It appears to be a "redirect" operation. Pushing users from a legit website to a questionable one. It is a pretty crude one as the website I am pushed to is an obvious fake website for Xfinity. Not sure what other users are seeing.