I understand this site uses affiliate links, but it's hard to understand why the links appear to be "maliciously" generated...
For instance, a group ad appears above the fold and just below the site badge with this link:
//www.anrdoezrs.net/click-7293438-11666913-1399573918000?sid=valkyrie
this appears to redirect to commission junction:
>curl "//www.anrdoezrs.net/click-7293438-11666913-1399573918000?sid=valkyrie"
<html>
<head><meta http-equiv="redirect" content="cj.dotomi.com/pg70ox54N/x38/MMRRRUMO/SNUOPOT/L/L/L?k=kzpk%3D2hsr5ypl<<o00w%3A%2F%2F333.huykvl6yz.ul0%3AF7%2Fjspjr-E9GABAF-88DDDG8A-8AGGCEAG8F777<<N<<"></head>
<body>The URL has moved <a href="//cj.dotomi.com/pg70ox54N/x38/MMRRRUMO/SNUOPOT/L/L/L?k=kzpk%3D2hsr5ypl<<o00w%3A%2F%2F333.huykvl6yz.ul0%3AF7%2Fjspjr-E9GABAF-88DDDG8A-8AGGCEAG8F777<<N<<">here</a></body></html>
I thought my system had been infected by some malware - but I tested this on multiple systems on separate networks and they all show something similar.
For instance, a group ad appears above the fold and just below the site badge with this link:
//www.anrdoezrs.net/click-7293438-11666913-1399573918000?sid=valkyrie
this appears to redirect to commission junction:
>curl "//www.anrdoezrs.net/click-7293438-11666913-1399573918000?sid=valkyrie"
<html>
<head><meta http-equiv="redirect" content="cj.dotomi.com/pg70ox54N/x38/MMRRRUMO/SNUOPOT/L/L/L?k=kzpk%3D2hsr5ypl<<o00w%3A%2F%2F333.huykvl6yz.ul0%3AF7%2Fjspjr-E9GABAF-88DDDG8A-8AGGCEAG8F777<<N<<"></head>
<body>The URL has moved <a href="//cj.dotomi.com/pg70ox54N/x38/MMRRRUMO/SNUOPOT/L/L/L?k=kzpk%3D2hsr5ypl<<o00w%3A%2F%2F333.huykvl6yz.ul0%3AF7%2Fjspjr-E9GABAF-88DDDG8A-8AGGCEAG8F777<<N<<">here</a></body></html>
I thought my system had been infected by some malware - but I tested this on multiple systems on separate networks and they all show something similar.
Facebook
Twitter
Instagram