We’re seeing a fair number of pages on Narod (a service by that provides free web hosting, from Yandex, the Russian search engine).
These are used for both redirects to malware, as well as redirects in spam.
Example spam that redirects to a Russian webcam site:
Sample URLs:
jamesyff.narod.ru
martinezdgi.narod.ru
butlereua.narod.ru
Also a fairly large amount of redirects that point to another, US-based webcam site. Examples:
evlanovnartae.narod.ru
varfolomeyguf.narod.ru
ivlevkazimycy.narod.ru
stanislavaupi.narod.ru
parfenoebgrib.narod.ru
baymakovdaeu.narod.ru
feofantabaunu.narod.ru
zabusovkarluh.narod.ru
Administrators would be well advised to simply block any email or web traffic with narod.ru.
Alex Eckelberry