Well likely they do it a similar pattern before to notify users that were infected on redirection.
This purpose of step to know and users must aware that one of their computers were surfing and its compromised already.
So its really a matter of good move.