This package was posted in one hacking board as http bot.
After checking the file here results:
Domains used :
hoseen454r.com inactive
onetimes27s.com active
Resolved : [ onetimes27s.com ] To [ 178.250.245.186 ]
Panel:
hxxp://178.250.245.186/pref1/ password protected
Sample here
Hosting infos:
http://whois.domaintools.com/178.250.245.186
Anonymous - July 23, 2014 at 11:49 pm
Here is a link i found. For an exploit kit
hxxp://profeenlaempresa.com/wp-content/gd-star-rating/ai.php?notice=JlQJwocK7sL4SpNsS23NMgMyRfJ6A7Cij9TpmjGGN8w=