There was a bad (malicious) .htaccess file. I've removed it, but there remains the question of how it got there.
Added: The domterm.org directory in my home directory on DreamHost (from which domterm.org is hosted) was group and world-writable. Don't know how that happened (probably my carelessness), but I fixed it.