See: https://www.virustotal.com/en/url/deec28194ef1fa5fb2f54e1d5c971d2e476e2dcb18bf1a87f23e7e9f59f87eea/analysis/1376070095/
for unknown_html ARIN US abuse at concentric.com 207.155.253.25 to 207.155.253.25 romeotech.com htxp://www.romeotech.com/
See: https://www.virustotal.com/en/ip-address/207.155.253.25/information/
live malware here: http://support.clean-mx.de/clean-mx/viruses?id=10676629
See: https://www.virustotal.com/en/url/c0e7bf7a49ae588fb2dbca0c4ddad72c54f733bc28ae8e3ee32ed2e1e3d6da00/analysis/
This avast detects: https://www.virustotal.com/en/file/c14b53cc46de6f38690eb4f41cd1dd6b1bf8091d0c5db10b12f50263b5ac086f/analysis/1367767957/
polonus