Suspicious coupling on defaced website...

See: -http://killmalware.com/warehousing-venlo.nl/#
Via script: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fshop4brides.ru%2Fwp-content%2Fthemes%2Firex-lite%2FSketchBoard%2Ffunctions%2Fsketch-background-gallery%2Finc%2Ffront%2Fjs%2Fskebggallery.js%3Fver%3D4.0.1
also: -http://www.typingjobsonline.com/wp-content/themes/admired/js/ga.js?
Also found to reside on this website: -http://quttera.com/detailed_report/autokrediet.org
Also discussed here: -https://forum.avast.com/index.php?topic=175540.0 via parse error…
See link: -http://www.domxssscanner.com/scan?url=http%3A%2F%2Fanti-ddos-protection.com
→ -http://urlquery.net/report.php?id=1440342543643

polonus