Hacker News Reader

It was served through ad networks, the only version in the wild I've heard of was targetting a russian network

It was disguised as an ad, not served through ad networks. In other cases it was disguised as a file from a CDN.

Yeah, I just wondered if any of these ad networks would be serving through any of the large-scale adult sites like pornhub, tube8, etc.