Malware Details

Details For The Domain "script2ni.ir"

URLs and sub domains distributing the malware or acting as a redirector:

http://script2ni.ir": var enkripsi="'1Aqapkrv'02v{rg'1F'00vgzv-hctcqapkrv'00'1G'2C'06'0:fmawoglv'0;,pgcf{'0:dwlavkml'0:'0;'5@'2C'06'0:'00vcikr'00'0;,omwqgmtgp'0:dwlavkml'0:'0;'5@'2C'02'02'02'02'02'02'02'06'0:vjkq'0;,dknvgp'0:'05'1Clmv'0:'1Cclkocvgf'0;'05'0;,clkocvg'0:'5@ukfvj'1C317'5F'0A'5@fwpcvkml'1C722'5F'0;'1@'2C'5F'0;'1@'2C'06'0:'00vcikr'00'0;,omwqgmwv'0:dwlavkml'0:'0;'5@'2C'2;'06'0:vjkq'0;,clkocvg'0:'5@ukfvj'1C60'5F'0;'1@'2C'5F'0;'1@'2C'5F'0;'1@'2C'1A-qapkrv'1G'2C'1Afkt'02qv{ng'1F'00fkqrnc{'1Clmlg'00'1G'2C'1Ac'02jpgd'1F'00jvvr'1C--qapkrv0lk,kp'00'1G'w2405'w2411'w24C;'w2413'w24AA'w245G'w240C'02'w240D'w246:'w2464'w24AA'1A-c'1G'2C'1A-fkt'1G"; teks=""; teksasli="";var panjang;panjang=enkripsi.length;for (i=0;i<panjang;i++){ teks+=String.fromCharCode(enkripsi.charCodeAt(i)^2) }teksasli=unescape(teks);document.write(teksasli);
//script2ni.ir": var enkripsi="'1Aqapkrv'02v{rg'1F'00vgzv-hctcqapkrv'00'1G'2C'06'0:fmawoglv'0;,pgcf{'0:dwlavkml'0:'0;'5@'2C'06'0:'00vcikr'00'0;,omwqgmtgp'0:dwlavkml'0:'0;'5@'2C'02'02'02'02'02'02'02'06'0:vjkq'0;,dknvgp'0:'05'1Clmv'0:'1Cclkocvg

Blacklist Status

Blacklist status for "script2ni.ir":
https://labs.sucuri.net/blacklist/info/?domain=script2ni.ir

IP Address Information

Domain "script2ni.ir" is at: 144.76.71.18 (s1.emira.ee)

All malware-related domains at this IP address:

Additional Scans

You can also use these additional scanners to identify if this site is blacklisted or compromised: