MalasadaTech#LandUpdate808 domain found in research, not from anything injected into a compromised site.
greyspartners[.]com/analytics.js
As seen here:
https://urlscan.io/result/0503f332-9a1d-4371-a54a-4451dbfded79/#summary
Randy@MalasadaTech Also seeing this one:
chhimi[.]com
https://urlscan.io/search/#page.domain%3Achhimi.com
I got it to reply with it's adcount.js payload. But not found on an injection.
@rmceoin Interesting, thanks!