More bogus Free Celebrities Movies

The following site advertises quite a few “Free Celebrities Movies” … but that’s not what you get …


 (Image edited for display purposes)



As you can see there are several culprits involved … porntubq(dot)com detected as: HTML/TrojanClicker.Agent.F
then “64.28.183.26” loads the ActiveX to “helpticket(dot)net – you can see the VirusTotal results here.


helpticket(dot)net is hosted at: Cernel via ESTDOMAINS/PrivacyProtect (64.28.183.26 = Cernel)



Comments are closed.