Yes, the site hijacks the browser. Luckily there were no exploits found.
Here is the source code, pulled from an external malware researching program:
(Site has censored some information)
Code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta name="google-site-verification" content="-hoHw9fPs8z5NKSCGS6RonJEs8tq_FiTLRSDVx4PC44" />
<meta http-equiv="content-type" content="text/html; charset=utf-8"><title>Rickroll!</title>
<script type="text/javascript">
<!--
if (self.parent.frames.length && self.parent.frames.length != 0) self.parent.location = document.location;
neva = "WE'RE NO STRANGERS TO LOVE\n\
YOU KNOW THE RULES AND SO DO I\n\
A FULL COMMITMENTS WHAT I'M THINKING OF\n\
YOU WOULDN'T GET THIS FROM ANY OTHER GUY\n\
\n\
I JUST WANNA TELL YOU HOW I'M FEELING\n\
GOTTA MAKE YOU UNDERSTAND\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU\n\
\n\
WE'VE KNOWN EACH OTHER FOR SO LONG\n\
YOUR HEART'S BEEN ACHING, BUT\n\
YOU'RE TOO SHY TO SAY IT\n\
INSIDE WE BOTH KNOW WHAT'S BEEN GOING ON\n\
WE KNOW THE GAME AND WE'RE GONNA PLAY IT\n\
\n\
AND IF YOU ASK ME HOW I'M FEELING\n\
DON'T TELL ME YOU'RE TOO BLIND TO SEE\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU\n\
\n\
(GIVE YOU UP\n\
GIVE YOU UP)\n\
NEVER GONNA GIVE, NEVER GONNA GIVE\n\
(GIVE YOU UP)\n\
NEVER GONNA GIVE, NEVER GONNA GIVE\n\
(GIVE YOU UP)\n\
\n\
WE'VE KNOWN EACH OTHER FOR SO LONG\n\
YOUR HEART'S BEEN ACHING, BUT\n\
YOU'RE TOO SHY TO SAY IT\n\
INSIDE WE BOTH KNOW WHAT'S BEEN GOING ON\n\
WE KNOW THE GAME AND WE'RE GONNA PLAY IT\n\
\n\
I JUST WANNA TELL YOU HOW I'M FEELING\n\
GOTTA MAKE YOU UNDERSTAND\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU\n\
\n\
NEVER GONNA GIVE YOU UP\n\
NEVER GONNA LET YOU DOWN\n\
NEVER GONNA RUN AROUND AND DESERT YOU\n\
NEVER GONNA MAKE YOU CRY\n\
NEVER GONNA SAY GOODBYE\n\
NEVER GONNA TELL A LIE AND HURT YOU";
if(window.opera){
window.~[Filtered JS Events]~ = function(e){
if(e.keyCode != 18 && e.keyCode != 27 && e.keyCode != 32 && e.keyCode != 115){
if(Math.random() > .5) for(var i = 0; i < 35; i++) document.getElementById('roll').Back();
else for(var i = 0; i < 53; i++) document.getElementById('roll').Forward();
document.getElementById('roll').Play();
}
else if(e.keyCode == 115){
for(x in neva.split('\n')){
alert(neva.split('\n')[x]);
}
}
return false;
}
}else{
window.~[Filtered JS Events]~ = function(e){
if(e.keyCode != 13 && e.keyCode != 27 && e.keyCode != 32){
if(Math.random() > .5) for(var i = 0; i < 35; i++) document.getElementById('roll').Back();
else for(var i = 0; i < 53; i++) document.getElementById('roll').Forward();
document.getElementById('roll').Play();
}
return false;
}
}
/* document.~[Filtered JS Events]~ = function(){
for(var i = 0; i < 35; i++) document.getElementById('roll').Back();
document.getElementById('roll').Play();
return false;
} */
window.resizeTo(640,480);
window.moveTo(0,0);
for (i = 1; i <= 9; i++){
setTimeout('window.moveTo(1599,1199);', i+"000");
i++;
setTimeout('window.moveTo(0,1199);', i+"000");
i++;
setTimeout('window.moveTo(1599,0);', i+"000");
i++;
setTimeout('window.moveTo(0,0);', i+"000");
}
//-->
</script></head><body onbeforeunload="for(x in neva.split('\n')){ alert(neva.split('\n')[x]); } return false;">
<script type="text/javascript">
<!--
if(window.attachEvent){
document.body.~[Filtered JS Events]~ = function(){
if(Math.random() > .5) for(var i = 0; i < 35; i++) document.getElementById('roll').Back();
else for(var i = 0; i < 53; i++) document.getElementById('roll').Forward();
document.getElementById('roll').Play();
return false;
}
}
//-->
</script>
<div style="text-align: center;"><embed id="roll" src="index_files/rickroll.swf" height="300" width="400"></div>
<p style="text-align: center;">You have officially been <a href="http://en.wikipedia.org/wiki/Rickrolling">Rickrolled!</a></p>
<p style="text-align: center;"> <b>***This site is for entertainment purposes and will not harm your computer. Clicking through the lyrics is all that is needed to close the browser window.***</b>
<!-- <b>***This site is for entertainment purposes and will not harm your computer.***</b> --></p>
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-331164-29");
pageTracker._trackPageview();
} catch(err) {}</script> </body></html>