See: http://urlquery.net/report.php?id=1494517248035 & http://toolbar.netcraft.com/site_report?url=huntercertificates.org%2Findex.php%2Fcourse-category%2Fperforming-arts%2F
and http://zulu.zscaler.com/submission/show/8bd0768a6abefd5a65efd8029c7da51f-1494519653
Threat = JS:Trojan.Script.CUS → https://www.scumware.org/report/192.249.118.130.html
Re: http://support.clean-mx.de/clean-mx/phishing.php?email=abuse@inmotionhosting.com&sort=id%20desc&response=alive
polonus