Re: https://urlquery.net/report/4937be05-0892-483f-99b9-c439f65f254c
See: https://www.virustotal.com/nl/url/d71cb2ca7bce93888293e310fa3b239dd9f8c58bd90c5bcb15d7435fab75be71/analysis/1512552844/ (too new to have been noticed?
On IP: https://toolbar.netcraft.com/site_report?url=http://52.72.157.6
and https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=a1mzcwdlkeaitr.top&ref_sel=GSP2&ua_sel=ff&fs=1
Abuse on -ec2-52-72-157-6.compute-1.amazonaws.com
Server info proliferation: 80/tcp open http nginx 1.10.1
polonus