See: http://sakrare.ikyon.se/log.php?id=6337
Another similar example going to the same src address: http://evuln.com/tools/malware-scanner/mastersoft.me/
Blacklist status according to Sucuri’s: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=mastersoft.me
and http://www.yandex.com/infected?url=mastersoft.me&l10n=en (via Sophos)
See: http://sitecheck.sucuri.net/results/mastersoft.me
Malware found: http://sucuri.net/malware/entry/MW:IFRAME:HD202
and
http://labs.sucuri.net/db/malware/mwjs-iframe-injected691?v3
Location line in header redirects to hxtp://bestben10toys.com/oams.htm?i=1236558%3E
Re: http://dnshistory.org/browsedomains/bestben10toys.com
polonus