I've just read a post dating back to the 6th of March at Stardoll with lipstick On, written by Vamplady.
She wrote:

For the end, here are some of 'safety tips'
1. DO NOT even visit any site which has extension co.nr

co.nr is NOT a site, it's a free url redirection and I've been using it since 2005 with other sites I've had.
Superstar4allmagazine.co.nr is hosted by BLOGSPOT.
So instead of having superstar4allmagazine.blogspot.com (WHICH IS WAAAAAAAAAAAY TOO LONG) I've changed the url to superstar4allmagazine.co.nr which is of course much much much shorter.
So advising people NOT to visit ANY co.nr site is wrong.
These so called hackers are using sites like pizco and freewebs but hiding it behind co.nr (which is of course wrong.) But then again, people on Stardoll are usually girls between the ages of 12-16. It's hard to "hack" someone, but it's easier to get the passwords. So ALL these "free-superstar" sites (all these low-lifes) are depending on some idiot to give them their passwords. Most of these people aren't "hackers" decoding Stardolls system.

Summary: NOT all co.nr are hacking sites.
It seems like every low-life in Stardoll are now using co.nr for evil reasons, not for convenience like it's intended to be.

Other than that follow the simple tips provided in her post. Actually, EVERYONE has been yapping about it. DO NOT GIVE OUT YOUR PASSWORD TO ANYONE.

Just wanted to say it.