See: http://urlquery.net/report.php?id=1439339840064
This is one of the many identical queries…consider: http://www.domxssscanner.com/scan?url=http%3A%2F%2Frussiasport.ru%2Fnode%2F4633370
Redirections and this code: http://logozabota.ru/sites/default/files/languages/ru_7YGHWeyEGkzZ7XCvLGSTXO8UsInrUCwoDL8ISG1-DsQ.js?mw0jrf
-
http://russiasport.ru/sites/default/files/js/js_Lvjkefod4Z_0Bu9qnrQYaK7eIlW95qhD8g4dENJZR4U.js
Results: http://antivirus-alarm.ru/proverka/?url=russiasport.ru%2Fnode%2F2778631
Norman detects as: Norman Includer.SRC
This external link was blocked from loading by uMatrix: -http://mc.yandex.ru/
Anyone?
polonus