Why Some Websites Show Only a Click Here Button and Nothing Else

You click a search result during your morning commute on the train from Parramatta into the CBD, expecting a helpful article, and the page that loads is almost empty. A single line of text, one button, nothing else to read, no navigation menu, no images, no footer with an about page or a contact form. The whole experience has been reduced to a prompt: click here to proceed. Many Australians have run into this minimalist wall while looking for reviews of a new restaurant in Fitzroy, comparison-shopping for electricity plans in Adelaide, or simply chasing down a news headline that was shared in a group chat.

It feels jarring because most websites still try to look like proper destinations, with branding, menus and content designed to keep you engaged. The single-button variety, by contrast, treats the landing page as a waiting room rather than a destination. Often there is no visible brand at all, just a blue or green rectangle in the middle of the screen and a string of cryptic characters in the address bar. Some pages add a faint sentence such as "you will be redirected shortly," others do not even bother. The button itself can read anything, from "Click here to continue" and "Press here" to "Verify you are human" or simply "Continue."

This article unpacks what is actually happening when a site looks like a stripped-down doorway instead of a website. It looks at the technical mechanics, the commercial reasons publishers build these pages, the warning signs that suggest something more sinister, and the specific Australian rules and ISPs that govern how these pages are blocked, reported or simply tolerated. Along the way, there are practical habits that anyone in Sydney, Melbourne, Perth or a regional town like Ballarat can use before pressing that single button.

The hidden machinery behind a single button

Behind most of these stripped-down pages sits a redirect script. When the page loads, the browser runs a short piece of JavaScript, a server-side 302 status code, or a meta refresh tag that tells the browser to leave almost immediately and go somewhere else. The visible page is essentially a pause screen, a brief moment of nothingness so that the operator can count the visit, set a cookie, fingerprint the device, or pass the user through a traffic-quality filter before the real destination appears.

Some operators use this technique for legitimate reasons. A publisher sending visitors to a partner's site may want to record the referral in their own analytics first. A subscription site may want to confirm that a user is logged in before sending them on to the article. News organisations such as the ABC or Nine sometimes use intermediate pages to attach a paywall token or run a quick compliance check. In those cases, the page usually identifies itself, includes the publisher's name, and explains where the click will take you.

The suspicious cases are different. The page has no identifiable brand, no privacy policy link, no imprint. The URL might be long and full of random characters such as ?id=9f2c8e&r=ab. Inspecting the source often reveals a redirect chain that bounces through two or three different domains before settling on a final landing page. In many of these chains, the final destination is itself another redirect, part of an affiliate network or a traffic broker that earns a fraction of a cent for every visitor passed along. The visible button is essentially a toll booth for eyeballs.

Affiliate gateways and monetisation shortcuts

A great number of these pages exist because someone is being paid for the click. Affiliate marketers build what the industry calls gateway or bridge pages. The marketer buys cheap traffic from search ads, push notifications or social media placements, then funnels every visitor through a single-button interstitial so they can earn a commission on whatever the visitor does on the next page. The button is the hinge between traffic source and revenue.

The model is common in verticals where commissions are highest. Online gambling, cryptocurrency platforms, forex trading brokers, and sweepstakes-style lead generation all pay generously for sign-ups. Australian consumers regularly encounter these gateways when following links about betting odds during AFL season or when chasing offers advertised through the major sports apps. The page may load in a fraction of a second on a Telstra or Optus home connection, ask you to confirm that you are over 18, and then throw you at a bookmaker or a trading platform where the real money-making begins. Related reading on how these affiliate chains can stretch into areas such as romance and online dating funnels is covered in resources like the nzryomiyu love guide.

Some affiliates run the entire stack themselves, others buy traffic from third-party networks that do not always screen their publishers carefully. The result is that a search result or a paid ad might promise one thing in its snippet and then deliver you to a page that says only "continue" before pushing you toward something completely different. The snippet-to-button gap is often the first tell that the page is built for monetisation rather than information.

This is also where cloaking comes in. To keep ad networks and search engines happy, the operator shows a benign page to Google's crawler or to a reviewer at Facebook, then serves the single button to real humans identified through IP range, user-agent or other fingerprints. In Australia, this kind of cloaking falls foul of both Google Ads policies and the Australian Competition and Consumer Commission's misleading conduct rules, but enforcement usually happens after the damage is done.

Cloaking, spam and grey-area operators

Not every button-only page is an affiliate gateway. Some are outright cloaked spam, doorway pages designed to rank briefly for a hot search term before being swapped out for something else entirely. A page that ranks this morning for "energy rebates Queensland" might by tonight display a casino offer or a sketchy survey to anyone who clicks through. The single button helps hide the swap, because there is so little content on the page that a reviewer cannot tell what the site really is.

These operations are tied to a handful of offshore hosting providers and to domain registrars that allow bulk registration of throwaway .com or .xyz addresses. The Australian domain regulator auDA runs the .au namespace under stricter rules. To register a com.au, net.au or org.au you need an Australian Business Number or a registered trading name, which makes it harder for spammers to squat on a local-looking address. A button-only page living on a com.au is therefore unusual and worth a closer look, while the same page on a freshly registered .click, .top or .cyou is a much more common sight in spam reports submitted to ACMA.

Risks associated with these pages range from the merely annoying to the genuinely harmful. At the mild end, they cost you time and burn mobile data on a plan you are paying for. At the serious end, the next page in the chain may ask for credit card details to "verify your identity," may install a push-notification subscription that you cannot easily revoke, or may deposit a malicious file. The eSafety Commissioner and the National Anti-Scam Centre have both flagged this pattern in their public advisories, particularly during periods when scammers piggyback on breaking news such as cyclone warnings affecting Cairns or energy bill relief announcements in Canberra

Smart habits for safer browsing in Australia

A few habits make a noticeable difference. On a desktop browser, hover over the button to see the destination URL in the status bar before clicking. On a phone, long-press the link to preview the address. If the preview shows a domain that does not match the topic you were reading about, treat it as a red flag and close the tab. A useful primer on what to look for in those previews is offered by https://nzryomiyu.com/guides/2026/how-to-identify-a-suspicious-redirect-link-before-you-click, which walks through the kind of redirect chains these pages rely on.

Other small steps help as well. Keep your browser and operating system updated, because security patches often block the kind of scripts that these single-button pages rely on. Use a reputable ad blocker, which will neutralise many of the traffic sources that lead to these gateways in the first place. When you have to choose between logging into a service and clicking through an unknown gate, prefer the direct route. If you genuinely need information about, say, the latest council elections in Darwin or a comparison of NBN plans in regional South Australia, type the publisher's address into the address bar rather than following a search result that promises to deliver the same thing through one extra click.

It also helps to know what the legitimate versions of these pages look like, so that you can tell the difference. The side-by-side comparison below summarises the indicators you are most likely to encounter when you land on a page with nothing but a button.

Indicator	Likely legitimate bridge page	Likely suspicious gateway
Visible brand and publisher name	Clearly shown, matches the source domain	Absent, generic, or mismatched with the source
Link preview or hover state	Destination URL matches the topic or publisher	Destination URL is unrelated, abbreviated, or full of random characters
Redirect chain length	One short hop, often to the same publisher	Two or more hops across unrelated third-party domains
Presence of privacy policy and contact details	Linked from the page footer	Missing entirely
Domain registration age	Established business, whois shows years of history	Recently registered, often less than 90 days old
Page language and tone	Explains where you are going and why	Tells you to "continue," "verify," or "proceed" with no context

If you have already clicked and ended up somewhere that does not feel right, do not enter any details. Close the tab, clear your cookies for that site, and run a quick scan with whatever security tool your device offers. If money or personal information has changed hands, contact your bank, then file a report with Scamwatch and consider the free support offered through IDCARE, the Australian identity and cyber support service.

The single-button website is unlikely to disappear any time soon. Affiliate marketing is built into the modern web economy, and the techniques used to build these pages are widely shared. What changes, slowly, is the collective awareness of what they are. Each time an Australian pauses before clicking, hovers a link, or sends a short report to ACMA, the network gets a little safer for the next person who jumps on the train at Lidcombe or grabs a coffee in Fortitude Valley before opening a browser tab. Stay curious about the URL behind the button, share what you have learned with a friend or a relative who still clicks first and thinks later, and the rest of the web becomes a more readable place for everyone in the country.