Citadel type malware: http://urlquery.net/report.php?id=9766012 not detected
Twice flagged here: https://www.virustotal.com/nl/url/ac083e28a7e91f6b2b8ac67e14c1e144083fc05e742f8a2a44255bde0007a502/analysis/
spam IP: http://www.stopforumspam.com/ipcheck/81.17.28.137
I get: 11004 [11004] Valid name, no data record (check DNS setup)
ThreatSTOP had alerts from 3 years ago for Russia, Eastern Europe, Modified ITAR, Spamhaus DROP, all danger level 1, advanced, danger level 3.

polonus