An entire server and all the domains (several hundred) hosted on it are being used to redirect to a “STOP SOPA” protest page located at: cdn.dsultra.com/images/image_redirect/StopSopa.jpg
The server (18.104.22.168) is hosted in the US. Domains are redirected using this method:
The full list can be found here: hacked_for_sopa
Don’t let your website get hacked! Scan for vulnerabilities now with SparkTrust Certified.