I received a spam for some pharmaceutical site (xxxhttp://www.onlinemedsforless.com) 1 hour ago.
Listen to this though...
Did a who is on the domain & it's private, of course. However the server (VPS possibly) IP ( 160.36.43.59) is running from a university campus, xxxhttp://www.utk.edu/
I've double and triple checked this & it comes back in the campus IP block range.
Just checked it and the pharmaceutical site is now down. Maybe a network issue then again maybe its been pulled.
If pulled wouldn't want to be in the shoes of the person who put it there
Seems to be connected to India, maybe an exchange student, or was an exchange student!
Cheers
Dave