norton tells me that it has blocked an attack from
w0rm.in/index.php
identified as a web attack: Manual Sharing Scam
I also get a notification about some script coming from the same adress whenever I open bdsmlibrary.com