Suspect ad network leads to PDF exploit

That email address of trafficbuyer@gmail.com is well known. The subdomain traffic.firedogred.com is dual-homed on 207.57.97.233 and 161.58.56.25 (both NTT America, Inc).The next hop is show.sheathssubtotal.info/rotate?m=3;b=2;c=0;z=406377sheathssubtotal.info was regisitered on 17th September with the same "trafficbuyer@gmail.com" contact details as firedogred.com.show.sheathssubtotal.info is dual