See: http://urlquery.net/report.php?id=8033873 & https://www.virustotal.com/nl/url/54702bb68285005892f841023f069e5b01b6e07f891eba4c3072e8f277caf910/analysis/1385589782/
Quttera gives potential suspicious file here:
index
Severity: Potentially Suspicious
Reason: Detected unconditional redirection to external web resource.
Details: Detected HTTP redirection to http://www.scrambled.info/.
File size[byte]: 4294967295
File type: Unknown
MD5: 00000000000000000000000000000000
Scan duration[sec]: 0.001000
Code hick-up: pagead2.googlesyndication dot com/apps/domainpark/ads.js benign
[nothing detected] (script) pagead2.googlesyndication dot com/apps/domainpark/ads.js
status: (referer=hotkeysparking dot com/cr.js?domain=scrambled.info&w=600&h=900)saved 7178 bytes cfebe01f550a9a2ff82cab91c13340f69d0d1eea
info: [javascript variable] URL=googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?
info: [script] pagead2.googlesyndication dot com/apps/domainpark/
info: [decodingLevel=0] found JavaScript
suspicious: m
See for adsite redirector info → http://productforums.google.com/forum/#!topic/adsense/KU-7rWLJorY
→ namecheapfs.hotkeysparking.com blocked by Bitdefender’s TrafficLight
polonus