update to just use 3 random letters to work around Asans's blocking document.body.innerHTML scan