Given as a JS/Phish: https://www.virustotal.com/nl/url/6c94fea56e989803539c2034bfa3304adfd4f7a5867d1fd596bcbe5686506e15/analysis/1413304910/
and https://www.virustotal.com/nl/file/07f99e34de6b4f4707f502d1cfcf2957b330c5ff713cf377d1eb82b85f975539/analysis/1413238891/
see: http://fetch.scritch.org/%2Bfetch/?url=http://idfkt.cl/cgi-sys/suspendedpage.cgi
26 minutes ago
pol