“ce.ms” Free Domains Are Hosting Malicious Codes

The blog post details an active malicious campaign that registers random free ".ce.ms" domains to host heavily obfuscated JavaScript which, when visited, delivers the Blackhole exploit kit to exploit client-side vulnerabilities; multiple example URLs and code snapshots are provided and the obfuscation technique (spreading numeric arrays across many lines) is highlighted as an evasion method.