A suspicious code was identified loading content from a blacklisted domain. Example of domains include:
abcdecorez.cx.cc kokosina.in www.ironydon.co.cc solid-success.in ewinarfm.co.be companyairline.ru broadway.bee.pl search-box.in fairbankhouston.cz.cc secondon.in aht-textile.ru hhwsdfhshds.co.cc
And many others. Those types of code are often used to distribute malware from external web sites while not being visible to the user.
This is not a signature-based rule, but looks at our Blacklist to identify malicious content.
Any web site sites (no specific target)
This malware is generally hidden inside the HTML or PHP files. Sign up here to get it clean up: Signup
Malware dump (sample of malware):