Why is the copyright notice in a scripting file instead of something almost guaranteed to be statically served? Or was that part of the attack?