RECENTLY (RE-)DETECTED: afristyle.com infected with HEUR:Trojan.Script.Iframer IP: 160.124.112.100 - SOUTH AFRICA

MALWARE: HEUR:Trojan.Script.Iframer

DOMAIN:

http://afristyle.com/

• https://www.virustotal.com/de/url/94e4f0d5dec56125cc4ac81ecd1aea5438e8ee9191f9a1ddee5729b370a5ee3f/analysis/1396113676/

HEUR:Trojan.Script.Iframer (PUA, document write)

• https://www.virustotal.com/de/file/61b5f2266af649aeb40b3c12cb9b437da4c9b09492cff6aaf2fe4c33f46401e0/analysis/1396113489/

IP:

http://160.124.112.100/

• https://www.virustotal.com/de/url/34dfd6f154e8f0f124b31235af491ff951386a432cf009980d5abed411171b24/analysis/1396114396/

• https://www.virustotal.com/de/ip-address/160.124.112.100/information/

--->

http://find.uk.to/dns.htm

• https://www.virustotal.com/de/url/9882d00fcdca159baba47dd3f0b38cb7277532978e54e483d51da98599153adf/analysis/1396114311/

• https://urlquery.net/report.php?id=1396113767846