Hacked?

Hi all,

This morning my wife asked me to look at her site and when I did it automatically redirected me to a site tobesaved3.net, which was registered YESTERDAY if you run a WHOIS on the domain.

I searched this and found an italian (i think) forum where someone mentioned it a few hours ago. They had gone to: http://liquidweather.net/howto/index.php?id=59

and it popped up on them. I went there and it is the same redirect as my wifes site. I have since taken her site down as a result until I can figure out what is going on. That site and my wifes site are both WordPress. Has anyone else see this or heard of this? its really new. I am trying to figure out if she is hacked.

thanks so much in advance.