I bet it is emapis. org, see: http://www.urlvoid.com/scan/emapis.org http://www.urlvoid.com/scan/emapis.org As the unescaped javascript shows, it's a random c

I bet it is emapis. org, see: http://www.urlvoid.com/scan/emapis.org http://www.urlvoid.com/scan/emapis.org As the unescaped javascript shows, it's a random chance for different sites, so it might be somewhat hard to reproduce. So far I haven't been able to pull a mootools.js from those sites to see it. Edit: the js I'm getting back is just (function(){var error = 404;})(); Also, with regards to your site, here is the google safebrowse: http://www.google.com/safebrowsing/diagnostic?site=jasonlbaptiste.com http://www.google.com/safebrowsing/diagnostic?site=jasonlbap... It shows that you also had stuff going to smartenergymodel[.]com, which is also listed on that unmaskparasites link that everyone is passing around.