See: http://zulu.zscaler.com/submission/show/f8035979e6f3eef53dba3aab5cc8aa06-1342890951
redirects to: http://zulu.zscaler.com/submission/show/cd69bcb1443bf3a532965f52ee1637eb-1342891068
The location line in the header above has redirected the request to: htxp://firstinter.ru/ferracont?8
see: http://labs.sucuri.net/?details=firstinter.ru
compare: http://urlquery.net/report.php?id=97731
polonus