A phish or something more sinister?

Pony cybercrime: https://www.virustotal.com/nl/url/69ce6c810b835280769de7d2dc6a4b95ef0d1db30d52db91bcf0e0b5f6836814/analysis/1405780117/
Nothing here: http://sitecheck.sucuri.net/results/nmixer.uphero.com
Badness history: https://www.virustotal.com/nl/ip-address/31.170.162.4/information/
Malware: http://www.scumware.org/report/31.170.162.4

polonus

While debugging we land here: htxp://stats.hosting24.com/count.php ,PHP auto-append file. with a stray end tag script.
Specific problem on Chrome? This is a pop-up banner code.

polonus

Another one: See: http://app.webinspector.com/public/reports/show_website?result=3&site=http%3A%2F%2Fmmb.com.pk
100% a phish: http://www.phishtank.com/phish_detail.php?phish_id=2557246
flagged and reported here: https://www.mywot.com/en/scorecard/mmb.com.pk?utm_source=addon&utm_content=popup
Not flagged by avast web rep and only flagged by third party blacklists via WOT 8)

pol