Fake “MSN Featured Offers” spam mails
The email pictured to the left has got nothing to do with MSN Featured Offers.
The domain you will visit if you click on any hyperlink, nerwybqunk.com, has the following registration details. Of course, we’re not surprised to see Russian and Chinese involvement.
ICANN Registrar: AB NAMEISP
Created 23 June 2011
IP: 220.127.116.11 (San Jose)
Shares IP with 1,040 other domains.
Name Server: NS1.KSGG.RU and NS2.HEALTHMERCOLA.COM (shared with 20 domains)
Registrant: Megam M Dana (firstname.lastname@example.org)
ICANN Registrar: REGRU-REG-RIPN
Created 17 May 2011
Name Server: NS1.KSGG.RU (Chinanet) and NS2.KSGG.RU (Thailand Bangkok Ampol Food Processing Ltd)
Registrant: "Private Person", email@example.com
ICANN Registrar: BIZCN.COM
Created 17 June 2011
Registrant: Mathilda Liukko (firstname.lastname@example.org)