Malicious redirect from -cyberanonymous.net/breakfast.php

Landing here: -http://hxdegt.com/?a=370957&c=wl_con
which is not flagged by VT but redirects here: http://toolbar.netcraft.com/site_report?url=http://hxdegt.com
to -http://727-fitness.rvrusk.com/doculkp/intforsulkp/ AOS flags this redirect as dangerous! → http://toolbar.netcraft.com/site_report?url=http://727-fitness.rvrusk.com
All miss detection: http://quttera.com/detailed_report/cyberanonymous.net
and https://sitecheck.sucuri.net/results/cyberanonymous.net
With malzilla I get a redirect to
Giving an empty response initially. 500 Server closed connection without sending any data back
See: http://toolbar.netcraft.com/site_report?url=http%3A%2F%2Finstabusinessnews.com%2F%3Futm_source%3D1%26sub%3D8035%26db_id%3Dc42cb8f69%26lang%3D7%26at%3Df37f608d8891a9%26m%3D9b2b6822aea

polonus

Consider now where this lands: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fhxdegt.com%2F%3Fa%3D370957%26c%3Dwl_con
Results from scanning URL: -http://hxdegt.com/?a=370957&c=wl_con
Number of sources found: 2
Number of sinks found: 12
Results from scanning URL: -http://help-save-wildlife.com/px.js?ch=2
Number of sources found: 109
Number of sinks found: 112
Results from scanning URL: -http://help-save-wildlife.com/px.js?ch=2
Number of sources found: 0
Number of sinks found: 0
Results from scanning URL: -http://a.rmgserving.com/rmgdsc/newcafv2.js
Number of sources found: 2
Number of sinks found: 10

pol