Canadian Pharmacy – goodzchoices.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://goodzchoices.com

Address lookup

canonical name goodzchoices.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom goodzchoices.com“…

   Domain Name: GOODZCHOICES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Thu, 13 Aug 2009 01:04:47 UTC <<<

Queried whois.namerich.cn with “goodzchoices.com“…

 DomainName : goodzchoices.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.LIGHTINGDNSFLASH.COM
Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS6.YELLOWDNSPLACE.COM
Name Server......................NS5.YELLOWDNSPLACE.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS2.LIGHTINGDNSFLASH.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-11

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
goodzchoices.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
goodzchoices.com IN NS ns3.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns4.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns2.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns1.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – geitwhileitshot.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://geitwhileitshot.com

Address lookup

canonical name geitwhileitshot.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom geitwhileitshot.com“…

   Domain Name: GEITWHILEITSHOT.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Tue, 11 Aug 2009 23:57:32 UTC <<<

Queried whois.hupo.com with “geitwhileitshot.com“…

Domain Name: geitwhileitshot.com

Registrant Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Administrative Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Technical Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Billing Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.lightingdnsflash.com
  ns2.lightingdnsflash.com
  ns3.ceasednserror.com
  ns4.ceasednserror.com
  ns5.yellowdnsplace.com
  ns6.yellowdnsplace.com

Registration Date:2009-08-07 05:53:14
Expireation Date:2010-08-07 05:53:14

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
geitwhileitshot.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
geitwhileitshot.com IN NS ns3.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns4.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns2.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns1.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —


Canadian Pharmacy Spam – wehavethemforyou.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://wehavethemforyou.com

Address lookup

canonical name wehavethemforyou.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom wehavethemforyou.com“…

   Domain Name: WEHAVETHEMFORYOU.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Tue, 11 Aug 2009 16:31:02 UTC

Queried whois.namerich.cn with “wehavethemforyou.com“…

 DomainName : wehavethemforyou.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.LIGHTINGDNSFLASH.COM
Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS6.YELLOWDNSPLACE.COM
Name Server......................NS5.YELLOWDNSPLACE.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS2.LIGHTINGDNSFLASH.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-11

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
wehavethemforyou.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
wehavethemforyou.com IN NS ns3.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns4.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns2.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns1.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – mosthighlysoughtafter.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://mosthighlysoughtafter.com

Address lookup

canonical name mosthighlysoughtafter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom mosthighlysoughtafter.com“…

   Domain Name: MOSTHIGHLYSOUGHTAFTER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BIGBADDNS.COM
   Name Server: NS2.BIGBADDNS.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.STEADYDNSGOES.COM
   Name Server: NS6.STEADYDNSGOES.COM
   Status: ok
   Updated Date: 07-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Mon, 10 Aug 2009 15:27:46 UTC

Queried whois.namerich.cn with “mosthighlysoughtafter.com“…


 DomainName : mosthighlysoughtafter.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS1.BIGBADDNS.COM
Name Server......................NS6.STEADYDNSGOES.COM
Name Server......................NS2.BIGBADDNS.COM
Name Server......................NS5.STEADYDNSGOES.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-07

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
mosthighlysoughtafter.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns3.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns4.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns2.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns1.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN A 60.12.166.154 86400s (1.00:00:00)

Traceroute

Tracing route to mosthighlysoughtafter.com [60.12.166.154]

hop rtt rtt rtt ip address fully qualified domain name
1 11 3 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.29 et5-2.ibr04.dllstx3.theplanet.com
5 0 0 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 12 1 1 4.69.145.180 ae-83-80.ebr3.dallas1.level3.net
7 39 36 34 4.69.132.77 ae-3.ebr2.losangeles1.level3.net
8 33 33 33 4.69.144.72 ae-2-70.edge2.losangeles1.level3.net
9 209 212 206 4.78.202.18 china-netco.edge2.losangeles1.level3.net
10 209 208 206 219.158.3.185
11 207 208 206 219.158.4.110
12 206 207 206 219.158.12.42
13 224 224 226 221.12.82.106
14 261 291 258 221.12.82.78
15 213 212 214 60.12.166.154

Trace complete

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: TimedOut
HTTP – 80
POP3 – 110 Error: TimedOut
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
219.76.110.185 Hong Kong (Central District)* Whois Google DNSStuff Urgentmessage.org
207.115.36.162 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Marylou K. Howe Sat Aug 8 13:06:23 2009

Return-Path:
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=robobat.fr; domainkeys=neutral (no sig); from=robobat.fr; dkim=neutral (no sig)
Received: from 219.76.110.185 (EHLO nlpi148.prodigy.net) (207.115.36.162)
by mta147.sbc.mail.mud.yahoo.com with SMTP; Sat, 08 Aug 2009 13:06:13 -0700
Received: from vmpuhc1 (n219076110185.netvigator.com [219.76.110.185])
by nlpi148.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n78K2vNe028613;
Sat, 8 Aug 2009 15:06:01 -0500
Message-ID: <000701ca1863$b43ce8c0$627e0202@robobat.fr>
Reply-To: “Marylou K. Howe” <marylou_howeql@robobat.fr>
From: “Marylou K. Howe”  <marylou_howeql@robobat.fr>
To: , ,
Subject: Rxmed Refill?
Date: Sat, 08 Aug 2009 13:06:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 156

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Sat, 08 Aug 2009 22:06:56 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy – canadianmedicinenow.com

Canadian Pharmacy They stole $201 USD from my account internet

Canadian Pharmacy
Phone: 1 (210) 787 171
Canadian Pharmacy.com
Internet, Nationwide,
U.S.A.

I placed an order but never received my goods!

Sendt: 14. januar 2009 00:38
Til: ‘support@canadianmedicinenow.com’
Emne: VS: [Ticket#2008121310004211] [Order ID: N26-964685]

You are still not responding to my mail, and now I can’t even find your homepage! I really do hop that someone will be able to locate your company and the people standing behind this kind of criminal acts. One thing’s for sure I want my money back ore se to that you will be brought for justice.

Sendt: 10. januar 2009 09:30
Til: ‘support@canadianmedicinenow.com’
Emne: VS: [Ticket#2008121310004211] [Order ID: N26-964685]

Ok. I will now ask my bank to get in contact with your paypal, concerning a claim on my payment.
I must say that I’m astounded that you don’t even respond to my mail….???

Sendt: 8. januar 2009 23:57
Til: ‘support@canadianmedicinenow.com’
Emne: VS: [Ticket#2008121310004211] [Order ID: N26-964685] confirmation: Order was processed successfully

If it should occur that you are having trouble responding to this email, I will give it one more shot to here from you. Try to give me an answer on xxx@xxx

Sendt: 3. januar 2009 18:59
Til: ‘support@canadianmedicinenow.com
Emne: SV: [Ticket#2008121310004211] [Order ID: N26-964685] confirmation: Order was processed successfully

I’m sorry but I cant tolerate this kind of service. Why don’t you give me an answer concerning my order. How can you just pretend that its ok to charge a payment for nothing. If I don’t here from you within this week I will have to ask my bank to get in contact with your PayPal to get my payment transferred back to my account.

Sendt: 19. december 2008 17:37
Til: ‘Pharmacy Support’
Emne: SV: [Ticket#2008121310004211] [Order ID: N26-964685] confirmation: Order was processed successfully

Hey again.
I have now checked at the local post office and the main post office in Give. Future more I have checked by both my neighbors in case they should have received my package. I’m sorry, but there’s no result.
Pls. get back to me with an answer. If you can’t deliver my order I will have to demand my payment transferred back to my account.

Fra: Pharmacy Support [mailto:support@canadianmedicinenow.com]
Sendt: 17. december 2008 20:45
Til: xxxx xxxx
Emne: Re: [Ticket#2008121310004211] [Order ID: N26-964685] confirmation: Order was processed successfully

Dear xxxx xxxx,

Please, let me know.

Thanks for choosing us.
Best regards, Maxim,
Canadian Pharmacy Support Team

xxxx@xxxx

Ok.. I will try tomorrow and then get back to you with an answer.

—–Oprindelig meddelelse—–
Fra: Pharmacy Support [mailto:support@canadianmedicinenow.com]
Sendt: 13. december 2008 18:49
Til: xxxx xxxx
Emne: Re: [Ticket#2008121310004211] [Order ID: N26-964685] confirmation: Order was processed successfully

Dear xxxx xxxx,

I’m terribly sorry you still have not received your purchase.

Please, tell me if you have visited your local post office? The package may be
there.

Thanks for choosing us.
Best regards, Maxim,
Canadian Pharmacy Support Team

xxxx@xxxx wrote:

When do you think that I will receive my order. When I try to check my order status, nothing appears.

—–Oprindelig meddelelse—–
Fra: Pharm Support Group [mailto:support@youpharmacysupportteam.com]
Sendt: 22. oktober 2008 17:46
Til: xxxx@xxxx
Emne: [Order ID: N26-964685] confirmation: Order was processed successfully

Dear xxxx xxxx,

Please, carefully read this e-mail message to the end.

Your order N26-964685 is for:
Delivery (AirMail) – $0.0
Total: $201.01

Ordered products will be dispatched during next 24 hours to the following
address:

Estimated delivery time for AirMail delivery is 2-3 weeks. If you don’t receive the package in 3-4 weeks period please contact our support service with
your order ID N26-964685. Upon delivery Please confirm that everything is ok with your order. We need such confirmation from you to close the order and change the status to ‘completed’ in our customers database.

If you wish to contact our support, please, keep your order ID N26-964685 in your message or in its subject and you may always call us at:
1 (210) 787 1711
1 (800) 383 7433

You may check your order status at:
http://check-order-status.com/

Attention, Please!
Any charge-backs to credit cards without communicating with us first are treated as Fraudulent. All details, including original order form, username,IP addresses and access logs bearing members IP addresses and/or e-mail
addresses and username will be forwarded to the issuing Credit Card Company (Fraud Division), F.B.I. (Credit Card Fraud Division) and all Credit Reference Agencies which will probably result in a query into members credit card payment habits. Credit Card Fraud is a serious crime and will not be tolerated.

Feel free to contact us if you have any questions or if you need any other products, we’ll do our best to help you.

Thanks for choosing us.

Best regards,
Alexander
Support Team

Peder
Give
Denmark

Address lookup

lookup failed canadianmedicinenow.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom canadianmedicinenow.com“…

   Domain Name: CANADIANMEDICINENOW.COM
   Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
   Whois Server: whois.directnic.com
   Referral URL: http://www.directnic.com
   Name Server: NS0.DIRECTNIC.COM
   Name Server: NS1.DIRECTNIC.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 08-jul-2008
   Expiration Date: 08-jul-2010

>>> Last update of whois database: Fri, 07 Aug 2009 06:55:46 UTC <<<

Queried whois.directnic.com with “canadianmedicinenow.com“…

Registrant:
 PSTA Pharmacy Support Team Acc
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Domain Name: CANADIANMEDICINENOW.COM

Administrative Contact: 
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Technical Contact: 
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Record last updated 07-14-2009 06:38:04 AM
Record expires on 07-08-2010
Record created on 07-08-2008

Domain servers in listed order:
	NS0.DIRECTNIC.COM	69.46.233.245
	NS1.DIRECTNIC.COM	69.46.234.245

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
canadianmedicinenow.com IN SOA
server: ns0.directnic.com
email: hostmaster.directnic.com
serial: 1219345229
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
canadianmedicinenow.com IN NS ns1.directnic.com 3600s (01:00:00)
canadianmedicinenow.com IN NS ns0.directnic.com 7200s (02:00:00)
canadianmedicinenow.com IN MX
preference: 5
exchange: mail.canadianmedicinenow.com
7200s (02:00:00)

— end —

Canadian Healthcare – pill-here.com

Buying Prescription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.
phill-here


Address lookup

canonical name pill-here.com.
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom pill-here.com“…

Domain Name: PILL-HERE.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.NSCONTROL.COM
Name Server: NS2.NSCONTROL.COM
Name Server: NS3.NSCONTROL.COM
Name Server: NS4.NSCONTROL.COM
Status: ok
Updated Date: 11-may-2009
Creation Date: 12-mar-2009
Expiration Date: 12-mar-2010

>>> Last update of whois database: Tue, 04 Aug 2009 07:47:24 UTC

Queried whois.publicdomainregistry.com with “pill-here.com“…

Registration Service Provided By: DOMAIN NAMES REGISTRAR REG.RU LTD.
Contact: +7.4955801111

Domain Name: PILL-HERE.COM

Registrant:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Creation Date: 12-Mar-2009
Expiration Date: 12-Mar-2010

Domain servers in listed order:
ns4.nscontrol.com
ns3.nscontrol.com
ns2.nscontrol.com
ns1.nscontrol.com

Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
Note – All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676

Status:ACTIVE
Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

% Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
pill-here.com IN SOA
server: ns1.adverdomain.com
email: root.pill-here.com
serial: 2007100807
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
pill-here.com IN NS ns4.nscontrol.com 60s (00:01:00)
pill-here.com IN NS ns1.nscontrol.com 60s (00:01:00)
pill-here.com IN NS ns2.nscontrol.com 60s (00:01:00)
pill-here.com IN NS ns3.nscontrol.com 60s (00:01:00)
pill-here.com IN A 195.95.155.3 60s (00:01:00)

— end —

Canadian Pharmacy – online-tabs.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

CANADIAN PHARMACY-McCann Schoolonline tablet

Address lookup

canonical name online-tabs.net.
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
online-tabs.net IN SOA
server: ns1.nscontrol.com
email: root.online-tabs.net
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
online-tabs.net IN A 195.95.155.3 60s (00:01:00)
online-tabs.net IN NS ns2.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns3.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns5.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns4.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns1.nscontrol.com 60s (00:01:00)

— end —

Canadian Pharmacy – CANADIAN-DRUG-SHOP.COM

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

canadian-drugshop

Address lookup

canonical name canadian-drug-shop.com.
aliases
addresses 69.46.228.186

Domain Whois record

Queried whois.internic.net with “dom canadian-drug-shop.com“…

   Domain Name: CANADIAN-DRUG-SHOP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.PARKED.COM
   Name Server: NS2.PARKED.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 25-jun-2008
   Creation Date: 29-jul-2002
   Expiration Date: 29-jul-2011

Last update of whois database: Sun, 02 Aug 2009 16:49:35 UTC <<<

Queried whois.godaddy.com with “canadian-drug-shop.com“…

Registrant:
   RUMIT SAHNI

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: CANADIAN-DRUG-SHOP.COM

   Domain servers in listed order:
      NS1.PARKED.COM
      NS2.PARKED.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-69-46-226-0-1“…

OrgName:    Parked.com, LLC
OrgID:      PARKE-19
Address:    5505 West Gray Street
City:       Tampa
StateProv:  FL
PostalCode: 33609
Country:    US

NetRange:   69.46.226.0 - 69.46.228.255
CIDR:       69.46.226.0/23, 69.46.228.0/24
OriginAS:   AS11575
NetName:    PARKED1
NetHandle:  NET-69-46-226-0-1
Parent:     NET-69-46-224-0-1
NetType:    Reallocated
NameServer: NS0.ZIPA.COM
NameServer: NS1.ZIPA.COM
Comment:
RegDate:    2007-10-23
Updated:    2007-10-23

RNOCHandle: NETWO2072-ARIN
RNOCName:   Network Administrator
RNOCPhone:  +1-813-386-2801
RNOCEmail:  netadmin@parked.com 

OrgTechHandle: DOMAI142-ARIN
OrgTechName:   Domain Administrator
OrgTechPhone:  +1-813-386-2801
OrgTechEmail:  admin@parked.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name class type data time to live
canadian-drug-shop.com IN SOA
server: ns1.parked.com
email: admin.parked.com
serial: 2008062520
refresh: 28800
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
canadian-drug-shop.com IN A 69.46.228.186 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns1.parked.com 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns2.parked.com 86400s (1.00:00:00)
186.228.46.69.in-addr.arpa IN PTR 69-46-228-186.parked.com 86400s (1.00:00:00)

— end —

CANADIAN-DRUG-SHOP.COM is involved in a MASSIVE SPAM operation and is a menace to the internet.

Canadian Pharmacy – Botnet Hosting – 1-888-298-7454

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Here is the url:

http://www.foresight.org/briefing/?buy-levitra-online-sildenafil-citrate&briefing=395

www.viagrasupply.com – Viagra Supply

Address lookup

canonical name www.foresight.org.
aliases
addresses 66.201.49.40

Domain Whois record

Queried whois.publicinterestregistry.net with “foresight.org“…

Domain ID:D825803-LROR
Domain Name:FORESIGHT.ORG
Created On:18-Feb-1994 05:00:00 UTC
Last Updated On:13-Feb-2009 20:49:17 UTC
Expiration Date:19-Feb-2010 05:00:00 UTC
Sponsoring Registrar:Dotster, Inc. (R34-LROR)
Status:OK
Registrant ID:DOT-Y3GBIH2PZG0C
Registrant Name:Foresight Institute
Registrant Organization:Foresight Institute
Registrant Street1:PO Box 61058
Registrant City:Palo Alto
Registrant State/Province:CA
Registrant Postal Code:94306
Registrant Country:US
Registrant Phone:+1.6502890860
Registrant Email:domaininfo@foresight.org
Admin ID:DOT-3HF0UXIJAJJF
Admin Name:Foresight Institute
Admin Organization:Foresight Institute
Admin Street1:PO Box 61058
Admin City:Palo Alto
Admin State/Province:CA
Admin Postal Code:94306
Admin Country:US
Admin Phone:+1.6502890860
Admin Email:domaininfo@foresight.org
Tech ID:DOT-UKF3EN547CDK
Tech Name:Foresight Institute
Tech Organization:Foresight Institute
Tech Street1:PO Box 61058
Tech City:Palo Alto
Tech State/Province:CA
Tech Postal Code:94306
Tech Country:US
Tech Phone:+1.6502890860
Tech Email:domaininfo@foresight.org
Name Server:NS1.NAMERESOLVE.COM
Name Server:NS2.NAMERESOLVE.COM
Name Server:NS3.NAMERESOLVE.COM
Name Server:NS4.NAMERESOLVE.COM

Network Whois record

Queried whois.arin.net with “!NET-66-201-49-0-1“…

CustName:   Tarlton Properties
Address:    1455 Adams Drive
City:       Menlo Park
StateProv:  CA
PostalCode: 94025
Country:    US
RegDate:    2008-06-18
Updated:    2008-06-18

NetRange:   66.201.49.0 - 66.201.49.127
CIDR:       66.201.49.0/25
OriginAS:   AS26803
NetName:    TARLTONPROPERTIESMBP
NetHandle:  NET-66-201-49-0-1
Parent:     NET-66-201-32-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-06-18
Updated:    2008-06-18

RTechHandle: BEV-ARIN
RTechName:   Evans, Bob
RTechPhone:  +1-650-330-0428
RTechEmail:  bob@fiberinternetcenter.com 

OrgNOCHandle: FIBER-ARIN
OrgNOCName:   FiberNOC
OrgNOCPhone:  +1-650-330-0428
OrgNOCEmail:  info@fiberinternetcenter.com

OrgTechHandle: BEV-ARIN
OrgTechName:   Evans, Bob
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  bob@fiberinternetcenter.com

OrgTechHandle: SWIPI-ARIN
OrgTechName:   Swip Information
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  swip@fiberinternetcenter.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.foresight.org IN A 66.201.49.40 3600s (01:00:00)
foresight.org IN SOA
server: ns1.nameresolve.com
email: hostmaster.foresight.org
serial: 2009080112
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
86400s (1.00:00:00)
foresight.org IN NS ns1.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns2.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns3.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns4.nameresolve.com 86400s (1.00:00:00)
foresight.org IN MX
preference: 20
exchange: snow.he.net
3600s (01:00:00)
foresight.org IN TXT “v=spf1″v=spf1 a mx a:thorin.netconcepts.com ~all” 86400s (1.00:00:00)
foresight.org IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx5.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx4.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
foresight.org IN A 66.201.49.40 3600s (01:00:00)
40.49.201.66.in-addr.arpa IN PTR foresight.org 1200s (00:20:00)

— end —

Address lookup

canonical name www.viagrasupply.com.
aliases
addresses 74.52.66.139

Domain Whois record

Queried whois.internic.net with “dom viagrasupply.com“…

   Domain Name: VIAGRASUPPLY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: DNS1.ANSWERABLE.COM
   Name Server: DNS2.ANSWERABLE.COM
   Status: ok
   Updated Date: 11-dec-2008
   Creation Date: 07-aug-2008
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Sat, 01 Aug 2009 22:52:14 UTC <<<

Queried whois.onlinenic.com with “viagrasupply.com“…

Query error: TimedOut

Network Whois record

Queried whois.arin.net with “74.52.66.139“…

OrgName:    ThePlanet.com Internet Services, Inc.
OrgID:      TPCM
Address:    315 Capitol
Address:    Suite 205
City:       Houston
StateProv:  TX
PostalCode: 77002
Country:    US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange:   74.52.0.0 - 74.55.255.255
CIDR:       74.52.0.0/14
OriginAS:   AS13749,  AS21844,  AS30315,  AS36420
NetName:    NETBLK-THEPLANET-BLK-14
NetHandle:  NET-74-52-0-0-1
Parent:     NET-74-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate:    2006-02-17
Updated:    2009-02-24

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560
RAbuseEmail:  abuse@theplanet.com 

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3555
RNOCEmail:  noc@theplanet.com 

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-214-782-7800
RTechEmail:  admins@theplanet.com 

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560
OrgAbuseEmail:  abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3555
OrgNOCEmail:  noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-214-782-7800
OrgTechEmail:  admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.viagrasupply.com IN A 74.52.66.139 38380s (10:39:40)
viagrasupply.com IN A 74.52.66.139 38400s (10:40:00)
viagrasupply.com IN NS dns2.answerable.com 38400s (10:40:00)
viagrasupply.com IN SOA
server: dns1.answerable.com
email: claytonrand.hotmail.com
serial: 2008100502
refresh: 7200
retry: 7200
expire: 2419200
minimum ttl: 38400
86400s (1.00:00:00)
viagrasupply.com IN NS dns4.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns3.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns1.answerable.com 38400s (10:40:00)
139.66.52.74.in-addr.arpa IN PTR 8b.42.344a.static.theplanet.com 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – bestcheaprxpharm.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
151.11.178.165 Italy (Milan)* Whois Google DNSStuff Urgentmessage.org
207.115.36.139 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Vicodin`ES, Phentermin, XanaxAmbien, and others are here at your fingertips!
N0_Doctor_or_Prescription_Needed! Brand & Generic Names Available!
Fast_Trackable USPS_Shipping!
Browse_Our_Site_Today –> http://bestcheaprxpharm.com

From Joesph Holden Thu Jul 30 21:46:04 2009
Return-Path:
Authentication-Results: mta137.sbc.mail.re3.yahoo.com from=f2s.de; domainkeys=neutral (no sig); from=f2s.de; dkim=neutral (no sig)
Received: from 151.11.178.165 (EHLO nlpi125.prodigy.net) (207.115.36.139)
by mta137.sbc.mail.re3.yahoo.com with SMTP; Thu, 30 Jul 2009 22:49:25 -0700
Received: from iffjn11 ([151.11.178.165])
by nlpi125.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6V5n1ng031842;
Fri, 31 Jul 2009 00:49:23 -0500
Message-ID: <000701ca1199$cf606530$627e2c7a@f2s.de>
Reply-To: “Joesph Holden” jholdenie@f2s.de
From: “Joesph Holden”  jholdenie@f2s.de
To: , ,
Subject: Phentermin helps get off the weight!
Date: Fri, 31 Jul 2009 00:46:04 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 235

SmartFilter Category: Not Categorized
Make Category Suggestions
IP: 218.61.126.24
Nameservers: ns1.bestcheaprxpharm.com


ns2.bestcheaprxpharm.com


ns3.bestcheaprxpharm.com


ns4.bestcheaprxpharm.com

Address lookup

canonical name bestcheaprxpharm.com.
aliases
addresses 218.61.126.24

Domain Whois record

Queried whois.internic.net with “dom bestcheaprxpharm.com“…

   Domain Name: BESTCHEAPRXPHARM.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.BD4NS.COM
   Name Server: NS2.EF2NS.COM
   Name Server: NS3.BR4NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-jul-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

>>> Last update of whois database: Fri, 31 Jul 2009 15:02:39 UTC <<<

Queried whois.ename.com with “bestcheaprxpharm.com“…

Domain Name : bestcheaprxpharm.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.bd4ns.com
ns2.ef2ns.com
ns3.br4ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “218.61.126.24“…

inetnum:      218.60.0.0 - 218.61.255.255
netname:      UNICOM-LN
country:      CN
descr:        China Unicom Liaoning province network
descr:        China Unicom
admin-c:      CH1302-AP
tech-c:       GZ84-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-LN
mnt-routes:   MAINT-CNCGROUP-RR
changed:      hm-changed@apnic.net 20040405
changed:      hm-changed@apnic.net 20040927
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20080415
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        218.60.0.0/15
descr:        CNC Group CHINA169 Liaoning Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Guangyu Zhan
nic-hdl:      GZ84-AP
e-mail:       abuse@online.ln.cn
address:      DATA Communication Bureau of Liaoning Province,China
address:      38 Lianhe Road,Dadong District Shenyang 110044,China
phone:        +86-24-22800096
fax-no:       +86-24-22800368
country:      CN
changed:      zhangy@lntelecom.com 20030122
mnt-by:       MAINT-CNCGROUP-LN
source:       APNIC

DNS records

DNS query for 24.126.61.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bestcheaprxpharm.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
bestcheaprxpharm.com IN NS ns3.bestcheaprxpharm.com 86400s (1.00:00:00)
bestcheaprxpharm.com IN NS ns2.bestcheaprxpharm.com 86400s (1.00:00:00)
bestcheaprxpharm.com IN NS ns1.bestcheaprxpharm.com 86400s (1.00:00:00)
bestcheaprxpharm.com IN A 218.61.126.24 86400s (1.00:00:00)
bestcheaprxpharm.com IN NS ns4.bestcheaprxpharm.com 86400s (1.00:00:00)

— end —

Information for ‘218.61.126.24’

SmartFilter Category: Gambling
Make Category Suggestions
Namerservers on IP: ns1.bc3ns.com
ns1.casinoopenlive.com
ns1.drovosekdns.com
ns1.easystuff2009.com
ns1.fa6ns.com
ns1.hoo5ns.com
ns1.interestsdns.com
ns1.magnifydns.com
ns1.mc3ns.com
ns1.myns.asia
ns1.myns.in
ns1.quickns.asia
ns1.streetdns.com
ns1.thebestusrx.com
ns1.usacheapmeds.com
ns1.vb7ns.com
ns1.ye7ns.com
ns1.zooparkdns.com
ns2.casinoopenlive.com
ns2.directordns.com
ns2.drovosekdns.com
ns2.ef2ns.com
ns2.excessdns.com
ns2.ga2ns.com
ns2.getin485.net
ns2.gromdns.com
ns2.gt6ns.com
ns2.gutgal.com
ns2.hockeydns.com
ns2.ke2ns.net
ns2.le8ns.net
ns2.lo8ns.com
ns2.magnifydns.com
ns2.myeasystuff2009.com
ns2.na7ns.com
ns2.ng3ns.com
ns2.nosorogdns.com
ns2.rot5ns.com
ns2.southeparkdns.com
ns2.streetdns.com
ns2.tc7ns.com
ns2.thebestusrx.com
ns2.thebestusrxnow.com
ns2.zooparkdns.com
ns3.bigtestidns.com
ns3.bmw5seriesdns.com
ns3.casinoopenlive.com
ns3.drovosekdns.com
ns3.euromarketsoft.com
ns3.gipermegadns.com
ns3.hannowerass.com
ns3.j8wns.net
ns3.ke2ns.net
ns3.movepors.com
ns3.nosorogdns.com
ns3.r4ins.com
ns3.southeparkdns.com
ns3.tc7ns.com
ns3.tep1nss.com
ns3.tertorests.com
ns3.top1ns.com
ns3.xionadopa.com
ns3.zooparkdns.com
ns4.bmw5seriesdns.com
ns4.casinoopenlive.com
ns4.excessdns.com
ns4.gipermegadns.com
ns4.gromdns.com
ns4.lo8ns.com
ns4.magnifydns.com
ns4.southeparkdns.com
ns4.tc7ns.com
ns4.ye7ns.com

Canadian Pharmacy Spam – bestuspharm.com

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Address lookup

canonical name .bestuspharm.com.
aliases
addresses 92.48.96.138

Domain Whois record

Queried whois.internic.net with “dom bestuspharm.com“…

Domain Name: BESTUSPHARM.COM
Registrar: SPOT DOMAIN LLC DBA DOMAINSITE.COM
Whois Server: whois.domainsite.com
Referral URL: http://www.domainsite.com
Name Server: NS2.ZONEEDIT.COM
Name Server: NS4.ZONEEDIT.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 21-aug-2008
Creation Date: 21-aug-2008
Expiration Date: 21-aug-2009

Last update of whois database: Fri, 31 Jul 2009 14:21:27 UTC
Queried whois.domainsite.com with “bestuspharm.com“…

Registrar: Spot Domain LLC
Domain Name: bestuspharm.com

Protected Domain Services Customer ID: DSR-834978

Expiration Date: 2009-08-21 17:11:19
Creation Date: 2008-08-21 11:11:20

Name Servers:
ns2.zoneedit.com
ns4.zoneedit.com

REGISTRANT CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way
Suite 300
Denver
CO 80230
US

Phone: +1.3034596012

Email Address: bestuspharm.com@protecteddomainservices.com
ADMINISTRATIVE CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way Suite 300
Denver CO 80230
US

Phone: +1.3034596012

Email Address: bestuspharm.com@protecteddomainservices.com
TECHNICAL CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way Suite 300
Denver CO
80230
US
Phone: +1.303-459-6012

Email Address: bestuspharm.com@protecteddomainservices.com
BILLING CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way
Suite 300
Denver CO 80230
US

Phone: +1.3034596012
Email Address: bestuspharm.com@protecteddomainservices.com
1249050126.3771

Network Whois record

Queried whois.ripe.net with “-B 92.48.96.138

Information related to ‘92.48.96.136 – 92.48.96.143

inetnum: 92.48.96.136 – 92.48.96.143
netname: BlueConnex-44757
descr: BlueConnex transit customer

remarks: #############################################

remarks: Please report abuse incidents to abuse@blueconnex.net
remarks: Messages sent to other contact addresses may not be acted upon.

remarks: ############################################

country: GB
admin-c: BLO2-RIPE
tech-c: BLO2-RIPE
status: ASSIGNED PA
mnt-by: blueconnex-mnt
mnt-routes: blueconnex-mnt
source: RIPE
changed: pete.bristow@bluesquaredata.com 20090325
role: BlueConnex Ltd Operators
address: BlueConnex Ltd
address: BlueSquare House
address: Priors Way
address: Maidenhead
address: Berkshire
address: SL62HP

remarks: For abuse please contact abuse@blueconnex.net

phone: +44 (0)1628 673131
admin-c: PETE3-RIPE
admin-c: MM5420-RIPE
admin-c: ROB153-RIPE
tech-c: MM5420-RIPE
tech-c: ROB153-RIPE
mnt-by: blueconnex-mnt
tech-c: PETE3-RIPE
nic-hdl: BLO2-RIPE
changed: support@pcs-net.com 20081012
source: RIPE
e-mail: abuse@blueconnex.net
Information related to ‘92.48.64.0/18AS29550’

route: 92.48.64.0/18
descr: Blueconnex Networks Ltd
origin: AS29550
remarks: ***********************************
remarks: * *
remarks: * Abuse: abuse@blueconnex.net *
remarks: * *
remarks: * Peering: peering@blueconnex.net *
remarks: * *
remarks: ***********************************
mnt-by: blueconnex-mnt
source: RIPE
changed: brian.ross@netsumo.com 20080718

DNS records

name class type data time to live
http://www.bestuspharm.com IN A 92.48.96.138 7200s (02:00:00)
bestuspharm.com IN A 92.48.96.138 7200s (02:00:00)
bestuspharm.com IN NS ns2.zoneedit.com 7200s (02:00:00)
bestuspharm.com IN NS ns4.zoneedit.com 7200s (02:00:00)
bestuspharm.com IN SOA
server: ns2.zoneedit.com
email: soacontact.zoneedit.com
serial: 1219340336
refresh: 14400
retry: 7200
expire: 950400
minimum ttl: 7200
7200s (02:00:00)
bestuspharm.com IN MX
preference: 0
exchange: bestuspharm.com
7200s (02:00:00)
bestuspharm.com IN MX
preference: 5
exchange: mail.bestuspharm.com
7200s (02:00:00)
138.96.48.92.in-addr.arpa IN PTR mail.bestuspharm.com 86400s (1.00:00:00)

— end —

Report: BestRXPharm
Category: Pharmacies
BestRXPharm – Trust-net Complete scam! bestrxpharm.com Internet

BestRXPharm
Phone: 212-461-1188
Fax: 212-4611188
www.bestrxpharm.com
Internet
U.S.A.

I have ordered from them, the shipment has never arrived. I have contact Bestrxpharm and Trust-net (the payment provider). They both failed to reply my email. It has now been more than two months since the transaction.

Please don’t order from them! Complete scam!

Joey

ShumShuiPo

Hong Kong

Canadian Pharmacy – winpolls.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

winpolls

winpolls2

winpolls3

winpolls4

Address lookup

canonical name winpolls.com.
aliases
addresses 64.120.173.118

Domain Whois record

Queried whois.internic.net with “dom winpolls.com“…

In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. As a librarian, I’m particularly concerned that grand visions of digital libraries may entail trade-offs whose full implications are not being attended to. One immediate thought:. In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. Natural Substance Knock Offs in the FDA Pipeline Could be Dangerous; By American Association for Health Freedom

   Domain Name: WINPOLLS.COM
   Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
   Whois Server: whois.PublicDomainRegistry.com
   Referral URL: http://www.PublicDomainRegistry.com
   Name Server: D1.REGNAME.BIZ
   Name Server: D2.REGNAME.BIZ
   Name Server: D3.REGNAME.BIZ
   Name Server: D4.REGNAME.BIZ
   Status: ok
   Updated Date: 05-jun-2009
   Creation Date: 19-aug-2008
   Expiration Date: 19-aug-2009

>>> Last update of whois database: Tue, 28 Jul 2009 07:15:27 UTC <<<

Queried whois.publicdomainregistry.com with “winpolls.com“…

Registration Service Provided By: REGNAME.BIZ
Contact: +1.2014674681
Website: http://www.regname.biz

Domain Name: WINPOLLS.COM 

Registrant:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Creation Date: 19-Aug-2008
Expiration Date: 19-Aug-2009

Domain servers in listed order:
    d4.regname.biz
    d3.regname.biz
    d2.regname.biz
    d1.regname.biz

Administrative Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Technical Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Billing Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Status:ACTIVE

Network Whois record

Queried whois.arin.net with “64.120.173.118“…

OrgName:    Network Operations Center Inc.
OrgID:      NOC
Address:    PO Box 591
City:       Scranton
StateProv:  PA
PostalCode: 18501-0591
Country:    US

ReferralServer: rwhois://rwhois.hostnoc.net:4321/

NetRange:   64.120.128.0 - 64.120.191.255
CIDR:       64.120.128.0/18
OriginAS:   AS21788
NetName:    HOSTNOC-5BLK
NetHandle:  NET-64-120-128-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.HOSTNOC.NET
NameServer: NS2.HOSTNOC.NET
Comment:
RegDate:    2009-04-27
Updated:    2009-04-27

RAbuseHandle: SMA4-ARIN
RAbuseName:   Arcus, S. Matthew
RAbusePhone:  +1-570-343-8551
RAbuseEmail:  nic@hostnoc.net 

RNOCHandle: SMA4-ARIN
RNOCName:   Arcus, S. Matthew
RNOCPhone:  +1-570-343-8551
RNOCEmail:  nic@hostnoc.net 

RTechHandle: SMA4-ARIN
RTechName:   Arcus, S. Matthew
RTechPhone:  +1-570-343-8551
RTechEmail:  nic@hostnoc.net 

OrgTechHandle: SMA4-ARIN
OrgTechName:   Arcus, S. Matthew
OrgTechPhone:  +1-570-343-8551
OrgTechEmail:  nic@hostnoc.net

# ARIN WHOIS database, last updated 2009-07-27 20:00

DNS records

name class type data time to live
winpolls.com IN SOA
server: d4.regname.biz
email: a.kosterin.yahoo.com
serial: 2009060503
refresh: 7200
retry: 7200
expire: 7200
minimum ttl: 7200
38400s (10:40:00)
winpolls.com IN NS d4.regname.biz 38400s (10:40:00)
winpolls.com IN NS d2.regname.biz 38400s (10:40:00)
winpolls.com IN NS d1.regname.biz 38400s (10:40:00)
winpolls.com IN A 64.120.173.118 28800s (08:00:00)
winpolls.com IN NS d3.regname.biz 38400s (10:40:00)
118.173.120.64.in-addr.arpa IN PTR 64-120-173-118.hostnoc.net 86400s (1.00:00:00)

— end —

Candian Pharmacy – Spam Sites

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
omhca.com
prescriptionspoint.com

74.125.45.100 test1111.com
74.125.45.100 test1112.com
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 http://www.getantivirusplusnow.com
74.125.45.100 http://www.secure-plus-payments.com
74.125.45.100 http://www.securesoftwarebill.com

Canadian Pharmacy – Trusted Tabs – www.rxtrusted.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

RXtrusted

Address lookup

canonical name www.rxtrusted.com.
aliases
addresses 91.199.112.8

Domain Whois record

Queried whois.internic.net with “dom rxtrusted.com“…

   Domain Name: RXTRUSTED.COM
   Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
   Whois Server: whois.directnic.com
   Referral URL: http://www.directnic.com
   Name Server: NS0.PARTNERS-DNS.COM
   Name Server: NS1.PARTNERS-DNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 11-jul-2009
   Creation Date: 24-oct-2006
   Expiration Date: 24-oct-2009

>>> Last update of whois database: Sat, 25 Jul 2009 15:47:58 UTC <<<

Queried whois.directnic.com with “rxtrusted.com“…

Registrant:
 RX Partners
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Domain Name: RXTRUSTED.COM

Administrative Contact:
 Eagloff, Jessica jessicaeagloff@yahoo.co.uk
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Technical Contact:
 Eagloff, Jessica jessicaeagloff@yahoo.co.uk
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Record last updated 01-16-2009 11:08:29 AM
Record expires on 10-24-2009
Record created on 10-24-2006

Domain servers in listed order:
	NS0.PARTNERS-DNS.COM	83.149.85.32
	NS1.PARTNERS-DNS.COM	91.199.112.8
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8“…

% Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.rxtrusted.com IN A 91.199.112.8 1200s (00:20:00)
rxtrusted.com IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006665120
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rxtrusted.com IN NS ns1.partners-dns.com 1200s (00:20:00)
rxtrusted.com IN NS ns0.partners-dns.com 1200s (00:20:00)
rxtrusted.com IN NS vip2.partners-dns.com 1200s (00:20:00)
rxtrusted.com IN NS vip3.partners-dns.com 1200s (00:20:00)
rxtrusted.com IN NS vip1.partners-dns.com 1200s (00:20:00)
rxtrusted.com IN A 91.199.112.8 1200s (00:20:00)

Traceroute

Tracing route to http://www.rxtrusted.com [91.199.112.8]

hop rtt rtt rtt ip address fully qualified domain name
1 1 0 6 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 1 0 207 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.5 et5-1.ibr03.dllstx3.theplanet.com
5 191 0 5 157.238.225.5 xe-2-4.r01.dllstx09.us.bb.gin.ntt.net
6 1 1 1 144.232.24.69
7 3 4 3 144.232.19.177 sl-crs1-fw-0-6-3-0.sprintlink.net
8 40 40 39 144.232.19.101 sl-crs1-dc-0-8-5-0.sprintlink.net
9 118 118 118 144.232.19.147 sl-bb20-par-1-0-0.sprintlink.net
10 128 128 128 213.206.129.66 sl-bb21-fra-13-0-0.sprintlink.net
11 128 128 128 217.147.96.42 sl-gw10-fra-15-0-0.sprintlink.net
12 127 127 127 217.147.109.22
13 165 165 165 194.186.157.137 cat07.moscow.gldn.net
14 165 165 165 195.239.10.202 te1-1.maxwell.msk.wahome.ru
15 165 217 167 77.91.225.76 vl-500.ampere.msk.wahome.ru
16 166 166 166 92.241.162.66
17 * * *
18 * * *
19 * * *
20 * * *

Trace aborted

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Sat, 25 Jul 2009 14:53:23 GMT
Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=2469e36917484c7ab188ed7f7a4c7259; expires=Mon, 24-Aug-2009 14:53:23 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

Canadian Pharmacy – DirectParma – www.directpharma.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Here, in DirectPharma.net we are committed to bringing you the best meds for the lowest prices. Please check out our catalog with confidence that each one the listed items was tested for both Quality and Affectivity. We are connected to the most reputable suppliers, to bring you the best quality products. Because your health is at the center of our attention


Direct-pharm

Address lookup

canonical name directpharma.net.
aliases http://www.directpharma.net
addresses 67.192.134.225

Domain Whois record

Queried whois.internic.net with “dom directpharma.net“…

   Domain Name: DIRECTPHARMA.NET
   Registrar: DYNADOT, LLC
   Whois Server: whois.dynadot.com
   Referral URL: http://www.dynadot.com
   Name Server: NS0.DNSMADEEASY.COM
   Name Server: NS1.DNSMADEEASY.COM
   Name Server: NS2.DNSMADEEASY.COM
   Name Server: NS3.DNSMADEEASY.COM
   Name Server: NS4.DNSMADEEASY.COM
   Status: clientTransferProhibited
   Updated Date: 14-jun-2009
   Creation Date: 07-jun-2005
   Expiration Date: 07-jun-2011

>>> Last update of whois database: Sat, 25 Jul 2009 15:39:47 UTC <<<

Queried whois.dynadot.com with “directpharma.net“…

Domain Name: directpharma.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2011/06/07 UTC
Record created on 2005/06/07 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/25 08:35:39 PST <<<

Network Whois record

Queried whois.arin.net with “!NET-67-192-134-224-1“…

CustName:   ProNet
Address:    9725 Datapoint
City:       San Antonio
StateProv:  TX
PostalCode: 78225
Country:    US
RegDate:    2008-04-14
Updated:    2008-04-14

NetRange:   67.192.134.224 - 67.192.134.231
CIDR:       67.192.134.224/29
NetName:    RSPC-1208189406980389
NetHandle:  NET-67-192-134-224-1
Parent:     NET-67-192-0-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-04-14
Updated:    2008-04-14

RAbuseHandle: ABUSE45-ARIN
RAbuseName:   Abuse Desk
RAbusePhone:  +1-210-892-4000
RAbuseEmail:  abuse@rackspace.com 

RTechHandle: IPADM17-ARIN
RTechName:   IPADMIN
RTechPhone:  +1-210-892-4000
RTechEmail:  ipadmin@rackspace.com 

OrgAbuseHandle: ABUSE45-ARIN
OrgAbuseName:   Abuse Desk
OrgAbusePhone:  +1-210-892-4000
OrgAbuseEmail:  abuse@rackspace.com

OrgTechHandle: IPADM17-ARIN
OrgTechName:   IPADMIN
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  ipadmin@rackspace.com

OrgTechHandle: ZR9-ARIN
OrgTechName:   Rackspace, com
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  hostmaster@rackspace.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

DNS query for 225.134.192.67.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.directpharma.net IN CNAME directpharma.net 1741s (00:29:01)
directpharma.net IN MX
preference: 10
exchange: mail.directpharma.net
1800s (00:30:00)
directpharma.net IN A 67.192.134.225 1800s (00:30:00)
directpharma.net IN NS ns0.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns2.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns3.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns1.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns4.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN SOA
server: ns0.dnsmadeeasy.com
email: dns.dnsmadeeasy.com
serial: 2006010159
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)

Traceroute

Tracing route to http://www.directpharma.net [67.192.134.225]

hop rtt rtt rtt ip address fully qualified domain name
1 1 2 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 0 0 206.223.118.7 eq-dfw.rackspace.net
6 0 0 0 72.3.128.250 edge3-backbone1.dfw1.rackspace.net
7 2 2 2 67.192.56.229 vlan905.core5.dfw1.rackspace.com
8 3 2 2 67.192.56.15
9 2 2 2 67.192.134.225

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 301 Moved Permanently
Date: Sat, 25 Jul 2009 15:41:27 GMT
Server: Apache/2.0.52 (Red Hat)
X-Powered-By: PHP/5.2.10
Location: /en/
Set-Cookie: PHPSESSID=s7c0u3b9lb9garb3s9gq66o290; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

Generic-Pharmacy – generic-pharmacy.net

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.


best-generic

eneric-Pharmacy.net: Superior quality at unbeatable prices!
We are proud up to offer up to 80% off on safe and approved pharmaceutical products that meet the highest WHO (World Health Organization) standards. Since 2002, we have been dedicated to providing our customers with the highest quality products offered in an affordable and easy-to-use service. Over 250,000 satisfied customers globally have benefited from our broad array of generic medications; we invite you to become a satisfied customer as well! Special offer for returning customers…

Using 17 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

Domain Name: generic-pharmacy.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2017/07/17 UTC
Record created on 2003/07/17 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/07 13:43:45 PST <<<

Network Whois record

Queried whois.arin.net with "72.52.5.6"...
OrgName:    Prolexic Technologies, Inc.
OrgID:      PROLE
Address:    Prolexic Technologies
Address:    1930 Harrison Street
City:       Hollywood
StateProv:  FL
PostalCode: 33020
Country:    US

NetRange:   72.52.0.0 - 72.52.63.255
CIDR:       72.52.0.0/18
NetName:    PROLEXIC
NetHandle:  NET-72-52-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.PROLEXIC.NET
NameServer: NS2.PROLEXIC.NET
Comment:    http://www.prolexic.com / NOC hours are 24/7
RegDate:    2005-07-11
Updated:    2007-06-27

RTechHandle: HOSTM528-ARIN
RTechName:   Hostmaster
RTechPhone:  +1-866-800-0366
RTechEmail:  hostmaster@prolexic.com 

OrgTechHandle: HOSTM528-ARIN
OrgTechName:   Hostmaster
OrgTechPhone:  +1-866-800-0366
OrgTechEmail:  hostmaster@prolexic.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

name class type data time to live
generic-pharmacy.net IN A 72.52.5.6 1800s (00:30:00)
generic-pharmacy.net IN MX
preference: 20
exchange: mx2.emailsrvr.com
1800s (00:30:00)
generic-pharmacy.net IN MX
preference: 10
exchange: mx1.emailsrvr.com
1800s (00:30:00)
generic-pharmacy.net IN NS ns0.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns2.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns4.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns1.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns3.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN SOA
server: ns0.dnsmadeeasy.com
email: dns.dnsmadeeasy.com
serial: 2006010220
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)
6.5.52.72.in-addr.arpa IN PTR unknown.prolexic.com 85680s (23:48:00)

Traceroute

Tracing route to generic-pharmacy.net [72.52.5.6]

hop rtt rtt rtt ip address fully qualified domain name
1 1 1 0 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.25 et3-2.ibr04.dllstx3.theplanet.com
5 0 0 0 64.208.170.197 gigabitethernet7-3.ar2.dal2.gblx.net
6 30 30 30 207.138.122.214 wbs-connect-miami.tengigabitethernet2-4.1121.ar1.mia2.gblx.net
7 30 30 30 209.200.132.34 blackhole.prolexic.com
8 30 30 30 72.52.5.6 unknown.prolexic.com

Canadian Pharmacy – www.jumprx.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

JumpRx

Address lookup

canonical name www.jumprx.com.
aliases
addresses 76.163.80.181

Domain Whois record

Queried whois.internic.net with “dom jumprx.com“…

Domain Name: JUMPRX.COM
Registrar: DOTSTER, INC.
Whois Server: whois.dotster.com
Referral URL: http://www.dotster.com
Name Server: NS1.STARTLOGIC.COM
Name Server: NS10.IXWEBHOSTING.COM
Name Server: NS2.STARTLOGIC.COM
Name Server: NS9.IXWEBHOSTING.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 22-jul-2009
Creation Date: 15-feb-2007
Expiration Date: 15-feb-2011

Last update of whois database: Sat, 25 Jul 2009 07:54:26 UTC
Queried whois.dotster.com with “jumprx.com“…

Registrant:
Julio Rivera
Ave. Ricardo J. Alfaro
Panama City, NA 99999
PA

Registrar: DOTSTER
Domain Name: JUMPRX.COM
Created on: 15-FEB-07
Expires on: 15-FEB-11
Last Updated on: 22-JUL-09

Administrative, Technical Contact:
Rivera, Julio domain.3454652@gmail.com
Ave. Ricardo J. Alfaro
Panama City, NA 99999
PA
+507-6871-0782

Domain servers in listed order:
NS9.IXWEBHOSTING.COM
NS10.IXWEBHOSTING.COM
NS1.STARTLOGIC.COM
NS2.STARTLOGIC.COM

Network Whois record

Queried whois.arin.net with “76.163.80.181“…

OrgName: Ecommerce Corporation
OrgID: ECOMM-5
Address: 1774 Dividend Dr
City: Columbus
StateProv: OH
PostalCode: 43228
Country: US

NetRange: 76.162.0.0 – 76.163.255.255
CIDR: 76.162.0.0/15
NetName: ECOMMERCE-HOSTING
NetHandle: NET-76-162-0-0-1
Parent: NET-76-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.OPENTRANSFER.COM
NameServer: NS2.OPENTRANSFER.COM
Comment:
RegDate: 2006-11-09
Updated: 2007-04-02

RAbuseHandle: ABUSE875-ARIN
RAbuseName: eCommerce Inc ABUSE Dept
RAbusePhone: +1-614-777-1699
RAbuseEmail: abuse@ecommerce.com

RNOCHandle: HNI1-ARIN
RNOCName: eCommerce NOC
RNOCPhone: +1-614-777-1699
RNOCEmail: ipadmin@ecommerce.com

RTechHandle: HNI1-ARIN
RTechName: eCommerce NOC
RTechPhone: +1-614-777-1699
RTechEmail: ipadmin@ecommerce.com

OrgAbuseHandle: ABUSE875-ARIN
OrgAbuseName: eCommerce Inc ABUSE Dept
OrgAbusePhone: +1-614-777-1699
OrgAbuseEmail: abuse@ecommerce.com

OrgNOCHandle: HNI1-ARIN
OrgNOCName: eCommerce NOC
OrgNOCPhone: +1-614-777-1699
OrgNOCEmail: ipadmin@ecommerce.com

OrgTechHandle: HNI1-ARIN
OrgTechName: eCommerce NOC
OrgTechPhone: +1-614-777-1699
OrgTechEmail: ipadmin@ecommerce.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

DNS query for 181.80.163.76.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
http://www.jumprx.com IN A 76.163.80.181 86399s (23:59:59)
jumprx.com IN NS ns1.startlogic.com 3600s (01:00:00)
jumprx.com IN A 65.254.231.150 3600s (01:00:00)
jumprx.com IN NS ns2.startlogic.com 3600s (01:00:00)
jumprx.com IN MX
preference: 30
exchange: mx.jumprx.com
3600s (01:00:00)
jumprx.com IN TXT v=spf1 ip4:38.113.1.0/24 ip4:38.113.20.0/24 ip4:65.254.224.0/19 ?all 3600s (01:00:00)
jumprx.com IN SOA
server: ns1.ipower.com
email: dnsadmin.ipower.com
serial: 2008032950
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)

— end —

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
114.92.205.227 China* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com