Day: June 29, 2009

Canadian Pharmacy – safe-supplier.com

2 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

safe-supplier

Address lookup

canonical name safe-supplier.com.
aliases http://www.safe-supplier.com
addresses 72.167.131.144

Domain Whois record

Queried whois.internic.net with “dom safe-supplier.com“…

   Domain Name: SAFE-SUPPLIER.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS51.DOMAINCONTROL.COM
   Name Server: NS52.DOMAINCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 29-may-2009
   Creation Date: 15-mar-2007
   Expiration Date: 15-mar-2011

>>> Last update of whois database: Tue, 30 Jun 2009 04:16:27 UTC <<<

Queried whois.enom.com with “safe-supplier.com“…

Visit AboutUs.org for more information about safe-supplier.com
<a href="http://www.aboutus.org/safe-supplier.com">AboutUs: safe-supplier.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: safe-supplier.com

Registrant Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali ()

   Fax:
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Administrative Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Technical Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Status: Locked

Name Servers:
   ns51.domaincontrol.com
   ns52.domaincontrol.com

Creation date: 15 Mar 2007 10:44:00
Expiration date: 15 Mar 2011 10:44:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “72.167.131.144“…

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US

NetRange:   72.167.0.0 - 72.167.255.255
CIDR:       72.167.0.0/16
OriginAS:   AS26496
NetName:    GO-DADDY-SOFTWARE-INC
NetHandle:  NET-72-167-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate:    2007-07-05
Updated:    2008-01-18

RAbuseHandle: ABUSE51-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-480-624-2505
RAbuseEmail:  abuse@godaddy.com 

RNOCHandle: NOC124-ARIN
RNOCName:   Network Operations Center
RNOCPhone:  +1-480-505-8809
RNOCEmail:  noc@godaddy.com 

RTechHandle: NOC124-ARIN
RTechName:   Network Operations Center
RTechPhone:  +1-480-505-8809
RTechEmail:  noc@godaddy.com 

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809
OrgNOCEmail:  noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809
OrgTechEmail:  noc@godaddy.com

# ARIN WHOIS database, last updated 2009-06-29 20:00

DNS records

name class type data time to live
http://www.safe-supplier.com IN CNAME safe-supplier.com 3599s (00:59:59)
safe-supplier.com IN SOA
server: ns51.domaincontrol.com
email: dns.jomax.net
serial: 2009052800
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
safe-supplier.com IN A 72.167.131.144 3600s (01:00:00)
safe-supplier.com IN NS ns51.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN NS ns52.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
safe-supplier.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
144.131.167.72.in-addr.arpa IN PTR p3slh180.shr.phx3.secureserver.net 3600s (01:00:00)

Canadian Pharmacy – www.flattry.com – www.tendereach.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name www.flattry.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241
119.39.238.2

flattery

Domain Whois record

Queried whois.internic.net with “dom flattry.com“…

   Domain Name: FLATTRY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FLATTRY.COM
   Name Server: NS2.FLATTRY.COM
   Name Server: NS3.FLATTRY.COM
   Name Server: NS4.FLATTRY.COM
   Status: clientTransferProhibited
   Updated Date: 23-jun-2009
   Creation Date: 10-jun-2009
   Expiration Date: 10-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:36:22 UTC <<<

Queried whois.onlinenic.com with “flattry.com“…

Registrant:
	 Merido Vallici ad667@safe-mail.net +1.2128843301
	 Merido Vallici
	 4033 po box
	 New York,NY,US 10137

Domain Name:flattry.com
Record last updated at 2009-06-23 07:38:35
Record created on 2009/6/10
Record expired on 2010/6/10

Domain servers in listed order:
	 ns1.flattry.com 	 ns2.flattry.com 

Administrator:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Technical Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Billing Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.flattry.com IN A 60.191.239.153 10800s (03:00:00)
http://www.flattry.com IN A 61.191.191.241 10800s (03:00:00)
http://www.flattry.com IN A 119.39.238.2 10800s (03:00:00)
http://www.flattry.com IN A 203.93.208.86 10800s (03:00:00)
http://www.flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 119.39.238.2 10800s (03:00:00)
flattry.com IN A 203.93.208.86 10800s (03:00:00)
flattry.com IN A 60.191.239.153 10800s (03:00:00)
flattry.com IN A 61.191.191.241 10800s (03:00:00)

— end —

Address lookup

canonical name www.tendereach.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom tendereach.com“…

   Domain Name: TENDEREACH.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.TENDEREACH.COM
   Name Server: NS2.TENDEREACH.COM
   Name Server: NS3.TENDEREACH.COM
   Name Server: NS4.TENDEREACH.COM
   Status: clientTransferProhibited
   Updated Date: 24-jun-2009
   Creation Date: 23-jun-2009
   Expiration Date: 23-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:43:47 UTC <<<

Queried whois.onlinenic.com with “tendereach.com“…

Registrant:
	 Lorenv Cerre ad0@safe-mail.net +1.2138848801
	 Lorenv Cerre
	 4033 po box
	 New York,NY,US 10337

Domain Name:tendereach.com
Record last updated at 2009-06-24 08:21:43
Record created on 2009/6/23
Record expired on 2010/6/23

Domain servers in listed order:
	 ns1.tendereach.com 	 ns2.tendereach.com 

Administrator:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Technical Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Billing Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.tendereach.com IN A 218.75.144.6 10800s (03:00:00)
http://www.tendereach.com IN A 60.191.239.153 10800s (03:00:00)
http://www.tendereach.com IN A 61.191.191.241 10800s (03:00:00)
http://www.tendereach.com IN A 119.39.238.2 10800s (03:00:00)
http://www.tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 119.39.238.2 10800s (03:00:00)
tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 60.191.239.153 10800s (03:00:00)
tendereach.com IN A 61.191.191.241 10800s (03:00:00)
tendereach.com IN A 218.75.144.6 10800s (03:00:00)

Canadian Pharmacy – canadiannetmall.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Canadiannetmall

Address lookup

canonical name canadiannetmall.com.
aliases
addresses 94.76.196.49

Domain Whois record

Queried whois.internic.net with “dom canadiannetmall.com“…

   Domain Name: CANADIANNETMALL.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.CANADIANNETMALL.COM
   Name Server: NS2.CANADIANNETMALL.COM
   Status: clientTransferProhibited
   Updated Date: 23-dec-2008
   Creation Date: 03-mar-2008
   Expiration Date: 03-mar-2010

>>> Last update of whois database:
Mon, 29 Jun 2009 12:10:38 UTC <<<

Queried whois.enom.com with “canadiannetmall.com“…

Visit AboutUs.org for more information about canadiannetmall.com
<a href="http://www.aboutus.org/canadiannetmall.com">AboutUs: canadiannetmall.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: canadiannetmall.com

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.canadiannetmall.com
   ns2.canadiannetmall.com

Creation date: 03 Mar 2008 14:53:00
Expiration date: 03 Mar 2010 14:53:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 94.76.196.49“…

% Information related to '94.76.196.48 - 94.76.196.55'

inetnum:        94.76.196.48 - 94.76.196.55
netname:        Poundhost-3253
descr:          Poundhost customer server
remarks: ##############################################################
remarks:        Please report abuse incidents to abuse@poundhost.com.
remarks:        Messages sent to other contact addresses may not be acted upon.
remarks: ##############################################################
country:        GB
admin-c:        BLO2-RIPE
tech-c:         BLO2-RIPE
status:         ASSIGNED PA
mnt-by:         blueconnex-mnt
mnt-routes:     blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20090114

role:           BlueConnex Ltd Operators
address:        BlueConnex Ltd
address:        BlueSquare House
address:        Priors Way
address:        Maidenhead
address:        Berkshire
address:        SL62HP
remarks:        For abuse please contact abuse@blueconnex.net
phone:          +44 (0)1628 673131
admin-c:        PETE3-RIPE
admin-c:        MM5420-RIPE
admin-c:        ROB153-RIPE
tech-c:         MM5420-RIPE
tech-c:         ROB153-RIPE
mnt-by:         blueconnex-mnt
tech-c:         PETE3-RIPE
nic-hdl:        BLO2-RIPE
changed:        support@pcs-net.com 20081012
source:         RIPE
e-mail:         abuse@blueconnex.net

% Information related to '94.76.192.0/18AS29550'

route:          94.76.192.0/18
descr:          Blueconnex Networks Ltd
origin:         AS29550
remarks:        ***********************************
remarks:        *                                 *
remarks:        * Abuse: abuse@blueconnex.net     *
remarks:        *                                 *
remarks:        * Peering: peering@blueconnex.net *
remarks:        *                                 *
remarks:        ***********************************
mnt-by:         blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20080814

DNS records

name class type data time to live
canadiannetmall.com IN MX
preference: 10
exchange: mail.canadiannetmall.com
14400s (04:00:00)
canadiannetmall.com IN TXT v=spf1 a mx ip4:92.48.119.157 ~all 14400s (04:00:00)
canadiannetmall.com IN SOA
server: ns1.canadiannetmall.com
email: root.canadiannetmall.com
serial: 2008122300
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
canadiannetmall.com IN NS ns2.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN NS ns1.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN A 94.76.196.49 14400s (04:00:00)
49.196.76.94.in-addr.arpa IN PTR 94-76-196-49.static.as29550.net 86400s (1.00:00:00)

— end —

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
80.244.229.67 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
6.5.4.3 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to ScamFraudAlert@gmail.com
date Mon, Jun 29, 2009 at 2:16 AM
subject Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA