As you can see it is the Argentine site imagenespack(com.ar) that as you can see in NIC.ar, the site was created on April 8 and surely only for this harmful purpose:
The site, with a supposed video, is as follows:
On this same site there are a number of HTM files and the deception is presented when trying to watch or vote the video, since through clickjacking, a harmful application is added to the user's profile.Apparently the domain has been registered in a dns violated and / or under the control of the criminal and it is not possible to contact them to unsubscribe the site. The site has already been reported to NIC.ar but it has not been taken into account for now, which demonstrates once again the lack of a real control body that offers real guarantees before computer crimes.
Cristian from the Segu-Info Newsroom

