WhoIs royalrx.org

May 16, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act

IP address: 68.178.232.99
Host name: royalrx.org
Alias: royalrx.org
68.178.232.99 is from United States(US) in region North America

TraceRoute to 68.178.232.99 [royalrx.org]
Hop (ms) (ms) (ms) IP Address Host name
1 9 6 10 72.249.0.65 –
2 7 6 10 64.129.174.181 64-129-174-181.static.twtelecom.net
3 12 7 10 66.192.240.94 peer-01-ge-5-0-0.dlfw.twtelecom.net
4 Timed out Timed out Timed out –
5 Timed out 33 Timed out 63.227.225.70 –
6 44 37 32 208.109.113.153 ip-208-109-113-153.ip.secureserver.net
7 36 35 33 208.109.113.158 ip-208-109-113-158.ip.secureserver.net
8 33 32 32 208.109.112.162 ip-208-109-112-162.ip.secureserver.net
9 33 32 37 208.109.112.138 ip-208-109-112-138.ip.secureserver.net
10 Timed out Timed out Timed out –
11 Timed out Timed out Timed out –
12 Timed out Timed out Timed out –
13 Timed out Timed out Timed out –
Trace aborted.

Retrieving DNS records for royalrx.org…
DNS servers
ns21.domaincontrol.com
ns22.domaincontrol.com

Answer records
royalrx.org SOA
server: ns21.domaincontrol.com
email: dns@jomax.net
serial: 2010051400
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s
royalrx.org MX
preference
exchange: smtp.secureserver.net 3600s
royalrx.org A 68.178.232.99 3600s
royalrx.org NS ns21.domaincontrol.com 3600s
royalrx.org NS ns22.domaincontrol.com 3600s
royalrx.org MX
preference: 10
exchange: mailstore1.secureserver.net 3600s

Whois query for royalrx.org…

Domain ID:D158809397-LROR
Domain Name:ROYALRX.ORG

Created On:08-Apr-2010 02:01:05 UTC
Last Updated On:14-May-2010 23:47:07 UTC
Expiration Date:08-Apr-2011 02:01:05 UTC
Sponsoring Registrar:Wild West Domains, Inc. (R120-LROR)

Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED

Registrant ID:CR45387786
Registrant Name:Alfred Morinas
Registrant Street1:Industrial Av
Registrant City:San Diego
Registrant State/Province:California
Registrant Postal Code:92173
Registrant Country:US
Registrant Phone:+0.256145878
Registrant Email:alfred_gunternberg01@hotmail.com

Admin ID:CR45387793
Admin Name:Alfred Morinas
Admin Street1:Industrial Av
Admin Street2:
Admin Street3:
Admin City:San Diego
Admin State/Province:California
Admin Postal Code:92173
Admin Country:US
Admin Phone:+0.256145878
Admin Email:alfred_gunternberg01@hotmail.com

Tech ID:CR45387790
Tech Name:Alfred Morinas
Tech Street1:Industrial Av
Tech City:San Diego
Tech State/Province:California
Tech Postal Code:92173
Tech Country:US
Tech Phone:+0.256145878
Tech Email:alfred_gunternberg01@hotmail.com

Name Server:NS21.DOMAINCONTROL.COM
Name Server:NS22.DOMAINCONTROL.COM

Name Server:
DNSSEC:Unsigned

Network IP address lookup:
Whois query for 68.178.232.99…
Results returned from whois.arin.net:

OrgName: GoDaddy.com, Inc.
OrgID: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US

NetRange: 68.178.128.0 – 68.178.255.255
CIDR: 68.178.128.0/17
NetName: GO-DADDY-SOFTWARE-INC
NetHandle: NET-68-178-128-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate: 2005-04-12
Updated: 2007-06-14

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com

# ARIN WHOIS database, last updated 2010-05-15 20:00

Date: Mon, 26 Apr 2010 16:49:03 -0400
Subject: RE: [royalrx.org]
From: inquiries@royalrx.org

We thank you for your payment ***** ******, you will be receiving a tracking number, please remember that even though you will have a tracking number, the system may not show it right away, but be rest assured that your order is under way.

Royal@professional pharmacys,
Confirmacion de envio:MTCN: 0191562532

Receiver/Beneficiario: Norberto Mayorquin Rios
Tijuana, BC MX $175.00

Thank you

Date: Mon, 26 Apr 2010 01:18:19 -0400
Subject: RE: [royalrx.org]
From: inquiries@royalrx.org
Hi ‘
Yes We kown WU very Pinche an picky..-
The Western union Info is Correct.
Payment send to
First Name Norberto
Last Name Paternal Mayorquin
Last Name Maternal Rios Location Tijuana Baja California Norte MEXICO.
royalrx.org@proffesional Pharmacys

Thank you for your fast reply.

So I send $$ by Western Union to:

Norberto Mayorquin-Rios
Tijuana Baja California Norte MEXICO

I just want to be sure, since Western Union can be a little pinche sometimes.
If that’s right I’ll wire money in the morning and e-mail MCTN, etc.
Thanks again.

Date: Sun, 25 Apr 2010 22:24:28 -0400
Subject: [royalrx.org]
From: inquiries@royalrx.org

Hey.
2 Fentanyl Patches 100mcg /72hours $175.00 Shipping Next day is on
us.
Payment send to
First Name Norberto
Last Name Paternal Mayorquin
Last Name Maternal Rios
Location Tijuana Baja California Norte MEXICO.
royalrx.org@proffesional Pharmacys.

Subject: Form Submitted at royalrx.org
From: user@boscgi2401.eigbox.net
Date: Sun, April 25, 2010 10:02 pm
To: inquiries@royalrx.org
————————————————————
Your Order: Hello – I’d like to buy:
Fentanyl
Patches 100mcg /72hours $175.00 If they’re good I’ll buy more! Also, I

Online Pharmacy Spam – MyCanadianOrder.net

May 16, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

My Canadian Pharmacy

Domains Listed on ns1.a6l.ru server
mycanadianorder.net
zmokjiaji.com
pruglifly.com
ptoikuyve.com
wozeadciz.com
mroxhindy.com
poralryje.com
zamikapvyec.com
nrapquonmu.com
znacpylru.com
xovkyuksue.com
rxpharmacy-usa.com

WhoIs MyCanadianOrder.net

Address lookup

canonical name	mycanadianorder.net.
aliases
addresses	62.248.107.20

Domain Whois record

Queried whois.internic.net with “dom mycanadianorder.net”…

   Domain Name: MYCANADIANORDER.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.A6L.RU
   Name Server: NS2.A6L.RU
   Status: ok
   Updated Date: 04-jan-2010
   Creation Date: 20-nov-2007
   Expiration Date: 20-nov-2011

Last update of whois database: Sun, 16 May 2010 13:36:00 UTC

Queried whois.onlinenic.com with “mycanadianorder.net”…

Query error: TimedOut

Network Whois record

Queried whois.ripe.net with “-B 62.248.107.20″…

% Information related to '62.248.107.16 - 62.248.107.31'

inetnum:      62.248.107.16 - 62.248.107.31
netname:      ELIPS
descr:        ELIPS ELEKTRONIK SAN. ve TÝC. LTD. STI.
descr:        istanbul
country:      TR
admin-c:      AM1494-RIPE
tech-c:       AM1494-RIPE
status:       ASSIGNED PA
mnt-by:       AS9121-MNT
notify:       aldo@medkar.com.tr
changed:      ipg@telekom.gov.tr 20020319
source:       RIPE

person:       ALDO MERINA
address:      CIHANNUMA MAHALLESI HUSNU SAVMAN SOKAK
address:      NO:41 BESIKTAS/ISTANBUL
e-mail:       aldo@medkar.com.tr
phone:        +90 0212 258 48 11
notify:       aldo@medkar.com.tr
nic-hdl:      AM1494-RIPE
changed:      ipg@telekom.gov.tr 20020306
source:       RIPE

% Information related to '62.248.0.0/17AS9121'

route:        62.248.0.0/17
descr:        TR-TELEKOM-960902
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@telekom.gov.tr 20010412
source:       RIPE

DNS records

DNS query for 20.107.248.62.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

mycanadianorder.net

SOA

server:	ns1.mycanadianorder.net
email:	admin.mycanadianorder.net
serial:	2009000000
refresh:	600
retry:	900
expire:	1209600
minimum ttl:	43200

600s

(00:10:00)

mycanadianorder.net

ns1.mycanadianorder.net

600s

(00:10:00)

mycanadianorder.net

ns2.mycanadianorder.net

600s

(00:10:00)

mycanadianorder.net

preference:	10
exchange:	mail.mycanadianorder.net

600s

(00:10:00)

mycanadianorder.net

62.248.107.20

IP address: 62.248.107.20

Host name: mycanadianorder.net
Alias: mycanadianorder.net
62.248.107.20 is from Turkey(TR) in region Middle East

TraceRoute to 62.248.107.20 [mycanadianorder.net]
Hop (ms) (ms) (ms) IP Address Host name
1 57 47 61 72.249.128.109 –
2 72 34 50 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 50 58 57 4.69.145.197 ae-43-90.car3.dallas1.level3.net
4 74 50 57 4.68.63.194 –
5 43 69 60 80.91.246.74 atl-bb1-link.telia.net
6 43 54 45 80.91.251.85 ash-bb1-link.telia.net
7 133 139 132 80.91.251.246 prs-bb2-link.telia.net
8 140 136 139 80.91.247.234 ffm-bb2-link.telia.net
9 143 149 148 80.91.251.120 ffm-b10-link.telia.net
10 189 178 182 80.239.193.206 turktelekom-ic-134116-ffm-b10.c.telia.net
11 181 179 185 212.156.101.26 static.turktelekom.com.tr
12 190 187 182 212.156.118.29 gayrettepe-t3-1-gayrettepe-t2-1.turktelekom.com.tr
13 186 183 193 195.175.51.250 –
14 206 185 180 62.248.110.73 –
15 Timed out Timed out Timed out –
16 214 197 206 195.87.10.162 –
17 188 195 193 62.248.107.20 –
Trace complete

Retrieving DNS records for mycanadianorder.net…
DNS servers
ns1.mycanadianorder.net [62.248.107.20]
ns2.mycanadianorder.net [62.248.107.20]

Query for DNS records for mycanadianorder.net failed: Timed out Whois query for mycanadianorder.net...

Results returned from whois.internic.net:

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: MYCANADIANORDER.NET
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.A6L.RU
Name Server: NS2.A6L.RU
Status: ok
Updated Date: 04-jan-2010
Creation Date: 20-nov-2007
Expiration Date: 20-nov-2011

Last update of whois database: Sun, 16 May 2010 13:38:49 UTC

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Query error: Timed out
Network IP address lookup:

Whois query for 62.248.107.20…

Results returned from whois.arin.net:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 62.0.0.0 – 62.255.255.255
CIDR: 62.0.0.0/8
NetName: RIPE-C3
NetHandle: NET-62-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 1997-04-25
Updated: 2009-03-25

Information related to ‘62.248.107.16 – 62.248.107.31’

inetnum: 62.248.107.16 – 62.248.107.31
netname: ELIPS
descr: ELIPS ELEKTRONIK SAN. ve TÝC. LTD. STI.
descr: istanbul
country: TR
admin-c: AM1494-RIPE
tech-c: AM1494-RIPE
status: ASSIGNED PA
mnt-by: AS9121-MNT
notify: aldo@medkar.com.tr
changed: ipg@telekom.gov.tr 20020319
source: RIPE

person: ALDO MERINA
address: CIHANNUMA MAHALLESI HUSNU SAVMAN SOKAK
address: NO:41 BESIKTAS/ISTANBUL
e-mail: aldo@medkar.com.tr
phone: +90 0212 258 48 11
notify: aldo@medkar.com.tr
nic-hdl: AM1494-RIPE
changed: ipg@telekom.gov.tr 20020306
source: RIPE

% Information related to ‘62.248.0.0/17AS9121’

route: 62.248.0.0/17
descr: TR-TELEKOM-960902
origin: AS9121
mnt-by: AS9121-MNT
changed: ipg@telekom.gov.tr 20010412
source: RIPE

My Canadian Pharmacy – www.mycanadianpharmacy.org

May 15, 2010August 15, 20176 Comments

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who’s Behind These Online Pharmacies

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

Main Office:

My Canadian Pharmacy Corp.
7963 17 Avenue,
Montreal, QC,
H1Z 3R2,
Canada

E-mail support: Click here.
Phone support: Click here.
Report spam: Click here.

ICS International Certified Stocks:

My Canadian Pharmacy Corp.
A-58, Prashant Vihar,
New Delhi, 110086, India

Contact shipping department: Click here.

International Orders:

My Canadian Pharmacy Int.
7963 17 Avenue,
Montreal, QC,
H1Z 3R2,
Canada

Web Reputation

Reputation:
2010-11-15


Minimal Risk	Unverified	Medium Risk	High Risk

SmartFilter Category:

Malicious Sites
Make Category Suggestions

Namerservers on IP:

ns1.buycialissuperactive.com
ns1.buydiscountprozac.com
ns1.buyrevatio.org
ns1.buyviagrasuperactive.com
ns1.canadianfamilypharmacy.org
ns1.canadianpharmacynetwork.org
ns1.cheapestviagraprices.org
ns1.cialisoraljelly.com
ns1.cialissofttabs.org
ns1.costofviagra.org
ns1.cvspharmacyonline.org
ns1.discountrxstore.org
ns1.femalepinkviagra.com
ns1.legalrxmedications.com
ns1.mycanadianpharmacy.org
ns1.sublingualcialis.com
ns1.sublingualviagra.net
ns1.torontodrugstore.org
ns1.usdrugsstore.org
ns1.viagra-oral-jelly.com
ns1.viagralowcost.org
ns1.viagrapurchase.org
ns76.2daydomain.com
ns81.2daydomain.com

Address lookup

canonical name	www.mycanadianpharmacy.org.
aliases
addresses	91.205.96.169

Domain Whois record

Queried whois.publicinterestregistry.net with “mycanadianpharmacy.org”…
Domain ID:D156779667-LROR
Domain Name:WWW.MYCANADIANPHARMACY.ORG

Created On:01-Aug-2009 13:44:46 UTC
Last Updated On:01-Oct-2009 03:54:08 UTC
Expiration Date:01-Aug-2010 13:44:46 UTC

Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:e2003252be4f6636
Registrant Name:WhoisGuard Protected
Registrant Organization:WhoisGuard
Registrant Street1:8939 S. Sepulveda Blvd. #110 – 732
Registrant City:Westchester
Registrant State/Province:CA
Registrant Postal Code:90045
Registrant Country:US
Registrant Phone:+1.6613102107
Registrant FAX:+1.6613102107
Email:96f165c6d1694e59b94074c2ea21472b.protect@whoisguard.com

Admin ID:e2003252be4f6636
Admin Name:WhoisGuard Protected
Admin Organization:WhoisGuard
Admin Street1:8939 S. Sepulveda Blvd. #110 – 732
Admin City:Westchester
Admin State/Province:CA
Admin Postal Code:90045
Admin Country:US
Admin Phone:+1.6613102107
Admin Phone Ext.:
Admin FAX:+1.6613102107
Email:96f165c6d1694e59b94074c2ea21472b.protect@whoisguard.com

Tech ID:e2003252be4f6636
Tech Name:WhoisGuard Protected
Tech Organization:WhoisGuard
Tech Street1:8939 S. Sepulveda Blvd. #110 – 732
Tech City:Westchester
Tech State/Province:CA
Tech Postal Code:90045
Tech Country:US
Tech Phone:+1.6613102107
Tech FAX:+1.6613102107
Email:96f165c6d1694e59b94074c2ea21472b.protect@whoisguard.com

Name Server:NS1.MYCANADIANPHARMACY.ORG
Name Server:NS2.MYCANADIANPHARMACY.ORG

DNSSEC:Unsigned

Network Whois record

Queried whois.ripe.net with “-B 91.205.96.169″…

% Information related to '91.205.96.0 - 91.205.99.255'

inetnum:        91.205.96.0 - 91.205.99.255
netname:        todayhost-NL
descr:          Todayhost limited
country:        NL
org:            ORG-TH5-RIPE
admin-c:        AD4931-RIPE
tech-c:         AD4931-RIPE
status:         ASSIGNED PI
notify:         manager@2dayhost.com
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         TODAYHOST-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     TODAYHOST-MNT
mnt-domains:    TODAYHOST-MNT
changed:        manager@2dayhost.com 20090620
source:         RIPE

organisation:   ORG-TH5-RIPE
org-name:       Todayhost Limited
org-type:       OTHER
address:        164 Victoria Street
address:        London
address:        SW1E 5LB
address:        GB
phone:          +44 2033550592
phone:          +44 2033559970
fax-no:         +44 8702889352
e-mail:         info@2dayhost.com
abuse-mailbox:  abuse@2dayhost.com
remarks:        --------------------------------
remarks:        Please send all abuse complaints
remarks:        to abuse@2dayhost.com
remarks:        --------------------------------
mnt-ref:        TODAYHOST-MNT
mnt-by:         TODAYHOST-MNT
changed:        manager@2dayhost.com 20100514
source:         RIPE

person:         Abuse Department
address:        Todayhost Limited
address:        164 Victoria Street
address:        London
address:        SW1E 5LB
address:        GB
phone:          +44 2033550592
phone:          +44 2033559970
e-mail:         abuse@2dayhost.com
nic-hdl:        AD4931-RIPE
remarks:        --------------------------------
remarks:        Please send all abuse complaints
remarks:        to abuse@2dayhost.com
remarks:        --------------------------------
mnt-by:         TODAYHOST-MNT
changed:        manager@2dayhost.com 20081109
source:         RIPE

% Information related to '91.205.96.0/24AS47143'

route:          91.205.96.0/24
descr:          Todayhost Network
origin:         AS47143
mnt-by:         TODAYHOST-MNT
changed:        eug@2dayhost.com 20080829
source:         RIPE

% Information related to '91.205.96.0/22AS47143'

route:          91.205.96.0/22
descr:          Todayhost Network
origin:         AS47143
mnt-by:         TODAYHOST-MNT
changed:        manager@2dayhost.com 20090220
source:         RIPE

DNS records

name

class

type

data

time to live

http://www.mycanadianpharmacy.org

91.205.96.169

60s

(00:01:00)

mycanadianpharmacy.org

SOA

server:	ns1.mycanadianpharmacy.org
email:
serial:	1260565834
refresh:	300
retry:	300
expire:	300
minimum ttl:	300

2560s

(00:42:40)

mycanadianpharmacy.org

ns1.mycanadianpharmacy.org

60s

(00:01:00)

mycanadianpharmacy.org

ns2.mycanadianpharmacy.org

60s

(00:01:00)

mycanadianpharmacy.org

91.205.96.169

60s

(00:01:00)

169.96.205.91.in-addr.arpa

SOA

server:	ns3.2dayhost.com
email:	hostmaster.169.96.205.91.in-addr.arpa
serial:	1266365018
refresh:	16384
retry:	2048
expire:	1048576
minimum ttl:	2560

2560s

(00:42:40)

169.96.205.91.in-addr.arpa

ns3.2dayhost.com

259200s

(3.00:00:00)

169.96.205.91.in-addr.arpa

ns4.2dayhost.com

259200s

(3.00:00:00)

169.96.205.91.in-addr.arpa

PTR

st-169-96-205-91.2dayhost.com

86400s

(1.00:00:00)

— end —

1-800-420-8226

WhoIs baxterint.com

May 3, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

IP address: 81.177.33.135
Host name: baxterint.com
Alias:
baxterint.com
81.177.33.135 is from Russian Federation(RU) in region Eastern Europe

TraceRoute to 81.177.33.135 [baxterint.com]
Hop (ms) (ms) (ms) IP Address Host name
1 11 15 11 72.249.128.105 –
2 17 11 13 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 22 18 37 4.69.145.51 ae-62-60.ebr2.dallas1.level3.net
4 21 17 18 4.69.145.51 ae-62-60.ebr2.dallas1.level3.net
5 46 50 50 4.69.137.122 ae-3-3.ebr4.newyork1.level3.net
6 54 54 52 4.69.134.122 ae-84-84.csw3.newyork1.level3.net
7 68 133 118 4.69.137.73 ae-43-43.ebr2.london1.level3.net
8 118 117 Timed out 4.69.139.105 ae-2-52.edge3.london1.level3.net
9 184 174 121 4.69.139.105 ae-2-52.edge3.london1.level3.net
10 257 237 197 212.113.15.178 unknown.level3.net
11 304 233 252 217.106.7.218 msk-dsr1-ae0-804.rt-comm.ru
12 215 217 225 81.177.32.16 –
13 193 208 191 81.177.33.135 –
Trace complete

Retrieving DNS records for baxterint.com…
DNS servers
ns2.1gb.ru
ns1.1gb.ru

Answer records
baxterint.com A 81.177.33.135 3600s
baxterint.com NS ns1.1gb.ru 3600s
baxterint.com NS ns2.1gb.ru 3600s
baxterint.com SOA
server: ns1.1gb.ru
email: noc@1gb.ru
serial: 21
refresh: 900
retry: 600
expire: 86400
minimum ttl: 3600
3600s
baxterint.com MX
preference: 10
exchange: mail-s19.1gb.ru
3600s
baxterint.com MX
preference: 8
exchange: mail-s19.1gb.ru
3600s

Authority records

Additional records
ns1.1gb.ru A 81.176.69.150 3600s
ns2.1gb.ru A 195.161.112.91 3600s
mail-s19.1gb.ru A 81.177.24.87 3600s
mail-s19.1gb.ru A 81.177.24.88 3600s
mail-s19.1gb.ru A 81.177.24.85 3600s
mail-s19.1gb.ru A 81.177.24.86 3600s
mail-s19.1gb.ru A 81.177.24.88 3600s
mail-s19.1gb.ru A 81.177.24.85 3600s
mail-s19.1gb.ru A 81.177.24.86 3600s
mail-s19.1gb.ru A 81.177.24.87 3600s

Whois query for baxterint.com…
Domain Name: BAXTERINT.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.1GB.RU
Name Server: NS2.1GB.RU
Status: ok
Updated Date: 11-mar-2010
Creation Date: 25-aug-2009
Expiration Date: 25-aug-2010

Last update of whois database: Mon, 03 May 2010 11:24:02 UTC
Contact: +7.4955801111

Domain Name: BAXTERINT.COM

Registrant:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Creation Date: 26-Aug-2009
Expiration Date: 26-Aug-2010

Domain servers in listed order:
ns2.1gb.ru
ns1.1gb.ru

Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Status:ACTIVE

Network IP address lookup:
Whois query for 81.177.33.135…
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 81.0.0.0 – 81.255.255.255
CIDR: 81.0.0.0/8
NetName: 81-RIPE
NetHandle: NET-81-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate:
Updated: 2009-03-25

Information related to ‘81.177.32.0 – 81.177.33.255’

inetnum: 81.177.32.0 – 81.177.33.255
netname: INSOLVERTC3
descr: In-Solve/1Gb.ru hosting services provider
country: RU
admin-c: DM3950-RIPE
tech-c: DM3950-RIPE
status: ASSIGNED PA
notify: noc@in-solve.ru
notify: lir@rtcomm.ru
mnt-by: AS8342-MNT
changed: o.konovalova@rtcomm.ru 20081209
source: RIPE

person: Dmitry Mikhailov
address: 107078, Russia, Moscow,
address: Sadovaya-Spasskaya 13, 2
e-mail: noc@in-solve.ru
phone: +7 495 2211152
notify: noc@in-solve.ru
nic-hdl: DM3950-RIPE
changed: dmih@in-solve.ru 20061014
source: RIPE

% Information related to ‘81.176.0.0/15AS8342’

route: 81.176.0.0/15
descr: RTCOMM-RU
origin: AS8342
notify: noc@rtcomm.ru
mnt-by: AS8342-MNT
changed: rus@rt.ru 20030120
changed: rus@rt.ru 20031105
changed: rus@rt.ru 20040809
source: RIPE

WhoIs XLM Pharmacy – www.xlpharmacy.com

April 28, 20106 Comments

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.

IP address: 174.142.222.196
Host name: http://www.xlpharmacy.com
Alias: http://www.xlpharmacy.com
174.142.222.196 is from Canada(CA) in region North America
TraceRoute to 174.142.222.196 [www.xlpharmacy.com]

Hop (ms) (ms) (ms) IP Address Host name
1 35 12 15 72.249.0.65 –
2 57 47 16 206.123.64.21 –
3 54 19 21 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
4 66 54 54 4.69.137.122 ae-3-3.ebr4.newyork1.level3.net
5 94 217 79 4.69.141.5 ae-5-5.car1.montreal2.level3.net
6 94 106 106 4.59.176.10 te6-2.cl-core05.level3.mtl.iweb.com
7 56 113 84 174.142.222.196 –
Trace complete

Retrieving DNS records for http://www.xlpharmacy.com…
DNS servers
ns0.poboxhosting.com
ns1.poboxhosting.com

Answer records
http://www.xlpharmacy.com A 174.142.222.196 300s

Authority records
xlpharmacy.com NS ns1.poboxhosting.com 300s
xlpharmacy.com NS ns0.poboxhosting.com 300s

Additional records
ns0.poboxhosting.com A 217.27.244.13 300s
ns1.poboxhosting.com A 208.70.245.31 300s

Whois query for xlpharmacy.com…

Domain Name: XLPHARMACY.COM
Registrar: REALTIME REGISTER BV
Whois Server: whois.yoursrs.com
Referral URL: http://www.realtimeregister.com
Name Server: NS0.POBOXHOSTING.COM
Name Server: NS1.POBOXHOSTING.COM
Status: clientTransferProhibited
Updated Date: 27-feb-2009
Creation Date: 13-apr-2004
Expiration Date: 13-apr-2017

Last update of whois database: Wed, 28 Apr 2010 13:19:43 UTC <<<

Results returned from whois.yoursrs.com:

Domain Name:xlpharmacy.com
Name Server:ns0.poboxhosting.com
Name Server:ns1.poboxhosting.com
Created On:2008-12-13
Last Updated On:2009-02-27
Expiration Date:2017-04-13
Dealer:PRISECDO
Registrant ID:Xlpharmacy
Registrant Name:Juan Garcia
Registrant Organization:
Registrant Street1:Calle Rojo 77
Registrant Street2:
Registrant Street3:
Registrant City:Caracas
Registrant State/Province:
Registrant Postal Code:00000
Registrant Country:VE
Registrant Phone:+1.8665142571
Registrant Email:domain@xlpharmacy.com
Admin ID:Xlpharmacy
Admin Name:Juan Garcia
Admin Organization:
Admin Street1:Calle Rojo 77
Admin Street2:
Admin Street3:
Admin City:Caracas
Admin State/Province:
Admin Postal Code:00000
Admin Country:VE
Admin Phone:+1.8665142571
Admin Fax:
Admin Email:domain@xlpharmacy.com
Billing ID:Xlpharmacy
Billing Name:Juan Garcia
Billing Organization:
Billing Street1:Calle Rojo 77
Billing Street2:
Billing Street3:
Billing City:Caracas
Billing State/Province:
Billing Postal Code:00000
Billing Country:VE
Billing Phone:+1.8665142571
Billing Fax:
Billing Email:domain@xlpharmacy.com
Tech ID:Xlpharmacy
Tech Name:Juan Garcia
Tech Organization:
Tech Street1:Calle Rojo 77
Tech Street2:
Tech Street3:
Tech City:Caracas
Tech State/Province:
Tech Postal Code:00000
Tech Country:VE
Tech Phone:+1.8665142571
Tech Email:domain@xlpharmacy.com
Network IP address lookup:

Whois query for 174.142.222.196…

Results returned from whois.arin.net:
iWeb Technologies Inc. IWEB-BLK-06 (NET-174-142-0-0-1)
174.142.0.0 – 174.142.255.255
Server4Sale IWEB-CL-T085-372CL-271 (NET-174-142-222-192-1)
174.142.222.192 – 174.142.222.199

# ARIN WHOIS database, last updated 2010-04-27 20:00
CustName: Server4Sale

Address: 1508-11, Caesars Tower, Shahra-e-Faisal
City: Karachi
StateProv:
PostalCode: 00000
Country: PK
RegDate: 2010-04-16
Updated: 2010-04-16

NetRange: 174.142.222.192 – 174.142.222.199
CIDR: 174.142.222.192/29
NetName: IWEB-CL-T085-372CL-271
NetHandle: NET-174-142-222-192-1
Parent: NET-174-142-0-0-1
NetType: Reassigned
Comment:
RegDate: 2010-04-16
Updated: 2010-04-16

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName: Abuse Coordinator
OrgAbusePhone: +1-514-286-4242
OrgAbuseEmail: abuse@noc.privatedns.com

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName: Network Administrator
OrgNOCPhone: +1-514-286-4242
OrgNOCEmail: net-admin@noc.privatedns.com

OrgTechHandle: NETWO2356-ARIN
OrgTechName: Network Administrator
OrgTechPhone: +1-514-286-4242
OrgTechEmail: net-admin@noc.privatedns.com

# ARIN WHOIS database, last updated 2010-04-27 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#

WhoIs – awccanadianpharmacy.com

April 17, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

Address lookup

canonical name	awccanadianpharmacy.com.
aliases
addresses	64.247.53.105

Domain Whois record

Queried whois.internic.net with “dom awccanadianpharmacy.com”…
Domain Name: AWCCANADIANPHARMACY.COM
Registrar: EURODNS S.A
Whois Server: whois.eurodns.com
Referral URL: http://www.eurodns.com
Name Server: NS1.AWCCANADIANPHARMACY.COM
Name Server: NS2.AWCCANADIANPHARMACY.COM
Status: clientTransferProhibited
Updated Date: 28-jan-2010
Creation Date: 22-oct-2007
Expiration Date: 22-oct-2013

>>> Last update of whois database: Sat, 17 Apr 2010 10:26:23 UTC
Queried whois.eurodns.com with “awccanadianpharmacy.com”…
Domain: awccanadianpharmacy.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Legoshina Anastasiya
Address: Mira 9/11 – 12
City: Dzerjinsk
Country: RUSSIAN FEDERATION
Postal Code: 606023

Administrative Contact:
Company:
Name: Legoshina Anastasiya
Address: Mira 9/11 – 12
City: Dzerjinsk
Country: RUSSIAN FEDERATION
Postal Code: 606023
Phone: +79027837722
Fax:
Email: support@awccanadianpharmacy.com

Technical Contact:
Company:
Name: Legoshina Anastasiya
Address: Mira 9/11 – 12
City: Dzerjinsk
Country: RUSSIAN FEDERATION
Postal Code: 606023
Phone: +79027837722
Fax:
Email: support@awccanadianpharmacy.com

Original Creation Date: 2009-10-22
Expiration Date: 2013-10-21

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.awccanadianpharmacy.com
Nameserver: ns2.awccanadianpharmacy.com

ReferralServer: rwhois://whois.nac.net:43

NetRange: 64.247.0.0 – 64.247.63.255
CIDR: 64.247.0.0/18
OriginAS: AS8001
NetName: NAC-NETBLK05
NetHandle: NET-64-247-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NAC.NET
NameServer: NS2.NAC.NET
Comment: Additional Information Available via whois.nac.net
RegDate: 2001-10-18
Updated: 2007-09-18

RAbuseHandle: ABUSE156-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-800-638-6336
RAbuseEmail: abuse@nac.net

RNOCHandle: NOC270-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-973-590-5050
RNOCEmail: network@nac.net

RTechHandle: ZN77-ARIN
RTechName: Legal Department
RTechPhone: +1-800-638-6336
RTechEmail: legal@nac.net

OrgAbuseHandle: ABUSE156-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-638-6336
OrgAbuseEmail: abuse@nac.net

OrgNOCHandle: NOC270-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-973-590-5050
OrgNOCEmail: network@nac.net

OrgTechHandle: AR97-ARIN
OrgTechName: Rubenstein, Alex
OrgTechPhone: +1-973-590-5101
OrgTechEmail: alex@nac.net

# ARIN WHOIS database, last updated 2010-04-16 20:00

DNS records

DNS query for 105.53.247.64.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

awccanadianpharmacy.com

SOA

server:	ns1.awccanadianpharmacy.com
email:
serial:	1251068685
refresh:	300
retry:	300
expire:	300
minimum ttl:	300

2560s

(00:42:40)

awccanadianpharmacy.com

ns1.awccanadianpharmacy.com

259200s

(3.00:00:00)

awccanadianpharmacy.com

ns2.awccanadianpharmacy.com

259200s

(3.00:00:00)

awccanadianpharmacy.com

preference:	0
exchange:	mx1.awccanadianpharmacy.com

86400s

(1.00:00:00)

awccanadianpharmacy.com

64.247.53.105

WhoIs cool-choice.biz

April 15, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

IP address: 89.149.194.197
Host name: cool-choice.biz
Alias:
cool-choice.biz
89.149.194.197 is from Germany(DE) in region Western Europe

TraceRoute to 89.149.194.197 [cool-choice.biz]
Hop (ms) (ms) (ms) IP Address Host name
1 17 25 23 72.249.0.65 –
2 21 25 20 216.52.189.9 border4.te4-4.colo4dallas-5.ext1.dal.pnap.net
3 13 32 24 216.52.189.9 border4.te4-4.colo4dallas-5.ext1.dal.pnap.net
4 11 18 15 66.79.145.97 dal005-dalext1-846-cr1.dal005.internap.net
5 30 28 16 66.79.145.97 dal005-dalext1-846-cr1.dal005.internap.net
6 49 33 14 66.79.147.186 cr2-cr1.dal005.internap.net
7 36 51 38 66.79.147.189 acs007-dal005-841-cr2.acs007.internap.net
8 40 30 50 66.79.147.198 acs007-wdc005-844-cr2.wdc005.internap.net
9 62 90 86 66.79.147.198 acs007-wdc005-844-cr2.wdc005.internap.net
10 119 Timed out 67 66.79.146.201 cr1-cr2.wdc005.internap.net
11 Timed out Timed out Timed out –
12 Timed out 56 54 66.79.147.10 nym009-phi004-813-cr2.nym009.internap.net
13 67 53 50 66.79.147.10 nym009-phi004-813-cr2.nym009.internap.net
14 57 60 68 66.79.147.14 cr2-cr1.bsn006.internap.net
15 132 139 60 66.79.147.14 cr2-cr1.bsn006.internap.net
16 163 136 146 66.79.158.6 bsn006-lon005-6-cr2.lon005.internap.net
17 147 140 140 77.242.206.222 ams003-fra003-2-cr1.fra003.internap.net
18 148 142 143 77.242.206.222 ams003-fra003-2-cr1.fra003.internap.net
19 568 149 141 80.81.192.147 de-cix01.fra3.gatewayrouter.net
20 144 143 148 89.149.218.186 nh86-r8.gatewayrouter.net
21 146 144 150 89.149.194.197 elajt.elitebytes.net
Trace complete

Retrieving DNS records for cool-choice.biz…
DNS servers
ns3.cool-choice.biz [89.149.238.157]
ns4.cool-choice.biz [89.149.194.197]

Answer records
cool-choice.biz MX
preference: 10
exchange: mail.cool-choice.biz
14400s
cool-choice.biz TXT v=spf1 a mx ip4:89.149.194.197 ?all 14400s
cool-choice.biz A 89.149.194.197 14400s
cool-choice.biz SOA
server: ns3.cool-choice.biz
email: root@cool-choice.biz
serial: 2007081420
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s
cool-choice.biz NS ns4.cool-choice.biz 14400s
cool-choice.biz NS ns3.cool-choice.biz 14400s

Authority records

Additional records
mail.cool-choice.biz A 89.149.194.197 14400s
ns3.cool-choice.biz A 89.149.238.157 14400s
ns4.cool-choice.biz A 89.149.194.197 14400s

Whois query for cool-choice.biz…

Results returned from whois.biz:
Domain Name: COOL-CHOICE.BIZ
Domain ID: D14996253-BIZ
Sponsoring Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Domain Status: ok
Registrant ID: DI_7075064
Registrant Name: Ana Wiatkima
Registrant Organization: none
Registrant Address1: Pr.Stroiteley 18
Registrant City: penza
Registrant State/Province: penza
Registrant Postal Code: 440080
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +8.90603996882
Registrant Email: r23z17@mail.ru
Administrative Contact ID: DI_7075064
Administrative Contact Name: Ana Wiatkima
Administrative Contact Organization: none
Administrative Contact Address1: Pr.Stroiteley 18
Administrative Contact City: penza
Administrative Contact State/Province: penza
Administrative Contact Postal Code: 440080
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +8.90603996882
Administrative Contact Email: r23z17@mail.ru
Billing Contact ID: DI_7075064
Billing Contact Name: Ana Wiatkima
Billing Contact Organization: none
Billing Contact Address1: Pr.Stroiteley 18
Billing Contact City: penza
Billing Contact State/Province: penza
Billing Contact Postal Code: 440080
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +8.90603996882
Billing Contact Email: r23z17@mail.ru
Technical Contact ID: DI_7075064
Technical Contact Name: Ana Wiatkima
Technical Contact Organization: none
Technical Contact Address1: Pr.Stroiteley 18
Technical Contact City: penza
Technical Contact State/Province: penza
Technical Contact Postal Code: 440080
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +8.90603996882
Technical Contact Email: r23z17@mail.ru
Name Server: NS3.COOL-CHOICE.BIZ
Name Server: NS4.COOL-CHOICE.BIZ
Created by Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Last Updated by Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Domain Registration Date: Fri Oct 27 11:48:28 GMT 2006
Domain Expiration Date: Fri Oct 26 23:59:59 GMT 2012
Domain Last Updated Date: Fri Oct 30 07:21:29 GMT 2009

Whois database was last updated on: Thu Apr 15 15:24:56 GMT 2010
NOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE
OF THE AVAILABILITY OF A DOMAIN NAME.
Network IP address lookup:

Whois query for 89.149.194.197…

Results returned from whois.arin.net:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 89.0.0.0 – 89.255.255.255
CIDR: 89.0.0.0/8
NetName: 89-RIPE
NetHandle: NET-89-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS2.LACNIC.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2005-06-30
Updated: 2009-05-18

Information related to ‘89.149.194.0 – 89.149.194.255’

inetnum: 89.149.194.0 – 89.149.194.255
netname: NETDIRECT-NET
descr: netdirekt e.K.
remarks: INFRA-AW
country: DE
admin-c: WW200-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20060515
source: RIPE

person: Wiethold Wagner
address: netdirekt e. K.
address: Kleyer Strasse 79 / Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: info@netdirekt.de
nic-hdl: WW200-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
source: RIPE

% Information related to ‘89.149.192.0/18AS28753’

route: 89.149.192.0/18
descr: netdirect Frankfurt, DE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20060228
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
changed: bitbucket@ripe.net 20090708
changed: bitbucket@ripe.net 20090709
changed: bitbucket@ripe.net 20090710
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20091204
changed: bitbucket@ripe.net 20100105
changed: bitbucket@ripe.net 20100205
source: RIPE

Online Pharmacy – greatrxmedsource.com

April 14, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

Order your Preferred Rx_Dealz Right Now!

Very_reliable Shipping!
0rder Now -> http://lifesaving.greatrxmedsource.com

Address lookup

canonical name	greatrxmedsource.com.
aliases
addresses	111.148.252.84

Domain Whois record

Queried whois.internic.net with “dom greatrxmedsource.com”…
Domain Name: GREATRXMEDSOURCE.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.FRNS31.COM
Name Server: NS2.DAVENS24.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 14-apr-2010
Creation Date: 14-apr-2010
Expiration Date: 14-apr-2011

>>> Last update of whois database: Thu, 15 Apr 2010 04:21:20 UTC
Queried whois.bizcn.com with “greatrxmedsource.com”…

Network Whois record

Queried whois.apnic.net with “111.148.252.84”…
inetnum: 111.128.0.0 – 111.159.255.255
netname: NorthStar
descr: North Star Information Hi.tech Ltd. Co.
descr: No.18, Beifengwo Road, Haidian District,
descr: Beijing, China, 100038
country: CN
admin-c: CW1171-AP
tech-c: LQ568-AP
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20090507
mnt-by: APNIC-HM
mnt-routes: MAINT-NORTHSTAR-APNIC
mnt-lower: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090514
source: APNIC

route: 111.128.0.0/11
descr: North Star Information Hi.tech Ltd. Co.
origin: AS9394
country: CN
notify: luqian.ns@gmail.com
mnt-by: MAINT-NORTHSTAR-APNIC
changed: luqian.ns@gmail.com 20090716
source: APNIC

person: Cindy Wang
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-10-51892147
fax-no: +86-10-51890674
e-mail: cindywang.ns@gmail.com
nic-hdl: CW1171-AP
mnt-by: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090210
source: APNIC

person: Lu Qian
address: No.18, Beifengwo Road, Haidian District,
address: Beijing, China
country: CN
phone: +86-13717930628
fax-no: +86-10-51890674
e-mail: luqian.ns@gmail.com
nic-hdl: LQ568-AP
mnt-by: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090210
source: APNIC

DNS records

DNS query for 84.252.148.111.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

greatrxmedsource.com

SOA

server:	ns.greatrxmedsource.com
email:	admin.greatrxmedsource.com
serial:	2010041401
refresh:	600
retry:	600
expire:	14400
minimum ttl:	600

600s

(00:10:00)

greatrxmedsource.com

111.148.252.84

585s

(00:09:45)

greatrxmedsource.com

ns2.davens24.com

172785s

(1.23:59:45)

greatrxmedsource.com

ns1.frns31.com

172785s

(1.23:59:45)

— end —

111.148.252.84

SmartFilter Category:	Spam URLs Make Category Suggestions
Namerservers on IP:	ns1.fastmedsnow.com ns1.hotdirectrx.com ns1.newdirectrx.com ns1.thedirectrx.com ns2.fastmedsnow.com ns2.newdirectrx.com ns2.thedirectrx.com

Online Pharmacy Spam – www.ultimaterxhere.com

April 13, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Department of Justice – Ryan Haight Act

Address lookup

canonical name ultimaterxhere.com.
aliases http://www.ultimaterxhere.com
addresses 111.148.252.84
Domain Whois record

Queried whois.internic.net with “dom ultimaterxhere.com”…

Domain Name: ULTIMATERXHERE.COM
Registrar: 35 TECHNOLOGY CO., LTD
Whois Server: whois.35.com
Referral URL: http://www.35.com
Name Server: NS1.POLAMER98.COM
Name Server: NS2.PAMERAK9.COM
Status: ok
Updated Date: 11-apr-2010
Creation Date: 11-apr-2010
Expiration Date: 11-apr-2011

Last update of whois database: Wed, 14 Apr 2010 00:36:22 UTC
Queried whois.35.com with “ultimaterxhere.com”…

Registrant:
XIANGYUN kangam20@126.com +86.05955895319
XIANGYUN
JINZHELU1.9
JJ,FJ,CN 544542

Domain Name:ultimaterxhere.com
Record last updated at 2010-04-11 08:12:29
Record created on 2010/4/11
Record expired on 2011/4/11

Domain servers in listed order:
ns1.polamer98.com ns2.pamerak9.com

Administrator:
XIANGYUN kangam20@126.com +86.05955895319
XIANGYUN
JINZHELU1.9
JJ,FJ,CN 544542

Technical Contactor:
XIANGYUN kangam20@126.com +86.05955895319
XIANGYUN
JINZHELU1.9
JJ,FJ,CN 544542

Billing Contactor:
XIANGYUN kangam20@126.com +86.05955895319
XIANGYUN
JINZHELU1.9
JJ,FJ,CN 544542

Network Whois record

Queried whois.apnic.net with “111.148.252.84”…

inetnum: 111.128.0.0 – 111.159.255.255
netname: NorthStar
descr: North Star Information Hi.tech Ltd. Co.
descr: No.18, Beifengwo Road, Haidian District,
descr: Beijing, China, 100038
country: CN
admin-c: CW1171-AP
tech-c: LQ568-AP
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20090507
mnt-by: APNIC-HM
mnt-routes: MAINT-NORTHSTAR-APNIC
mnt-lower: MAINT-NORTHSTAR-APNIC
changed: hm-changed@apnic.net 20090514
source: APNIC

DNS query for 84.252.148.111.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.ultimaterxhere.com IN CNAME ultimaterxhere.com 600s (00:10:00)
ultimaterxhere.com IN A 59.53.91.188 600s (00:10:00)
ultimaterxhere.com IN SOA
server: ns.ultimaterxhere.com
email: admin.ultimaterxhere.com
serial: 2010041101
refresh: 600
retry: 600
expire: 14400
minimum ttl: 600
600s (00:10:00)
ultimaterxhere.com IN NS ns1.polamer98.com 172800s (2.00:00:00)
ultimaterxhere.com IN NS ns2.pamerak9.com 172800s (2.00:00:00)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion

Online Pharmacy Spam – youfavrx1.com

April 7, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Great_RxDeals are at Your_Fingertips!
No_Prescription_Needed!
0rder_Now At -> http://youfavrx1.com

Address lookup

canonical name youfavrx1.com.
aliases
addresses 111.148.252.84
Domain Whois record

Queried whois.internic.net with “dom youfavrx1.com”…

Domain Name: YOUFAVRX1.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.FRNS31.COM
Name Server: NS2.DAVENS24.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 26-mar-2010
Creation Date: 26-mar-2010
Expiration Date: 26-mar-2011

Last update of whois database: Wed, 07 Apr 2010 20:14:06 UTC
Queried whois.namerich.cn with “youfavrx1.com”…

DomainName : youfavrx1.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server: NS1.FRNS31.COM
Name Server: NS2.DAVENS24.COM
Status: clientTransferProhibited
Status: clientDeleteProhibited
Creation Date: 2010-03-26
Expiration Date: 2011-03-26
Last Update Date: 2010-03-26

Registrant Name: HUANG MEIHUI
Registrant Organization: HUANG MEIHUI
Registrant Address: DATONGZHONGLU23
Registrant City: SZ
Registrant Province/State: JS
Registrant Country Code: CN
Registrant Postal Code: 215009
Registrant Phone Number: +86.051288912625
Registrant Fax: +86.051288912625
Registrant Email: ppaneln@126.com

Administrative Name: HUANG MEIHUI
Administrative Organization: HUANG MEIHUI
Administrative Address: DATONGZHONGLU23
Administrative City: SZ
Administrative Province/State: JS
Administrative Country Code: CN
Administrative Postal Code: 215009
Administrative Phone Number: +86.051288912625
Administrative Fax: +86.051288912625
Administrative Email: ppaneln@126.com

Billing Name: HUANG MEIHUI
Billing Organization: HUANG MEIHUI
Billing Address: DATONGZHONGLU23
Billing City: SZ
Billing Province/State: JS
Billing Country Code: CN
Billing Postal Code: 215009
Billing Phone Number: +86.051288912625
Billing Fax: +86.051288912625
Billing Email: ppaneln@126.com

Technical Name: HUANG MEIHUI
Technical Organization: HUANG MEIHUI
Technical Address: DATONGZHONGLU23
Technical City: SZ
Technical Province/State: JS
Technical Country Code: CN
Technical Postal Code: 215009
Technical Phone Number: +86.051288912625
Technical Fax: +86.051288912625
Technical Email: ppaneln@126.com

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Queried whois.apnic.net with “111.148.252.84”…

DNS query for 84.252.148.111.in-addr.arpa returned an error from the server: NameError

name class type data time to live
youfavrx1.com IN SOA
server: ns.youfavrx1.com
email: admin.youfavrx1.com
serial: 2010032601
refresh: 600
retry: 600
expire: 14400
minimum ttl: 600
600s (00:10:00)
youfavrx1.com IN A 111.148.252.84 595s (00:09:55)
youfavrx1.com IN NS ns1.frns31.com 172795s (1.23:59:55)
youfavrx1.com IN NS ns2.davens24.com 172795s (1.23:59:55)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion

Canadian Pharmacy Spam – directrxtoday.com

April 7, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.167 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
200.11.67.194 Chile (Santiago)* Whois Google DNSStuff Urgentmessage.org
207.115.20.158 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address
Here is the text you submitted, with the IP addresses highlighted:

From Herminia Bruce Tue Apr 6 10:33:33 2010
X-Apparently-To: Tue, 06 Apr 2010 03:39:21 -0700
Return-Path:
X-YahooFilteredBulk: 200.11.67.194
X-YMailISG: N9ateM0WLDvw1IdNHQWfY53JvyV8AcISQmYM_TW.eHaEz9WIAJck3Cm09ePHTLYO8pK_5XJrVO46KvR8QbZcVbajvuMECoz2J9kCw.6UvZqjGFs1K5nXXbhShhZoc3Fg__WHypnJH.Vg1uCPPGS.fGRvcA9JKu2j.VQUeINghcxC1I5sibgdn803U8.6cm7CVAyRJ73Mo7ZhJl.f
X-Originating-IP: [200.11.67.194]
Authentication-Results: mta103.sbc.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=bg.fnv.nl; dkim=neutral (no sig)
Received: from 200.11.67.194 (EHLO flpd241.prodigy.net) (207.115.20.158)
by mta103.sbc.mail.mud.yahoo.com with SMTP; Tue, 06 Apr 2010 03:39:21 -0700
X-Header-Overseas: Mail.from.Overseas.source.200.11.67.194
X-Originating-IP: [200.11.67.194]
Received: from el1s5a2 (mail1.meridiangold.com [200.11.67.194] (may be forged))
by flpd241.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id o36AbWjW003191;
Tue, 6 Apr 2010 03:39:05 -0700
Message-ID:
Reply-To: “Herminia Bruce”
From: “Herminia Bruce”
To: ,
Subject: Need Ritalin?
Date: Tue, 06 Apr 2010 05:33:33 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 93

Incredible_RxMedDeals are available at your fingertips! Goto -> http://directrxtoday.com

Address lookup

canonical name directrxtoday.com
aliases
addresses 111.148.252.84
Domain Whois record

Queried whois.internic.net with “dom directrxtoday.com”…

Domain Name: DIRECTRXTODAY.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.POLAMER98.COM
Name Server: NS2.PAMERAK9.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 04-apr-2010
Creation Date: 03-apr-2010
Expiration Date: 03-apr-2011

Last update of whois database: Wed, 07 Apr 2010 19:42:54 UTC
Queried whois.namerich.cn with “directrxtoday.com”…

DomainName : directrxtoday.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server: NS1.POLAMER98.COM
Name Server: NS2.PAMERAK9.COM
Status: clientTransferProhibited
Status: clientDeleteProhibited
Creation Date: 2010-04-03
Expiration Date: 2011-04-03
Last Update Date: 2010-04-05

Registrant Name: SONG XING
Registrant Organization: SONG XING
Registrant Address: NANJINGLU64
Registrant City: JN
Registrant Province/State: SD
Registrant Country Code: CN
Registrant Postal Code: 250045
Registrant Phone Number: +86.055184721271
Registrant Fax: +86.055184721271
Registrant Email: shanwulin_a@163.com

Administrative Name: SONG XING
Administrative Organization: SONG XING
Administrative Address: NANJINGLU64
Administrative City: JN
Administrative Province/State: SD
Administrative Country Code: CN
Administrative Postal Code: 250045
Administrative Phone Number: +86.055184721271
Administrative Fax: +86.055184721271
Administrative Email: shanwulin_a@163.com

Billing Name: SONG XING
Billing Organization: SONG XING
Billing Address: NANJINGLU64
Billing City: JN
Billing Province/State: SD
Billing Country Code: CN
Billing Postal Code: 250045
Billing Phone Number: +86.055184721271
Billing Fax: +86.055184721271
Billing Email: shanwulin_a@163.com

Technical Name: SONG XING
Technical Organization: SONG XING
Technical Address: NANJINGLU64
Technical City: JN
Technical Province/State: SD
Technical Country Code: CN
Technical Postal Code: 250045
Technical Phone Number: +86.055184721271
Technical Fax: +86.055184721271
Technical Email: shanwulin_a@163.com

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Queried whois.apnic.net with “111.148.252.84”…

DNS query for 84.252.148.111.in-addr.arpa returned an error from the server: NameError

name class type data time to live
directrxtoday.com IN A 111.148.252.84 600s (00:10:00)
directrxtoday.com IN SOA
server: ns.directrxtoday.com
email: admin.directrxtoday.com
serial: 2010040301
refresh: 600
retry: 600
expire: 14400
minimum ttl: 600
600s (00:10:00)
directrxtoday.com IN NS ns1.polamer98.com 172800s (2.00:00:00)
directrxtoday.com IN NS ns2.pamerak9.com 172800s (2.00:00:00)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion

WhoIs medstourhome.com

March 17, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Purchase all of your favorite RxMedications online Today!.. Goto -> http://medstourhome.com

IP address: 222.170.127.201
Host name: medstourhome.com
Alias:
medstourhome.com
222.170.127.201 is from China(CN) in region Southern and Eastern Asia

TraceRoute to 222.170.127.201 [medstourhome.com]
Hop (ms) (ms) (ms) IP Address Host name
1 172 55 156 72.249.0.65 –
2 97 137 86 64.129.174.181 64-129-174-181.static.twtelecom.net
3 134 54 120 64.129.174.181 64-129-174-181.static.twtelecom.net
4 173 155 114 66.192.242.190 peer-01-ge-0-0-0-0.snjs.twtelecom.net
5 104 89 244 202.97.51.69 –
6 240 263 272 202.97.51.69 –
7 253 266 268 202.97.53.9 –
8 338 324 284 219.147.71.238 –
9 254 282 319 219.147.71.238 –
10 298 269 270 219.147.145.218 –
11 301 282 300 219.147.145.222 –
12 332 300 319 222.170.118.6 –
13 385 329 324 222.170.118.26 –
14 Timed out Timed out Timed out –
15 Timed out Timed out Timed out –
16 Timed out Timed out Timed out –
17 Timed out Timed out Timed out –
Trace aborted.
Results returned from whois.internic.net:
Whois Server Version 2.0

Domain Name: MEDSTOURHOME.COM
Registrar: 35 TECHNOLOGY CO., LTD
Whois Server: whois.35.com
Referral URL: http://www.35.com
Name Server: NS1.MOLIVAHOS11.COM
Name Server: NS2.NSACTIVE67.COM
Status: ok
Updated Date: 14-mar-2010
Creation Date: 14-mar-2010
Expiration Date: 14-mar-2011

Last update of whois database: Wed, 17 Mar 2010 17:53:30 UTC

Registrant:
CHENZHENGRONG mao_reg@sina.com +86.05955895319
CHENZHENGRONG
jinzhelilu1/9
JJ,FJ,CN 544542

Domain Name:medstourhome.com
Record last updated at 2010-03-14 07:16:42
Record created on 2010/3/14
Record expired on 2011/3/14

Domain servers in listed order:
ns1.molivahos11.com ns2.nsactive67.com

Administrator:
name:(CHENZHENGRONG)
Email:(mao_reg@sina.com) tel– +86.05955895319
CHENZHENGRONG
jinzhelilu1/9
r
t JJ
FJ,
CN

zipcode:544542

Technical Contactor:
name:(CHENZHENGRONG)
Email:(mao_reg@sina.com) tel– +86.05955895319
CHENZHENGRONG
jinzhelilu1/9
r
t JJ
FJ,
CN

zipcode:544542

Billing Contactor:
name:(CHENZHENGRONG)
Email:(mao_reg@sina.com) tel– +86.05955895319
CHENZHENGRONG
jinzhelilu1/9
r
t JJ
FJ,
CN

zipcode:544542

Network IP address lookup:

Whois query for 222.170.127.201…

Results returned from whois.arin.net:

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

Comment: This IP address range is not registered in the ARIN
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
RegDate: 2003-02-13
Updated: 2009-10-08

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net

inetnum: 222.170.0.0 – 222.172.127.255
netname: CHINANET-HL
descr: CHINANET HEILONGJIANG PROVINCE NETWORK
descr: Heilongjiang Telecom Corporation
descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country: CN
admin-c: LZ298-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HL
mnt-routes: MAINT-CHINANET-HL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040305
changed: hm-changed@apnic.net 20060605
source: APNIC

person: LIJUAN ZHENG
nic-hdl: LZ298-AP
e-mail: network@hljtele.com
address: Communication Corporation Internet Enterprise Division of HLJ
phone: +86-451-53902002
fax-no: +86-451-53900012
country: CN
changed: jxwx1234@163.com 20061229
mnt-by: MAINT-CHINANET-HLJTELE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

Online Pharmacy Spam – speedy-rx1.com

March 15, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

0rder_Your Favorite RxMedications 0nline Today! Goto -> http://speedy-rx1.com

Address lookup
canonical name www.speedy-rx1.com
aliases
addresses 61.235.117.84
Domain Whois record

Queried whois.internic.net with “dom speedy-rx1.com”…

Domain Name: SPEEDY-RX1.COM
Registrar: 35 TECHNOLOGY CO., LTD
Whois Server: whois.35.com
Referral URL: http://www.35.com
Name Server: NS1.MOLIVAHOS11.COM
Name Server: NS2.NSACTIVE67.COM
Status: ok
Updated Date: 14-mar-2010
Creation Date: 14-mar-2010
Expiration Date: 14-mar-2011

Last update of whois database: Mon, 15 Mar 2010 18:56:52 UTC
Queried whois.35.com with “speedy-rx1.com”…

Registrant:
CHENZHENGRONG mao_reg@sina.com +86.05955895319
CHENZHENGRONG
jinzhelilu1/9
JJ,FJ,CN 544542

Domain Name:speedy-rx1.com
Record last updated at 2010-03-14 07:16:45
Record created on 2010/3/14
Record expired on 2011/3/14

Domain servers in listed order:
ns1.molivahos11.com ns2.nsactive67.com

Administrator:
Name– CHENZHENGRONG
EMail-: mao_reg@sina.com
tel –: +86.05955895319
org: CHENZHENGRONG
jinzhelilu1/9
JJ,FJ,CN 544542

Technical Contactor:
Name– CHENZHENGRONG
EMail-: mao_reg@sina.com
tel –: +86.05955895319
org: CHENZHENGRONG
jinzhelilu1/9
JJ,FJ,CN 544542

Billing Contactor:
Name– CHENZHENGRONG
EMail-: (mao_reg@sina.com)
tel –: +86.05955895319
org: CHENZHENGRONG
jinzhelilu1/9
JJ,FJ,CN 544542

Network Whois record

Queried whois.apnic.net with “61.235.117.84”…

inetnum: 61.235.117.0 – 61.235.117.255
netname: CRGdSzS
country: CN
descr: China Railcom Guangdong Shenzhen Subbranch
descr: Telecommunication Company
descr: Shenzhen City,Guangdong Province
admin-c: LQ112-AP
tech-c: LM273-AP
status: ASSIGNED NON-PORTABLE
changed: hanb@crc.net.cn 20030731
mnt-by: MAINT-CN-CRTC
source: APNIC

route: 61.232.0.0/14
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
country: CN
origin: AS9394
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090908
source: APNIC

person: LV QIANG
nic-hdl: LQ112-AP
e-mail: crnet_mgr@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51892111
fax-no: +86-10-51847845
country: CN
changed: ipas@cnnic.net.cn 20060911
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: liu min
nic-hdl: LM273-AP
e-mail: abuse@chinatietong.com
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20041208
mnt-by: MAINT-CNNIC-AP
source: APNIC
DNS records

DNS query for 84.117.235.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
speedy-rx1.com IN A 222.170.127.201 600s (00:10:00)
speedy-rx1.com IN SOA
server: ns.speedy-rx1.com
email: admin.speedy-rx1.com
serial: 2010031401
refresh: 600
retry: 600
expire: 14400
minimum ttl: 600
600s (00:10:00)
speedy-rx1.com IN NS ns2.nsactive67.com 172800s (2.00:00:00)
speedy-rx1.com IN NS ns1.molivahos11.com 172800s (2.00:00:00)
— end —

WhoIs – www.steroidportal.com

March 14, 2010Leave a comment

Buying Prescription Drugs Online

May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

This is definately a fraudulant website. It is also affiliated with at least 14 other fraud sites such as

AUDIT IP 72.18.133.86 HOSTING

01. Advancedsteroids.com
02. Authenticsteroids.com
03. Bigsteroid.com
04. Easysteroid.com
05. Jintropinbuilder.com
06. Jintropinsupplier.com
07. Ster0ids24.com
08. Steroidlive.com
09. Steroidman.com
10. Steroidmanager.com
11. Steroidportal.com
12. Steroidssupplier.com
13. Yoursteroid.com

and more.

This website is engaged in fraudulent web commerce activity; specifically, deceptive advertising and internet theft. It uses anonymous web hosting to hide the identity of the people behind this operation so they can’t be traced. It is essentially a phishing website lying quiescent waiting for an unsuspecting consumer to “bite” and send money. DO NOT SEND MONEY. If you do you will not hear from them again.

Please spread the word so others dont lose their money.

WhoIs Lookup performed by Karen’s WhoIs
http://www.karenware.com

Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered

Domain Name: STEROIDPORTAL.COM
Registrar: WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC
Whois Server: whois.webnic.cc
Referral URL: http://www.webnic.cc
Name Server: NS1.AMSTERDAMHOST.NET
Name Server: NS2.AMSTERDAMHOST.NET
Status: ok
Updated Date: 18-jul-2009
Creation Date: 14-mar-2006
Expiration Date: 14-mar-2012

Last update of whois database: Sun, 14 Mar 2010 16:25:01 UTC
Domain: steroidportal.com
Status: Active

DNS:
ns1.amsterdamhost.net
ns2.amsterdamhost.net

Created: 2006-03-14 00:00:00
Expires: 2012-03-14 05:54:01
Last Modified: 2008-03-16 08:34:28

Registrant Contact:
Katz Global Domain Name Registration
Privacy Protected Domain Katz Global Domain Name Trust (domaintrust@katzglobal.com)
32 Maxwell Road #03-07
Singapore, SC, sg 069115
P: +65.67228356 F: +65.67258021

Administrative Contact:
Katz Global Domain Name Trust
Privacy Protected Domain Katz Global Domain Name Trust (domaintrust@katzglobal.com)
32 Maxwell Road #03-07
Singapore, SC, sg 069115
P: +65.67228356 F: +65.67258021

Technical Contact:
Katz Global Domain Name Trust
Privacy Protected Domain Katz Global Domain Name Trust (domaintrust@katzglobal.com)
32 Maxwell Road #03-07
Singapore, SC, sg 069115
P: +65.67228356 F: +65.67258021

Billing Contact:
Katz Global Domain Name Trust
Privacy Protected Domain Katz Global Domain Name Trust (domaintrust@katzglobal.com)
32 Maxwell Road #03-07
Singapore, SC, sg 069115
P: +65.67228356 F: +65.67258021

IP address: 124.217.246.112
Host name: http://www.steroidportal.com
Alias:
steroidportal.com
http://www.steroidportal.com
124.217.246.112 is from Malaysia(MY) in region Southern and Eastern Asia

TraceRoute to 124.217.246.112 [www.steroidportal.com]
Hop (ms) (ms) (ms) IP Address Host name
1 72 87 40 72.249.128.105 –
2 18 17 22 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 22 24 17 4.69.145.133 ae-33-80.car3.dallas1.level3.net
4 20 Timed out 20 4.68.63.162 –
5 66 55 51 216.6.12.17 vlan1136.icore2.laa-losangeles.as6453.net
6 171 163 158 216.6.12.34 vlan1278.icore1.tv2-tokyo.as6453.net
7 250 233 289 116.0.88.34 vlan1143.icore1.hk2-hongkong.as6453.net
8 287 271 257 116.0.82.17 if-11-0-0-31.core3.hk2-hongkong.as6453.net
9 443 420 448 116.0.82.66 if-2-1.bb1.kt1-kualalumpur.as6453.net
10 474 399 364 216.6.121.62 –
11 291 298 313 124.217.255.13 –
12 314 324 332 124.217.246.112 amsterdamhost.net
Trace complete

Retrieving DNS records for http://www.steroidportal.com…
DNS servers
ns1.amsterdamhost.net
ns2.amsterdamhost.net

Answer records
steroidportal.com MX
preference: 0
exchange: steroidportal.com
14400s
steroidportal.com SOA
server: ns1.amsterdamhost.net
email: sreport@shinjiru.com
serial: 2009071701
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s
steroidportal.com NS ns1.amsterdamhost.net 86400s
steroidportal.com NS ns2.amsterdamhost.net 86400s
steroidportal.com A 124.217.246.112 14400s

Authority records

Additional records
steroidportal.com A 124.217.246.112 14400s
ns1.amsterdamhost.net A 124.217.246.112 14400s
ns2.amsterdamhost.net A 124.217.246.113 14400s

Whois query for steroidportal.com…
Query error: Timed out
Network IP address lookup:

Whois query for 124.217.246.112…

Results returned from whois.arin.net:

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

NetRange: 124.0.0.0 – 124.255.255.255
CIDR: 124.0.0.0/8
NetName: APNIC-124
NetHandle: NET-124-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS2.LACNIC.NET
NameServer: NS-SEC.RIPE.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
RegDate: 2005-01-27
Updated: 2009-10-08

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net

# ARIN WHOIS database, last updated 2010-03-13 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html

Results returned from whois.apnic.net:
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 124.217.224.0 – 124.217.255.255
netname: PIRADIUS-NET
descr: PIRADIUS NET
country: MY
admin-c: PA124-AP
tech-c: PA124-AP
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
mnt-by: APNIC-HM
mnt-lower: MAINT-MY-PIRADIUS
changed: hm-changed@apnic.net 20071217
source: APNIC

person: PIRADIUS NET Administrator
nic-hdl: PA124-AP
e-mail: abuse@piradius.net
address: PIRADIUS NET
address: Unit 21-3A, Level 21
address: Plaza DNP 59, Jalan Abdullah Tahir
address: Taman Century Garden
address: 80300 Johor Bahru, Johor
address: Malaysia
phone: +607 334 8605
fax-no: +607 334 8605
country: MY
changed: admin@piradius.net 20071003
mnt-by: MAINT-MY-PIRADIUS
source: APNIC

Online Pharmacy Spam – extremelyfastrx.com

March 12, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Get ready to make her happy.
Discount price store: ID0894256
http://mqn.extremelyfastrx.com?xvi
We do guarantee high-quality medications, instant worldwide delivery and friendly support.
2001-2009 Pfizer Inc. All rights reserved.

WhoIs Head Star Pharmacy – www.headstarpharmacy.com

March 11, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Welcome to Head Star Pharmacy »

Head Star Pharmacy is dedicated to provide an unparalleled secure, safe and convenient environment for individuals to purchase prescribed medications from worldwide at discounted prices and it is available to them online round the clock. No waiting for Doctors, you can enjoy Complete Privacy and you can order anytime, at your convenience from your home or office which ever suitable, with NO PRESCRIPTION REQUIRED!!

Server Type: Microsoft-IIS/5.0
IP Address: 76.163.79.239 [Whois] [Reverse-Ip] [Ping] [DNS Lookup] [Traceroute]
IP Location United States – Kentucky – Hopkinsville – Ecommerce Corporation
Response Code: 200
Blacklist Status: Clear
Domain Status: Registered And Active Website

Whois Record

Registration Service Provided by : HnD Servers
Domain Name: HEADSTARPHARMACY.COM
Registrant: PrivacyProtect.org
Domain Admin ()
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 10-Feb-2007
Expiration Date: 10-Feb-2008
Domain servers in listed order: ns10.ixwebhosting.com
ns9.ixwebhosting.com

Administrative Contact: PrivacyProtect.org
Domain Admin ()
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact: PrivacyProtect.org
Domain Admin ()
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact: PrivacyProtect.org
Domain Admin ()
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Status:ACTIVE

Report: Headstarpharmacy.com
Category: Pharmacies
HEAD STAR PHARMACY – FDA Approved Medications i paid them and never recieved my product. several e-mails not returned Pakistan Internet

Headstarpharmacy.com
headstarpharmacy.com
Internet,
U.S.A.
I paid and never recieved my product. I have e-mailed them on 5 different dates over a 39 day period and never got a response. They are a ripoff and i urge you not to use them for anything. If you do, YOU WILL BE SORRY!

paul
east brunswick, New Jersey
U.S.A.

Ripoffreport.com

Online Pharmacy – favoriterx1.com

March 9, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Browse Our RX-Selection at -> http://favoriterx1.com

IP address: 208.73.210.27
Host name: favoriterx1.com
Alias:
favoriterx1.com
208.73.210.27 is from United States(US) in region North America

TraceRoute to 208.73.210.27 [favoriterx1.com]
Hop (ms) (ms) (ms) IP Address Host name
1 28 21 15 72.249.0.65 –
2 51 38 22 206.123.64.21 –
3 21 17 25 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
4 27 38 27 4.69.145.116 ae-73-70.ebr3.dallas1.level3.net
5 74 50 66 4.69.132.77 ae-3-3.ebr2.losangeles1.level3.net
6 66 61 199 4.69.144.70 ae-24-70.car4.losangeles1.level3.net
7 46 44 57 4.71.128.74 bandcon.car4.losangeles1.level3.net
8 83 61 61 208.73.208.14 –
9 257 255 283 208.73.210.27 parkinglot.information.com
Trace complete

Retrieving DNS records for favoriterx1.com…
DNS servers
ns2.dsredirection.com
ns1.dsredirection.com

Answer records
favoriterx1.com SOA
server: ns1.dsredirection.com
email: hostmaster@oversee.net
serial: 2010021214
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 25670
3600s
favoriterx1.com TXT v=spf1 -all 3600s
favoriterx1.com NS ns2.dsredirection.com 3600s
favoriterx1.com NS ns1.dsredirection.com 3600s
favoriterx1.com A 208.73.210.27 600s

Authority records

Additional records

Whois query for favoriterx1.com…
Query error: Timed out
Network IP address lookup:

Whois query for 208.73.210.27…

Results returned from whois.arin.net:

OrgName: Oversee.net
OrgID: OVERS-1
Address: 515 S. Flower St
Address: Suite 4400
City: Los Angeles
StateProv: CA
PostalCode: 90071
Country: US

NetRange: 208.73.208.0 – 208.73.215.255
CIDR: 208.73.208.0/21
NetName: OVERSEE-NET-2
NetHandle: NET-208-73-208-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate: 2006-12-28
Updated: 2006-12-28

OrgAbuseHandle: OVERS-ARIN
OrgAbuseName: Oversee NOC
OrgAbusePhone: +1-213-408-0080
OrgAbuseEmail: ipadmin@oversee.net

OrgTechHandle: OVERS-ARIN
OrgTechName: Oversee NOC
OrgTechPhone: +1-213-408-0080
OrgTechEmail: ipadmin@oversee.net

# ARIN WHOIS database, last updated 2010-03-09 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html

Canadian Pharmacy Spam – phamostermo32.com

March 9, 20101 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

http://phamostermo32.com

IP address: 195.88.226.2
Host name: phamostermo32.com
Alias:
phamostermo32.com
195.88.226.2 is from Moldova, Republic of(MD) in region Eastern Europe

TraceRoute to 195.88.226.2 [phamostermo32.com]
Hop (ms) (ms) (ms) IP Address Host name
1 77 55 35 72.249.128.105 –
2 128 99 103 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 53 45 95 66.192.253.26 peer-02-xe-0-0-0.palo.twtelecom.net
4 70 99 135 4.69.132.77 ae-3-3.ebr2.losangeles1.level3.net
5 130 326 89 4.69.132.13 ae-2-2.ebr2.sanjose1.level3.net
6 283 305 155 4.69.134.218 ae-82-82.csw3.sanjose1.level3.net
7 270 102 310 195.88.226.2 –
Trace complete

Retrieving DNS records for phamostermo32.com…
DNS servers
ns1.namerich.com
ns2.namerich.com

Answer records
phamostermo32.com SOA
server: NS1.NAMERICH.com
email: guoliang@chinaspringboard.cn
serial: 2010030500
refresh: 10800
retry: 7200
expire: 3600000
minimum ttl: 3600
3600s
phamostermo32.com A 195.88.226.2 3600s
phamostermo32.com A 91.212.132.230 3600s
phamostermo32.com NS NS1.NAMERICH.com 3600s
phamostermo32.com NS ns2.NAMERICH.com 3600s

Authority records

Additional records

Whois query for phamostermo32.com…
Query error: Timed out
Network IP address lookup:

Whois query for 195.88.226.2…

Results returned from whois.arin.net:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 195.0.0.0 – 195.255.255.255
CIDR: 195.0.0.0/8
NetName: RIPE-CBLK3
NetHandle: NET-195-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 1996-03-25
Updated: 2009-03-25

RTechHandle: RIPE-NCC-ARIN
RTechName: RIPE NCC Hostmaster
RTechPhone: +31 20 535 4444
RTechEmail: search-ripe-ncc-not-arin@ripe.net

# ARIN WHOIS database, last updated 2010-03-08 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html

Results returned from whois.ripe.net:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to ‘195.88.226.0 – 195.88.227.255’

inetnum: 195.88.226.0 – 195.88.227.255
netname: Evpatur
descr: Evpatur LTD
country: MD
org: ORG-EL79-RIPE
admin-c: NK539-RIPE
tech-c: NK539-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: EVPATUR-MNT
mnt-routes: EVPATUR-MNT
mnt-domains: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

organisation: ORG-EL79-RIPE
org-name: Evpatur LTD
org-type: OTHER
address: Komsomolskaya 10a, 3200 Bendery, Moldova
admin-c: NK539-RIPE
tech-c: NK539-RIPE
e-mail: service@evpatour.md
mnt-ref: EVPATUR-MNT
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

person: Nikolay Kravchuk
address: Komsomolskaya 10a, 3200 Bendery, Moldova
mnt-by: EVPATUR-MNT
phone: +373-821-02184
nic-hdl: NK539-RIPE
changed: service@evpatour.md 20090804
source: RIPE

% Information related to ‘195.88.226.0/23AS49188’

route: 195.88.226.0/23
descr: route point
origin: AS49188
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20091215
source: RIPE

WhoIs mydiscountmeds.net

March 4, 201011 Comments

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Mydiscountmed.com, Mydiscountmed.net, Qualitynet, And Ewebcart.com

I ordered a prescription drug on line, and it gave me the price and told me it would be shipped in 3 to 6 days, never received the medication, however they did cash my check, and I am unemployed right now and 37 dollars is a lot of money, I was not able to get my prescriptions from my local pharmacy as they took the money, there is no phone number or address to contact them.

I have sent them numerous emails however they have not responded. If they did this to me I am certain they did this to many others as well, elderly people who do not know how to report such a thing, And in Michigan right now there is a lot of people ordering medications on line due to the economy and the lay offs from our auto industry. We cannot afford to be handing someone our money so they can get rich. If they did this to even 10 people, I am sure there a many more, they made 400 in a few minutes. I am asking this to be looked into, this is FRAUD and I am very upset

Katie
Gowen, Michigan
U.S.A.

IP address: 85.17.161.108
Host name: mydiscountmeds.net
Alias:
mydiscountmeds.net
85.17.161.108 is from Netherlands(NL) in region Western Europe

TraceRoute to 85.17.161.108 [mydiscountmeds.net]
Hop (ms) (ms) (ms) IP Address Host name
1 24 9 6 72.249.128.105 –
2 39 15 12 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 13 18 16 4.69.145.52 ae-63-60.ebr3.dallas1.level3.net
4 35 35 43 4.69.134.22 ae-7-7.ebr3.atlanta2.level3.net
5 45 40 49 4.69.132.86 ae-2-2.ebr1.washington1.level3.net
6 45 52 53 4.69.134.130 ae-61-61.csw1.washington1.level3.net
7 65 62 62 4.69.134.145 ae-62-62.ebr2.washington1.level3.net
8 153 153 156 4.69.137.57 ae-43-43.ebr2.frankfurt1.level3.net
9 135 136 138 4.69.132.137 ae-2-2.ebr1.dusseldorf1.level3.net
10 135 132 141 4.69.141.150 ae-1-100.ebr2.dusseldorf1.level3.net
11 149 145 146 4.69.133.89 ae-2-2.ebr1.amsterdam1.level3.net
12 140 182 145 4.69.139.137 ae-1-51.edge3.amsterdam1.level3.net
13 138 139 140 212.72.33.94 leaseweb-crs-evo.amsterdam1.level3.net
14 139 150 140 85.17.100.226 po100.sr1.evo.leaseweb.net
15 139 151 166 85.17.161.108 –
Trace complete

Retrieving DNS records for mydiscountmeds.net…
DNS servers
ns02.nlcityhosting.com
ns01.nlcityhosting.com

Answer records
mydiscountmeds.net MX
preference: 0
exchange: mydiscountmeds.net
14400s
mydiscountmeds.net SOA
server: ns01.nlcityhosting.com
email: admin@nlcityhosting.com
serial: 2009111702
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s
mydiscountmeds.net NS ns01.nlcityhosting.com 86400s
mydiscountmeds.net NS ns02.nlcityhosting.com 86400s
mydiscountmeds.net A 85.17.161.108 14400s

Authority records

Additional records
mydiscountmeds.net A 85.17.161.108 14400s
ns01.nlcityhosting.com A 85.17.161.67 14400s
ns02.nlcityhosting.com A 85.17.161.68 14400s

Whois query for mydiscountmeds.net…
Results returned from whois.internic.net:

Whois Server Version 2.0
Domain Name: MYDISCOUNTMEDS.NET
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS01.MYDISCOUNTMEDS.NET
Name Server: NS02.MYDISCOUNTMEDS.NET
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 23-oct-2009
Creation Date: 27-oct-2008
Expiration Date: 27-oct-2010

Last update of whois database: Thu, 04 Mar 2010 08:53:10 UTC
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Registrant:
Domains by Proxy, Inc.

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: MYDISCOUNTMEDS.NET

Domain servers in listed order:
NS01.MYDISCOUNTMEDS.NET
NS02.MYDISCOUNTMEDS.NET

For complete domain details go to:
http://who.godaddy.com/whoischeck.aspx?Domain=MYDISCOUNTMEDS.NET
Network IP address lookup:

Whois query for 85.17.161.108
Results returned from whois.arin.net:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 85.0.0.0 – 85.255.255.255
CIDR: 85.0.0.0/8
NetName: 85-RIPE
NetHandle: NET-85-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS2.LACNIC.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2004-04-01
Updated: 2009-05-18

Information related to ‘85.17.161.0 – 85.17.161.255’

inetnum: 85.17.161.0 – 85.17.161.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070601
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘85.17.0.0/16AS16265’

route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE

Online Canadian Pharmacy Spam – firerxdeals.com

March 2, 2010Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Melody Schultz melodyschultzwo@jmss.com.sg

0rder_your favorite rxmeds are here, With fast_reliable shipping! Goto – http://firerxdeals.com

Domain
flushwinds.com
loveserop.com
rxloveseres.com
barelios.com
rxshoperss.com
myrxbrother.com
fantasticrx24.com
rxalwayshere.com

IP address: 222.170.127.201
Host name: firerxdeals.com
Alias:
firerxdeals.com
222.170.127.201 is from China(CN) in region Southern and Eastern Asia

TraceRoute to 222.170.127.201 [firerxdeals.com]

Hop (ms) (ms) (ms) IP Address Host name
1 17 17 15 72.249.0.65 –
2 16 24 26 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 9 7 6 4.69.145.140 ae-3-80.edge2.dallas3.level3.net
4 11 20 7 4.69.145.140 ae-3-80.edge2.dallas3.level3.net
5 17 8 12 144.232.20.253 sl-crs2-fw-0-6-5-0.sprintlink.net
6 47 11 41 144.232.18.52 sl-crs2-ana-0-8-0-2.sprintlink.net
7 39 44 36 144.232.1.82 sl-gw29-ana-1-0-0.sprintlink.net
8 297 299 300 144.228.74.222 sl-china1-270104-0.sprintlink.net
9 300 295 301 144.228.74.222 sl-china1-270104-0.sprintlink.net
10 506 508 513 202.97.51.61 –
11 517 519 505 202.97.53.202 –
12 530 524 516 219.147.71.238 –
13 530 518 563 219.147.71.2 –
14 549 557 554 219.147.145.222 –
15 559 551 558 222.170.118.6 –
16 565 554 553 222.170.118.26 –
17 Timed out Timed out Timed out –
18 Timed out Timed out Timed out –
19 Timed out Timed out Timed out –
20 Timed out Timed out Timed out –
Trace aborted.

Retrieving DNS records for firerxdeals.com…
DNS servers
ns1.ryhers23.com [222.170.127.201]
ns2.ryhers23.com [222.170.127.201]
ns3.gasewaz23.com [61.235.117.85]
ns4.gasewaz23.com [61.235.117.85]
ns5.bedsaw10.com [59.53.91.121]
ns6.bedsaw10.com [59.53.91.121]
Query for DNS records for firerxdeals.com failed: Timed out
Whois query for firerxdeals.com…
Query error: Timed out
Network IP address lookup:

Whois query for 222.170.127.201…

Results returned from whois.arin.net:

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

NetRange: 222.0.0.0 – 222.255.255.255
CIDR: 222.0.0.0/8
NetName: APNIC8
NetHandle: NET-222-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS2.LACNIC.NET
NameServer: NS-SEC.RIPE.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-

info/whois_search2/abuse-and-spamming
RegDate: 2003-02-13
Updated: 2009-10-08

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net

inetnum: 222.170.0.0 – 222.172.127.255

netname: CHINANET-HL
descr: CHINANET HEILONGJIANG PROVINCE NETWORK
descr: Heilongjiang Telecom Corporation
descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country: CN
admin-c: LZ298-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HL
mnt-routes: MAINT-CHINANET-HL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040305
changed: hm-changed@apnic.net 20060605
source: APNIC

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

My Canadian Pharmacy

Address lookup

Domain Whois record

Network Whois record

DNS records

Main Office:

ICS International Certified Stocks:

International Orders:

Web Reputation

Domain Whois record

Network Whois record

DNS records

1-800-420-8226

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Report: Headstarpharmacy.com Category: Pharmacies HEAD STAR PHARMACY – FDA Approved Medications i paid them and never recieved my product. several e-mails not returned Pakistan Internet

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online

May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Report: Headstarpharmacy.com
Category: Pharmacies
HEAD STAR PHARMACY – FDA Approved Medications i paid them and never recieved my product. several e-mails not returned Pakistan Internet

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration