http://dol.{BLOCKED}1.us:8081/update/base64.js
May 19, 2013
URL BLOCKING DATE/TIME: 03 May 2013 08:20:00 PM GMT-8
RATING: HIGH
DOMAIN: ns01.us
CATEGORY: Disease Vector
DESCRIPTION:
JS_EXPLOIT.MEA loads this site where its component for decoding base64 can be found. This malicious script was inserted onto a legitimate website of the US Department of Labor and downloads a Poison Ivy backdoor.