Danbooru is blocked for me currently. Is it a false positive or did it get infected recently?
hey and welcome to the forum.
according the link it say the url to be risky.
http://zulu.zscaler.com/submission/show/8ecad71f78a2fd4bdad4131f58d4eefa-1359214077
URL:mal means the url/IP is on a block list…for whatever reason
urlvoid. http://www.urlvoid.com/scan/danbooru.com/
hosted on same IP
http://www.urlvoid.com/scan/frendzforum.com
http://www.urlvoid.com/scan/constantcontent.com
http://www.urlvoid.com/scan/kongergate.com
http://www.urlvoid.com/scan/hondafinicial.com
http://www.urlvoid.com/scan/pornohube.com
http://www.urlvoid.com/scan/mmochampion.com
See: http://www.mywot.com/en/scorecard/danbooru.donmai.us webrep alert for explicit adult content
Decoded uri component on line 43 see attached image
Compromised read: http://wordpress.org/support/topic/site-security-issue
Obfuscated translates to: text/javascript"> eval(decodeURIComponent(‘document.write(’<a href="mailto:webmasterATdanbooru.donmai.us">Contact</a>‘);’))
So could be benign…
polonus