Why only WOT flags this right away, others only for subdomains?

Viruses and worms
1

See: http://scanurl.net/?u=http%3A%2F%2Fas.casalemedia.com%2Fsd%3Fs%3D104842%26f%3D1&uesb=Check+This+URL#results
and http://www.avgthreatlabs.com/sitereports/domain/casalemedia.com/
See: http://checkwebsitesafe.net/www/as.casalemedia.com
Here it is IDS alerted: http://urlquery.net/report.php?id=1991551 as ET MALWARE Casalemedia Spyware Reporting URL Visited 2 and 3
Bothunter users found such malware here:
4.X.X.148 (US)
LONGMONT
COLORADO
UNITED STATES
LEVEL3.NET / DSL
LEVEL 3 COMMUNICATIONS INC
High Details (1.8)
1 BotHunter Users
1 Infection Report
2012-12-28 to 2012-12-28
° 2632222(2): not found
° 1(1): Inbound Attack - REGISTERED FREE ATTACK-RESPONSES Microsoft cmd.exe banner
° 2002196(1): CandC Communication - ET MALWARE Casalemedia Spyware Reporting URL Visited 2
° 2009880(1): CandC Communication - ET MALWARE Casalemedia Spyware Reporting URL Visited 3
° 9910028(1): Bot Space Access - BotHunter Version 1.X Test Rule

See for alerts: http://doc.emergingthreats.net/2009880 and another example here: http://urlquery.net/report.php?id=1978575

polonus

2

I entered the URL for Level 3 Communications on the Scan URL website, and it came up clean.

I did notice that as soon as I went to Level 3 Communications website, Avast allowed the website to establish 4 connections with my computer.

Why would Avast allow this website to establish a connection?

3

I thought Avast was allowing Level 3 Communications to establish a connection because it set 4 cookies on my computer. I blocked cookies from that website, and when I went back there the connections were established again, and there are no Level 3 Communication cookies on my computer.

So what information is the website getting? It is not reading cookies.