Info vom Virenlabor: Hi guys, the URL 54.69.95.67 had been used for malicious purposes until ~7 days ago (domains such as 00dvla.t2gdssvyy.com, 00hot7kwwgk.xtdq3k9.com, 00lcpudbamm.uvxdiu5i.com pointed here). 7 days ago, virtually all the traffic stopped, and then traffic rose yesterday 16:00 CET. This is commonly caused by somebody buying the IP. I just now unblocked the IP, so there should be no more popups for you:-)!