ALERT: Malvertizement featuring car.com

This one uses some pretty old protocols, but is still in cirulation:

getfreecar.com/statsa.php?u=<<removed>>

getfreecar.com/statsg.php?u=<<removed>> (loads the long since discarded gnida.swf)

getfreecar.com/statss.php?campaign=<<removed>>

blessedads.com/?cmpid=<<removed>>

adnetserver.com/?tmn=<<removed>>

antispywaremaster.com/<<removed>>

image

image

image