Figure 8: Screenshot from the subdomain that was used to host the fake Flash Player update page.