As a man of science and go programming....clearly it's witches.

Validation is one of my love languages.

Tracking a set connected to RU, injecting iframes to load up their .php pages, downloading "updateinstaller.zip"
https://www.virustotal.com/graph/embed/ga78a6e64d3034237bd9e99cbcb21e7df67aaf0940f1d4762b2b646f2a029e1ed?theme=light