every single site on that host was hacked. someone replaced every index.* file with this content. but my service provider insists it's not a security issue on their part, must be some script in some subdomain. but anyone who knows unix knows that a user cannot access other peoples accounts. must be someone with root priv.