Hacked destinations oftentimes observe an emotional spike in rush hour gridlock. Programmers do this to evade spam recognition. Your site is a "perfect" area and isn't known to have malware when it is first tainted. By including a connection to your site rather than their own known malware facilitating site, programmers evade spam discovery.