New malvertizement featuring gifttree.com
I have received a copy of a new malvertizement featuring gifttree.com.
Analysis reveals two malicious URLs, being:
waytotheprofit.com/?cmpid=itlocation
station-appraisals.com/c/index.php?
The waytotheprofit.com URL leads us to an adnetserver.com URL which in turns leads us to a german language fraudware site, being diskretter.com (which, by the way, shares IP with A-records and mail servers with several domains including securepccleaner.com and exterminadordevirus.com.
