Pondus, it shows as URL:Mal
that is not what he say he see
Then Avast started to report a malware HTML:Script-inf.
https://www.virustotal.com/en/file/0f41ffa464ada690a1fb2d23de2ce34355d111f1757d1078f4dbadf475167c3a/analysis/1406216425/