Quettra detects suspicious content: hxxp://www.quttera.com/detailed_report/blog.wojtek.boo.pl See under scanned files analysis.