Canadian Pharmacy Spam – championrxsource.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


From Janell Good Thu Sep 24 05:02:19 2009
X-Apparently- Wed, 23 Sep 2009 21:01:27 -0700
Return-Path:
X-YahooFilteredBulk: 188.186.145.158
X-YMailISG: 9lV5WXMWLDsi3aWaiPBYRtkFvS1sPClB1rxe3blVbgpuMDwIUj1HdCQSoaHPflxVmq9crV5clAcY.3mSt.M1lWJQ8tmtw9iJ2Rzi3B3uov5rOpTYTQ01HhOaxtRljn3RG4V7hOP0swbZuiNyzeQxqiNFCLxsWbnbxdJr3UsX_FiQx6k209FY6w6kdfha
X-Originating-IP: [188.186.145.158]
Authentication-Results: mta105.sbc.mail.gq1.yahoo.com from=uni-duisburg.de; domainkeys=neutral (no sig); from=uni-duisburg.de; dkim=neutral (no sig)
Received: from 188.186.145.158 (EHLO flpd121.prodigy.net) (207.115.20.131)
by mta105.sbc.mail.gq1.yahoo.com with SMTP; Wed, 23 Sep 2009 21:01:26 -0700
X-Header-Overseas: Mail.from.Overseas.source.188.186.145.158
X-Originating-IP: [188.186.145.158]
Received: from zmexsw3 (net145.186.188-158.dynamic.omskdom.ru [188.186.145.158])
by flpd121.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8O40Z6d011560;
Wed, 23 Sep 2009 21:01:19 -0700
Message-ID: <000701ca3d0e$ddba21c0$627e18e2@uni-duisburg.de>
Reply-To: “Janell Good”  <janell_goodqe@uni-duisburg.de>
From: “Janell Good”  <janell_goodqe@uni-duisburg.de>
To:
Subject: Order Any Drug With NoPRESCRIPTION Needed! championrxsource.com
Date: Thu, 24 Sep 2009 05:02:19 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 108

Order all your Favorite Medications Online!
Browse 0ur Selection Today! -> http://championrxsource.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.166 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
188.186.145.158 Russian Federation (Perm)* Whois Google DNSStuff Urgentmessage.org
207.115.20.131 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Address lookup

canonical name championrxsource.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom championrxsource.com“…

Domain Name: CHAMPIONRXSOURCE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

Last update of whois database: Thu, 24 Sep 2009 15:47:52 UTC

Queried whois.namerich.cn with “championrxsource.com“…

DomainName : championrxsource.com
RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS5.HOSTLIFE45.COM
Name Server………………….NS1.UBR34NS.COM
Name Server………………….NS2.UBR34NS.COM
Name Server………………….NS4.BIDOKODJU.COM
Name Server………………….NS6.HOSTLIFE45.COM
Name Server………………….NS3.BIDOKODJU.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-09-16
Expiration Date ……………..2010-09-16
Last Update Date ……………2009-09-23

Registrant ID ……………….V-X-58522-14215
Registrant Name ……………..ZHANG WENQI
Registrant Organization ………ZHANG WENQI
Registrant Address …………..JIAOTONGLU16
Registrant City………………DL
Registrant Province/State …….LN
Registrant Country Code ………CN
Registrant Postal Code ……….116049
Registrant Phone Number ………+86.041128805621
Registrant Fax ………………+86.041128805621
Registrant Email …………….kaokga@126.com

Administrative ID ……………V-X-58522-14215
Administrative Name ………….ZHANG WENQI
Administrative Organization …..ZHANG WENQI
Administrative Address ……….JIAOTONGLU16
Administrative City…………..DL
Administrative Province/State …LN
Administrative Country Code …..CN
Administrative Postal Code ……116049
Administrative Phone Number …..+86.041128805621
Administrative Fax …………..+86.041128805621
Administrative Email …………kaokga@126.com

Billing ID ………………….V-X-58522-14215
Billing Name ………………..ZHANG WENQI
Billing Organization …………ZHANG WENQI
Billing Address ……………..JIAOTONGLU16
Billing City…………………DL
Billing Province/State ……….LN
Billing Country Code …………CN
Billing Postal Code ………….116049
Billing Phone Number …………+86.041128805621
Billing Fax …………………+86.041128805621
Billing Email ……………….kaokga@126.com

Technical ID ………………..V-X-58522-14215
Technical Name ………………ZHANG WENQI
Technical Organization………..ZHANG WENQI
Technical Address ……………JIAOTONGLU16
Technical City……………….DL
Technical Province/State………LN
Technical Country Code ……….CN
Technical Postal Code ………..116049
Technical Phone Number ……….+86.041128805621
Technical Fax ……………….+86.041128805621
Technical Email ……………..kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for championrxsource.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

Traceroute

Tracing route to championrxsource.com [60.12.166.154]

hop rtt rtt rtt ip address fully qualified domain name
1 1 0 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 18 1 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.25 et3-2.ibr04.dllstx3.theplanet.com
5 1 2 1 12.87.41.149
6 47 46 45 12.122.138.118 cr2.dlstx.ip.att.net
7 46 46 46 12.122.28.178 cr2.la2ca.ip.att.net
8 46 46 46 12.122.31.134 cr2.sffca.ip.att.net
9 45 45 45 12.122.136.169
10 209 209 209 12.88.147.14
11 217 217 217 219.158.29.213
12 253 252 253 219.158.5.113
13 264 263 264 219.158.12.42
14 260 260 259 221.12.82.106
15 270 272 281 221.12.82.78
16 * * *
17 * * *
18 * * *
19 * * *

Trace aborted

2 thoughts on “Canadian Pharmacy Spam – championrxsource.com

  1. Scrub says:
    SFA Reporter's avatar

    Header Analysis

    The following IP addresses were extracted from your headers:

    IP Address Probable Country Additional Info
    68.142.207.172 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
    208.54.5.65 United States* Whois Google DNSStuff Urgentmessage.org
    207.115.20.124 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
    * The last IP listed is usually the originating IP address
    Here is the text you submitted, with the IP addresses highlighted
    :

    From Donny Glass Wed Sep 23 18:39:29 2009
    X-Apparently-To:; Thu, 24 Sep 2009 01:39:37 -0700
    Return-Path:
    X-YahooFilteredBulk: 208.54.5.65
    X-YMailISG: .xyeAWMWLDsIVfStEwV6KoZXZMIkESQeu7qkJh7xV8Kr7zWFtlrQuHrNzRI8gwTPhnbz4eve33.D6EUa4.Y8QcxrWmEvZWL38JXsWArZABfxxoCYvTWwjg11uoFpTVFZ.tW77r1gbIVH7O6BzvDK8TMpi.WPE1PvHzIPhdZqfgaxDVsFH_qlS2JfpSuoahDJFOWLkBX6CO_YR_1YqUX8QK2YQPDLno08tG9OOc1Ib1ipbgfmt.JK7nqhQ240VJHssEa37X1HQlfqguWVGu5qTq2KIuyuW2o8ZkQTIYMRxw–
    X-Originating-IP: [208.54.5.65]
    Authentication-Results: mta137.sbc.mail.re3.yahoo.com from=ccm.es; domainkeys=neutral (no sig); from=ccm.es; dkim=neutral (no sig)
    Received: from 207.115.20.124 (EHLO flpd114.prodigy.net) (207.115.20.124)
    by mta137.sbc.mail.re3.yahoo.com with SMTP; Thu, 24 Sep 2009 01:39:37 -0700
    X-Originating-IP: [208.54.5.65]
    Received: from t4ijes5 (m410536d0.tmodns.net [208.54.5.65])
    by flpd114.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8O8dPKn027208;
    Thu, 24 Sep 2009 01:39:29 -0700
    Message-ID:
    Reply-To: “Donny Glass”
    From: “Donny Glass”
    To: , ,
    Subject: Codiene online NoPRESCRIPTION!
    Date: Wed, 23 Sep 2009 18:39:29 -0700
    MIME-Version: 1.0
    Content-Type: text/plain;
    format=flowed;
    charset=”windows-1250″
    reply-type=original
    Content-Transfer-Encoding: 7bit
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Office Outlook, Build 11.0.5510
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
    Content-Length: 108

    # Domain Date/Time Added
    #1 lowlyhat.com Thu, 24 Sep 2009 21:11:34 +0000
    #2 stoodknew.com Thu, 24 Sep 2009 18:12:35 +0000
    #3 restthere.com Thu, 24 Sep 2009 15:00:54 +0000
    #4 hearddream.com Thu, 24 Sep 2009 14:30:13 +0000
    #5 harfindpharmas.com Thu, 24 Sep 2009 12:32:21 +0000
    #6 daringfollow.com Thu, 24 Sep 2009 12:00:37 +0000
    #7 soilbear.com Thu, 24 Sep 2009 11:52:19 +0000
    #8 likestead.com Thu, 24 Sep 2009 07:23:42 +0000
    #9 symbolextol.com Thu, 24 Sep 2009 02:49:57 +0000
    #10 wayspicy.com Thu, 24 Sep 2009 01:39:30 +0000
    #11 championrxsource.com Thu, 24 Sep 2009 01:36:32 +0000
    #12 eggteeth.com Wed, 23 Sep 2009 22:09:05 +0000
    #13 thinspicy.com Wed, 23 Sep 2009 21:19:23 +0000
    #14 duckif.com Wed, 23 Sep 2009 21:10:37 +0000
    #15 breadlevel.com Wed, 23 Sep 2009 20:29:56 +0000
    #16 thickclock.com Wed, 23 Sep 2009 18:17:41 +0000
    #17 superadjective.com Wed, 23 Sep 2009 18:08:37 +0000
    #18 superaffect.com Wed, 23 Sep 2009 18:03:59 +0000
    #19 answerchord.com Wed, 23 Sep 2009 17:11:07 +0000
    #20 simpleanyone.com Wed, 23 Sep 2009 16:28:47 +0000
    #21 classboat.com Wed, 23 Sep 2009 16:08:19 +0000
    #22 tinylegacy.com Wed, 23 Sep 2009 08:48:49 +0000
    #23 simpleany.com Wed, 23 Sep 2009 08:42:51 +0000
    #24 simpleannounced.com Wed, 23 Sep 2009 08:42:14 +0000
    #25 simpleanybody.com Wed, 23 Sep 2009 08:38:54 +0000
    #26 simpleanother.com Wed, 23 Sep 2009 08:36:03 +0000
    #27 havevaried.com Wed, 23 Sep 2009 08:09:46 +0000
    #28 galorewho.com Wed, 23 Sep 2009 07:54:00 +0000
    #29 simpleants.com Wed, 23 Sep 2009 06:42:18 +0000
    #30 behindsupply.com Wed, 23 Sep 2009 04:34:31 +0000
    #31 sandadvise.com Wed, 23 Sep 2009 03:47:41 +0000
    #32 earlyalive.com Wed, 23 Sep 2009 02:48:43 +0000
    #33 colonysimple.com Wed, 23 Sep 2009 02:05:58 +0000
    #34 findhardtogetmedz.com Wed, 23 Sep 2009 02:01:23 +0000
    #35 rxsourceforwinners.com Wed, 23 Sep 2009 01:40:29 +0000
    #36 toprxonline.net Wed, 23 Sep 2009 01:30:03 +0000
    #37 bestpharmas.com Wed, 23 Sep 2009 00:55:53 +0000
    #38 foeelimst.com Wed, 23 Sep 2009 00:41:11 +0000
    #39 abcpharmasupply.com Tue, 22 Sep 2009 23:54:24 +0000
    #40 prettyeither.com Tue, 22 Sep 2009 21:20:49 +0000
    #41 melodyrenown.com Tue, 22 Sep 2009 20:34:41 +0000
    #42 decentevent.com Tue, 22 Sep 2009 20:28:55 +0000
    #43 mothernoon.com Tue, 22 Sep 2009 19:03:01 +0000
    #44 xyzpharms.com Tue, 22 Sep 2009 18:42:45 +0000
    #45 seasome.com Tue, 22 Sep 2009 18:13:22 +0000
    #46 legendcarry.com Tue, 22 Sep 2009 18:09:39 +0000
    #47 gopharmas.com Tue, 22 Sep 2009 18:07:27 +0000
    #48 plentycrop.com Tue, 22 Sep 2009 17:43:04 +0000
    #49 hardtogetpharms.com Tue, 22 Sep 2009 17:41:47 +0000
    #50 giftedstood.com Tue, 22 Sep 2009 14:39:16 +0000
    #51 heartlofty.com Tue, 22 Sep 2009 13:13:54 +0000
    #52 superacross.com Tue, 22 Sep 2009 11:51:55 +0000
    #53 joinshort.com Tue, 22 Sep 2009 11:20:05 +0000
    #54 safethus.com Tue, 22 Sep 2009 10:37:37 +0000
    #55 meantdrool.com Tue, 22 Sep 2009 03:05:52 +0000
    #56 forceyou.com Tue, 22 Sep 2009 00:03:03 +0000
    #57 orstick.com Mon, 21 Sep 2009 23:03:43 +0000
    #58 wheelzest.com Mon, 21 Sep 2009 22:49:46 +0000
    #59 railhill.com Mon, 21 Sep 2009 20:28:03 +0000
    #60 greencannot.com Mon, 21 Sep 2009 20:00:58 +0000
    #61 awardfamous.com Mon, 21 Sep 2009 12:10:43 +0000
    #62 fitobject.com Mon, 21 Sep 2009 10:57:34 +0000
    #63 simpleatlantic.com Mon, 21 Sep 2009 09:09:09 +0000
    #64 chickace.com Mon, 21 Sep 2009 07:42:14 +0000
    #65 greenbefore.com Mon, 21 Sep 2009 07:27:17 +0000
    #66 mainevery.com Mon, 21 Sep 2009 06:43:23 +0000
    #67 shapefig.com Mon, 21 Sep 2009 05:28:35 +0000
    #68 chastedeluxe.com Mon, 21 Sep 2009 04:47:33 +0000
    #69 chieffull.com Mon, 21 Sep 2009 04:24:38 +0000
    #70 cheapmedsonline.net Mon, 21 Sep 2009 03:20:29 +0000
    #71 simpleat.com Sun, 20 Sep 2009 20:10:11 +0000
    #72 cheaprxmed.net Sun, 20 Sep 2009 20:00:40 +0000
    #73 boathard.com Sun, 20 Sep 2009 10:49:23 +0000
    #74 popularmed.net Sun, 20 Sep 2009 10:19:14 +0000
    #75 plentybed.com Sun, 20 Sep 2009 09:19:07 +0000
    #76 simpleasleep.com Sun, 20 Sep 2009 05:52:33 +0000
    #77 helloability.com Sun, 20 Sep 2009 05:22:14 +0000
    #78 potentbusy.com Sun, 20 Sep 2009 03:15:06 +0000

    http://rss.uribl.com/nic/CHINA_SPRINGBOARD_INC_.html

  2. DokiSubbanna1964 says:
    DokiSubbanna1964's avatar

    Many shoppers have come to the conclusion that the ideal solution is to deal with a web site that acts as an intermediary between consumers and the thousands of online pharmaceutical retailers.

    Header Analysis

    The following IP addresses were extracted from your headers:

    IP Address Probable Country Additional Info
    68.142.207.168 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
    93.86.246.177 Serbia (Belgrade)* Whois Google DNSStuff Urgentmessage.org
    207.115.20.44 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
    * The last IP listed is usually the originating IP address
    Here is the text you submitted, with the IP addresses highlighted:

    From Toby Costa Thu Sep 24 08:29:09 2009
    Thu, 24 Sep 2009 15:29:16 -0700
    Return-Path:
    X-YahooFilteredBulk: 93.86.246.177
    X-YMailISG: aR5kxjwWLDvsaoGRJhp1JtZ2WetOEFl.J_O_BDJ.YxV3yreuvNBhN6QRGvfvyEaQMcfzkpVKmPqylsZE7.10awXzz3Apv8rQgga4.c8oKJUjgBtB6HnDf35OTIJzWYwJ1zccau_f3fYzS.1eEBUnR21AHf14OZkGPPazv0StwidGMRx1jqjRwRuvSC48dmmoMhxd2NlJmhEwn_AbUtdHq25esmHeoVfik8XtPtQn2PR8ax42BKYyPrWHiIh4lwE2G.FLLW_kwrFn8A1dn0khZ7W630gD2D9mkSr9tIQOUHi.EzY-
    X-Originating-IP: [93.86.246.177]
    Authentication-Results: mta118.sbc.mail.gq1.yahoo.com from=metiercom.com.br; domainkeys=neutral (no sig); from=metiercom.com.br; dkim=neutral (no sig)
    Received: from 93.86.246.177 (EHLO flph259.prodigy.net) (207.115.20.44)
    by mta118.sbc.mail.gq1.yahoo.com with SMTP; Thu, 24 Sep 2009 15:29:16 -0700
    X-Header-Overseas: Mail.from.Overseas.source.93.86.246.177
    X-Header-NoReverseIP: IP.name.lookup.failed[93.86.246.177]
    X-Originating-IP: [93.86.246.177]
    Received: from 05qpl23 ([93.86.246.177])
    by flph259.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8OMQeVO011057;
    Thu, 24 Sep 2009 15:29:05 -0700
    Message-ID:
    Reply-To: “Toby Costa”
    From: “Toby Costa”
    To:
    Subject: Cheapest Medications on the Planet!
    Date: Thu, 24 Sep 2009 08:29:09 -0700
    MIME-Version: 1.0
    Content-Type: text/plain;
    format=flowed;
    charset=”windows-1250″
    reply-type=original
    Content-Transfer-Encoding: 7bit
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Office Outlook, Build 11.0.5510
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
    Content-Length: 108

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.