Yours was more descriptive and had sample code at least! Thanks for picking up my slack though.
So ask them what is the encrypted javascript (var source ="=tdsjqu?epdvnfou…) at the end of the main page, with hidden iframe link to kizadarai.info?
Yes. Why are they running that script outsite of the closing tag, and why is it obfuscated like that? What are they trying to hide.