See: https://www.virustotal.com/nl/url/b6b3b87c27bf710095ee65ce82046df111cf07783c5a8362d8302693422910fe/analysis/
and http://scanurl.net/?u=http%3A%2F%2Fyabies.com%2F&uesb=Check+This+URL#results
URL: hxtp://yabies.com/
(imitation of visitor from search engine)
GET / HTTP/1.1
Host: yabies dot com
Referer: htxp://www.google.com/search?q=redirect+check1
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 19 Aug 2013 17:02:26 GMT
Location: htxp://niu-sae.com/stats.php
Server: Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 413
Content-Type: text/html; charset=iso-8859-1
malicious
polonus