Canadian Pharmacy Spam – flowersuffix.com

July 22, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
66.168.189.23	United States (Columbus)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.163	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Stewart Thurman Tue Jul 21 19:18:13 2009
Return-Path:
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ebay.ca; domainkeys=neutral (no sig); from=ebay.ca; dkim=neutral (no sig)
Received: from 66.168.189.23 (EHLO nlpi149.prodigy.net) (207.115.36.163)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Tue, 21 Jul 2009 19:21:50 -0700
Received: from wuhlju2 (static.unknown.charter.com [66.168.189.23] (may be forged))
by nlpi149.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M2LIQ2019630;
Tue, 21 Jul 2009 21:21:45 -0500
Message-ID: <000701ca0a72$aa470110$d828ea62@ebay.ca>
Reply-To: “Stewart Thurman” <stewartthurman_rl@ebay.ca>
From: “Stewart Thurman” <stewartthurman_rl@ebay.ca>
To: , ,
Subject: Do you want it to be longer and stronger in bed?
Date: Tue, 21 Jul 2009 21:18:13 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name	flowersuffix.com.
aliases
addresses	203.93.208.86 218.75.144.6 60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom flowersuffix.com“…

   Domain Name: FLOWERSUFFIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 12:08:38 UTC <<<

Queried whois.namerich.cn with “flowersuffix.com“…

 DomainName : flowersuffix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
flowersuffix.com	IN	A	218.75.144.6	10800s	(03:00:00)
flowersuffix.com	IN	A	60.191.239.150	10800s	(03:00:00)
flowersuffix.com	IN	A	203.93.208.86	10800s	(03:00:00)

— end —

SmartFilter Category:

Malicious Sites, Spam URLs
Make Category Suggestions

Namerservers on IP:

dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.moralgrand.com
ns1.noticezap.com
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.poundanger.com
ns1.putanger.com
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.saidcold.com
ns1.sawplump.com
ns1.sendbusy.com
ns1.sidebeauty.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.thosekept.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.via99.org
ns1.watchnorth.com
ns1.wooddoes.in
ns1.yardaware.com
ns1.yearbusy.com
ns2.112911.org
ns2.282715.com
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.andfell.com
ns2.aromafish.com
ns2.beautybounce.com
ns2.bedplain.com
ns2.bedsing.com
ns2.beforebegin.com
ns2.bitsshape.com
ns2.bluesign.in
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.breezyget.com
ns2.bu15.net
ns2.chartflat.in
ns2.clockbright.com
ns2.clothetrack.com
ns2.coateach.com
ns2.coatfather.com
ns2.cu28.com
ns2.cutfigure.com
ns2.cutheart.com
ns2.deluxecrop.com
ns2.desiresweet.com
ns2.directlisten.com
ns2.doctorstill.com

Canadian Pharmacy Spam – andmelody.com.

July 21, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian`Pharmacy is available at your_Fingertips!
No_Doctor_Needed! Browse our Site Today! -> http://andmelody.com

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

canonical name	andmelody.com.
aliases
addresses	60.191.239.150 203.93.208.86 218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom andmelody.com“…

   Domain Name: ANDMELODY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 01:31:53 UTC

Queried whois.namerich.cn with “andmelody.com“…

 DomainName : andmelody.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
andmelody.com	IN	A	60.191.239.150	10800s	(03:00:00)
andmelody.com	IN	A	203.93.208.86	10800s	(03:00:00)
andmelody.com	IN	A	218.75.144.6	10800s	(03:00:00)

— end —

Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

July 19, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
217.150.55.94	Russian Federation (Moscow)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.108	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George” <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Canadian Pharmacy Spam – http://cheaprx02.com

July 19, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
78.251.40.213	France*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.133	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Clarence Overton Sat Jul 18 05:37:31 2009
Return-Path:
Authentication-Results: mta131.sbc.mail.re2.yahoo.com from=addenbrookes.nhs.uk; domainkeys=neutral (no sig); from=addenbrookes.nhs.uk; dkim=neutral (no sig)
Received: from 78.251.40.213 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta131.sbc.mail.re2.yahoo.com with SMTP; Sat, 18 Jul 2009 06:41:41 -0700
Received: from x5lwy53 ([78.251.40.213])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6IDfOH8020044;
Sat, 18 Jul 2009 06:41:39 -0700
Message-ID: <000701ca07a4$84a00130$627e2c7a@addenbrookes.nhs.uk>
Reply-To: “Clarence Overton” clarenceovertonqc@addenbrookes.nhs.uk
From: “Clarence Overton” <clarenceovertonqc@addenbrookes.nhs.uk>
To: ScamBuster aka ScamFraudAlert.com
Subject: great deals goin on
Date: Sat, 18 Jul 2009 08:37:31 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Address lookup

lookup failed	cheaprx02.com
	Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom cheaprx02.com“…

   Domain Name: CHEAPRX02.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FE5NS.COM
   Name Server: SP536.DELETEDNS.COM
   Status: clientHold
   Status: clientTransferProhibited
   Updated Date: 19-jul-2009
   Creation Date: 27-jun-2009
   Expiration Date: 27-jun-2010

Last update of whois database: Mon, 20 Jul 2009 05:34:57 UTC

Queried whois.onlinenic.com with “cheaprx02.com“…

Registrant:
	 Serpino Berbeto ad6@safe-mail.net +1.2128848801
	 Serpino Berbeto
	 403 po box
	 New York,NY,US 10037

Domain Name:cheaprx02.com
Record last updated at 2009-07-16 19:25:01
Record created on 2009/6/27
Record expired on 2010/6/27

Domain servers in listed order:
	 ns1.fe5ns.com 	 ns2.re3ns.com 

Administrator:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Technical Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Billing Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name

class

type

data

time to live

cheaprx02.com

SOA

server:	ns1.domain.com
email:	admin.domain.com
serial:	1
refresh:	300
retry:	300
expire:	300
minimum ttl:	86400

86400s

(1.00:00:00)

cheaprx02.com

220.248.172.39

86400s

(1.00:00:00)

cheaprx02.com

ns1.cheaprx02.com

86400s

(1.00:00:00)

cheaprx02.com

ns2.cheaprx02.com

86400s

(1.00:00:00)

cheaprx02.com

ns3.cheaprx02.com

86400s

(1.00:00:00)

cheaprx02.com

ns4.cheaprx02.com

86400s

(1.00:00:00)

— end —

SmartFilter Category:	Not Categorized Make Category Suggestions
Namerservers on IP:	ns1.99999ns.com ns1.thebestusrx.com ns1.thebestusrxnow.com ns1.usacheapmeds.com ns2.hotrxlive.com ns2.thebestusrx.com ns4.tertorests.com

Canadian Pharmacy – circleso.com

July 12, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://circleso.com

Address lookup

canonical name	circleso.com.
aliases
addresses	203.93.208.86 218.75.144.6 60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom circleso.com“…

   Domain Name: CIRCLESO.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BITSSHAPE.COM
   Name Server: NS2.BITSSHAPE.COM
   Name Server: NS3.MOTHERWIT.RU
   Name Server: NS4.MOTHERWIT.RU
   Name Server: NS5.YOURHELD.COM
   Name Server: NS6.YOURHELD.COM
   Status: ok
   Updated Date: 08-jul-2009
   Creation Date: 08-jul-2009
   Expiration Date: 08-jul-2010

Last update of whois database: Sun, 12 Jul 2009 18:35:23 UTC <<<

Queried whois.namerich.cn with “circleso.com“…

 DomainName : circleso.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.BITSSHAPE.COM
Name Server......................NS5.YOURHELD.COM
Name Server......................NS4.MOTHERWIT.RU
Name Server......................NS3.MOTHERWIT.RU
Name Server......................NS6.YOURHELD.COM
Name Server......................NS1.BITSSHAPE.COM
Status...........................ok
Creation  Date ..................2009-07-08
Expiration Date .................2010-07-08
Last Update  Date ...............2009-07-08

Registrant ID ...................V-X-59013-15146
Registrant Name .................GAO HAIFENG
Registrant Organization .........GAO HAIFENG
Registrant Address ..............XINGUANGNANLU61
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........310019
Registrant Phone Number .........+86.057182421519
Registrant Fax ..................+86.057182421519
Registrant Email ................diaineg@126.com

Administrative ID ...............V-X-59013-15146
Administrative Name .............GAO HAIFENG
Administrative Organization .....GAO HAIFENG
Administrative Address ..........XINGUANGNANLU61
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......310019
Administrative Phone Number .....+86.057182421519
Administrative Fax ..............+86.057182421519
Administrative Email ............diaineg@126.com

Billing ID ......................V-X-59013-15146
Billing Name ....................GAO HAIFENG
Billing Organization ............GAO HAIFENG
Billing Address .................XINGUANGNANLU61
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............310019
Billing Phone Number ............+86.057182421519
Billing Fax .....................+86.057182421519
Billing Email ...................diaineg@126.com

Technical ID ....................V-X-59013-15146
Technical Name ..................GAO HAIFENG
Technical Organization...........GAO HAIFENG
Technical Address ...............XINGUANGNANLU61
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........310019
Technical Phone Number ..........+86.057182421519
Technical Fax ...................+86.057182421519
Technical Email .................diaineg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
circleso.com	IN	A	218.75.144.6	10800s	(03:00:00)
circleso.com	IN	A	60.191.239.150	10800s	(03:00:00)
circleso.com	IN	A	203.93.208.86	10800s	(03:00:00)

— end —

Best-Meds.com – Discounted Canadian Prescription Medications

July 10, 2009Leave a comment

Qualitynet Or BestMeds.com Rip-off will cash check but does not send order or answer follow-up E-Mails. BEWARE Internet

Qualitynet
Bestmeds.com
Internet,
U.S.A.

Order from this company on-line, gave check information and they cashed check but no order ha arrived or been sent. I have floowed up with 3 E-Mils with no reponse what so ever. But they were quick to cash my check for order.
So, Please be aware and do not fall for their false advertising. wish i had checked them here first, would have saved me some money.
Thanks

Roberta
Boynton Beach, Florida
U.S.A.

Canadian Pharmacy – drivespring.com

July 9, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
75.136.9.179	United States (Dalton)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.164	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Fidel Gibson Fri Jul 3 15:37:35 2009
Return-Path: <f_gibson_je@hopwood.ac.uk>
Authentication-Results: mta101.sbc.mail.re3.yahoo.com from=hopwood.ac.uk; domainkeys=neutral (no sig); from=hopwood.ac.uk; dkim=neutral (no sig)
Received: from 75.136.9.179 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta101.sbc.mail.re3.yahoo.com with SMTP; Fri, 03 Jul 2009 15:39:54 -0700
Received: from xfjwjy2 (static.unknown.charter.com [75.136.9.179] (may be forged))
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n63MddZF013409;
Fri, 3 Jul 2009 17:39:53 -0500
Message-ID: <000701c9fc2e$dc8f16f0$d828ea62@hopwood.ac.uk>
Reply-To: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
From: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
To:
Subject: Spice up your performance in bed
Date: Fri, 03 Jul 2009 17:37:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://drivespring.com

Address lookup

canonical name	drivespring.com.
aliases
addresses	218.75.144.6 60.191.239.150 124.42.91.162 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom drivespring.com“…

   Domain Name: DRIVESPRING.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

Last update of whois database: Fri, 10 Jul 2009 06:07:35 UTC <<<

Queried whois.namerich.cn with “drivespring.com“…

 DomainName : drivespring.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
drivespring.com	IN	A	218.75.144.6	10800s	(03:00:00)
drivespring.com	IN	A	124.42.91.162	10800s	(03:00:00)
drivespring.com	IN	A	60.191.239.150	10800s	(03:00:00)
drivespring.com	IN	A	203.93.208.86	10800s	(03:00:00)

— end —

Scam – WhoIs Gooodrugs.com – www.FDApharmacy.com

July 6, 20092 Comments

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

canonical name	gooodrugs.com.
aliases
addresses	216.240.130.172

Domain Whois record

Queried whois.internic.net with “dom gooodrugs.com“…

Domain Name: GOOODRUGS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.GOOODRUGS.COM
Name Server: NS2.GOOODRUGS.COM
Status: clientTransferProhibited
Updated Date: 19-jun-2009
Creation Date: 19-jun-2009
Expiration Date: 19-jun-2010

>>> Last update of whois database: Mon, 06 Jul 2009 13:15:04 UTC

Queried whois.enom.com with “gooodrugs.com“…

Visit AboutUs.org for more information about gooodrugs.com
href=”http://www.aboutus.org/gooodrugs.com”>AboutUs: gooodrugs.com</a>

Registration Service Provided By: –
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: gooodrugs.com

Registrant Contact:
Nexton Limited
Whois Agent

Fax:
Irpinskaya 69
Kiev, 03142
UA

Administrative Contact:
Nexton Limited
Whois Agent support@ruler-domains.com
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA

Technical Contact:
Nexton Limited
Whois Agent support@ruler-domains.com
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA

Status: Locked

Name Servers:
ns1.gooodrugs.com
ns2.gooodrugs.com

Creation date: 19 Jun 2009 10:16:07
Expiration date: 19 Jun 2010 10:16:07

Get Noticed on the Internet! Increase visibility for this domain name by listing it at http://www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “216.240.130.172“…

OrgName: ATMLINK, INC.
OrgID: ATMLIN
Address: 600 W. 7th Street
Address: Suite 360
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US

NetRange: 216.240.128.0 – 216.240.159.255
CIDR: 216.240.128.0/19
NetName: C-COMMUNICATIONS
NetHandle: NET-216-240-128-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.CALPOP.COM
NameServer: NS2.CALPOP.COM
Comment:
RegDate: 1999-09-22
Updated: 2006-03-30

OrgAbuseHandle: NOC1610-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-213-627-1937
OrgAbuseEmail: noc@atmlinkinc.com

OrgNOCHandle: KJO26-ARIN
OrgNOCName: Joostens, Ken
OrgNOCPhone: +1-213-627-1937
OrgNOCEmail: ken@calpop.com

OrgTechHandle: NOC1610-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-213-627-1937
OrgTechEmail: noc@atmlinkinc.com

# ARIN WHOIS database, last updated 2009-07-05 20:00

DNS records

DNS query for 172.130.240.216.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

gooodrugs.com

preference:	10
exchange:	gooodrugs.com

30s

(00:00:30)

gooodrugs.com

SOA

server:	ns1.gooodrugs.com
email:	hostmaster.ns1.gooodrugs.com
serial:	710161
refresh:	60
retry:	30
expire:	604800
minimum ttl:	30

30s

(00:00:30)

gooodrugs.com

ns2.gooodrugs.com

30s

(00:00:30)

gooodrugs.com

ns1.gooodrugs.com

30s

(00:00:30)

gooodrugs.com

216.240.130.172

30s

(00:00:30)

— end —

Canadian Pharmacy – ottawadrugs.com

July 6, 2009Leave a comment

Canadian Pharmacy A conartist and a fraud Jogeshwari West Mumaia – 400 060 India

Canadian Pharmacy
http://ottawadrugs.com/
Nationwide,
U.S.A.

I ordered 30 Viagra 100 mg tablets, plus 4 free ones that you advertised on the internet and I just received 34 sildenafil100 mg tablets from you. Viagra is a brand name product made by Pfizer, Inc. and the sildenafil is a generic product that can be made by any company without the controls of the FDA. There is no mention about Viagra anywhere on the package or the pill itself. The package was sent from Indiaand was wrapped in an India newspaper!

The pharmaceutical agency you mentioned in your advertisement Licensed by The College of Pharmacist of British Columbia is a fraudulent location. No individual can contact them by writing to the college at 200-1765 West 8th Ave. Vancouver, BCCanada V6J 5C6 or contact them at +1 (210) 888-9089. You also state that please, keep your order I.D. every time you make a call, and that statement is which just another misrepresentation!

You stated in order confirmation:

Attention, Please!
Any charge-backs to credit cards without communicating with us first are treated as Fraudulent. All details, including original order form, username, IP addresses and access logs bearing members IP addresses and/or e-mail addresses and username will be forwarded to the issuing Credit Card Company (Fraud Division), F.B.I. (Credit Card Fraud Division) and all Credit Reference Agencies which will probably result in a query into members credit card payment habits. Credit Card Fraud is a serious crime and will not be tolerated. YES indeed, YOUR FRAUD is a crime.

There is NOT a country in the world that would license you and/or your company as pharmacy, especially in Canada and/or the United States. Please tell me where to send you back this package for a full credit on my charge card. This is my third request!

You are fraudulently misrepresenting a company and the products. I am going to challenge this charge with American Express and tell them of the internet fraud you are perpetrating. PLEASE CALL the F.B.I. and American Express to let them know about your scam. Hopefully American Express will terminate your contract and the F.B.I. will prosecute you.

Gary
Westbrook, Connecticut
U.S.A.

Canadian Pharmacy – www.online-generic-pills.com

July 5, 2009Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Address lookup

canonical name	online-generic-pills.com.
aliases	http://www.online-generic-pills.com
addresses	174.132.167.8

Domain Whois record

Queried whois.internic.net with “dom online-generic-pills.com“…

Domain Name: ONLINE-GENERIC-PILLS.COM
Registrar: DYNADOT, LLC
Whois Server: whois.dynadot.com
Referral URL: http://www.dynadot.com
Name Server: NS1403.HOSTGATOR.COM
Name Server: NS1404.HOSTGATOR.COM
Status: clientTransferProhibited
Updated Date: 23-apr-2009
Creation Date: 23-apr-2009
Expiration Date: 23-apr-2010

Last update of whois database: Sun, 05 Jul 2009 4:31:30 UTC

Queried whois.dynadot.com with “online-generic-pills.com“…

Domain Name: online-generic-pills.com
Registered at http://www.dynadot.com

Registrant:
Dan Dan
Adress 1
Citytown 60001
United States

Administrative Contact:
Dan Dan
Adress 1
Citytown 60001
United States
dan113dan113@gmail.com
+1 32412534

Technical Contact:
Dan Dan
Adress 1
Citytown 60001
United States
dan113dan113@gmail.com
+1 32412534

Record expires on 2010/04/23 UTC
Record created on 2009/04/23 UTC

Domain servers in listed order:
ns1403.hostgator.com
ns1404.hostgator.com

>>> Last update of whois database: 2009/07/05 07:28:45 PST

Network Whois record

Queried whois.arin.net with “174.132.167.8“…

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 174.132.0.0 – 174.133.255.255
CIDR: 174.132.0.0/15
OriginAS: AS13749, AS21844, AS30315, AS36420
NetName: NETBLK-THEPLANET-BLK-15
NetHandle: NET-174-132-0-0-1
Parent: NET-174-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate: 2008-06-17
Updated: 2008-06-17

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-04 19:10

DNS records

name

class

type

data

time to live

http://www.online-generic-pills.com

CNAME

online-generic-pills.com

14400s

(04:00:00)

online-generic-pills.com

TXT

v=spf1 a mx include:websitewelcome.com ~all

14400s

(04:00:00)

online-generic-pills.com

preference:	0
exchange:	online-generic-pills.com

14400s

(04:00:00)

online-generic-pills.com

SOA

server:	ns1403.hostgator.com
email:	root.gator702.hostgator.com
serial:	2009042301
refresh:	86400
retry:	7200
expire:	3600000
minimum ttl:	86400

86400s

(1.00:00:00)

online-generic-pills.com

ns1403.hostgator.com

86400s

(1.00:00:00)

online-generic-pills.com

ns1404.hostgator.com

86400s

(1.00:00:00)

online-generic-pills.com

174.132.167.8

14400s

(04:00:00)

8.167.132.174.in-addr.arpa

PTR

8.a7.84ae.static.theplanet.com

79794s

(22:09:54)

— end —

Rogue Pharmacy Websites – Pharmacy Checker

July 3, 20092 Comments

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

24hsmeds.com

Amerisur.net

Buyphentermine4u.com

Buypillsonline.biz (“Canadian Pharmacy”)

BuyAmoxilOnline.PillsConcepts.info

Canadapharmacyline.com (“Canadian Pharmacy”)

Canadianmedsworld.com (“Canadian Meds”)

Canadianpharmacyltd.com (“Canadian Pharmacy”)

Cheap-pharmacy.us (“Canadian Health & Care Mail”)

Cod-rx.com

Dragon-rx.com

Eagle-meds.com (“US Drugstore”)

Edfriends.org (“Reliable Meds”)

Getlowdrugs.com (“US Drugstore”)

Gimmepills.com (Canadian Rx Drugs”)

Globalaccessrx.com

Globalrxpharmacy.net

Hyth.us

Lom-5.co.cc

Licensed-Rx.com

Max-pharm.com

Medsranch.com

My-pharm.com

Newcanadianhealthcare.com

Online-the.com/

OvernightMedsDirect.net

Pharmacynorthamerica.com

Pharmtransit.com

Pillzcctop.com (“US HealthCare Inc”)

Qualitygenerics.com

Rx-life.com

Rxpharma24hs.com

Shop.edmedsonline.com (“Canadian Pharmacy”)

Shoprxtoday.com

Thecanadianmeds.com (“Canadian Pharmacy”)

Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)

TrustedMedsMD.com

Us-rx-meds.com

Value-generics.com (“Generic Pharmacy”)

Value-pharm.com

Wholesale-generics.com

Xlpharmacy.com

Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)

Allrxonline.net

ApplyEdPills.info

Atterack.com (“My Canadian Pharmacy”)

Bestedmeds.com (“Canadian Pharmacy”)

Canadianmedsnow.com (“Canadian Pharmacy”)

Canadianpharmdirect.com (“Canadian Pharmacy”)

Canadianpharmacylive.com (“Canadian Family Pharmacy”)

Canapharmstore.com (“Canadian Health Center”)

Cheapviagstarmed.info

Directmedswhere.com (“Canadian Pharmacy”)

Drug-online.org (“Canadian Pharmacy”)

Fit-pharmacy.com

Generic365.com

Getfamilymedicines.com (“Canadian Health & Care Mall”)

Hot-drug.com (“Canadian Rx Drugs”)

Hotgrandpharm.com (“US Drugs”)

Interpill.com

Irontold.com (“Canadian Pharmacy”)

Jusikelsk.com (“US Healthcare, Inc”)

Laicsownsew.com (“World Pharmacy”)

Licensed-meds.com

Mantipu.com_world_drugs.com

Medicaldiscountrx.net

Meds35.com (“My Canadian Pharmacy”)

Medsmaster.com (“Official Medicines”)

Medsworldwidenetwork.com

Miztrust.cn (“My Canadian Pharmacy”)

Nextairsalepharm.com (“Canadian Health & Care Mall”)

Nextbestpharm.com (“My Canadian Pharmacy”)

Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)

Onlinepharmcanada.com (“Official Medicines”)

Ottowadrugs.com (“Canadian Pharmacy”)

Ourglobalpharm.com (“World Pharmacy”)

Pharmasavers.com

Phshuue.com (“U.S. Healthcare, Inc”)

Piromeds.com (“Drug Store”)

Pot-1.co.cc

Pot-7.co.cc

Poispp.com (“My Canadian Pharmacy”)

Premierpharmacy.net

Presidentrx.com

Proovernightpharm.com (“US Drugs”)

Qualitycandianmeds.com (“Canadian Pharmacy”)

Quickeasymed.com

Realairmentablets.com (“US Drugs”)

Rx-pillssshop.com (“Canadian Rx Drugs”)

Rx-toronto.net (“My Canadian Pharmacy”)

Targetpluspharma.com (“Canadian Health Care”)

Topcheappills.com (“Toronto Pharmacy”)

Topratedmedication.com (“Toronto Pharmacy”)

Turkbine.com (“Canadian Healthcare”)

Universallydrugstore.com (“Canadian Pharmacy”)

Viagraorder.org (“Canadian Pharmacy”)

Webdrugs.biz (“Canadian Pharmacy”)

Weekrequire.com (“Canadian Pharmacy”)

Worldshippingmeds.com

PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
Stealing people’s financial information.
Charging a consumer’s credit card without ever sending the purchased product (s).
Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
Selling prescription drugs, whether real or fake, without requiring a prescription.
Not responding to a consumer’s email or phone call after they have ordered a product.
Providing false contact information.
Selling a customer’s personal information to third parties without their consent.
Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.

We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS

On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Pharmacy Spam – dependprefer.com

July 3, 20099 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.125	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
61.161.148.135	China (Shenyang)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path: <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang” <b_yangcl@tacocity.com.tw>
From: “Barbra Yang” <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name	dependprefer.com.
aliases
addresses	218.75.144.6 222.241.150.146 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)

Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)

 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
dependprefer.com	IN	A	203.93.208.86	10800s	(03:00:00)
dependprefer.com	IN	A	222.241.150.146	10800s	(03:00:00)
dependprefer.com	IN	A	61.191.191.241	10800s	(03:00:00)
dependprefer.com	IN	A	218.75.144.6	10800s	(03:00:00)
dependprefer.com	IN	A	119.39.238.2	10800s	(03:00:00)

— end —

Canadian Pharmacy Spam – visitslip.com

July 3, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.46	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
211.186.220.30	Korea, Republic of (Seoul)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://visitslip.com

From Kristin B. Jacobs Tue Jun 30 12:07:48 2009
Return-Path: <kristin_b.jacobsks@zip.co.nz>
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=zip.co.nz; domainkeys=neutral (no sig); from=zip.co.nz; dkim=neutral (no sig)
Received: from 207.115.20.46 (EHLO flph263.prodigy.net) (207.115.20.46)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Tue, 30 Jun 2009 03:20:01 -0700
Received: from cmh7fb2 ([211.186.220.30])
by flph263.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5UAJv6O009087;
Tue, 30 Jun 2009 03:19:59 -0700
Message-ID: <000701c9f9b6$0f0093f0$ae8bf302@zip.co.nz>
Reply-To: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
From: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
To:
Subject: Make you wife moan in pleasure!
Date: Tue, 30 Jun 2009 15:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 139

Address lookup

canonical name	visitslip.com.
aliases
addresses	61.191.191.241 119.39.238.2 203.93.208.86 218.75.144.6 222.241.150.146

Domain Whois record

Queried whois.internic.net with “dom visitslip.com“…

   Domain Name: VISITSLIP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:19:02 UTC <<<

Queried whois.namerich.cn with “visitslip.com“…

 DomainName : visitslip.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
visitslip.com	IN	A	119.39.238.2	10800s	(03:00:00)
visitslip.com	IN	A	203.93.208.86	10800s	(03:00:00)
visitslip.com	IN	A	222.241.150.146	10800s	(03:00:00)
visitslip.com	IN	A	61.191.191.241	10800s	(03:00:00)
visitslip.com	IN	A	218.75.144.6	10800s	(03:00:00)

— end —

Canadian Pharmacy – safe-supplier.com

June 29, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Address lookup

canonical name	safe-supplier.com.
aliases	http://www.safe-supplier.com
addresses	72.167.131.144

Domain Whois record

Queried whois.internic.net with “dom safe-supplier.com“…

   Domain Name: SAFE-SUPPLIER.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS51.DOMAINCONTROL.COM
   Name Server: NS52.DOMAINCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 29-may-2009
   Creation Date: 15-mar-2007
   Expiration Date: 15-mar-2011

>>> Last update of whois database: Tue, 30 Jun 2009 04:16:27 UTC <<<

Queried whois.enom.com with “safe-supplier.com“…

Visit AboutUs.org for more information about safe-supplier.com
<a href="http://www.aboutus.org/safe-supplier.com">AboutUs: safe-supplier.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: safe-supplier.com

Registrant Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali ()

   Fax:
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Administrative Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Technical Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Status: Locked

Name Servers:
   ns51.domaincontrol.com
   ns52.domaincontrol.com

Creation date: 15 Mar 2007 10:44:00
Expiration date: 15 Mar 2011 10:44:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “72.167.131.144“…

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US

NetRange:   72.167.0.0 - 72.167.255.255
CIDR:       72.167.0.0/16
OriginAS:   AS26496
NetName:    GO-DADDY-SOFTWARE-INC
NetHandle:  NET-72-167-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate:    2007-07-05
Updated:    2008-01-18

RAbuseHandle: ABUSE51-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-480-624-2505
RAbuseEmail:  abuse@godaddy.com 

RNOCHandle: NOC124-ARIN
RNOCName:   Network Operations Center
RNOCPhone:  +1-480-505-8809
RNOCEmail:  noc@godaddy.com 

RTechHandle: NOC124-ARIN
RTechName:   Network Operations Center
RTechPhone:  +1-480-505-8809
RTechEmail:  noc@godaddy.com 

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809
OrgNOCEmail:  noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809
OrgTechEmail:  noc@godaddy.com

# ARIN WHOIS database, last updated 2009-06-29 20:00

DNS records

name

class

type

data

time to live

http://www.safe-supplier.com

CNAME

safe-supplier.com

3599s

(00:59:59)

safe-supplier.com

SOA

server:	ns51.domaincontrol.com
email:	dns.jomax.net
serial:	2009052800
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	86400

86400s

(1.00:00:00)

safe-supplier.com

72.167.131.144

3600s

(01:00:00)

safe-supplier.com

ns51.domaincontrol.com

3600s

(01:00:00)

safe-supplier.com

ns52.domaincontrol.com

3600s

(01:00:00)

safe-supplier.com

preference:	0
exchange:	smtp.secureserver.net

3600s

(01:00:00)

safe-supplier.com

preference:	10
exchange:	mailstore1.secureserver.net

3600s

(01:00:00)

144.131.167.72.in-addr.arpa

PTR

p3slh180.shr.phx3.secureserver.net

3600s

(01:00:00)

Canadian Pharmacy Spam – grewsix.com

June 28, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
129.10.63.40	United States (Boston)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.121	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Terry G. Parks Fri Jun 26 10:09:27 2009
Return-Path:
Authentication-Results: mta107.sbc.mail.re3.yahoo.com from=vdc.lv; domainkeys=neutral (no sig); from=vdc.lv; dkim=neutral (no sig)
Received: from 129.10.63.40 (EHLO nlpi107.prodigy.net) (207.115.36.121)
by mta107.sbc.mail.re3.yahoo.com with SMTP; Fri, 26 Jun 2009 10:09:22 -0700
Received: from 329a0d2 ([129.10.63.40])
by nlpi107.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5QH9Euq004296;
Fri, 26 Jun 2009 12:09:21 -0500
Message-ID: <000701c9f680$dcd89cc0$4a37416a@vdc.lv>
Reply-To: “Terry G. Parks” <tg_parkszh@vdc.lv>
From: “Terry G. Parks”
To:
Subject: eye opening
Date: Fri, 26 Jun 2009 12:09:27 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 135

An Incredible Canadian Pharmacy is available at your Fingertips!
N0~Doctor~Needed! Browse our site Today! -> http://grewsix.com

Address lookup

An Incredible Canadian Pharmacy is available at your Fingertips!
NO `Doctor `Needed! Browse our site Today! -> http://camebear.com

canonical name	grewsix.com.	aliases
addresses	218.75.144.6 60.191.221.117 60.191.239.153 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom grewsix.com“…

   Domain Name: GREWSIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RUNMOTHER.IN
   Name Server: NS2.RUNMOTHER.IN
   Name Server: NS3.LISTENFACE.RU
   Name Server: NS4.LISTENFACE.RU
   Name Server: NS5.WESUCH.PL
   Name Server: NS6.WESUCH.PL
   Status: ok
   Updated Date: 22-jun-2009
   Creation Date: 22-jun-2009
   Expiration Date: 22-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 15:51:35 UTC <<<

Queried whois.namerich.cn with “grewsix.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : grewsix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LISTENFACE.RU
Name Server......................NS2.RUNMOTHER.IN
Name Server......................NS6.WESUCH.PL
Name Server......................NS1.RUNMOTHER.IN
Name Server......................NS5.WESUCH.PL
Name Server......................NS3.LISTENFACE.RU
Status...........................ok
Creation  Date ..................2009-06-22
Expiration Date .................2010-06-22
Last Update  Date ...............2009-06-22

Registrant ID ...................V-X-57955-13465
Registrant Name .................ZHAO LET
Registrant Organization .........ZHAO LEI
Registrant Address ..............JIEFANGLU19
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116019
Registrant Phone Number .........+86.04112880527
Registrant Fax ..................+86.04112880527
Registrant Email ................mklao9he@126.com

Administrative ID ...............V-X-57955-13465
Administrative Name .............ZHAO LET
Administrative Organization .....ZHAO LEI
Administrative Address ..........JIEFANGLU19
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116019
Administrative Phone Number .....+86.04112880527
Administrative Fax ..............+86.04112880527
Administrative Email ............mklao9he@126.com

Billing ID ......................V-X-57955-13465
Billing Name ....................ZHAO LET
Billing Organization ............ZHAO LEI
Billing Address .................JIEFANGLU19
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116019
Billing Phone Number ............+86.04112880527
Billing Fax .....................+86.04112880527
Billing Email ...................mklao9he@126.com

Technical ID ....................V-X-57955-13465
Technical Name ..................ZHAO LET
Technical Organization...........ZHAO LEI
Technical Address ...............JIEFANGLU19
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116019
Technical Phone Number ..........+86.04112880527
Technical Fax ...................+86.04112880527
Technical Email .................mklao9he@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
grewsix.com	IN	A	203.93.208.86	10800s	(03:00:00)
grewsix.com	IN	A	60.191.221.117	10800s	(03:00:00)
grewsix.com	IN	A	60.191.239.153	10800s	(03:00:00)
grewsix.com	IN	A	61.191.191.241	10800s	(03:00:00)
grewsix.com	IN	A	218.75.144.6	10800s	(03:00:00)
grewsix.com	IN	A	119.39.238.2	10800s	(03:00:00)

xxxxxxxxxx

WhoIs GlavMed.com aka Canadian Pharmacy

June 26, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Glavmed is the public-facing affiliate program which sponsors spammers to promote what are generally known to be illegal pharmacy websites. It appears to be a cover for the real sponsor organization behind all of these sites: Spamit. These include [Canadian Pharmacy], one of the most-spammed properties during 2006-2008. Glavmed is alternately known in the spammer community as the “Spamit” program, making it clear that this operation endorses and condones illegal spamming in the promotion of their properties.

This was learned from postings on bulkerforum.biz by username “kref”, who would invite users to promote for their properties. kref is also known as “fakir f” (his Skype username.)

Glavmed (Spamit) is believed to be based out of Moscow, and thought to be very closely related to the “Russian Business Network”, or “RBN.

Spamtracker.eu

Address lookup

canonical name	www.glavmed.com.
aliases
addresses	74.86.34.144

Domain Whois record

Queried whois.internic.net with “dom glavmed.com“…

   Domain Name: GLAVMED.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.GLAVMED.COM
   Name Server: NS2.GLAVMED.COM
   Status: ok
   Updated Date: 23-jan-2009
   Creation Date: 14-mar-2006
   Expiration Date: 14-mar-2013

>>> Last update of whois database: Sat, 27 Jun 2009 02:40:08 UTC <<<

Queried whois.regtime.net with “glavmed.com“…

% Regtime Ltd. WHOIS server

Domain name: glavmed.com

Name servers:
    ns1.glavmed.com
    ns2.glavmed.com

Registrar: Regtime Ltd.
Creation date: 2009-01-15
Expiration date: 2013-03-14
Status: active

Registrant:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Administrative Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Technical Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Billing Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747

Network Whois record

Queried whois.arin.net with “!NET-74-86-34-144-1“…

CustName:   Dmitry Fedorov
Address:    Ivanov st 31
City:       Moscow
StateProv:
PostalCode: 125725
Country:    RU
RegDate:    2009-03-19
Updated:    2009-03-19

NetRange:   74.86.34.144 - 74.86.34.151
CIDR:       74.86.34.144/29
NetName:    NET-74-86-34-144
NetHandle:  NET-74-86-34-144-1
Parent:     NET-74-86-0-0-1
NetType:    Reassigned
Comment:    Send abuse issues to abuse@softlayer.com
RegDate:    2009-03-19
Updated:    2009-03-19

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  abuse@softlayer.com 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin
RNOCPhone:  +1-214-442-0600
RNOCEmail:  ipadmin@softlayer.com 

RTechHandle: IPADM258-ARIN
RTechName:   IP Admin
RTechPhone:  +1-214-442-0600
RTechEmail:  ipadmin@softlayer.com 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  abuse@softlayer.com

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  ipadmin@softlayer.com

# ARIN WHOIS database, last updated 2009-06-26 19:10

DNS records

name

class

type

data

time to live

http://www.glavmed.com

74.86.34.144

60s

(00:01:00)

glavmed.com

SOA

server:	ns1.glavmed.com
email:	root.glavmed.com
serial:	2009041832
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	30

60s

(00:01:00)

glavmed.com

ns1.glavmed.com

60s

(00:01:00)

glavmed.com

ns2.glavmed.com

60s

(00:01:00)

glavmed.com

preference:	10
exchange:	mail.glavmed.com

60s

(00:01:00)

glavmed.com

74.86.34.144

60s

(00:01:00)

144.34.86.74.in-addr.arpa

PTR

74.86.34.144-static.reverse.softlayer.com

3600s

(01:00:00)

— end —

Canadian Pharmacy – www.firmvictor.com

June 25, 2009Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
151.95.186.133	Italy (Pignone)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.195	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lorena N. Livingston Mon Jun 22 17:26:07 2009
Return-Path: <llivingston_wt@avantgarde.de>
Authentication-Results: mta112.sbc.mail.gq1.yahoo.com from=avantgarde.de; domainkeys=neutral (no sig); from=avantgarde.de; dkim=neutral (no sig)
Received: from 151.95.186.133 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta112.sbc.mail.gq1.yahoo.com with SMTP; Tue, 23 Jun 2009 04:14:27 -0700
Received: from lqdbnh2 ([151.95.186.133])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5NBDbs2029631;
Tue, 23 Jun 2009 04:14:25 -0700
Message-ID: <000701c9f399$334e5fd0$627e2c7a@avantgarde.de>
Reply-To: “Lorena N. Livingston”
From: “Lorena N. Livingston” <llivingston_wt@avantgarde.de>
To: ScamFraudAlert
Subject: Stay Hard and Last Longer in Bed!
Date: Mon, 22 Jun 2009 17:26:07 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 126

From: Lorena N. Livingston <llivingston_wt@avantgarde.de>
To: ScamFraudAlert.com
Sent: Monday, June 22, 2009 5:26:07 PM
Subject: Stay Hard and Last Longer in Bed!

An Incredible Canadian Pharmacy is available at your Fingertips!
No_Doctor_Needed! Click Here -> http://firmvictor.com

This spam brand has the dubious distinction of being the most heavily spammed domain our staff receives.

The “Canadian Pharmacy” titled sites are the most common. They may also be labeled “European Pharmacy” for visitors from IP addresses located outside North America.

Other sites include “PharmSite” and “best online PHARMACY.” They are riddled with identical fraudulent claims.

For simplicity, this entry refers by default to Canadian Pharmacy, but the false claims apply equally to all of these.

The copyright statement in the trailers for “PharmSite” and “best online PHARMACY” actually contains the words Copyright Canadian Pharmacy.

Visitors to these sites are cautioned against placing an unsecure order for any of the products advertised. With so much obvious fraud in the set up of the web site, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant criminals.

See Spamtracker.eu – Canadian Pharmacy

Address lookup

canonical name	firmvictor.com.
aliases
addresses	119.39.238.2 203.93.208.86 218.75.144.6 60.191.221.117 60.191.239.153 61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom firmvictor.com“…

   Domain Name: FIRMVICTOR.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SOUNDPRIZE.IN
   Name Server: NS2.SOUNDPRIZE.IN
   Name Server: NS3.GROUNDBED.COM
   Name Server: NS4.GROUNDBED.COM
   Name Server: NS5.CHANGESTORY.PL
   Name Server: NS6.CHANGESTORY.PL
   Status: ok
   Updated Date: 18-jun-2009
   Creation Date: 18-jun-2009
   Expiration Date: 18-jun-2010

>>> Last update of whois database: Thu, 25 Jun 2009 07:36:37 UTC <<<

Queried whois.namerich.cn with “firmvictor.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : firmvictor.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.SOUNDPRIZE.IN
Name Server......................NS6.CHANGESTORY.PL
Name Server......................NS4.GROUNDBED.COM
Name Server......................NS5.CHANGESTORY.PL
Name Server......................NS1.SOUNDPRIZE.IN
Name Server......................NS3.GROUNDBED.COM
Status...........................ok
Creation  Date ..................2009-06-18
Expiration Date .................2010-06-18
Last Update  Date ...............2009-06-18

Registrant ID ...................V-X-57697-13132
Registrant Name .................GU FEI
Registrant Organization .........GU FEI
Registrant Address ..............FUZHOUGUANGCHANG29
Registrant City..................FZ
Registrant Province/State .......FJ
Registrant Country Code .........CN
Registrant Postal Code ..........350019
Registrant Phone Number .........+86.059175695124
Registrant Fax ..................+86.059175695124
Registrant Email ................baijakdfe@yeah.net

Administrative ID ...............V-X-57697-13132
Administrative Name .............GU FEI
Administrative Organization .....GU FEI
Administrative Address ..........FUZHOUGUANGCHANG29
Administrative City..............FZ
Administrative Province/State ...FJ
Administrative Country Code .....CN
Administrative Postal Code ......350019
Administrative Phone Number .....+86.059175695124
Administrative Fax ..............+86.059175695124
Administrative Email ............baijakdfe@yeah.net

Billing ID ......................V-X-57697-13132
Billing Name ....................GU FEI
Billing Organization ............GU FEI
Billing Address .................FUZHOUGUANGCHANG29
Billing City.....................FZ
Billing Province/State ..........FJ
Billing Country Code ............CN
Billing Postal Code .............350019
Billing Phone Number ............+86.059175695124
Billing Fax .....................+86.059175695124
Billing Email ...................baijakdfe@yeah.net

Technical ID ....................V-X-57697-13132
Technical Name ..................GU FEI
Technical Organization...........GU FEI
Technical Address ...............FUZHOUGUANGCHANG29
Technical City...................FZ
Technical Province/State.........FJ
Technical Country Code ..........CN
Technical Postal Code ...........350019
Technical Phone Number ..........+86.059175695124
Technical Fax ...................+86.059175695124
Technical Email .................baijakdfe@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
firmvictor.com	IN	A	218.75.144.6	10800s	(03:00:00)
firmvictor.com	IN	A	119.39.238.2	10800s	(03:00:00)
firmvictor.com	IN	A	203.93.208.86	10800s	(03:00:00)
firmvictor.com	IN	A	60.191.221.117	10800s	(03:00:00)
firmvictor.com	IN	A	60.191.239.153	10800s	(03:00:00)
firmvictor.com	IN	A	61.191.191.241	10800s	(03:00:00)

Canadian Pharmacy – Rx Partners – www.rx-partner.biz

June 24, 2009Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

rxpartner-sign in

Canadian Pharmacy Spamming Operation

Address lookup

canonical name rx-partners.biz.
aliases
addresses 91.199.112.18
Domain Whois record

Queried whois.biz with “rx-partners.biz”…

Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok

Registrant ID: 550770560-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: 2nd Floor
Registrant State/Province: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Facsimile Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Billing Contact Address2: 241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2: 241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Wed Jan 21 15:12:51 GMT 2009
Registrar Fields
—————-
IDNLang: de

Whois database was last updated on: Sat May 02 15:29:14 GMT 2009
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.18″…
Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for rx-partners.biz failed: MessageTruncated

DNS query for 18.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rx-partners.biz IN TXT v=spf1 +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN TXT spf2.0/pra +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006617085
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rx-partners.biz IN NS ns1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS ns0.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip3.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip2.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN A 91.199.112.18 1200s (00:20:00)
rx-partners.biz IN MX
preference: 10
exchange: mail.rx-partners.biz 1200s

Domain

ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
rx-partners.biz
rxpbill.biz
rxpcash.biz
rxpcheck.biz
rxppay.biz
tabzcash.biz
pillzcash.biz
pillzcheck.biz
pillzmeds.biz
tabpaid.biz
pay4meds.biz
pay4medz.biz
pay4pill.biz
pay4tabs.biz
pay4tabz.biz
pay4med.biz
pay4medc.biz
pay4pillz.biz
paid4meds.biz
ed-sup.com
edselection.com
manfriendly.com
omhca.com
partners-dns.com
perfectgenerics.com
prescriptionspoint.com
propeciahair.com
rxtrusted.com
secureccpay.com

83.149.69.46
83.149.69.47
83.149.82.186
91.199.112.7
91.199.112.8

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

WHOIS www.ruler-domains.com

June 20, 2009Leave a comment

WHOIS informations for ruler-domains.com

AboutUs: ruler-domains.com

Registration Service Provided By: –
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: ruler-domains.com

Administrative Contact:
–
Sergey Ryabov director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Technical Contact:
–
Sergey Ryabov director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Registrant Contact:
–
Sergey Ryabov ()

Fax:
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Status: Locked

Name Servers:
ns1.ruler-domains.com
ns2.ruler-domains.com

Creation date: 18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet! Increase visibility for this domain name by listing it atwww.whoisbusinesslistings.com

We reserve the right to modify these terms at any time. By submitting
this query, you agree to abide by these terms.
Version 6.3 4/3/2002

Websites linked from ruler-domains.com:

WHOIS informations for megastock.ru

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain: MEGASTOCK.RU
type: CORPORATE
nserver: ns.molot.ru.
nserver: ns.relsoft.ru.
nserver: ns.relsoftcom.ru.
state: REGISTERED, DELEGATED
org: Joint Stock Company “Computing Forces”
phone: +7 495 7274333
fax-no: +7 495 7274333
e-mail: shalopin@webmoney.ru
registrar: RUCENTER-REG-RIPN
created: 2001.03.24
paid-till: 2010.03.27
source: TC-RIPN

Last updated on 2009.07.26 18:01:10 MSK/MSD

Websites linked from megastock.ru:

Domain
ruler-domains.com
richisoftware2.com
castoholder.com

Address lookup

canonical name	ruler-domains.com.
aliases
addresses	213.174.139.29

Domain Whois record

Queried whois.internic.net with “dom ruler-domains.com“…

   Domain Name: RULER-DOMAINS.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.RULER-DOMAINS.COM
   Name Server: NS2.RULER-DOMAINS.COM
   Status: clientTransferProhibited
   Updated Date: 17-may-2009
   Creation Date: 17-nov-2008
   Expiration Date: 17-nov-2010

>>> Last update of whois database: Sun, 26 Jul 2009 14:04:26 UTC <<<

Queried whois.enom.com with “ruler-domains.com“…

Visit AboutUs.org for more information about ruler-domains.com
<a href="http://www.aboutus.org/ruler-domains.com">AboutUs: ruler-domains.com</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: ruler-domains.com

Administrative Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Technical Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Registrant Contact:
   -
   Sergey Ryabov ()

   Fax:
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Status: Locked

Name Servers:
   ns1.ruler-domains.com
   ns2.ruler-domains.com

Creation date: 18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 213.174.139.29“…

% Information related to '213.174.136.0 - 213.174.139.255'

inetnum:        213.174.136.0 - 213.174.139.255
netname:        ADVANCEDHOSTERS-NET
descr:          Advanced Hosters
country:        US
admin-c:        AH36-RIPE
tech-c:         AH36-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
remarks:        Send abuse reports to abuse@advancedhosters.com
mnt-by:         ADVANCEDHOSTERS-MNT
mnt-lower:      ADVANCEDHOSTERS-MNT
mnt-routes:     ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090402
source:         RIPE

role:           ADVANCEDHOSTERS LIMITED
address:        THE MERIDIAN 4 COPTHALL HOUSE, STATION SQUARE, COVENTRY,
address:        WEST MIDLANDS, CV1 2FL, United Kingdom
org:            ORG-AH11-RIPE
e-mail:         ripe@advancedhosters.com
admin-c:        OAVO1-RIPE
tech-c:         OAVO1-RIPE
nic-hdl:        AH36-RIPE
changed:        ripe@advancedhosters.com 20090331
source:         RIPE

% Information related to '213.174.128.0/19AS39572'

route:          213.174.128.0/19
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

% Information related to '213.174.136.0/22AS39572'

route:          213.174.136.0/22
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

DNS records

DNS query for 29.139.174.213.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

ruler-domains.com

213.174.139.29

86400s

(1.00:00:00)

ruler-domains.com

preference:	10
exchange:	mail.ruler-domains.com

86400s

(1.00:00:00)

ruler-domains.com

SOA

server:	localhost.ruler-domains.com
email:	root.ruler-domains.com
serial:	4
refresh:	10800
retry:	900
expire:	604800
minimum ttl:	86400

86400s

(1.00:00:00)

ruler-domains.com

ns1.ruler-domains.com

86400s

(1.00:00:00)

ruler-domains.com

ns2.ruler-domains.com

86400s

(1.00:00:00)

Traceroute

Tracing route to ruler-domains.com [213.174.139.29]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.1

po101.dsr01.dllstx5.theplanet.com

70.85.127.105

po51.dsr01.dllstx3.theplanet.com

70.87.253.1

et3-1.ibr03.dllstx3.theplanet.com

70.87.253.190

be.fd.5746.static.theplanet.com

206.223.115.120

10g.r0.eqix.ash.va.us.iptp.net

87.239.188.250

213.174.139.29

Trace complete

Service scan

FTP – 21 220 (vsFTPd 2.0.5) 500 OOPS: vsf_sysutil_recv_peek: no data 500 OOPS: child died

SMTP – 25 220 localhost.localdomain ESMTP Sendmail 8.13.8/8.13.8; Sun, 26 Jul 2009 10:02:28 -0400

HTTP – 80

POP3 – 110 +OK Dovecot ready.

IMAP – 143 * OK Dovecot ready.

— end —

Canadian Pharmacy – genericspharm.org

June 19, 20091 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

happy-pills.net

noprecriptiontablets.net

pharmascop.com

buyneurontin.com

educationequipment.net

genericspharm.org

yourdose.net

lamisil-store.com

luvchat.com

sitewisellc.com

allpharmacyonline.com

drugpurchase.com

aciphex-drugstore.com

http://www.pharmaorder.com

original-doctor.com

edsupport.info

meds-without-prescription.com

pillsforweight.com

clomid-medication.com

viagra-levitra.com

rxplls.com

generic-allegra.net

zithromax-without-prescription.com

canadian-medstore.com

amerismart.org

vigra.rx-ed.info

cialis-buy.info

viagra-100mg.net

allpharmacyonline.net

aciphex-drugstore.com

buyneurontin.com

pharmaorder.com

drugspurchase.com

genericspharm.org

yourdose.net

original-doctor.com

viagra-100mg.net

anxietyzoloft.com

orccug.com

ca-drugstore.com

largestonlinepharmacy.com

drugsdelivery.net

amazing-drugs.com

amoxicillinnoprescription.com

officialpharmacy.com

Address lookup

canonical name	genericspharm.org.
aliases
addresses	85.17.177.196

Domain Whois record

Queried whois.publicinterestregistry.net with “genericspharm.org“…

Domain ID:D155629905-LROR
Domain Name:GENERICSPHARM.ORG
Created On:16-Mar-2009 17:52:09 UTC
Last Updated On:16-May-2009 03:52:27 UTC
Expiration Date:16-Mar-2010 17:52:09 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:cb61fa3d409
Registrant Name:Whois Agent
Registrant Organization:Nexton Limited
Registrant Street1:Irpinskaya 69
Registrant City:Kiev
Registrant State/Province:
Registrant Postal Code:03142
Registrant Country:UA
Registrant Phone:+380.993161649
Registrant Email:support@ruler-domains.com

Admin ID:cb61fa3d409
Admin Name:Whois Agent
Admin Organization:Nexton Limited
Admin Street1:Irpinskaya 69
Admin City:Kiev
Admin State/Province:
Admin Postal Code:03142
Admin Country:UA
Admin Phone:+380.993161649
Admin Email:support@ruler-domains.com

Tech ID:cb61fa3d409
Tech Name:Whois Agent
Tech Organization:Nexton Limited
Tech Street1:Irpinskaya 69
Tech City:Kiev
Tech State/Province:
Tech Postal Code:03142
Tech Country:UA
Tech Phone:+380.993161649
Tech Email:support@ruler-domains.com

Name Server:NS1.MEDICATIONS-ONLINE.CO.UK
Name Server:NS2.MEDICATIONS-ONLINE.CO.UK
Name Server:

Network Whois record

Queried whois.ripe.net with “-B 85.17.177.196“…

Information related to ‘85.17.177.0 – 85.17.177.255’

inetnum: 85.17.177.0 – 85.17.177.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070710
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘85.17.0.0/16AS16265’

route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE

DNS records

DNS query for genericspharm.org failed: WouldBlock

name	class	type	data	time to live
196.177.17.85.in-addr.arpa	IN	PTR	belhost.biz	86400s	(1.00:00:00)

SmartFilter Category:	Not Categorized Make Category Suggestions
IP:	85.17.177.196
Nameservers:	ns1.kpv007.local ns2.kpv007.local

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Domain Whois record

Network Whois record

DNS records

Qualitynet Or BestMeds.com Rip-off will cash check but does not send order or answer follow-up E-Mails. BEWARE Internet

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Other sites listed

Address lookup

Domain Whois record

Network Whois record

DNS records

Canadian Pharmacy A conartist and a fraud Jogeshwari West Mumaia – 400 060 India

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Address lookup

Domain Whois record

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration