See: http://urlquery.net/report.php?id=1485085472492
See: https://www.virustotal.com/nl/url/0fdde9b8908a3be10ee7a9766d180a118f1bbef3769039db695b7d73f3faacf6/analysis/#additional-info
See: https://quttera.com/detailed_report/www.atut-ce.pl
See: https://sitecheck.sucuri.net/results/www.atut-ce.pl
vuln.: http://retire.insecurity.today/#!/scan/a18f01e9d39f88935a2553f485ae8ec1687dbcd25f971bc6833040c2415fa6bf
Re: https://stackoverflow.com/questions/23411188/hidden-malicious-script-inserting-code-into-html-web-page-how-to-remove-clean
The SEO injection depends on a 2014 known Joomla hack, and the site has Joomla…see code line 177
polonus