Gate file: /wheellock/order.php
It’s been a while since I’ve seen someone trying to use cloudflare with malware. Lets see how long it takes them to block it this time.
Related md5s (Search on malwr.com to download samples)
It’s been blocked, and I got the hosting info: http://whois.domaintools.com/18.104.22.168