> How did that user get to such a website in the first place? Through a link in an email message? Nope. Through an expired domain of a once-legit site that was

> How did that user get to such a website in the first place? Through a link in an email message? Nope. Through an expired domain of a once-legit site that was taken over, or through a mom-and-pop legit business that had their website taken over because of a wordpress bug. My brother mentioned to me the other day that he got to a "computer has been infected -- call this number" website from clicking on a Facebook ad!