1

Re: https://www.virustotal.com/nl/url/890771f58d16b688a73ae7dba23a6f6335c8a4e31fb9c11611456cba079607ac/analysis/1442507472/
Scripts:
//use.typekit.net/abh7nvo.js
-https://cdn.zeltser.com/wp-includes/js/jquery/jquery.js
-https://cdn.zeltser.com/wp-includes/js/jquery/jquery-migrate.min.js
-https://cdn.zeltser.com/wp-content/themes/zeltser/library/js/libs/modernizr.custom.min.js
-https://cdn.zeltser.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js
-https://cdn.zeltser.com/wp-includes/js/mediaelement/wp-mediaelement.js
-https://cdn.zeltser.com/wp-content/themes/zeltser/library/js/scripts.js
-https://cdn.zeltser.com/wp-includes/js/comment-reply.min.js

polonus

2
What resides here?
Nothing dangerous

you should visit it, i think you will find it interesting :wink:

https://cdn.zeltser.com
https://zeltser.com/remnux-v6-release-for-malware-analysis/

3

But I ask this because I find this on VirusWatch Archives to-day: Up(nil): unknown_html ARIN US abuse at digitalocean.com 104.236.236.73 to 104.236.236.73 zeltser.com https://zeltser.com/remnux-v6-release-for-malware-analysis/
So then I started looking, but could not find it right away.
Seems OK: http://toolbar.netcraft.com/site_report?url=https://zeltser.com
CRDF flags on VT. See: http://www.dnszilla.com/zeltser.com
Seems OK: https://www.robtex.net/#!dns=104.236.236.73

polonus