Today there are a number (4%) of Eva pharmacy domains which are being assigned invalid non-routable IP addresses. They are in the range 198.18.1.1-254.
Addresses starting with "198.18." or "198.19." are set aside for use in isolated laboratory networks used for benchmarking and performance testing. They should never appear on the Internet and if you see Internet traffic using these addresses, they are being used without permission.
Each domain is rapidly switching from one address in that range to another. This is caused by a rogue domain name server at 188.8.131.52 owned by the Kazakhtelecom Network Information Center.
50.0% of queries will be returned by 184.108.40.206 (ns1.medicaltableteshop.ru)
medicaltableteshop.ru. 600 IN A 220.127.116.11
50.0% of queries will be returned by 18.104.22.168 (ns2.medicaltableteshop.ru)
medicaltableteshop.ru. 0 IN A 198.18.1.251
50.0% of queries will be returned by 22.214.171.124 (ns1.hsbiwjcs.ru)
hsbiwjcs.ru. 600 IN A 126.96.36.199
50.0% of queries will be returned by 188.8.131.52 (ns2.hsbiwjcs.ru)
hsbiwjcs.ru. 0 IN A 198.18.1.180
Examples of 120 domains that will be failing to load half the time:
- Code: Select all