Quoted form my course instructor's lecture:
The following are the stages of a typical web attack: The victim visits a legitimate web site that has been compromised. The compromised web site redirects the victim to another site that is running malicious code that is controlled by the attacker. The redirection may go through various intermediary servers first.
I also faced the same issue. If I visit torrent sites and mistakenly or intentionally click on some links, it takes me to another site through various intermediary site. Why does it go through many site within a few seconds instead of only going to the last one directly? Whats is the benefit for the attacker?