See: https://www.virustotal.com/nl/url/048f9d5044170a07423501dcc5ae9efc689fa77a854c4db724f4009a7390d631/analysis/1509232755/
and https://www.virustotal.com/nl/url/048f9d5044170a07423501dcc5ae9efc689fa77a854c4db724f4009a7390d631/analysis/1509232755/
We see avast not mentioned with the file analysis detection, but AVG has it as Flooder.MLM however:
https://www.virustotal.com/nl/file/5446aa97614776169e884cae22cf10b3bd94c95bc8c2a434ab6007b25c37021b/analysis/1490852255/
Re: https://urlquery.net/report/e8c1c018-4c98-4bdd-a9bc-4494a3df021e
On the IP and MX-host: https://www.threatminer.org/ssls.php?q=*.mxserver.ro&t=16
polonus