In the mean time also consider this info I have for you. concerning the IP you mentioned.

Well most malware from that IP now seems to be dead: 208.91.196.4/
Historical threats from that IP were classified as Parasites, danger level 1; AlienVault, danger level 4, PhishTank, danger level 1.
ETPRO TROJAN Pagesinxt Malicious Redirect IDS alert given for IP also,

polonus