Read All About This at Symantec Corp.

Quote:

These People Are Dangerous FOLKS SEIZE ALL ASSOCIATION and DO NOT DO BUSINESS WITH THEM THE WORLD AROUND THEM IS CLOSING AND THEY ARE BECOMING DESPERATE (Definition of Internet Crime)Definition of Internet Crime Rapcool.com on 2008-03-02 - Domain History

Domain: rapcool.com - Domain History
Cache Date: 2008-03-02
Registrar: ESTDOMAINS, INC.
Registrant Search: Click on an email address we found in this whois record
to see which other domains the registrant is associated with:
contact@privacyprotect.org

Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: Welcome to EstDomains

Domain Name: RAPCOOL.COM

Registrant:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Creation Date: 29-Feb-2008
Expiration Date: 28-Feb-2009

Domain servers in listed order:
ns2.rapcool.com
ns1.rapcool.com

Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Status:ACTIVE

Pharmacy Express
Pharmacy Express (referred to in this document as PE) is a very large and sophisticated spamming operation believed to be operated by the Russian criminal spammer Leo Kuvayev, and several of his colleagues and affiliates. These sites have been spamvertised relentlessly to several million email addresses since at least 2004, possibly even longer. Mr. Kuvayev is wanted for several international charges which he has never answered for, including money laundering, child porn and of course illegal spamming. This spam operation has numerous ties to several large-scale Windows viruses and Trojan infections dating back numerous years. The botnets alleged to be behind this operation handle everything from domain registration to zombie infection to probably website hosting and "order" processing. Nobody has ever claimed to have received anything upon ordering, so this series of websites is actually considered a credit card fraud operation very similar to Alex Polyakov's My Canadian Pharmacy.

As is the case with My Canadian Pharmacy, numerous pharmacy oversight organizations have fielded several thousand complaints per year regarding this illegal operation. They and numerous law enforcement agencies continue to investigate as much as possible regarding the spamming, website setup, DNS setup and (alleged) order processing of this spam gang. This investigation is ongoing.

Pharmacy Express sites stopped being spam during the middle portion of 2007, but resurfaced with a completely new design in Feb. 2008.

Current Discussion
The newer version of Pharmacy Express sites started to be spammed in late-February of 2008 and as mentioned above they feature a totally different design.

2008 spam runs relied on Yahoo search redirects to penetrate spam whitelists.

Spamming in 2007 for domains like lodrx.com, tedrx.com and similar, targeted Google's Gmail customers. Most were trapped by Gmail's spam detection and diverted to the spam folder.

You may follow a discussion on Pharmacy Express at the Fight Back forum.

Malware Distribution

Updated 22:05 (GMT) 20/04/08
Added:
65.247.182.200
abapharm.net
babyandtoddlerville.com
bb.congtouzailai.net
bbs-porno.org
begundal.info
bengaliforums.co.uk
bit.mtsou.com
brn1337.t35.com
casrc.nl
cbrosracing.com
centerfornonviolence.com
centrogassystem.com
209.205.196.16
claytimestudio.com
deyaa.net
dokoiku.jp
downloadbf.com
driveprotector.com
e-games.clanweb.cz
emailnotices.com
geocities.com
gg.haoliuliang.com
h1.ripway.com
hantschel.info
idowebhosting.net
ieras.ru
ihmmank.net
ini7.com
iulian.pokol.hu
lacomarcaatlantica.com.ar
marguis.es
mn.wudizhongguo.com
need-this.info
ngktech.uni.cc
nybap.org
omegadm.co.uk
onlinesoftwarexchange.net
openlinkdirectory.org
quotationsforlife.com
serial.axspace.com
child-hbf.info
sexe-non-censure.schiavetta-hbf.info
simoneleitao.com
softportalfree.com
superpharmact.com
suwarjono.net
teenssex.info
trofey.ru
twistyou.com
waktu.pokol.hu
we5search.com
welkominfo.co.za
windsornw.com
www.freewebtown.com
www.hzzhebei.com
www.mmf.selcuk.edu.tr
www.phanom.ac.th
www.whxld.com
xuxulio.iespana.es
xx.getenjoyment.net
zinforma.com
zip-tla.info
----------------------------------
Updated 00:14 (GMT) 19/04/08
Added:
209.205.196.16
66.232.113.80
85.255.116.206
84.32.137.157
2400teen.com
6buckhardcore.net
au.ex.ac.uk
bajigur.net
best-porncollection.com
blackid.org
drugsforsale.us
dzipas.lt
flirtythirties.com
flycodecs.com
flyvideonetwork.com
gatece.com
gateds.com
geocities.com
getadultaccess.com
gooqle-analytics.com
gukmin.or.kr
ihmmank.net
jezlo.com
knnu87c.info
krigel.borec.cz
lacomarcaatlantica.com.ar
managedns404.com
marguis.es
myflydirect.com
mysticmysfits.com
networklab.info
onlinesoftwarexchange.net
pcr.ac.id
plus-porno.net
sacredword.net
safetyalertings.com
secureinstruct.com
softhomepage.com
stiri-mondene.com
systel.ru
tugzip.com
value-one.com
vikings-wanne.de
www.cdpm3.com
www.freewebtown.com
----------------------------------
Updated 01:18 (GMT) 18/04/08
Added:
64.185.237.35
212.77.102.100
84.32.137.157
aculonudod.org
body-and-soul-discovery.com
china1819.cn
chrystylcoiffure.com
debime.net
firesearch.sc
free-hard-porn-vids.com
hot18-codec2008.com
imperialfutar.hu
intervarioclick.com
jsfeed.info
mafna.info
medisana.co.kr
ns2.musictut.net
ofiget.ru
pinkkitty21.com
porn-youtube-08.net
pornsearch.spb.ru
privacy.pcprivacytool.com
scan.malwarrior.com
search11.info
setdevi.net
showsworld.com
skunk1982.altervista.org
snipem.com
videofoxnews.com
videoporn.e-pornstuff.com
www-*******-hotties-biz.discoversexuality.com
www.motociclismo.pt
www.vsm.gov.tr
xdengue02.iespana.es
xxxladyworld.com
zentds.info
----------------------------------
Updated 19:59 (GMT) 17/04/08
Added:
140.119.80.185
212.115.13.140
bes.org.tr
blackticket.net
dart.prophp.org
deddi.uni.cc
flwcoupler.com
gifr.fr
idowebhosting.net
mrhard.com
mybabysbirth.eclub.lv
mysonshomework.eclub.lv
phi.or.kr
qsystemsonline.biz
simoneleitao.com
swfutility.com
tugzip.com
virtualshopindaia.com
visitesantacatarina.com.br
welkominfo.co.za
wingsart.ru
www.thenationalcouncil.com
zesch.net
----------------------------------
Updated 11:50 (GMT) 17/04/08
Added:
195.93.219.206
208.66.195.71
10wip.com
111.33bbb.com
amrc.com.tw
antispywarehelp.com
bnb-chambresdhotes.ch
ccc.52gol.com
cooprr.com
drl-id.com
findarticlesabout.com
garcon***.com
grandiralecole.fr
greytauctions.org
heimkinopage.de
iulian.pokol.hu
nt-users.com
operative.cc
pop2web.be
studio-wave.com
suttas.com
ujiko2u.com
websoftcodecdriver.com
westminsterakron.com
westphoto.org
wg.37586.net
www.735666.com
www.pro-antivirus-spy.com
xoomer.alice.it
yu.8s7.net
----------------------------------
Updated 01:59 (GMT) 16/04/08
Added:
141.84.238.34
208.72.169.15
208.72.169.54
58.65.239.42
60.190.118.244
86.122.38.195
89.188.16.50
91.142.64.98
2-xxx.info
3duraka.info
51yes.ocry.com
74.cncz.us
antispywaremaster.com
antiviruspcsuite.com
asiangirlporn.net
baobaolong.net
bestautotop.com
bugbug.land.ru
c.wacsy.com
caatadgouk.com
carousuario.front.ru
cartaovoxcard.mail15.su
cben.net
ccc.52gol.com
cdpuvbhfzz.com
cgd-k25.org
memebot.com
cologne-fight-crew.de
contacy.info
dolcevido.com
fastmediaservice.com
ferramentantivirus.com
fewfwe.com
findfast.be
g0tcha.fileave.com
gate4traff.net
geg07.biz
gicia.info
globalsoftwareagreement.com
holeshot.co.nz
hujashka.com
hyair.cn
imperialfutar.hu
jx.llzjz.cn
k.kkcc.us
wokaixin.com
komatsudj.info
lacomarcaatlantica.com.ar
likil.info
lm.9cdn.com
myspybot.org
prettyblondywoman.com
primosearch.com
rpgnet.com
sacredword.net
southernlivingfurnitureusa.com
systel.ru
talentsupplier.com
voena.net
westminsterakron.com
www.enricco.cl
www.etr.com.cn
http://www.google.com.id.patriotyzme...a.72195e6.info
www.phanom.ac.th
x.791224.com
----------------------------------
Updated 00:24 (GMT) 15/04/08
Added:
208.72.168.176
59.60.154.154
63.219.178.162
203.124.22.143
81.2.197.14
91.142.64.98
aaasss.biz
aceperform.890m.com
agrocaes.com.br
all1info.biz
alltojesus.org
wyfdc.com
bathroomrenovationsillawarra.com
beregs.info
gribokk.com
call-att.com
currentsession.net
dkgerman.dankook.ac.kr
virusheat.com
dlkownz.com
boyxx.us
dzheker.biz
987255.com
ecf.cl
elurbano.com
elveon.tripod.com
emptyhearts.net
freesearchtut.com
geocities.com
google-analyze.com
gukmin.or.kr
himer.info
imageforum.ru
jinzlia.com
lamers.za.pl
lokmanch.com
lookformilf.com
mariosilva.freehostia.com
nameserver11.net
netexpert.hu
365workers.com
adulthostsolutions.net
mywowdns.com
apoka1ipses.info
dnsname.info
panel911.com
pixpictures.com
r***led***lem.com
samuraildr.cn
scholes-it.com
superhairsalon.com
tapki.cn
tecumsehscoutcabin.org
themetropoliscorporation.com
tra***on.cn
updatemysettings.net
uzver.org
vip.lygkd.net
avpkav.com
wet*****teenies.com
www.hairbyerin.net
www.phanom.ac.th
wwwtop5.com
xxxtubeforfree.com
----------------------------------
Updated 23:30 (GMT) 13/04/08
Added:
201.218.250.19
222.73.247.202
59.60.152.138
59.60.154.154
64.28.184.180
77.96.245.57
78.109.21.42
85.255.116.206
2.trojan8.com
5pro.biz
a.8q8.biz:666
adult-freetube-8.com
adultcodecstars.com
akamai.downloadv3.com
aloni.memebot.com
antivirprotect.com
b.987255.com
best-pool.com
blacksun-sl.cn
cc.search.results.trust.view.html.in.intrust.cc
coolsearch.biz
drugforhealth.com
feedk.blog3k.net
flipcjip.net
jmsoftgi.com
lestenns.org.ru
p0llo.com
pinguina.cn
plussizedesign.com
porno-sos.com
pracowniacms.nazwa.pl
sexicodecstars.com
superhottestvideos.com
vipantiscanner.com
wagemax.com
windowzscanner.com
www.dir4you.org
www.f9game.com
www.freepower.com.cn
www.hotnetsoft.com
www.makecash.org
www.miarakure.com
www.yourxxxblog.biz
xepace.cn
zuxmash.info
----------------------------------
Updated 02:55 (GMT) 13/04/08
Added:
210.53.203.220
218.75.91.254
220.181.20.7
222.74.128.45
24.99.123.79
58.53.128.37
60.191.129.150
60.191.129.162
60.191.187.15
08usonline.com
2.sogou-3.cn
555abc.com
59gua.com
antispywareexpert.com
batva.net
bdxz1.go.8866.org
bdxz5.go.3322.org
biggetonething.cn
bngamer.com
cds5fir.com
chowtaifook.com
ctf2.com
ebabyart.co.kr
fk38.cn
gasperoblue.cn
giftapplys.cn
gribontruck.cn
jooopa.com
lidoo.net.cn
limpodrift.cn
livesecuritycenter.com
loveinlive.cn
music.366ent.com
normocock.cn
1srv.org
pekkangrup.com
qq.90356.com.cn
qw18.cn
restcapital.info
stable-cash.com
stusky.com.cn
swfinstrument.com
810810.org
tipacounter.com
cncz.us
w.bmwoo.com
w.cao360.com
winifixer.net
www.521st.cn
www.52m6.com
www.aeroinfo.com.cn
www.hddzzz.com
www.jingchuang.com.cn
www.music100000.cn
www.wensf.net
www.xiangxue.org
www.zhaoyou8.com
xky99.cn
ytsjl.com
zsxz2.region.zhongsou.com
----------------------------------
Updated 19:58 (GMT) 10/04/08
Added:
209.123.8.135
222.170.68.8
58.65.239.42
76.124.142.87
access-adult.net
advancedonlinescanner.com
adwarestopping.com
awebsecuritytool.com
bestpicstgp.info
boardhour.com
clips-video.org
coolsexmovies.net
euroxxxsex.info
flwsolution.com
free-porntube-8.com
freehotpornos.info
freexxxpornworld.info
greatxxxporn.org
images.dosug.nu
justmatureporn.com
*******sshow.us
livefreeporn.info
mature-ladies.us
maturehills.com
milfsites.net
mytraf.info
newsiteinc.net
lutrwpghd.com
sjrbofa.com
orentraff.cn
orthelike.com
privacy-scanner.com
razmarin.net
search.cartaadultmovie.org
secureproservice.com
sexy-nasty-girls.net
sexybrowse.com
sickfiles.com
super-propositions.com
supersameas.com
teens-list.net
thingforyoutoo.cn
uniform.thehotporn.com
webporn.ru
www.complex-programming.biz
www.ffxxii.com
www.trafamore.org
xxxslutworldxxx.com
youngsexnow.net
----------------------------------
Updated 19:55 (GMT) 08/04/08
Added:
122.224.5.16
195.93.219.206
202.75.49.168
58.65.239.42
60.190.118.112
4.9797aiai.com
aaa.wofala.info
ad.haoliuliang.com
bai01.pv123.net
blogs2007salvado.t35.com
cv.faba701.info
cv.fockfock.com
pctutu.com
ff11bloglina.com
ff11free.com
networkporno.net
Page Ranking.749571.com
testinghua.com
update.superrsoft.com
webfreeinfo.org
xo-host.net
--------------------------------

Server Data
Server Type: Apache/2.2.8 (Fedora)
IP Address: 85.255.120.234 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
IP Location Ukraine - Ukraine - Ukrtelegroup Ltd
Response Code: 404
Blacklist Status: Clear
Domain Status: Registered And Active Website


WhoIs Lookup performed by Karen's WhoIs
http://www.karenware.com/

Domain Name: GRIBOKK.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS0.DNSTUT.COM
Name Server: NS1.DNSTUT.COM
Status: clientTransferProhibited
Updated Date: 05-mar-2008
Creation Date: 05-mar-2008
Expiration Date: 05-mar-2009

Last update of whois database: Sun, 20 Apr 2008 10:26:45 UTC

Registrars.
Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com

Domain Name: GRIBOKK.COM

Registrant:
N/A
Robert Carlos robacarlo@yahoo.com
229 E 120th St
New Yourk
New York,10035
US
Tel. +001.2122899168

Creation Date: 05-Mar-2008
Expiration Date: 05-Mar-2009

Domain servers in listed order:
ns1.dnstut.com
ns0.dnstut.com


Administrative Contact:
N/A
Robert Carlos robacarlo@yahoo.com
229 E 120th St
New Yourk
New York,10035
US
Tel. +001.2122899168

Technical Contact:
N/A
Robert Carlos (robacarlo@yahoo.com)
229 E 120th St
New Yourk
New York,10035
US
Tel. +001.2122899168

Billing Contact:
N/A
Robert Carlos robacarlo@yahoo.com
229 E 120th St
New Yourk
New York,10035
US
Tel. +001.2122899168

Status:ACTIVE

Search Results for 85.255.120.234 [reverse DNS - 85.255.120.234-xbox.dedi.inhoster.com]

5 Results for 85.255.120.234 www.Gribokk.com

Website
1. www.6njaga.com
2. www.Fashionlineshow.com
3. www.Gribokk.com
4. www.Jobusiness.org
5. www.Pichere.info