See: http://urlquery.net/report.php?id=197431
IDS flag also found on here this snort listing: https://raw.github.com/technoskald/cifexamples/master/url-snort
& http://zulu.zscaler.com/submission/show/328bea79f0e73c4ee7f1f08133e69310-1348516492 100/100 Malicious
avast detects this threat: https://www.virustotal.com/file/ed862b87f3463a0f904ddfd29842d9801f474f7891dc6016e06af538db292965/analysis/
See this report for the nature of this riskware: http://www.threatexpert.com/report.aspx?md5=3ce3684af7239be11c10e77d52a51aae
10 instanceds on IP 110.45.143.25 and another source gives 26 instances of TR/Dldr.BonusCash up and active,
polonus