abstractmatter.com > safeinternettoolv1.com

[MysteryFCM]

Original URL;

Server IP: 98.130.160.215 [ rev.opentransfer.com.215.160.130.98.in-addr.arpa ]

http://abstractmatter.com/rupek/ejyda/authorized.htm

Loads;

http://abstractmatter.com/rupek/ejyda/2.js

Redirects to;

Server IP: 78.47.91.153 [ static.153.91.47.78.clients.your-server.de ]
 > 38.99.170.9 [ Resolution failed ]
 > 212.117.165.126 [ ip-212-117-165-126.server.lu ]
 > 69.4.230.204 [ iad2-virt5.liquidgravity.com ]

http://safeinternettoolv1.com/1/?id=2004&smersh=b63db03e5&back=%3DDQy0jT5MgQNMI%3DM

Which downloads;

http://safeinternettoolv1.com/download.php?id=2004