Unconditional Secure Security Messages

Question

I am having serious difficulties finding the root cause for a safe / insecure message coming from IE. I looked through the whole result and there are no links to http:

I searched for unsource iframes that trigger this message, and there is none other than jQuery 1.4, even the "iframe" text is missing in the source code.

Almost at the end I try to understand the reason for this. Anybody got any ideas

Answer 1

Once again, Evil was "destroyed."

src script, coverflow (http://www.jacksasylum.eu/ContentFlow/). src, script ( , ). script ( , ). ... hurray.

. IFrame script src "javascript:"

Answer 2

- .

149:

document.write("<script id=__ie_cf_onload defer src='blank_do_not_delete.js'><\/script>");

blank_do_not_delete.js

Answer 3

img, , HTTPS?

fiddler , .