Hacker News new | past | comments | ask | show | jobs | submit
"We investigated the "filed on Tuesday" link in an archived NYT article (hxxps://archive.ph/jXv3A). It's supposed to lead to a lawsuit PDF hosted by the plaintiff's law firm. Instead, clicking the link leads to an ad/phishing network and intermittently serves instructions to run elevated cURL commands, advertising pages, and ZIP-downloads.

Archive.today's /o/ endpoint itself returned the instruction to redirect, not the original source URL. We observed this in more formal testing on October 28, 2026, at approximately 07:35 UTC.

The link's actual href on the archived version of the page was:

hxxps://archive.ph/o/jXv3A/https://schenklawfirm.com/wp-content/uploads/2026/10/wan-v-o..."

As it happens, and this is quite common, use of archive.today was not necessry

https://www.courthousenews.com/wp-content/uploads/2026/10/wa...

No "bot protection"