Client-side redirect by target + Server-side redirect by attacker (calc) via iframe for repeated prompts

Repeated prompts work automatically with an extension installed. Otherwise, click anywhere in any open tab or browser UI to unblock.