Nameserver localhost - what malware was being spread here?

Unable to properly scan your site. Content not found. Zulu Zscaler flagged recently: http://zulu.zscaler.com/submission/show/4a94bdcdd07d8ab8bbf8a14ca437d55d-1468265192 (malicious)
Redirections: -192.230.74.93.ip.incapdns.net - Resolving failed
Error code 22
The proxy failed to resolve site from host name, if this site was recently added please allow a few minutes before trying again.
2016-07-11 19:32:55 UTC
Your IP213.17.68.177|Proxy IP192.230.74.93(ID 10239)
Powered by Incapsula See: http://toolbar.netcraft.com/site_report?url=http%3A%2F%2Fservice-webmasters.com%2Fsaintdujour.php
This could be a PHISH: http://permalink.gmane.org/gmane.comp.security.phishings/89764

What you are seeing below is content generated by Incapsula not actual content from your site. Incapsula is blocking you from scanning your own site!
Re: https://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fservice-webmasters.com&ref_sel=GSP2&ua_sel=ff&fs=1
Seems OK. But blockulicious blocks for me: he website “content.incapsula.com” has been blocked for your safety.
Category of threat : Malicious:URL
URL : -http://content.incapsula.com
Detected on le 13/05/2014 à 07:18:12 (0) Consider: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fcontent.incapsula.com%2FjsTest.html

found JavaScript
     error: undefined variable s
     info: [element] URL=wXw.google-analytics.com/ga.js 
New define s: triggers by default to avoid error after upgrade.

Credit info Junegunn.

Like to hear reactions on this analysis, so was original site taken down? :wink:

polonus (volunteer website security analyst and website error-hunter)