Simply create a .swf file and have it forward to xyz.com. Post it to the ussers profile in their comments. The user can no longer get into their profile and everyone that sees their profile is forwarded to the web page of your choice. This could be abused by people who would like to generate revenue by directing people to certain web sites.