4 Jan
2017
4 Jan
'17
10:46 p.m.
Instead, a site located at the link https://gaibacoupontec.com was displayed with a message indicating that there was an urgent Firefox update required.
Have you checked the user's Firefox profile for any unusual extensions? That would be my first suspicion.