Norman lab analysis

The iframe domain points to IP 94.60.123.48 which is blacklisted in RBL for spreading malware based on "Blackhole" kit.

Both URL have same Iframe

wxw.everydayrhythm.com.htm —> JS/IFrame.FZ