Re: https://www.khanacademy.org/computer-programming/portaljs/6335088474456064
Why? See: https://www.virustotal.com/en/url/d68e9ca1583d675e3ab0df3efffbe3b5bbff36e04a7f583d3e984d956917080a/analysis/1439843189/
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.ncbi.nlm.nih.gov%2Fpubmed%2F11510252
Malware history of IP: https://www.virustotal.com/en/ip-address/130.14.29.110/information/
See IP changes over the last few months: http://toolbar.netcraft.com/site_report?url=http://www.ncbi.nlm.nih.gov
pol