Asharae Posted December 30, 2016 Share Posted December 30, 2016 Hey all, Went to the news post on front page about Mobile Networks raising prices in U.K following Brexit. Once the page had loaded I got that blasted redirect again. It appears to be trying to send me to a Sky advert. This is is the URL it tries to take me to: data:text/html;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGhlYWQ+PGltZyBzcmM9Imh0dHBzOi8vdnVtaGQudm9sdXVtdHJrMi5jb20vaW1wcmVzc2lvbi9hMTJiNzBhYS1jZDc0LTQ2MTYtYTcxZi1mYjU3NmM4NDFhN2U/YWZmX3N1YjI9NWE1YWRmMzktNzk3Zi00ODFlLWJkNWMtNWUzY2NjM2QyYWZiXzE0ODMxMzA0MDAmYWZmX3N1YjM9TUVESUFNQVRIJmRvbWFpbj1uZW93aW4ubmV0JmRvbWFpbl9pZD03N2QwMTA3ZGZjYzgwMzNkNmUyZTdmYjVlN2RiM2EyMSIgd2lkdGg9IjAiIGhlaWdodD0iMCI+PG1ldGEgY2hhcnNldD0iVVRGLTgiLz48c2NyaXB0IHR5cGU9ImFwcGxpY2F0aW9uL2phdmFzY3JpcHQiIHNyYz0iaHR0cDovL2NvZGUuanF1ZXJ5LmNvbS9qcXVlcnktMS4xMC4yLm1pbi5qcyI+PC9zY3JpcHQ+PHNjcmlwdCB0eXBlPSJhcHBsaWNhdGlvbi9qYXZhc2NyaXB0IiBzcmM9Imh0dHA6Ly9mdGxhYnMuZ2l0aHViLmlvL2Zhc3RjbGljay9saWIvZmFzdGNsaWNrLmpzIj48L3NjcmlwdD48dGl0bGU+PC90aXRsZT48c3R5bGU+I21haW4sI3BvcHVwe2JhY2tncm91bmQ6cmdiYSgyNTUsMjU1LDI1NSwyNTUpfWJvZHl7Zm9udC1mYW1pbHk6SGVsdmV0aWNhICJIZWx2ZXRpY2EgTnVldWUiIEFyaWFsfSNtYWlue21hcmdpbjowIGF1dG87d2lkdGg6MTAwJTtoZWlnaHQ6MTAwJTtwb3NpdGlvbjpmaXhlZDt0b3A6MDtyaWdodDowfSNvdmVybGF5LCNwb3B1cCwuYnV0dG9uLWhvbGRlcntwb3NpdGlvbjphYnNvbHV0ZX0jb3ZlcmxheXtiYWNrZ3JvdW5kOnJnYmEoMCwwLDAsLjMpO3RvcDowO2xlZnQ6MDtyaWdodDowO2JvdHRvbTowfSNwb3B1cHt3aWR0aDoyNTBweDtoZWlnaHQ6MTI4cHg7ei1pbmRleDoxMDtib3JkZXItcmFkaXVzOjE1cHg7dGV4dC1hbGlnbjpjZW50ZXI7Ym94LXNpemluZzpib3JkZXItYm94O2xlZnQ6NTAlO3RvcDo1MCU7bWFyZ2luOi02NHB4IDAgMCAtMTI1cHg7Zm9udC1zaXplOjE0cHh9I3BvcHVwIGgze21hcmdpbjowO3BhZGRpbmc6MjBweDtsaW5lLWhlaWdodDoyMnB4fSNwb3B1cCBwe21hcmdpbjowO3BhZGRpbmc6MH0jcG9wdXAgLmJ1dHRvbi1ob2xkZXIgYXtjb2xvcjojMDA3QUZGO3RleHQtZGVjb3JhdGlvbjpub25lO2xpbmUtaGVpZ2h0OjQ1cHg7ZGlzcGxheTpibG9jaztib3JkZXItdG9wOjFweCBzb2xpZCAjZWZlZmVmO2ZvbnQtc2l6ZToxNnB4fSNwb3B1cCAudHdvLWJ1dHRvbiBhe3dpZHRoOjUwJTtmbG9hdDpsZWZ0O2JveC1zaXppbmc6Ym9yZGVyLWJveH0jcG9wdXAgLnR3by1idXR0b24gYTpmaXJzdC1jaGlsZHtib3JkZXItcmlnaHQ6MXB4IHNvbGlkICNlZmVmZWZ9LmJ1dHRvbi1ob2xkZXJ7d2lkdGg6MTAwJTtib3R0b206MH08L3N0eWxlPiA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCwgbWF4aW11bS1zY2FsZT0xLjAsIG1pbmltdW0tc2NhbGU9MS4wLCB1c2VyLXNjYWxhYmxlPW5vLCBtaW5pbWFsLXVpIj48L2hlYWQ+PGJvZHk+IDxkaXYgaWQ9Im1haW4iPiA8ZGl2IGlkPSJvdmVybGF5Ij48L2Rpdj48ZGl2IGlkPSJwb3B1cCI+IDxoMz4gPHA+T3BlbiB0aGlzIHBhZ2UgaW4gIkFwcDwvcD48cD5TdG9yZSI/PC9wPjwvaDM+IDxkaXYgY2xhc3M9ImJ1dHRvbi1ob2xkZXIgdHdvLWJ1dHRvbiI+IDxhPjxiPkNhbmNlbDwvYj48L2E+IDxhPk9wZW48L2E+IDxkaXYgc3R5bGU9ImNsZWFyOiBib3RoIj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48c2NyaXB0IHR5cGU9ImFwcGxpY2F0aW9uL2phdmFzY3JpcHQiPiQoZG9jdW1lbnQpLnJlYWR5KGZ1bmN0aW9uKCl7dmFyIGV4ZWN1dGVkPWZhbHNlOyAkKGZ1bmN0aW9uKCl7RmFzdENsaWNrLmF0dGFjaChkb2N1bWVudC5ib2R5KTt9KTsgZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignY2xpY2snLCBmdW5jdGlvbihlKXtpZiAoIWV4ZWN1dGVkKXt3aW5kb3cub3BlbigiaHR0cDovL2FmZmlsaWF0ZWh1Yi5za3liZXQuY29tL3Byb2Nlc3NpbmcvY2xpY2t0aHJnaC5hc3A/YnRhZz1hXzIxMzY3Yl84NzMmYWlkPTEwMTA2MF8zMDEyMjAxNiIpOyBzZXRUaW1lb3V0KGZ1bmN0aW9uKCl7d2luZG93Lmhpc3RvcnkuYmFjaygpO30sIDMwMDApOyBleGVjdXRlZD10cnVlO313aW5kb3cub250b3VjaG1vdmU9bnVsbDt9LCBmYWxzZSk7IHdpbmRvdy5vbnRvdWNobW92ZT1wcmV2ZW50RGVmYXVsdDsgc2V0VGltZW91dChmdW5jdGlvbigpe3dpbmRvdy5vbnRvdWNobW92ZT1udWxsO30sIDE1MDAwKTt9KTtmdW5jdGlvbiBwcmV2ZW50RGVmYXVsdChlKXtlPWUgfHwgd2luZG93LmV2ZW50OyBpZiAoZS5wcmV2ZW50RGVmYXVsdCkgZS5wcmV2ZW50RGVmYXVsdCgpOyBlLnJldHVyblZhbHVlPWZhbHNlO307PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4= The Evil Overlord 1 Share Link to comment Share on other sites More sharing options...
The Evil Overlord Posted December 31, 2016 Share Posted December 31, 2016 Could've been worse, could have been a redirect to a site devoted to overthrowing Brexit, and to remain in the EU +Raze and Victor Rambo 2 Share Link to comment Share on other sites More sharing options...
Steven P. Administrators Posted January 2, 2017 Administrators Share Posted January 2, 2017 Noted, but without an url we can't do much Draconian Guppy 1 Share Link to comment Share on other sites More sharing options...
Steven P. Administrators Posted January 2, 2017 Administrators Share Posted January 2, 2017 I reported it, maybe they can do something with the above info Draconian Guppy 1 Share Link to comment Share on other sites More sharing options...
Farchord Posted January 2, 2017 Share Posted January 2, 2017 It seems to decode to this: <!DOCTYPE html><html><head><img src="https://vumhd.voluumtrk2.com/impression/a12b70aa-cd74-4616-a71f-fb576c841a7e?aff_sub2=5a5adf39-797f-481e-bd5c-5e3ccc3d2afb_1483130400&aff_sub3=MEDIAMATH&domain=neowin.net&domain_id=77d0107dfcc8033d6e2e7fb5e7db3a21" width="0" height="0"><meta charset="UTF-8"/><script type="application/javascript" src="http://code.jquery.com/jquery-1.10.2.min.js"></script><script type="application/javascript" src="http://ftlabs.github.io/fastclick/lib/fastclick.js"></script><title></title><style>#main,#popup{background:rgba(255,255,255,255)}body{font-family:Helvetica "Helvetica Nueue" Arial}#main{margin:0 auto;width:100%;height:100%;position:fixed;top:0;right:0}#overlay,#popup,.button-holder{position:absolute}#overlay{background:rgba(0,0,0,.3);top:0;left:0;right:0;bottom:0}#popup{width:250px;height:128px;z-index:10;border-radius:15px;text-align:center;box-sizing:border-box;left:50%;top:50%;margin:-64px 0 0 -125px;font-size:14px}#popup h3{margin:0;padding:20px;line-height:22px}#popup p{margin:0;padding:0}#popup .button-holder a{color:#007AFF;text-decoration:none;line-height:45px;display:block;border-top:1px solid #efefef;font-size:16px}#popup .two-button a{width:50%;float:left;box-sizing:border-box}#popup .two-button a:first-child{border-right:1px solid #efefef}.button-holder{width:100%;bottom:0}</style> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, minimal-ui"></head><body> <div id="main"> <div id="overlay"></div><div id="popup"> <h3> <p>Open this page in "App</p><p>Store"?</p></h3> <div class="button-holder two-button"> <a><b>Cancel</b></a> <a>Open</a> <div style="clear: both"></div></div></div></div><script type="application/javascript">$(document).ready(function(){var executed=false; $(function(){FastClick.attach(document.body);}); document.addEventListener('click', function(e){if (!executed){window.open("http://affiliatehub.skybet.com/processing/clickthrgh.asp?btag=a_21367b_873&aid=101060_30122016"); setTimeout(function(){window.history.back();}, 3000); executed=true;}window.ontouchmove=null;}, false); window.ontouchmove=preventDefault; setTimeout(function(){window.ontouchmove=null;}, 15000);});function preventDefault(e){e=e || window.event; if (e.preventDefault) e.preventDefault(); e.returnValue=false;};</script></body></html> Steven P. 1 Share Link to comment Share on other sites More sharing options...
Steven P. Administrators Posted January 2, 2017 Administrators Share Posted January 2, 2017 Thanks a lot! I will add to the ticket Draconian Guppy 1 Share Link to comment Share on other sites More sharing options...
Recommended Posts