Ran https://asat-tool.cf/urls in VM no VPN with three of the tabs opening to the following 3 different URL’s and the page as per first image:
https://0fficial.online/l/PC/MessageCenter/?lpk=15cd74558183435707&language=en-GB&uclick=ojwfh9fv#
https://0fficial.online/l/PC/MessageCenter/?lpk=158674d181f3438b08&language=en-GB&uclick=ojwfh93v#
https://0fficial.online/l/PC/MessageCenter/?lpk=15317495812743e609&language=en-GB&uclick=ojwfh9m7#

Clicking OK and the Scam option opens a new browser tab (Virus Found) for a fake Microsoft scan:

The so called scan runs for about 5 seconds leading to:

Clicking the REMOVE VIRUSES NOW button opens yet another tab as per the following image (with the above page now turning to a "Reward"):

Clicking the "Start free scan" button leads to the good old CleanMyPC shite:


Number registered to Symbio Networks:
