Canadian Pharmacy Spam KING

The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal your money.

The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.

http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

Jonathan Owens

jowens@unifiedmarkets.com (current)
jowens@unifiedmarket.com (previous)
www.unifiedmarkets.com (current)
www.unifiedmarket.com (previous)
640 Grand Ave.
Carlsbad, North San Diego County
CA 92008-2365
+1 (760) 730-9864

You can find his foot prints by searching the following keywords;

210-888-9089 – Canadian Pharmacy
210-888-9089 – US Drugstore
+ 020 3239 7731 – (new number) Canadian Pharmacy
210 787 1711 – Bogus Marcus Med
845-709-8044 – Bogus university degree
718-524-2096 – Bogus OEM software
888-245-4117 – Bogus collection agency
support@canadianpharmsupport.com
210 East 59st Street New York, NY 10021

The good news is that this scammer has extreme hatered against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency that if you send a lot of spams to him, he will remove you from his spam databases. THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!
You will get far less spams!

jowens@unifiedmarkets.com
owensw@unifiedmarkets.com
dmoonfire@unifiedmarkets.com
uminfo@unifiedmarkets.com
dholden@unifiedmarkets.com

Security Officers / Guards: Confidential

Defrawi does have a history, a felony fraud conviction for a federal jobs scam in the 1990’s where he took advance fees for non-existant jobs.

Job offers as such are nothing more than a marketing ploy or deceptive marketing practices by non other than Mr. Alex Difrawi aka Alec Difrawi aka Ayman A. Difrawy aka Ayman A. El-Difrawi aka Alex Simon dba Three Stars Media dba 3Starsinc dba Three Stars Inc dba Internet Solutions Corporation and his many aliases. Mr. Difrawi goal is to get you to sign up for continuing education. He should say outright what it is he’s peddling.

An Example of What ScamFraudAlert seek from Mr. Difrawi – Good Business Practices

3Stars Inc Leader in Internet Marketing For Online Education Providers

WFTV.COM – CHANNEL 9 Reporting on Alec Difrawi & Three Stars Inc.

Past Business Practices Investigated Below

Take Note of  Names  Changed

Company Name Confidential
Job Category Law Enforcement/Security; Customer Service
Location Denver, CO • Colorado Springs, CO
Position Type Full-Time, Employee
Salary $18 to $22 per hour
Experience 0-1 Years Experience
Desired Education Level High School
Date Posted July 17, 2009

We are looking for Security Guards for our Distribution Warehouses. Our business is growing and your protection is needed!
We have all shifts available with plenty of overtime. Armed and unarmed positions are available; no experience is needed. We will train motivated applicants. Starting pay for Security Guards is $18.00 for unarmed and $22.00 for armed security guards. We offer full benefits including health, dental and vision.401k available after 60days along with paid vacation and personal time off. Tuition assistance is also available for those interested in advancing in their career.
We serve Customers throughout the US and need Security Guards in every market. Please apply below for immediate consideration.

security guard3security guard4

Security Officers / Guards Confidential Ann Arbor, MI

  • Lansing, MI
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Lubbock, TX

  • Mesquite, TX
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Fullerton, CA

  • Salinas, CA
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Antioch, CA

  • Lancaster, CA
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Carrollton, TX

  • Waco, TX
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Irving, TX

  • Pasadena, TX
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Santa Rosa, CA

  • Torrance, CA
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Laredo, TX

  • Mcallen, TX
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Aurora, CO

  • Lakewood, CO
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Seattle, WA

  • Spokane, WA
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Clinton, MI

  • Flint, MI
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Sterling Heights, MI

  • Warren, MI
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Lakeland, FL

  • Miami Gardens, FL
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Fall River, MA

  • Lynn, MA
Jul 17
save –  hide company –  email –  similar jobs
Security Officers / Guards Confidential Pasadena, CA

  • Pomona, CA
Jul 17
save –  hide company –  email –  similar jobs
Security Officer Confidential Charlotte, NC Jul 17
save –  hide company –  email –  similar jobs
Security Officer Confidential Hagerstown, MD Jul 17
save –  hide company –  email –  similar jobs
Security Guard Confidential Jacksonville, FL

  • Miami, FL
Jul 16
save –  hide company –  email –  similar jobs
Security Guard Confidential Baltimore, MD

  • Columbia, MD
Jul 16
save –  hide company –  email –  similar jobs
Security Guard Confidential Irvine, CA

  • Pasadena, CA
Jul 16
save –  hide company –  email –  similar jobs
Security Guard Confidential Inglewood, CA

  • Torrance, CA
Jul 16
save –  hide company –  email –  similar jobs
Security Guard Confidential Hialeah, FL

  • Orlando, FL
Jul 16
save –  hide company –  email –  similar jobs

Western Financial Homes – www.wfh-uk.co.cc


Consumer & Business Alert – Stolen Identity!!!! fraudalert
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

Western Financial Homes

Address lookup

canonical name www.wfh-uk.co.cc.
aliases
addresses 66.40.52.151

Domain Whois record

Queried whois.nic.cc with “dom wfh-uk.co.cc“…

No match for domain "WFH-UK.CO.CC".

>>> Last update of whois database: Wed, 22 Jul 2009 08:00:23 EDT <<<

Network Whois record

Queried whois.arin.net with “66.40.52.151“…

OrgName:    Peer 1 Dedicated Hosting 
OrgID:      P1DH-1
Address:    101 Marietta Street
Address:    Suite 500
City:       Atlanta
StateProv:  GA
PostalCode: 30303
Country:    US

NetRange:   66.40.0.0 - 66.40.255.255 
CIDR:       66.40.0.0/16 
NetName:    MAXIM-4
NetHandle:  NET-66-40-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: PIT.MAXIM.NET
NameServer: PENDULUM.MAXIM.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2000-10-31
Updated:    2007-12-04

OrgTechHandle: DCOPE2-ARIN
OrgTechName:   DC Operations 
OrgTechPhone:  +1-678-365-2835
OrgTechEmail:  dhswip@peer1.com

# ARIN WHOIS database, last updated 2009-07-21 20:00

DNS records

DNS query for 151.52.40.66.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.wfh-uk.co.cc IN A 66.40.52.151 3600s (01:00:00)
wfh-uk.co.cc IN SOA
server: dns1.freehostia.com
email: support.freehostia.com
serial: 1241799876
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
wfh-uk.co.cc IN NS dns2.freehostia.com 3600s (01:00:00)
wfh-uk.co.cc IN NS dns1.freehostia.com 3600s (01:00:00)
wfh-uk.co.cc IN A 66.40.52.151 3600s (01:00:00)
wfh-uk.co.cc IN MX
preference: 10
exchange: mbox.freehostia.com
3600s (01:00:00)

— end —

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
114.92.205.227 China* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com


Canadian Pharmacy Spam – Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
97.80.187.119 United States (Lawrenceville)* Whois Google DNSStuff Urgentmessage.org
207.115.36.141 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lupe Knox Tue Jul 21 21:49:15 2009
Return-Path:
Authentication-Results: mta101.sbc.mail.mud.yahoo.com from=abnet.ca; domainkeys=neutral (no sig); from=abnet.ca; dkim=neutral (no sig)
Received: from 97.80.187.119 (EHLO nlpi127.prodigy.net) (207.115.36.141)
by mta101.sbc.mail.mud.yahoo.com with SMTP; Tue, 21 Jul 2009 21:52:53 -0700
Received: from p63upe2 (static.unknown.charter.com [97.80.187.119] (may be forged))
by nlpi127.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M4qSn7030845;
Tue, 21 Jul 2009 23:52:51 -0500
Message-ID: <000701ca0a87$c3c94250$d828ea62@abnet.ca>
Reply-To: “Lupe Knox”  lupe_knoxic @abnet.ca
From: “Lupe Knox”   lupe_knoxic @abnet.ca
To: ,
Subject: Much bigger, than you used to have it!
Date: Tue, 21 Jul 2009 23:49:15 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.cameegg.com
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.sawplump.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.watchnorth.com
ns1.yardaware.com
ns2.112911.org
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.beautybounce.com
ns2.beforebegin.com
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.coateach.com
ns2.cutfigure.com
ns2.deluxecrop.com
ns2.directlisten.com
ns2.doctorstill.com
ns2.dounder.com
ns2.eitherbounce.com
ns2.famousloyal.com
ns2.flattry.com
ns2.flypair.com
ns2.grewcall.com
ns2.growfour.com
ns2.growten.com
ns2.hadagree.ru
ns2.letterwant.com
ns2.listwere.com
ns2.mainhumble.com
ns2.med22.org
ns2.med95.net
ns2.pridebought.com
ns2.primehurry.com
ns2.re25.org
ns2.regionearly.com
ns2.roomrow.com
ns2.sawplump.com
ns2.seedequate.com
ns2.skinglad.com
ns2.streetgreat.com
ns2.te26.com
ns2.thosekept.com
ns2.towardlegend.in
ns2.tubeold.com
ns2.typetruck.com
ns2.via99.org
ns2.watchnorth.com
ns2.yearbusy.com