Another malicious SWF at www.classmates.com
Here it is - another myjewelrybox.com malicious creative, visually identical one previously discovered at lyricsmania.com, and reported on here:
Malicious advertisement at lyricsmania.com
URL of malicious SWF at classmates.com:
http://nztv.prod.untd.com/RealMedia/ads/Creatives/ISP/CM_GeminiIntera_LB_1_10179/728x90.swf
An analysis of the SWF reveals the URL iexplorer-security.org/?id=624400105.
The campaign ID is identical to the ID for the other malicious SWF discovered on classmates.com, being:
http://nztv.prod.untd.com/RealMedia/ads/Creatives/ISP/CM_GeminiIntera_FPR_4_10179/300x250.swf?
The mechanics of the redirect are also identical.
Here is a double whammy for you - both malicious advertisements being displayed at the same time - I haven't seen this happen before...
