What suspicious javascript?

See: https://www.virustotal.com/nl/url/aa89fd912d3bb7c2002993164bcd401c8f9c3d1546ae9b3b1a7ed94d5315b979/analysis/1411201444/
-reate dot info/js/ tracking code blocked by Privacy Badger.

pol

Nothing from Avast on my end :frowning:

Strange, because the ad-code is landing here: https://www.mywot.com/en/scorecard/news.luxup.ru?utm_source=addon&utm_content=popup → US’,‘Adlabs’:‘//luxup dot ru/cmrk/4/?callback=TraforetAdlabsRet’

pol

Also nothing on that webpage. Weird.

Strange because of these results for IP badness: https://www.virustotal.com/nl/ip-address/185.28.20.215/information/
And the packer info here: http://totalhash.com/search/ip:185.28.20.215
More complaints: http://www.liveipmap.com/185.28.20.215
There is malcode coming from that IP and that is now certain.

polonus