See: https://www.virustotal.com/pl/url/718dc642e24f132d7abb3d98d4fd8fc9420c9c444e0b7bba2e93b76d9e9b9e3b/analysis/1499714881/
What had to be detected: http://urlquery.net/report/b5cc291f-d86d-402f-b1e8-01aa21cc4087
pol