www.canadian-meds-shop.com

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

Address lookup
canonical name http://www.canadian-meds-shop.com.
aliases
addresses 64.27.57.24
64.27.57.29
Domain Whois record

Queried whois.internic.net with “dom canadian-meds-shop.com”…

Domain Name: CANADIAN-MEDS-SHOP.COM
Registrar: NAME.COM, INC.
Whois Server: whois.name.com
Referral URL: http://www.name.com
Name Server: A.NS.ZERIGO.NET
Name Server: B.NS.ZERIGO.NET
Name Server: C.NS.ZERIGO.NET
Name Server: D.NS.ZERIGO.NET
Name Server: E.NS.ZERIGO.NET
Status: ok
Updated Date: 07-jul-2013
Creation Date: 04-may-2008
Expiration Date: 04-may-2014

>>> Last update of whois database: Sun, 06 Oct 2013 03:20:57 UTC <<<

Queried whois.name.com with "canadian-meds-shop.com"…

Domain Name: canadian-meds-shop.com
Registrar: Name.com LLC

Expiration Date: 2014-05-04 16:21:48
Creation Date: 2008-05-04 16:21:48

Name Servers:
a.ns.zerigo.net
b.ns.zerigo.net
d.ns.zerigo.net
e.ns.zerigo.net
c.ns.zerigo.net

REGISTRANT CONTACT INFO
UGS Corp
Oleg Mandrik
CALLE 50, TORRE GLOBAL PLAZA – PISO N 7, OFICINA 7E
Panama
Panama
0000
PA
Phone: +7.9261809048
Email Address: mandrik@gmail.com

ADMINISTRATIVE CONTACT INFO
UGS Corp
Oleg Mandrik
CALLE 50, TORRE GLOBAL PLAZA – PISO N 7, OFICINA 7E
Panama
Panama
0000
PA
Phone: +7.9261809048
Email Address: mandrik@gmail.com

TECHNICAL CONTACT INFO
UGS Corp
Oleg Mandrik
CALLE 50, TORRE GLOBAL PLAZA – PISO N 7, OFICINA 7E
Panama
Panama
0000
PA
Phone: +7.9261809048
Email Address: mandrik@gmail.com

BILLING CONTACT INFO
UGS Corp
Oleg Mandrik
CALLE 50, TORRE GLOBAL PLAZA – PISO N 7, OFICINA 7E
Panama
Panama
0000
PA
Phone: +7.9261809048
Email Address: mandrik@gmail.com

Timestamp: 1381029690.9829

Network Whois record

Queried whois.arin.net with "n ! NET-64-27-57-0-1"…

NetRange: 64.27.57.0 – 64.27.57.255
CIDR: 64.27.57.0/24
OriginAS: AS30475
NetName: ZERIGO-64-27-57-0-24
NetHandle: NET-64-27-57-0-1
Parent: NET-64-27-48-0-1
NetType: Reassigned
RegDate: 2009-02-09
Updated: 2009-02-09
Ref: http://whois.arin.net/rest/net/NET-64-27-57-0-1

OrgName: Zerigo, Inc.
OrgId: ZERIG
Address: 810 W Maude Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94085
Country: US
RegDate: 2009-02-09
Updated: 2012-01-16
Comment: http://www.zerigo.com/
Ref: http://whois.arin.net/rest/org/ZERIG

OrgAbuseHandle: ABUSE3292-ARIN
OrgAbuseName: Abuse Team
OrgAbusePhone: +1-720-210-5439
OrgAbuseEmail: abuse@zerigo.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3292-ARIN

OrgTechHandle: NOC12407-ARIN
OrgTechName: NOC
OrgTechPhone: +1-720-210-5439
OrgTechEmail: noc@zerigo.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC12407-ARIN

OrgNOCHandle: NOC12407-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-720-210-5439
OrgNOCEmail: noc@zerigo.com
OrgNOCRef: http://whois.arin.net/rest/poc/NOC12407-ARIN

RTechHandle: TMO124-ARIN
RTechName: Morgan, Thomas
RTechPhone: +1-720-210-5439
RTechEmail: tm@zerigo.com
RTechRef: http://whois.arin.net/rest/poc/TMO124-ARIN

DNS records
name class type data time to live
http://www.canadian-meds-shop.com IN A 64.27.57.24 900s (00:15:00)
http://www.canadian-meds-shop.com IN A 64.27.57.29 900s (00:15:00)
canadian-meds-shop.com IN NS c.ns.zerigo.net 900s (00:15:00)
canadian-meds-shop.com IN NS a.ns.zerigo.net 900s (00:15:00)
canadian-meds-shop.com IN NS b.ns.zerigo.net 900s (00:15:00)
canadian-meds-shop.com IN A 64.27.57.29 900s (00:15:00)
canadian-meds-shop.com IN A 64.27.57.24 900s (00:15:00)
canadian-meds-shop.com IN SOA
server: a.ns.zerigo.net
email: hostmaster@zerigo.com
serial: 1373243968
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 900
900s (00:15:00)
canadian-meds-shop.com IN NS e.ns.zerigo.net 900s (00:15:00)
canadian-meds-shop.com IN NS d.ns.zerigo.net 900s (00:15:00)
24.57.27.64.in-addr.arpa IN PTR url1.zerigo.net 900s (00:15:00)
57.27.64.in-addr.arpa IN SOA
server: a.ns.zerigo.net
email: hostmaster@zerigo.com
serial: 1379285389
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 900
900s (00:15:00)
57.27.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-10-16 00:03:18Z
signature inception: 2013-10-06 00:03:18Z
key tag: 21392
signer's name: 64.in-addr.arpa
signature:
(1024 bits)

A3F9DADC5DF9B923852A0582050AE688
3328011F517586EB61227E11355EEDDF
8DE95EE7E07060109E8F642E16F9B924
F7768091E22E5A37F59071560577A3F8
50DD97397149C0E21FAA154A8B477CC8
73EE6DDE16AAC8AD56FC77CD65868B02
C9D70D66D78C86DA203F49504B7A7DB7
1E4D72ED738BBD1E3679B176B74DD39C

10800s (03:00:00)
57.27.64.in-addr.arpa IN NSEC
next domain name: 58.27.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
57.27.64.in-addr.arpa IN NS b.ns.zerigo.net 900s (00:15:00)
57.27.64.in-addr.arpa IN NS e.ns.zerigo.net 900s (00:15:00)
57.27.64.in-addr.arpa IN NS c.ns.zerigo.net 900s (00:15:00)
57.27.64.in-addr.arpa IN NS d.ns.zerigo.net 900s (00:15:00)
57.27.64.in-addr.arpa IN NS a.ns.zerigo.net 900s (00:15:00)

— end —

WhoIs review-pharmacy.net

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Address lookup
canonical name review-pharmacy.net

aliases
addresses 64.191.85.106
Domain Whois record

Queried whois.internic.net with “dom review-pharmacy.net”…

Domain Name: REVIEW-PHARMACY.NET
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.REVIEW-PHARMACY.NET
Name Server: NS2.REVIEW-PHARMACY.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-apr-2013
Creation Date: 02-apr-2013
Expiration Date: 02-apr-2014

>>> Last update of whois database: Sat, 05 Oct 2013 16:31:57 UTC <<<

Queried whois.bizcn.com with "review-pharmacy.net"…

Domain name: review-pharmacy.net

Registrant Contact:
none
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Administrative Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Technical Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Billing Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

DNS:
ns1.review-pharmacy.net
ns2.review-pharmacy.net

Created: 2013-04-02
Expires: 2014-04-02

Network Whois record

Queried rwhois.hostnoc.net with "64.191.85.106"…

%rwhois V-1.5:003fff:00 rwhois.hostnoc.net (by Network Solutions, Inc. V-1.5.9.5)
%error 230 No Objects Found

Queried whois.arin.net with "n 64.191.85.106"…

NetRange: 64.191.0.0 – 64.191.127.255
CIDR: 64.191.0.0/17
OriginAS:
NetName: HOSTNOC-3BLK
NetHandle: NET-64-191-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-05-31
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-191-0-0-1

OrgName: Network Operations Center Inc.
OrgId: NOC
Address: PO Box 591
City: Scranton
StateProv: PA
PostalCode: 18501-0591
Country: US
RegDate: 2001-04-04
Updated: 2011-09-24
Comment: Abuse Dept: abuse@hostnoc.net
Ref: http://whois.arin.net/rest/org/NOC

ReferralServer: rwhois://rwhois.hostnoc.net:4321

OrgTechHandle: SMA4-ARIN
OrgTechName: Arcus, S. Matthew
OrgTechPhone: +1-570-343-2200
OrgTechEmail: nic@hostnoc.net
OrgTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

OrgAbuseHandle: SMA4-ARIN
OrgAbuseName: Arcus, S. Matthew
OrgAbusePhone: +1-570-343-2200
OrgAbuseEmail: nic@hostnoc.net
OrgAbuseRef: http://whois.arin.net/rest/poc/SMA4-ARIN

RTechHandle: SMA4-ARIN
RTechName: Arcus, S. Matthew
RTechPhone: +1-570-343-2200
RTechEmail: nic@hostnoc.net
RTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

DNS records
name class type data time to live
review-pharmacy.net IN A 64.191.85.106 900s (00:15:00)
review-pharmacy.net IN SOA
server: ns1.review-pharmacy.net
email: admin@mail.review-pharmacy.net
serial: 2011081709
refresh: 86400
retry: 7200
expire: 2592000
minimum ttl: 345600
900s (00:15:00)
review-pharmacy.net IN NS ns2.review-pharmacy.net 900s (00:15:00)
review-pharmacy.net IN NS ns1.review-pharmacy.net 900s (00:15:00)
106.85.191.64.in-addr.arpa IN PTR 64-191-85-106.static.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN SOA
server: dns.burst.net
email: root@dns.burst.net
serial: 2013092027
refresh: 28800
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
85.191.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-10-15 12:03:24Z
signature inception: 2013-10-05 12:03:24Z
key tag: 21392
signer's name: 64.in-addr.arpa
signature:
(1024 bits)

4027B30E8592EAF86697D3BE266C0B20
D05986ABA2CEC0E4F019FF6080A65F68
968DDFFD9AF8A3F86311B2AC054B0F96
4FB2236F006BE79EF2D4D6F8B03A971A
17B1218D7017D4F0E66D9DD2CC7BDD00
C2F4C58A0EF6D247970F7230165BD5E2
783D99CCBF12F750DEC7053B13FC220B
D7B24E3638F90FBB296B4FED9CEDF099

10800s (03:00:00)
85.191.64.in-addr.arpa IN NSEC
next domain name: 86.191.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
85.191.64.in-addr.arpa IN NS dns1.burst.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS ns2.hostnoc.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS dns.burst.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS ns1.hostnoc.net 86399s (23:59:59)

— end —

Whois original-pharmacy.com/

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

http://original-pharmacy.com/
http://healthy-happy.net/unapp/index-69.htm

Address lookup
canonical name original-pharmacy.com

aliases
addresses 64.191.85.108
Domain Whois record

Queried whois.internic.net with “dom original-pharmacy.com

Domain Name: ORIGINAL-PHARMACY.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.ORIGINAL-PHARMACY.COM
Name Server: NS2.ORIGINAL-PHARMACY.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 03-may-2013
Creation Date: 03-may-2013
Expiration Date: 03-may-2014

Last update of whois database: Sat, 05 Oct 2013 16:18:05 UTC
Queried whois.bizcn.com with “original-pharmacy.com

Domain name: original-pharmacy.com
Registrant Contact:
none
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Administrative Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Technical Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Billing Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

DNS:
ns1.original-pharmacy.com
ns2.original-pharmacy.com

Created: 2013-05-03
Expires: 2014-05-03

Network Whois record

Queried rwhois.hostnoc.net with “64.191.85.108”…

%rwhois V-1.5:003fff:00 rwhois.hostnoc.net (by Network Solutions, Inc. V-1.5.9.5)
%error 230 No Objects Found

Queried whois.arin.net with “n 64.191.85.108″…

NetRange: 64.191.0.0 – 64.191.127.255
CIDR: 64.191.0.0/17
OriginAS:
NetName: HOSTNOC-3BLK
NetHandle: NET-64-191-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-05-31
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-191-0-0-1

OrgName: Network Operations Center Inc.
OrgId: NOC
Address: PO Box 591
City: Scranton
StateProv: PA
PostalCode: 18501-0591
Country: US
RegDate: 2001-04-04
Updated: 2011-09-24
Comment: Abuse Dept: abuse@hostnoc.net
Ref: http://whois.arin.net/rest/org/NOC

ReferralServer: rwhois://rwhois.hostnoc.net:4321

OrgTechHandle: SMA4-ARIN
OrgTechName: Arcus, S. Matthew
OrgTechPhone: +1-570-343-2200
OrgTechEmail: nic@hostnoc.net
OrgTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

OrgAbuseHandle: SMA4-ARIN
OrgAbuseName: Arcus, S. Matthew
OrgAbusePhone: +1-570-343-2200
OrgAbuseEmail: nic@hostnoc.net
OrgAbuseRef: http://whois.arin.net/rest/poc/SMA4-ARIN

RTechHandle: SMA4-ARIN
RTechName: Arcus, S. Matthew
RTechPhone: +1-570-343-2200
RTechEmail: nic@hostnoc.net
RTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

DNS records
name class type data time to live
original-pharmacy.com IN A 64.191.85.108 900s (00:15:00)
original-pharmacy.com IN SOA
server: ns1.original-pharmacy.com
email: admin@mail.original-pharmacy.com
serial: 2011081710
refresh: 86400
retry: 7200
expire: 2592000
minimum ttl: 345600
900s (00:15:00)
original-pharmacy.com IN NS ns2.original-pharmacy.com 900s (00:15:00)
original-pharmacy.com IN NS ns1.original-pharmacy.com 900s (00:15:00)
108.85.191.64.in-addr.arpa IN PTR 64-191-85-108.static.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN SOA
server: dns.burst.net
email: root@dns.burst.net
serial: 2013092027
refresh: 28800
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
85.191.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-10-15 12:03:24Z
signature inception: 2013-10-05 12:03:24Z
key tag: 21392
signer’s name: 64.in-addr.arpa
signature:
(1024 bits)

4027B30E8592EAF86697D3BE266C0B20
D05986ABA2CEC0E4F019FF6080A65F68
968DDFFD9AF8A3F86311B2AC054B0F96
4FB2236F006BE79EF2D4D6F8B03A971A
17B1218D7017D4F0E66D9DD2CC7BDD00
C2F4C58A0EF6D247970F7230165BD5E2
783D99CCBF12F750DEC7053B13FC220B
D7B24E3638F90FBB296B4FED9CEDF099

10800s (03:00:00)
85.191.64.in-addr.arpa IN NSEC
next domain name: 86.191.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
85.191.64.in-addr.arpa IN NS ns1.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS dns.burst.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS ns2.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS dns1.burst.net 86400s (1.00:00:00)

— end —