What unknown malware resides on this website?

See: https://www.virustotal.com/en/url/ed18db6b9385e18d2e00c2f8a34b94473495915e368f4b87fac738684466ffda/analysis/1454189382/
and https://www.virustotal.com/en/file/21e89b4607edea555938b8920a462e26ddc80b6dcc374f7167d6b160cabe6d09/analysis/1454107647/
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwater-heater-phoenix-az.com%2Fwp-login.php

WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

jetpack 3.3 latest release (3.9.1) Update required
http://jetpack.me
Plugins are a source of many security vulnerabilities within WordPress installations, always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes.

Adblockers will block -https://static.doubleclick.net/instream/ad_status.js here.

Issues: https://www.website-test.org/en/www/water-heater-phoenix-az.com

Bitdefender Traffic Blacklisted - Water Heater Replacement › Log In padlock icon
-water-heater-phoenix-az.com
Alerts (1)
Insecure login (1)
Password will be transmited in clear to -http://water-heater-phoenix-az.com/wp-login.php
Infos (1)
Encryption (HTTPS) (1)
Communication is NOT encrypted
See: http://toolbar.netcraft.com/site_report?url=http://water-heater-phoenix-az.com

Reverse DNS flagged by Web Rep: https://www.mywot.com/en/scorecard/ip-166-62-28-130.ip.secureserver.net?utm_source=addon&utm_content=rw-viewsc

polonus (volunteer website security analyst and website eror-hunter)