See: http://jsunpack.jeek.org/?report=49be8926e35f2acc51b8442441e7422544880b59 (for security analysis only, view with NoScript and RequestPolicy extensions active and inside a VM/sandbox)
Suspicious code:
sbhmagazine dot net/templates/default/js/chrome.js benign
[nothing detected] (script) sbhmagazine dot net/templates/default/js/chrome.js
status: (referer=sbhmagazine dot net/)saved 8759 bytes af4805f100a5e23cb89d8b53606dff9a3846b7d4
info: [img] sbhmagazine dot net/templates/default/js/images/down.gif
info: [iframe] sbhmagazine dot net/templates/default/js/about:blank (was the malcode here?)
info: [decodingLevel=0] found JavaScript
suspicious
See the warnings here: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fsbhmagazine.net%2F
Web site disabled
See scumware dot org results:
Query results
URL MD5 IP Threat
2013-07-12 19:23:58 htxp://sbhmagazine.net/book/index.php?id=55 335D5218C34F7BD4745F3B4E7261B24F 198.20.225.139 JS/Kryptik.ALY trojan
2013-07-12 15:37:10 htxp://sbhmagazine.net/book/index.php 4DD8D8FD485D5D5CAC4045B2177E0E13 198.20.225.139 JS/Kryptik.ALY trojan
Maybe the detection was from a javascript that contained
document.write(eaddr);
polonus