www.project1999.org home page advertisement serving up trojan via js
 

Here's the Trend Micro threat article for the threat I saw Trend Micro clean:

http://about-threats.trendmicro.com/...=JS_IFRAME.WEN

I have attached screenshots of the ads at the top and bottom of the home page. I did not reload the page after receiving the notification from my Trend Micro client.

I've refreshed the home page 75+ times while capturing packets to see if I can't reproduce the event, to no avail.

I'm seeing a lot of "NoScript filtered a potential XSS attempt from http://bidder.mathtag.com." messages, but no more threats being cleaned by the Trend client.