Canadian Pharmacy Spam – Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
97.80.187.119 United States (Lawrenceville)* Whois Google DNSStuff Urgentmessage.org
207.115.36.141 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lupe Knox Tue Jul 21 21:49:15 2009
Return-Path:
Authentication-Results: mta101.sbc.mail.mud.yahoo.com from=abnet.ca; domainkeys=neutral (no sig); from=abnet.ca; dkim=neutral (no sig)
Received: from 97.80.187.119 (EHLO nlpi127.prodigy.net) (207.115.36.141)
by mta101.sbc.mail.mud.yahoo.com with SMTP; Tue, 21 Jul 2009 21:52:53 -0700
Received: from p63upe2 (static.unknown.charter.com [97.80.187.119] (may be forged))
by nlpi127.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M4qSn7030845;
Tue, 21 Jul 2009 23:52:51 -0500
Message-ID: <000701ca0a87$c3c94250$d828ea62@abnet.ca>
Reply-To: “Lupe Knox”  lupe_knoxic @abnet.ca
From: “Lupe Knox”   lupe_knoxic @abnet.ca
To: ,
Subject: Much bigger, than you used to have it!
Date: Tue, 21 Jul 2009 23:49:15 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.cameegg.com
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.sawplump.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.watchnorth.com
ns1.yardaware.com
ns2.112911.org
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.beautybounce.com
ns2.beforebegin.com
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.coateach.com
ns2.cutfigure.com
ns2.deluxecrop.com
ns2.directlisten.com
ns2.doctorstill.com
ns2.dounder.com
ns2.eitherbounce.com
ns2.famousloyal.com
ns2.flattry.com
ns2.flypair.com
ns2.grewcall.com
ns2.growfour.com
ns2.growten.com
ns2.hadagree.ru
ns2.letterwant.com
ns2.listwere.com
ns2.mainhumble.com
ns2.med22.org
ns2.med95.net
ns2.pridebought.com
ns2.primehurry.com
ns2.re25.org
ns2.regionearly.com
ns2.roomrow.com
ns2.sawplump.com
ns2.seedequate.com
ns2.skinglad.com
ns2.streetgreat.com
ns2.te26.com
ns2.thosekept.com
ns2.towardlegend.in
ns2.tubeold.com
ns2.typetruck.com
ns2.via99.org
ns2.watchnorth.com
ns2.yearbusy.com

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.