polonus
4
Could be the content after the < /html> tag should be considered suspicious. See:
http://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Ffaims.net&ref_sel=Google&ua_sel=ff
If you think it is a false positive, you reported this already, wait for a reaction or unblocking that domain.
Mal:URL are mostlt general IP blocks,
polonus