See: https://www.virustotal.com/nl/url/728d35e79364649de9f22a075c196ff3be27c8beb4c53a18f89147b862b17675/analysis/1367994063/
6 flags…
Nothing here: https://www.virustotal.com/nl/file/141f2eb895bbacfc181e5be7859fb7ca45f9ffc90d199b3ff35c355249aa7cad/analysis/1367994068/
The normal WP code: http://www.vantagewhistler.com/news/wp-content/plugins/commentluv/js/commentluv.js
polonus