See: https://www.virustotal.com/nl/url/6f65e6831b4df12351daf72adf65e8667577799f2b83d574f16c50163c88a92d/analysis/1398603256/
hxtp://kurdbot.bl.ee/panel/login/ is in Dr.Web malicious sites list!
IP badness history: https://www.virustotal.com/nl/ip-address/31.170.164.77/information/http://urlquery.net/report.php?id=1398603523827
No alerts here:
Historical threats: 7 months ago: RBN, 3 years ago: Lithuania, Modified ITAR; danger level: 2, 1, 1.
active and up: kurdbot dot bl dot ee,31.170.164.77,ns4 dot hostinger dot ae,Criminals,
About Athena Cybercrime Known Infection Source: http://www.athenalink.com/HOT-TOPIC-Cybercrime-Update.c4712.htm (link article author j.sollazo)
Site is missed by quite an online scanner!
polonus