webbie07 Thanks for the info. I've submitted a request to Bitdefender to remove the warning and fixed the likely cause.
I assume it was the URL scanner, which, when a URL parameter was set, output the malware code in plain text on hacked sites (of course not active, but snippets in unchanged form).
There are quite a few of these links with URL parameters floating around in international forums. Some of the affected sites have been infected for a long time or still are.