I get this on this page, clicking for the next page I am redirected to
httx://replace.com/?page=1&kop=DRAMATISCH_VERLIES_ORANJE§ie=ek-2012&artikelURL=http%3A%2F%2Fwww.telegraaf.nl%2Ftelesport%2Fvoetbal%2Fek-2012%2F12323912%2F__DRAMATISCH_VERLIES_ORANJE__.html&hashCheck=3ba7f3ffc6f38aa0e1cfc9a23ec7a1cc&id=12323912&forumid=12324885
Was this newspaper site infected? htxp://www.telegraaf.nl/telesport/voetbal/ek-2012/12323912/DRAMATISCH_VERLIES_ORANJE.html
polonus
The top level is to a real estate firm in Idaho
I received no redirect when I went to see how Holland did from the telegraf link
All pages 1-8/Next/Last are given with the redirect link. It is possible if this isn’t how the site normally behaves. I also see no other indication of the “replace” site in their source code besides the redirects.
This is spyware/adware, see: http://www.mywot.com/en/scorecard/nuggad.net
I see this in the code of that site page → var adserverurl= encodeURIComponent(“htxp://ib.adnxs.com/seg?add=NUGGVARS&member=1058”); backlink
I see var nvurl = “;”; inside that code
polonus