http://dol.{BLOCKED}1.us:8081/update/index.php

 Analysis by: Michael Galapon

 URL BLOCKING DATE/TIME: 03 May 2013 08:20:00 PM GMT-8
 RATING: HIGH
 DOMAIN: ns01.us
 CATEGORY: Disease Vector
 DESCRIPTION:

JS_EXPLOIT.MEA accesses the following websites to download a file, detected as BKDR_POISON.MEA. JS_EXPLOIT.MEA was inserted onto a legitimate website of the US Department of Labor and downloads a Poison Ivy backdoor.