Why GlobeImposter malware not flagged on suspended page.cgi?

Listed: https://ransomwaretracker.abuse.ch/host/redalumni.com/
Scan: https://www.virustotal.com/nl/url/47e315ee53287c834716e6c9ad7232a161c64fff369b9399fb2f40ecf72fdd42/analysis/1514727536/
File scan just one to detect: https://www.virustotal.com/nl/file/17fa2f3324d45c27a318ed51dab739c7f09b573185b76889b955ad2c9ad1d7b8/analysis/1514708737/
Reported: https://urlquery.net/report/5e6c482b-aeb8-4867-880a-7f0919186433

Namecheap abuse and links to -maxcdn.bootstrapcdn.com/font-awesome

polonus

Various samples treated here: https://otx.alienvault.com/pulse/5a2ae3e5370244779d3e3ba7
malspam delivered threat

Also consider: https://otx.alienvault.com/indicator/file/1075f4da3618f019b0e6597ccfe40f73

pol