Spam Alert
Full Report:  /My_Canadian_Pharmacy_spam176918.html
Changed status to confirmed spam.
hyfdanteray.net is one of the sites for the spam operation, "MyCanadianPharmacy." This site and its spam are violating US law:
* It offers medications which may not be dispensed without a prescription, including Provigil, and sometimes Valium, Meridia, Xanax and Ambien, which are federal contolled substances, without requiring any prescription. Xanax in particular has high street value. See /My_Canadian_Pharmacy_spam114.html for example of the expanded offerings in controlled substances on this site at the time of the first SIRT report for My Canadian Pharmacy.
* Its site advertises generic versions of drugs like Viagra which are still under patent protection. Therefore, any generics are by definition counterfeit.
* Its site includes "certificates" claiming endorsement from the Better Business Bureau, Verisign, Visa, The Canadian International Pharmacy Association, and PharmacyChecker. As noted by http://www.spamtrackers.eu/wiki/index.php?title=My_Canadian_Pharmacy , all of these claims are outright falsehoods and violations of these agencies' trademarks. See also the BBB alert at http://www.bbbmwo.ca/commonreport.html?bid=1134034
* It is not located in Canada anywhere anyone has been able to find it, and the address it lists for itself is a strip mall with no buildings resembling the one pictured on its website. It is not connected to the actual pharmacy mycanadianpharmacy.com . See also information collected on this operation at http://www.rickconner.net/spamweb/spam_drugs.html
* There is doubt whether they actually sell anything; the website may only be collecting credit card numbers.
* It violates US law by offering drugs for sale to US residents that they may not legally import from pharmacies outside the US, and it offers them for sale without prescription. See http://www.fda.gov/oc/buyonline/faqs.html
* It offers for sale to US residents drugs that have not been approved by the FDA for sale in the US, like rimonabant.
* Its site offers for sale antiepileptic medications like Neurontin, Depakote, Lamictal, Trileptal, Keppra, and Topamax. Given the documented fact that even when spamvertised pharmacies deliver medications, they are subpotent or completely inactive about half the time, well-controlled epileptics taking these pills could have seizures while driving, causing an accident that could kill or seriously injure themselves or others, or at very least, lead to loss of their drivers' licenses.
* Its site offers for sale anticancer agents like casodex and nolvadex. Again, even when spamvertised pharmacies deliver medications, they are subpotent or completely inactive about half the time. The first indication people taking these medications would have that they are taking inactive drug would be recurrence of their cancers.
* Its site offers for sale antibiotics like Levaquin, Amoxicillin, Augmentin, Cipro, Zithromax, and Suprax. As My Canadian Pharmacy does not even claim to offer overnight delivery, the only reason to order these drugs without prescription from a pharmacy that takes weeks to deliver (if it ever delivers at all), is to keep it at home "just in case." As most people are unaware that viral illnesses do not respond to antibiotics, are not aware of which organisms are most likely to cause which infections nor which antibiotics will cover those organisms, and do not have the ability to perform culture and sensitivity testing to confirm empiric treatment, this practice is highly likely to select for drug resistant organisms like CA-MRSA (community acquired methicillin resistant staphylococcus aureus, a particularly aggressive variety of staph that causes recurrent skin boils and has a 50% mortality when it causes pneumonia). As Cipro and Levaquin also have anti-tubercular activity, their use can select for drug resistant tuberculosis. Extended drug resistant mycobacterium tuberculosis (XDR-TB) is extracting nearly 100% mortality in South Africa at present.
* Its site offers for sale Coumadin, a narrow therapeutic index drug that requires very frequent blood testing to determing the correct dose, and continued monitoring to readjust dose due to interactions with food and other medications. The consequence of too much OR too little can be stroke or death.
* Its site offers for sale major antipsychotic medications like Seroquel, Abilify, and Risperdal. In addition to the fact that inactive drug could cause a patient to relapse, leading to consequences like loss of employment, even if these pills contain real medication and the correct quantity of real medication, they are only sold by prescription because patients taking them must be monitored for possible side effects like diabetes.
* Its site offers for sale the fertility medication clomid which carries the risk of multiple pregnancy, visual disturbances, and ovarian tumors, especially if used in excess.
* Their spam messages violate the CAN-SPAM act because they have forged "from" and "reply to" addresses, are sent from hijacked computers without the knowledge or permission of the owners, do not include valid information identifying who has sent the spam or how to opt out, and do not honor opt-out requests on their websites. Addresses are collected by bots spidering the internet for email addresses.
* Sites in this spam family (My Canadian Pharmacy, International "Legal" Rx, Canadian Health&Care Mall, Men+ Health, US Drugs, VIP Pharmacy/"Viagra+Cialis") utilize hijacked Unix servers using the tirqd trojan. See:
http://www.spamtrackers.eu/wiki/index.php?title=My_Canadian_Pharmacy#The_tirqd_Unix_infection
* In each case in which this reporter was able to contact the person named in the whois information in the domain registration of one of these sites, that person denied having any knowledge of his/her personal information being used to register any domains. Some victims had already been aware of fraudulent charges on their credit cards for domain registrations. See documentation at http://spamtrackers.eu/wiki/index.php?title=Fake_yambo_whois
In this case I was able to speak to the "registrant" by phone and confirm that she had nothing to do with registering this domain.
Online prices for warfarin 5mg x 90 tabs (generic coumadin, a blood thinner) on 4/13/08:
Rite Aid (drugstore.com): US $35
CVS US $46
My Canadian Pharmacy US $227
The only reason for someone to order warfarin via an illegal pharmacy is to avoid having to see a doctor and get blood tests done to obtain a prescription. Warfarin is derived from a natural compound and has a complex metabolism and many food/drug interactions. Not only is there a very narrow range between the dose that prevents clots and the dose that causes excessive bleeding, the dose is different from person to person and even varies at different times for the same person. There is an extremely high risk of someone having complications like bleeding or strokes if he/she is not getting regular blood tests to check whether the dosage needs to be changed.
hyfdanteray.net is located at IP address 200.171.178.11
but it loads images from port 8080 of five of the following servers:
http://58.241.87.130:8080/p/images/weship.jpg
http://79.135.167.10:8080/p/images/weship.jpg
http://84.253.77.6:8080/p/images/weship.jpg
http://194.67.66.10:8080/p/images/weship.jpg
http://212.154.24.78:8080/p/images/weship.jpg
http://212.154.24.88:8080/p/images/weship.jpg
http://212.154.24.92:8080/p/images/weship.jpg
http://domaintools.tweak-it.net/fullreport/hyfdanteray.net
SiteAdvisor review at http://www.siteadvisor.com/sites/hyfdanteray.net
Sites in this spam family (My Canadian Pharmacy, International "Legal" Rx, Canadian Health&Care Mall, Men+ Health, US Drugs, VIP Pharmacy/"Viagra+Cialis") will often block traffic from IP addresses associated with legal, financial and antispam organizations as well as anyone who has visited more than one of their sites. It may be necessary to use a proxy to view the pages. In addition, nameservers will selectively refuse queries for certain domains not currently being spammed, and it is necessary to use traversal to see that the domains themselves are not suspended.
Nameservers:
Generated by www.DNSstuff.com at 02:44:28 GMT on 05 Jun 2008.
ns2.portativefih.ru [136.145.55.9]
ns1.fowimpetration.com [210.47.0.50]
Nameservers move frequently to new IP addresses as is typical with hijacked hosts. They were observed at the following IP addresses within the past several days:
ns2.portativefih.ru A 83.15.82.74
ns2.portativefih.ru A 136.145.55.9
ns1.fowimpetration.com A 202.127.45.235
ns1.fowimpetration.com A 209.88.103.12
ns1.fowimpetration.com A 210.47.0.50
Other bulkerz.biz/Yambo domains noted on IP address 200.171.178.11 on June 4 2008:
abinequial.com
ablherent.com
absedjabar.com
adoreberry.com
aftermuise.net
ailerzatek.com
amplomater.com
andtherybug.net
anexilotop.com
arikapturla.com
aseverloper.net
asewsingle.com
asingthtold.com
assureftunel.com
azoancored.com
baldaterybass.net
barriershawl.net
baseperedon.com
basinefest.net
basteldress.net
batekolery.com
bathekbare.com
birakusome.com
bladyrushe.com
blockforike.net
bluntgood.com
bonmerfiket.com
borecometin.net
burastmedit.com
buseropast.net
butchertnob.com
buttomjole.net
byrstintro.com
canadian-pharma.net
capalogye.net
chaderpioner.com
charedbus.com
cistomiseril.com
colertions.com
countribale.com
cranckcoilds.com
crypufullewad.com
culmivarteh.com
cultivawel.com
cursomaryl.com
dadlineart.com
dasjavert.com
dersticken.com
deskdelion.com
desmanker.com
dischopper.com
dryconsest.net
eachoseras.com
econgmisedum.com
ecrityksaler.com
edacityf.cn
elfasured.com
emperiatore.com
emphaticvale.com
enciletrend.com
engineperted.com
eraxewhint.com
ernikadetlig.com
ernikadetlig.net
erperadest.net
erywithyou.com
esenefast.net
eyecalting.com
eyedballs.com
fabrickbye.com
failtdushar.com
fajotorok.com
famularutym.info
feltmyupess.net
fenybelloweg.com
filereasign.com
flightournet.com
flinghoutem.com
floundcazzle.com
folertgamps.com
freedloger.com
freewilebote.com
galowefol.com
gauserrimer.com
gefedfylok.com
ghostglide.com
giantfaithsea.com
goovermymind.com
gradmentale.com
graiterits.com
graiterits.net
guarwbench.com
haidofgano.net
haltsaugol.com
hayngmiti.net
heelkaweler.com
heleselter.com
herdboard.com
herringesy.com
honopwhat.com
horedigmer.com
howsomertyv.com
humcomiced.com
humersaxer.com
humolousew.com
huntingswell.com
hyfdanteray.net
hyreingers.com
idolhowerve.net
ielodastnor.com
ighogorne.com
igromance.com
ikerbreads.com
iloperatev.com
imerbissone.com
imolikeiky.net
imylateyno.com
inclettery.com
incomertal.com
incomplerob.com
ingerleart.com
ingermetwol.com
ingsitilad.com
inhalftoo.com
intednalsut.com
interikontakt.com
isignalbind.com
italiclopval.com
janiadyitch.com
janiarlawepo.net
jestorpunadi.com
jindolsmade.com
joeggetnop.com
knewgfader.com
landuaning.info
launtspater.com
laxeresok.com
leafedpalaw.com
lepertokan.com
loovchazer.com
loretharmle.net
maluotelyn.com
masloliner.com
mawershopler.com
maygaried.net
mikerpinkdo.com
minepcurach.com
mixwedcomp.com
miztrust.cn
mossudejerck.com
moyndtilef.net
my-canadian.com
nagekssadir.com
narrowdeer.com
needmusclek.com
negatimmuse.com
negromental.com
nohokerowl.net
nointherwine.net
obercanwet.com
ofenmorest.net
ofikalhear.com
ofisergeroy.com
ogewfropew.com
oletdaptment.net
oletoper.com
omelianhytor.com
oncederater.com
oneselfetu.com
onigorydfate.com
oradengetbel.com
oundefmode.com
ouseyeballse.info
painavard.com
paserbarrow.com
pauauretion.com
peasemunelo.com
pebblesriver.com
pelvisteps.net
penionmelow.com
perfolancer.com
plaintdyer.net
plasretgilar.com
pleterhusl.net
plitonmanur.com
plundishrag.com
pointpleset.net
polerstery.com
poundarnacy.com
preacysed.com
presergation.com
presergation.net
promobijon.info
pruffervent.com
psilofadcored.com
quilfikater.com
raisenmoxer.com
redcatition.com
redignoat.com
registrionil.com
regootnos.net
resarchuck.com
ringetdownt.net
ritickbals.com
ropolosileg.com
rosrpluck.com
runingedsiz.com
rutancomerda.com
sadegikaz.com
sasetmiclet.com
sckajatch.com
shoostcalte.com
silinewitals.com
sretlopeq.com
stroileryock.net
subltitle.com
supilesetics.com
swartbyew.info
swinghoy.cn
tandpresent.com
testartment.net
tgesalexpert.com
throghetnetal.com
toronto-rx.com
transfizion.com
trasesearch.com
treasewent.com
treasewent.net
trotedcoast.com
tunerealti.com
turbineshaw.com
ubafindamet.com
uletcrown.com
undertecktek.com
uneversadet.net
unexedproper.com
uniferdolly.net
unkersewop.com
urayroack.net
usameds-rx.us
usebandterm.com
viposadetion.com
virtylenesess.net
vitoalzane.com
vitylaetik.com
voluneting.com
walkintriod.com
wasypencil.net
weedsea.com
winhittler.com
witnesscolly.net
wolexsakch.com
wrolkengar.net
yasterxejola.com
yongduman.com
youfastpoh.com
ziladoferim.com
@dns.com.cn and naunet.ru:
All domains which use or have used the nameservers ns2.portativefih.ru and ns1.fowimpetration.com are fraudulent. The nameservers may be suspended without affecting legitimate customers. Domains using these nameservers:
aftermuise.net
andtherybug.net
bellsompal.com
blockforike.com
blockforike.net
buttomjole.com
buttomjole.net
hyfdanteray.net
linderflatter.com
oletdaptment.net
pingboiler.com
precisonpec.com
stroileryock.com
stroileryock.net
unoyinrost.com
wskatersche.com
wskatersche.net
@AITdomains:
The following domains registered with AITdomains also are part of the bulkez.biz/Yambo spam group, which include My Canadian Pharmacy, International "Legal" Rx, Canadian Health&Care Mall, Men+ Health, US Drugs, VIP Pharmacy/"Viagra+Cialis." These sites have fraudulent information on their websites, use hijacked servers to host their sites, employ identity theft in registering their domains, sell counterfeit drugs (if they are actually selling any at all and not just collecting credit card numbers), and misuse trademarks of organizations like the Better Business Bureau. Please suspend any that remain active (and remove any personal information of the victims of identity theft from the whois of inactive domains, as you appear to have done with those domains you have previously shut down):
Active domains:
abdolverit.com
abinequial.com
ablherent.com
absedjabar.com
abutardack.net
acherbolsev.com
adoreberry.com
aftermuise.net
againvst.net
agerfaxeu.com
alikebyroy.com
alikebyroy.info
asingthtold.com
attentojey.info
azoancored.com
baldaterybass.net
basteldress.com
batekolery.net
bladyrushe.com
bruisefun.net
butchertnob.com
cartonedy.net
cashirefim.com
cavalquitm.info
ceikyndol.com
centuryeyelid.com
certomcrow.net
changesnowa.com
chazedistr.net
cistomiseril.com
coerselgrase.com
colertions.com
complitedpos.net
cyprneliz.com
dawteaser.com
deerclidest.net
defaltgar.com
depstinpaty.com
deravforest.net
desitalkin.net
drawblesu.com
duktchesel.com
dwelldutch.com
eachoseras.com
eassaytone.net
ecolonijycal.com
edelestdue.info
egghheflag.com
enecilguad.com
ernikadetlig.net
erywithyou.com
esterlapona.com
evanejefeat.com
exempled.com
exilepenti.net
famularutym.net
fifestunds.com
filereasign.com
footparrot.com
gauserrimer.com
gavertcerry.com
gaxewender.net
gefedfylok.net
glighteromt.com
glovehug.com
gradmentale.com
graiterits.net
hagyrecogen.com
hameswert.com
heleselter.com
heleselter.net
helixyltra.info
herecasir.com
herekolmony.com
higereless.net
hoerillugad.com
honopwhat.com
horedigmer.com
horoziomid.net
hotinestur.com
howsomertyv.com
humanitycaus.com
humcomiced.com
huntreporat.com
hyfdanteray.net
ideolraregal.com
ideolraregal.net
idolhotgum.com
ielodastnor.com
ighogorne.com
imignaredot.net
inclettery.com
incomertal.com
ingistart.com
inhalftoo.info
instiantlid.com
interikontakt.com
interpery.com
joeggetnop.net
kingjoneru.com
laboursa.com
ladoratjoy.com
lanliazin.net
lartyears.com
lauseisteib.info
laxeresok.com
lenoferol.net
lettisdymest.net
loretharmle.net
mentakessec.info
mijertind.com
minepcurach.com
mixwedcomp.com
monthcordial.com
mossudejerck.com
motersikid.com
moyndtilef.net
msedijyka.com
multyaredi.net
nagekssadir.com
nogoodallm.com
nohokerowl.net
noinonaner.net
nointherwine.net
nousingindy.net
nowerenixt.net
ogewfropew.com
ogolsinacy.net
oilwellkuno.com
olowingre.info
omelianhytor.info
oncederater.com
opticalder.com
originblock.com
outhhorse.net
overode.com
painavard.com
paserbarrow.com
passgasmask.net
patfun.com
pelvisteps.net
perfolancer.com
plasretgilar.com
playbicard.com
pochere.com
polerstery.com
polibiketyl.com
poundarnacy.com
prasikoniv.com
precisonpec.com
presergation.net
providezrity.com
pruffervent.com
raslopersoile.com
redignoat.com
refgeshroom.com
refoageitr.com
regootnos.net
regynchaos.info
resarchuck.com
residetnfall.com
restelf.com
roledbintel.net
rookumlikam.info
samofern.info
sasetmiclet.com
seatscopyre.net
shipnesspic.com
silienteh.com
skillsheaf.com
sproweduynf.net
sulcknyga.info
swartbyew.net
tankdance.com
thererouat.com
throatclay.com
timbilderd.com
tocledgyve.net
toflightavo.net
traberaply.com
trakeuvay.net
treachdesom.com
treasewent.com
trobakovid.com
trugludi.info
trugludi.net
turbineshaw.com
typifullqes.com
uarasopin.com
ubafindamet.com
ubmissencoqu.net
undertecktek.net
uniferdolly.net
unigopethor.com
unoyinrost.com
usalterfull.com
usonlinpharm.com
vanityshor.net
viposadetion.com
wadekapig.com
werogadinch.net
weuercycle.com
wsrepredent.net
yallowhard.net
yongduman.com
youfastpoh.com
Spamhaus information on these IP addresses:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64173 for 200.171.178.11
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64775 for 136.145.55.9
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46595 for 210.47.0.50
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64778 for 79.135.167.10
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64834 for 79.135.167.10
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64881 for 79.135.167.10
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL65112 for 79.135.167.10
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64072 for 84.253.77.6
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL63729 for 212.154.24.78
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62488 for 212.154.24.88
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62950 for 212.154.24.92
Consumed following related reports:
[183298] http://hyfdanteray.net/?page=xaxax&t=testimonials&ref=&pid=3676&cart
[183299] http://hyfdanteray.net/?page=xaxax&t=description&ref=&pid=3676&cart
[183300] http://hyfdanteray.net/?page=xaxax&ref=&pid=3676&cart
[183301] http://hyfdanteray.net/?page=visa&interface=no
[183302] http://hyfdanteray.net/?page=verisign&interface=no
[183303] http://hyfdanteray.net/?page=valium&t=testimonials&ref=&pid=3676&cart
[183304] http://hyfdanteray.net/?page=valium&t=description&ref=&pid=3676&cart
[183305] http://hyfdanteray.net/?page=valium&ref=&pid=3676&cart
[183306] http://hyfdanteray.net/?page=shipping&ref=&pid=3676&cart
[183307] http://hyfdanteray.net/?page=rrc&ref=&pid=3676&cart
[183308] http://hyfdanteray.net/?page=provigil&t=testimonials&ref=&pid=3676&cart
[183309] http://hyfdanteray.net/?page=provigil&t=description&ref=&pid=3676&cart
[183310] http://hyfdanteray.net/?page=privacy&ref=&pid=3676&cart
[183311] http://hyfdanteray.net/?page=phonesupport&ref=&pid=3676&cart
[183312] http://hyfdanteray.net/?page=pchecker&interface=no
[183313] http://hyfdanteray.net/?page=nolvadex&t=description&ref=&pid=3676&cart
[183314] http://hyfdanteray.net/?page=meridia&t=testimonials&ref=&pid=3676&cart
[183315] http://hyfdanteray.net/?page=meridia&t=description&ref=&pid=3676&cart
[183316] http://hyfdanteray.net/?page=meridia&ref=&pid=3676&cart
[183317] http://hyfdanteray.net/?page=licence&interface=no
[183318] http://hyfdanteray.net/?page=index
[183319] http://hyfdanteray.net/?page=howto&ref=&pid=3676&cart
[183320] http://hyfdanteray.net/?page=genericviagra&t=testimonials&ref=&pid=3676&cart
[183321] http://hyfdanteray.net/?page=genericviagra&t=description&ref=&pid=3676&cart
[183322] http://hyfdanteray.net/?page=genericviagra&ref=&pid=3676&cart
[183323] http://hyfdanteray.net/?page=cservice&ref=&pid=3676&cart
[183324] http://hyfdanteray.net/?page=contactus&ref=&pid=3676&cart
[183325] http://hyfdanteray.net/?page=contactform&ref=&pid=3676&cart
[183326] http://hyfdanteray.net/?page=clomid&t=testimonials&ref=&pid=3676&cart
[183327] http://hyfdanteray.net/?page=clomid&t=description&ref=&pid=3676&cart
[183328] http://hyfdanteray.net/?page=cipa&interface=no
[183329] http://hyfdanteray.net/?page=bbbo&interface=no
[183330] http://hyfdanteray.net/?page=antispam&ref=&pid=3676&cart
[183331] http://hyfdanteray.net/?page=ambien&t=testimonials&ref=&pid=3676&cart
[183332] http://hyfdanteray.net/?page=ambien&t=description&ref=&pid=3676&cart
[183333] http://hyfdanteray.net/?page=ambien&ref=&pid=3676&cart
[183334] http://hyfdanteray.net/?page=allproducts&type=women_s_health&ref=&pid=3676&cart
[183335] http://hyfdanteray.net/?page=allproducts&type=weight_loss&ref=&pid=3676&cart
[183336] http://hyfdanteray.net/?page=allproducts&type=pain_relief&ref=&pid=3676&cart
[183337] http://hyfdanteray.net/?page=allproducts&type=men_s_health&ref=&pid=3676&cart
[183338] http://hyfdanteray.net/?page=allproducts&type=general_health&ref=&pid=3676&cart
[183339] http://hyfdanteray.net/?page=allproducts&type=blood_pressure_cholesterol&ref=&pid=3676&cart
[183340] http://hyfdanteray.net/?page=allproducts&type=anti_herpes&ref=&pid=3676&cart
[183341] http://hyfdanteray.net/?page=allproducts&type=anti_diabetic&ref=&pid=3676&cart
[183342] http://hyfdanteray.net/?page=allproducts&type=anti_depressants&ref=&pid=3676&cart
[183343] http://hyfdanteray.net/?page=allproducts&type=anti_biotics&ref=&pid=3676&cart
[183344] http://hyfdanteray.net/?page=allproducts&type=anti_allergic_asthma&ref=&pid=3676&cart
[183345] http://hyfdanteray.net/?page=allproducts&type=anti_acidity&ref=&pid=3676&cart
[183346] http://hyfdanteray.net/?page=allproducts&ref=&pid=3676&cart
[183347] http://hyfdanteray.net/?page=afficon&ref=&pid=3676&cart
[183348] http://hyfdanteray.net/?page=acomplia&t=order&ref=&pid=3676&cart
[183349] http://hyfdanteray.net/?page=acomplia&t=description&ref=&pid=3676&cart
[183350] http://hyfdanteray.net/?page=aboutus&ref=&pid=3676&cart
IP Converted: 200.171.178.11
dword = 3366695435
hex1 = 0xc8abb20b
hex2 = 0xc8.0xab.0xb2.0xb
oct = 0310.0253.0262.013
IP Converted: 58.241.87.130
dword = 988895106
hex1 = 0x3af15782
hex2 = 0x3a.0xf1.0x57.0x82
oct = 072.0361.0127.0202
View CIDR AS27699 Report: http://www.cidr-report.org/cgi-bin/as-report?as=27699
"27699 | BR | lacnic | 2003-06-24 | TELECOMUNICACOES DE SAO PAULO S/A - TELESP"<br />
Extended information for AS27699:
State/Province:
Country: br
Responsible Domain: telesp.com.br
Abuse Email: abuse@telesp.net.br
IP Converted: 79.135.167.10
dword = 1334290186
hex1 = 0x4f87a70a
hex2 = 0x4f.0x87.0xa7.0xa
oct = 0117.0207.0247.012
View CIDR AS4837 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4837
"4837 | CN | apnic | 2001-09-17 | CHINA169-BACKBONE CNCGROUP China169 Backbone"<br />
Extended information for AS4837:
State/Province:
Country: cn
Responsible Domain: cnc-noc.net
Abuse Email: abuse@cnc-noc.net
IP Converted: 84.253.77.6
dword = 1425886470
hex1 = 0x54fd4d06
hex2 = 0x54.0xfd.0x4d.0x6
oct = 0124.0375.0115.06
View CIDR AS9121 Report: http://www.cidr-report.org/cgi-bin/as-report?as=9121
"9121 | TR | ripencc | 1998-12-29 | TTNET TTnet Autonomous System"<br />
Extended information for AS9121:
State/Province:
Country: tr
Responsible Domain: telekom.gov.tr
Abuse Email: abuse@ttnet.net.tr
IP Converted: 194.67.66.10
dword = 3259187722
hex1 = 0xc243420a
hex2 = 0xc2.0x43.0x42.0xa
oct = 0302.0103.0102.012
View CIDR AS8629 Report: http://www.cidr-report.org/cgi-bin/as-report?as=8629
"8629 | RU | ripencc | 1998-01-22 | MCNTT-AS MCNTT Autonomous System"<br />
Extended information for AS8629:
State/Province:
Country: ru
Responsible Domain: ntt.ru
Abuse Email: postmaster@ntt.ru
IP Converted: 212.154.24.78
dword = 3566868558
hex1 = 0xd49a184e
hex2 = 0xd4.0x9a.0x18.0x4e
oct = 0324.0232.030.0116
View CIDR AS2683 Report: http://www.cidr-report.org/cgi-bin/as-report?as=2683
"2683 | EU | ripencc | 1993-09-01 | RADIO-MSU RADIO-MSU"<br />
Extended information for AS2683:
State/Province:
Country:
Responsible Domain: radio-msu.net
Abuse Email: abuse@radio-msu.net
IP Converted: 136.145.55.9
dword = 2291218185
hex1 = 0x88913709
hex2 = 0x88.0x91.0x37.0x9
oct = 0210.0221.067.011
View CIDR AS12735 Report: http://www.cidr-report.org/cgi-bin/as-report?as=12735
"12735 | TR | ripencc | 1999-10-18 | ASNETONE Netone Bilgi Ve Iletisim Hizmetleri A.S."<br />
Extended information for AS12735:
State/Province:
Country: tr
Responsible Domain: satko.com.tr
Abuse Email: postmaster@satko.com.tr
IP Converted: 210.47.0.50
dword = 3526295602
hex1 = 0xd22f0032
hex2 = 0xd2.0x2f.0x0.0x32
oct = 0322.057.00.062
View CIDR AS5786 Report: http://www.cidr-report.org/cgi-bin/as-report?as=5786
"5786 | PR | arin | 1995-10-24 | UPRENET - University of Puerto Rico"<br />
Extended information for AS5786:
State/Province:
Country: us
Responsible Domain: upr1.upr.clu.edu
Abuse Email: postmaster@upr1.upr.clu.edu
ISPs: Please assist your customers in identifying and disinfecting servers at the following addresses:
cernet.edu.cn
210.47.0.50
cnc-noc.net
58.241.87.130
ntt.ru
84.253.77.6
radio-msu.net
194.67.66.10
satko.com.tr
212.154.24.78
212.154.24.88
212.154.24.92
telekom.gov.tr
79.135.167.10
telesp.com.br
200.171.178.11
upr1.upr.clu.edu
136.145.55.9
Registrars: please suspend the following domains and nameservers. Please investigate the payment history as it was almost certainly fraudulent as well. Please forward evidence of fraudulent activity to law enforcement.
See domain suspension instructions at
http://www.spamtrackers.eu/wiki/index.php?title=Registrar_Advice
Hong Kong mirror:
香港 镜象地点
http://spamtrackers.hk/wiki/index.php/Suspending_an_EPP_domain
http://spamtrackers.hk/wiki/index.php/Suspending_a_non-EPP_domain
(Removal of nameservers is here:
http://spamtrackers.hk/wiki/index.php/Suspending_an_EPP_name_server_domain
http://spamtrackers.hk/wiki/index.php/Suspending_a_non-EPP_name_server_domain )
As the domains for the Yambo family of spamvertised websites (My Canadian Pharmacy, International Legal Rx Medications, Men+ Health, US Drug, VIP Pharmacy ("Viagra + Cialis"), and Canadian Health&Care Mall are uniformly registered with information obtained by identity theft and paid with fraudulent credit/debit card information, please suspend any other sites in this family that you become aware of.
AITdomains:
hyfdanteray.net
naunet.ru
portativefih.ru
ns2.portativefih.ru [136.145.55.9]
dns.com.cn
fowimpetration.com
ns1.fowimpetration.com [210.47.0.50]
View CIDR AS4134 Report: http://www.cidr-report.org/cgi-bin/as-report?as=4134
"4134 | CN | apnic | 2002-08-01 | CHINANET-BACKBONE No.31,Jin-rong Street"<br />
Extended information for AS4134:
State/Province:
Country: cn
Responsible Domain: chinanet.cn.net
Abuse Email: cncert@cert.org.cn
| Quote: | | http://hyfdanteray.net |
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
