WhoIs 89.189.191.95 – warez-free-all

July 3, 2009Leave a comment

Consumer & Business Alert – Stolen Identity!!!!
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

89.189.191.95

Address lookup

canonical name	gw-95.211.ru.
aliases
addresses	89.189.191.95

Domain Whois record

Queried whois.ripn.net with “211.ru“…

warez-free-all.blogspot.com/
Author : Virtualia (IP: 89.189.191.95 , gw-95.211.ru)
E-mail : virt@gmail.com

% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:     211.RU
type:       CORPORATE
nserver:    ns.211.ru. 193.238.131.195
nserver:    ns2.211.ru. 89.189.191.224
state:      REGISTERED, DELEGATED
org:        Ltd. "Siberian Networks"
phone:      +7 383 2209211
phone:      +7 383 2209280
fax-no:     +7 383 2209211
e-mail:     noc@211.ru
registrar:  RUCENTER-REG-RIPN
created:    2004.06.16
paid-till:  2010.06.16
source:     TC-RIPN

Last updated on 2009.07.04 04:54:11 MSK/MSD

Network Whois record

Queried whois.ripe.net with “-B 89.189.191.95“…

% Information related to '89.189.184.0 - 89.189.191.255'

inetnum:        89.189.184.0 - 89.189.191.255
netname:        RU-ISP-SIBNET-NSK-2
descr:          Siberian Networks
country:        RU
admin-c:        SAS-RIPE
tech-c:         SAS-RIPE
status:         ASSIGNED PA
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070301
source:         RIPE

person:         Stanislav A. Svirid
address:        Siberian Networks
address:        21/1, Dachnaya Street
address:        630082, Novosibirsk
address:        Russia
phone:          +7 383 2209280
fax-no:         +7 383 2209211
nic-hdl:        SAS-RIPE
e-mail:         count@211.ru
notify:         count@211.ru
notify:         noc@211.ru
mnt-by:         SIBNET-NSK-MNT
changed:        sva@riss-telecom.ru 20001102
changed:        frolov@riss-telecom.ru 20021218
changed:        count@211.ru 20070322
source:         RIPE

% Information related to '89.189.184.0/21AS34757'

route:          89.189.184.0/21
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070322
source:         RIPE

% Information related to '89.189.176.0/20AS34757'

route:          89.189.176.0/20
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20080328
source:         RIPE

DNS records

name

class

type

data

time to live

gw-95.211.ru

89.189.191.95

43200s

(12:00:00)

211.ru

SOA

server:	ns2.211.ru
email:	noc.211.ru
serial:	2009063002
refresh:	43200
retry:	3600
expire:	1209600
minimum ttl:	86400

43200s

(12:00:00)

211.ru

TXT

v=spf1 ip4:193.238.128.0/22 ip4:89.189.176.0/20 ip4:80.64.168.0/21 ip4:217.106.28.136/30 mx ptr mx:193.238.131.194 ~all

43200s

(12:00:00)

211.ru

193.238.131.200

43200s

(12:00:00)

211.ru

preference:	0
exchange:	mx.211.ru

43200s

(12:00:00)

211.ru

ns.211.ru

43200s

(12:00:00)

211.ru

ns2.211.ru

43200s

(12:00:00)

95.191.189.89.in-addr.arpa

PTR

gw-95.211.ru

Rogue Pharmacy Websites – Pharmacy Checker

July 3, 20092 Comments

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

24hsmeds.com

Amerisur.net

Buyphentermine4u.com

Buypillsonline.biz (“Canadian Pharmacy”)

BuyAmoxilOnline.PillsConcepts.info

Canadapharmacyline.com (“Canadian Pharmacy”)

Canadianmedsworld.com (“Canadian Meds”)

Canadianpharmacyltd.com (“Canadian Pharmacy”)

Cheap-pharmacy.us (“Canadian Health & Care Mail”)

Cod-rx.com

Dragon-rx.com

Eagle-meds.com (“US Drugstore”)

Edfriends.org (“Reliable Meds”)

Getlowdrugs.com (“US Drugstore”)

Gimmepills.com (Canadian Rx Drugs”)

Globalaccessrx.com

Globalrxpharmacy.net

Hyth.us

Lom-5.co.cc

Licensed-Rx.com

Max-pharm.com

Medsranch.com

My-pharm.com

Newcanadianhealthcare.com

Online-the.com/

OvernightMedsDirect.net

Pharmacynorthamerica.com

Pharmtransit.com

Pillzcctop.com (“US HealthCare Inc”)

Qualitygenerics.com

Rx-life.com

Rxpharma24hs.com

Shop.edmedsonline.com (“Canadian Pharmacy”)

Shoprxtoday.com

Thecanadianmeds.com (“Canadian Pharmacy”)

Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)

TrustedMedsMD.com

Us-rx-meds.com

Value-generics.com (“Generic Pharmacy”)

Value-pharm.com

Wholesale-generics.com

Xlpharmacy.com

Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)

Allrxonline.net

ApplyEdPills.info

Atterack.com (“My Canadian Pharmacy”)

Bestedmeds.com (“Canadian Pharmacy”)

Canadianmedsnow.com (“Canadian Pharmacy”)

Canadianpharmdirect.com (“Canadian Pharmacy”)

Canadianpharmacylive.com (“Canadian Family Pharmacy”)

Canapharmstore.com (“Canadian Health Center”)

Cheapviagstarmed.info

Directmedswhere.com (“Canadian Pharmacy”)

Drug-online.org (“Canadian Pharmacy”)

Fit-pharmacy.com

Generic365.com

Getfamilymedicines.com (“Canadian Health & Care Mall”)

Hot-drug.com (“Canadian Rx Drugs”)

Hotgrandpharm.com (“US Drugs”)

Interpill.com

Irontold.com (“Canadian Pharmacy”)

Jusikelsk.com (“US Healthcare, Inc”)

Laicsownsew.com (“World Pharmacy”)

Licensed-meds.com

Mantipu.com_world_drugs.com

Medicaldiscountrx.net

Meds35.com (“My Canadian Pharmacy”)

Medsmaster.com (“Official Medicines”)

Medsworldwidenetwork.com

Miztrust.cn (“My Canadian Pharmacy”)

Nextairsalepharm.com (“Canadian Health & Care Mall”)

Nextbestpharm.com (“My Canadian Pharmacy”)

Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)

Onlinepharmcanada.com (“Official Medicines”)

Ottowadrugs.com (“Canadian Pharmacy”)

Ourglobalpharm.com (“World Pharmacy”)

Pharmasavers.com

Phshuue.com (“U.S. Healthcare, Inc”)

Piromeds.com (“Drug Store”)

Pot-1.co.cc

Pot-7.co.cc

Poispp.com (“My Canadian Pharmacy”)

Premierpharmacy.net

Presidentrx.com

Proovernightpharm.com (“US Drugs”)

Qualitycandianmeds.com (“Canadian Pharmacy”)

Quickeasymed.com

Realairmentablets.com (“US Drugs”)

Rx-pillssshop.com (“Canadian Rx Drugs”)

Rx-toronto.net (“My Canadian Pharmacy”)

Targetpluspharma.com (“Canadian Health Care”)

Topcheappills.com (“Toronto Pharmacy”)

Topratedmedication.com (“Toronto Pharmacy”)

Turkbine.com (“Canadian Healthcare”)

Universallydrugstore.com (“Canadian Pharmacy”)

Viagraorder.org (“Canadian Pharmacy”)

Webdrugs.biz (“Canadian Pharmacy”)

Weekrequire.com (“Canadian Pharmacy”)

Worldshippingmeds.com

PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
Stealing people’s financial information.
Charging a consumer’s credit card without ever sending the purchased product (s).
Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
Selling prescription drugs, whether real or fake, without requiring a prescription.
Not responding to a consumer’s email or phone call after they have ordered a product.
Providing false contact information.
Selling a customer’s personal information to third parties without their consent.
Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.

We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS

On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Health & Care Mall – cheap-pharmacy.us

July 3, 200916 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Company information:
Canadian Health & Care Mall United States
cheap-pharmacy.us

I ordered medication online from this ‘alleged’ Canadian pharmacy. They sent me a follow up email saying they received my order. A few days later, they sent another another email saying my order shipped was shipped out that day.

There is no telephone number listed on their website to call, only an email address to write to. When you try to send a message from their website, it says to verify the anti-spam word text in a box next to the text of your message. But, there is no ‘word’. Consequently, their mail system will not accept your message because you have not typed in the anti-spam word.

I located a phone number for them from another source. My first call was unanswered. My second call was answered by an answering machine with a male voice with a very heavy middle-Eastern accent

I did not receive the ordered medication. My numerous emails, requesting shipment details, were never replied to.

This company is nothing but a SCAM – BEWARE!

Hi,The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal money your.The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

Jonathan Owens jowens@unifiedmarkets.com (current) jowens@unifiedmarket.com (previous) http://www.unifiedmarkets.com (current) http://www.unifiedmarket.com (previous)
640 Grand Ave. Carlsbad
San Diego County CA 92008-2365
1 (760) 730-9864

You can find his foot prints by searching the following keywords;

210-888-9089 – Canadian Pharmacy
845-709-8044 – Bogus university degree
718-524-2096 – Bogus OEM software
support@canadianpharmsupport.com
210 East 59st Street New York,
NY 10021

The good news is that this scammer has extreme hatered

against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency hat if you send a lot of spams to him, he will remove you from his spam databases.

THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!

You will get far less spams!

jowens@unifiedmarkets.com
owensw@unifiedmarkets.com
dmoonfire@unifiedmarkets.com
uminfo@unifiedmarkets.com
dholden@unifiedmarkets.com

Source: Complaintsboard

Address lookup

canonical name	cheap-pharmacy.us.
aliases	http://www.cheap-pharmacy.us
addresses	66.29.77.104

Domain Whois record

Queried whois.nic.us with “cheap-pharmacy.us“…

Domain Name: CHEAP-PHARMACY.US
Domain ID: D12110398-US
Sponsoring Registrar: ENOM, INC.
Registrar URL (registration services): whois.enom.com

Domain Status: ok
Registrant ID: 493A5506065
Registrant Name: Calmes Douglass
Registrant Organization: n/a
Registrant Address1: 4209 West Bertona
Registrant City: Seattle
Registrant State/Province: Washington
Registrant Postal Code: 98199
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +7.9023065253
Registrant Email: support@cheap-pharmacy.us
Registrant Application Purpose: P1
Registrant Nexus Category: C11

Administrative Contact ID: 493A5506065
Administrative Contact Name: Calmes Douglass
Administrative Contact Organization: n/a
Administrative Contact Address1: 4209 West Bertona
Administrative Contact City: Seattle
Administrative Contact State/Province: Washington
Administrative Contact Postal Code: 98199
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +7.9023065253
Administrative Contact Email: support@cheap-pharmacy.us
Administrative Application Purpose: P1
Administrative Nexus Category: C11

Billing Contact ID: 493A5506065
Billing Contact Name: Calmes Douglass
Billing Contact Organization: n/a
Billing Contact Address1: 4209 West Bertona
Billing Contact City: Seattle
Billing Contact State/Province: Washington
Billing Contact Postal Code: 98199
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +7.9023065253
Billing Contact Email: support@cheap-pharmacy.us
Billing Application Purpose: P1
Billing Nexus Category: C11

Technical Contact ID: 493A5506065
Technical Contact Name: Calmes Douglass
Technical Contact Organization: n/a
Technical Contact Address1: 4209 West Bertona
Technical Contact City: Seattle
Technical Contact State/Province: Washington
Technical Contact Postal Code: 98199
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +7.9023065253
Technical Contact Email: support@cheap-pharmacy.us
Technical Application Purpose: P1
Technical Nexus Category: C11

Name Server: NS1.CHEAP-PHARMACY.US
Name Server: NS2.CHEAP-PHARMACY.US

Created by Registrar: ESTDOMAINS, INC.
Last Updated by Registrar: ENOM, INC.
Last Transferred Date: Tue Nov 04 16:05:36 GMT 2008
Domain Registration Date: Sun Mar 11 21:03:05 GMT 2007
Domain Expiration Date: Thu Mar 10 23:59:59 GMT 2016
Domain Last Updated Date: Wed Nov 05 01:50:21 GMT 2008

Whois database was last updated on: Fri Jul 03 09:40:07 GMT 2009

Network Whois record

Queried whois.arin.net with “66.29.77.104“…

OrgName: Net Access Corporation
OrgID: NAC
Address: 9 Wing Drive
City: Cedar Knolls
StateProv: NJ
PostalCode: 07927
Country: US

ReferralServer: rwhois://whois.nac.net:43

NetRange: 66.29.0.0 – 66.29.127.255
CIDR: 66.29.0.0/17
OriginAS: AS8001
NetName: NAC-NETBLK07
NetHandle: NET-66-29-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NAC.NET
NameServer: NS2.NAC.NET
Comment: Additional Information Available via whois.nac.net
RegDate: 2005-04-15
Updated: 2007-09-18

RAbuseHandle: ABUSE156-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-800-638-6336
RAbuseEmail: abuse@nac.net

RNOCHandle: NOC270-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-973-590-5050
RNOCEmail: network@nac.net

RTechHandle: ZN77-ARIN
RTechName: Legal Department
RTechPhone: +1-800-638-6336
RTechEmail: legal@nac.net

OrgAbuseHandle: ABUSE156-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-638-6336
OrgAbuseEmail: abuse@nac.net

OrgNOCHandle: NOC270-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-973-590-5050
OrgNOCEmail: network@nac.net

OrgTechHandle: AR97-ARIN
OrgTechName: Rubenstein, Alex
OrgTechPhone: +1-973-590-5101
OrgTechEmail: alex@nac.net

# ARIN WHOIS database, last updated 2009-07-02 20:00

DNS records

name

class

type

data

time to live

http://www.cheap-pharmacy.us

CNAME

cheap-pharmacy.us

10289s

(02:51:29)

cheap-pharmacy.us

SOA

server:	ns1.cheap-pharmacy.us
email:
serial:	1229273885
refresh:	300
retry:	300
expire:	300
minimum ttl:	300

2560s

(00:42:40)

cheap-pharmacy.us

ns1.cheap-pharmacy.us

259200s

(3.00:00:00)

cheap-pharmacy.us

ns2.cheap-pharmacy.us

259200s

(3.00:00:00)

cheap-pharmacy.us

preference:	0
exchange:	mx1.cheap-pharmacy.us

86400s

(1.00:00:00)

cheap-pharmacy.us

66.29.77.104

86400s

(1.00:00:00)

104.77.29.66.in-addr.arpa

SOA

server:	ns3.2dayhost.com
email:	hostmaster.104.77.29.66.in-addr.arpa
serial:	1246007999
refresh:	16384
retry:	2048
expire:	1048576
minimum ttl:	2560

2560s

(00:42:40)

104.77.29.66.in-addr.arpa

ns3.2dayhost.com

259200s

(3.00:00:00)

104.77.29.66.in-addr.arpa

ns4.2dayhost.com

259200s

(3.00:00:00)

104.77.29.66.in-addr.arpa

PTR

st-104-77-29-66.2dayhost.com

86400s

(1.00:00:00)

104.77.29.66.in-addr.arpa

ns3.2dayhost.com

259200s

(3.00:00:00)

104.77.29.66.in-addr.arpa

ns4.2dayhost.com

259200s

(3.00:00:00)

104.77.29.66.in-addr.arpa

PTR

st-104-77-29-66.2dayhost.com

86400s

(1.00:00:00)

— end —

superviagra.us

cialissofttabs.org

ordergenericviagra.org

orderlevitraonline.org

canadianhealthcaremall.net

freshmp3downloads.com

mp3-downloads-forum.com

mp3-skyline.com
http://www.cheap-pharmacy.us/cnstats/index.php?st=log&stm=1246593600&ftm=1246679999

Canadian Pharmacy Spam – dependprefer.com

July 3, 20099 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.125	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
61.161.148.135	China (Shenyang)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path: <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang” <b_yangcl@tacocity.com.tw>
From: “Barbra Yang” <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name	dependprefer.com.
aliases
addresses	218.75.144.6 222.241.150.146 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)

Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)

 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
dependprefer.com	IN	A	203.93.208.86	10800s	(03:00:00)
dependprefer.com	IN	A	222.241.150.146	10800s	(03:00:00)
dependprefer.com	IN	A	61.191.191.241	10800s	(03:00:00)
dependprefer.com	IN	A	218.75.144.6	10800s	(03:00:00)
dependprefer.com	IN	A	119.39.238.2	10800s	(03:00:00)

— end —

Canadian Pharmacy Spam – visitslip.com

July 3, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.46	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
211.186.220.30	Korea, Republic of (Seoul)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://visitslip.com

From Kristin B. Jacobs Tue Jun 30 12:07:48 2009
Return-Path: <kristin_b.jacobsks@zip.co.nz>
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=zip.co.nz; domainkeys=neutral (no sig); from=zip.co.nz; dkim=neutral (no sig)
Received: from 207.115.20.46 (EHLO flph263.prodigy.net) (207.115.20.46)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Tue, 30 Jun 2009 03:20:01 -0700
Received: from cmh7fb2 ([211.186.220.30])
by flph263.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5UAJv6O009087;
Tue, 30 Jun 2009 03:19:59 -0700
Message-ID: <000701c9f9b6$0f0093f0$ae8bf302@zip.co.nz>
Reply-To: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
From: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
To:
Subject: Make you wife moan in pleasure!
Date: Tue, 30 Jun 2009 15:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 139

Address lookup

canonical name	visitslip.com.
aliases
addresses	61.191.191.241 119.39.238.2 203.93.208.86 218.75.144.6 222.241.150.146

Domain Whois record

Queried whois.internic.net with “dom visitslip.com“…

   Domain Name: VISITSLIP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:19:02 UTC <<<

Queried whois.namerich.cn with “visitslip.com“…

 DomainName : visitslip.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
visitslip.com	IN	A	119.39.238.2	10800s	(03:00:00)
visitslip.com	IN	A	203.93.208.86	10800s	(03:00:00)
visitslip.com	IN	A	222.241.150.146	10800s	(03:00:00)
visitslip.com	IN	A	61.191.191.241	10800s	(03:00:00)
visitslip.com	IN	A	218.75.144.6	10800s	(03:00:00)

— end —

Canadian Pharmacy Spam – magnetaroma.com

July 3, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
202.22.220.7	Japan (Kiryu)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.191	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
7.220.22.202	United States*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://magnetaroma.com

From Augustine Chung Mon Jun 29 04:16:55 2009
Return-Path: <a_chung_jh@charters.com.au>
Authentication-Results: mta165.sbc.mail.mud.yahoo.com from=charters.com.au; domainkeys=neutral (no sig); from=charters.com.au; dkim=neutral (no sig)
Received: from 202.22.220.7 (EHLO flpi189.prodigy.net) (207.115.20.191)
by mta165.sbc.mail.mud.yahoo.com with SMTP; Mon, 29 Jun 2009 04:18:55 -0700
Received: from x687a82 (7.220.22.202.ktv.ne.jp [202.22.220.7])
by flpi189.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5TBHsNa023999;
Mon, 29 Jun 2009 04:18:52 -0700
Message-ID: <000701c9f8ab$1c7f4a50$d828ea62@charters.com.au>
Reply-To: “Augustine Chung” <a_chung_jh@charters.com.au>
From: “Augustine Chung” <a_chung_jh@charters.com.au>
To:
Subject: Want great sex? Get..
Date: Mon, 29 Jun 2009 06:16:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

Address lookup

canonical name	magnetaroma.com.
aliases
addresses	218.75.144.6 222.241.150.146 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom magnetaroma.com“…

   Domain Name: MAGNETAROMA.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:00:22 UTC <<<

Queried whois.namerich.cn with “magnetaroma.com“…

 DomainName : magnetaroma.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
magnetaroma.com	IN	A	218.75.144.6	10800s	(03:00:00)
magnetaroma.com	IN	A	119.39.238.2	10800s	(03:00:00)
magnetaroma.com	IN	A	203.93.208.86	10800s	(03:00:00)
magnetaroma.com	IN	A	222.241.150.146	10800s	(03:00:00)
magnetaroma.com	IN	A	61.191.191.241	10800s	(03:00:00)

Consumer & Business Alert – Stolen Identity!!!! This Is A Fraudulent Website Phishing or Identity Theft Do Not Conduct or Transact Business With Them

Address lookup

Domain Whois record

Network Whois record

DNS records

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.Rouge Online Pharmacy Websites (and Other Aliases):

This company is nothing but a SCAM – BEWARE!

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Consumer & Business Alert – Stolen Identity!!!!
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says