3

I have noticed, this weird iFrame on bottom of quite a few websites. Weird because all of them same ip address.

Here is screenshot from Stack Overflow and Bundler.io:

enter image description here

enter image description here

It may sound far fetched but could it be possible that someone is listening on me?

I am using Chrome: 41.0.2272.118 (64-bit) and my OS is Ubuntu 14.04

I am talking about this:

   <iframe id="fn_layer8" src="http://223.224.131.144:80/l8/Layer8Servlet" target="_blank" frameborder="no" style="display: block !important; opacity: 0 !important; z-index: 2147483646 !important;">
    #document
    <html>
      <head>
        <style type="text/css"></style>
      </head>
      <body>
       <pre style="word-wrap: break-word; white-space: pre-wrap;"></pre>
      </body>
     </html>
    </iframe>
<div id="fnscreenOverlay" style="position: fixed !important; bottom: 0px !important; left: 0px !important; top: auto !important; right: auto !important; height: 2571px !important; z-index: 2147483645 !important; width: 100% !important; text-align: center !important; margin: 0px !important; padding: 0px !important; border: 0px !important; opacity: 0 !important; display: none !important; background-color: transparent !important;"></div>
Giacomo1968
  • 58,727
sonalkr132
  • 133

1 Answers1

6
<iframe id="fn_layer8" src="http://223.224.131.144:80/l8/Layer8Servlet" target="_blank" frameborder="no" style="display: block !important; opacity: 0 !important; z-index: 2147483646 !important;">

Layer8 creates new operator-owned advertising real-estate for more revenue-generating opportunities [...]

Flash Networks [...] is proud to count among its customers top-tier mobile carriers including Bharti Airte [...]

So what you have is an ISP injecting advertising code on the server side. I note that the iFrame DIV is set to transparent, so they are trying to show ads without you seeing them.

Why? Revenue.

Since ads are one of the primary virus vectors, it is not only shady practice, it is actively dangerous to users. (Google: malvertising)

Giacomo1968
  • 58,727
Yorik
  • 4,988