See: http://killmalware.com/wennergrund.com/#
and http://toolbar.netcraft.com/site_report?url=wennergrund.com
and https://whois.domaintools.com/wennergrund.com
and http://toolbar.netcraft.com/site_report?url=http://173.194.79.121
and http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwennergrund.com%2F (for that code)
3 errors 13 warnings: https://mxtoolbox.com/domain/wennergrund.com/
stealth name server and name server version proliferation: http://www.dnsinspect.com/wennergrund.com/1456069856
www and main domain on different IP addresses in different countries even:
http://toolbar.netcraft.com/site_report?url=http://77.110.32.196 & http://toolbar.netcraft.com/site_report?url=http://64.233.166.121
polonus