WhoIs – www.canadian-refills.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.

  1. http://www.medsFirst.com
  2. http://www.onlinepharmarx.com
  3. http://www.bestpillprice.com
  4. http://www.Airmillmed.com
  5. http://www.myameriturst.net
  6. http://www.canadianhealtstore.com
  7. http://www.swissexpressnow.com
  8. http://www.canadian-refills.com
  9. http://www.sale-pills.com
  10. http://www.auragenerics.com
  11. http://www.edisonpharmacy.com
  12. http://www.sundrugstore.com
  13. http://www.easterndurgs.com

Address lookup
canonical name http://www.canadian-refills.com.
Domain Whois record

Queried whois.internic.net with “dom canadian-refills.com”…

Registrar: NETFIRMS, INC.
Whois Server: whois.netfirms.com
Referral URL: http://www.netfirms.com
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 30-nov-2010
Creation Date: 30-nov-2010
Expiration Date: 30-nov-2011

Last update of whois database: Sun, 02 Jan 2011 17:15:50 UTC
Queried whois.netfirms.com with “canadian-refills.com”…

Domain Privacy Group, Inc.
c/o canadian-refills.com,
7030 Woodbine Ave. Suite 800
Markham, ON L3R 6G2

Domain name: canadian-refills.com

Administrative Contact:
Domain Privacy Group, Inc. privacy-829911@domainprivacygroup.com
c/o canadian-refills.com,
7030 Woodbine Ave. Suite 800
Markham, ON L3R 6G2
1-416-661-2100 Fax:

Technical Contact:
Domain Privacy Group, Inc. privacy-829911@domainprivacygroup.com
c/o canadian-refills.com,
7030 Woodbine Ave. Suite 800
Markham, ON L3R 6G2
1-416-661-2100 Fax:

Registrar of Record: Netfirms Inc.
Record expires on 2011-11-30.
Record created on 2010-11-30.
Database last updated on 2011-01-02 12:01:37.

Network Whois record

Queried whois.ripe.net with “-B”
Information related to ‘ –’

inetnum: –
descr: root SA
country: LU
admin-c: AB99-RIPE
tech-c: RE655-RIPE
mnt-by: ROOT-MNT
changed: noc@as5577.net 20090424
source: RIPE

role: root eSolutions
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
e-mail: info@root.lu
abuse-mailbox: abuse@as5577.net
remarks: +————————————+
remarks: | Operational Issues: |
remarks: | noc@as5577.net |
remarks: +————————————+
remarks: | Abuse and Spam: |
remarks: | abuse@as5577.net |
remarks: +————————————+
admin-c: RE655-RIPE
tech-c: AB99-RIPE
nic-hdl: RE655-RIPE
mnt-by: ROOT-MNT
changed: noc@as5577.net 20051124
source: RIPE

person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks: +————————————+
remarks: | |
remarks: | I did *NOT* spam your mailbox! |
remarks: | I will *NOT* reply to abuse mails! |
remarks: | |
remarks: | Please contact abuse@as5577.net ! |
remarks: | |
remarks: | Be friendly … |
remarks: | Unfriendly emails will be ignored! |
remarks: | |
remarks: +————————————+
e-mail: ab@root.lu
notify: ab@root.lu
changed: noc@as5577.net 20100205
source: RIPE

% Information related to ‘’

descr: root SA
origin: AS5577
mnt-by: ROOT-MNT
notify: noc@as5577.net
changed: noc@as5577.net 20100519
source: RIPE
DNS records

name class type data time to live
http://www.canadian-refills.com IN A 900s (00:15:00)
canadian-refills.com IN MX
preference: 10
exchange: mail.canadian-refills.com
900s (00:15:00)
canadian-refills.com IN SOA
server: ns1.netfirms.com
email: hostmaster.canadian-refills.com
serial: 1293987600
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
2560s (00:42:40)
canadian-refills.com IN NS ns1.netfirms.com 1000s (00:16:40)
canadian-refills.com IN NS ns2.netfirms.com 1000s (00:16:40)
canadian-refills.com IN A 900s (00:15:00) IN PTR ip-212-117-166-70.server.lu 3600s (01:00:00)
— end —

3 thoughts on “WhoIs – www.canadian-refills.com

  1. Jeff says:

    Seeing how old this entree is I do have some other info that may prove to be more disturbing, here is the Additional records,

    mail.allbestlinks.info A 14400s
    ns1.low-price-sites.com A 14400s
    ns2.low-price-sites.com A 14400s

    In Luxembourg, a place where blacklists never roam or look, but more so they spam via Message Boards using the Registarar records from ZeuS Infected hosts to spread their spam, much to the annoyance use throw away user names in order to spread their spam.

  2. Jeff says:

    Well once again http://allbestlinks.info , http://top-low-price-sites.com, and http://www.ipahere .com changed one of the sites listed with this domain to a totally different domain and such, the site being of “www.bestpillprice .com” , here is the updated site info,

    Whois Server: whois.joker.com
    Referral URL: http://www.joker.com
    Name Server: NS13.IXWEBHOSTING.COM
    Name Server: NS14.IXWEBHOSTING.COM
    Status: clientTransferProhibited
    Updated Date: 29-mar-2011
    Creation Date: 17-may-2003
    Expiration Date: 17-may-2013

    They also are blocking the NS IP records that make it much harder to get the site caught or blacklisted,

    Results returned from whois.joker.com:domain: bestpillprice.com
    owner: – –
    organization: lawrence prager
    email: admin@bestpillprice.com
    address: 150 e.18th street
    city: new york
    state: —
    postal-code: 10003
    country: US
    phone: +49.11111111
    admin-c: CCOM-1527022 admin@bestpillprice.com
    tech-c: CCOM-1527025 admin@bestpillprice.com
    billing-c: CCOM-1527024 admin@bestpillprice.com
    nserver: ns13.ixwebhosting.com
    nserver: ns14.ixwebhosting.com
    status: lock
    created: 2003-05-17 15:15:19 UTC
    modified: 2011-03-29 21:21:19 UTC
    expires: 2013-05-17 15:15:19 UTC

    contact-hdl: CCOM-1527022
    person: – –
    organization: prager, lawrence
    email: admin@bestpillprice.com
    address: 150 e.18th street
    city: new york
    state: —
    postal-code: 10003
    country: US
    phone: +212.4731844

    contact-hdl: CCOM-1527025
    person: – –
    organization: prager, lawrence
    email: admin@bestpillprice.com
    address: 150 e.18th street
    city: new york
    state: —
    postal-code: 10003
    country: US
    phone: +212.4731844

    contact-hdl: CCOM-1527024
    person: – –
    organization: LSP Consulting LLC
    email: admin@bestpillprice.com
    address: 270 w. 17th street
    city: New York
    state: —
    postal-code: 10011
    country: US
    phone: +64.62073444

    source: joker.com live whois service
    query-time: 0.020472
    db-updated: 2011-05-06 19:26:46

    and last,

    NetRange: –
    NetHandle: NET-98-130-0-0-1
    Parent: NET-98-0-0-0-0
    NetType: Direct Allocation
    RegDate: 2007-10-15
    Updated: 2008-06-19
    Ref: http://whois.arin.net/rest/net/NET-98-130-0-0-1

    OrgName: Ecommerce Corporation
    OrgId: ECOMM-5
    Address: 1774 Dividend Dr
    City: Columbus
    StateProv: OH
    PostalCode: 43228
    Country: US
    RegDate: 2006-11-06
    Updated: 2009-12-16
    Ref: http://whois.arin.net/rest/org/ECOMM-5

    OrgAbuseHandle: ABUSE875-ARIN
    OrgAbuseName: eCommerce Inc ABUSE Dept
    OrgAbusePhone: +1-614-777-1699
    OrgAbuseEmail: abuse@ecommerce.com
    OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE875-ARIN

    OrgNOCHandle: HNI1-ARIN
    OrgNOCName: eCommerce NOC
    OrgNOCPhone: +1-614-777-1699
    OrgNOCEmail: ipadmin@ecommerce.com
    OrgNOCRef: http://whois.arin.net/rest/poc/HNI1-ARIN

    OrgTechHandle: HNI1-ARIN
    OrgTechName: eCommerce NOC
    OrgTechPhone: +1-614-777-1699
    OrgTechEmail: ipadmin@ecommerce.com
    OrgTechRef: http://whois.arin.net/rest/poc/HNI1-ARIN

    RTechHandle: HNI1-ARIN
    RTechName: eCommerce NOC
    RTechPhone: +1-614-777-1699
    RTechEmail: ipadmin@ecommerce.com
    RTechRef: http://whois.arin.net/rest/poc/HNI1-ARIN

    RAbuseHandle: ABUSE875-ARIN
    RAbuseName: eCommerce Inc ABUSE Dept
    RAbusePhone: +1-614-777-1699
    RAbuseEmail: abuse@ecommerce.com
    RAbuseRef: http://whois.arin.net/rest/poc/ABUSE875-ARIN

    RNOCHandle: HNI1-ARIN
    RNOCName: eCommerce NOC
    RNOCPhone: +1-614-777-1699
    RNOCEmail: ipadmin@ecommerce.com
    RNOCRef: http://whois.arin.net/rest/poc/HNI1-ARIN

    More of Russian Business Network pharmacy spam network working it’s tricks.

  3. Jeff says:

    Add another to the list of sites with DNS info, this time from http://www.medsfirst.com,

    IP address:
    Host name: http://www.medsfirst.com

    http://www.medsfirst.com is from Canada(CA) in region North America

    DNS servers

    Answer records
    medsfirst.com MX preference: 0
    exchange: server305.hushtech.net
    medsfirst.com SOA server: ns1.hushtech.net
    email: webadminrx@gmail.com
    serial: 2009110206
    refresh: 86400
    retry: 7200
    expire: 3600000
    minimum ttl: 86400
    medsfirst.com NS ns2.hushtech.net 86400s
    medsfirst.com NS ns1.hushtech.net 86400s
    medsfirst.com A 14400s

    Authority records

    Additional records
    server305.hushtech.net A 14400s
    ns1.hushtech.net A 14400s
    ns2.hushtech.net A 14400s

    Domain Name: MEDSFIRST.COM
    Whois Server: whois.easydns.com
    Referral URL: http://www.easydns.com
    Name Server: NS1.HUSHTECH.NET
    Name Server: NS2.HUSHTECH.NET
    Status: clientTransferProhibited
    Status: clientUpdateProhibited
    Updated Date: 22-jan-2010
    Creation Date: 12-aug-2004
    Expiration Date: 12-aug-2011

    Results returned from whois.easydns.com:Registrant:
    9 Tanbark Circuit
    Werrington Downs, NSW 2747

    Domain name: MEDSFIRST.COM

    Administrative Contact:
    Windfeld, Thomas medsfirst@hushtech.net
    9 Tanbark Circuit
    Werrington Downs, NSW 2747
    Technical Contact:
    Windfeld, Thomas medsfirst@hushtech.net
    9 Tanbark Circuit
    Werrington Downs, NSW 2747

    Registrar of Record: easyDNS Technologies, Inc.
    Record last updated on 22-Jan-2010.
    Record expires on 12-Aug-2011.
    Record created on 12-Aug-2004.

    Domain servers in listed order:

    Domain status: clientTransferProhibited

    And last,

    NetRange: –
    OriginAS: AS23498
    NetHandle: NET-74-213-176-0-1
    Parent: NET-74-213-160-0-1
    NetType: Reassigned
    RegDate: 2009-01-13
    Updated: 2009-01-13
    Ref: http://whois.arin.net/rest/net/NET-74-213-176-0-1

    CustName: Momentum Advanced Solution
    Address: 155 Commerce Valley Drive East
    City: Thornhill
    StateProv: ON
    PostalCode: L3T-7T2
    Country: CA
    RegDate: 2009-01-13
    Updated: 2011-03-19
    Ref: http://whois.arin.net/rest/customer/C02131176

    OrgTechHandle: ATP1-ARIN
    OrgTechName: ARIN Tech POC
    OrgTechPhone: +1-416-840-9852
    OrgTechEmail: arintech@cogecodata.com
    OrgTechRef: http://whois.arin.net/rest/poc/ATP1-ARIN

    OrgTechHandle: TECHA27-ARIN
    OrgTechName: Tech, Arin
    OrgTechPhone: +1-416-840-7098
    OrgTechEmail: arintech@cogecodata.com
    OrgTechRef: http://whois.arin.net/rest/poc/TECHA27-ARIN

    OrgNOCHandle: ATP1-ARIN
    OrgNOCName: ARIN Tech POC
    OrgNOCPhone: +1-416-840-9852
    OrgNOCEmail: arintech@cogecodata.com
    OrgNOCRef: http://whois.arin.net/rest/poc/ATP1-ARIN

    OrgAbuseHandle: ATP1-ARIN
    OrgAbuseName: ARIN Tech POC
    OrgAbusePhone: +1-416-840-9852
    OrgAbuseEmail: arintech@cogecodata.com
    OrgAbuseRef: http://whois.arin.net/rest/poc/ATP1-ARIN

    This DNS info has a similar match to another site on a different entriee Scrub, so there could be a match to it.

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.