If I had established some previous credibility from being the site's owner, then perhaps so. There would be a difference between just creating it and then immediately afterward adding the malware versus keeping it up and running for a while before adding it. If you did the former, things would be much more suspicious, but if you did the latter with, say, a personal blog that you've been updating consistently for at least the past month or two, you could have some legitimate integrity in the eyes of those who do hear your lie, thus making them believe it.