I got an mass email from an friend containing only this link (made not clicable on purpose):
http://www.casadelapiedra.com/components/com_content/id876757355.php
I imagine she is got some kind of virus, but since I'm curious and not very careful I clicked on.
The PHP that loaded redirected me to another site.
PHP page:
<h1>
You are here because one of your friends <br> have invited you.<br>
Page loading, please wait....
</h1>
<meta http-equiv="refresh" content="0; url=http://newsmarketgenonline10go.eu/?12/2">
That other site in turn gave a '302 moved temporarily' and redirected me to Google.
Whois doesn't reveal anything about the domain, dig on the MX shows that they use a dynamic DNS. Didn't get any extra info on the A record, besides that is from Latvia: ns1.altnet.lv. admin.altnet.lv
What could them be after? Confirming email addresses?