Talos has been tracking a spam botnet that has been spamming weight loss products, male erectile dysfunction medication, and dating/casual sex websites. The same group of miscreants has begun using compromised third party websites to host HTML pages that perform redirection. After successfully compromising a victims web hosting account, the attackers create a subdirectory consisting of random letters and numbers. An HTML page is placed inside the new directory, and functions to redirect users to various types of landing pages.”]
Source: https://blog.talosintelligence.com/2015/05/little-links-big-headaches.html