See: http://zulu.zscaler.com/submission/show/77ca322152ac0eb907027dd55e7c143d-1341578563
Here sucuri detects the spamming and the suspicious conditional redirect: http://sitecheck.sucuri.net/results/oobj.blog.br/trace/a/b/c/d/
fake-meds-spam-spoofing to c+n+d+p^llgroup dot com
site identified with Blackhat SEO Spam
polonus