Day: June 27, 2009

Employment Scam KS Inc – ksinc.supp@gmail.com

8 Comments

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

Interview With A Money Mule

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.181 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
65.55.111.169 United States* Whois Google DNSStuff Urgentmessage.org
65.55.111.137 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From EUGENE NICKY Sat Jun 27 12:06:49 2009
Return-Path:
Authentication-Results: mta107.sbc.mail.re3.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 207.115.20.181 (EHLO flpi179.prodigy.net) (207.115.20.181)
by mta107.sbc.mail.re3.yahoo.com with SMTP; Sat, 27 Jun 2009 12:06:50 -0700
Received: from blu0-omc4-s30.blu0.hotmail.com (blu0-omc4-s30.blu0.hotmail.com [65.55.111.169])
by flpi179.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with ESMTP id n5RJ6nJP009425
for ; Sat, 27 Jun 2009 12:06:49 -0700
Received: from BLU106-W22 ([65.55.111.137]) by blu0-omc4-s30.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 27 Jun 2009 12:06:49 -0700
Message-ID:
Content-Type: multipart/alternative;
boundary=”_eee760e0-7014-4260-bf09-3a1af07c498e_”
From: EUGENE NICKY  <EUGENE5627965a57NICKY@hotmail.com>
Sender:
To:
Subject: Regarding your resume
Date: Sat, 27 Jun 2009 19:06:49 +0000
Importance: Normal
MIME-Version: 1.0
Content-Length: 7199

Dear Mr. / Mrs.

This letter is a job offer sent to you as a response to your resume by KS Inc. More than 15 countries of Europe (Belgium, Italy, France, Ukraine, Spain, Germany, etc.) are already our clients. Now, in spite of the economical crises, our company is expanding and increasing the number of service to provide opening new branches in the USA. Now we are in your state.

Among activities of KS Inc, the major one is to provide consultation, assist with digital currency payment and money transfer to numerous private entities and businesses. Our company is growing and our service is getting in bigger demand due to the fast development of on-line business activity and vast spread of use of digital currency. Expanding our business in your state, KS Inc. is looking for a reliable, detail- and deadline-oriented, and motivated people ready to work with our clients contributing to success and reputation of the Group.

The basic requirements are: fair attitude to work, ability to handle money, skills in work with a computer as an intermediate user, general knowledge of work in the Internet, free time availability� and your desire to make money, of course. Some experience in work with digital currency would be an advantage. If you have no experience, we are ready to provide you training at the beginning.

You may work out your schedule easily working full-time or part time having this home-based job. All applicants are interviewed by phone after signing the employment agreement.

We offer real salary unlike many indecent companies promising too high salaries to attract people who are never meant to see even half of promised money.

We do not require any starting capital to work with us!

We are ready to provide you the documents empowering us to provide legitimate business on the territory of the EU and the USA.

To apply, please, contact us at our e-mail. Our staff is ready to provide you support, necessary training and grant you as much information as you need to work confidently.

We are looking forward to hearing from you soon,

Best Regards,

Mary Jones

KS Inc. Recruiting Manager.

– tel: +1 (585) 4926120

– e-mail: ksinc.supp@gmail.com

Canadian Pharmacy – canadianpharmacy-shop.com

1 Comment

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

canadian pharmacy shop

Address lookup

canonical name canadian-medshop.com.
aliases
addresses 195.95.155.22

Domain Whois record

Queried whois.internic.net with “dom canadian-medshop.com“…

Now, don’t you think giving your personal or credit card information to such ruthless criminals would be sheer madness? You would possibly get some fake product (which in case of pharmaceuticals can endanger your health). But most probably you’d get nothing at all, and they would just rip you off. They couldn’t care less about you
Domain Name: CANADIAN-MEDSHOP.COM
Registrar: EURODNS S.A
Whois Server: whois.eurodns.com
Referral URL: http://www.eurodns.com
Name Server: NS1.EURODNS.COM
Name Server: NS2.EURODNS.COM
Status: clientTransferProhibited
Updated Date: 04-feb-2009
Creation Date: 04-feb-2009
Expiration Date: 04-feb-2010

Last update of whois database: Sat, 27 Jun 2009 23:31:12 UTC
Queried whois.eurodns.com with “canadian-medshop.com

By submitting this query, you agree to abide by the above policy.

Domain: canadian-medshop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Technical Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.22”

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 22.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-medshop.com IN A 195.95.155.22 700s (00:11:40)
canadian-medshop.com IN MX
preference: 10
exchange: mail.canadian-medshop.com
3600s (01:00:00)
canadian-medshop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009062000
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-medshop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)
canadian-medshop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)

afsfsd

Address lookup

canonical name canadianpharmacy-shop.com.
aliases http://www.canadianpharmacy-shop.com
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom canadianpharmacy-shop.com“…

   Domain Name: CANADIANPHARMACY-SHOP.COM
   Registrar: EVERYONES INTERNET, LTD. DBA RESELLONE.NET
   Whois Server: whois.resellone.net
   Referral URL: http://www.resellone.net
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jun-2009
   Creation Date: 22-apr-2009
   Expiration Date: 22-apr-2010

Last update of whois database: Sat, 27 Jun 2009 23:39:39 UTC <<<

Queried whois.resellone.net with “canadianpharmacy-shop.com“…

Registrant:
 n/a
 p.o. box 1928
 CHERNIGOV, UA 14000
 UA

 Domain name: CANADIANPHARMACY-SHOP.COM

 Administrative Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614
 Technical Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614

 Registration Service Provider:
    IT-SPEC.COM, info@it-spec.com
    +3.80913018614
    http://it-spec.com
    IT-SPEC.COM - PROFESSIONAL DOMAIN REGISTRATION
    SEND FOR ABUSE: domain-abuse@it-spec.com

 Registrar of Record: Everyones Internet, LLC dba Resellone.net
 Record last updated on 21-Jun-2009.
 Record expires on 22-Apr-2010.
 Record created on 22-Apr-2009.

 Domain servers in listed order:
    NS1.SUSPENDED-DOMAINS.NET
    NS2.SUSPENDED-DOMAINS.NET   

 Domain status: clientTransferProhibited
                clientUpdateProhibited
Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

% Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.canadianpharmacy-shop.com IN CNAME canadianpharmacy-shop.com 60s (00:01:00)
canadianpharmacy-shop.com IN SOA
server: ns1.nscontrol.com
email: root.canadianpharmacy-shop.com
serial: 2007100805
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
canadianpharmacy-shop.com IN NS ns4.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns5.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns2.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns1.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns3.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN A 195.95.155.3 60s (00:01:00)

— end —

Canadian Pharmacy Scam – thepharmacydiscount.com – internetserviceteam.com

2 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

canonical name thepharmacydiscount.com.
aliases
addresses 95.168.177.116 – internetserviceteam.com

Internetserviceteam is a known content scraper bot operator, they are known to crawl the web to steal images (photos), they also run spam harvesting bots (scanning for email addresses) and scrape web page content to produce spam pages.

Domain Whois record

Queried whois.internic.net with “dom thepharmacydiscount.com“…

Domain Name: THEPHARMACYDISCOUNT.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.EVERYDNS.NET
Name Server: NS2.EVERYDNS.NET
Name Server: NS3.EVERYDNS.NET
Name Server: NS4.EVERYDNS.NET
Status: clientTransferProhibited
Updated Date: 20-may-2009
Creation Date: 02-dec-2008
Expiration Date: 02-dec-2009

Last update of whois database: Sat, 27 Jun 2009 22:59:29 UTC

Queried whois.todaynic.com with “thepharmacydiscount.com“…Network Whois record

Queried whois.ripe.net with “-B 95.168.177.116“…

Information related to ‘95.168.177.0 – 95.168.177.255’

inetnum: 95.168.177.0 – 95.168.177.255
netname: V3SERVERS-NET-967806
descr: v3servers.net VPS&VDS customer server
country: BY
admin-c: SA4597-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20090417
source: RIPE

person: Sogreev Anton
address: 12 Knez Mihailova
address: apt. 18
address: Belgrade
address: 11000
address: Serbia
phone: +1 619 684 2664
e-mail: mail@v3servers.net
abuse-mailbox: abuse@v3servers.net
nic-hdl: SA4597-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20081010
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
source: RIPE

% Information related to ‘95.168.160.0/19AS28753’

route: 95.168.160.0/19
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20090126
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
source: RIPE

DNS records

name class type data time to live
thepharmacydiscount.com IN SOA
server: ns1.everydns.net
email: hostmaster.thepharmacydiscount.com
serial: 1246143007
refresh: 3600
retry: 900
expire: 1209600
minimum ttl: 3600
360s (00:06:00)
thepharmacydiscount.com IN NS ns1.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns2.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns3.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns4.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN A 95.168.177.116 3600s (01:00:00)
116.177.168.95.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 9042600
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN PTR 95.168.177.116.internetserviceteam.com 100000s (1.03:46:40)

Canadian Pharmacy – best-drug.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)


us drugstore

Address lookup

canonical name best-drug.com
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with dom best-drug.com

   Domain Name: BEST-DRUG.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 25-jun-2009
   Creation Date: 24-jun-2009
   Expiration Date: 24-jun-2010

Last update of whois database: Sat, 27 Jun 2009 20:46:56 UTC <<<

Queried whois.enom.com with “best-drug.com“…

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: best-drug.com
Registrant Contact:
   slay slayer
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Administrative Contact:
   slay slayer (sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Technical Contact:
   slay slayer  sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Status: Locked
Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 24 Jun 2009 18:34:09
Expiration date: 24 Jun 2010 18:34:09

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
best-drug.com IN SOA
server: ns1.nscontrol.com
email: root.best-drug.com
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
best-drug.com IN A 195.95.155.3 60s (00:01:00)
best-drug.com IN NS ns4.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns3.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns5.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns1.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns2.nscontrol.com 60s (00:01:00)

MICROSOFT COMPANY INC – AWARDS PROMOTION LOTTERY

Leave a comment

AWARDS PROMOTION LOTTERY

I am pleased to inform you that you have been officially cleared for payment by the verifications Department at the headquarters

of the MICROSOFT Online AWARDS PROMOTION CENTER United Kingdom for the ballot computer internet draws of THE MICROSOFT Online AWARDS PROMOTION OF UNITED KINGDOM AS SPONSORED BY THE MICROSOFT COMPANY INC.

The original copy of your Winning Certificate, your Winning bank draft/check and two other documents (Money
Laundering protection and Letter of Affidavit for Claims) from the British Government stating that the money was obtained legally through the MICROSOFT Online AWARDS PROMOTION LOTTERY will be sent to you via courier as soon as you meet with any of the optional requirements listed below.

Meanwhile, your winning certificate will be sent to you first via email attachment
I wish to inform you that all authorities involved have certified payment of your Lottery Claims amounting to
£1, 000, 000, 00(One million Great British Pounds), which is prize money from MICROSOFT Online AWARDS PROMOTION for your winning in the Microsoft Online Award Draws, which was drawn through a computer random system of all Internet
users worldwide.

Be informed that instruments of payment for the sum of £1, 000, 000, 00 (One million Great British Pounds) to you is already in our possession and shall be processed upon meeting the requirements stated below.

You can now begin the final step of the claims process, which is the transferring of your cash prize to you. With regards to this, there are two options open to you; you are required to select the more
convenient of the two.

The options, together with their associated conditions are presented below:

Option 1: Courier of your winning draft to you via DHL Courier Company, which is our assigned courier company. Please note that
you can cash your bank draft from any bank anywhere in the world.

The Courier Company would bring the documents to your postal/home address nominated by you and as written below (please you are allowed to correct or amend your contact information in your next mail):

You will be required to send your international passport, driver’s license or ID card to me via email attachment as it will be used for a proper identification of you during delivery of your winning documents and bank draft to you by the DHL Courier Company.

Option 2: Your prize money will be wired to your bank account via an automated Direct Wire Transfer System operated by nominated Payment center. Hence you would be required to send in your Bank information, i.e.. bank account number, swift/iban codes.

I expect an email from you immediately making a selection from the two options above. Also call me and inform me so as to hasten up your transfer. Call within 7:30am-9:00pm GMT.Congratulations and have a wonderful week.

With regards,
HON:Billson Moore
Tel:+447014274129
Accredited Fiduciary Agent
Microsoft mail usage Promotions Board.