beaulieuyoga.co.uk

Facebook Meta Pixel JavaScript pasted into DNS

$ dig TXT beaulieuyoga.co.uk

;; QUESTION SECTION:

;beaulieuyoga.co.uk. IN TXT

;; ANSWER SECTION:

beaulieuyoga.co.uk. 3600 IN TXT "<script> !function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';</sc…"

What Happened

The admin pasted the full Facebook Meta Pixel JavaScript snippet — complete with the `!function(f,b,e,v,n,t,s)` obfuscated IIFE — into their DNS TXT record. JavaScript will never execute inside a DNS response. The Pixel has been tracking no one from inside that TXT record since the day it was added.

Full TXT Record Value

<script> !function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';</script>