Norman lab analysis
The iframe domain points to IP 94.60.123.48 which is blacklisted in RBL for spreading malware based on "Blackhole" kit. Both URL have same Iframe wxw.everydayrhythm.com.htm —> JS/IFrame.FZ
Both URL have same Iframe
wxw.everydayrhythm.com.htm —> JS/IFrame.FZ