See: https://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fallpipes.ru&ref_sel=GSP2&ua_sel=ff&fs=1
Zenon server with improper imput validation is at the root of the problem. See: http://www.dnsinspect.com/zenon.net/1481111499
and http://toolbar.netcraft.com/site_report?url=allpipes.ru
Malware reported: https://cymon.io/213.189.197.174
polonus