp_rp_post_title='%D0%94%D0%B8%D0%B2%D0%B0%D0%BD+
%D0%A8%D0%B0%D1%80%D0%BF%D0%B5%D0%B9+%D0%B8%D0%B7+%D0%BD%D0%B0%D1%82%D1%83%D1%80%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE
%D0%B9+%D0%BA%D0%BE%D0%B6%D0%B8+%D1%81+%D0%BE%D1%82%D0%B4%D0%B5%D0%BB%D0%BA%D0%BE%D0%B9+%D0%B6%D0%B0%D1%82%D0
%BA%D0%B0.';window._wp_rp_post_tags=[];window._wp_rp_promoted_content=true;</script>

<div class="ya-share2" data-services="facebook,gplus,twitter" data-size="s"></div>
Screenshot of Facebook Button
Screenshot of Twitter Button
24940/otzovikotdbix.ru01/otzovikotdbix.ru.txt
24940/otzovikotdbix.ru02/otzovikotdbix.ru.txt
24940/otzovikotdbix.ru03/otzovikotdbix.ru.txt

<meta name="twitter:description" content="Ã�’ Ã�¿Ã�¾ÑÂ�Ã�»Ã�µÃ�´Ã�½Ã�¸Ã�µ Ã�½Ã�µÑÂ�Ã�ºÃ�¾Ã�»ÑŒÃ
�º�¾ �´�½�µ�¹ �¿�¾�³�¾�´�° �² �½�°Ñˆ�µ�¼ Ñ€�µ�³�¸�¾�½�µ
Ã�½Ã�µ Ã�±Ã�°Ã�»ÑƒÃ�µÑ‚ Ñ‚Ã�µÃ�¿Ã�»Ã�¾Ã�¼, Ã�´ÑƒÃ�µÑ‚ ÑÂ�Ã�¸Ã�»ÑŒÃ�½Ñ‹Ã�¹ Ñ…Ã
�¾�»�¾�´�½Ñ‹�¹ �²�µÑ‚�µÑ€, �° Ñ‚�µ�¼�¿�µÑ€�°Ñ‚ур�° �²�¾
�·�´ÑƒÑ…�° �²Ñ��µ �±Ñ‹Ñ�Ñ‚Ñ€�µ�µ Ñ�Ñ‚Ñ€�µ�¼�¸Ñ‚Ñ�Ñ� у�¹Ñ‚�
¸ �½�¸�¶�µ +10�¡. �� �² �±�»�¸�¶�°�¹Ñˆ�µ�µ �²Ñ€�µ�¼Ñ� �½�¾Ñ‡
ью �¾�¶�¸�´�°ÑŽÑ‚Ñ�Ñ� �´�°�¶�µ �·�°�¼�¾Ñ€�¾�·�º�¸. ���°
�µÑ‰�µ �¸ Ñ��¸�½�¾�¿Ñ‚�¸�º�¸ �½�µÑƒ�¼�¾�»�¸�¼Ñ‹ �¸ �½�µ �
¾�±�µÑ‰�°ÑŽÑ‚ Ñ…�¾Ñ€�¾Ñˆ�µ�¹ �¿�¾�³�¾�´Ñ‹. �� �¶�°�»ÑŒ! �’
�µ�´ÑŒ Ñ‚�¾�»ÑŒ�º�¾ «�²Ñ‡�µÑ€�°Â» �±Ñ‹�»�¾ �»�µÑ‚�¾, �±Ñ‹�
»�¾ �¼�¾Ñ€�µ �¸ �³�¾Ñ€Ñ�ч�¸�¹ �¿�µÑ��¾�º. ��" />
<meta name="twitter:title" content="Ã�žÑ‚Ã�´Ñ‹Ñ… Ã�² Ã�½Ã�¾ÑÂ�Ã�±Ñ€Ã�µ Ã�½Ã�° Ã�¼Ã�¾Ñ€Ã�µ Ã
�·Ã�° Ã�³Ñ€Ã�°Ã�½Ã�¸Ñ†Ã�µÃ�¹ Ã�³Ã�´Ã�µ Ñ‚Ã�µÃ�¿Ã�»Ã�¾ Ã�½Ã�µÃ�´Ã�¾Ñ€Ã�¾Ã�³Ã
�¾ - �žÑ‚�·Ñ‹�²Ñ‹ �¾�± �¾Ñ‚�´Ñ‹Ñ…�µ" /><meta name="twitter:image" content=
"http://otzovikotdbix.ru/wp-content/uploads/2017/09/111-48.jpg" />

<script type='application/ld+json'>{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"http:\/\/otzovikotdbix.ru\/
","name":"\u041e\u0442\u0437\u044b\u0432\u044b \u043e\u0431\u043e\u0442\u0434\u044b\u0445\u0435","potentialAction":{"@type":"
SearchAction","target":"http:\/\/otzovikotdbix.ru\/?s={search_term_string}","query-input":"required name=search_term_string"}}</script>

<div class="ya-share2" data-services="vkontakte,facebook,odnoklassniki,gplus,twitter" data-counter=""></div>
Screenshot of Facebook Button
Screenshot of Twitter Button

24940/autofuct.ru/autofuct.ru.txt

<script type='application/ld+json'>{"@context":"http:\/\/schema.org","@type":"WebSite","@id":#website","url":"http:\/\/autofuct.ru\/","name":"\u0410\
u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u043a\u0442\u044b","potentialAction":{"@type":"
SearchAction","target":"http:\/\/autofuct.ru\/?s={search_term_string}","query-input":"required name=search_term_string"}}</script>

<div class="ya-share2" data-services="vkontakte,facebook,odnoklassniki,gplus,twitter" data-counter=""></div>
Screenshot of Facebook Button
Screenshot of Twitter Button
24940/www.rabota-biznes.com01/www.rabota-biznes.com.txt
24940/www.rabota-biznes.com02/www.rabota-biznes.com.txt
 24940/www.rabota-biznes.com03/www.rabota-biznes.com.txt
24940/www.rabota-biznes.com04/www.rabota-biznes.com.txt
<!--[if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7" lang="ru-RU" prefix="og: http://ogp.me/ns#"> <![endif]-->
<!--[if IE 7]> <html class="no-js lt-ie9 lt-ie8" lang="ru-RU" prefix="og: http://ogp.me/ns#"> <![endif]-->
<!--[if IE 8]> <html class="no-js lt-ie9" lang="ru-RU" prefix="og: http://ogp.me/ns#"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="ru-RU" prefix="og: http://ogp.me/ns#"> <!--<![endif]-->
<head>
<script type='text/javascript'>/* <![CDATA[ */var ratingsL10n = {"plugin_url":"http:\/\/www.rabota-biznes.com\/wp-content\/plugins\/wp-postratings","
ajax_url":"http:\/\/www.rabota-biznes.com\/wp-admin\/admin-ajax.php","text_wait":"\u041f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\
u0430, \u043d\u0435 \u0433\u043e\u043b\u043e\u0441\u0443\u0439\u0442\u0435 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\
u043e \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.","image":"stars","
image_ext":"gif","max":"5","show_loading":"1","show_fading":"1","custom":"0"};var ratings_mouseover_image=new Image();
ratings_mouseover_image.src="http://www.rabota-biznes.com/wp-content/plugins/wp-postratings/images/stars/rating_over.gif";;/* ]]> */</script>
<script type='text/javascript' src='http://www.rabota-biznes.com/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.85'></script>

<script type='text/javascript' src='http://www.rabota-biznes.com/wp-includes/js/wp-embed.min.js?ver=4.9.1'></script>
Screenshot of Facebook Button
Screenshot of Twitter Button
24940/www.beton-area.com/www.beton-area.com.txt
24940/www.beton-area.com02/www.beton-area.com.txt
<script type='application/ld+json'>{"@context":"http:\/\/schema.org","@type":"WebSite","@id":"#website","url":"http:\/\/www.beton-area.com\/","
name":"\u0411\u0435\u0442\u043e\u043d \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438","alternateName":"\u0412\u0441
\u0435 \u043e \u0431\u0435\u0442\u043e\u043d\u0435 \u0438 \u0433\u0438\u043f\u0441\u0435","potentialAction":{"@type":"SearchAction","target":
"http:\/\/www.beton-area.com\/?s={search_term_string}","query-input":"required name=search_term_string"}}</script>
No Facebook or Twitter buttons found

Return to PinTheTaleOnTheDonkey.com