Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162

Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

All Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse Our Website Today! –>   http://greatestrxhere.comgreatestrx

Address lookup

canonical name greatestrxhere.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom greatestrxhere.com“…

   Domain Name: GREATESTRXHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Fri, 07 Aug 2009 07:20:19 UTC <<<

Queried whois.namerich.cn with “greatestrxhere.com“…

 DomainName : greatestrxhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
greatestrxhere.com IN SOA
server: ns.greatestrxhere.com
email: admin.greatestrxhere.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
greatestrxhere.com IN A 211.95.78.2 300s (00:05:00)

— end —

WhoIs check-order-status.com

Buying Precription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________

genericsmed.org
viagra-discount.net
viagraforfree.net
topcanadianpharmacy.com
pharmamexshop.com
viagraforlife.com
medications-low-price.com

Address lookup

canonical name check-order-status.com.
aliases
addresses 91.208.162.30

Domain Whois record

Queried whois.internic.net with “dom check-order-status.com“…

   Domain Name: CHECK-ORDER-STATUS.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.CHECK-ORDER-STATUS.COM
   Name Server: NS2.CHECK-ORDER-STATUS.COM
   Name Server: NS3.CHECK-ORDER-STATUS.COM
   Name Server: NS4.CHECK-ORDER-STATUS.COM
   Status: ok
   Updated Date: 05-aug-2009
   Creation Date: 06-aug-2008
   Expiration Date: 06-aug-2011

Last update of whois database: Fri, 07 Aug 2009 06:58:50 UTC <<<

Queried whois.regtime.net with “check-order-status.com“…

% Regtime Ltd. WHOIS server

Domain name: check-order-status.com

Name servers:

Registrar: Regtime Ltd.
Creation date: 2009-02-10
Expiration date: 2011-08-06
Status: active

Registrant:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Administrative Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Technical Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Billing Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078

Network Whois record

Queried whois.ripe.net with “-B 91.208.162.30“…

% Information related to '91.208.162.0 - 91.208.162.255'

inetnum:        91.208.162.0 - 91.208.162.255
netname:        RUSDESIGN-NET
descr:          RusDesign Ltd
country:        RU
org:            ORG-RL57-RIPE
admin-c:        AS13070-RIPE
tech-c:         AS13070-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         RUSDESIGN-MNT
mnt-routes:     RUSDESIGN-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    RUSDESIGN-MNT
changed:        asmirnoff73@gmail.com 20080904
source:         RIPE

organisation:   ORG-RL57-RIPE
org-name:       RusDesign Ltd
org-type:       OTHER
address:        Krasina 5-15
address:        Moscow, Russia
e-mail:         asmirnoff73@gmail.com
mnt-ref:        RUSDESIGN-MNT
mnt-by:         RUSDESIGN-MNT
changed:        tomassmolar@seznam.cz 20080828
source:         RIPE

person:         Andrey Smirnov
address:        Krasina 5-15
address:        Moscow, Russia
phone:          +7 916 9894767
nic-hdl:        AS13070-RIPE
mnt-by:         RUSDESIGN-MNT
changed:        tomassmolar@seznam.cz 20080828
source:         RIPE

% Information related to '91.208.162.0/24AS2118'

route:          91.208.162.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20080904
source:         RIPE

DNS records

DNS query for 30.162.208.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
check-order-status.com IN SOA
server: ns1.adverdomain.com
email: root.check-order-status.com
serial: 2009030837
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
check-order-status.com IN NS ns1.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns2.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns4.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns3.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns5.adverdomain.com 60s (00:01:00)
check-order-status.com IN A 91.208.162.30 60s (00:01:00)

— end —

Address lookup

lookup failed canadianmedicinenow.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom canadianmedicinenow.com”…

   Domain Name: CANADIANMEDICINENOW.COM
   Registrar: DIRECTNIC, LTD
   Whois Server: whois.directnic.com
   Referral URL: http://www.directnic.com
   Name Server: NS0.DIRECTNIC.COM
   Name Server: NS1.DIRECTNIC.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 08-jul-2008
   Expiration Date: 08-jul-2010

>>> Last update of whois database: Thu, 05 Nov 2009 10:06:20 UTC <<<

Queried whois.directnic.com with “canadianmedicinenow.com”…

Registrant:
 PSTA Pharmacy Support Team Acc
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Domain Name: CANADIANMEDICINENOW.COM

Administrative Contact:
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Technical Contact:
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Record last updated 07-14-2009 06:38:04 AM
Record expires on 07-08-2010
Record created on 07-08-2008

Domain servers in listed order:
	NS0.DIRECTNIC.COM	74.117.217.20
	NS1.DIRECTNIC.COM	69.46.234.245

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
canadianmedicinenow.com IN SOA
server: ns0.directnic.com
email: hostmaster.directnic.com
serial: 1219345229
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
canadianmedicinenow.com IN NS ns1.directnic.com 3600s (01:00:00)
canadianmedicinenow.com IN NS ns0.directnic.com 7200s (02:00:00)
canadianmedicinenow.com IN MX
preference: 5
exchange: mail.canadianmedicinenow.com
7200s (02:00:00)

— end —