Exploit code on link on website...

See: http://urlquery.net/report.php?id=1495745647327
What link: -trk.link2claim.org

Analyses (link broken): -https://www.hybrid-analysis.com/sample/b189efc997315e6ff8730a094499487a7f2585bdfecb4cffea52cfb5a79fb511?environmentId=100

and -http://ddecode.com/hexdecoder/?results=41aa3b9b160e2e3f9b2d9f6b4bd156f9

On IP abuse: https://www.abuseipdb.com/check/198.143.165.221 &
https://otx.alienvault.com/indicator/ip/198.143.165.221/

Also source of foum spam.

polonus