Multi-vector attack, an example...

[polonus]

See: https://www.virustotal.com/en/domain/teutorrent.com/information/
and https://www.virustotal.com/en/file/3558751df1900a2c00e4e22ae8320ebe0e1e59190c847ff52abee4e33bda885d/analysis/
Re: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3LnR7dXRdfX17bnQuXl1t~enc
Here everyone failed to see it:

Reputation Check
PASSED
Google Safe Browse: OK
Spamhaus Check: OK
Abuse CC: OK
Dshield Blocklist: OK
Cisco Talos Blacklist: OK
Web Server:
cloudflare
X-Powered-By:
EasyEngine 3.8.1
IP Address:
-104.18.60.237
Hosting Provider:
-Cloudflare. 
Shared Hosting:
1 sites found on -104.18.60.237

Malicious and now scan fails: https://sitecheck.sucuri.net/results/https/teutorrent.com/wp-content

Background read: https://labs.sucuri.net/?note=2019-03-25  & https://labs.sucuri.net/?malware

polonus