It looks like like the link shortener vanderbi.lt, operated by Vanderbilt University, was compromised in some form, too: https://fi-le.net/vanderbilt