On Feb 8, 2013, at 12:51 PM, Drew wrote: > wpstats.org's A record is definitely resolving to 127.0.0.1: > http://www.whatsmydns.net/#A/wpstats.org > > They may be having a bit of fun with whomever's sites they've compromised. Is that possible? Or is that just looping back to the users machine?