Comment by luv2code

yikes. It was a browser extension that uses superfish to inject ads. the extension allows you to disable this feature, but it still pulls in superfish. https://chrome.google.com/webstore/detail/orbvious-interest/...

I removed the extension and the payload is more like 1MB. Still seems hefty but not as much of a concern to me.

I also noticed that content wasn't gzipped. should be a simple matter to add that to nginx.