File with w.php?f=96ece neatly flagged by avast Networkshield!

See: http://urlquery.net/report.php?id=157515
See: http://www.isthisfilesafe.com/sha1/743C7FD887F208FBA00C645FB54FF057957C6BCE_details.aspx
See: http://anubis.iseclab.org/?action=result&task_id=128e178d856917674b91eadde5d6cb350

Urls ending in w.php?f=96ece deserve further investigation…
domain blacklisted in Opera
Flagged on Threatlog …
Avast Networkshield prevents us from going to the domain, because of an URL:Mal infection…

polonus

wepawet - suspicious - and not much to see
http://wepawet.iseclab.org/view.php?hash=23910dc986706217865ad0b99554fcb0&t=1346695501&type=js

but seems to be down from here
http://www.downforeveryoneorjustme.com/http://green.artisthunters.com/w.php?f=96ece

sucuri - blacklisted by Opera/AVG
http://sitecheck.sucuri.net/results/green.artisthunters.com