Canadian Pharmacy Spam Servers

Sample unlawful domains used as name servers, and the crime sponsring
registrars

  • 68F.RU
  • 68W.RU
  • 6A5.RU
  • 6AQ.RU
  • 6F0.RU
  • 6GY.RU –
  • REGRU-REG-RIPN (Russia)
  1. ADDAPPEAR.COM – BILT (China)
  2. BELLFROM.COM- BIZCN (China)
  3. CRAFTDNS.COM – BILT (China)
  4. DARINGGRAND.COM – BILT (China)
  5. DREVIOHARS.COM – BILT (China)
  6. FROMENDORES.COM – BILT (China)
  7. GRASSFAVOR.COM – BILT (China)
  8. KURTOSISDNS.COM – BILT (China)
  9. MAPPROPER.COM – ALANTRON (Turkey)
  10. MONTHDRY.COM – BIZCN (China)
  11. NERVUREDNS.COM – BILT (China)
  12. RANNEED.COM – BILT (China)
  13. REPLYCLOTHE.COM – BILT (China)
  14. SLICKVICTOR.COM – BILT (China)
  15. STATESDNS.COM – BILT (China)
  16. THOUGHAGO.COM – BIZCN (China)
  17. TIEDRAW.COM – BIZCN (China)
  18. TOOPLANE.COM – BILT (China)
  19. WASHEQUATE.COM – BIZCN (China)

Canadian Pharmacy Spam – rxwindowonline.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

____________________________________________

Order your RxMedications_Online!.. N0_Doctor Needed!
Browse Our Selection Today! -> http://rxwindowonline.com

_____________________________________________

Address lookup

canonical name rxwindowonline.com.
aliases
addresses 60.12.166.138

Domain Whois record

Queried whois.internic.net with “dom rxwindowonline.com”…

   Domain Name: RXWINDOWONLINE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.91UKRAINE.COM
   Name Server: NS2.91UKRAINE.COM
   Name Server: NS3.LIKENS45.COM
   Name Server: NS4.LIKENS45.COM
   Name Server: NS5.ANTRASCRNS.COM
   Name Server: NS6.ANTRASCRNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 19-oct-2009
   Creation Date: 19-oct-2009
   Expiration Date: 19-oct-2010

Last update of whois database: Wed, 28 Oct 2009 04:49:13 UTC <<<

Queried whois.namerich.cn with “rxwindowonline.com”…

 DomainName : rxwindowonline.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.91UKRAINE.COM
Name Server......................NS4.LIKENS45.COM
Name Server......................NS5.ANTRASCRNS.COM
Name Server......................NS1.91UKRAINE.COM
Name Server......................NS6.ANTRASCRNS.COM
Name Server......................NS3.LIKENS45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-10-19
Expiration Date .................2010-10-19
Last Update  Date ...............2009-10-19

Registrant ID ...................V-X-64603-22988
Registrant Name .................SHEN DALIANG
Registrant Organization .........SHENDALIANG
Registrant Address ..............XINHUAZHONGLU51
Registrant City..................JN
Registrant Province/State .......ShanDong
Registrant Country Code .........CN
Registrant Postal Code ..........250061
Registrant Phone Number .........+86.053181416841
Registrant Fax ..................+86.053181416841
Registrant Email ................feihua1234@yeah.net

Administrative ID ...............V-X-64603-22988
Administrative Name .............SHEN DALIANG
Administrative Organization .....SHENDALIANG
Administrative Address ..........XINHUAZHONGLU51
Administrative City..............JN
Administrative Province/State ...ShanDong
Administrative Country Code .....CN
Administrative Postal Code ......250061
Administrative Phone Number .....+86.053181416841
Administrative Fax ..............+86.053181416841
Administrative Email ............feihua1234@yeah.net

Billing ID ......................V-X-64603-22988
Billing Name ....................SHEN DALIANG
Billing Organization ............SHENDALIANG
Billing Address .................XINHUAZHONGLU51
Billing City.....................JN
Billing Province/State ..........ShanDong
Billing Country Code ............CN
Billing Postal Code .............250061
Billing Phone Number ............+86.053181416841
Billing Fax .....................+86.053181416841
Billing Email ...................feihua1234@yeah.net

Technical ID ....................V-X-64603-22988
Technical Name ..................SHEN DALIANG
Technical Organization...........SHENDALIANG
Technical Address ...............XINHUAZHONGLU51
Technical City...................JN
Technical Province/State.........ShanDong
Technical Country Code ..........CN
Technical Postal Code ...........250061
Technical Phone Number ..........+86.053181416841
Technical Fax ...................+86.053181416841
Technical Email .................feihua1234@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.138”…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 138.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxwindowonline.com IN SOA
server: ns.rxwindowonline.com
email: admin.rxwindowonline.com
serial: 2009101901
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
rxwindowonline.com IN A 60.12.166.138 300s (00:05:00)

— end –__________________________________________

#1 fignose.com Wed, 28 Oct 2009 04:37:06 +0000
#2 trainfact.com Wed, 28 Oct 2009 04:35:30 +0000
#3 portekors.net Wed, 28 Oct 2009 03:55:38 +0000
#4 neverwaitrx.com Wed, 28 Oct 2009 03:31:59 +0000
#5 hertomanos.net Wed, 28 Oct 2009 02:20:31 +0000
#6 hadfinal.com Wed, 28 Oct 2009 01:33:45 +0000
#7 sromaldos.net Wed, 28 Oct 2009 01:06:38 +0000
#8 spreadspot.com Wed, 28 Oct 2009 00:44:20 +0000
#9 oceanleft.com Wed, 28 Oct 2009 00:35:13 +0000
#10 placecotton.com Wed, 28 Oct 2009 00:32:01 +0000
#11 meanthow.com Wed, 28 Oct 2009 00:20:01 +0000
#12 foundneed.com Tue, 27 Oct 2009 23:28:34 +0000
#13 elite-blackjack.net Tue, 27 Oct 2009 21:21:10 +0000
#14 froperdos.net Tue, 27 Oct 2009 18:15:40 +0000
#15 pioregomas.net Tue, 27 Oct 2009 13:37:57 +0000
#16 replyelse.com Tue, 27 Oct 2009 13:01:16 +0000
#17 tiredeluxe.com Tue, 27 Oct 2009 12:23:55 +0000
#18 sovergondas.net Tue, 27 Oct 2009 12:08:40 +0000
#19 softseemly.com Tue, 27 Oct 2009 11:14:37 +0000
#20 casinovirtualstars.net Tue, 27 Oct 2009 09:28:55 +0000
#21 starspluscasino.net Tue, 27 Oct 2009 09:28:40 +0000
#22 theywhose.com Tue, 27 Oct 2009 06:30:43 +0000
#23 oreganoces.net Tue, 27 Oct 2009 05:38:17 +0000
#24 regressovs.net Tue, 27 Oct 2009 03:05:00 +0000
#25 feltride.com Tue, 27 Oct 2009 01:57:59 +0000
#26 drentoros.net Tue, 27 Oct 2009 01:17:46 +0000
#27 adrendoras.net Mon, 26 Oct 2009 19:01:37 +0000
#28 bankgamingeuro.net Mon, 26 Oct 2009 19:00:09 +0000
#29 chiefsalt.com Mon, 26 Oct 2009 16:20:05 +0000
#30 drekopinores.net Mon, 26 Oct 2009 14:30:20 +0000
#31 sergones.net Mon, 26 Oct 2009 09:16:50 +0000
#32 eurobankgaming.net Mon, 26 Oct 2009 08:45:35 +0000
#33 vinogregos.net Mon, 26 Oct 2009 08:00:42 +0000
#34 eurodiceline.net Mon, 26 Oct 2009 07:54:48 +0000
#35 andergoles.net Mon, 26 Oct 2009 07:50:13 +0000
#36 dremgovers.net Mon, 26 Oct 2009 05:58:24 +0000
#37 drinovigos.net Mon, 26 Oct 2009 05:46:08 +0000
#38 rxwindowonline.com Mon, 26 Oct 2009 05:13:09 +0000
#39 rathermove.com Mon, 26 Oct 2009 02:28:39 +0000
#40 regionfield.com Mon, 26 Oct 2009 01:35:27 +0000
#41 whorsandes.net Sun, 25 Oct 2009 23:30:59 +0000
#42 qualityhardpills.com Sun, 25 Oct 2009 21:19:34 +0000
#43 sergiohares.net Sun, 25 Oct 2009 21:06:11 +0000
#44 thinlow.com Sun, 25 Oct 2009 18:00:51 +0000
#45 shergovines.net Sun, 25 Oct 2009 17:29:59 +0000
#46 tionemakos.net Sun, 25 Oct 2009 16:47:36 +0000
#47 landallow.com Sun, 25 Oct 2009 16:25:13 +0000
#48 vipoften.com Sun, 25 Oct 2009 13:58:07 +0000
#49 wregionations.net Sun, 25 Oct 2009 11:50:42 +0000
#50 sergacions.net Sun, 25 Oct 2009 09:02:01 +0000
#51 wertosdes.net Sun, 25 Oct 2009 05:53:59 +0000
#52 royallifecasino.net Sun, 25 Oct 2009 04:14:40 +0000
#53 vipeurodice.net Sun, 25 Oct 2009 04:03:00 +0000
#54 bringflip.com Sun, 25 Oct 2009 03:46:48 +0000
#55 yourlowpricerx.com Sun, 25 Oct 2009 03:26:40 +0000
#56 earlyground.com Sun, 25 Oct 2009 03:26:05 +0000
#57 mastergalore.com Sun, 25 Oct 2009 03:13:43 +0000
#58 clotheuntil.com Sun, 25 Oct 2009 03:02:38 +0000
#59 savingswebrx.com Sun, 25 Oct 2009 02:48:09 +0000
#60 sremondos.net Sun, 25 Oct 2009 02:29:58 +0000
#61 finddraw.com Sun, 25 Oct 2009 01:31:05 +0000
#62 beatpose.com Sun, 25 Oct 2009 00:31:56 +0000
#63 fastdeliverpills.com Sun, 25 Oct 2009 00:21:14 +0000
#64 rxthatbeatsallothers.com Sun, 25 Oct 2009 00:17:45 +0000
#65 casinoplusstars.net Sat, 24 Oct 2009 20:59:05 +0000
#66 pionerovers.net Sat, 24 Oct 2009 19:14:03 +0000
#67 pharmsstockmeant.com Sat, 24 Oct 2009 15:55:25 +0000
#68 starscazino.net Sat, 24 Oct 2009 14:33:03 +0000
#69 krenomidas.net Sat, 24 Oct 2009 13:41:22 +0000
#70 maxaggressive.com Sat, 24 Oct 2009 11:16:51 +0000
#71 royalcasinolife.net Sat, 24 Oct 2009 10:57:28 +0000
#72 kingeurodice.net Sat, 24 Oct 2009 10:57:07 +0000
#73 diceeuroking.net Sat, 24 Oct 2009 10:56:57 +0000
#74 diceeurovip.net Sat, 24 Oct 2009 10:56:29 +0000
#75 eurovipdice.net Sat, 24 Oct 2009 10:50:15 +0000
#76 maregondas.net Sat, 24 Oct 2009 07:06:16 +0000
#77 sheerterm.com Sat, 24 Oct 2009 06:07:33 +0000
#78 readstill.com Sat, 24 Oct 2009 06:04:02 +0000
#79 powerhurry.com Sat, 24 Oct 2009 05:17:31 +0000
#80 piogardos.net Sat, 24 Oct 2009 02:51:34 +0000
#81 rxmainsource.com Sat, 24 Oct 2009 02:27:31 +0000
#82 rxremedies4u.com Sat, 24 Oct 2009 02:25:15 +0000
#83 frebondass.net Sat, 24 Oct 2009 01:32:53 +0000
#84 stoneplease.com Sat, 24 Oct 2009 01:15:57 +0000
#85 cionitaros.net Sat, 24 Oct 2009 00:29:43 +0000
#86 listencatch.com Sat, 24 Oct 2009 00:14:57 +0000
#87 fausomares.net Sat, 24 Oct 2009 00:09:43 +0000
#88 shorgiones.net Fri, 23 Oct 2009 21:04:23 +0000
#89 clockpound.com Fri, 23 Oct 2009 20:49:56 +0000
#90 elite2009-jackpots.com Fri, 23 Oct 2009 16:04:57 +0000
#91 requesons.net Fri, 23 Oct 2009 13:43:26 +0000
#92 vicodin4you.com Fri, 23 Oct 2009 13:42:09 +0000
#93 whosegarden.com Fri, 23 Oct 2009 12:51:50 +0000
#94 parttiny.com Fri, 23 Oct 2009 11:18:04 +0000
#95 krabsebons.net Fri, 23 Oct 2009 10:20:26 +0000
#96 eurogaminglife.net Fri, 23 Oct 2009 09:26:17 +0000
#97 slipview.com Fri, 23 Oct 2009 08:10:05 +0000
#98 soviergons.net Fri, 23 Oct 2009 07:45:24 +0000
#99 smilesdesire.com Fri, 23 Oct 2009 07:12:52 +0000
#100 scripts-refilled-herenow.com Fri, 23 Oct 2009 06:42:58 +0000
#101 breakfell.com Fri, 23 Oct 2009 05:04:31 +0000
#102 semashkors.net Fri, 23 Oct 2009 04:58:26 +0000

Immediate opening for General Utility Worker – roulettecareers.com

Job offers as such are nothing more than a marketing ploy or deceptive marketing practices by non other than Mr. Alex Difrawi aka Alec Difrawi aka Ayman A. Difrawy aka Ayman A. El-Difrawi aka Alex Simon dba Three Stars Media dba 3Starsinc dba Three Stars Inc dba Internet Solutions Corporation and his many aliases. Mr. Difrawi goal is to get you to sign up for continuing education. He should say outright what it is he’s peddling.
An Example of What ScamFraudAlert seek from Mr. Difrawi – Good Business Practices
Defrawi does have a history, a felony fraud conviction for a federal jobs scam in the 1990’s where he took advance fees for non-existence jobs.
Records
Three Stars Inc / 3Stars Inc Leader in Internet Marketing For Online Education Providers

Channel9 Reporting three years ago. Notice the website names have changed

 

From: Roulette Careers <careers@roulettecareers.com>
Date: Fri, Oct 23, 2009 at 12:56 PM
Subject: Immediate opening for General Utility Worker
To: mjkelong@gmail.com

Hi Jennifer,

After reviewing your resume, we wanted to let you know about a vacant General Utility Worker position that may interest you. It offers $19.96 per hour plus benefits.

By selecting the link below, you can find out more about the position and apply:

I would like to learn more about the General Utility Worker opening.

Best Regards,

S. Levine
Director of HR

If you cannot access the webpage through the link above, you can copy and paste the link at the bottom of this message into your browser.

http://roulette-careersnow.com/cmanager3.aspx?em=mjkelong@gmail.com&id=adHGNr7_lil51_Other_10192009_FRI&rd=136345&Code=Uu%2Fla7a8sqGLD1V%2F5renAVWt9a2NhEIvLI9zGL9cHXk%3D&RecipientID=26051854&gs=9&ro=30&j=26051854

Take_my_name out of future_employment_considerations.

Career-Network, Inc., P.O. Box 618305, Orlando, FL 32861-8305


roulette careers