Sweet Orange EK pattern seen on 2013-06-18

http://www.smallnetbuilder.com/lanwan/lanwan-reviews/30195-8-port-gigabit-switch-roundup	Redirect page

http://dasa.trillianspysmashing.net/smblogin/keys/bitmaps/best.php?english=82			Landing page
http://dasa.trillianspysmashing.net/smblogin/keys/bitmaps/Lwrmmq.jar				CVE-2012-1723
http://dasa.trillianspysmashing.net/smblogin/keys/bitmaps/applet.jnlp				Malicious JNLP file
http://vbn.aerowhittles.com/aboutus.php?hand=440&answers=4&rates=503
&countries=171&crime=499&media=527&labs=303&cool=61&diary=325&services=1471659406		Initial Payload

http://sdfgfgdssdfgfddd.com/b/eve/841e9a5c724efd357306111d					Callback