Month: October 2012

Craigslist Hurricane Sandy Jobs Postings

3 Comments

scamFRAUDalert feel it imperative since hurricane sandy disaster represent christmas for scammers. Job seekers need to exercise due diligence when applying for most hurricane jobs listed on craigslist.  craigslist-hurricanesandy.com

Related articles

Free $1000 BestBuy Gift Card

2 Comments

TEXT MESSAGING BESTBUY SCAMS
BestBuyContest.com

  1. BestBuyContest.com
  2. BestBuyWin.net
  3. BestBuyWin.mobi
  4. BestBuyPrizes.net
  5. BestBuyContest~Winner
  6. bestbuy-winner.com
  7. BBCashCard.net

Consumers are complaining that they are receiving text messages from
951-662-9734 / 9516629734 instructiong them go to bestbuycontest.com or BestbuyRaffle.com and enter winning code 6207  to claim your FREE $1000 BestBuy gift card within 24hrs

Is bestbuycontest.com credible? NO
Is bestbuycontest.com a scam? YES

The latest scam reads something like this: Your entry last month has WON! Go to BestBuyWin.net or BestBuyWin.mobi and enter your winning code 5555 to claim your free $1,000 Best Buy gift card within 24 hours.

The following A records are set to 111.67.203.41:

  1. bestbuygifts.biz
  2. bestbuyreward.biz
  3. bestbuyreward.net
  4. ipad-winners.net
  5. ipad-winners.us
  6. ipad3betawinner.net
  7. mobilewinnings.biz
  8. prizealert.net
  9. prizealerts.com
  10. prizedispenser.net
  11. prizesupply.net
  12. rewardsource.biz
  13. storerewards.biz
  14. tabletwinners.net
  15. weeklywinners.biz
  16. winningmobile.net

Address lookup
canonical name:  bestbuycontest.com
aliases
addresses 67.222.12.216
Domain Whois record

Queried whois.internic.net with “dom bestbuycontest.com

Domain Name: BESTBUYCONTEST.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.MYGT.ORG
Name Server: NS2.MYGT.ORG
Status: ok
Updated Date: 07-oct-2012
Creation Date: 07-oct-2012
Expiration Date: 07-oct-2013

Last update of whois database: Tue, 09 Oct 2012 21:56:44 UTC <<<
Queried whois.enom.com with “bestbuycontest.com

Domain name: bestbuycontest.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected ()

Fax:
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Administrative Contact:
WhoisGuard
WhoisGuard Protected (3baa19b3881147d2b90f5ee0f4da7963.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Technical Contact:
WhoisGuard
WhoisGuard Protected (3baa19b3881147d2b90f5ee0f4da7963.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Status: Active

Name Servers:
NS1.MYGT.ORG
NS2.MYGT.ORG

Creation date: 07 Oct 2012 08:19:00
Expiration date: 07 Oct 2013 00:19:00

Network Whois record
Queried whois.arin.net with “n ! NET-67-222-8-0-1

NetRange: 67.222.8.0 – 67.222.15.255
CIDR: 67.222.8.0/21
OriginAS: AS558
NetName: PRIVATE-CA-1
NetHandle: NET-67-222-8-0-1
Parent: NET-67-222-0-0-1
NetType: Reallocated
RegDate: 2011-06-03
Updated: 2011-06-03
Ref: http://whois.arin.net/rest/net/NET-67-222-8-0-1

OrgName: PrivateSystems Networks CA
OrgId: PNC-28
Address: Net2EZ c/o PrivateSystems Networks
Address: 600 West 7th Street Ste 550
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
RegDate: 2011-06-03
Updated: 2011-08-23
Ref: http://whois.arin.net/rest/org/PNC-28

OrgTechHandle: NOC2915-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-866-332-9894
OrgTechEmail: noc@privatesystems.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC2915-ARIN

OrgAbuseHandle: PNA44-ARIN
OrgAbuseName: PrivateSystems Networks Abuse
OrgAbusePhone: +1-866-332-9894
OrgAbuseEmail: abuse@privatesystems.net
OrgAbuseRef: http://whois.arin.net/rest/poc/PNA44-ARIN

DNS records
name class type data time to live
http://www.bestbuycontest.com IN CNAME bestbuycontest.com 14400s (04:00:00)
bestbuycontest.com IN TXT v=spf1 +a +mx +ip4:67.222.12.216 ?all 14400s (04:00:00)
bestbuycontest.com IN MX
preference: 0
exchange: bestbuycontest.com
14400s (04:00:00)
bestbuycontest.com IN SOA
server: ns1.mygt.org
email: 951ryan@gmail.com
serial: 2012100703
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400

86400s (1.00:00:00)
bestbuycontest.com IN NS ns1.mygt.org 86400s (1.00:00:00)
bestbuycontest.com IN NS ns2.mygt.org 86400s (1.00:00:00)
bestbuycontest.com IN A 67.222.12.216 14400s (04:00:00)
216.12.222.67.in-addr.arpa IN PTR host.mygt.org 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN SOA
server: ns1.privatesystems.net
email: dns@privatesystems.net
serial: 2012100602
refresh: 10800
retry: 1800
expire: 3600000
minimum ttl: 86400

86400s (1.00:00:00)
12.222.67.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-10-20 00:00:35Z
signature inception: 2012-10-10 00:00:35Z
key tag: 63779
signer’s name: 67.in-addr.arpa
signature:
(1024 bits)

10800s (03:00:00)
12.222.67.in-addr.arpa IN NSEC
next domain name: 120.222.67.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
12.222.67.in-addr.arpa IN NS ns2.privatesystems.net 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN NS ns1.privatesystems.net 86400s (1.00:00:00)

— end —

Address lookup
canonical name bestbuyraffle.com
aliases
addresses 67.222.12.216
Domain Whois record

Queried whois.internic.net with “dom bestbuyraffle.com”…

Domain Name: BESTBUYRAFFLE.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.MYGT.ORG
Name Server: NS2.MYGT.ORG
Status: clientTransferProhibited
Updated Date: 07-oct-2012
Creation Date: 07-oct-2012
Expiration Date: 07-oct-2013

>>> Last update of whois database: Wed, 10 Oct 2012 05:56:26 UTC <<<

Queried whois.enom.com with “bestbuyraffle.com”…

Registration Service Provided By: Namecheap.com
Contact: support@namecheap.com
Visit: http://namecheap.com

Domain name: bestbuyraffle.com

Registrant Contact:
WhoisGuard
WhoisGuard Protected ()

Fax:
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Administrative Contact:
WhoisGuard
WhoisGuard Protected (fcde8b78ab394a528002df37ca14e75f.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Technical Contact:
WhoisGuard
WhoisGuard Protected (fcde8b78ab394a528002df37ca14e75f.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Status: Locked

Name Servers:
ns1.mygt.org
ns2.mygt.org

Creation date: 07 Oct 2012 08:19:00
Expiration date: 07 Oct 2013 00:19:00

Network Whois record
Queried whois.arin.net with “n ! NET-67-222-8-0-1″…

NetRange: 67.222.8.0 – 67.222.15.255
CIDR: 67.222.8.0/21
OriginAS: AS558
NetName: PRIVATE-CA-1
NetHandle: NET-67-222-8-0-1
Parent: NET-67-222-0-0-1
NetType: Reallocated
RegDate: 2011-06-03
Updated: 2011-06-03
Ref: http://whois.arin.net/rest/net/NET-67-222-8-0-1

OrgName: PrivateSystems Networks CA
OrgId: PNC-28
Address: Net2EZ c/o PrivateSystems Networks
Address: 600 West 7th Street Ste 550
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
RegDate: 2011-06-03
Updated: 2011-08-23
Ref: http://whois.arin.net/rest/org/PNC-28

OrgTechHandle: NOC2915-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-866-332-9894
OrgTechEmail: noc@privatesystems.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC2915-ARIN

OrgAbuseHandle: PNA44-ARIN
OrgAbuseName: PrivateSystems Networks Abuse
OrgAbusePhone: +1-866-332-9894
OrgAbuseEmail: abuse@privatesystems.net
OrgAbuseRef: http://whois.arin.net/rest/poc/PNA44-ARIN

DNS records
name class type data time to live
bestbuyraffle.com IN TXT v=spf1 +a +mx +ip4:67.222.12.216 ?all 14400s (04:00:00)
bestbuyraffle.com IN MX
preference: 0
exchange: bestbuyraffle.com
14400s (04:00:00)
bestbuyraffle.com IN SOA
server: ns2.mygt.org
email: 951ryan@gmail.com
serial: 2012100703
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
bestbuyraffle.com IN NS ns2.mygt.org 86400s (1.00:00:00)
bestbuyraffle.com IN NS ns1.mygt.org 86400s (1.00:00:00)
bestbuyraffle.com IN A 67.222.12.216 14400s (04:00:00)
216.12.222.67.in-addr.arpa IN PTR host.mygt.org 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN SOA
server: ns1.privatesystems.net
email: dns@privatesystems.net
serial: 2012100602
refresh: 10800
retry: 1800
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
12.222.67.in-addr.arpa IN NS ns1.privatesystems.net 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN NS ns2.privatesystems.net 86400s (1.00:00:00)

— end —

    1. (612)250-4590 / 612-250-4590
    2. (608)515-2491 / 1-608-515-2491
    3. (714)616-6158 / 714-616-6158
    4. (404)956-5016 / 404-956-5016
    5. (909)973-7076 / 909-973-7076
    6. (812)315-0692 / 812-315-0692
    7. (951)662-9744 / 951-662-9744
    8. (715)304-9180 / 1-715-304-9180
    9. (318)754-1749 / 318-754-1749
    10. (909)837-7761 / 909-837-7761
    11. (318)303-6164 / 318-303-6164
    12. (931)284-3288 / 1-931-284-3288
    13. (951)965-1047 / 951-965-1047
    14. 951-965-3691
    15. 612-919-5844
    16. (360) 631-3388
    17. (866) 849-3243
    18. (612) 486-5919
    19. (713) 574-1101
    20. (800) 466-4427
    21. (949) 286-3311
    22. (866) 873-3821
    23. (214) 969-5489
    24. (949) 286-3311
    25. (856) 627-1792
    26. (951) 965-3623
    27. (206) 397-1902
    28. (214) 969-5489
    29. (866) 873-3821
    30. (949) 286-3311
    31. (714) 616-6154
    32. (626) 213-2508
    33. (250) 260-3907
    34. 305-702-0254
    35. 306-534-6190
    36. 44-7449-373582
    37. 646-568-8461
    38. 04264903182
    39. 97155105853
    40. 360-631-3388
    41. 315-371-1290
    42. 215-383-9672
    43. 712-308-7919
    44. 828-289-8063
    45. 203-617-8913
    46. 203-617-8913
    47. 714-276-1012
    48. 714-276-1012
    49. 1-801-766-5442
    50. 1-877-857-6285
    51. 1-918-760-4050
    52. 407-392-0234
    53. 923-337-4473
    54. 855-342-9737
    55. 202-810-0634
    56. 800-618-2305
    57. 866-953-4018
    58. 213-550-4472
    59. 647-342-6286
    60. 510-410-2733
    61. 312-607-0602
    62. 289-426-5337
    63. 800-374-8814
    64. 793-794-7161
    65. 888-241-6004
    66. 888-895-0245
    67. 561-232-3005
    68. 305-330-2210
    69. 203-767-8352
    70. 518-792-9132
    71. 903-375-3208
    72. (202) 769-7192
    73. (459) 121-8344
    74. (206) 496-0929
    75. (571) 721-1079
    76. (849) 963-4853
    77. (407) 832-2201
    78. (702) 520-2413
    79. (818) 900-0900
    80. (417) 800-2309
    81. 877-601-5871
    82. 877-392-2128
    83. 407-347-4169
    84. (571) 721-1079
    85. (561) 232-3005
    86. (202) 769-7192
    87. (459) 121-8344
    88. (000) 000-0000
    89. (661) 748-0240
    90. (800) 255-7828
    91. (855) 266-1387
    92. (206) 397-1736
    93. (855) 496-7552
    94. 909-973-7076
    95. (909) 973-6491
    96. 909-837-7687
    97. 951-965-3623
    98. (951) 965-3662

The following A records are set to 103.4.224.31:

  1. faecbookl.com
  2. stalkertrak.com

Supply Chain Manager ~ ieshacayqelrahlile@hotmail.com

5 Comments

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.
The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer  these funds either by WESTERN UNION, MONEYGRAM, into your  bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Washingtonpost.com by Brian Kerbs
  4. Interview With A Money Mule

From Iesha Carlile Tue Oct 30 15:54:48 2012
X-Apparently-To:scamFRAUDalert via 98.138.213.185; Tue, 30 Oct 2012 22:54:50 +0000
Return-Path: ieshacayqelrahlile@hotmail.com
X-YahooFilteredBulk: 65.54.190.204
Received-SPF: pass (domain of hotmail.com designates 65.54.190.204 as permitted sender)

X-Originating-IP: [65.54.190.204]
Authentication-Results: mta1022.sbc.mail.ne1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc4-s2.bay0.hotmail.com) (65.54.190.204)
by mta1022.sbc.mail.ne1.yahoo.com with SMTP; Tue, 30 Oct 2012 22:54:50 +0000
Received: from BAY002-W53 ([65.54.190.201]) by bay0-omc4-s2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 30 Oct 2012 15:54:48 -0700
Message-ID: <BAY002-W53197D9D20FD55224FDF9DCD620@phx.gbl>
Return-Path: ieshacayqelrahlile@hotmail.com
Content-Type: multipart/alternative;
boundary=”_fcf6bf8e-0930-4772-995b-e942643f0a2e_”
X-Originating-IP: [46.33.247.113]
From: Iesha Carlile IeshaCayqelrahlile@hotmail.com
To: scamFRAUDalert
Subject: Supply Chain Manager
Date: Tue, 30 Oct 2012 22:54:48 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 30 Oct 2012 22:54:48.0978 (UTC) FILETIME=[9068E720:01CDB6F1]
Content-Length: 4873

Email Header Analysis

IP Address:  46.33.247.113 (ppp-46-33-247-113.wildpark.net)
IP Address Country:  Ukraine 
IP Continent:  Europe
IP Address City Location:  Nikolaev
IP Address Region:  Mykolayivs’ka Oblast’
IP Address Latitude:  46.9659,
IP Address Longtitude:  31.9974
Organization:  WildPark Company

217.77.208.138 resolves to http://www.wildpark.net
The following A records are set to 217.77.208.138:

  • mksat.net
  • mykolayiv.com
  • mykolayiv.net
  • wildpark.net

Greetings!
An excellent opportunity is available for a self-disciplined professional to join a well-established company. This is a career where you can reveal your problem solving skills, coach abilities and training experience.

A world consumer goods company at the moment is looking for a Supply Chain Manager for their clients from the retail sector.

Employer: Procurement and Distribution Company
Employment Form: Full & Part Time
Wage Range: $52,500.00-78,800 plus commensurate with experience
Relocation Essential: No

Responsibilities include:
– Act as first point of contact for main Procurement enquiries.
– Perfect sourcing and procurement policies at the global level; analyze data; estimate expenses.
– Create relationships with business stakeholders and stores across a range of categories.
– Run, handle Purchases for annual agreements across a number of stores and categories.
– Negotiate with first tier stores and analyze the order prices, global benchmarking.
– Resolve legal risks; audit product quality and store performance.

Skills and Abilities:

  • – Supply Management or equivalent work experience is a plus but not necessary.
  • – Must have an understanding of Phone Ordering methods, Company Cost Lists, Invoicing.
  • – Strong multitasking skills allowing you to develop effective working relationships with vendors.
  • – Must to be organized and dependable team player with excellent math and communication skills.
  • – Ability to work in fast moving environment; with limited supervision and drive initiatives.
  • – Basic knowledge of Microsoft Office Tools Excel, Word and Outlook.
  • – Must be a Legal U.S. Resident; must be aged 21 plus; a Valid Driver’s license is necessary.

To get more, please email back to present email address with or without your resume and salary requirements.
Please do not contact if you are not a USA Lawful Permanent Resident.

Related articles

Ripoffreport.gov

1 Comment

June 25, 2012, 12:19 p.m. ET
By MARY KISSEL ~ Wall Street Journal

The Consumer Financial Protection Bureau announced a “major step forward” last week in its “work to protect customers.” What is this cutting-edge initiative? The country’s most powerful and unaccountable regulatory agency has decided to release consumer credit-card complaints on the Internet, creating reputational and litigation risk for companies it regulates—with no verifiable evidence of wrongdoing. What a winning idea . . . for lawyers.

Consumer bureau chief Richard Cordray described the beta release of the database thus on a conference call with reporters: “We believe the disclosure of this data not only serves the public interest, but promotes the advancement of the free market system.” And: “Anyone with access to the Web will be able to review and analyze the information and draw their own conclusions.”

Well, that’s one interpretation. In June, the consumer bureau itself admitted that the “complaint process does not provide for across the board verification of claims made in complaints,” and “does not validate the factual allegations of complaints.” But rest easy: the bureau maintains “significant controls to authenticate complaints.” Check out the website at http://www.consumerfinance.gov/complaintdatabase/ , and the accompanying press release, which talks about the “consumer response intake specialists” who review each complaint “for completeness, jurisdiction, and non-duplication.” As if the credit-card companies don’t have those teams?

Read More….

ExpoMeds.com

Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.

Before making a purchase that can affect your health, we strongly recommend that you consult your physician & DO NOT self-medicate.

Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Sites on IP 94.75.207.8
Displaying items 1 to 86, out of a total of 86

  1. http://100generic.com/
  2. http://247pill.com/
  3. http://abcpharmacie.com/
  4. http://bestdrugs24.com/
  5. http://buyrx365.com/
  6. http://canadian-ccm.net/
  7. http://canadian-mc.net/
  8. http://canadian-medicines-ltd.net/
  9. http://canadian-medinc.net/
  10. http://canadian-phmc.net/
  11. http://dnsharmo.com/
  12. http://dnslizar.com/
  13. http://dnsmiddl.com/
  14. http://dnswren.com/
  15. http://erobotcheckout.com/
  16. http://expomeds.com/
  17. http://freesamples-pharmacy.net/
  18. http://generic007.com/
  19. http://generics-pills.com/
  20. http://ialdoctor.com/
  21. http://iredoctor.com/
  22. http://medic365-rx.com/
  23. http://medic365rx.com/
  24. http://medicannl.com/
  25. http://medicansl.com/
  26. http://medicdigg.com/
  27. http://medicsv.com/
  28. http://medicsz.com/
  29. http://medicwhor.com/
  30. http://montreal-healthcare.com/
  31. http://onlinedstore.com/
  32. http://onlineformsign.com/
  33. http://pharmacie-ed.com/
  34. http://pharmacy-hq.com/
  35. http://pills-canadian.com/
  36. http://privatedataform.com/
  37. http://rx-online24x7.com/
  38. http://rx365-buy.com/
  39. http://securedrugsmarket.com/
  40. http://signformdata.com/
  41. http://www.100generic.com/
  42. http://www.247pill.com/
  43. http://www.abcpharmacie.com/
  44. http://www.accessrx.co/
  45. http://www.bestdrugs24.com/
  46. http://www.buyrx365.com/
  47. http://www.canadian-ccm.net/
  48. http://www.canadian-mc.net/
  49. http://www.canadian-medicines-ltd.net/
  50. http://www.canadian-phmc.net/
  51. http://www.canadianonlinepmc.net/
  52. http://www.dnshallw.com/
  53. http://www.dnsharmo.com/
  54. http://www.dnsnoodle.com/
  55. http://www.dnswren.com/
  56. http://www.electrohosts.com/
  57. http://www.erobotcheckout.com/
  58. http://www.expomeds.com/
  59. http://www.freesamples-pharmacy.net/
  60. http://www.generic007.com/
  61. http://www.generics-pills.com/
  62. http://www.ialdoctor.com/
  63. http://www.ikedoctor.com/
  64. http://www.iredoctor.com/
  65. http://www.ishdoctor.com/
  66. http://www.medbox24.com/
  67. http://www.medic365-rx.com/
  68. http://www.medic365rx.com/
  69. http://www.medicannl.com/
  70. http://www.medicansl.com/
  71. http://www.medicdigg.com/
  72. http://www.medicgrou.com/
  73. http://www.medicinerxpills.com/
  74. http://www.medicinpills.com/
  75. http://www.medicmill.com/
  76. http://www.medicsq.com/
  77. http://www.medicsv.com/
  78. http://www.medicsw.com/
  79. http://www.montreal-healthcare.com/
  80. http://www.onlinedstore.com/
  81. http://www.pharmacy-hq.com/
  82. http://www.pills-canadian.com/
  83. http://www.rchdoctor.com/
  84. http://www.rx365-buy.com/
  85. http://www.securedrugsmarket.com/
  86. http://www.signformdata.com/

Address lookup
canonical name expomeds.com
aliases
addresses: 94.75.207.8
Domain Whois record

Queried whois.internic.net with “dom expomeds.com”…

Domain Name: EXPOMEDS.COM
Registrar: WEB WERKS INDIA PVT. LTD.
Whois Server: whois.dfordomains.com
Referral URL: http://www.dfordomains.com
Name Server: NS1.DNSWREN.COM
Name Server: NS2.DNSPAKIS.SU
Status: ok
Updated Date: 13-aug-2012
Creation Date: 13-aug-2012
Expiration Date: 13-aug-2013

Last update of whois database: Wed, 31 Oct 2012 15:36:04 UTC
Queried whois.dfordomains.com with “expomeds.com”…

Registration Service Provided By: Alekseyka
Contact: +7.9261346569
Website: http://www.dfordomains.com/

Domain Name : EXPOMEDS.COM

Registrant:
Alekseyka
Nikolay Kiryuhin me@alekseyka.ru
Veteranov st, 49/16
St.Petersburg
St.Petersburg region, 147203
RU
Tel. +7.9261346569 Fax. +7.9261346569

Creation Date : 8/13/2012 9:11:52 AM
Expiration Date : 8/13/2013 9:11:52 AM

Domain servers in listed order:
ns1.dnswren.com
ns2.dnspakis.su

Administrator Contact :
Alekseyka
Nikolay Kiryuhin me@alekseyka.ru
Veteranov st, 49/16
St.Petersburg
St.Petersburg region, 147203
RU
Tel. +7.9261346569 Fax. +7.9261346569

Technical Contact :
Alekseyka
Nikolay Kiryuhin me@alekseyka.ru
Veteranov st, 49/16
St.Petersburg
St.Petersburg region, 147203
RU
Tel. +7.9261346569 Fax. +7.9261346569

Billing Contact :
Alekseyka
Nikolay Kiryuhin me@alekseyka.ru
Veteranov st, 49/16
St.Petersburg
St.Petersburg region, 147203
RU
Tel. +7.9261346569 Fax. +7.9261346569

Status: ok

Queried whois.ripe.net with “-B 94.75.207.8
Information related to ‘94.75.207.0 – 94.75.207.255’

inetnum: 94.75.207.0 – 94.75.207.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: assignment LEASEWEB 20080723
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: LEASEWEB-MNT
changed: ripe@leaseweb.com 20080725
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘94.75.192.0/18AS16265’

route: 94.75.192.0/18
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20080725
source: RIPE

% This query was served by the RIPE Database Query Service version 1.35 (WHOIS3)
DNS records

name class type data time to live
expomeds.com IN A 94.75.207.8 600s (00:10:00)
expomeds.com IN NS ns1.dnswren.com 172800s (2.00:00:00)
expomeds.com IN NS ns2.dnspakis.su 172800s (2.00:00:00)
8.207.75.94.in-addr.arpa IN PTR c5.eurobyte.ru 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.nl
serial: 2012102901
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
— end —

onlinepstore.com

2 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.

Before making a purchase that can affect your health, we strongly recommend that you consult your physician & DO NOT self-medicate.

Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

canonical name onlinepstore.com.
aliases
addresses 94.75.207.8
Domain Whois record

Queried whois.internic.net with “dom onlinepstore.com”…

Domain Name: ONLINEPSTORE.COM
Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.DNSWREN.COM
Name Server: NS2.DNSPAKIS.SU
Status: clientTransferProhibited
Updated Date: 05-oct-2012
Creation Date: 05-oct-2012
Expiration Date: 05-oct-2013

>>> Last update of whois database: Wed, 31 Oct 2012 15:01:50 UTC <<<
Queried whois.publicdomainregistry.com with “onlinepstore.com”…

Domain Name: ONLINEPSTORE.COM

Registrant:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Creation Date: 05-Oct-2012
Expiration Date: 05-Oct-2013

Domain servers in listed order:
ns1.dnswren.com
ns2.dnspakis.su

Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Status:LOCKED
Note: This Domain Name is currently Locked. In this status the domain
name cannot be transferred, hijacked, or modified. The Owner of this
domain name can easily change this status from their control panel.
This feature is provided as a security measure against fraudulent domain name hijacking.

PRIVACYPROTECT.ORG is providing privacy protection services to this domain name to
protect the owner from spam and phishing attacks. PrivacyProtect.org is not
responsible for any of the activities associated with this domain name. If you wish
to report any abuse concerning the usage of this domain name, you may do so at
http://privacyprotect.org/contact. We have a stringent abuse policy and any
complaint will be actioned within a short period of time.
Network Whois record

Queried whois.ripe.net with “-B 94.75.207.8″…

% Information related to ‘94.75.207.0 – 94.75.207.255’

inetnum: 94.75.207.0 – 94.75.207.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: assignment LEASEWEB 20080723
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: LEASEWEB-MNT
changed: ripe@leaseweb.com 20080725
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘94.75.192.0/18AS16265’

route: 94.75.192.0/18
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20080725
source: RIPE

% This query was served by the RIPE Database Query Service version 1.35 (WHOIS3)
DNS records

name class type data time to live
onlinepstore.com IN A 94.75.207.8 600s (00:10:00)
onlinepstore.com IN NS ns2.dnspakis.su 172800s (2.00:00:00)
onlinepstore.com IN NS ns1.dnswren.com 172800s (2.00:00:00)
8.207.75.94.in-addr.arpa IN PTR c5.eurobyte.ru 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.nl
serial: 2012102901
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
207.75.94.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)
— end —

94.75.207.8 resolves to c5.eurobyte.ru.
The following A records are set to 94.75.207.8:

  1. 100generic.com
  2. 247pill.com
  3. buy-rx24x7.com
  4. buy-rx365.com
  5. buyrx365.com
  6. cad-secure-health.net
  7. canadian-drugs-market.com
  8. canadian-medicines-ltd.net
  9. canadian-pharmacy-pma.net
  10. canadian-pharmacy-pmc.net
  11. canadian-phmc.net
  12. canadianmeds.ca
  13. canadianonlinepmc.net
  14. canadianpharmacy-itd.net
  15. dnshallw.com
  16. dnsharmo.com
  17. dnslizar.com
  18. dnsmiddl.com
  19. dnsnoodle.com
  20. dnswren.com
  21. dnsxprcy.com
  22. doctor-sell-24×7.com
  23. doctor-sell-365.com
  24. doctor-sell-online.com
  25. electrohosts.com
  26. erobotcheckout.com
  27. expomeds.com
  28. express-pharm.com
  29. expresspharm.net
  30. firstrxpharmacy.com
  31. firxtrxpharmacy.com
  32. formsdataprivate.com
  33. freesamples-pharmacy.net
  34. generics-pills.com
  35. host4al.com
  36. hostgweb.com
  37. hostqdf.com
  38. hostsmx.com
  39. hostvipc.com
  40. ialdoctor.com
  41. ikedoctor.com
  42. iredoctor.com
  43. ishdoctor.com
  44. leadses.com
  45. medic365-rx.com
  46. medic365rx.com
  47. medicannl.com
  48. medicansl.com
  49. medicdigg.com
  50. mediceobl.com
  51. medicgrou.com
  52. medicineok.com
  53. medicinpills.com
  54. medicmill.com
  55. medicsv.com
  56. medicthis.com
  57. medicwhor.com
  58. montreal-healthcare.com
  59. ns1.annerdns.com
  60. ns1.dnshallw.com
  61. ns1.dnsharmo.com
  62. ns1.dnslizar.com
  63. ns1.dnsmiddl.com
  64. ns1.dnsnoodle.com
  65. ns1.dnswren.com
  66. ns1.dnsxprcy.com
  67. ns1.electrohosts.com
  68. ns1.host4al.com
  69. ns1.hostgweb.com
  70. ns1.hostqdf.com
  71. ns1.hostsmx.com
  72. ns1.hostvipc.com
  73. ns1.imatedns.com
  74. ns1.qhostersw.com
  75. ns2.webhostdat.com
  76. onlinedstore.com
  77. onlineformsign.com
  78. onlinepstore.com
  79. oondoctor.com
  80. overnight4us.com
  81. pharm-express.com
  82. pharmacy-hq.com
  83. prima-drugstore.com
  84. prima-pharmacy.com
  85. qhostersw.com
  86. rchdoctor.com
  87. rx-medic24x7.com
  88. rx-medic365.com
  89. rx-online24x7.com
  90. rx-online365.com
  91. rx-seller-24×7.com
  92. rx-seller-365.com
  93. rx-seller-online.com
  94. rx-seller24x7.com
  95. rx-seller365.com
  96. rx-shop24x7.com
  97. rx-shop365.com
  98. rx365-buy.com
  99. rxbuy365.com
  100. rxpro-24×7.com
  101. rxpro-365.com
  102. rxpro-online.com
  103. securedrugsmarket.com
  104. tahdoctor.com
  105. therepills.com
  106. viagraalternative.org
Related articles

art-agentlimited.com

5 Comments

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.
The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer  these funds either by WESTERN UNION, MONEYGRAM, or a DOMESTIC or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Washingtonpost.com by Brian Kerbs
  4. Interview With A Money Mule

More of these Money Mule Domains

  1. info@lawingcompany.com
  2. mornwards-ltd.com
  3. uk-art-formula.com
  4. duoartinc.com
  5. groomexinc.com
  6. outsourceduk.com
  7. art-agentlimited.com
  8. uk-artact-ltd.com
  9. todex-intech.com
  10. limitless-artltd.com
  11. group-guru.net
  12. fine-artgroup.com
  13. fabiaart-usa.com
  14. fabia-art.net
  15. evolution-uk-ltd.com
  16. flashartllc.net
  17. refinement-antique.com
  18. intechtodex-group.com
  19. guru-group.net
  20. scar-beiinc.com
  21. contemp-usainc.com
  22. mornwards-ltd.com
  23. uk-art-formula.com
  24. duoartinc.com
  25. artactive-uk.net
  26. jobbslists.com
  27. jobbsearcher.com
  28. gbjobb.com
  29. union-trans.com
  30. greecejobb.com
  31. americafindjob.com
  32. arbetase.com
  33. career-depart.com
  34. careerin-finance.com
  35. americafindjob.com
  36. arbetase.com
  37. career-depart.com
  38. careerin-finance.com
  39. espanajob.com
  40. eurojobbnet.com
  41. eurojobcouk.com
  42. eurojobscouk.com
  43. europ-consult.com
  44. jobbankinusa.com
  45. readycarts.com
  46. top10jobbs.com
  47. ukitcareer.com
  48. usaitcareers.com
  49. espanajob.com
  50. eurojobbnet.com
  51. eurojobcouk.com
  52. eurojobscouk.com
  53. europ-consult.com
  54. jobbankinusa.com
  55. readycarts.com
  56. top10jobbs.com
  57. ukitcareer.com
  58. usaitcareers.com
  59. 4STAR-SOLUTIONS.CC – Email: urge@bz3.ru
  60. ACOON-GROUPLLC.CC – Email: bombay@yourisp.ru
  61. ACOONGROUP-LLC.CO – Email: jx@ppmail.ru
  62. AIMIC-GROUPLLC.CC – 98.141.220.118 – Email: aryan@ppmail.ru
  63. AMINA-GROUPCO.CO – Email: beige@ca4.ru
  64. AMINA-GROUPINC.CC – Email: zowie@yourisp.ru
  65. AMINAORG.CC – Email: range@ppmail.ru
  66. ARPHIS-GOLDGROUP.CC – Email: rook@ca4.ru
  67. ARPHIS-GOLDGROUP.CC – Email: rook@ca4.ru
  68. ARPHISGOLDGROUP-INC.CO – Email: ira@bz3.ru
  69. AUS-FINANCE.CC – Email: ours@ca4.ru
  70. BREDGAR-GROUPLLC.CC – Email: zoe@ca4.ru
  71. BREDGARGROUP-LLC.CO – Email: judo@free-id.ru
  72. CESIS-GROUPLLC.CC – Email: el@cheapbox.ru
  73. CESISGROUP-LLC.CC – Email: flip@free-id.ru
  74. CESIS-GROUPLLC.CO – Email: our@ca4.ru
  75. COCOONGROUP-LLC.HK – Email: most@cheapbox.ru
  76. CORES-GROUP.CC – Email: jaunt@cheapbox.ru
  77. CORESGROUP-INC.CO – Email: yule@cheapbox.ru
  78. CORES-GROUPLTD.CO – Email: liszt@bz3.ru
  79. CRAFT-GROUPNET.CC – Email: room@yourisp.ru
  80. DILIGENCE-GROUP.CO – Email: twig@ppmail.ru
  81. DILIGENCE-GROUPINC.CC – Email: till@cheapbox.ru
  82. DUNCROFT-GROUP-INC.CC – Email: swiss@ca4.ru
  83. DUNCROFTGROUP-INC.CO – Email: shoot@ppmail.ru
  84. ELSDEN-GROUPINC.HK – Email: lost@ppmail.ru
  85. FARLINE-FIN.CO – Email: pecks@free-id.ru
  86. FARLINE-FININC.CC – Email: cynic@free-id.ru
  87. FILEGROUP-LLC.CO – Email: knelt@ca4.ru
  88. FINTEC-LTD.CC – Email: w@yourisp.ru
  89. FINTEC-UK.CO – Email: sons@bz3.ru
  90. ACWOODE-GROUP.COM – 184.168.64.173 – Email: admin@acwoode-group.com
  91. ACWOODE-GROUP.NET – 184.168.64.173 – Email: admin@acwoode-group.net
  92. ART-GROUPINTEGRETED.COM – 78.46.105.205 – Email: admin@art-groupintegreted.com
  93. ARTINTEGRATED-GROUP.NET – 78.46.105.205 – Email: crony@cutemail.org
  94. COMPLETE-ART-GROUP-LTD.COM – 193.105.134.233 – Email: saps@cutemail.org
  95. COMPLETE-ART-UK.NET – 193.105.134.232 – Email: admin@complete-art-uk.net
  96. CONDORLLC-UK.COM – 193.105.134.231 – Email: plods@fxmail.net
  97. CONDOR-LLC-UK.NET – 193.105.134.233 – Email: admin@condor-llc-uk.net
  98. CONTEMP-USAINC.COM – 184.168.64.173 – Email: admin@contemp-usainc.com
  99. CONTEMP-USGROUP.COM – 184.168.64.173 – Email: admin@contemp-usgroup.com
  100. DE-KADEGROUP.CC – 193.105.134.230 – Email: cents@mailae.com
  101. DERWOODE-GROUP.CC – 98.141.220.115 – Email: web@derwoode-group.cc
  102. ELENTY-CO.NET – 184.168.64.173 – Email: abcs@mailti.com
  103. ELENTY-LLC.COM – 184.168.64.173 – Email: admin@elenty-llc.com
  104. GAPSONART.NET – 184.168.64.173 – Email: admin@gapsonart.net
  105. GLACIS-GROUPUK.NET – 78.46.105.205 – Email: admin@glacis-groupuk.net
  106. GURU-GROUP.CC – 184.168.64.173 – Email: admin@guru-group.cc
  107. GURU-GROUP.NET – 184.168.64.173 – Email: jj@cutemail.org
  108. INTECHTODEX-GROUP.COM – 184.168.64.173 – Email: uq@mail13.com
  109. INTEGRATED-EUROPE-IT.NET – 78.46.105.205 – Email: admin@integrated-europe-it.net
  110. ITAGROUP-USA.NET – 98.141.220.117 – Email: admin@itagroup-usa.net
  111. IT-ANALISYS.COM – 98.141.220.115 – Email: yea@mailae.com
  112. ITANALYSISGROUP.NET – 98.141.220.116 – Email: admin@itanalysisgroup.net
  113. KADE-GROUPDE.NET – 78.46.105.205 – Email: zigzag@fxmail.net
  114. MASTERARTUSA.COM – 98.141.220.114 – Email: day@mailae.com
  115. NARTEN-ART.COM – 209.190.4.91 – Email: glamor@fxmail.net
  116. NARTENART.NET – 209.190.4.91 – Email: admin@nartenart.net
  117. quad-groupuk.cc – 78.46.105.205 – Email: prissy@mailae.com
  118. REFINEMENT-ANTIQUE.COM – 184.168.64.173 – Email: xe@fxmail.net
  119. SCAR-BEIINC.COM – 184.168.64.173 – Email: admin@scar-beiinc.com
  120. SKYLINE-ANTIQUE.COM – 209.190.4.91 – Email: blurs@mailae.com
  121. SKYLINE-LTD.NET – 209.190.4.91 – Email: admin@skyline-ltd.net
  122. SMARTLLC-UK.COM – 193.105.134.234 – Email: admin@smartllc-uk.com
  123. SMART-LLC-UK.NET – 193.105.134.233 – Email: pol@mailae.com
  124. SPECIAL-ARTUK.COM – 193.105.134.232 – Email: admin@special-artuk.com
  125. SUBLIMELTD.COM – 98.141.220.118 – Email: admin@sublimeltd.com
  126. TODEX-GROUP.NET – 184.168.64.173 – Email: admin@todex-group.net
  127. ATLANTALTD-UK.CC – 193.105.134.233
  128. ATLANTA-LTD-UK.NET – 78.46.105.205 – Email: admin@atlanta-ltd-uk.net
  129. 3ATLANTA-UK.COM – 193.105.134.233
  130. BLITZNET-GROUPINC.CC – 78.46.105.205 – Email: admin@derwart-group.at
  131. 5DALI-STYLE.COM – 98.141.220.117
  132. DALISTYLE-GROUP.CC – 98.141.220.118 – Email: tolls@mailti.com
  133. DERWOODE-GROUP.COM – 98.141.220.117
  134. DERWOODE-GROUP.NET – 98.141.220.117
  135. GLACIS-GROUPLLC.COM – 193.105.134.232
  136. 1GLACISGROUP-LLC.NET – 193.105.134.233
  137. IT-AMIRA.NET – 86.55.210.3 – Email: support@it-amira.net
  138. ITAMIRA-DE.COM – 86.55.210.6 – Email: admin@itamira-de.com
  139. ITSERV-DE.CO – 78.46.105.205 – Email: admin@itserv-de.co
  140. IT-SERVICELTD.BE – 78.46.105.205
  141. KADE-GROUP.COM – 86.55.210.4 – Email: admin@kade-group.com
  142. MASTERART-GROUP.COM – 98.141.220.116 – Email: east@mail13.com
  143. MENDRYLTD.COM – 98.141.220.117 – Email: admin@mendryltd.com
  144. MENZEL-GROUP.TV – 98.141.220.118 – Email: admin@devotion-company.com
  145. MITISSANSERVICE-GROUP-LTD.CC – 98.141.220.117 – Email: berra@cutemail.org
  146. MITISSANSERVICEGROUP-LTD.COM – 98.141.220.117 – Email: alibi@mailae.com
  147. oregonltd-uk.cc – 86.55.210.5 – Email: cause@ca4.ru
  148. PARLEN-GROUPLLC.COM – 98.141.220.118 – Email: admin@parlen-groupllc.com
  149. PARLENGROUPLLC.NET – 98.141.220.114
  150. PARLEN-GROUP-USA.COM – 98.141.220.118
  151. quad-groupuk.cc – 86.55.210.6 – Email: prissy@mailae.com
  152. QUAD-GROUPUK.CC – 86.55.210.6 – Email: prissy@mailae.com
  153. QUAD-IT-GROUP.COM – 193.105.134.232 – Email: admin@quad-it-group.com
  154. QUINTAGROUP.CC – 98.141.220.117 – Email: cola@mailae.com
  155. QUINTA-GROUPUS.COM – 98.141.220.118 – Email: admin@quinta-groupus.com
  156. QUINTA-LLC.NET – 98.141.220.118 – Email: admin@quinta-llc.net
  157. REXTECHINNOVATION.COM – 98.141.220.118 – Email: admin@rextechinnovation.com
  158. REXTECHLTD.CC – 98.141.220.115 – Email: blurt@fxmail.net
  159. REXTECHLTD-US.COM – 98.141.220.118 – Email: admin@rextechltd-us.com
  160. SPECIAL-ART-LTD.COM – 193.105.134.233 – Email: admin@special-art-ltd.com
  161. SPECIAL-ART-UK.CC – 193.105.134.234
  162. SUBLIME-LTD.NET – 98.141.220.118 – Email: admin@sublime-ltd.net
  163. TARGETMARKETGROUP-LLC.CC – 98.141.220.117 – Email: admin@targetmarketgroup-llc.cc
  164. TAZPROGLTD-US.COM – 98.141.220.117 – Email: admin@tazprogltd-us.co
  165. VNSPROJECT-DE.CC – 78.46.105.205 – Email: admin@vnsproject-de.cc
  166. VORTEXLLC-UK.COM – 193.105.134.232 – Email: admin@vortexllc-uk.com
  167. VORTEX-LLC-UK.NET – 193.105.134.230 – Email: admin@vortex-llc-uk.net
  168. allston-groupsec.cc
  169. atca-inc.com
  170. atcanetworks.net
  171. BANDSGROUP-INC.NET
  172. BANDSGROUPNET.CC
  173. BANDS-GROUPSVC.COM
  174. BANDS-INC.COM
  175. CNLGROUP-INC.CC
  176. CNLGROUPNET.NET
  177. CNL-GROUPSVC.COM
  178. CNL-INC.COM
  179. evolving-inc.com
  180. evolvingsysinc.net
  181. galleogroupnet.net
  182. galleo-inc.com
  183. GIANT-GROUPCO.NET
  184. GIANTGROUPINC.COM
  185. GIANT-GROUPINC.COM
  186. GIANT-GROUPNET.CC
  187. HOSTGROUPINC.COM
  188. HOSTGROUP-INC.COM
  189. HOSTGROUPNET.CC
  190. HOST-GROUPSVC.NET
  191. ICT-GROUPCO.COM
  192. ICTGROUPINC.COM
  193. ICTGROUPNET.CC
  194. ICT-GROUPSVC.NET
  195. IMPERIALGROUPCO.COM
  196. IMPERIAL-GROUPINC.COM
  197. IMPERIAL-GROUPSVC.NET
  198. INFOTECH-GROUPCO.NET
  199. INFOTECH-GROUPINC.COM
  200. infotechgroup-inc.com
  201. jvc-inc.com
  202. magnet-groupinc.cc
  203. netmarket-inc.com
  204. netmarkettech.net
  205. NOVARIS-GROUPLLC.TW
  206. NOVARISGROUPMAIN.TW
  207. NOVARIS-GROUPORG.CC
  208. PERSEUS-GROUPFINE.TW
  209. PERSEUS-GROUPINC.TW
  210. PERSEUSGROUPLLC.CC
  211. USIGROUPINC.COM
  212. USIGROUP-INC.COM
  213. USI-GROUPINC.NET
  214. USIGROUPNET.CC
  215. VITAL-GROUPCO.CC
  216. VITAL-GROUPCO.TW
  217. VITAL-GROUPINC.TW
  218. developgroupinc.net – 69.50.199.209 – Email: slows@5mx.ru
  219. develop-inc.com – 69.50.199.209 – Email: etude@qx8.ru
  220. mercygroupnet.net – 69.50.198.218 – Email: bowie@bigmailbox.ru
  221. mercy-inc.com – 69.50.198.221 – Email: spout@freenetbox.ru
  222. solarisgroupinc.com – 69.50.199.209 – Email: slows@5mx.ru
  223. solarisgroupnet.net – 69.50.198.197 – Email: sharp@maillife.ru
  224. jvc-inc.com – 69.50.198.210 – Email: etude@qx8.ru
  225. jvcgroupnet.net – 69.50.198.221 – Email: spout@freenetbox.ru
  226. Name servers of notice, historical OSINT for the responding IPs provided:
  227. ns1.kalipso19.cc – 208.110.80.34 – Email: tarts@freenetbox.ru
  228. ns2.kalipso19.cc – 64.85.169.70
  229. ns3.kalipso19.cc – 173.208.132.42
  230. ns1.mamacholi.net – 208.110.80.35 – Email: excess@bigmailbox.ru
  231. ns2.mamacholi.net – 64.85.169.71
  232. ns3.mamacholi.net – 173.208.132.43
  233. ns1.rjevski.com – 208.110.80.34 – Email: low@bigmailbox.ru
  234. ns2.rjevski.com – 64.85.169.70
  235. ns3.rjevski.com – 173.208.132.42
  236. ns1.runlesrun.cc – 208.110.80.37 – Email: frost@bigmailbox.ru
  237. ns2.runlesrun.cc – 64.85.169.73
  238. ns3.runlesrun.cc – 173.208.132.45
  239. ns1.skotinko.net – 208.110.80.38 – Email: info@dnregistrar.ru
  240. ns2.skotinko.net – 64.85.169.74
  241. ns3.skotinko.net – 173.208.132.46
  242. ns1.solojumper.com – 208.110.80.36 – Email: crime@bigmailbox.ru
  243. ns2.solojumper.com – 64.85.169.72
  244. ns3.solojumper.com – 173.208.132.44
  245. altitudegroupinc.tw – Email: weds@fastermail.ru
  246. altitude-groupli.com – Email: mylar@5mx.ru
  247. altitude-groupmain.tw – Email: gutsy@qx8.ru
  248. amplitude-groupmain.net – Email: tabs@5mx.ru
  249. arvina-groupco.tw – Email: hv@qx8.ru
  250. arvina-groupinc.tw – Email: jerks@5mx.ru
  251. arvina-groupnet.cc – Email: mat.mat@yahoo.com
  252. asperity-group.com – Email: okay@qx8.ru
  253. asperitygroup.net – Email: cde@freenetbox.ru
  254. asperitygroupinc.tw – Email: ti@fastermail.ru
  255. asperity-groupmain.tw – Email: gutsy@qx8.ru
  256. astra-groupnet.tw – Email: logic@qx8.ru
  257. astra-groupinc.tw – Email: gv@fastermail.ru
  258. augment-group.com – Email: mylar@5mx.ru
  259. augmentgroup.net – Email: glean@fastermail.ru
  260. augmentgroupinc.tw – Email: weds@fastermail.ru
  261. augment-groupmain.tw – Email: gutsy@qx8.ru
  262. celerity-groupmain.net – Email: cde@freenetbox.ru
  263. celerity-groupmain.tw – Email: weds@fastermail.ru
  264. excel-groupco.tw – Email: thaws@bigmailbox.ru
  265. excel-groupsvc.com – Email: carlo@qx8.ru
  266. fincore-groupllc.tw – Email: jerks@5mx.ru
  267. fecunda-group.com – Email: okay@qx8.ru
  268. fecundagroupllc.tw – Email: omega@fastermail.ru
  269. fecunda-groupmain.net – Email: mylar@5mx.ru
  270. fecunda-groupmain.tw – Email: ti@fastermail.ru
  271. foreaim-group.com – Email: cde@freenetbox.ru
  272. foreaimgroup.net – Email: glean@fastermail.ru
Related articles