These domains are pushing some sort of malware or other (possibly fake antivirus). It’s hard to tell exactly what nastiness is here, but given that these are all recently registered domains with fake WHOIS details then it’s certainly not going to be anything good.
Whatever it is, it seems to be promoted via spam and requires the correct User Agents and Referrer data to trigger. Sites are hosted on 184.108.40.206 (Dako Systems, Netherlands)
Leave a reply