vipshost.su is a name server used for pharmacy scams
Evidence of fraud is found at
http://spamtrackers.eu/wiki/index.php/Pharmacy_Express and
http://spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
This is a fraud operated by convicted criminal Leo Kuvayev, who is currently in prison after being found guilty on multiple counts of raping under-age orphans in Russia:
http://spamtrackers.eu/wiki/index.php/Leo_Kuvayev
http://nakedsecurity.sophos.com/2011/05/31/spam-king-kuvayev-child-sex-charges/
The domain name servers registered by the same gang are sponsored by this group of registrars
: IPNIC, INC.
: PAKNIC (PRIVATE) LIMITED
: REGTIME LTD.
REGRU-REG-FID
REGRU-REG-RIPN
Regtime Ltd.
Examples
ns1.dnsoboe.com.ns1.dnsquesti.com. ns1.dnsstep.com. ns1.imerdns.com. ns2.dnsdeadl.su. ns2.hostvds.su. ns2.rbkxhost.su. ns2.vipshost.su. ns1.therhost.com. ns1.xzehost.com. ns2.dnsehost.su. ns2.homehost.su. ns1.althhost.com. ns1.dnsorganiz.com. ns2.dnsmealr.su. ns2.hothosts.ru. ns1.dnssauce.com. ns1.dnsbumpy.com. ns1.dnsruta.com. ns2.dnscub.com. ns2.dnsaustral.su.
As of August 2012, ns2.vipshost.su is maintaining spam domains 89% of the time for use as spamvertised domains in spam messages. See:
http://rss.uribl.com/ns/vipshost_su.html
AND
ns2.vipshost.su is being run by the AS4134 / cndata.com / chinanet.cn.net / ah.cninfo.net / CHINANET-AH network.
www.robtex.com/dns/ns2.vipshost.su.html#graph
http://network-tools.com/default.asp?prog=network&host=ns2.vipshost.su
See here for the poor reputation of the network operations:
www.mywot.com/scorecard/cndata.com
www.mywot.com/scorecard/chinanet.cn.net