Thanks, Max, for informing us and applying first aid.

For those who have not noticed: Max has completely removed the call to "ga_social_tracking.js" from the HTML, and has changed that script to a harmless content. It is of course only a matter of time that the attacker strikes again as before, so I would keep 2345 blocked at least until the whole story is over.