At first look
bppr.info is an anon site or has been hacked.
Its also black listed for malware **
http://yandex.com/infected?l10n=en&url=bppr.info
That said if you load your code from xyz site you selected to get the pops from you should be able to see the load path of the pop to see if it is being rerouted via random URL's.