Malware on CloudFlare website?

polonus · 2015-04-08T21:11:33.000Z

See: Result for 2015-04-08 20:21:55 UTC
Website: htxp://7cast.net
Checked URL: htxp://7cast.net/player/27hdih6cmczyn8e/650/390
Trojans detected:
Object: htxp://7cast.net/player/27hdih6cmczyn8e/650/450
SHA1: 1d6f4f5eab02ff384f9f17138fd9786025b7c67c
Name: TrojWare.JS.Obfuscated.DI
Object: htxp://7cast.net/broadcast/27hdih6cmczyn8e
SHA1: aaffb433675b83e1bf7b9ae151f9206bf8fbd706
Name: TrojWare.JS.Obfuscated.DI
Object: htxp://7cast.net/player/27hdih6cmczyn8e/650/390
SHA1: f54fc26e10652c86ce75f02c4e0c23fe80c03378
Name: TrojWare.JS.Obfuscated.DI Avast detects as JS:Redirector-BUR [Trj]
Consider: http://support.clean-mx.de/clean-mx/md5.php?Comodo=TrojWare.JS.Obfuscated.DI
Sophos flags: https://www.virustotal.com/nl/url/8c38542933f2f0b7ac8e30d8a2cc571b27b99da930788430f2bb417d0fbd8441/analysis/#additional-info
6 instances of this malware: known javascript malware. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD28
Read: https://wordpress.org/support/topic/wordpress-exploit-script-inserted-into-code

pol

Pondus · 2015-04-08T21:34:13.000Z

none
https://www.virustotal.com/en/file/16bc46905b30087bc020e4f7b492b228bb078660b1db2883b5583486ac61e50f/analysis/1428528770/

Pondus · 2015-04-09T06:54:01.000Z

Confirmed infected by Norman/BlueCoat and detection added 390.htm: MalScript.K

Announcements