Quttera flags this blog-site!

Viruses and worms
1

Nothing here: https://urlquery.net/report.php?id=1441809492987
1 flags: https://www.virustotal.com/nl/url/a495db21fe84fb4aa16ef9fe231ad17b572e662375cb03776d01258cca51f66c/analysis/1441808470/
Not detected: https://sitecheck.sucuri.net/results/tippytoecrafts.blogspot.ca
Given as OK; http://zulu.zscaler.com/submission/show/074784dbe629503b7702c13b1e5502de-1441809432
re: http://www.domxssscanner.com/scan?url=http%3A%2F%2Ftippytoecrafts.blogspot.com%2Fsearch%2Flabel%2FEric-20Carle
Quttera detects: /2014_07_01_archive.html
Severity: Malicious
Reason: Detected reference to blacklisted domain
Details: Detected reference to malicious blacklisted domain -coloringhub.com

pol

2

Again Quttera to flag a suspicious file (also Viruswatch MX flags): https://www.virustotal.com/nl/url/d31f931e4ab2e521d7062e919dc97dbf1fa589cf0a77001964f2697b1874299c/analysis/1441812133/
See: https://www.virustotal.com/nl/ip-address/64.233.191.132/information/
Missed: https://sitecheck.sucuri.net/results/corycrow.blogspot.com
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fcorycrow.blogspot.com
Flagged by Quttera’s: www.blogger.com/static/v1/widgets/2772432204-widgets.js
Severity: Potentially Suspicious
Reason: Detected procedure that is commonly used in suspicious activity.
Details: Too low entropy detected in string [[‘%26tran=%26npn=1%26=%26=%26ha=%26=%26=%26true=%26=%26=%26=%26=%26=%26true=%26=%26=%26=%26=String.%26ha=%26=%26=%26ha=%26=%26=%26=%26ha=%26=%26=%26=%26=%26,=%26=%26=%26=’]] of length 100 which may point to obfuscation or shellcode.
Threat dump: View code → http://caja.appspot.com/#https://www.blogger.com/static/v1/widgets/2772432204-widgets.js
Threat dump MD5: 2897DE25D082AC7EBA145E63D78A498B
File size[byte]: 92829
File type: ASCII
Page/File MD5: 95E538DA50E67EEBF3DB21B52ADDB13E
Scan duration[sec]: 5.570000

polonus