At the very least, he could've hosted the script on github.com, which is far less likely to be hijacked than his personal domain.