Must be at a server level – would be interested to take a look at your nameservers as some ad networks inject ads this way