Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Address lookup

canonical name pharmacyyy.com
aliases
addresses 24.232.33.129
Domain Whois record

Queried whois.internic.net with “dom pharmacyyy.com”…

Domain Name: PHARMACYYY.COM
Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
Whois Server: whois.ename.com
Referral URL: http://www.ename.com
Name Server: NS1.GREATAGEHEALTH.COM
Name Server: NS2.PHARMSSTOREJOBS.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 12-may-2009
Creation Date: 20-sep-2008
Expiration Date: 20-sep-2009

>>> Last update of whois database: Tue, 19 May 2009 07:42:56 UTC <<<
Queried whois.ename.com with “pharmacyyy.com”…

Domain Name : pharmacyyy.com
Registrant Contact Information :
王淼
王淼
zyiekjdd@yahoo.com.cn
成都抚琴西路12号, 610000
tel: +86 89898799
fax: +86 89898799

Administrative Contact Information :
王淼
王淼
zyiekjdd@yahoo.com.cn
成都抚琴西路12号, 610000
tel: +86 89898799
fax: +86 89898799

Technical Contact Information :
王淼
王淼
zyiekjdd@yahoo.com.cn
成都抚琴西路12号, 610000
tel: +86 89898799
fax: +86 89898799

Billing Contact Information :
王淼
王淼
zyiekjdd@yahoo.com.cn
成都抚琴西路12号, 610000
tel: +86 89898799
fax: +86 89898799

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.greatagehealth.com
ns2.pharmsstorejobs.net

Registration Date :2008-9-21
Expiration Date : 2009-9-21

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.lacnic.net with “24.232.33.129”…

inetnum: 24.232.33.128/25
status: reallocated
owner: Cablevision S.A.
ownerid: AR-CASA24-LACNIC
address: Bonpland 1745
address: Buenos Aires, Capital Federal 1414
country: AR
owner-c: PL319-ARIN
created: 19990929
changed: 19990929
inetnum-up: 24.232/16
source: ARIN-HISTORIC

nic-hdl: PL319-ARIN
person: Patricio Latini
e-mail: platini@FIBERTEL.COM.AR
address: Fibertel TCI
address: Bonpland 1745
address: Buenos Aires, Capital Federal 1414
country: AR
phone: 54-11-4778-6567
source: ARIN-HISTORIC

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

DNS records

name class type data time to live
pharmacyyy.com IN SOA
server: ns1.pharmacyyy.com
email: admin.pharmacyyy.com
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
pharmacyyy.com IN NS ns1.pharmacyyy.com 600s (00:10:00)
pharmacyyy.com IN NS ns3.pharmacyyy.com 600s (00:10:00)
pharmacyyy.com IN NS ns2.pharmacyyy.com 600s (00:10:00)
pharmacyyy.com IN MX
preference: 10
exchange: mail.pharmacyyy.com
600s (00:10:00)
pharmacyyy.com IN A 24.232.33.129 600s (00:10:00)
129.33.232.24.in-addr.arpa IN PTR ol129-33.fibertel.com.ar 3600s (01:00:00)

 

Associated Harvesters
62.163.32.108 | H
62.195.253.27 | H
82.49.177.232 | HS
89.35.131.56 | H

 

 

 

 

Sample Spam URLs & Keywords Posted From 66.45.252.82

Domain: http://www.pillhh.com URL: http://www.pillhh.com/ Keywords: xenical online

Domain: http://www.pillhh.com URL: http://www.pillhh.com/ Keywords: http://www.pillhh.com/

Domain: http://www.pillgg.com URL: http://www.pillgg.com/ Keywords: hydrocodone ibs

Domain: http://www.pillgg.com URL: http://www.pillgg.com/ Keywords: http://www.pillgg.com/

Domain: http://www.ffdoctor.com URL: http://www.ffdoctor.com/ Keywords: order xanax online

Domain: http://www.ffdoctor.com URL: http://www.ffdoctor.com/ Keywords: http://www.ffdoctor.com/

Domain: http://www.pharmacyyy.com URL: http://www.pharmacyyy.com/ Keywords: order xanax online

Domain: http://www.pharmacyyy.com URL: http://www.pharmacyyy.com/ Keywords: http://www.pharmacyyy.com/

Domain: http://www.rrpill.com URL: http://www.rrpill.com/ Keywords: buy vicodin

Domain: http://www.rrpill.com URL: http://www.rrpill.com/ Keywords: http://www.rrpill.com/

Domain: http://www.doctoruu.com URL: http://www.doctoruu.com/ Keywords: buy soma

Domain: http://www.doctoruu.com URL: http://www.doctoruu.com/ Keywords: http://www.doctoruu.com/

Domain: http://www.bepharmacy.com URL: http://www.bepharmacy.com/ Keywords: tramadol on line

Domain: http://www.bepharmacy.com URL: http://www.bepharmacy.com/ Keywords: http://www.bepharmacy.com/

Domain: http://www.doctorbe.com URL: http://www.doctorbe.com/ Keywords: hydrocodone overnight

66.45.252.82’s User Agent Strings

Lynx 8.99

Example Messages Sent From 66.45.252.82

From: Info Team <service@listerhill.com> Subject: Dear Customer,

From: Microsoft.com <security@microsoft.com> Subject: Microsoft Windows – Security Fix

From: nationalagency11@netscape.net <nationalagency15@ne Subject: You are a Lottery winner.

From: nedlotto <sjjgs@walla.com> Subject: YOUR EMAIL HAS WON A LOTERY    http://www.projecthoneypot.org/ip_66.45.252.82