See: http://zulu.zscaler.com/submission/show/fbbdb8f84c78ab948d10d3b0dffa0f9e-1345752421
See: http://urlquery.net/report.php?id=143429
See: https://www.virustotal.com/url/f578e152412434acb190fb99ad837a45638c4fcb31eee64bb054f56f38cf5a0b/analysis/1345752551/
See: http://www.ipillion.com/ip/91.196.216.176 also had Mal/HTMLGen-A. and BlackHole exploit kit activity,
polonus