See: https://www.virustotal.com/nl/url/5a9905d3706357d5930747a38b4e674147b81c9f18d19da3c20448161be92522/analysis/1447953621/
and https://www.virustotal.com/nl/file/e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075/analysis/1447463535/
Flaggd by Google safebrowsing: -http://www.xmhbcc.com/ Nameserver with bad zone: -f1g1ns1.dnspod.net
see: http://toolbar.netcraft.com/site_report?url=http://www.xmhbcc.com → http://www.dnsinspect.com/dnspod.net/1447954020
pol