After further tweaking, disabling JS as well as META redirects, I'm served with the above code alone. Totally just a server virus that's loading the above code for every .pcriot person.
Nothing we can do for immediate fixes. Up to the pcriot devs to fix this one. Hopefully I saved them time...