It's interesting that someone went out of their way to obfuscate the interim.html script:
document.write('<s'+'cript language="JavaScript" src="');
I guess they were intentionally trying to evade some tool that looks for '<script'?