See: http://urlquery.net/report.php?id=1491338128532 Re: https://db.aa419.org/fakebanksview.php?key=121934 and https://www.scumware.org/report/B5BC89FB5CB9A59DB2D6B9929974887B.html detected as JS/Phish
polonus