Missed here: https://www.virustotal.com/en/url/366fc8d3392ddeba7cf0bdc568b66225dfd10501399ba47f9304da6886696bad/analysis/
and here as well: http://zulu.zscaler.com/submission/show/dc078ee9e9acba3a433ae373f01750e1-1427584393
Detected: http://quttera.com/detailed_report/conditioner-kvadro.ru
index
Severity: Suspicious
Reason: Detected suspicious redirection to external web resources at HTTP level.
Details: Detected HTTP redirection to htxp://web-redirect.ru/?web.
File size[byte]: 0
File type: Unknown
Page/File MD5: 00000000000000000000000000000000
Scan duration[sec]: 0.001000
ISSUE DETECTED DEFINITION INFECTED URL
Website Malware MW:HTA:7 htxp://conditioner-kvadro.ru ( View Payload )
Suspicious conditional redirect. Details: http://sucuri.net/malware/entry/MW:HTA:7
Redirects users to: htxp://web-redirect.ru/?web
Web application version:
Joomla Version 2.5.4 found at: htxp://conditioner-kvadro.ru/administrator/manifests/files/joomla.xml
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
See attached tracker tracker report - do not open links inside a browser - info txt for research purposes only
polonus