I didn't click on the link, but it looks like XSS to me; the tooltip looks like script injection that dumps document.cookie. I don't care to confirm if this is

I didn't click on the link, but it looks like XSS to me; the tooltip looks like script injection that dumps document.cookie. I don't care to confirm if this is real or not; but navigating to www.bobparsons.me/index.php sans the query params appears fine… I wouldn't call this a full "defacement" just yet.