Alerted here: http://urlquery.net/report.php?id=4995498
See what that IP holds? Re: https://www.virustotal.com/en/ip-address/59.12.180.12/information/ and http://support.clean-mx.de/clean-mx/viruses.php?ip=59.12.180.164&sort=first%20desc
polonus