See: https://urlquery.net/report.php?id=1438462708983 9 alerts/ for -counter.yadro.ru & -x.ulogix.ru/sync2 *
For * see: https://www.virustotal.com/nl/url/1bd70790347472e317d6762dbda33086b478f5cbcdb0cf938a51e77f06baf2fc/analysis/
Yes this is a risk there also: htxp://www.google-analytics.com/urchin.js
Results from scanning URL: http://www.google-analytics.com/urchin.js
Number of sources found: 30
Number of sinks found: 9
Results from scanning URL: http://www.google-analytics.com/urchin.js
Number of sources found: 13
Number of sinks found: 13
Results from scanning URL: http://www.google-analytics.com/urchin.js
Number of sources found: 49
Number of sinks found: 30
One should upgrade to ga.js
Urchin.js was marked as deprecated some time ago, and Google stopped making updates to it to encourage customers to “upgrade” to ga.js.
polonus (volunteer website security analyst and website error-hunter)