Known infection source and AdOcean issues...

See: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Fmoscow.vlez.bg%2Findex.php%2Fcomponent%2Fk2%2Fitemlist%2Ftag%2F%25C3%2583%25C2%25AF%25C3%2582%25C2%25BF%25C3%2582%25C2%25BD%25C3%2583%25C2%25AF%25C3%2582%25C2%25BF%25C3%2582%25C2%25BD%2F&useragent=Fetch+useragent&accept_encoding=
flagged as unknown_html_RFI_php malcode…known infection source flagged by DrWeb’s.
Quttera does not have it: http://quttera.com/detailed_report/moscow.vlez.bg
Sucuri gives it as blacklisted.
Adware Banner code: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fbg.static.etargetnet.com%2Fgeneric%2Fadvert.php%3Fg%3Dref%3A9677%2Carea%3A300x250%2Ctabl%3A1%2Cn%3A2%2Cjs%3A1%2Ctarget%3A_new%2Cborder_color%3Affffff%2Cbackground_color%3Affffff%2Ctitle_color%3A0066d5%2Ctitle_underline%3A1%2Ctext_color%3A000000%2Cfont%3Atahoma
On IP: http://toolbar.netcraft.com/site_report?url=http://79.124.75.40 Apache/2.2.22 (Debian) Server

http://zulu.zscaler.com/submission/show/4db5f9de0a4ae96755a2b9e7b84c52c1-1454608092

AdOcean is a typical sample tracking code. Read here: https://adblockplus.org/forum/viewtopic.php?t=17336
and here: https://apps.ghostery.com/nl/apps/adocean

polonus