This is what the original wordpress instance looked like (just the frontpage, which did not carry malicious content):
http://i.imgur.com/FeCKUu9.jpg
- However, the malicious page on this wordpress instance redirects to a site named foxrxs, registered a day ago (as of this writing) http://whois.domaintools.com/foxrxs.com - to "Gergo Czako" in Hungary.
- The foxrxs site is made to look like Fox News, but it basically just tries to sell people "raspberry ultra drops" - a diet supplement:
http://i.imgur.com/RHMxj7T.jpg
- Most of the links on foxrxs go to onlineslimdiet:
http://i.imgur.com/e4tdYm1.png
- This site was also registered yesterday (as of this writing): http://whois.domaintools.com/onlineslimdiet.com - in this case to "Uta Kalb" in Germany. However, what is notable is both domains use exactly the same name servers: ns1.dnscentral.ru ns2.dnsmax.ru So, given the same exact registration date and same name servers, chances are, both are owned by the same entity.
- And, this seems to be a common scam: http://www.complaintsboard.com/bycompany/raspberry-ultra-dro... Basically, an email address is hacked one way or another, which then often links to a compromised wordpress blog. That redirects to a new domain that is made to look like fox news. The fake fox news site appears to endorse this miracle diet supplement, with all links pointing to another site where you can actually order the product. People apparently do receive the product, but I'm guessing the product itself is a scam. Nice way to make money - only $60 for two ounces of snake oil!
This is exactly what I had in mind. A web page stylized as a news website with an article that subtly points to some diet pills. If one didn't read the URL he could really fell for that.
A lot of those websites are created by affiliates, and not by the product owner. The affiliate commission for digital products is pretty high (75%-85% is quite common), and affiliates often create various review sites for the products they're promoting, or use existing sites they own and add reviews written by "users" of the product.
Flogs and farticle sites are so 2006 though. Now they use markov chain based generators to generate sites based on content scraped off other sites.
They build entire webpages, along with side-stories and article comments that support their product. They look SO real that once I (and I consider myself pretty tech-savvy, having access to Internet for 15 years) fell for it briefly, and then had to explain it to my wife who stumbled upon them as well. I was truly impressed by amount of work these guys went through not only to write a pretty long science-looking article, but to build a whole (albeit pretty static) webpage and write realistic comment sections. Sadly, this whole effort is done to deceive other people.