Today, I was somehow redirected to a porn site and upon closer inspection of my browsing history, I see four URLs which I did not intentionally visit but may have been a redirect from one to the other to the other until it landed on the porn site.
I believe the initial link I clicked on was from a known travel site.
The first questionable URL in my browser history was http://pqvut6v6b9yfpvpdjpe2hw7.12voltenerji.com/index.php?s=Z2lvdnJ1ZD1oaXkmdGltZT0xNDA3MjIyMTM0MzY1ODA1MjUyNCZzcmM9MzIyJnN1cmw9d3d3LndpbGRwbGFuZXRhZHZlbnR1cmVzLmNvbSZzcG9ydD04MCZrZXk9RTNEQUM0RUMmc3VyaT0vZGVzdGluYXRpb25zLyUzZmNvdW50cnk9cGVydSZ0cmlwPXVsdGltYXRlLXdpbGRsaWZlLWFtYXpvbi1tYWNodS1waWNjaHUtMTMtZGF5
The s=
parameter in the URL can be base64 decoded to:
giovrud=hiy&time=14072221343658052524&src=322&surl=www.wildplanetadventures.com&sport=80&key=E3DAC4EC&suri=/destinations/%3fcountry=peru&trip=ultimate-wildlife-amazon-machu-picchu-13-day
I believe www.wildplanetadventures
was supposed to be the resulting site but it was not where I was taken. Browsing history looks clean otherwise (before the incident and after the incident).
I was also not able to reproduce the problem by retracing my clicks on the original travel website. Subsequent attempts to follow the same link that I thought was bad brought me to the right travel site and not a porn site.
Scans with Microsoft Security Essentials found nothing on my computer.
What more can I do to determine whether it was my PC that was compromised or if the travel site I visited was compromised?