Criminal supporter activity for free...

I feel this "certification for free" scam is a never-ending story. I said for at least two years that nobody should reshare posts which contains a lot of fraudulent URLs.

We are living a curious era: natural intelligence decreases around the globe. If someone sees an advertisement that offers free certifications, most people click it immediately. Is it really free? Guess why? Nope, if the eyes see something, the brain will believe it, especially if the content fits the user's interest...

And we still don't know exactly what is behind the malicious links, most probably the weaponization/delivery phase of criminal activity.

If you take a look at the IP address behind the domain name - 70 [.] 40 [.] 220 [.] 114 with relation 50 [.] 116 [.] 89 [.] 2 - you will see these hosts do everything and tied more than 2000 domain names. And the mentioned domain name is behind the Cloudflare, as usual.