Canadian Pharmacy Spam – easyonlinerxmedz.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Order All your Favorite RxMedications Online!
Browse Our Selection Today –> http://easyonlinerxmedz.com

Address lookup

canonical name easyonlinerxmedz.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom easyonlinerxmedz.com“…

Domain Name: EASYONLINERXMEDZ.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

Last update of whois database: Thu, 03 Sep 2009 03:00:02 UTC

Queried whois.hupo.com with “easyonlinerxmedz.com“…

Domain Name: easyonlinerxmedz.com

Registrant Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Administrative Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Technical Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Billing Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for easyonlinerxmedz.com returned an error from the server: ServerFailure

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – ng-systems.net

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
67.195.14.109 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.115.20.132 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
75.213.113.93 United States (Los Angeles)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Robert Sexton Wed Sep 2 09:16:46 2009
X-Apparently-Wed, 02 Sep 2009 09:17:11 -0700
Return-Path:
X-YahooFilteredBulk: 67.195.14.109
X-YMailISG: TBYRKD8WLDtrypfO6NxNXGP0yDAzrz3CdYN4uNyB8zdkhJygyME2AhOzjHKhRrUpZq._NUInKsP.EyiIliCb157CnYhB0BqaezKzuUp53Qiu9w1Ljzy0zv3rJhK5JqUEngfcMKEaQiOlPYusfPPFQNkIjgjQV1yX3poFuPqlw1ZVyf0YPmnOOoAmpd5Ks8lY0n3Erej6ctnbMy1U8NtEpWaiL7oIBA5W5Q8XzWGYudFTGG5Ees2iLR9HSjvwZTwsimeHnMAI8y0e9q.BpsyFwVw0OvYAXKdqkNTqaKXEdLp8WNBeamfQbhhP2gak5mTnjKNACj0Skf1P4L9iyBIPRjskRx4Mnd78YLfNHkQL_tjdrZd4juoFvgSGlm5d9EDxq_CR3dnJlN8Q7uqANIL0zO8SZ2SC5klu.HC983GsCBDV
X-Originating-IP: [67.195.14.109]
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ng-systems.net; domainkeys=neutral (no sig); from=ng-systems.net; dkim=neutral (no sig)
Received: from 207.115.20.132 (EHLO flpd122.prodigy.net) (207.115.20.132)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Wed, 02 Sep 2009 09:17:11 -0700
X-Originating-IP: [67.195.14.109]
Received: from smtp106.sbc.mail.gq1.yahoo.com (smtp106.sbc.mail.gq1.yahoo.com [67.195.14.109])
by flpd122.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n82GHA2X021427
for ; Wed, 2 Sep 2009 09:17:10 -0700
Message-Id: <200909021617.n82GHA2X021427@flpd122.prodigy.net>
Received: (qmail 53401 invoked from network); 2 Sep 2009 16:17:10 -0000
Received: from unknown (HELO 13.sub-70-213-117.myvzw.com) (bob@75.213.113.93 with login)
by smtp106.sbc.mail.gq1.yahoo.com with SMTP; 2 Sep 2009 16:17:09 -0000
X-Yahoo-SMTP: 9I.gPjKswBDDpZ74lhf2pkNv37iwyZQ3CbOW
X-YMail-OSG: oUhrznUVM1m0i7c_kQUv33Cnb7rJoF.P1fFuiaoKzRi8KB0dRejSrtUR4IWuStPzGEB3UdtW6IkkTv4A9iT_8EMnu54dGGZlg38LsYrtSE7mFs.culAKmpimV3LbxXx.QLjcbmTEeZSqqqAz7DeIb9PTuMvIVAetjNSBXaQDPxqbrX4Vduu_t1LnL_tVwCoLase2jJzB53Jc7vU-
X-Yahoo-Newman-Property: ymail-3
From: “Robert Sexton” <bob@ng-systems.net>
To:
Subject: Online pharmacies (9/2/2009)
Date: Wed, 2 Sep 2009 09:16:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset=”utf-8″
Content-Transfer-Encoding: 8bit
Content-Length: 783

Hello,

I represent a company called SPN Solutions, a company that does what’s known as advanced search engine placement. We reach a Network of over 35 million people who are predominantly US based. Our Network is entirely opt-in, and the users on our Network allow us to present them with a preferred choice whenever they are looking for anything on the top sixteen search engines. (GOOGLE, YAHOO, MSN and thirteen others.)

I seek one source to send the users on our Network, from the major search engines, for online pharmacies in various Canadian markets.

Please contact me at your earliest convenience. I am in the office daily from 9:00 AM to 5:00 PM Pacific time.

Best regards,

Robert Sexton
Dir/Business Development, SPN Solutions
Phone: 800.481.2979, ext 2001

Address lookup

canonical name myvzw.com.
aliases
addresses 207.68.174.238

Domain Whois record

Queried whois.internic.net with “dom myvzw.com“…

   Domain Name: MYVZW.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: CARKDNS.VZWDOMAIN.COM
   Name Server: NJBRDNS.VZWDOMAIN.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jan-2009
   Creation Date: 31-may-2000
   Expiration Date: 31-may-2012

>>> Last update of whois database: Thu, 03 Sep 2009 02:55:26 UTC <<<

Queried whois.markmonitor.com with “myvzw.com“…

Registrant:
        Verizon Trademark Services LLC
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669

    Domain Name: myvzw.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Administrator
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669
    Technical Contact, Zone Contact:
        Domain Technician
        Verizon
        1320 North Court House Road
         Arlington VA 22201
        US
        sysmgr@verizon.com +1.7033513164 Fax: +1.7033513669

    Created on..............: 2000-05-31.
    Expires on..............: 2012-05-31.
    Record last updated on..: 2009-05-30.

    Domain servers in listed order:

    njbrdns.vzwdomain.com
    carkdns.vzwdomain.com

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protection™
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at www.markmonitor.com
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300

Network Whois record

Queried whois.arin.net with “207.68.174.238“…

OrgName:    Microsoft Corp 
OrgID:      MSFT
Address:    One Microsoft Way
City:       Redmond
StateProv:  WA
PostalCode: 98052
Country:    US

NetRange:   207.68.128.0 - 207.68.207.255 
CIDR:       207.68.128.0/18, 207.68.192.0/20 
NetName:    MICROSOFT-CORP-MSN-BLK
NetHandle:  NET-207-68-128-0-1
Parent:     NET-207-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:    
RegDate:    1996-03-26
Updated:    2005-06-29

RTechHandle: ZM39-ARIN
RTechName:   Microsoft 
RTechPhone:  +1-425-882-8080
RTechEmail:  noc@microsoft.com 

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName:   Hotmail Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName:   MSN ABUSE 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName:   Microsoft Corporation 
OrgNOCPhone:  +1-425-882-8080
OrgNOCEmail:  noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName:   MSFT-POC 
OrgTechPhone:  +1-425-882-8080
OrgTechEmail:  iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-09-02 20:00

DNS records

DNS query for 238.174.68.207.in-addr.arpa returned an error from the server: NameError

name class type data time to live
myvzw.com IN SOA
server: njbrnsmgr.vzwdomain.com
email: cdsdns.verizonwireless.com
serial: 2009073100
refresh: 43200
retry: 7200
expire: 1209600
minimum ttl: 10800
7200s (02:00:00)
myvzw.com IN NS njbrdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN NS carkdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN A 207.68.174.238 7200s (02:00:00)

— end —


Canadian Pharmacy Spam – theeasyreliablesource.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.168 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
168.131.150.115 Korea, Republic of* Whois Google DNSStuff Urgentmessage.org
207.115.36.135 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Get your Favorite RxMedications Online!
Browse Our Selection Today! –> http://theeasyreliablesource.com

easyreliablesource

Address lookup

canonical name theeasyreliablesource.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom theeasyreliablesource.com“…

   Domain Name: THEEASYRELIABLESOURCE.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.SYSTERNS.COM
   Name Server: NS6.SYSTERNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-aug-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Wed, 02 Sep 2009 09:24:57 UTC <<<

Queried whois.hupo.com with “theeasyreliablesource.com“…

Domain Name: theeasyreliablesource.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.systerns.com
  ns6.systerns.com

Registration Date:2009-08-22 14:50:08
Expireation Date:2010-08-22 14:50:08

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
theeasyreliablesource.com IN SOA
server: ns.theeasyreliablesource.com
email: admin.theeasyreliablesource.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
theeasyreliablesource.com IN A 60.12.166.135 300s (00:05:00)

— end —