If the referrer is findgala.com
http://64.15.72.46:17777/click.php?go=4WIJBLIerRsykKPTgk7P+W0/H7Maq1S+LQbM5kJ0cCmT&d=VWLObkr7rqTpqcaJgPgP+Wm7BMROj21Xow0Lb+NPf8oKh78irwQz7KKN67MwyaJHPFpzzTco21vCvCday2p6C8N59XWPEXmEJoJY21AulwTkkJYilij6g6NqoVdtTep7mwUXcVkYbqaMDpXugEXaRHoMrULPF5XgVHmky+ntrvhkdTtxsu/Xyp3bP5ktpBVL+ih6usm7ZliK6d9iM5CGjFk41kOShjFXIoLe6F==&qq=mpeg+porn
Redirects to exploit kit
http://chak1com.in/forum.php?tp=bb67d93310402f39
Exploit kit.