They might rely on phishing cons, spam e-mail or prompt messages, or simply fake websites to achieve this. I believe it's trying to load the default web page but you will find an error within the routing due to necessary modules not remaining loaded. Of course, I can be Erroneous. http://pigpgs.com