On main info page the http is 63.104.239.199/~iceroot

On the e-mail page, they request go to:
http://www.ebay.com/accounts/memb/avncenter/?dll87443%2213

that link takes you to a Google search page so I suspect that the hacker has linked that address to his onw site.