A page I was on changed to a flash update scam page. The site said my flash player is out of date. I knew that was not true so it seemed suspicious to me. The link is here;
https://appsaucenow.com/landingpage/rainsummer1/?session=6da34b041bcdad0ceb2cdb67064d1f7c&A=1&F=3
The site says there's a security risk if flash is not updated and says you can update it with premier software updater. After I did a look-up on premier software updater, I found a guide telling me how to remove the "premier download manager toolbar virus" so I'm fairly sure it's fake, a look at the source code confirmed this.
I've looked up the scam site on robtex and it said it found it linked to anapopescu.com, popescuana.com, and anapopescu.net. Both anapopescu are hosted with Dreamhost nameservers while the popescuana site is hosted on world4you servers, this also gave me IP addresses. I looked up both sites on the Better Business Bureau site, I could not find world4you, and Dreamhost had only 6 ratings, all 1 stars. The reviews say 3 years ago, they started using "predatory" billing and locks people into contracts but was fine beforehand. I doubt a scammer would use either hosting site so I'm guessing the sites are part of it.
I also looked up the IP addresses(using ipfingerprints.com), the IP for popescuana.com is 81.19.145.55 and is located in Vienna, Austria, the site could not find the area code, zip code, state, or metro. The IPs for anapopescu.net are 64.90.60.231 and 69.163.162.70. 64.90.60.231 leads to a place in Kansas, United States, however, the IP finder could not list the area code, zip code, state, or metro either. The IPs for anapopescu.com were 69.163.148.123 and 69.163.162.94. The IP that I did not list locations for are 69.163.148.123, 69.163.162.94, and 69.163.162.70 all point to the same place, California, United States, and all have full information.
I looked for info about the IPs(using projecthoneypot.org), 81.19.145.55 (popescuana.com, located in Vienna, Austria) has a suspicious activity rating that stopped a little less than 11 months ago and 69.163.162.94 (anapopescu.net, located in California, United States) has a suspicious activity rating that stopped a little less than 3 years ago.
The IPs 64.90.60.231 (anapopescu.net, located in California, United States), 69.163.162.70 (anapopescu.net, located in California, United States), and 64.90.60.231 (anapopescu.net, located in Kansas, United States) all had no record of suspicious activity.