Link redirection, again

[Sweno]

well I went back to the post in question (link) and it appears to be a semi-random occurrence.
but looking at the source of the page does show javascript calls to api.viglink.com (as well as google apis, quantserve tracking, and some iphone/ipad specific callouts)

After a cursory parsing of the javascript in question

Code:

    var vglnk = { api_url: '//api.viglink.com/api', key: 'd2f6dc3d61fd72ef48d01980d6bfec29' };
    (function(d, t) {
        var s = d.createElement(t);
        s.type = 'text/javascript';
        s.async = true;
        s.src = ('http:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js';
        var r = d.getElementsByTagName(t)[0];
        r.parentNode.insertBefore(s, r);
    }(document, 'script'));

It looks to be doing some on the fly redirection of non-https links.
The javascript code at http://cdn.viglink.com/api/vglnk.js (one more domain for my hosts file to blackhole) which gets loaded and run is beyond my motivation to parse.

edit:
after having checked out viglink.com's page, it appears that certain things (like "link insertion" which was complained about earlier) can be turned on and off on an per-account basis. I have no clue what level things are set at or what granularity (all of yuku, all of drunkardswalkforums, etc) these things operate.
The only good (and I hesitate to use that term) thing about this is that the javascript is fast, so fast that I don't even see the redirection happening on my desktop. The only reason I caught it happening was my phone has a much slower internet connection (3g vs broadband) and it took a second to bounce through their api server.
-Terry
-----
"so listen up boy, or pornography starring your mother will be the second worst thing to happen to you today"
TF2: Spy