See: http://killmalware.com/qhsj2.d6y60kl.top/ first it was being Google Safebrowsing blocked/alerted.
Now it seems gone: http://toolbar.netcraft.com/site_report?url=qhsj2.d6y60kl.top
No more records: https://whois.domaintools.com/d6y60kl.top
See: https://mxtoolbox.com/domain/qhsj2.d6y60kl.top/ →
Parked domains because of scammer activity:
https://ntldstats.com/registrar/1469-Jiangsu-Bangning-Science-and-technology-Co-Ltd
polonus