Encrypted defacement flagged?

WOT has bad Wen Rep for that IP: https://www.mywot.com/en/scorecard/74.220.215.206?utm_source=addon&utm_content=popup
IP badness history: https://www.virustotal.com/nl/ip-address/74.220.215.206/information/
We are talking about a site not flagged on VT: http://killmalware.com/themoviemonk.com/#
Unable to properly scan site, according to Sucuri’s.
See malcode: http://jsunpack.jeek.org/?report=3ce53c10a23a305ba6f0364b7c5f15a33c56b688
Open link with NoScript active and in a VM/sandbox, for security research only.

pol

html scan
https://www.virustotal.com/nb/file/cf54fbadf10cab58c862fa7298696d9ff22e66100d3bce2e48af751c1b5d4f7f/analysis/1418746441/

js file
https://www.virustotal.com/nb/file/cf54fbadf10cab58c862fa7298696d9ff22e66100d3bce2e48af751c1b5d4f7f/analysis/1418746491/