See: https://www.virustotal.com/en/url/7693322fc814168651918673188ec0aea4e449f17420a615d48913e19ab639c7/analysis/1456441344/
and https://www.virustotal.com/en/file/2cc163e0586c30a5630c171becb97bc9adffb7ae54f5f9a38f056a6d6de47b20/analysis/1456316362/
Google Safebrowsing blocks uri.
Service now unavailable: https://urlquery.net/report.php?id=1456441628324
But it was there and flagged: https://urlquery.net/report.php?id=1453757818012
IDS: ET TROJAN Known Sinkhole Response Header CERT.PL
It is malcode as AOS flags it, so we are being protected: -866448.com/plug/tags.asp?tag=交通基础设施建设投资约70亿元六合彩资料 aka -866448.com/plug/tags.asp?tag=%E5%85%AD%E5%90%88%E5%BD%A9%E8%B5%84%E6%96%99%E4%BF%B1%E4%B9%90%E9%83%A8%E6%97%A2%E4%B8%8D%E6%89%BF%E8%AE%A4%E4%B9%9F%E4%B8%8D%E5%90%A6%E8%AE%A4.
polonus