Could it be related to the Cloudflare issue?

Looks like lichess.org is loading questionable javascript from lichess1.org

why do you think it's questionable javscript, is it just the sketchy domain name? I just see a lot of 500 errors from lichess.org to lichess1.org, and opening lichess1.org shows a cloudflare error (due to the current outage)

This is due to the Cloudflare outage.