Somebody bought it and stuck in malicious code to redirect a user's traffic through a proxy, show them ads and snoop on their web browsing.