In our experiments, we encountered several instances of
win-free-iPhone or win-free-iPad advertisements. In our traces,
these advertisements had a few landing pages with domains such
as com-00-usa5.com and 1.cdna.com, possibly from unrelated
parties (based on Whois records). These landing pages present
the user in flashy language that they have been lucky, an
iPhone (or some other electronic) is theirs if they go to the
next step. Examples are shown in Figures 9 (a) and (b). In
Figure 9 (a) all the users seeing the particular page are “lucky”
and “randomly selected to qualify for the special offer”. The
tricked users upon continuing are lead to a page like that in
Figure 9 (c). This same page may itself come from different
URLs such as http://www.electronicpromotion.com/Flow.aspx
and http://www.promotionalsurveys.com/Flow.aspx. The page
collects the users’ personal information such as name, email
address, physical address, and phone number and then leads to
a website called http://www.amarktflow.com/. The user ends up
answering lengthy surveys, confirming the personal information
already provided, and then prompted to install an app or a
browser toolbar.