This site and other customers of the same hosting service had their home pages modified to reference an external site. Google has turned up almost nothing on the technique involved or what the intent is, but the behavior is pretty simple: if you load this page and receive a notice of an attempt to download a file, then you should email me immediately.

I have changed the site’s passwords but since other sites on the same host have had this problem I suspect the issue isn’t with our passwords.

Based on file modification dates, I believe the period in which the site was altered was less than 24 hours. I’ll check on it regularly to see if it happens again.