https://www.virustotal.com/en/url/03a90b5b9fd68dcf57b53de42e32b99e72dc7b0b6814b3ab25eb7a9e59e8e7ef/analysis/1383265419/
And
https://www.virustotal.com/en/url/0222339b47ed92fe8e1ef597dd951e8b86be148f1755a16c66eb0546999d9966/analysis/1383265479/
To avoid confusion I won’t try and explain it. Please wait for Twin to come help you. Once he’s arrived and reviewed your logs he can tell what’s happening and explain it too you.