Clicked the geocities.com link and got a "High Risk Website Blocked - Access has been blocked as the threat Mal/HTMLGen-A has been found on this website" notification from Sophos.
False flag, or malicious?
False flag, or malicious?
If you're on a coorporate network or have some kind of security firewall setup this could be flagged as a tampered URL.