I've often wondered, somewhat
warily, but have not heard either of these answers until now.
MalwareFire, do you believe the hxxp most always identifies a malicious site,
or as Anupam stated, websites simple restrict links?
Update: I found the following excerpt.
3. Fake Virus Removal Scam Takes Control of Victims' Computers
Consumers also have complained to the IC3 about a telephone scam involving a caller who claims to be a tech support employee of a well-known company that develops, manufactures and supports software.
Victims reported calls from someone with an Indian accent who claims that their computers are infected with viruses. The caller then warns victims that they are inadvertently transmitting viruses to others via the Internet, and instructs them to visit one of the following websites: hxxp://
www.irssupport.net, hxxp://
www.go4support.org, hxxp://
www.teche4pc.com, and hxxp://
www.ammyy.com.
When the victims visit one of the bogus websites, they're told to click on "live support" or "live connect" for help removing the non-existent viruses. Victims who visit hxxp://
www.ammyy.com are instructed to download a program that gives the caller control of the victim's computer.
Victims then watch as the caller remotely explores personal files, pointing out files that were supposedly infected. Some victims say the caller copied their files and stole personal information. In some cases, the phony tech-support employee tries to sell the victims software.
Although the IC3 didn't name the company, Microsoft users have been victims of
similar scams in the past.
source
http://www.dailyfinance.com/2011/03...-online-scams-sex-taxes-and-a-desktop-hijack/