What malware on this uri?

See 2 warnings: https://asafaweb.com/Scan?Url=hg09y.com%2Fimages%2Findex.js
Google Safebrowsing alert: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=hg09y.com%2Fimages%2Findex.js&ref_sel=GSP2&ua_sel=ff&fs=1
Re: chongwutaizi abuse: http://toolbar.netcraft.com/site_report?url=http://107.178.67.52
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fhg09y.com%2Fimages%2Findex.js

polonus

What malware on this uri?
Ramnit malware

https://www.virustotal.com/#/url/bf338e805f655a51238e5a4691fed2e55f701b8b3f1fc707db194f1e794527d0/detection

https://www.virustotal.com/#/file/96b92ffb6d092309ff36776292415496c022c9115b5df86e63e18dccbba21358/detection