Caught a new one redirecting using GeoIP.
Goes to powertraf.com which uses the same scripts etc. as chhits.com which I posted about here:
http://www.gofuckyourself.com/showthread.php?t=573522
powertraf.com redirects to some pages that appear to do some codec downloading etc. and might contain exploits and crap.. read the other thread for info.
It also redirects to:
69.50.190.131/?to=dieter&...... Hosted at InterCage, Inc.
69.50.190.131 - Canonical name: 69-50-190-131.esthost.com goes to megatds.com
69.50.190.130 - megatds.com - Registrant: est-host - Vladimir Tsas sales at xhpro.com
69.50.183.210 - xhpro.com - Registrant: Bill Parsen webmaster at xhpro.com - Hosted at InterCage, Inc.
69.50.190.131/?to=dieter& redirects to a bunch of porn sites:
216.255.184.188 - adultweetplace.com
216.255.184.188 - adulthell.com
216.255.184.188 - adultfreegals.com
216.255.186.197 - bestadultgals.com
216.255.186.197 - all-mature-babes.com
216.255.186.198 - pornothumbgals.com
216.255.186.198 - teensecretsite.com
216.255.189.236 - teen-movie.net
216.255.189.235 - unrealmature.com
216.255.189.236 - bestmature4free.com
216.255.189.237 - teenloveonline.com
216.255.189.238 - theteenspics.com