When using a tor browser to connect to asstr.org an unexpected message shows in the browser:
Come visit us at https://www.asstr.org/ to read this story and hundreds of thousands of other works!
Are you a tor user seeing this message by mistake? Take a look at http://awe-kyle.ru/ to see why. They ahve found a way touse tor to their commercial advantage.
How does this work, how can a regular website be hijacked through TOR ?
I can reproduce the problem. I first assumed that it was a bad exit node. Tor doesn't add an additional encryption layer to the last leg between exit node and a regular (non-.onion) website. So exit nodes can eavesdrop or perform a man-in-the-middle attack if they want to and that connection isn't encrypted in some other way. However, that page appears in the HTTPS version, and the certificate checks out. It's the same I get when I access the website normally. It's a certificate by Let's Encrypt with the following SHA-256 fingerprint:
I have seen that web site and others hijack all of asstr.org. They pretend that they are asstr and supply that content with porn and ads even without TOR. IE, awe-kyle(dot)ru/anything will look like asstr(dot)org/anything.
These sites come and go. Two others active now are pegast-irk(dot)ru/ and pegast-irk(dot)ru/