Spam Alert
 
 Full Report: /Canadian_Pharmacy_Geocities_redirect_spam173198.html
 
 Changed status to confirmed spam.IP Converted: 116.123.47.80

dword = 1954230096
hex1 = 0x747b2f50
hex2 = 0x74.0x7b.0x2f.0x50
oct = 0164.0173.057.0120
View CIDR AS9318 Report: http://www.cidr-report.org/cgi-bin/as-report?as=9318

"9318 | KR | apnic | 1998-06-03 | HANARO-AS Hanaro Telecom Inc."<br />
Extended information for AS9318:
State/Province:
Country: kr
Responsible Domain: hananet.net
Abuse Email: abuse@hananet.net
Criminal Evidence

** REDIRECTOR **

This site is using redirections to access a hidden criminal site. See
http://www.spamtrackers.eu/wiki/index.php?title=Geocities
http://www.spamtrackers.hk/wiki/index.php?title=Geocities for China
See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=Redirections
See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=Redirections
or from China: http://www.spamtrackers.hk/wiki/index.php?title=Redirections

Please remove all redirections to sites that continue to abuse your terms of service. This site is using hidden redirection using java script. Use it to identify all similar redirections


** TARGET SITE **

See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Parmacy
or from China: http://www.spamtrackers.hk/wiki/index.php?title=Canadian_Parmacy
See the McAfee Site Advisor information at http://siteadvisor.com/sites/earthexact.com


> XIN NET aka SINO-I.COM
REGISTRATION OF THE WEB SITE: earthexact.com
ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold


> XIN NET aka SINO-I.COM
REGISTRATION OF THE NAME SERVERS on RORFAST.COM
These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them:
ns1.rorfast.com. 58.242.152.80
ns2.rorfast.com. 58.83.8.99
ns3.rorfast.com. 221.122.64.14
ns4.rorfast.com. 116.199.157.11

ACTION: To suspend these name servers successfully, follow these steps.
1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61.
2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold


> $HANANET
IP ADDRESS OF HOST: 116.123.47.80
The IP address of this criminal site is within your allocated address space.
ACTION: Black-hole the route to this address to prevent further criminal activity

All times are GMT