Hacker News Reader

My assumption is that it's an exported slide from an FBI powerpoint presentation.

Hah. That's good.

I think it's interesting they embed the image as base64. I guess a single file deployment is easier.

The background might be a standard template, and they just have someone paste a logo onto another layer.

The question I have is why paste it in as a data URL rather than just upload the image to the server, if they control the server?

Maybe they do not control the origin server, only the domain and it would be easier just to redirect everyone using DNS.

So the FBI controls the server to which the domain now points ...

Easier to just have all requests respond with exactly the same HTTP response, or something, based on the requested domain.

They are not so consistent with what image they use for seized domains but in some cases like this one they use the website's logo.

The logos of the law enforcement agencies probably change every time as well. This one shows the logos of German, English, Irish, Dutch and US law enforcement agencies.

I assume they made a custom one in this case because they wanted/needed to highlight their international collaborators for this investigation.