We next bring the reader’s attention to how this scam
shows up in mobile advertisements. The URL blacklists on
VirusTotal flagged some of the intermediate redirection URLs
as malicious or phishing websites. The concerned domains here
include avazutracking.com and track.trkthatpaper.org. Based on
our results, all URLs relating to these domains are not actually
bad. These domains appear to be parts of some advertisement
networks and exchanges and do show non-malicious content
also. Likewise, the com-00-usa5.com mentioned earlier also
presents non-malicious advertisements.