Suspicious defacement obfuscated js not flagged?

[polonus]

See: http://killmalware.com/kismamaparna.hu/#
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fkismamaparna.hu%2F
Re: https://sitecheck.sucuri.net/results/kismamaparna.hu#sitecheck-details
Defacement   MW:DEFACED:01?v7   http://kismamaparna.hu/

De-obfuscated code see attached....JS.Agent variant?
On IP: https://www.abuseipdb.com/check/91.82.226.140 & 
https://www.virustotal.com/en-gb/ip-address/91.82.226.140/information/

Re: http://toolbar.netcraft.com/site_report?url=http://kismamaparna.hu  nginx/0.6.32 webserver
-> https://www.cvedetails.com/vulnerability-list/vendor_id-10048/product_id-17956/version_id-81261/Nginx-Nginx-0.6.32.html

polonus (volunteer website secuity analyst and website error-hunter)