Facebook page/ad redirection.
Dec. 5th, 2013 04:19 amHow very odd.
This sponsored ad came up on my Facebook feed:

Clicking on the link takes you to this
https://www.facebook.com/FCCCarrollton?sk=app_208195102528120
which redirects after a short time to this
http://www.oakleybay.com/sale.html
oakleybay.com is registered by a registrar in Shanghai:
Domain Name: OAKLEYBAY.COM
Registrar: SHANGHAI YOVOLE NETWORKS INC.
Whois Server: whois.yovole.com
Referral URL: http://www.yovole.com
Name Server: FREEDNS1.REGISTRAR-SERVERS.COM
Name Server: FREEDNS2.REGISTRAR-SERVERS.COM
Status: clientTransferProhibited
Updated Date: 08-may-2013
Creation Date: 08-may-2013
Expiration Date: 08-may-2014
Their holder is
[holder]
mntnr: MNTNR1
type: ORGANISATION
name: Food Mart
address: 684 Jody Road
pcode: 193010
country: CN
phone: 86-13772367671
fax: 86-13822711156
email: 2364328104183@DNS-DNS.NET
changed: 2013-10-08 15:28:09.0
193010 fails to return a valid result from the China Post postal code finder. However, +86 is the country code for China. 137 and 138 are prefixes for telephone numbers provided by China Mobile.
More digging could happen here, but this is curious enough, particularly because
https://www.facebook.com/FCCCarrollton
contains a page which is apparently connected to the First Christian Church of Carrollton, TX.
I wonder if the church realizes its "Welcome" link (https://www.facebook.com/FCCCarrollton/app_208195102528120) points at a page in China that purports to sell sunglasses.
This sponsored ad came up on my Facebook feed:

Clicking on the link takes you to this
https://www.facebook.com/FCCCarrollton?sk=app_208195102528120
which redirects after a short time to this
http://www.oakleybay.com/sale.html
oakleybay.com is registered by a registrar in Shanghai:
Domain Name: OAKLEYBAY.COM
Registrar: SHANGHAI YOVOLE NETWORKS INC.
Whois Server: whois.yovole.com
Referral URL: http://www.yovole.com
Name Server: FREEDNS1.REGISTRAR-SERVERS.COM
Name Server: FREEDNS2.REGISTRAR-SERVERS.COM
Status: clientTransferProhibited
Updated Date: 08-may-2013
Creation Date: 08-may-2013
Expiration Date: 08-may-2014
Their holder is
[holder]
mntnr: MNTNR1
type: ORGANISATION
name: Food Mart
address: 684 Jody Road
pcode: 193010
country: CN
phone: 86-13772367671
fax: 86-13822711156
email: 2364328104183@DNS-DNS.NET
changed: 2013-10-08 15:28:09.0
193010 fails to return a valid result from the China Post postal code finder. However, +86 is the country code for China. 137 and 138 are prefixes for telephone numbers provided by China Mobile.
More digging could happen here, but this is curious enough, particularly because
https://www.facebook.com/FCCCarrollton
contains a page which is apparently connected to the First Christian Church of Carrollton, TX.
I wonder if the church realizes its "Welcome" link (https://www.facebook.com/FCCCarrollton/app_208195102528120) points at a page in China that purports to sell sunglasses.