Alex, I think it's an important detail to also note that bestantivirus com is serious.

1) They're paying for advertising to get in Google AdWords

2) They're robust enough to be hosted at multiple IP addresses

3) The six IP addresses that their website currently resolves to are NOT some zombie infected PCs, they are rented space on on Yahoo! servers.
Andrew from Vancouver | 08.27.08 - 2:23 pm | #

Agreed...
Alex Eckelberry | 08.27.08 - 3:20 pm | #

iframes seems serving up nothing _for now_ (tried various user agents). Interesting to see they have moved onto application exploitation instead of just user exploitation.
Kolor | 08.27.08 - 5:01 pm | #