Another one and this one is long overdue: http://support.clean-mx.de/clean-mx/viruses?id=95801185
Re: http://urlquery.net/report.php?id=1495830510346
and https://www.virustotal.com/pl/url/f030afea36011a019600f83f19e6258be96b09ca6585603bb26cd257a3c853d8/analysis/1495833008/
avast detects as JS:Phishing-BF [Trj] → https://www.virustotal.com/pl/file/8dc294fcf6c0e1fbf8a45b851becdc3c3a81eb98996bd448270fce830c2c5807/analysis/1495830318/

polonus