ACCOUNTING PAYROLL – International Supply Company

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

Welcome,

If you have access to a computer, and have up to three hours spare time per-week. you can get paid, would you like to work part or full time online, and get paid weekly? If yes,then please read carefully.
__________________________________________________________________________
ABO
__________________________________________________________________________
At International Supply Company, Our Mission is to provide a complete service to printers, publishers, Schools, and Government departments. ISC has established direct channels and distributor channels in Latin America and the Caribbean, exclusively to sell and support supplies and equipment …

__________________________________________________________________________
JOB POSITION
__________________________________________________________________________
We are currently seeking part or full time employees for our ever-growing Accounts Receivable Department. Through extensive demographic research, we have discovered a wealth of untapped human resources that, for one reason or another, need the freedom to work from home. If this sounds like you, please read on, and consider becoming part of our company family.

Note that no form of investment of is needed from you and this job will take only 1-3 hours of your time per week.
__________________________________________________________________________
JOB RESPONSIBILITY
______________________________________________________________________________________________
The position of Accounts Receivable officer entails the following duties: coordinate payments from our clients, receive payments which come in form of certified checks or united states postal money orders, process payments at your local bank, and forward 90% of funds received to the proper branch office, as instructed. The remaining 10% is your wage. Since this position is need-based, you will have plenty of free time while enjoying a good income.

__________________________________________________________________________
REMUNERATION
__________________________________________________________________________
Every assignment in form of payment received from clients, you’re entitled to 10% which excludes the cost of processing western union to any regional office accountant

Also you get a monthly salary of $1500 which comes at the end of every month, plus other incentives and benefits that accrue, which includes tax holidays.

__________________________________________________________________________
INTERESTED APPLICANTS (HOW TO APPLY)
__________________________________________________________________________
Interested applicants should reply with full name, full residential address, phone numbers, and email address, so that one of our Human Resource Managers can contact you through email, with an approval letter if the management decides youre a successful candidate. Please specify the best way to contact you in your reply email.

We appreciate your interest in International Supply Company, Inc
Job Benefits
Health Insurance
Holidays
401K / Retirement Plan
I WILL BE PENSION WHENEVER YOU RETIRE

Advertisements

Rodney Lawrence International – rlawrencehome.org

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

Rodney Lawrence International

From: Ronald Young <Ronald.Young@rlawrencehome.org>
Date: Mon, Jul 27, 2009
Subject: Job opportunity at Rodney Lawrence Foundation

Dear xxxxx,

My name is Ronald Young and I am the HR manager for Rodney Lawrence Foundation.

I have just found your information at one of the careers web site and I think that you would be interested in two job opportunities at Rodney Lawrence Foundation:
CSR (20 hours weekly) and Corporate CSR (30 hours weekly).

Both positions involve a lot of responsibility, attentiveness and independence, but they are well rewarded. Annual incomes of CSR and Corporate CSR are US $32,400 and US $65,600, respectively.

xxxxx, if you are self-reliant enough to work at the convenience of your own home or office, and if you are a quick learner and ready to develop your customer service and management skills, please contact me and I will give you a very detailed account of these positions.

Sincerely,

Senior HR manager,

Ronald Young

Ronald.Young@rlawrencehome.org
Rodney Lawrence Foundation

This message is the property of Rodney Lawrence Foundation. It may be confidential and is intended only for the use of the addressee. If you have received this message in error, please immediately notify the sender and delete this message.

Address lookup

canonical name rlawrencehome.org.
aliases
addresses 221.8.126.20

Domain Whois record

Queried whois.publicinterestregistry.net with “rlawrencehome.org“…

Domain ID:D156636352-LROR
Domain Name:RLAWRENCEHOME.ORG
Created On:13-Jul-2009 04:58:59 UTC
Last Updated On:13-Jul-2009 04:59:26 UTC
Expiration Date:13-Jul-2010 04:58:59 UTC
Sponsoring Registrar:Xin Net Technology Corporation (R118-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:28rjmvmnzl5pd4
Registrant Name:QingFen
Registrant Organization:Qing Fen
Registrant Street1:Xi An City.China
Registrant City:Xi An
Registrant State/Province:Shanxi3
Registrant Postal Code:235467
Registrant Country:CN
Registrant Phone:+86.4951095771
Registrant Phone Ext.:
Registrant FAX:+86.4951095771

Registrant Email:lixing688@gmail.com
Admin ID:28rjmvmnzl5pd4a
Admin Name:QingFen
Admin Organization:QingFen
Admin Street1:Xi An City.China
Admin City:Xi An
Admin State/Province:Shanxi3
Admin Postal Code:235467
Admin Country:CN
Admin Phone:+86.4951095771
Admin Phone Ext.:
Admin FAX:+86.4951095771
Admin FAX Ext.:
Admin Email:lixing688@gmail.com
Tech ID:28rjmvmnzl5pd4a
Tech Name:QingFen
Tech Organization:QingFen
Tech Street1:Xi An City.China
Tech City:Xi An
Tech State/Province:Shanxi3
Tech Postal Code:235467
Tech Country:CN
Tech Phone:+86.4951095771
Tech Phone Ext.:
Tech FAX:+86.4951095771
Tech FAX Ext.:
Tech Email:lixing688@gmail.com
Name Server:NS85.MERSEINEHOST.COM
Name Server:NS103.MERSEINEHOST.COM

Network Whois record

Queried whois.apnic.net with “221.8.126.20“…

inetnum:      221.8.126.16 - 221.8.126.23
netname:      LY-LY-COM
country:      CN
descr:        LIAOYUAN CITY,JILIN PROVINCE,CHINA
admin-c:      JL2441-AP
tech-c:       JL2441-AP
status:       ASSIGNED NON-PORTABLE
changed:      jhli_jh@mail.jl.cn 20071116
mnt-by:       MAINT-CNCGROUP-JL
source:       APNIC

route:        221.8.0.0/15
descr:        CNC Group CHINA169 Jilin Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       li jihong
nic-hdl:      JL2441-AP
e-mail:       jhli_jl@mail.jl.cn
address:      NO.3535,Renmin Street, ChangChun ,
address:      Jilin province , 130021 , P.R. China
phone:        +86-0431-5560792
fax-no:       +86-0431-5560816
country:      CN
changed:      jhli_jl@mail.jl.cn 20060615
mnt-by:       MAINT-CNCGROUP-JL
source:       APNIC

DNS records

DNS query for 20.126.8.221.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rlawrencehome.org IN SOA
server: ns103.merseinehost.com
email: hostmaster.rlawrencehome.org
serial: 1
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
rlawrencehome.org IN A 221.8.126.20 86400s (1.00:00:00)
rlawrencehome.org IN MX
preference: 10
exchange: mail.rlawrencehome.org
86400s (1.00:00:00)
rlawrencehome.org IN NS ns103.merseinehost.com 86400s (1.00:00:00)
rlawrencehome.org IN NS ns85.merseinehost.com 86400s (1.00:00:00)

— end —

Other Domians associated with this SCAM…….

adiazhome.org
ewhitehome.org
ghamiltonhome.org
imeyerhome.org
kpowellhome.org
lchapmanhome.org


More Malware Domains – Malware URLS

18-teenlife.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
anal-city.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
babushka-70.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
budblije.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
bestidniki.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
big-baba.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
bigbraza.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
clubzone.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
dama35.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
dama50.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
ded-i-devka.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
devil-video.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
dolbej.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
femdom-video.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
fisting-club.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
footbaby.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
gaygroup.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
girlsparadise.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Domain Admin / contact@privacyprotect.org 2009-08-10 details
gorlominet.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
goryacho.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue / See registrar info above 2009-08-10 details
group-trah.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
hellflame.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
hentaimonsters.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
hentaimults.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
hochu-tebya.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
istorija-o.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
moscowchiks.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
moscowgays.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
naidisex.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
na-otlichno.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Evgeniy O Konovalenko / james.odira@yahoo.com 2009-08-10 details
nasadi.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
nice-gays.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
nigga-gop-stop.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
noch-vkontakte.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / evgensevin@gmail.com 2009-08-10 details
odnonochniki.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / evgensevin@gmail.com 2009-08-10 details
partyporka.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
porevodoma.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
porno-hub.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
pustgovoryat.com 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Domain Admin / contact@privacyprotect.org 2009-08-10 details
pytkanaulice.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
relax-center.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
relaxtour.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Domain Admin / contact@privacyprotect.org 2009-08-10 details
rus-zabavi.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
siski-super.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
smartbucks.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
smartlove.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Evgenij Potanenko / advantages.gain@gmail.com 2009-08-10 details
smartstream4u.com 89.248.162.194 AS29073 (ECATEL) Directs to Rogue Domain Admin / contact@privacyprotect.org 2009-08-10 details
sweetblonde.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
sweet-emo.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
sweet-girls.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Domain Admin / contact@privacyprotect.org 2009-08-10 details
topcash.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
top-videozx.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
trah-doma.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / gberger555@yahoo.com 2009-08-10 details
trans-bdsm.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
transloves.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
trans-loves.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
transz-love.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
tvoevideo.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Sergey Filatov / advantages.gain@gmail.com 2009-08-10 details
utopisuchku.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
videoboxx.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
video-express.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
videoland.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
videoray.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Igor Vasilenko / james.odira@yahoo.com 2009-08-10 details
videoxsmak.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
videox-vitrina.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / advantages.gain@gmail.com 2009-08-10 details
v-krovatke.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / evgensevin@gmail.com 2009-08-10 details
vzroslye-znakomstva.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private person / ru.dating.sites@gmail.com 2009-08-10 details
xxxnights.ru 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Private Person / james.odira@yahoo.com 2009-08-10 details
yaponamama.ws 91.202.63.96 AS44571 (AKRINO) Directs to Rogue Evgeniy O Konovalenko / james.odira@yahoo.com 2009-08-10 details
nupoprobuyloknia.com.cn 211.95.78.98 AS9800 (UNICOM) Trojan Zbot QingChen / abuse@domainsreg.cn 2009-08-10 details
therenothing.net 66.147.240.152 host352.hostmonster.com AS11798 (BLUEHOST) Trojan Zbot support@hostmonster.com 2009-08-10 details
verivell.com 94.102.63.200 AS29073 (ECATEL) Exploits / Trojan Hau Cheng / haucheng@yahoo.com 2009-08-10 details
mynameisboxxy.com 94.23.207.180 ns303699.ovh.net AS16276 (OVH) Trojan Zbot Direct Privacy ID F6950, Direct Privacy LTD / mynameisboxxy.com@directnicprivacy.com 2009-08-10 details
windows-up2date.cn 66.197.194.133 server.srvlnx.com AS21788 (NOC) Trojan config file Feri Ikoedd / moldavimo@safe-mail.net 2009-08-10 details
viphack.ru 121.12.127.241 AS4134 (China Telecom) Trojan Zbot / 2009-08-10 details
neweca-payments.com 213.155.1.99 AS41665 (HOSTING) Fraud / Scam Chen Poon / chen.poon1732646@yahoo.com 2009-08-10 details
hugegroupfly.cc 195.182.57.27 AS47311 (CERANNICS) Fraud / Scam Chen Poon / chen.poon1732646@yahoo.com 2009-08-10 details
wfs-groupsvc.cn 195.182.57.27 AS47311 (CERANNICS) Fraud / Scam Ferdi Ikdp / realsupporters@yahoo.com 2009-08-10 details
echarts.cn 222.73.219.87 AS4812 (CHINANET-SH) Trojan LucasSteven / steven_lucas_2000@yahoo.com 2009-08-10 details
idkfa.cn 59.125.231.252 59-125-231-252.hinet-ip.hinet.net AS3462 (HINET) Trojan LucasSteven / steven_lucas_2000@yahoo.com 2009-08-10 details
jhopa100.ru 193.200.255.19 s9.x-host.net.ua AS25456 (X-HOST) Trojan LdPinch Private person / fofkmh@mail.ru 2009-08-10 details
onlinepharmacy4you.org 193.111.244.21 ibm.telenet.lv AS24589 (TELENETSIA) Trojan John Smith / 89@bite.to 2009-08-10 details
porno-inter.ru 210.51.10.189 AS9929 (CNCNET) Trojan Adam G Bednyakov / bednyakov@pop3.ru 2009-08-10 details
palmainfo.com 67.15.157.10 serv01.siteground12.com AS21844 (THEPLANET) Trojan Zbot Sergio Palma / sergio@palmainfo.com 2009-08-10 details
151down.3322.org 76.73.49.150 AS30058 (FDCSERVERS) Trojan Bentium Ltd. / ppyy@astpbx.com 2009-08-10 details
best-fotos.com 216.39.57.104 p4p-i.geo.vip.re4.yahoo.com AS14779 (INKTOMI) Trojan Admin PrivateRegContact / contact@myprivateregistration.com 2009-08-10 details
freevideoporno.net 216.39.57.104 p4p-i.geo.vip.re4.yahoo.com AS14779 (INKTOMI) Trojan Admin PrivateRegContact / contact@myprivateregistration.com 2009-08-10 details
photo-hi5.net 216.39.57.104 p4p-i.geo.vip.re4.yahoo.com AS14779 (INKTOMI) Trojan Admin PrivateRegContact / contact@myprivateregistration.com 2009-08-10 details
picture-sex1.com 216.39.57.104 p4p-i.geo.vip.re4.yahoo.com AS14779 (INKTOMI) Trojan Refroso Admin PrivateRegContact / contact@myprivateregistration.com 2009-08-10 details
bozkus.cn 195.95.151.174 AS40965 (EASTNET) Rogue Antivirus downloader / FakePlus dfgsegzhfs@yahoo.com 2009-08-10 details
w22.6600.org 65.183.178.92 gr13-09.grar.com AS7949 (RASR) Trojan Peng Yong / ppyy@staff.cn99.com 2009-08-10 details
dns2.zief.pl 221.5.74.40 AS17816 (CHINA169) Trojan domeny@ConsultingService.pl 2009-08-10 details
irate4.com 69.163.145.119 AS26347 (DREAMHOST) Trojan Cole, James / dynvivid@gmail.com 2009-08-10 details
muratonur.com 80.93.220.2 alto.webabi.com AS9121 (TTNET) Trojan Koobface MuratOnur / fmuratonur@hotmail.com 2009-08-10 details
dzuc.net 82.114.87.50 AS29170 (KUJTESA) Trojan Fabio Tintinaglia / thomaslozzier@yahoo.com 2009-08-10 details
mix.gruenb.com 82.114.87.50 AS29170 (KUJTESA) Trojan TECH PrivateRegContact / contact@myprivateregistration.com 2009-08-10 details
qtas.net 82.114.87.50 AS29170 (KUJTESA) Trojan Chris Camphorst / chriscamphorst@yahoo.com 2009-08-10 details
rsfq.info 82.114.87.50 AS29170 (KUJTESA) Trojan Filan Fisteku / filanfisteku90@gmail.com 2009-08-10 details
t32.marund.net 82.114.87.50 AS29170 (KUJTESA) Trojan YahooDomains TechContact / domain.tech@yahoo-inc.com 2009-08-10 details
23drf.com 221.1.204.243 AS4837 (CNC) Trojan GameThief OnlineGames chengxiaowu / keier@avl.com.cn 2009-08-10 details

50 domain were found for AS41665 (HOSTING)
Domain IP PTR Description Registrant Date Details

beebest.cn
78.109.25.217
plathost.ru Exploits / Trojan
/
2009-04-01 details
bronotak.cn
78.109.25.217
plathost.ru
MichellGregory / Michell.Gregory2009@yahoo.com
2009-05-02 details
qwu11a.biz
78.109.25.217
plathost.ru
google google / google@google.com
2009-05-02 details
corpamata.cn
78.109.25.217
plathost.ru
MichellGregory / Michell.Gregory2009@yahoo.com
2009-05-03 details
hivids.net
213.155.3.154
Redirects to Rogue
Chris Forster / chrisforster80@yahoo.co.uk
2009-05-07 details
miralive.cn
78.109.25.217
plathost.ru Trojan / Zlob
/ Michell.Gregory2009@yahoo.com
2009-05-08 details
r99u.cn
78.109.25.217
plathost.ru Malware URL
/
2009-05-08 details
nevervhudo.ru
78.109.25.217
plathost.ru Malware URL
/
2009-05-08 details
socksps.ru
78.109.25.217
plathost.ru Botnet C&C
/
2009-05-08 details
telemedia.m77s.cn
78.109.25.217
plathost.ru Redirects to Exploits
Michell Gregory / Michell.Gregory2009@yahoo.com
2009-05-15 details
watch-for-free.net
213.155.3.152
ua.reserver.ru Redirects to Rogue
Mark Brandes / neujelivsamomdeli@safe-mail.net
2009-05-19 details
video-trailers.net
213.155.3.152
ua.reserver.ru Redirects to Rogue
Bend Canton / fullhdvid@gmail.com
2009-05-19 details
youtube-top-video.com
213.155.3.152
ua.reserver.ru Redirects to Trojan
Petr Sidorov / storm631@gmail.com
2009-05-19 details
new-sex-video.com
213.155.3.152
ua.reserver.ru Redirects to Rogue
ne3631825269602@absolutee.com
2009-05-19 details
high-quality-videos.net
213.155.3.152
ua.reserver.ru Redirects to Rogue
Bendel Harold / hottnews@gmail.com
2009-05-19 details
sexy-top-news.com
213.155.3.152
ua.reserver.ru Redirects to Rogue
Scott Shonborn / stopnewss@gmail.com
2009-05-19 details
non-stop-news.com
213.155.3.152
ua.reserver.ru Redirects to Rogue
Bendel Harold / hottnews@gmail.com
2009-05-19 details
fresh-video-news.com
213.155.3.152
ua.reserver.ru Redirects to Rogue
Canterbury Dave / sarakoza@gmail.com
2009-05-19 details
mixmediadirect.cn
78.109.29.115
78.109.29.115.in.hosting.ua Malware URLs
Raymond Keaton / Keaton@cybernauttech.com
2009-05-24 details
tubemix.org
78.109.28.41
78.109.28.41.in.hosting.ua Fake Codec Page
Whois Agent / support@ruler-domains.com
2009-05-26 details
downloadstorm.net
78.109.28.41
78.109.28.41.in.hosting.ua Redirects to Trojan
Whois Agent / support@ruler-domains.com
2009-05-26 details
dom11z.cn
78.109.30.200
78.109.30.200.in.hosting.ua Trojan
MichellGregory / Gregory.Michell2009@yahoo.com
2009-05-26 details
forum.d99q.cn
78.109.30.200
78.109.30.200.in.hosting.ua Trojan
MichellGregory / Michell.Gregory2009@yahoo.com
2009-05-26 details
goadult.info
78.109.28.16
serv2.onlinehoster.net Redirects to Rogue
Uchi Lee Samao / tech@goadult.info
2009-05-31 details
seo.hostia.ru
78.109.28.88
hostia.ru Redirects to Rogue Antivirus
Vladlen S Turkevich / admin@hostia.ru
2009-06-04 details
exclusivestarvideo.com
78.109.20.50
reverse-50.reserver.ru Redirects to Trojan
Dmitrenko Igor Andreevich / maxiboxy777@gmail.com
2009-06-05 details
s76z.cn
78.109.25.217
plathost.ru Exploits / Trojan
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-08 details
f97q.cn
78.109.25.217
plathost.ru Exploits / Trojan
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-08 details
e37z.cn
78.109.25.217
plathost.ru Malware URLs
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-08 details
newhotvid.com
78.109.20.50
reverse-50.reserver.ru Redirects to Rogue
Alex Djin / xxxdomen@gmail.com
2009-06-10 details
greenflor.cn
78.109.25.218
plathost.ru Exploits / Trojan
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-20 details
robingood.beeglover.cn
78.109.25.218
plathost.ru Exploits / Trojan
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-24 details
redlinecompany.ravelotti.cn
78.109.25.218
plathost.ru Redirects to Exploits
MichellGregory / Michell.Gregory2009@yahoo.com
2009-06-28 details
music-megaupload.com
213.155.3.242
Directs to Trojan DNSChanger
Yuriy Bilyk / creazy3@gmail.com
2009-07-02 details
sajhfhssbigbonms.e58z.cn
78.109.25.217
plathost.ru Redirects to Exploits
MichellGregory / Michell.Gregory2009@yahoo.com
2009-07-02 details
4sx2.cn
78.109.25.217
plathost.ru Trojan
WilliamCook / support@4sx2.cn
2009-07-07 details
calid.org
213.155.10.181
Redirects to Exploits
Alex Kreys / mrseven0seven@gmail.com
2009-07-14 details
ftpgrbz.cn
78.109.17.251
78.109.17.251.in.hosting.ua Malware URLs
mendeuziker / resioleng@gmail.com
2009-07-19 details
redbool.cn
78.109.25.217
plathost.ru Exploits / Trojan
yancrystal / Tianjin@Tianjin.com
2009-07-21 details
ddosguard.info
213.155.29.101
LuckySploit
tom torry / noneronepone3@yahoo.com
2009-07-25 details
folemio.info
213.155.29.101
LuckySploit
Kiyoyuki Kikukawa / kikukawa2005@gmail.com
2009-07-25 details
mos.biz.st
213.155.5.8
Redirects to Rogue Antivirus
Guilbault Jeremy / registry@nic.st
2009-07-27 details
sinasan.cn
78.109.25.218
plathost.ru Exploits / Trojan
LucasSteven / steven_lucas_2000@yahoo.com
2009-07-29 details
cpcsa.com
213.155.29.8
Fraudulent payment page for Rogue AV / Antivirus 2009 Pro
Victor Wolf / statementhelp@hotmail.com
2009-07-29 details
traff1.com
213.155.3.117
Directs to Rogue
SergeyGolushko / SERGEY_GOLUSHKO@YAHOO.COM
2009-08-03 details
rollstar.m77s.cn
78.109.25.216
plathost.ru Redirects to Exploits
MichellGregory / Michell.Gregory2009@yahoo.com
2009-08-04 details
crazel.info
204.27.57.227
Rogue Antivirus / InternetAntivirusPro
Aaron Birdwell / grattab@gmail.com
2009-08-09 details
rubirol.cn
78.109.25.216
serv.plathost.ru Exploits / Trojan
yancrystal / Tianjin@Tianjin.com
2009-08-09 details
apexsearchgroup.info
213.155.29.101
LuckySploit
Justin Stafford / apexserch@yahoo.com
2009-08-09 details
neweca-payments.com
213.155.1.99
Fraud / Scam
Chen Poon / chen.poon1732646@yahoo.com
2009-08-10 details

Canadian Pharmacy Spam – mosthighlysoughtafter.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://mosthighlysoughtafter.com

Address lookup

canonical name mosthighlysoughtafter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom mosthighlysoughtafter.com“…

   Domain Name: MOSTHIGHLYSOUGHTAFTER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BIGBADDNS.COM
   Name Server: NS2.BIGBADDNS.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.STEADYDNSGOES.COM
   Name Server: NS6.STEADYDNSGOES.COM
   Status: ok
   Updated Date: 07-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Mon, 10 Aug 2009 15:27:46 UTC

Queried whois.namerich.cn with “mosthighlysoughtafter.com“…


 DomainName : mosthighlysoughtafter.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS1.BIGBADDNS.COM
Name Server......................NS6.STEADYDNSGOES.COM
Name Server......................NS2.BIGBADDNS.COM
Name Server......................NS5.STEADYDNSGOES.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-07

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
mosthighlysoughtafter.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns3.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns4.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns2.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns1.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN A 60.12.166.154 86400s (1.00:00:00)

Traceroute

Tracing route to mosthighlysoughtafter.com [60.12.166.154]

hop rtt rtt rtt ip address fully qualified domain name
1 11 3 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.29 et5-2.ibr04.dllstx3.theplanet.com
5 0 0 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 12 1 1 4.69.145.180 ae-83-80.ebr3.dallas1.level3.net
7 39 36 34 4.69.132.77 ae-3.ebr2.losangeles1.level3.net
8 33 33 33 4.69.144.72 ae-2-70.edge2.losangeles1.level3.net
9 209 212 206 4.78.202.18 china-netco.edge2.losangeles1.level3.net
10 209 208 206 219.158.3.185
11 207 208 206 219.158.4.110
12 206 207 206 219.158.12.42
13 224 224 226 221.12.82.106
14 261 291 258 221.12.82.78
15 213 212 214 60.12.166.154

Trace complete

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: TimedOut
HTTP – 80
POP3 – 110 Error: TimedOut
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:24:26 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

Traceroute

Tracing route to rxkingsatyourservice.com [211.95.78.2]

hop rtt rtt rtt ip address fully qualified domain name
1 4 4 3 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 2 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 1 1 7 4.69.145.204 ae-4-90.edge2.dallas3.level3.net
7 1 1 1 4.68.111.122 tiscali-level3-te.paris1.level3.net
8 1 1 1 152.63.96.46 0.ge-1-1-0.xl3.dfw7.alter.net
9 36 36 36 152.63.116.249 0.so-7-0-0.xt1.lax7.alter.net
10 36 36 37 152.63.118.33 gigabitethernet6-0-0.ig2.lax7.alter.net
11 205 205 205 63.65.154.222 chinaunicom-gw.customer.alter.net
12 205 206 206 211.94.39.97
13 206 205 206 211.94.44.14
14 206 206 206 211.95.88.25
15 206 205 206 211.95.74.17
16 206 206 206 211.95.78.2

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Mon, 10 Aug 2009 15:25:16 GMT
Server: Apache/2.2.11 (Fedora)
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=oghjitc99kb4rbu933bi3mhj00; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: dt=2009-08-10+15%3A25%3A16; expires=Mon, 10-Aug-2009 16:25:16 GMT
Connection: close
Content-Type: text/html; charset=UTF-8
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —


Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Security Officers / Guards: Company Confidential – jobsmatchnowemployment.com

Defrawi does have a history, a felony fraud conviction for a federal jobs scam in the 1990’s where he took advance fees for non-existant jobs.

Job offers as such are nothing more than a marketing ploy or deceptive marketing practices by non other than Mr. Alex Difrawi aka Alec Difrawi aka Ayman A. Difrawy aka Ayman A. El-Difrawi aka Alex Simon dba Three Stars Media dba 3Starsinc dba Three Stars Inc dba Internet Solutions Corporation and his many aliases. Mr. Difrawi goal is to get you to sign up for continuing education. He should say outright what it is he’s peddling.

An Example of What ScamFraudAlert seek from Mr. Difrawi – Good Business Practices

3Stars Inc Leader in Internet Marketing For Online Education Providers

WFTV.COM – CHANNEL 9 Reporting on Alec Difrawi & Three Stars Inc.

Channel9 Reporting three years ago. Notice the website names have changed

Company Name Company Confidential
Job Category Law Enforcement/Security; Manufacturing/Operations
Location Valdosta, GA • Atlanta, GA
Position Type Full-Time, Employee
Salary $18 to $22 per hour
Experience 0-1 Years Experience
Desired Education Level High School
Date Posted August 7, 2009

We are looking for Security Guards for our Distribution Warehouses. Our business is growing and your protection is needed!

We have all shifts available with plenty of overtime. Armed and unarmed positions are available; no experience is needed. We will train motivated applicants. Starting pay for Security Guards is $18.00 for unarmed and $22.00 for armed security guards. We offer full benefits including health, dental and vision. 401k available after 60days along with paid vacation and personal time off. Tuition assistance is also available for those interested in advancing in their career.

We serve Customers throughout the US and need Security Guards in every market. Please apply below for immediate consideration.

Security

save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Atlanta, GA

  • Valdosta, GA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Clarksville, TN

  • Knoxville, TN
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Philadelphia, PA

  • Pittsburgh, PA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Corpus Christi, TX

  • Plano, TX
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Cincinnati, OH

  • Dayton, OH
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Memphis, TN

  • Nashville, TN
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Columbus, GA

  • Marietta, GA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Orlando, FL

  • Tallahassee, FL
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Ontario, CA

  • Riverside, CA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Durham, NC

  • Winston-salem, NC
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Arlington, TX

  • El Paso, TX
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential San Bernardino, CA

  • San Diego, CA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Bakersfield, CA

  • Pasadena, CA
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Akron, OH

  • Cleveland, OH
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Green Bay, WI

  • Milwaukee, WI
Aug 07
save –  hide company –  email –  similar jobs
Security Officers / Guards Company Confidential Kenosha, WI

  • Racine, WI
Aug 07
save –  hide company –  email –  similar jobs