Looks like lichess.org is loading questionable javascript from lichess1.org
why do you think it's questionable javscript, is it just the sketchy domain name? I just see a lot of 500 errors from lichess.org to lichess1.org, and opening lichess1.org shows a cloudflare error (due to the current outage)