A "fake" domain being used for the distribution of phishing emails.
FedEx Identity Theft Scam
Unsolicited Spam Originating From: Poland (220.127.116.11)
Originating Network(s): telvinet.pl
Date Received: 2/12/2013
Click Link: http://www.oncocentro.com/tmp/bkhi71.php?receipt_print=825_693766498
Responding IP: 18.104.22.168
Name Servers: ns1.locaweb.com.br, ns2.locaweb.com.br
Contents of Spam:
Reply-To: "Manager Matias Nash" firstname.lastname@example.org
From: Manager Matias Nash <email@example.com>
Sent: Tuesday, February 12, 2013 8:54 AM
Subject: Shipping Detail
They have hacked into the Comprehensive Cancer Center of the University of Alabama at Birmingham. As bad as they come.