What should I do in the case of Facebook links redirecting to spam?
When I visit a link to an external site (like Huffpost) from within Facebook, I get redirected to a scammer site after scrolling a little bit. The URLs are eu.unitize370vu.pw and eu.jargonize 22bt.pw.
In the case of Facebook links redirecting to spam, you have correctly pointed it out, this is indeed a scammer site, and has nothing to do with malware (malicious applications). Apps on the Google Play Store are reviewed by teams of specialists, so theoretically you cannot get malware from there. To make sure that no ¨unreviewed¨ app is downloaded, disable developer options (if you have them enabled).
Below is the evidence that leads me to believe that both sites are illegitimate.
I ran a whois on unitize370vu.pw, and the site was registered today:
Domain Name: UNITIZE370VU.PW
Registry Domain ID: D50760466-CNIC
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL:
Updated Date: 2017-08-02T08:21:12.0Z
Creation Date: 2017-08-02T08:21:11.0Z
As for the other site, it was only slightly older.
Domain Name: JARGONIZE22BT.PW
Registry Domain ID: D50651876-CNIC
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL:
Updated Date: 2017-07-28T10:28:00.0Z
Creation Date: 2017-07-28T10:28:00.0Z
Both sites are resisted by one James Carter, who works for Friendly Advice.
In case you cannot read German, the text reads the following (I ran an online OCR in German to get the text, then passed it to google translate):
The page on 'eu.unitize370vu.pw' says:
Congratulations!
Google users! They were selected as winners of today's FREE iPhone 7, PlayStation 4 or Samsung Galaxy S6!
Please click OK to claim your price before we give it to someone else!
You only have 1 minute and 30 seconds to answer the 3 following questions before the prizes are awarded to another happy visitor! Good luck!
While being on this site will not harm any device, it can track your IP address, which can be used to find your information, including your ISP, (full) name and even address. To avoid this happening to you, never click on a link on Facebook, but rather search the title on Google and verify that the URL is a legitimate one, like www.huffingtonpost.com.
Below is the evidence that leads me to believe that both sites are illegitimate.
I ran a whois on unitize370vu.pw, and the site was registered today:
Domain Name: UNITIZE370VU.PW
Registry Domain ID: D50760466-CNIC
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL:
Updated Date: 2017-08-02T08:21:12.0Z
Creation Date: 2017-08-02T08:21:11.0Z
As for the other site, it was only slightly older.
Domain Name: JARGONIZE22BT.PW
Registry Domain ID: D50651876-CNIC
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL:
Updated Date: 2017-07-28T10:28:00.0Z
Creation Date: 2017-07-28T10:28:00.0Z
Both sites are resisted by one James Carter, who works for Friendly Advice.
In case you cannot read German, the text reads the following (I ran an online OCR in German to get the text, then passed it to google translate):
The page on 'eu.unitize370vu.pw' says:
Congratulations!
Google users! They were selected as winners of today's FREE iPhone 7, PlayStation 4 or Samsung Galaxy S6!
Please click OK to claim your price before we give it to someone else!
You only have 1 minute and 30 seconds to answer the 3 following questions before the prizes are awarded to another happy visitor! Good luck!
While being on this site will not harm any device, it can track your IP address, which can be used to find your information, including your ISP, (full) name and even address. To avoid this happening to you, never click on a link on Facebook, but rather search the title on Google and verify that the URL is a legitimate one, like www.huffingtonpost.com.