Fake domain names caught spreading malware in the name of Windows 11 upgrade