Phishing and referrer spam and fraudulous website or just clean but blacklisted?

See: http://urlquery.net/report.php?id=1494859108713
reported: https://www.abuseipdb.com/check/185.165.123.4
https://www.virustotal.com/pl/url/42b69b89bbf7a709bd7e1d34ff1d8d8b24affa39ad445078df12a73c98862696/analysis/1494881763/
Phishing attacks and fraud from = -
Location: htxp://19tp9nt10.urest.org/
Website only blacklisted? - https://urlscan.io/result/4f9ca949-9221-4f4a-ac71-ed73da4bd0ee#summary
Hiding one suspicious indicator for PHISHing

(function (w) {if ( ! w.analyticsHandlers) {w.analyticsHandlers = {};}w.analyticsHandler = function () {varargs = Array.prototype.slice.call(arguments),counterPath = args.shift(),counterMethod = args.shift();if (w.analyticsHandlers[counterPath]) {varcounterHandler = window[w.analyticsHandlers[counterPath]];if (counterHandler &&typeof counterHandler === ‘function’) {counterHandler.apply(counterHandler, args);} else if (counterHandler &&typeof counterHandler[counterMethod] === ‘function’) {counterHandler[counterMethod].apply(counterHandler, args);}}};})(window);

F-status and recommendations IP related : https://observatory.mozilla.org/analyze.html?host=finecutcms.com

polonus (volunteer website security analyst and website error-hunter)