Category Archives: SCAM alert__

WHOIS SIGHTBEAT.COM

IP Address: 94.247.31.172
Hostname: 94.247.31.172
IP Address Country: Spain
IP Continent: Europe
IP Address City Location: Sevilla
IP Address Region: Andalucia
IP Address Latitude: 37.3824,
IP Address Longtitude: -5.9761
Organization: ELB multimedia
ISP: ELB multimedia
____________________________________

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1663308qkd;
Mon, 1 May 2017 21:58:32 -0700 (PDT)
X-Received: by 10.28.34.130 with SMTP id i124mr730892wmi.111.1493701112516;
Mon, 01 May 2017 21:58:32 -0700 (PDT)
Return-Path:
Received: from clearneed.pro ([94.247.31.172])
by mx.google.com with ESMTP id 7si1261709wmz.168.2017.05.01.21.58.32
for
Mon, 01 May 2017 21:58:32 -0700 (PDT)
Received-SPF: neutral (google.com: 94.247.31.172 is neither permitted nor denied by domain of 4tw0z3@websitewelcome.com) client-ip=94.247.31.172;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 94.247.31.172 is neither permitted nor denied by domain of 4tw0z3@websitewelcome.com) smtp.mailfrom=4TW0Z3@websitewelcome.com
List-Unsubscribe:
Received: from gmail.com (gmail.com. 94.247.31.172)
Date: Tue, 02 May 2017 00:58:32 -0400 (EDT)
To: “”
From: Amanda
X-GOOMOJI-Subject: Meet me and F.CK me!
Subject: Meet me and F.CK me!
X-EMMAIL:
Return-Path: 4TW0Z3@websitewelcome.com
Reply-To: ajwwe10@gmail.com
Content-Type: text/html;
Mime-version: 1.0
Message-Id:
________________________________________

IP Address: 82.98.131.156
Hostname: dl360.dinaserver.com
IP Address Country: Spain
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 40.4172,
IP Address Longtitude: -3.684
Organization: DinaHosting S.L.
ISP: DinaHosting S.L.

82.98.131.156 resolves to dl360.dinaserver.com.
The following A records are set to 82.98.131.156:
future500ily.com
____________________________________________
IP Address: 5.179.192.130
Hostname: 5-179-192-130.dynamixhost.com
IP Address Country: France
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 48.8582,
IP Address Longtitude: 2.3387
Organization: Dynamix Network Sarl
ISP: Dynamix Network Sarl

Delivered-To: agr458@gmail.com
Received: by 10.55.141.194 with SMTP id p185csp1448789qkd;
Mon, 1 May 2017 09:38:49 -0700 (PDT)
X-Received: by 10.223.161.65 with SMTP id r1mr18563682wrr.114.1493656729118;
Mon, 01 May 2017 09:38:49 -0700 (PDT)
Return-Path:
Received: from ondrought.com (5-179-192-130.dynamixhost.com. [5.179.192.130])
by mx.google.com with ESMTPS id z42si17169008wrz.25.2017.05.01.09.38.48
for
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 01 May 2017 09:38:49 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of admin@nx2084.dynamixhost.com designates 5.179.192.130 as permitted sender) client-ip=5.179.192.130;
Authentication-Results: mx.google.com;
dkim=pass header.i=@Oobat.onmicrosoft.com;
spf=pass (google.com: best guess record for domain of admin@nx2084.dynamixhost.com designates 5.179.192.130 as permitted sender) smtp.mailfrom=admin@nx2084.dynamixhost.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Oobat.onmicrosoft.com; s=selector1-sightbeat-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NwmsggxWo6zx7IkAZgE9rth2+5+rQO0QFEx2AvBWCBw=; b=M0AnSFs8iwPud+ItPuEtgAx/eJTiNzNI5fU/kU6yzyj6VK6Ow+6buU8yaS+g/o01gSO332hkYx5e7t0B7VvF6UQOvyRNmAwEByJzxkqn0oFWQM/Rty7xgruPXOOLEizySYYDQU09uzJCwybO0N/hfez4Y/o7IVvwpBpHbhj2R2M=
Content-Type: text/html; charset=”ASCII”
Content-Transfer-Encoding: base64
Sender:
From: 1-800-DENTIST Offer
Subject: We Take Every Smile Personally
Date: Mon, 1 May 2017 18:25:49 -0600
MIME-Version: 1.0
Message-ID:
_________________________________________________
IP Address: 5.179.192.130
Hostname: 5-179-192-130.dynamixhost.com
IP Address Country: France
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 48.8582,
IP Address Longtitude: 2.3387
Organization: Dynamix Network Sarl
ISP: Dynamix Network Sarl

The following A records are set to 5.179.192.130:
ns1.ondrought.com, ondrought.com

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1526444qkd;
Mon, 1 May 2017 13:19:45 -0700 (PDT)
X-Received: by 10.80.180.241 with SMTP id x46mr20602977edd.91.1493669985810;
Mon, 01 May 2017 13:19:45 -0700 (PDT)
Return-Path:
Received: from future500ily.com (dl360.dinaserver.com. [82.98.131.156])
by mx.google.com with ESMTP id r24si15704116edc.168.2017.05.01.13.19.45
for
Mon, 01 May 2017 13:19:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of smtpfiles@fullpof1.thistimetochange10.onmicrosoft.com designates 82.98.131.156 as permitted sender) client-ip=82.98.131.156;
Authentication-Results: mx.google.com;
dkim=pass header.i=@ueziuj.onmicrosoft.com;
spf=pass (google.com: domain of smtpfiles@fullpof1.thistimetochange10.onmicrosoft.com designates 82.98.131.156 as permitted sender) smtp.mailfrom=smtpfiles@fullpof1.thistimetochange10.onmicrosoft.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ueziuj.onmicrosoft.com; s=selector1-ueziuj-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=NuB0kzD5FriuptJl/LLxs9Hi1TBt/mYMNbT5sg1Ze18=; b=aZiUNWBa1YIMg+B1z7PAZ0QR+whGpbRZJA26Yzdxsc9h+3XYi7i/eUuTbYaoE3rY43o4AqFnBVWGvGwTUir4PVQp9lX+06/aOkXM9GeSYi4gc37WnvW8zAUrJb6xe6RwVsOgw9ngGYoeym88HiumZ3rsdoYJK67VUZ3FQFxKwf4=
From: “.:Fubar:.”
To: “alen.johansen@gmail.com”
Subject: CHAT,FLIRT_AND_MEET_NEW_PEOPLE!..c7[?]
Subject: dmspdslj
Thread-Topic: dmspdslj
Thread-Index: AQHShd/RHqxdEVbMPEmzo/E7UMFBNg==
Date: Mon, 1 May 2017 16:19:43 -0400
Date: Mon, 13 Feb 2017 09:59:59 +0000
Message-ID:
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
Content-Type: multipart/alternative; boundary=”_000_HE1PR02MB16762FD4DD5824105BEF01BDE6590HE1PR02MB1676eurp_”
MIME-Version: 1.0
____________________________________
IP Address: 5.133.8.66
Hostname: d8066.artnet.gda.pl
IP Address Country: Poland
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 52.2394,
IP Address Longtitude: 21.0362
Organization: Artnet Spolka z ograniczona odpowiedzialnoscia
ISP: Artnet Spolka z ograniczona odpowiedzialnoscia

5.133.8.66 resolves to d8066.artnet.gda.pl.
The following A records are set to 5.133.8.66:
ns2.jobclingy.science
__________________________________________________
IP Address: 23.111.159.66
Hostname: 23-111-159-66.static.hvvc.us
IP Address Country: United States
IP Continent: North America
IP Address City Location: Tampa
IP Address Region: Florida
IP Address Latitude: 27.9987,
IP Address Longtitude: -82.5156
Organization: Hivelocity Ventures Corp
ISP: NOC4Hosts
23.111.159.66 resolves to 23-111-159-66.static.hvvc.us.
The following A records are set to 23.111.159.66:
makecooldesigns.com,
ns1.dropboxbusinessaccount.com,
ns2.dropboxbusinessaccount.com

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1432882qkd;
Mon, 1 May 2017 08:59:32 -0700 (PDT)
X-Received: by 10.37.215.1 with SMTP id o1mr21102598ybg.79.1493654372200;
Mon, 01 May 2017 08:59:32 -0700 (PDT)
Return-Path:
Received: from makecooldesigns.com (23-111-159-66.static.hvvc.us. [23.111.159.66])
by mx.google.com with ESMTP id k6si5289297ywc.426.2017.05.01.08.59.32
for
Mon, 01 May 2017 08:59:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of j4@gdsfg.league1.onmicrosoft.com designates 23.111.159.66 as permitted sender) client-ip=23.111.159.66;
Authentication-Results: mx.google.com;
dkim=pass header.i=@cPG6Joez0CQx.onmicrosoft.com;
spf=pass (google.com: domain of j4@gdsfg.league1.onmicrosoft.com designates 23.111.159.66 as permitted sender) smtp.mailfrom=J4@gdsfg.league1.onmicrosoft.com;
dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=fed.cookisbook.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cPG6Joez0CQx.onmicrosoft.com; s=selector1-cPG6Joez0CQx-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=letsAkbKFYfmP8ooIOjp4WkXtUV5rMEpzqO4R2D2Nw8=;
b=TYlD8vJAQcGWrjxxnTPH/z9jvItdF9TXXNT80jviD6M23y36L6cSGSL6gvmj1j5FmNz9WLhUZEcQvqoXQH5h98AiAgpWGSNnxazfdMoPC3NF5TjIQHosEPng+JvaLIr3X8M4k780QWxxJiALoVeUVGxUS1av6h/lDjmoS6dvKZQ=
MIME-Version: 1.0
Content-Type: text/html; charset=”UTF-8″
Sender:
From: “[?]KIDS.Live.Safe[?]”
Subject: [?] Public Notice[?]:
Sex[?]Offender[?] Alert
Subject: kidstbreply
Date: Mon, 01 May 2017 11:59:30 -0400 (EDT)
Date: Mon, 13 Mar 2017 11:42:32 +0000
Reply-To:
Message-ID:
_______________________________________________________
Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1440067qkd;
Mon, 1 May 2017 09:15:09 -0700 (PDT)
X-Received: by 10.25.204.67 with SMTP id c64mr7665027lfg.107.1493655309688;
Mon, 01 May 2017 09:15:09 -0700 (PDT)
Return-Path:
Received: from yx0-approach.jobclingy.science (d8066.artnet.gda.pl. [5.133.8.66])
by mx.google.com with ESMTPS id h12si9607742ljh.142.2017.05.01.09.15.09
for
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 01 May 2017 09:15:09 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of admin@d42061.artnet.gda.pl designates 5.133.8.66 as permitted sender) client-ip=5.133.8.66;
Authentication-Results: mx.google.com;
dkim=pass header.i=@Oobat.onmicrosoft.com;
spf=pass (google.com: best guess record for domain of admin@d42061.artnet.gda.pl designates 5.133.8.66 as permitted sender) smtp.mailfrom=admin@d42061.artnet.gda.pl
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Oobat.onmicrosoft.com; s=selector1-Oobat-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=8etUyRmX56bddBWyQdIsJQmgZuP6IDW87YzQh2VXBVA=; b=MyF8osbwlGBPN662oC+H4yFAHgdOl/BNa1QmowUg6ZVr4Jj+Kn+Xkq0ULEyqv5NEeMjLERiPEp4e7WkyM8bhAI7/PZhPOhLtFj5ITR73YR2F2sNIalqqwfdg11uAMavKbPZcEqqbTjRjiWLfH3KkVMPoPrA/dSR7hiwz4yLurxM=
MIME-Version: 1.0
From: Federal Tax Settlement
Subject: IRS Fresh Start Tax Program.
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=”ASCII”
To:
Sender:
Date: 01 May 2017 15:58
Date: Mon, 1 May 2017 11:57:25 +0000
Message-ID:
___________________________________________________
IP Address: 23.111.159.66
Hostname: 23-111-159-66.static.hvvc.us
IP Address Country: United States
IP Continent: North America
IP Address City Location: Tampa
IP Address Region: Florida
IP Address Latitude: 27.9987,
IP Address Longtitude: -82.5156
Organization: Hivelocity Ventures Corp
ISP: NOC4Hosts

23.111.159.66 resolves to 23-111-159-66.static.hvvc.us.

The following A records are set to 23.111.159.66:
makecooldesigns.com,
ns1.dropboxbusinessaccount.com,
ns2.dropboxbusinessaccount.com

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1323075qkd;
Mon, 1 May 2017 04:05:43 -0700 (PDT)
X-Received: by 10.13.239.7 with SMTP id y7mr21120314ywe.113.1493636743026;
Mon, 01 May 2017 04:05:43 -0700 (PDT)
Return-Path:
Received: from makecooldesigns.com (23-111-159-66.static.hvvc.us. [23.111.159.66])
by mx.google.com with ESMTP id h4si1262835ybc.24.2017.05.01.04.05.42
for
Mon, 01 May 2017 04:05:43 -0700 (PDT)
Received-SPF: pass (google.com: domain of j4@gdsfg.league1.onmicrosoft.com designates 23.111.159.66 as permitted sender) client-ip=23.111.159.66;
Authentication-Results: mx.google.com;
dkim=pass header.i=@BBwA8De3lsEO.onmicrosoft.com;
spf=pass (google.com: domain of j4@gdsfg.league1.onmicrosoft.com designates 23.111.159.66 as permitted sender) smtp.mailfrom=J4@gdsfg.league1.onmicrosoft.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=BBwA8De3lsEO.onmicrosoft.com; s=selector1-BBwA8De3lsEO-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=rZJnzZSjdVRW08L7VYXeK8XBhDzUbF9qOT50Brn7K+c=;
b=nda8TPVHP22F7vqa3mB/jeAOd+Zfn/Zp5oQv9iJcS1DQfBFcABs6a4v5KMAkUpW3YxipS0uWobJrLZakA0KBPAEti0X6xOf1r1fCw1L67xA4RJhGcGzTusI7afLX+8Es6lF8JScJ14+YYmK+PvkNBafpx6Ngobodl1CNbRO3Xl8=
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”_000_VI1PR03MB1869DA9D3BC258A48F623035FB3D0VI1PR03MB1869eurp_”
Sender:
From: “[?]Open[?]Immediately[?]”
Subject: [?] AMAZON [?] _has–a_biig-surprise-for [?] you.[?]
Subject: sdfsdf
Date: Mon, 01 May 2017 07:05:39 -0400 (EDT)
Date: Wed, 22 Mar 2017 10:59:08 +0000
Message-ID:
__________________________________________________________
IP Address: 69.64.32.115
Hostname: dragon424.dedicatedpanel.com
IP Address Country: United States
IP Continent: North America
IP Address City Location: Saint Louis
IP Address Region: Missouri
IP Address Latitude: 38.6312,
IP Address Longtitude: -90.1922
Organization: HEG US
ISP: HEG US

The following A records are set to 69.64.32.115:
ns1.countydark.com,
ns1.sharedfirm.net

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1293876qkd;
Mon, 1 May 2017 02:26:54 -0700 (PDT)
X-Received: by 10.36.65.193 with SMTP id b62mr22621636itd.104.1493630814354;
Mon, 01 May 2017 02:26:54 -0700 (PDT)
Return-Path:
Received: from mta1a2.mail.zillow.com (dragon424.dedicatedpanel.com. [69.64.32.115])
by mx.google.com with ESMTP id i184si13455956ioi.48.2017.05.01.02.26.53
for
Mon, 01 May 2017 02:26:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of info-oatz@gdsfg.league1.onmicrosoft.com designates 69.64.32.115 as permitted sender) client-ip=69.64.32.115;
Authentication-Results: mx.google.com;
dkim=pass header.i=@smartPathern.onmicrosoft.com;
spf=pass (google.com: domain of info-oatz@gdsfg.league1.onmicrosoft.com designates 69.64.32.115 as permitted sender) smtp.mailfrom=info-OAtZ@gdsfg.league1.onmicrosoft.com
Date: Mon, 1 May 2017 10:26:53 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smartPathern.onmicrosoft.com; s=selector1-smartPathern-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=7nCIRjG5IMZop2tI59Tn0a+E5j9d6N0XC73nRxvgVes=;
b=vMgi2iIWMCrIewzXyzM7B5y3HTBeDdERtryiKlp2s0P3TOQ4r7eddGW52dycSS3SiAmHBoTPt+C8KlgJ8NWQUGHiC2N655lzI3ZVoQ2+RuXeauEjhgb52TvxjN8S7Y6bffApwc/uW3Oqa2nuljY00mgysQX81ybhsV+/vN0Nq6I=
MIME-Version: 1.0
From: Federal-Grant-Help
Subject: Government Grants Available for those who qualify
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=”ASCII”
Message-ID:
To: Undisclosed recipients:;
Return-Path: ste1@smartpathern.onmicrosoft.com
Date: Tue, 11 Apr 2017 15:10:33 +0000
___________________________________________
IP Address: 66.59.15.95
Hostname: me-ss2-ampavk.mailengine1.com
IP Address Country: United States
IP Continent: North America
IP Address City Location: Sacramento
IP Address Region: California
IP Address Latitude: 38.5831,
IP Address Longtitude: -121.4921
Organization: EZ Publishing
ISP: EZ Publishing

66.59.15.95 resolves to me-ss2-ampavk.mailengine1.com

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1254261qkd;
Mon, 1 May 2017 00:02:36 -0700 (PDT)
X-Received: by 10.98.67.8 with SMTP id q8mr25608293pfa.67.1493622156903;
Mon, 01 May 2017 00:02:36 -0700 (PDT)
Return-Path:
Received: from me-ss2-ampavk.mailengine1.com (me-ss2-ampavk.mailengine1.com. [66.59.15.95])
by mx.google.com with ESMTPS id e28si1250346plj.30.2017.05.01.00.02.36
for
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 01 May 2017 00:02:36 -0700 (PDT)
Received-SPF: pass (google.com: domain of bouncer@me-ss2-ampavk.mailengine1.com designates 66.59.15.95 as permitted sender) client-ip=66.59.15.95;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of bouncer@me-ss2-ampavk.mailengine1.com designates 66.59.15.95 as permitted sender) smtp.mailfrom=bouncer@me-ss2-ampavk.mailengine1.com
Received: by me-ss2-ampavk.mailengine1.com (PowerMTA(TM) v3.5r15sb7) id h0reoo0jql4s for ; Mon, 1 May 2017 00:00:09 -0700 (envelope-from )
Content-Type: multipart/alternative; boundary=”_———-=_1073964459106330″
MIME-Version: 1.0
X-Mailer: StreamSend2 – 394751
X-Mailer-Version: 2.0
X-Mailer-Environment: production
X-Report-Abuse-At: abuse@streamsend.com
X-Report-Abuse-Info: It is important to please include full email headers in the report
X-rpcampaign: StreamSend28845959
X-Streamsend2id: 394751+1+9348771+28845959+me-ss2-ampavk.mailengine1.com
List-Unsubscribe:
Date: Mon, 01 May 2017 00:00:05 -0700
From: Tina Foster
To:
Subject: Your Resume
Message-ID:
________________________________________________________________________
IP Address: 216.244.76.116
Hostname: thefew.regulateemissions.net
IP Address Country: United States
IP Continent: North America
IP Address City Location: Seattle
IP Address Region: Washington
IP Address Latitude: 47.4891,
IP Address Longtitude: -122.2908
Organization: Wowrack.com
ISP: Wowrack.com

216.244.76.116 resolves to thefew.regulateemissions.net_
Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1234254qkd;
Sun, 30 Apr 2017 22:41:41 -0700 (PDT)
X-Received: by 10.80.195.24 with SMTP id a24mr18885387edb.44.1493617301171;
Sun, 30 Apr 2017 22:41:41 -0700 (PDT)
Return-Path:
Received: from chelton.championedvirtues.com (chelton.championedvirtues.com. [62.112.10.121])
by mx.google.com with ESMTP id l26si15089585edf.303.2017.04.30.22.41.41
for
Sun, 30 Apr 2017 22:41:41 -0700 (PDT)
Received-SPF: fail (google.com: domain of return@drfranz.com does not designate 62.112.10.121 as permitted sender) client-ip=62.112.10.121;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of return@drfranz.com does not designate 62.112.10.121 as permitted sender) smtp.mailfrom=return@drfranz.com
Received: from s.okazik.pl (s.okazik.pl. 216.244.76.116)
List-Unsubscribe:
From: “F﹡ᴄᴋғʀɪᴇɴᴅPʜᴏᴛᴏ[?]”
Date: Mon, 01 May 2017 01:41:37 -0400 (EDT)
Subject: [?]New’Photos[?]f.r.o.m:[?]Your-F.*.c.k.b.u.d.d.y[?]
To:
Message-Id:
Content-Type: text/html; charset=utf-8.
Reply-to:

_________________________________________________________

IP Address: 5.133.11.179
Hostname: d11179.artnet.gda.pl
IP Address Country: Poland
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 52.2394,
IP Address Longtitude: 21.0362
Organization: Artnet Spolka z ograniczona odpowiedzialnoscia
ISP: Artnet Spolka z ograniczona odpowiedzialnoscia

5.133.11.179 resolves to d11179.artnet.gda.pl.

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1204087qkd;
Sun, 30 Apr 2017 20:19:45 -0700 (PDT)
X-Received: by 10.25.21.210 with SMTP id 79mr8166264lfv.161.1493608784930;
Sun, 30 Apr 2017 20:19:44 -0700 (PDT)
Return-Path:
Received: from thaw.ontoolsstat.com (d11179.artnet.gda.pl. [5.133.11.179])
by mx.google.com with ESMTP id 77si7871815lfu.77.2017.04.30.20.19.44
for
Sun, 30 Apr 2017 20:19:44 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of info@d11179.artnet.gda.pl designates 5.133.11.179 as permitted sender) client-ip=5.133.11.179;
Authentication-Results: mx.google.com;
dkim=pass header.i=@trustsender.onmicrosoft.com;
spf=pass (google.com: best guess record for domain of info@d11179.artnet.gda.pl designates 5.133.11.179 as permitted sender) smtp.mailfrom=info@d11179.artnet.gda.pl
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trustsender.onmicrosoft.com; s=selector1-trustsender-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=/XNOLJyX0oH3BkPl83q5nJyJyezbSNMJO+efZogZ5NU=; b=QBoxICBZx2H6dv1hzZwZwP9fR+mNDa8qyTiVGRsdu9pzF8g7USHpy57FxdzXIrG47Gms3AB3gLuVf6eXtGuu0kWw9fBy5krWAEoVRbpmzb5CjMzkJ1kHs7w/OPve7eri1PRXW1vqpbWukHlaNaLymQC1HeFxitkl32CduHz6du0=
Content-Type: text/html; charset=”utf-8″
Content-Transfer-Encoding: base64
From: Enhancer
Sender:
Subject: Will she wait or has she found a bigger dick already?
Date: Sun, 30 Apr 2017 23:19:42 -0400
Date: Sun, 30 Apr 2017 12:02:39 -0400
MIME-Version: 1.0
To: Undisclosed recipients:;
Message-ID:
_________________________________________________
IP Address: 5.133.11.179
Hostname: d11179.artnet.gda.pl
IP Address Country: Poland
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 52.2394,
IP Address Longtitude: 21.0362
Organization: Artnet Spolka z ograniczona odpowiedzialnoscia
ISP: Artnet Spolka z ograniczona odpowiedzialnoscia

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1204087qkd;
Sun, 30 Apr 2017 20:19:45 -0700 (PDT)
X-Received: by 10.25.21.210 with SMTP id 79mr8166264lfv.161.1493608784930;
Sun, 30 Apr 2017 20:19:44 -0700 (PDT)
Return-Path:
Received: from thaw.ontoolsstat.com (d11179.artnet.gda.pl. [5.133.11.179])
by mx.google.com with ESMTP id 77si7871815lfu.77.2017.04.30.20.19.44
for
Sun, 30 Apr 2017 20:19:44 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of info@d11179.artnet.gda.pl designates 5.133.11.179 as permitted sender) client-ip=5.133.11.179;
Authentication-Results: mx.google.com;
dkim=pass header.i=@trustsender.onmicrosoft.com;
spf=pass (google.com: best guess record for domain of info@d11179.artnet.gda.pl designates 5.133.11.179 as permitted sender) smtp.mailfrom=info@d11179.artnet.gda.pl
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trustsender.onmicrosoft.com; s=selector1-trustsender-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/XNOLJyX0oH3BkPl83q5nJyJyezbSNMJO+efZogZ5NU=;
b=QBoxICBZx2H6dv1hzZwZwP9fR+mNDa8qyTiVGRsdu9pzF8g7USHpy57FxdzXIrG47Gms3AB3gLuVf6eXtGuu0kWw9fBy5krWAEoVRbpmzb5CjMzkJ1kHs7w/OPve7eri1PRXW1vqpbWukHlaNaLymQC1HeFxitkl32CduHz6du0=
Content-Type: text/html; charset=”utf-8″
Content-Transfer-Encoding: base64
From: Enhancer
Sender:
Subject: Will she wait or has she found a bigger dick already?
Date: Sun, 30 Apr 2017 23:19:42 -0400
Date: Sun, 30 Apr 2017 12:02:39 -0400
MIME-Version: 1.0
To: Undisclosed recipients:;
Message-ID:
__________________________________________
IP Address: 5.179.192.130
Hostname: 5-179-192-130.dynamixhost.com
IP Address Country: France
IP Continent: Europe
IP Address City Location:
IP Address Region:
IP Address Latitude: 48.8582,
IP Address Longtitude: 2.3387
Organization: Dynamix Network Sarl
ISP: Dynamix Network Sarl

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp960237qkd;
Sun, 30 Apr 2017 03:34:55 -0700 (PDT)
X-Received: by 10.223.162.150 with SMTP id s22mr7271134wra.88.1493548495573;
Sun, 30 Apr 2017 03:34:55 -0700 (PDT)
Return-Path:
Received: from ondrought.com (5-179-192-130.dynamixhost.com. [5.179.192.130])
by mx.google.com with ESMTPS id d32si5932663wma.84.2017.04.30.03.34.55
for
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sun, 30 Apr 2017 03:34:55 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of admin@nx2015.dynamixhost.com designates 5.179.192.130 as permitted sender) client-ip=5.179.192.130;
Authentication-Results: mx.google.com;
dkim=pass header.i=@Oobat.onmicrosoft.com;
spf=pass (google.com: best guess record for domain of admin@nx2015.dynamixhost.com designates 5.179.192.130 as permitted sender) smtp.mailfrom=admin@nx2015.dynamixhost.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Oobat.onmicrosoft.com; s=selector1-sightbeat-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=1bDM6f2oSeLYcJAfLr6XphVD4lXj788f1ddQ0z/hfIM=; b=AGuo01RH38XJaYit/d9f0mpmAXWl8UIQX2JgcpZojdtBrrwYjUORwweEY2jvT0LDRcD/oYUMH0LYe7jR4+0Fr5aHlR0Zkfe/Y6jQ+mzpfBwBgVv3LoJj+1Kjq4RShbcpnQdS0rv6G63BU9E4jPthpHSMThkxkDFpJAt5ipi5nZc=
Content-Type: text/html; charset=”ASCII”
Content-Transfer-Encoding: base64
Sender:
From: XT808 Tactical
Subject: Forget Guns…Try This Free
Date: Sun, 30 Apr 2017 10:03:33 -0600
MIME-Version: 1.0
Message-ID:

Address lookup

canonical name :sightbeat.com
aliases
addresses 8.29.129.75
Domain Whois record

Queried whois.internic.net with “dom sightbeat.com”…

Domain Name: SIGHTBEAT.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Name Server: NS1.SIGHTBEAT.COM
Name Server: NS2.SIGHTBEAT.COM

Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Updated Date: 08-mar-2017
Creation Date: 20-jan-2016
Expiration Date: 20-jan-2018

Last update of whois database: Tue, 02 May 2017 07:32:29 GMT
For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.enom.com with “sightbeat.com”…

Domain Name: SIGHTBEAT.COM
Registry Domain ID: 1995903539_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2016-12-22T04:25:08.00Z
Creation Date: 2016-01-20T18:59:00.00Z
Registrar Registration Expiration Date: 2018-01-20T18:59:35.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited

Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Fax: +51.17057182
Registrant Email: A89EC5B09CE640299EC790CB13EDEAEC.PROTECT@WHOISGUARD.COM

Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: A89EC5B09CE640299EC790CB13EDEAEC.PROTECT@WHOISGUARD.COM

Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Email: A89EC5B09CE640299EC790CB13EDEAEC.PROTECT@WHOISGUARD.COM

Name Server: NS1.SIGHTBEAT.COM
Name Server: NS2.SIGHTBEAT.COM

DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2016-12-22T04:25:08.00Z <<<
______________________________________
IP Address: 54.240.10.89
Hostname: a10-89.smtp-out.amazonses.com
IP Address Country: United States
IP Continent: North America
IP Address City Location: Seattle
IP Address Region: Washington
IP Address Latitude: 47.5839,
IP Address Longtitude: -122.2995
Organization: Amazon.com
ISP: Amazon Technologies

Delivered-To:
Received: by 10.55.141.194 with SMTP id p185csp1168902qkd;
Sun, 30 Apr 2017 17:32:15 -0700 (PDT)
X-Received: by 10.55.79.211 with SMTP id d202mr17932438qkb.298.1493598735111;
Sun, 30 Apr 2017 17:32:15 -0700 (PDT)
Return-Path:
Received: from a10-89.smtp-out.amazonses.com (a10-89.smtp-out.amazonses.com. [54.240.10.89])
by mx.google.com with ESMTPS id w19si12528681qtc.89.2017.04.30.17.32.14
for
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sun, 30 Apr 2017 17:32:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of 0100015bc16c07d8-c5b2cb19-47fd-48e9-b09a-9d9b7af3b523-000000@amazonses.com designates 54.240.10.89 as permitted sender) client-ip=54.240.10.89;
Authentication-Results: mx.google.com;
dkim=pass header.i=@selecttvmail.com;
dkim=pass header.i=@amazonses.com;
spf=pass (google.com: domain of 0100015bc16c07d8-c5b2cb19-47fd-48e9-b09a-9d9b7af3b523-000000@amazonses.com designates 54.240.10.89 as permitted sender) smtp.mailfrom=0100015bc16c07d8-c5b2cb19-47fd-48e9-b09a-9d9b7af3b523-000000@amazonses.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=qfhy457v54udsxkmyzzsaje3gw26kr6k; d=selecttvmail.com; t=1493598734; h=Content-Type:MIME-Version:Date:Subject:From:Reply-To:Message-ID:List-Unsubscribe:List-ID:To;
bh=0haeecp9yOjJ6MyoR4LWB4bzqMeSKcZEibMR/db5yv4=; b=adt+wzwV+gGA/5eRPuzoWAO50CpAt2oTzMBmFN7C1UEdimK3qZWQ2qqlYcUYrO5s +td7rofz8tOlcTIl91lju0Uh6mykVJY2CHWAEAWfKpOK2o5rrqjKw3fH26ucevonez+ XiEtIueK7IL0tI7uWVE8lRm/2uLO33TzPWEQj/dw=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1493598734; h=Content-Type:MIME-Version:Date:Subject:From:Reply-To:Message-ID:List-Unsubscribe:List-ID:To:Feedback-ID; bh=0haeecp9yOjJ6MyoR4LWB4bzqMeSKcZEibMR/db5yv4=;
b=GrVp8YFcEjKhBaVq0VEpczoCLfRMWXYkYTi3CjgJGB2KmX2ZnL+EXSQIxpAtaH1j LicATNkmCBcLi6J+LOtlpcOxOyv6s5EPCLsomhI7xnS61tQdhG8C6WMFDgYzs2ftznp BZEYEKmT96EKq+bAfjdYESDBoE83CyPYB5ldoH5U=
Content-Type: multipart/alternative; boundary=”————000107060209080605040605″
MIME-Version: 1.0
Date: Mon, 1 May 2017 00:32:14 +0000
Subject: Upgrade Notice for
From: Action Required
Reply-To: Action Required
X-FBL: 1_124_7415_0_61677234353840676D61696C2E636F6D
Message-ID:
List-Unsubscribe:
List-ID:
To:
X-SES-Outgoing: 2017.05.01-54.240.10.89
Feedback-ID: 1.us-east-1.QwgOg7ebo5tlE7qJ9fhBJRy3rghJLu/EjQjguPqxVOA=:AmazonSES

Address lookup
canonical name :selecttvmail.com
aliases
addresses 52.45.130.163
54.88.10.37
Domain Whois record

Queried whois.internic.net with “dom selecttvmail.com”…

Domain Name: SELECTTVMAIL.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Name Server: NS-1274.AWSDNS-31.ORG
Name Server: NS-1744.AWSDNS-26.CO.UK
Name Server: NS-507.AWSDNS-63.COM
Name Server: NS-550.AWSDNS-04.NET
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Updated Date: 02-mar-2017
Creation Date: 04-nov-2013
Expiration Date: 04-nov-2017

Last update of whois database: Tue, 02 May 2017 07:46:10 GMT
For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.enom.com with “selecttvmail.com”…

Domain Name: SELECTTVMAIL.COM
Registry Domain ID: 1834075641_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2016-11-07T06:16:37.00Z
Creation Date: 2013-11-04T00:54:29.00Z
Registrar Registration Expiration Date: 2017-11-04T00:54:29.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited

Registry Registrant ID:
Registrant Name: WILLIAM MOBLEY
Registrant Organization: NEXTELLIGENCE INC.
Registrant Street: 5850 TG LEE BLVD
Registrant Street: #300
Registrant City: ORLANDO
Registrant State/Province: FL
Registrant Postal Code: 32822
Registrant Country: US
Registrant Phone: +1.4072406380
Registrant Email: BMOBLEY@NEXTELLIGENCE.COM

Registry Admin ID:
Admin Name: WILLIAM MOBLEY
Admin Organization: NEXTELLIGENCE INC.
Admin Street: 5850 TG LEE BLVD
Admin Street: #300
Admin City: ORLANDO
Admin State/Province: FL
Admin Postal Code: 32822
Admin Country: US
Admin Phone: +1.4072406380
Admin Email: BMOBLEY@NEXTELLIGENCE.COM

Registry Tech ID:
Tech Name: WILLIAM MOBLEY
Tech Organization: NEXTELLIGENCE INC.
Tech Street: 5850 TG LEE BLVD
Tech Street: #300
Tech City: ORLANDO
Tech State/Province: FL
Tech Postal Code: 32822
Tech Country: US
Tech Phone: +1.4072406380
Tech Email: BMOBLEY@NEXTELLIGENCE.COM

Name Server: NS-1274.AWSDNS-31.ORG
Name Server: NS-1744.AWSDNS-26.CO.UK
Name Server: NS-507.AWSDNS-63.COM
Name Server: NS-550.AWSDNS-04.NET
DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2016-11-07T06:16:37.00Z <<<
Network Whois record

Queried whois.arin.net with "n 52.45.130.163"…

NetRange: 52.32.0.0 – 52.63.255.255
CIDR: 52.32.0.0/11
NetName: AT-88-Z
NetHandle: NET-52-32-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2015-09-02
Updated: 2015-09-02
Ref: https://whois.arin.net/rest/net/NET-52-32-0-0-1

OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2017-01-28
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://whois.arin.net/rest/org/AT-88-Z

WhoIs Drugstore24.co

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

drugstore24

The following A records are set to 212.83.191.105:

  1. davayidinahuy.com
  2. ns1.davayidinahuy.com
  3. ns1.pharmacy-24h-online.com
  4. ns1.search7info.com
  5. ns2.davayidinahuy.com
  6. ns2.pharmacy-24h-online.com
  7. ns2.search7info.com
  8. pharmacy-24h-online.com
  9. privettds.com
  10. search7info.com

Address lookup
canonical name drugstore24.co
aliases
addresses 212.83.191.105
Domain Whois record

Queried whois.nic.co with “drugstore24.co”…

Domain Name: DRUGSTORE24.CO
Domain ID: D63117759-CO
Sponsoring Registrar: TODAYNIC.COM, INC.
Sponsoring Registrar IANA ID: 697
Registrar URL (registration services): http://www.now.cn
Domain Status: clientTransferProhibited
Variant: DRUGSTORE24.CO

Registrant ID: TOD-44057883

Registrant Name: Anatoliy A Kazancev
Registrant Organization: Private Person
Registrant Address1: ul. Komsomolskaya 31/24
Registrant City: Perm
Registrant State/Province: NA
Registrant Postal Code: 617407
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +380.0663049899
Registrant Facsimile Number: +380.0663049899
Registrant Email: adultmas@yandex.ru

Administrative Contact ID: TOD-44057884
Administrative Contact Name: Anatoliy A Kazancev
Administrative Contact Organization: Private Person
Administrative Contact Address1: ul. Komsomolskaya 31/24
Administrative Contact City: Perm
Administrative Contact State/Province: NA
Administrative Contact Postal Code: 617407
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +380.0663049899
Administrative Contact Facsimile Number: +380.0663049899
Administrative Contact Email: adultmas@yandex.ru

Billing Contact ID: TOD-44057886
Billing Contact Name: Anatoliy A Kazancev
Billing Contact Organization: Private Person
Billing Contact Address1: ul. Komsomolskaya 31/24
Billing Contact City: Perm
Billing Contact State/Province: NA
Billing Contact Postal Code: 617407
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +380.0663049899
Billing Contact Facsimile Number: +380.0663049899
Billing Contact Email: adultmas@yandex.ru

Technical Contact ID: TOD-44057885
Technical Contact Name: Anatoliy A Kazancev
Technical Contact Organization: Private Person
Technical Contact Address1: ul. Komsomolskaya 31/24
Technical Contact City: Perm
Technical Contact State/Province: NA
Technical Contact Postal Code: 617407
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +380.0663049899
Technical Contact Facsimile Number: +380.0663049899
Technical Contact Email: adultmas@yandex.ru
Name Server: NS3.FASTVPS.RU
Name Server: NS4.FASTVPS.RU
Name Server: NS2.FASTVPS.RU
Name Server: DNS.FASTDNS24.COM
Created by Registrar: TODAYNIC.COM, INC.
Last Updated by Registrar: TODAYNIC.COM, INC.
Domain Registration Date: Fri Nov 21 19:48:34 GMT 2014
Domain Expiration Date: Fri Nov 20 23:59:59 GMT 2015
Domain Last Updated Date: Fri Dec 19 11:23:47 GMT 2014
DNSSEC: false

Whois database was last updated on: Sat Feb 21 21:07:44 GMT 2015 <<<<
Network Whois record

Queried whois.ripe.net with “-B 212.83.191.105
Information related to ‘212.83.160.0 – 212.83.191.255’
Abuse contact for ‘212.83.160.0 – 212.83.191.255’ is ‘abuse@proxad.net’

inetnum: 212.83.160.0 – 212.83.191.255
netname: FRWOL
descr: Iliad
country: FR
admin-c: NR1053-RIPE
admin-c: IENT-RIPE
tech-c: NR1053-RIPE
tech-c: IENT-RIPE
status: ASSIGNED PA
mnt-by: MNT-TISCALIFR
mnt-lower: MNT-TISCALIFR
changed: ripe-mnt@net.tiscali.fr 20030415
changed: ripe-mnt@net.tiscali.fr 20031217
changed: nlimage+ripe@online.net 20121102
remarks: Tag: Int
source: RIPE

role: Iliad Entreprises Admin and Tech Contact
remarks: Iliad Entreprises is an hosting and services provider
address: 8, rue de la ville l’eveque
address: 75008 Paris
address: France
phone: +33 1 73 50 20 00
fax-no: +33 1 73 50 29 01
e-mail: ripe@online.net
notify: ripe@online.net
abuse-mailbox: abuse@iliad-entreprises.fr
tech-c: NLI-RIPE
nic-hdl: IENT-RIPE
mnt-by: ONLINE-NET-MNT
changed: ripe@online.net 20140304
source: RIPE

person: Nicolas Rostagni
address: Free SAS
address: 8, rue de ville l’Eveque
address: 75008 Paris
address: France
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
e-mail: nrostagni@corp.free.fr
nic-hdl: NR1053-RIPE
mnt-by: MNT-TISCALIFR
source: RIPE
changed: nicolas.rostagni@alice-france.fr 20101006

% Information related to ‘212.83.160.0/19AS12876’

route: 212.83.160.0/19
descr: Online SAS
descr: Paris, France
origin: AS12876
mnt-by: MNT-TISCALIFR
source: RIPE
changed: fgander@corp.free.Fr 20130802

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)
DNS records

name class type data time to live
drugstore24.co IN SOA
server: ns3.fastvps.ru
email: support@fastvps.ru
serial: 2014121901
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
drugstore24.co IN NS dns.fastdns24.com 3600s (01:00:00)
drugstore24.co IN NS ns2.fastvps.ru 3600s (01:00:00)
drugstore24.co IN NS ns3.fastvps.ru 3600s (01:00:00)
drugstore24.co IN NS ns4.fastvps.ru 3600s (01:00:00)
drugstore24.co IN MX
preference: 10
exchange: mail.drugstore24.co
3600s (01:00:00)
drugstore24.co IN A 212.83.191.105 3600s (01:00:00)
105.191.83.212.in-addr.arpa IN PTR 212-83-191-105.rev.poneytelecom.eu 86400s (1.00:00:00)
191.83.212.in-addr.arpa IN SOA
server: nsa.online.net
email: dnsmaster@te-dns.net
serial: 2015021701
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400

pedro@fastestrades.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on pedro@fastestrades.com and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

nappy@bestjobhome.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

The nameserver ns1.brazil-partner.com manages the following domains :

1. 21thjob.com
2. bestjobhome.com
3. brazil-partner.com
4. canadsjob.com
5. perfectcanadas.com
6. searchusajob.com

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on nappy@bestjobhome.com and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

canadsjob.com ~ perfectcanadas.com


Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

:
The list below contains all domains that are mapped to the nameserver ns1.brazil-partner.com. This nameserver translates the domain name to the correct IP address. It implements the name-service protocol.

The nameserver ns1.brazil-partner.com manages the following domains :

1. 21thjob.com
2. bestjobhome.com
3. brazil-partner.com
4. canadsjob.com
5. perfectcanadas.com
6. searchusajob.com

Address lookup

lookup failed perfectcanadas.com
A temporary error occurred during the lookup. Trying again may succeed.
Domain Whois record

Queried whois.internic.net with “dom perfectcanadas.com”…

Domain Name: PERFECTCANADAS.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.BRAZIL-PARTNER.COM
Name Server: NS2.BRAZIL-PARTNER.COM
Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Updated Date: 20-jan-2015
Creation Date: 20-jan-2015
Expiration Date: 20-jan-2016

Last update of whois database: Fri, 06 Feb 2015 01:21:09 GMT
Queried whois.bizcn.com with “perfectcanadas.com”…

Domain name: perfectcanadas.com
Registry Domain ID: 1896981364_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com

Updated Date: 2015-01-20T07:41:35Z

Creation Date: 2015-01-20T07:41:37Z

Registrar Registration Expiration Date: 2016-01-20T07:41:37Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited

Registry Registrant ID:
Registrant Name: Patsy Zink
Registrant Organization: Patsy W. Zink
Registrant Street: 4094 Robinson Court
Registrant City: Saginaw
Registrant State/Province: MI
Registrant Postal Code: 48601
Registrant Country: us
Registrant Phone: +1.9894810471
Registrant Fax: +1.9894810471

Registrant Email: info@perfectcanadas.com

Registry Admin ID:
Admin Name: Patsy Zink
Admin Organization: Patsy W. Zink
Admin Street: 4094 Robinson Court
Admin City: Saginaw
Admin State/Province: MI
Admin Postal Code: 48601
Admin Country: us
Admin Phone: +1.9894810471
Admin Fax: +1.9894810471
Admin Email: info@perfectcanadas.com

Registry Tech ID:
Tech Name: Patsy Zink
Tech Organization: Patsy W. Zink
Tech Street: 4094 Robinson Court
Tech City: Saginaw
Tech State/Province: MI
Tech Postal Code: 48601
Tech Country: us
Tech Phone: +1.9894810471
Tech Fax: +1.9894810471
Tech Email: info@perfectcanadas.com

Name Server: ns1.brazil-partner.com
Name Server: ns2.brazil-partner.com
DNSSEC: unsignedDelegation
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-02-06T01:21:18Z

Elliott Associates Paris|Tokyo – www.elliott-associates.com

This came to US via our contact US page. The WHOIS ADDRESS is below.

Email: anonymous@scamfraudalert.orgscamalert4
Website: http://www.elliott-associates.com
Comment: Broker warning! Found this on Youtube:
This is a boiler room broker on the phone, works for Elliott Associates Paris – Tokyo.
Stay away!

https://www.youtube.com/watch?v=0aJvrKS4om8

Address lookup
canonical name http://www.elliott-associates.com

aliases
addresses:200.63.44.31
Domain Whois record

Queried whois.internic.net with “dom elliott-associates.com”…

Domain Name: ELLIOTT-ASSOCIATES.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.PANAMASERVER.COM
Name Server: NS2.PANAMASERVER.COM
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Updated Date: 21-oct-2014
Creation Date: 13-dec-2000
Expiration Date: 13-dec-2015

Last update of whois database: Wed, 04 Feb 2015 20:45:48 GMT
Queried whois.enom.com with “elliott-associates.com”…

Domain Name: ELLIOTT-ASSOCIATES.COM
Registry Domain ID: 47958264_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2013-05-21T02:09:52.00Z
Creation Date: 2000-12-13T15:49:00.00Z
Registrar Registration Expiration Date: 2015-12-13T15:49:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Fax: +51.17057182
Registrant Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM

Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM

Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM
Name Server: NS1.PANAMASERVER.COM
Name Server: NS2.PANAMASERVER.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2013-05-21T02:09:52.00Z
Network Whois record

Queried whois.lacnic.net with “200.63.44.31”…

inetnum: 200.63.44.0/25
status: reallocated
owner: Panamaserver.com
ownerid: PA-PANA3-LACNIC
responsible: CH Group
address: Panama, Panama, 0,
address: 00000 – Panama – PA
country: PA
phone: +507 8322443 []
owner-c: MAC30
tech-c: MAC30
abuse-c: MAC30
created: 20081022
changed: 20081022
inetnum-up: 200.63.40/21

nic-hdl: MAC30
person: Manuel I. Cabrera Ch.
e-mail: ABUSE@PANAMASERVER.COM
address: Bella Vista Calle 39A y Ave Cuba, 0,
address: 0000 – Panama – PA
country: PA
phone: +507 8321932 []
created: 20071004
changed: 20140930

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

DNS records

DNS query for 31.44.63.200.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.elliott-associates.com IN A 200.63.44.31 86400s (1.00:00:00)
elliott-associates.com IN A 200.63.44.31 86400s (1.00:00:00)
elliott-associates.com IN MX
preference: 15
exchange: mail2.neomailbox.net
86400s (1.00:00:00)
elliott-associates.com IN MX
preference: 10
exchange: mail1.neomailbox.net
86400s (1.00:00:00)
elliott-associates.com IN SOA
server: ns1.panamaserver.com
email: dominios@panamaserver.com
serial: 2014082001
refresh: 3600
retry: 300
expire: 86400
minimum ttl: 86400
86400s (1.00:00:00)
elliott-associates.com IN NS ns1.panamaserver.com 86400s (1.00:00:00)
elliott-associates.com IN NS ns2.panamaserver.com 86400s (1.00:00:00)

ave@uhomejob.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on ave@uhomejob.com and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department