See: http://killmalware.com/feuerwehr-gonzerath.de/#
The file analysis: https://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Ffeuerwehr-gonzerath.de%2F&ref_sel=GSP2&ua_sel=ff&fs=1
Defacement check:
gcolor=black onunload=“alert(‘hacked by silo (ne bakiyon oyle:)’);” text=#00ff00 vlink=#ff0000 alink=#00ffff link=#ffff0…
On the IP: https://www.threatcrowd.org/ip.php?ip=81.169.145.74 (various malware).
Appeared as bad host: https://www.projecthoneypot.org/ip_81.169.145.74
Threats: https://www.scumware.org/report/81.169.145.74
polonus