the first is detected only the script is blocked
http://i40.tinypic.com/smvy9y.jpg
http://wepawet.iseclab.org/view.php?hash=032c1cbcaff59c4b789c8d149e5546d7&t=1383438148&type=js#sec_deobfuscation
is listed in blacklist just wot
http://www.mywot.com/en/scorecard/remont-40.ru
http://www.urlvoid.com/scan/remont-40.ru/
but the second does not