Possible FP site

Viruses and worms
1 
www.w0uk.net

Admin states that the site has been reloaded on a different server with the same host.
Gave me some other URL’s for other sites hosted on the server but they don’t trigger a block.
Virus total gives mixed results (3/20), link below.

Not really sure what’s going on and any help or advice appreciated.
Cheers.

https://www.virustotal.com/url/976937abcf8b203d495503fc396a8f6edfb514397a6e85f756f66d00cc0cd503/analysis/1328284668/

2

http://sitecheck.sucuri.net/results/http://www.w0uk.net/

3

Please edit your post and make the URL not clickable…change www to wxw

VirusTotal - HTML scan - 13/43
https://www.virustotal.com/file/11cf7176056bcc12953812ea78038804d9429219f23745982a44d667589a8dd8/analysis/1328285474/

Wepawet - suspicious
http://wepawet.iseclab.org/view.php?hash=e2affa2456c627ccc4918d805aef0b05&t=1328285651&type=js

4

Thanks for the quick replies.

5

You’re welcome.

6

Hi Wyphy,

Also have a look at this part of the code, it is flagged as possibly suspicious as well:

-www.w0uk.net/w0uk/Scripts/Widgets/YouTube/YouTube.js suspicious
[suspicious:2] (ipaddr:66.7.221.218) (script) -www.w0uk.net/w0uk/Scripts/Widgets/YouTube/YouTube.js
status: (referer=-www.w0uk.net/w0uk/Activities.html)saved 8775 bytes 112b6d77651fbaa79dfc2e4ab35eac3367f087fe
info: [javascript variable] URL=-www.youtube.com/watch?v=
info: [javascript variable] URL=-search.yahoo.com/mrss/
info: [javascript variable] URL=g-data.youtube.com/schemas/2007
info: [img] -www.w0uk.net/w0uk/Scripts/Widgets/YouTube/
info: [embed] -www.w0uk.net/w0uk/Scripts/Widgets/YouTube/
info: [decodingLevel=0] found JavaScript
error: undefined variable Class
error: undefined variable Widget
error: undefined function Class.create
suspicious:

polonus