Clicky
Last visit was: Sat Jul 05, 2014 4:03 pm
It is currently Sat Jul 05, 2014 4:03 pm

RX-Partners / DFG DutyFree Power Group Ltd


All times are UTC - 5 hours [ DST ]


 [ 6 posts ] 
Author Message
 PostPosted: Sat Feb 16, 2013 2:18 pm   
Spam Reporter
User avatar

Joined: Thu May 20, 2010 12:29 am
Posts: 126
> 386-2437714
Indian Railway ticket number?
hXXp://irctc-pnr.com/status/3862437x/

Hopefully, I'm on topic.

I've been working on this off and on for awhile now
It's... overwhelming. Follow the money :)

I've been getting many 'secure-*.com' domains which root back up to: stimul-media.com

aka: RX-Partners
who IMO, are aka: RXprofits.com though I'm not entirely sure.

But I am sure that RX-Partners is aka:
"DFG DutyFree Power Group Ltd"
dfpowergroup.com - Duty free alcohol, tobacco, cosmetics, perfumes
affiliate sign-up site: directnetpartners.com
example phone numbers (for "duty free"):
1-347-7081664
1-888-2465608

Some sites, like this alcohol template: alcohol-sell.com
advertises in the Flash banner the domain: test-mall.com
see: shop.test-mall.com
payment processor: secure-paypage.com
which references a support email link pointing to: salezhelp.com
http://bgp.he.net/dns/salezhelp.com#_whois
references: stimul-media.com

ed-tablet-danmark.com
payment processor: secure-checkout-page.com
customer support: order-cs.com

I'm concentrating on the non-pharma domains ATM
Will post a new thread on WOT when I get more screen captures and possibly more domains to add to my list (current count: 119)

_________________
Opto, ergo sum


Top
 Profile  
 PostPosted: Sat Feb 16, 2013 5:00 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
[Topic moved to separate thread]

Reference information on RX-Partners is at
http://www.xylibox.com/2011/11/rx-partnersbiz-huge-pharma-affiliate.html

Spamtrackers has some informations at
http://spamtrackers.eu/wiki/index.php/Trusted_Tabs

No doubt you will find hits from a Google search on phone numbers - "HAVE A QUESTION? CALL US: Toll Free: 1-888-2465608 Internationl: 1-347-7081664"

dutyfreecigarettes.net.tc [dead]
cigarettes2home.com
buyanelectroniccigarette.com

Secure checkouts and Help centers - all DNS = custns.com
checkout-page.com *
customer-ed.com
eu-customer.com
salez-help.com
secure-transaction-page.com *
securebilling-page.com *
securebillpage.com
securepaypage.biz
securepaypage.com *
yoursecurebilling.com *

* Some of those are DDOS protected under Prolexic

Keep posting more information as you find it.


Top
 Profile WWW  
 PostPosted: Sun Feb 17, 2013 12:00 pm   
Spam Reporter
User avatar

Joined: Thu May 20, 2010 12:29 am
Posts: 126
@ Red Dwarf
Thank you for moving this into it's own thread; apologies for previous off-topic placement.


RX-Partners:
  • [RU] Vitaly Petrov aka: Peter Clement
  • [DE] Jason Mercer

salezhelp.com
http://bgp.he.net/dns/salezhelp.com#_whois
Code:
owner-organization: STIMUL-MEDIA.COM
owner-fname: Vitaly
owner-lname: Petrov
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: [email protected]

Alias used is:
http://bgp.he.net/dns/custns.com#_whois
Code:
Peter Clement
438-490 Mile End Road
London
E1 4PE
UK

this address is a student living complex according to:
http://www.foreignstudents.com/accommodation/listings/london-mile-end-scape-east

digifuel.net
http://bgp.he.net/dns/digifuel.net#_whois
Code:
Jason Mercer
Stadionvej 2
Aarup, na 5548
Germany
[email protected]
+49 64452321

_________________
Opto, ergo sum


Top
 Profile  
 PostPosted: Sun Feb 17, 2013 3:42 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
When adopting a false name, it is a common practice to choose a famous person. Then the chosen name will be lost in the clutter of search results. This method invalidates Google tracking.
http://en.wikipedia.org/wiki/Vitaly_Petrov


Top
 Profile WWW  
 PostPosted: Sun Feb 17, 2013 7:49 pm   
Spam Reporter
User avatar

Joined: Thu May 20, 2010 12:29 am
Posts: 126
Quote:
adopting a false name

I understand that, another example:
http://bgp.he.net/dns/securebilling-page.com#_whois
domain registered in 2010

Peter Clement was
Deputy Director CIA - Intelligence for Analytic Programs
http://www.c-spanvideo.org/peterclement

_________________
Opto, ergo sum


Top
 Profile  
 PostPosted: Mon Feb 18, 2013 6:43 pm   
Spam Reporter
User avatar

Joined: Thu May 20, 2010 12:29 am
Posts: 126
WOT topic created
https://www.mywot.com/forum/31870-duty- ... nd-tobacco

_________________
Opto, ergo sum


Top
 Profile  
 [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot], Wayback machine and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008