Heavily obfuscated site

[Shawn Jefferson]

I don't believe that this site is actually hosting or redirecting to any malware, but it's heavily obfuscated and it set off my IDS system this weekend.  I haven't decoded it successfully yet though, so I can't be completely sure it's not doing something bad.  Going to the site on an analysis machine didn't show anything obviously bad.

Code: [Select]

http://www.amdo.org/
I guess they want to foil any email email harvesters and web crawlers (?). 

[MysteryFCM]

It's non malicious

http://wepawet.cs.ucsb.edu/view.php?hash=976c8e3ee4b826957dc3b8c52b08af59&t=1246925293&type=js

[Shawn Jefferson]

Thanks!  I should have thought of running it through wepawet! 

[MysteryFCM]

No problem