Category: business alert

Stolen Identity Canadian Pharmacy – pfizer-incorporated.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

pfizer-incorporated

Address lookup

canonical name pfizer-incorporated.com.
aliases
addresses 91.207.4.202

Domain Whois record

Queried whois.internic.net with “dom pfizer-incorporated.com“…

   Domain Name: PFIZER-INCORPORATED.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.PFIZER-INCORPORATED.COM
   Name Server: NS2.PFIZER-INCORPORATED.COM
   Name Server: NS3.PFIZER-INCORPORATED.COM
   Name Server: NS4.PFIZER-INCORPORATED.COM
   Status: clientTransferProhibited
   Updated Date: 02-jul-2009
   Creation Date: 02-jul-2009
   Expiration Date: 02-jul-2010

>>> Last update of whois database: Sat, 04 Jul 2009 11:41:46 UTC <<<

Queried whois.onlinenic.com with “pfizer-incorporated.com“…

Registrant:
	 Deloris P Perticone fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by +7.4294967295
	 N/A
	 ul. Tsentral'naya, d. 18, kv. 11
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:pfizer-incorporated.com 
Record last updated at 2009-07-02 10:19:48
Record created on 2009/7/2
Record expired on 2010/7/2

Domain servers in listed order:
	 ns1.pfizer-incorporated.com 	 ns2.pfizer-incorporated.com 

Administrator:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto 
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.ripe.net with “-B 91.207.4.202“…

% Information related to '91.207.4.0 - 91.207.9.255'

inetnum:        91.207.4.0 - 91.207.9.255
netname:        SteepHost-DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-63-618-45-00
descr:          +380-67-375-27-03
remarks:        Please send all spam/scam/fraud abuse to abuse@steephost.com
country:        UA
org:            ORG-SH7-RIPE
admin-c:        SH3855-RIPE
tech-c:         SH3855-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         SH3855-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     SH3855-MNT
mnt-domains:    SH3855-MNT
changed:        hostmaster@ripe.net 20080911
source:         RIPE

organisation:   ORG-SH7-RIPE
org-name:       SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
org-type:       OTHER
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
mnt-ref:        SH3855-MNT
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
changed:        hostmaster@ripe.net 20080911
source:         RIPE

role:           SteepHost DC-UA
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
admin-c:        AK5709-RIPE
tech-c:         AK5709-RIPE
nic-hdl:        SH3855-RIPE
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
source:         RIPE

% Information related to '91.207.4.0/22AS47142'

route:          91.207.4.0/22
descr:          SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-67-375-27-03
descr:          +380-63-618-45-00
descr:          Please send all spam/scam/fraud abuse to abuse@steephost.com
origin:         AS47142
mnt-by:         SH3855-MNT
changed:        noc@steephost.com 20080911
source:         RIPE

DNS records

DNS query for 202.4.207.91.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
pfizer-incorporated.com IN A 91.207.4.202 3600s (01:00:00)

— end —

MyNewCanadianPharmacy – www.bulnalei.net

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

MyNewCanadianPharmacy

Address lookup

canonical name bulnalei.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bulnalei.net IN SOA
server: ns1.bulnalei.net
email: admin.bulnalei.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
bulnalei.net IN NS ns1.bulnalei.net 600s (00:10:00)
bulnalei.net IN NS ns2.bulnalei.net 600s (00:10:00)
bulnalei.net IN MX
preference: 10
exchange: mail.bulnalei.net
600s (00:10:00)
bulnalei.net IN A 212.174.200.111 600s (00:10:00)

— end —

MyCanadianPharmacy Scam – greatpharmacyrxpads.net

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

mycanadianpharmacyxx

Address lookup

canonical name greatpharmacyrxpads.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom greatpharmacyrxpads.net“…

   Domain Name: GREATPHARMACYRXPADS.NET
   Registrar: 12 REGISTER BV
   Whois Server: whois.yoursrs.com
   Referral URL: http://www.yoursrs.com
   Name Server: NS1.BH4.RU
   Name Server: NS2.BESTPHARMACYOUTLET.NET
   Status: ok
   Updated Date: 17-jun-2009
   Creation Date: 19-may-2009
   Expiration Date: 19-may-2010

>>> Last update of whois database: Sat, 04 Jul 2009 16:51:38 UTC <<<

Queried whois.yoursrs.com with “greatpharmacyrxpads.net“…

Domain Name:greatpharmacyrxpads.net
Name Server:ns1.bh4.ru
Name Server:ns2.bestpharmacyoutlet.net
Created On:2009-05-19
Last Updated On:2009-06-17
Expiration Date:2010-05-19
Dealer:xss
Registrant ID:AntonNikiforov
Registrant Name:Anton Nikiforov
Registrant Organization:
Registrant Street1:ulitsa Smolnaya d.21 kv.360
Registrant Street2:
Registrant Street3:
Registrant City:Moskva
Registrant State/Province:Moskva
Registrant Postal Code:125445
Registrant Country:RU
Registrant Phone:+7.4957412992
Registrant Fax:
Registrant Email:nikiforov@seostudio.at
Admin ID:AlexanderBarkhatov
Admin Name:Alexander Barkhatov
Admin Organization:
Admin Street1:Perviy Mikrorajon dom 23 kv.177
Admin Street2:
Admin Street3:
Admin City:Kurganskaya oblast
Admin State/Province:Kurgan
Admin Postal Code:640024
Admin Country:RU
Admin Phone:+7.3522462300
Admin Fax:
Admin Email:barhatov@seostudio.at
Billing ID:AlexanderBarkhatov
Billing Name:Alexander Barkhatov
Billing Organization:
Billing Street1:Perviy Mikrorajon dom 23 kv.177
Billing Street2:
Billing Street3:
Billing City:Kurganskaya oblast
Billing State/Province:Kurgan
Billing Postal Code:640024
Billing Country:RU
Billing Phone:+7.3522462300
Billing Fax:
Billing Email:barhatov@seostudio.at
Tech ID:AlexanderBarkhatov
Tech Name:Alexander Barkhatov
Tech Organization:
Tech Street1:Perviy Mikrorajon dom 23 kv.177
Tech Street2:
Tech Street3:
Tech City:Kurganskaya oblast
Tech State/Province:Kurgan
Tech Postal Code:640024
Tech Country:RU
Tech Phone:+7.3522462300
Tech Fax:
Tech Email:barhatov@seostudio.at

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
greatpharmacyrxpads.net IN SOA
server: ns1.greatpharmacyrxpads.net
email: admin.greatpharmacyrxpads.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
greatpharmacyrxpads.net IN NS ns1.greatpharmacyrxpads.net 600s (00:10:00)
greatpharmacyrxpads.net IN NS ns2.greatpharmacyrxpads.net 600s (00:10:00)
greatpharmacyrxpads.net IN MX
preference: 10
exchange: mail.greatpharmacyrxpads.net
600s (00:10:00)
greatpharmacyrxpads.net IN A 212.174.200.111 600s (00:10:00)

— end —

medsyourhealth.com – Canadian Health&Care Mall ALANTRON BLTD.
superdrugtoretablets.com – Canadian Health&Care Mall COMMUNIGAL COMMUNICATIONS LTD
avkjiw.cn – Canadian Health&Care Mall ENAME.COM
vmkhiue.cn – Canadian Health&Care Mall ENAME.COM
nyovbaibgeu.com – Canadian Health&Care Mall GLOBEDOM DATENKOMMUNIKATIONS GMBH
sdolezyql.com – Canadian Health&Care Mall GLOBEDOM DATENKOMMUNIKATIONS GMBH
meardepryr.com – Canadian Health&Care Mall KEY-SYSTEMS GMBH
epoxfyud.com – Canadian Health&Care Mall MONIKER ONLINE SERVICES, INC.
rysvapjoed.com – Canadian Health&Care Mall REGISTER.COM, INC.
greatpharmacyrxpads.net – My Canadian Pharmacy 12 REGISTER BV
apnerpov.com – My Canadian Pharmacy EASYDNS TECHNOLOGIES, INC.
medshealthdrugstoresite.com – My Canadian Pharmacy VISESH INFOTECNICS LTD
bulnalei.com –  MyNewCanadianPharmacy 1 & 1 INTERNET AG
umzimsotu.com – MyNewCanadianPharmacy 101DOMAIN, INC.
bulnalei.net – MyNewCanadianPharmacy ONLINE SAS
elpulkut.com – MyNewCanadianPharmacy ONLINE SAS
elpulkut.net – USDrugs RANGER REGISTRATION (MADEIRA) LLC.
pharmacytabletspill.net – USDrugs 12 REGISTER BV
healthgiftstore.com – USDrugs COMMUNIGAL COMMUNICATIONS LTD
pipzulaw.com – USDrugs DIRECTNIC.COM
healthplansmarket.com –  USDrugs IA REGISTRY
hlounykry.com – USDrugs WEBNAMES.CA INC.

WhoIs 89.189.191.95 – warez-free-all

Leave a comment


Consumer & Business Alert – Stolen Identity!!!! fraudalert
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

89.189.191.95

Address lookup

canonical name gw-95.211.ru.
aliases
addresses 89.189.191.95

Domain Whois record

Queried whois.ripn.net with “211.ru“…

warez-free-all.blogspot.com/
Author : Virtualia (IP: 89.189.191.95 , gw-95.211.ru)
E-mail : virt@gmail.com

% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:     211.RU
type:       CORPORATE
nserver:    ns.211.ru. 193.238.131.195
nserver:    ns2.211.ru. 89.189.191.224
state:      REGISTERED, DELEGATED
org:        Ltd. "Siberian Networks"
phone:      +7 383 2209211
phone:      +7 383 2209280
fax-no:     +7 383 2209211
e-mail:     noc@211.ru
registrar:  RUCENTER-REG-RIPN
created:    2004.06.16
paid-till:  2010.06.16
source:     TC-RIPN

Last updated on 2009.07.04 04:54:11 MSK/MSD

Network Whois record

Queried whois.ripe.net with “-B 89.189.191.95“…

% Information related to '89.189.184.0 - 89.189.191.255'

inetnum:        89.189.184.0 - 89.189.191.255
netname:        RU-ISP-SIBNET-NSK-2
descr:          Siberian Networks
country:        RU
admin-c:        SAS-RIPE
tech-c:         SAS-RIPE
status:         ASSIGNED PA
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070301
source:         RIPE

person:         Stanislav A. Svirid
address:        Siberian Networks
address:        21/1, Dachnaya Street
address:        630082, Novosibirsk
address:        Russia
phone:          +7 383 2209280
fax-no:         +7 383 2209211
nic-hdl:        SAS-RIPE
e-mail:         count@211.ru
notify:         count@211.ru
notify:         noc@211.ru
mnt-by:         SIBNET-NSK-MNT
changed:        sva@riss-telecom.ru 20001102
changed:        frolov@riss-telecom.ru 20021218
changed:        count@211.ru 20070322
source:         RIPE

% Information related to '89.189.184.0/21AS34757'

route:          89.189.184.0/21
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070322
source:         RIPE

% Information related to '89.189.176.0/20AS34757'

route:          89.189.176.0/20
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20080328
source:         RIPE

DNS records

name class type data time to live
gw-95.211.ru IN A 89.189.191.95 43200s (12:00:00)
211.ru IN SOA
server: ns2.211.ru
email: noc.211.ru
serial: 2009063002
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 86400
43200s (12:00:00)
211.ru IN TXT v=spf1 ip4:193.238.128.0/22 ip4:89.189.176.0/20 ip4:80.64.168.0/21 ip4:217.106.28.136/30 mx ptr mx:193.238.131.194 ~all 43200s (12:00:00)
211.ru IN A 193.238.131.200 43200s (12:00:00)
211.ru IN MX
preference: 0
exchange: mx.211.ru
43200s (12:00:00)
211.ru IN NS ns.211.ru 43200s (12:00:00)
211.ru IN NS ns2.211.ru 43200s (12:00:00)
95.191.189.89.in-addr.arpa IN PTR gw-95.211.ru

Rogue Pharmacy Websites – Pharmacy Checker

2 Comments
The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):
24hsmeds.com
Amerisur.net
Buyphentermine4u.com
Buypillsonline.biz (“Canadian Pharmacy”)
BuyAmoxilOnline.PillsConcepts.info
Canadapharmacyline.com (“Canadian Pharmacy”)
Canadianmedsworld.com (“Canadian Meds”)
Canadianpharmacyltd.com (“Canadian Pharmacy”)
Cheap-pharmacy.us (“Canadian Health & Care Mail”)
Cod-rx.com
Dragon-rx.com
Eagle-meds.com (“US Drugstore”)
Edfriends.org (“Reliable Meds”)
Getlowdrugs.com (“US Drugstore”)
Gimmepills.com (Canadian Rx Drugs”)
Globalaccessrx.com
Globalrxpharmacy.net
Hyth.us
Lom-5.co.cc
Licensed-Rx.com
Max-pharm.com
Medsranch.com
My-pharm.com
Newcanadianhealthcare.com
Online-the.com/
OvernightMedsDirect.net
Pharmacynorthamerica.com
Pharmtransit.com
Pillzcctop.com (“US HealthCare Inc”)
Qualitygenerics.com
Rx-life.com
Rxpharma24hs.com
Shop.edmedsonline.com (“Canadian Pharmacy”)
Shoprxtoday.com
Thecanadianmeds.com (“Canadian Pharmacy”)
Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)
TrustedMedsMD.com
Us-rx-meds.com
Value-generics.com (“Generic Pharmacy”)
Value-pharm.com
Wholesale-generics.com
Xlpharmacy.com



Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)
Allrxonline.net
ApplyEdPills.info
Atterack.com (“My Canadian Pharmacy”)
Bestedmeds.com (“Canadian Pharmacy”)
Canadianmedsnow.com (“Canadian Pharmacy”)
Canadianpharmdirect.com (“Canadian Pharmacy”)
Canadianpharmacylive.com (“Canadian Family Pharmacy”)
Canapharmstore.com (“Canadian Health Center”)
Cheapviagstarmed.info
Directmedswhere.com (“Canadian Pharmacy”)
Drug-online.org (“Canadian Pharmacy”)
Fit-pharmacy.com
Generic365.com
Getfamilymedicines.com (“Canadian Health & Care Mall”)
Hot-drug.com (“Canadian Rx Drugs”)
Hotgrandpharm.com (“US Drugs”)
Interpill.com
Irontold.com (“Canadian Pharmacy”)
Jusikelsk.com (“US Healthcare, Inc”)
Laicsownsew.com (“World Pharmacy”)
Licensed-meds.com
Mantipu.com_world_drugs.com
Medicaldiscountrx.net
Meds35.com (“My Canadian Pharmacy”)
Medsmaster.com (“Official Medicines”)
Medsworldwidenetwork.com
Miztrust.cn (“My Canadian Pharmacy”)
Nextairsalepharm.com (“Canadian Health & Care Mall”)
Nextbestpharm.com (“My Canadian Pharmacy”)
Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)
Onlinepharmcanada.com (“Official Medicines”)
Ottowadrugs.com (“Canadian Pharmacy”)
Ourglobalpharm.com (“World Pharmacy”)
Pharmasavers.com
Phshuue.com (“U.S. Healthcare, Inc”)
Piromeds.com (“Drug Store”)
Pot-1.co.cc
Pot-7.co.cc
Poispp.com (“My Canadian Pharmacy”)
Premierpharmacy.net
Presidentrx.com
Proovernightpharm.com (“US Drugs”)
Qualitycandianmeds.com (“Canadian Pharmacy”)
Quickeasymed.com
Realairmentablets.com (“US Drugs”)
Rx-pillssshop.com (“Canadian Rx Drugs”)
Rx-toronto.net (“My Canadian Pharmacy”)
Targetpluspharma.com (“Canadian Health Care”)
Topcheappills.com (“Toronto Pharmacy”)
Topratedmedication.com (“Toronto Pharmacy”)
Turkbine.com (“Canadian Healthcare”)
Universallydrugstore.com (“Canadian Pharmacy”)
Viagraorder.org (“Canadian Pharmacy”)
Webdrugs.biz (“Canadian Pharmacy”)
Weekrequire.com (“Canadian Pharmacy”)
Worldshippingmeds.com



PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

  • Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
  • Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
  • Stealing people’s financial information.
  • Charging a consumer’s credit card without ever sending the purchased product (s).
  • Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
  • Selling prescription drugs, whether real or fake, without requiring a prescription.
  • Not responding to a consumer’s email or phone call after they have ordered a product.
  • Providing false contact information.
  • Selling a customer’s personal information to third parties without their consent.
  • Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.



We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS


On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Health & Care Mall – cheap-pharmacy.us

16 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
                    Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments. 

Company information:
Canadian Health & Care Mall United States
cheap-pharmacy.us

I ordered medication online from this ‘alleged’ Canadian pharmacy. They sent me a follow up email saying they received my order. A few days later, they sent another another email saying my order shipped was shipped out that day.

There is no telephone number listed on their website to call, only an email address to write to. When you try to send a message from their website, it says to verify the anti-spam word text in a box next to the text of your message. But, there is no ‘word’. Consequently, their mail system will not accept your message because you have not typed in the anti-spam word.

I located a phone number for them from another source. My first call was unanswered. My second call was answered by an answering machine with a male voice with a very heavy middle-Eastern accent

I did not receive the ordered medication. My numerous emails, requesting shipment details, were never replied to.

This company is nothing but a SCAM – BEWARE!

Hi,The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal money your.The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

You can find his foot prints by searching the following keywords;

  • 210-888-9089 – Canadian Pharmacy
  • 845-709-8044 – Bogus university degree
  • 718-524-2096 – Bogus OEM software
  • support@canadianpharmsupport.com
  • 210 East 59st Street New York,
  • NY 10021

The good news is that this scammer has extreme hatered

cheap-pharmacydotUS

against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency hat if you send a lot of spams to him, he will remove you from his spam databases.

THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!

You will get far less spams!

  • jowens@unifiedmarkets.com
  • owensw@unifiedmarkets.com
  • dmoonfire@unifiedmarkets.com
  • uminfo@unifiedmarkets.com
  • dholden@unifiedmarkets.com

Source: Complaintsboard

Address lookup

canonical name cheap-pharmacy.us.
aliases http://www.cheap-pharmacy.us
addresses 66.29.77.104

Domain Whois record

Queried whois.nic.us with “cheap-pharmacy.us“…

Domain Name: CHEAP-PHARMACY.US
Domain ID: D12110398-US
Sponsoring Registrar: ENOM, INC.
Registrar URL (registration services): whois.enom.com

Domain Status: ok
Registrant ID: 493A5506065
Registrant Name: Calmes Douglass
Registrant Organization: n/a
Registrant Address1: 4209 West Bertona
Registrant City: Seattle
Registrant State/Province: Washington
Registrant Postal Code: 98199
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +7.9023065253
Registrant Email: support@cheap-pharmacy.us
Registrant Application Purpose: P1
Registrant Nexus Category: C11

Administrative Contact ID: 493A5506065
Administrative Contact Name: Calmes Douglass
Administrative Contact Organization: n/a
Administrative Contact Address1: 4209 West Bertona
Administrative Contact City: Seattle
Administrative Contact State/Province: Washington
Administrative Contact Postal Code: 98199
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +7.9023065253
Administrative Contact Email: support@cheap-pharmacy.us
Administrative Application Purpose: P1
Administrative Nexus Category: C11

Billing Contact ID: 493A5506065
Billing Contact Name: Calmes Douglass
Billing Contact Organization: n/a
Billing Contact Address1: 4209 West Bertona
Billing Contact City: Seattle
Billing Contact State/Province: Washington
Billing Contact Postal Code: 98199
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +7.9023065253
Billing Contact Email: support@cheap-pharmacy.us
Billing Application Purpose: P1
Billing Nexus Category: C11

Technical Contact ID: 493A5506065
Technical Contact Name: Calmes Douglass
Technical Contact Organization: n/a
Technical Contact Address1: 4209 West Bertona
Technical Contact City: Seattle
Technical Contact State/Province: Washington
Technical Contact Postal Code: 98199
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +7.9023065253
Technical Contact Email: support@cheap-pharmacy.us
Technical Application Purpose: P1
Technical Nexus Category: C11

Name Server: NS1.CHEAP-PHARMACY.US
Name Server: NS2.CHEAP-PHARMACY.US

Created by Registrar: ESTDOMAINS, INC.
Last Updated by Registrar: ENOM, INC.
Last Transferred Date: Tue Nov 04 16:05:36 GMT 2008
Domain Registration Date: Sun Mar 11 21:03:05 GMT 2007
Domain Expiration Date: Thu Mar 10 23:59:59 GMT 2016
Domain Last Updated Date: Wed Nov 05 01:50:21 GMT 2008

Whois database was last updated on: Fri Jul 03 09:40:07 GMT 2009

Network Whois record

Queried whois.arin.net with “66.29.77.104“…

OrgName: Net Access Corporation
OrgID: NAC
Address: 9 Wing Drive
City: Cedar Knolls
StateProv: NJ
PostalCode: 07927
Country: US

ReferralServer: rwhois://whois.nac.net:43

NetRange: 66.29.0.0 – 66.29.127.255
CIDR: 66.29.0.0/17
OriginAS: AS8001
NetName: NAC-NETBLK07
NetHandle: NET-66-29-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NAC.NET
NameServer: NS2.NAC.NET
Comment: Additional Information Available via whois.nac.net
RegDate: 2005-04-15
Updated: 2007-09-18

RAbuseHandle: ABUSE156-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-800-638-6336
RAbuseEmail: abuse@nac.net

RNOCHandle: NOC270-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-973-590-5050
RNOCEmail: network@nac.net

RTechHandle: ZN77-ARIN
RTechName: Legal Department
RTechPhone: +1-800-638-6336
RTechEmail: legal@nac.net

OrgAbuseHandle: ABUSE156-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-638-6336
OrgAbuseEmail: abuse@nac.net

OrgNOCHandle: NOC270-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-973-590-5050
OrgNOCEmail: network@nac.net

OrgTechHandle: AR97-ARIN
OrgTechName: Rubenstein, Alex
OrgTechPhone: +1-973-590-5101
OrgTechEmail: alex@nac.net

# ARIN WHOIS database, last updated 2009-07-02 20:00

DNS records

name class type data time to live
http://www.cheap-pharmacy.us IN CNAME cheap-pharmacy.us 10289s (02:51:29)
cheap-pharmacy.us IN SOA
server: ns1.cheap-pharmacy.us
email:
serial: 1229273885
refresh: 300
retry: 300
expire: 300
minimum ttl: 300
2560s (00:42:40)
cheap-pharmacy.us IN NS ns1.cheap-pharmacy.us 259200s (3.00:00:00)
cheap-pharmacy.us IN NS ns2.cheap-pharmacy.us 259200s (3.00:00:00)
cheap-pharmacy.us IN MX
preference: 0
exchange: mx1.cheap-pharmacy.us
86400s (1.00:00:00)
cheap-pharmacy.us IN A 66.29.77.104 86400s (1.00:00:00)
104.77.29.66.in-addr.arpa IN SOA
server: ns3.2dayhost.com
email: hostmaster.104.77.29.66.in-addr.arpa
serial: 1246007999
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
2560s (00:42:40)
104.77.29.66.in-addr.arpa IN NS ns3.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns4.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN PTR st-104-77-29-66.2dayhost.com 86400s (1.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns3.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns4.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN PTR st-104-77-29-66.2dayhost.com 86400s (1.00:00:00)

— end —

superviagra.us
cialissofttabs.org
ordergenericviagra.org
orderlevitraonline.org
viagrasofttabs.org
allmp3hits.net
fast-mp3-search.net
full-mp3-albums.net
newmp3albums.net
canadianhealthcaremall.net
freshmp3downloads.com
mp3-downloads-forum.com
mp3-skyline.com
http://www.cheap-pharmacy.us/cnstats/index.php?st=log&stm=1246593600&ftm=1246679999

Read More…..

Canadian Pharmacy Spam – www.shop29.net aka www.shop75.net

2 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

shop75dotnet

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation.  Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by taking those counterfeit drugs.

  1. Bestdrugs.net.cn
  2. Cheap-meds.cn
  3. Cheap-pill.cn
  4. Cheapdrugs.com.cn
  5. Coolagree.cn
  6. Discountpills.cn
  7. Drugsdirectmoral.com
  8. Lovecanadianpower.com
  9. Lowpricepills.cn
  10. Medsbestone.com.cn
  11. Medstoresome.com.cn
  12. Newmedslofty.com
  13. Newpharmthe.com.cn
  14. Pharmacyonlinefound.com
  15. Pharmssitefarm.com.cn
  16. Pillsiteadd.com.cn
  17. Placepharmacygentle.com
  18. Ridestone.com
  19. Siterxmoral.com
  20. Smartdrugtell.com.cn
  21. Storemedburn.com.cn
  22. Thosefuns.com
  23. Topdrugalive.com
  24. Topmedsraise.com
  25. Toppharmlike.com.cn
  26. Toppilldrink.com.cn
  27. Wholesaledrugsand.com.cn
  28. Wholesalepharmsfirst.com
SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com

Address lookup

canonical name www.shop29.net.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom shop29.net“…

   Domain Name: SHOP29.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:16:16 UTC <<<

Queried whois.onlinenic.com with “shop29.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop29.net
Record last updated at 2009-06-22 10:50:33
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Technical Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Billing Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for shop29.net failed: WouldBlock

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop29.net IN A 61.191.191.241 10799s (02:59:59)
http://www.shop29.net IN A 119.39.238.2 10799s (02:59:59)
http://www.shop29.net IN A 203.93.208.86 10799s (02:59:59)
http://www.shop29.net IN A 218.75.144.6 10799s (02:59:59)
http://www.shop29.net IN A 60.191.221.117 10799s (02:59:59)
http://www.shop29.net IN A 60.191.239.153 10799s (02:59:59)
shop29.net IN NS ns6.creaseon.pl 172800s (2.00:00:00)
shop29.net IN NS ns4.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns3.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns5.creaseon.pl 172800s (2.00:00:00)

— end —

Address lookup

canonical name www.shop75.net.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153

Domain Whois record

Queried whois.internic.net with “dom shop75.net“…

   Domain Name: SHOP75.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:18:49 UTC <<<

Queried whois.onlinenic.com with “shop75.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop75.net
Record last updated at 2009-06-22 10:50:38
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop75.net IN A 60.191.239.153 10800s (03:00:00)
http://www.shop75.net IN A 61.191.191.241 10800s (03:00:00)
http://www.shop75.net IN A 119.39.238.2 10800s (03:00:00)
http://www.shop75.net IN A 203.93.208.86 10800s (03:00:00)
http://www.shop75.net IN A 218.75.144.6 10800s (03:00:00)
http://www.shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 61.191.191.241 10800s (03:00:00)
shop75.net IN A 218.75.144.6 10800s (03:00:00)
shop75.net IN A 119.39.238.2 10800s (03:00:00)
shop75.net IN A 203.93.208.86 10800s (03:00:00)
shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 60.191.239.153 10800s (03:00:00)

Canadian Pharmacy – www.firmvictor.com

Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
151.95.186.133 Italy (Pignone)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lorena N. Livingston Mon Jun 22 17:26:07 2009
Return-Path: <llivingston_wt@avantgarde.de>
Authentication-Results: mta112.sbc.mail.gq1.yahoo.com from=avantgarde.de; domainkeys=neutral (no sig); from=avantgarde.de; dkim=neutral (no sig)
Received: from 151.95.186.133 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta112.sbc.mail.gq1.yahoo.com with SMTP; Tue, 23 Jun 2009 04:14:27 -0700
Received: from lqdbnh2 ([151.95.186.133])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5NBDbs2029631;
Tue, 23 Jun 2009 04:14:25 -0700
Message-ID: <000701c9f399$334e5fd0$627e2c7a@avantgarde.de>
Reply-To: “Lorena N. Livingston”
From: “Lorena N. Livingston” <llivingston_wt@avantgarde.de>
To: ScamFraudAlert
Subject: Stay Hard and Last Longer in Bed!
Date: Mon, 22 Jun 2009 17:26:07 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 126

From: Lorena N. Livingston <llivingston_wt@avantgarde.de>
To: ScamFraudAlert.com
Sent: Monday, June 22, 2009 5:26:07 PM
Subject: Stay Hard and Last Longer in Bed!

An Incredible Canadian Pharmacy is available at your Fingertips!
No_Doctor_Needed! Click Here -> http://firmvictor.com

This spam brand has the dubious distinction of being the most heavily spammed domain our staff receives.

The “Canadian Pharmacy” titled sites are the most common. They may also be labeled “European Pharmacy” for visitors from IP addresses located outside North America.

Other sites include “PharmSite” and “best online PHARMACY.” They are riddled with identical fraudulent claims.

For simplicity, this entry refers by default to Canadian Pharmacy, but the false claims apply equally to all of these.

The copyright statement in the trailers for “PharmSite” and “best online PHARMACY” actually contains the words Copyright Canadian Pharmacy.

Visitors to these sites are cautioned against placing an unsecure order for any of the products advertised. With so much obvious fraud in the set up of the web site, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant criminals.

See Spamtracker.eu – Canadian Pharmacy

firmvictor

Address lookup

canonical name firmvictor.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom firmvictor.com“…

   Domain Name: FIRMVICTOR.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SOUNDPRIZE.IN
   Name Server: NS2.SOUNDPRIZE.IN
   Name Server: NS3.GROUNDBED.COM
   Name Server: NS4.GROUNDBED.COM
   Name Server: NS5.CHANGESTORY.PL
   Name Server: NS6.CHANGESTORY.PL
   Status: ok
   Updated Date: 18-jun-2009
   Creation Date: 18-jun-2009
   Expiration Date: 18-jun-2010

>>> Last update of whois database: Thu, 25 Jun 2009 07:36:37 UTC <<<

Queried whois.namerich.cn with “firmvictor.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : firmvictor.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.SOUNDPRIZE.IN
Name Server......................NS6.CHANGESTORY.PL
Name Server......................NS4.GROUNDBED.COM
Name Server......................NS5.CHANGESTORY.PL
Name Server......................NS1.SOUNDPRIZE.IN
Name Server......................NS3.GROUNDBED.COM
Status...........................ok
Creation  Date ..................2009-06-18
Expiration Date .................2010-06-18
Last Update  Date ...............2009-06-18

Registrant ID ...................V-X-57697-13132
Registrant Name .................GU FEI
Registrant Organization .........GU FEI
Registrant Address ..............FUZHOUGUANGCHANG29
Registrant City..................FZ
Registrant Province/State .......FJ
Registrant Country Code .........CN
Registrant Postal Code ..........350019
Registrant Phone Number .........+86.059175695124
Registrant Fax ..................+86.059175695124
Registrant Email ................baijakdfe@yeah.net

Administrative ID ...............V-X-57697-13132
Administrative Name .............GU FEI
Administrative Organization .....GU FEI
Administrative Address ..........FUZHOUGUANGCHANG29
Administrative City..............FZ
Administrative Province/State ...FJ
Administrative Country Code .....CN
Administrative Postal Code ......350019
Administrative Phone Number .....+86.059175695124
Administrative Fax ..............+86.059175695124
Administrative Email ............baijakdfe@yeah.net

Billing ID ......................V-X-57697-13132
Billing Name ....................GU FEI
Billing Organization ............GU FEI
Billing Address .................FUZHOUGUANGCHANG29
Billing City.....................FZ
Billing Province/State ..........FJ
Billing Country Code ............CN
Billing Postal Code .............350019
Billing Phone Number ............+86.059175695124
Billing Fax .....................+86.059175695124
Billing Email ...................baijakdfe@yeah.net

Technical ID ....................V-X-57697-13132
Technical Name ..................GU FEI
Technical Organization...........GU FEI
Technical Address ...............FUZHOUGUANGCHANG29
Technical City...................FZ
Technical Province/State.........FJ
Technical Country Code ..........CN
Technical Postal Code ...........350019
Technical Phone Number ..........+86.059175695124
Technical Fax ...................+86.059175695124
Technical Email .................baijakdfe@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
firmvictor.com IN A 218.75.144.6 10800s (03:00:00)
firmvictor.com IN A 119.39.238.2 10800s (03:00:00)
firmvictor.com IN A 203.93.208.86 10800s (03:00:00)
firmvictor.com IN A 60.191.221.117 10800s (03:00:00)
firmvictor.com IN A 60.191.239.153 10800s (03:00:00)
firmvictor.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy – Rx Partners – www.rx-partner.biz

Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

rx-partners

rxpartner-sign in

Canadian Pharmacy Spamming Operation

Address lookup

canonical name rx-partners.biz.
aliases
addresses 91.199.112.18
Domain Whois record

Queried whois.biz with “rx-partners.biz”…

Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok

Registrant ID: 550770560-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: 2nd Floor
Registrant State/Province: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Facsimile Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Billing Contact Address2: 241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2: 241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Wed Jan 21 15:12:51 GMT 2009
Registrar Fields
—————-
IDNLang: de

Whois database was last updated on: Sat May 02 15:29:14 GMT 2009
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.18″…
Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for rx-partners.biz failed: MessageTruncated

DNS query for 18.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rx-partners.biz IN TXT v=spf1 +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN TXT spf2.0/pra +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006617085
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rx-partners.biz IN NS ns1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS ns0.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip3.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip2.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN A 91.199.112.18 1200s (00:20:00)
rx-partners.biz IN MX
preference: 10
exchange: mail.rx-partners.biz 1200s

Domain

  1. ed-solution.com
  2. ed-sup.com
  3. edselection.com
  4. manfriendly.com
  5. partners-dns.com
  6. perfectgenerics.com
  7. propeciahair.com
  8. rxtrusted.com
  9. secureccpay.com
  10. somaextreme.com
  11. trustedtablets.com
  12. trustedtabs.com
  13. ultimatepillstore.com
  14. viagracomparison.com
  15. 4drugs.com
  16. paid4meds.com
  17. paid4med.com
  18. paid4pill.com
  19. paid4pills.com
  20. paid4tabs.com
  21. rx-partners.biz
  22. rxpbill.biz
  23. rxpcash.biz
  24. rxpcheck.biz
  25. rxppay.biz
  26. tabzcash.biz
  27. pillzcash.biz
  28. pillzcheck.biz
  29. pillzmeds.biz
  30. tabpaid.biz
  31. pay4meds.biz
  32. pay4medz.biz
  33. pay4pill.biz
  34. pay4tabs.biz
  35. pay4tabz.biz
  36. pay4med.biz
  37. pay4medc.biz
  38. pay4pillz.biz
  39. paid4meds.biz
  40. ed-sup.com
    edselection.com
    manfriendly.com
    omhca.com
    partners-dns.com
    perfectgenerics.com
    prescriptionspoint.com
    propeciahair.com
    rxtrusted.com
    secureccpay.com
  • 83.149.69.46
  • 83.149.69.47
  • 83.149.82.186
  • 91.199.112.7
  • 91.199.112.8

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Canadian Pharmacy – rosefight.com – causebreezy.com

1 Comment

An Incredible Canadian~Pharmacy is available at your Fingertips!
NO_Doctor_Needed! Click Here => http://rosefight.com

 

An Incredible Canadian~Pharmacy is available at your_Fingertips!
NO_Doctor_Needed! Click Here => http://causebreezy.com

 

An Incredible CanadianPharmacy is available at your Fingertips!
NO Doctor Needed! Click Here -> http://zealstay.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
60.198.140.245 Taiwan (Taipei)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:


From Amanda King Wed Jun 3 19:08:30 2009 
Return-Path: 
Authentication-Results: mta124.sbc.mail.mud.yahoo.com from=anglianet.co.uk; domainkeys=neutral (no sig); from=anglianet.co.uk; dkim=neutral (no sig) 
Received: from 60.198.140.245 (EHLO flpi193.prodigy.net) (207.115.20.195) 
by mta124.sbc.mail.mud.yahoo.com with SMTP; Wed, 03 Jun 2009 19:08:30 -0700 
Received: from wd4l8b2 (60-198-140-245.dynamic.tfn.ent.tw [60.198.140.245] (may be forged)) 
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5427Wlt003373; 
Wed, 3 Jun 2009 19:08:27 -0700 
Message-ID: <000701c9e4b9$5af491b0$4a37416a@anglianet.co.uk> 
Reply-To: “Amanda King”  <a_kingjf@anglianet.co.uk>
From: “Amanda King”    <a_kingjf@anglianet.co.uk>
To: ScamFraudAlert
Subject: We have all the best Rxmed Out! 
Date: Wed, 03 Jun 2009 21:08:30 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 124 

 

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
194.254.168.135 France (Sannois)* Whois Google DNSStuff Urgentmessage.org
207.115.36.113 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

 

From Louie Hicks Fri Jun 5 02:48:58 2009 
Return-Path: 
Authentication-Results: mta138.sbc.mail.re3.yahoo.com from=sparebank1.no; domainkeys=neutral (no sig); from=sparebank1.no; dkim=neutral (no sig) 
Received: from 194.254.168.135 (EHLO nlpi097.prodigy.net) (207.115.36.113) 
by mta138.sbc.mail.re3.yahoo.com with SMTP; Fri, 05 Jun 2009 02:48:58 -0700 
Received: from 9brjah2 ([194.254.168.135]) 
by nlpi097.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n559mm9j001639; 
Fri, 5 Jun 2009 04:48:57 -0500 
Message-ID: <000701c9e5c2$d939a6a0$4a37416a@sparebank1.no> 
Reply-To: “Louie Hicks”  louiehicks_ig@sparebank1.no
From: “Louie Hicks”  louiehicks_ig@sparebank1.no
To: , , 
Subject: Have long strong night in BED! 
Date: Fri, 05 Jun 2009 04:48:58 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 128

 

 

 

 

Address lookup

canonical name rosefight.com.
aliases  
addresses 203.93.208.86
58.17.3.41
60.191.239.181

Domain Whois record

Queried whois.internic.net with “dom rosefight.com“…

   Domain Name: ROSEFIGHT.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.FELTTWENTY.COM
   Name Server: NS2.FELTTWENTY.COM
   Name Server: SP151.DELETEDNS.COM
   Name Server: SP152.DELETEDNS.COM
   Name Server: SP153.DELETEDNS.COM
   Name Server: SP154.DELETEDNS.COM
   Status: ok
   Updated Date: 04-jun-2009
   Creation Date: 03-jun-2009
   Expiration Date: 03-jun-2010

>>> Last update of whois database: Sat, 06 Jun 2009 22:46:50 UTC <<<

Queried whois.paycenter.com.cn with “rosefight.com“…

Domain Name      : rosefight.com
PunnyCode        : rosefight.com

Registrant:
  Organization   : TIANCHUNLIN
  Name           : TIANCHUNLING
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039

Administrative Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Technical Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Billing Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rosefight.com IN A 60.191.239.181 3600s (01:00:00)
rosefight.com IN A 58.17.3.41 3600s (01:00:00)
rosefight.com IN A 203.93.208.86 3600s (01:00:00)


 


SpamFilter IPs – TrustedSource.org (NameServers)

1 Comment

 

SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.drivefabled.com
dns1.grewmile.com
dns1.relaxrange.com
dns1.towardhardy.com
dns1.trendysit.com
dns1.varystart.com
dns1.wentcrisp.com
dns1.winnertrue.com
dns2.angerboat.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.hasfeet.com
dns2.headraise.com
dns2.pridenature.com
dns2.shallcoat.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns3.drivefabled.com
dns3.headraise.com
dns3.noticematch.com
dns3.nounstudy.com
dns3.relaxrange.com
dns3.shallcoat.com
dns3.tangyprime.com
dns3.towardhardy.com
dns3.varystart.com
dns4.coursethey.com
dns4.createwere.com
dns4.dadfour.com
dns4.dreamylot.com
dns4.greatyule.com
dns4.headraise.com
dns4.joyfulthin.com
dns4.relaxrange.com
dns4.shallcoat.com
dns4.sliporgan.com
dns4.towardhardy.com
dns4.trendysit.com
dns4.varystart.com
dns4.winnertrue.com
host2.soonplay.com
host4.soonplay.com
ns1.activeinch.com
ns1.boatabove.com
ns1.breezycorner.com
ns1.cookmulti.com
ns1.croppast.com
ns1.dimplechair.com
ns1.dimplechaste.com
ns1.donewater.com
ns1.earlytwenty.com
ns1.feetreal.com
ns1.ideazeal.com
ns1.listenflower.com
ns1.plainable.com
ns1.posewill.com
ns1.powerhardy.com
ns1.silverwe.com
ns1.strongwisdom.com
ns1.toophrase.com
ns1.wheredone.com
ns2.activeinch.com
ns2.callold.com
ns2.cookmulti.com
ns2.croppast.com
ns2.cuddlyhumble.com
ns2.dimplechair.com
ns2.dimplechaste.com
ns2.earlytwenty.com
ns2.listenflower.com
ns2.lucidsoon.com
ns2.mightexcept.com
ns2.posewill.com
ns2.resttrust.com
ns2.ropemeant.com
ns2.toophrase.com
ns2.wheredone.com
ns3.activeinch.com
ns3.atbread.com
ns3.bandwater.com
ns3.briefdesire.com
ns3.burnround.com
ns3.callold.com
ns3.cookmulti.com
ns3.cuddlyhumble.com
ns3.dimplechair.com
ns3.dimplechaste.com
ns3.earlytwenty.com
ns3.fizzdecent.com
ns3.listenflower.com
ns3.lucidsoon.com
ns3.posewill.com
ns3.quietyet.com
ns3.radiothan.com

Canadian Pharmacy – www.stickscale.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
12.238.6.206 United States (Indianapolis)* Whois Google DNSStuff Urgentmessage.org
207.115.36.166 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Rusty Cisneros Mon Jun 1 22:06:20 2009 
Return-Path: 
Authentication-Results: mta111.sbc.mail.re3.yahoo.com from=sievi.fi; domainkeys=neutral (no sig); from=sievi.fi; dkim=neutral (no sig) 
Received: from 12.238.6.206 (EHLO nlpi152.prodigy.net) (207.115.36.166) 
by mta111.sbc.mail.re3.yahoo.com with SMTP; Mon, 01 Jun 2009 22:06:20 -0700 
Received: from atvvzcc ([12.238.6.206]) 
by nlpi152.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5255p2w017612; 
Tue, 2 Jun 2009 00:06:19 -0500 
Message-ID: <000701c9e33f$ddcdb2e0$4a37416a@sievi.fi> 
Reply-To: “Rusty Cisneros”  rusty_cisnerostv@sievi.fi
From: “Rusty Cisneros”  <rusty_cisnerostv@sievi.fi>
To: , , <rusty_cisnerostv@sievi.fi>
Subject: Get all the medications you want online! 
Date: Tue, 02 Jun 2009 00:06:20 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 128

An Incredible Canadian Pharmacy is available at your Fingertips!
N0_Doctor_Needed! Click Here -> http://stickscale.com

 

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 60.191.239.181
61.191.63.150
203.93.208.86
58.17.3.41

Address lookup

canonical name stickscale.com.
aliases  
addresses 203.93.208.86
58.17.3.41
60.191.239.181
61.191.63.150

Domain Whois record

Queried whois.internic.net with “dom stickscale.com“…

   Domain Name: STICKSCALE.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.RESTLOYAL.COM
   Name Server: NS2.RESTLOYAL.COM
   Name Server: SP66.DELETEDNS.COM
   Name Server: SP68.DELETEDNS.COM
   Status: ok
   Updated Date: 01-jun-2009
   Creation Date: 31-may-2009
   Expiration Date: 31-may-2010

>>> Last update of whois database: Wed, 03 Jun 2009 06:08:42 UTC <<<

Queried whois.paycenter.com.cn with “stickscale.com“…

Domain Name      : stickscale.com
PunnyCode        : stickscale.com

Registrant:
  Organization   : HOUXINYI
  Name           : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013

Administrative Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Technical Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Billing Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
stickscale.com IN A 60.191.239.181 3600s (01:00:00)
stickscale.com IN A 58.17.3.41 3600s (01:00:00)
stickscale.com IN A 61.191.63.150 3600s (01:00:00)
stickscale.com IN A 203.93.208.86 3600s (01:00:00)

Canadian Pharmacy – pde.nkboiwer.cn

2 Comments

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.48 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
161.116.95.52 Spain (Barcelona)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Brandi Edra Tue Jun 2 01:51:23 2009 
Return-Path: 
Authentication-Results: mta175.sbc.mail.mud.yahoo.com from=jathomas.com; domainkeys=neutral (no sig); from=jathomas.com; dkim=neutral (no sig) 
Received: from 207.115.20.48 (EHLO flph261.prodigy.net) (207.115.20.48) 
by mta175.sbc.mail.mud.yahoo.com with SMTP; Tue, 02 Jun 2009 02:51:18 -0700 
Received: from epmjfcb (n052.el.ub.es [161.116.95.52] (may be forged)) 
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with ESMTP id n529pHVr002402; 
Tue, 2 Jun 2009 02:51:19 -0700 
Reply-To: “Brandi Edra”  bedrayy@jathomas.com
Date: Tue, 02 Jun 2009 01:51:23 -0700 
Subject: PenisEnlargement Pills, HarderErections & BiggerPenis vmpp y2r 
Sender: bedrayy@jathomas.com
From: “Brandi Edra” 
Message-ID: <1243932683.5646@jathomas.com> 
In-Reply-To: 
To: 
Content-Type: text/plain; 
charset=”iso-8859-2″ 
Content-Transfer-Encoding: 8bit 
Content-Length: 736 

GIVE YOURSELF A LongerPEN1S!!!!!!!!!!      
    
Discover the Clinically Proven and Doctor Approved Formula to give you 3-4 inches more  

    
Discover the Clinically Proven and Doctor Approved Formula to give you 3-4 inches more    
  
Bigger, L0NGER, Harder & LastingErections        
1ncrease SexualStamina and SexDrive    
More powerful, Intense0rgasms  
http://pde.nkboiwer.cn
    
Almost a decade ago, our formulator set out to develop a safe and powerful formula that would eliminate the SexualDifficulties that millions 0f men are quietly suffering with.  
  
Fast forward to today and Leading Edge Herbals has developed the world’s leading male sexual enhancement product, Mas Gentle Man is helping tens of thousands of men from every corner of the globe banish the    
      
http://pow.nkboiwer.cn

 

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 82.203.170.221
87.99.70.86
89.232.37.181
116.75.231.145
123.238.15.215
201.231.58.158
62.84.51.85
79.132.75.139
Nameservers: ns1.bydvwqcdw.com
ns2.syyftgswdce.com
ns3.bydvwqcdw.com
ns4.syyftgswdce.com

Canadian Pharmacy – www.motherany.com

1 Comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
12.161.202.90 United States (Neffs)* Whois Google DNSStuff Urgentmessage.org
207.115.36.137 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Brendan Collier Sun May 31 05:31:41 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=dck.com.ar; domainkeys=neutral (no sig); from=dck.com.ar; dkim=neutral (no sig)
Received: from 12.161.202.90 (EHLO nlpi123.prodigy.net) (207.115.36.137)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Sat, 30 May 2009 21:31:35 -0700
Received: from 5s9gclp ([12.161.202.90])
by nlpi123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4V4VGXY028689;
Sat, 30 May 2009 23:31:33 -0500
Message-ID: <000701c9e1eb$c0242c10$627e2ad2@dck.com.ar>
Reply-To: “Brendan Collier”
From: “Brendan Collier”
To: ,
Subject: great deals goin on
Date: Sun, 31 May 2009 08:31:41 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.147.35.66 United States (Davenport)* Whois Google DNSStuff Urgentmessage.org
207.115.20.48 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Amparo Savage Fri May 29 11:46:23 2009

Return-Path:
Authentication-Results: mta102.sbc.mail.re3.yahoo.com from=blm.co.uk; domainkeys=neutral (no sig); from=blm.co.uk; dkim=neutral (no sig)
Received: from 66.147.35.66 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 22:35:52 -0700
Received: from tcdb592 (nsc66.147.35-66.newsouth.net [66.147.35.66])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4U5ZbWA013298;
Fri, 29 May 2009 22:35:52 -0700
Message-ID: <000701c9e08d$c3fa2150$627e2c7a@blm.co.uk>
Reply-To: “Amparo Savage”     a.savage_go@blm.co.uk
From: “Amparo Savage”    a.savage_go@blm.co.uk
To: ScamFraudAlert
Subject: Canadian Rx Medications to the rescue
Date: Fri, 29 May 2009 11:46:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

top-phar-medshop2

Canadian Pharmacy – the worst Internet fraud problem today. These criminals steal identities and credit card details from unsuspecting customers, to use later to pay for tens of thousands of domain name registrations. Don’t be fooled.
Similar sites to this are listed in the spam trap report at
http://rss.uribl.com/ns/plumbold_com.html
Use complainterator.com to generate complaints to the registrars, and include a link to this page for evidence.

Posted at 05/31/2009-12:43:06 AM by pharmalert, Experienced Reviewer

“Canadian Pharmacy” is a flagrant criminal operation that keeps opening thousands and thousands new sites promoting the same old illegal pharmaceuticals. You seldom see greedier scumbags than these criminals. They don’t care how much damage they cause to innocent people as long as they get all they want. No matter if people get seriously ill after taking their fake drugs, or lose their money after giving over their credit card details. This kind of scammers would be happy to sell their own mother for a quick buck (if they only had one).

It’s always better to stay far away from here and similar sites altogether. There’s no one on the face of earth who would gain by this scam but the criminals behind it, and possibly the poor schmucks who send all the spam for them. They think they are safe, but one day the tide will turn…

See evidence of fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed

Posted at 05/30/2009-08:56:12 PM by Nodus, Experienced Reviewer , View profile [ Reputation score: 9 / 9 ]

Address lookup

canonical name www.motherany.com.
aliases
addresses 58.17.3.41
60.191.239.181
61.191.63.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom motherany.com“…

   Domain Name: MOTHERANY.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PLUMBOLD.COM
   Name Server: NS2.PLUMBOLD.COM
   Name Server: NS3.MORALFLAIR.COM
   Name Server: NS4.MORALFLAIR.COM
   Status: ok
   Updated Date: 27-may-2009
   Creation Date: 25-may-2009
   Expiration Date: 25-may-2010

>>> Last update of whois database: Sun, 31 May 2009 18:19:27 UTC <<<

Queried whois.paycenter.com.cn with “motherany.com“…

Domain Name      : motherany.com
PunnyCode        : motherany.com

Registrant:
  Organization   : LIUJIARONG
  Name           : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064

Administrative Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Technical Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Billing Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Network Whois record

Queried whois.apnic.net with “58.17.3.41“…

inetnum:      58.17.3.32 - 58.17.3.47
netname:      CHAOREN-CAFE
country:      CN
descr:        Superman Internet Cafe
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      wujiawei@china-netcom.com 20070427
mnt-by:       MAINT-CNCGROUP-JX
source:       APNIC

route:        58.17.0.0/17
descr:        CNC Group CHINA169 Jiangxi Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060728
source:       APNIC

route:        58.17.0.0/17
descr:        CNCGroup JiangXi province network
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20050218
changed:      hm-changed@apnic.net 20050331
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.motherany.com IN A 60.191.239.181 3600s (01:00:00)
http://www.motherany.com IN A 61.191.63.150 3600s (01:00:00)
http://www.motherany.com IN A 203.93.208.86 3600s (01:00:00)
http://www.motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 61.191.63.150 3600s (01:00:00)
motherany.com IN A 203.93.208.86 3600s (01:00:00)
motherany.com IN A 60.191.239.181 3600s (01:00:00)

— end —

Canadian Pharmacy – Rxpayouts.com Complaint

1 Comment

RxPayouts.com Online Pharmacy Fraud Internet

RxPayouts.com                                                                                                                           logo
http://www.rxpayouts.com 
Internet,
U.S.A.

I am a member of the affiliate program of RxPayouts.com, which is an online pharmacy.

On Oct 24, I was shocked to learn that my account was suspended due to inactivity when my store have been consistently operating for more than a month now. I immediately tried to contact their affiliate support through phone and email but to no avail, until on Oct 27 when one of my employees was able to reach an affiliate support personnel by phone by the name of allen.

Allen basically said that my store does not exist. How can my store not exist when Rxpayouts own customer support knows us and we are still able to process orders.

Rxpayouts faked a suspension then removed my account when we are about to receive our USD 4000 commission. Rxpayouts stole my commissions! This company is scamming people and affiliates should know!

To prove that my store still operates here is a shipped out transaction, note that sensitive info have been removed:
——————————————————————
This email is to notify you that an order for your store
greensafemeds.com has been shipped, all the details
are shown below.

Order ID: #2852237
Order Date: 2008-10-23 15:27:25

You are receiving this email because your email address is registered in the
back office (((Redacted)))
If you do not wish to receive these notification emails you can leave
Notify email blank for this store. All notification emails arrive with the
subject prefix ‘Admin:’ allowing you to easily filter these messages if you
have a high volume store.

If you have any questions please contact us at any time, but not by using this
email as this email was sent to you by our systems.

Thanks — (((Redacted)))

Phillip yao
Manila
Philippines

 

Rxpayouts payment fraud

Well they paid me for the USD 4000 a few weeks back. So I thought that the issue, whatever it was, was finally resolved.

Now three (3) weeks later and I have an unpaid commission of USD 8000+ and they won’t pay again.

They say I am under fraud investigation. They neglected to say what fraudulent act I supposedly did or that I was under investigation to begin with. If they want to put me under investigation, at the very least tell me so that I wouldn’t have wasted time selling their products.

It seems I am not the first to encounter this problem with Rxpayouts. It seems this is standard operation in our local industry. They have duped many affiliates.

Canadian Pharmacy – www.simple-op.net

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

top-phar-medshop2

Address lookup

canonical name simple-op.net.
aliases http://www.simple-op.net
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom simple-op.net“…

   Domain Name: SIMPLE-OP.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 31-jul-2008
   Creation Date: 06-jun-2008
   Expiration Date: 06-jun-2011

>>> Last update of whois database: Sun, 31 May 2009 12:11:56 UTC <<<

Queried whois.enom.com with “simple-op.net“…

Visit AboutUs.org for more information about simple-op.net
<a href="http://www.aboutus.org/simple-op.net">AboutUs: simple-op.net</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: simple-op.net

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 06 Jun 2008 09:43:55
Expiration date: 06 Jun 2011 09:43:55

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.simple-op.net IN CNAME simple-op.net 60s (00:01:00)
simple-op.net IN SOA
server: ns1.adverdomain.com
email: root.simple-op.net
serial: 2009030829
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
simple-op.net IN NS ns4.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns2.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns5.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns1.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns3.nscontrol.com 60s (00:01:00)
simple-op.net IN A 195.95.155.3 60s (00:01:00)

Canadian Pharmacy – cheapfasteasy.info aka canadianpharmacyltd.com

Leave a comment


Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

 

http://www.canadianpharmacyltd.com/?aid=6644

 

Address lookup

canonical name cheapfasteasy.info.
aliases  
addresses 66.154.53.36

Domain Whois record

Queried whois.afilias.info with “cheapfasteasy.info“…

Domain ID:D24249387-LRMS
Domain Name:CHEAPFASTEASY.INFO
Created On:27-Mar-2008 13:56:30 UTC
Last Updated On:09-Apr-2009 16:36:03 UTC
Expiration Date:27-Mar-2010 13:56:30 UTC
Sponsoring Registrar:Name.com LLC (R279-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:ncr-1910406-9413
Registrant Name:bodo unger
Registrant Organization:bodo unger
Registrant Street1:blk 1 door 1 consolation village
Registrant City:cagayan de oro city
Registrant State/Province:misamis oriental
Registrant Postal Code:9000
Registrant Country:PH
Registrant Phone:+63.9194311743
Registrant Email:bodounger@yahoo.de
Admin ID:nc-365243
Admin Name:bodo unger
Admin Organization:bodo unger
Admin Street1:blk 1 door 1 consolation village
Admin City:cagayan de oro city
Admin State/Province:misamis oriental
Admin Postal Code:9000
Admin Country:PH
Admin Phone:+63.9194311743
Admin Email:bodounger@yahoo.de
Billing ID:nc-365245
Billing Name:bodo unger
Billing Organization:bodo unger
Billing Street1:blk 1 door 1 consolation village
Billing City:cagayan de oro city
Billing State/Province:misamis oriental
Billing Postal Code:9000
Billing Country:PH
Billing Phone:+63.9194311743
Billing Email:bodounger@yahoo.de
Tech ID:nc-365244
Tech Name:bodo unger
Tech Organization:bodo unger
Tech Street1:blk 1 door 1 consolation village
Tech City:cagayan de oro city
Tech State/Province:misamis oriental
Tech Postal Code:9000
Tech Country:PH
Tech Phone:+63.9194311743

Tech Email:bodounger@yahoo.de
Name Server:NS1.CONEPUPPY.COM
Name Server:NS2.CONEPUPPY.COM 
Network Whois record

Queried whois.arin.net with “66.154.53.36“…

OrgName:    Cyber Wurx LLC
OrgID:      CPCW
Address:    12430 Tesson Ferry Rd
City:       St Louis
StateProv:  MO
PostalCode: 63128
Country:    US

NetRange:   66.154.0.0 - 66.154.95.255
CIDR:       66.154.0.0/18, 66.154.64.0/19
NetName:    CONEPUPPY-COM
NetHandle:  NET-66-154-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.CONEPUPPY.COM
NameServer: NS2.CONEPUPPY.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-07-20
Updated:    2003-08-20

RTechHandle: CS1169-ARIN
RTechName:   IP SUPPORT, Christopher
RTechPhone:  +1-404-681-9888
RTechEmail:  ipsupport@cyberwurx.com 

OrgAbuseHandle: ABUSE2236-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-404-681-9888
OrgAbuseEmail:  abuse@cyberwurx.com

OrgTechHandle: NOC2137-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  routing@cyberwurx.com

OrgTechHandle: IPALL4-ARIN
OrgTechName:   ipallocation
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  arin@cyberwurx.com

# ARIN WHOIS database, last updated 2009-05-29 20:00

DNS records

name class type data time to live
cheapfasteasy.info IN A 66.154.53.36 86400s (1.00:00:00)
cheapfasteasy.info IN SOA
server: ns1.conepuppy.com
email: hostmaster.conepuppy
serial: 2008090209
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
cheapfasteasy.info IN NS ns1.conepuppy.com 86400s (1.00:00:00)
cheapfasteasy.info IN NS ns2.conepuppy.com 86400s (1.00:00:00)
cheapfasteasy.info IN MX
preference: 20
exchange: cwmail2.conepuppy.com
86400s (1.00:00:00)
cheapfasteasy.info IN MX
preference: 10
exchange: cwmail.conepuppy.com
86400s (1.00:00:00)
36.53.154.66.in-addr.arpa IN PTR bbwz.com 86400s (1.00:00:00)

PharmacyUSA!- Canadian Pharmacy – droolplanet.com

Leave a comment

PharmacyUSA!

  from support@droolplanet.com
to  
date Mon, May 25, 2009 at 3:17 PM
subject PharmacyUSA!
 

 

AS9929

Address lookup

canonical name droolplanet.com.
aliases  
addresses 60.191.239.189
203.93.208.86
58.17.3.44

Domain Whois record

Queried whois.internic.net with “dom droolplanet.com“…

   Domain Name: DROOLPLANET.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.DROOLPLANET.COM
   Name Server: NS2.DROOLPLANET.COM
   Name Server: NS3.DROOLPLANET.COM
   Name Server: NS4.DROOLPLANET.COM
   Status: ok
   Updated Date: 25-may-2009
   Creation Date: 24-may-2009
   Expiration Date: 24-may-2010

>>> Last update of whois database: Mon, 25 May 2009 23:26:34 UTC <<<

Queried whois.paycenter.com.cn with “droolplanet.com“…

Query error: TimedOut

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
droolplanet.com IN A 60.191.239.189 600s (00:10:00)

WhoIs Stimul-media? Rx-partners.com/Rx-partner.biz

2 Comments

WhoIs Stimul-media??? Rx-Partners ???

Fast-online-refills.com is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.

Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.

Rogue Internet pharmacy (definition):

A pharmacy website that intentionally or knowingly:

  1. violates, appears to violate, or encourages violation of Federal or state law or regulation;
  2. does not adhere to accepted standards of medicine and/or pharmacy practice, including standards of safety; and/or
  3. engages in fraudulent or deceptive business practices.

Website Summary

URL: http://www.fast-online-refills.com
Registrar: Key-Systems
Approval Status: rogue rogue (since 07/31/2009)
Online Status: online online

Network

This site seems to be part of the Stimul-Cash network.

Stimul-Cash is a rogue Internet pharmacy affiliate program. Websites affiliated with this network admit offering prescription drugs from overseas without a valid prescription (which violates multiple US laws). Stimul-Cash’s website claims that the drugs come from India. However, India is known to be a source of illicit, sometimes counterfeit or adulterated, medicines.

Stimul-Cash’s forums are in Russian, which suggests that the operation is not actually run by Indians, but that the network may be linked to an organization in Russia. Additionally, Stimul-Cash appears to be linked to Rx-Partners.biz, another rogue online pharmacy network.

Pharma Fraud Escalates Dramatically

eSoft provided me with data on seven different templates they have discovered. The quantity is amazing. In four days last week they detected:

1,104 canadian_pharm_light_blue
993 canadian_pharm_blue
27 top_pharmacy
23 canadian_pharm_white
18 health_sol
6 canadian_pharm_blue2
1 canadian_pharm_p_images

That is 543 of these sites per day over four days — and only for these seven templates.

“The canadian_* templates are clearly the most prevalent and we have traced these back to “GlavMed”, which we believe operates out of the Russian Business Network and is likely tied to the Russian mafia. The GlavMed hosts tend to stay online for no more than a couple of weeks.”

The other major outfit is Rx Partners/Rx-Commission Networks/ Stimul Cash and they have websites:

http://www.rx-partners.biz
http://www.stimul-cash.com/sites.html

Here are some recent (last 4 days) examples of these sites

www.stimul-cash.com stimul-media.com Centralux Limited

13/02/2009

No comment

www.stimul-cash.com stimul-media.com Centralux Limited

Affiliation system for the sale of drugs
many spams Viagra type appear to be linked to these sites

www.stimul-cash.com 91.199.112.5

Stimuli-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, 16 appt. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: Inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Address lookup

canonical name stimul-media.com.
aliases
addresses 88.85.65.160

Domain Whois record

Queried whois.internic.net with “dom stimul-media.com“…stimul-cash - online store

Domain Name: STIMUL-MEDIA.COM
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Name Server: NS1.STIMUL-MEDIA.COM
Name Server: NS2.STIMUL-MEDIA.COM
Status: clientTransferProhibited
Updated Date: 13-apr-2009
Creation Date: 18-apr-2006
Expiration Date: 18-apr-2011

>>> Last update of whois database: Sun,
24 May 2009 19:28:00 UTC

Queried whois.rrpproxy.net with “stimul-media.com“…

DOMAIN: STIMUL-MEDIA.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-AMM1304
owner-organization: STIMUL-MEDIA.COM
owner-fname: Asiyat
owner-lname: Marysheva
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: marysheva@yahoo.com

admin-contact: P-AMM1304stimul-cash - online store2
admin-organization: STIMUL-MEDIA.COM
admin-fname: Asiyat
admin-lname: Marysheva
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: marysheva@yahoo.com

tech-contact: P-AMM1304
tech-organization: STIMUL-MEDIA.COM
tech-fname: Asiyat
tech-lname: Marysheva
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: marysheva@yahoo.com

billing-contact: P-AMM1304
billing-organization: STIMUL-MEDIA.COM
billing-fname: Asiyat
billing-lname: Marysheva
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: marysheva@yahoo.com

nameserver: ns1.stimul-media.com 88.85.65.160
nameserver: ns2.stimul-media.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.160“…

Information related to ‘88.85.64.0 – 88.85.71.255’

inetnum: 88.85.64.0 – 88.85.71.255
netname: WEBAZILLA
descr: WebaZilla
country: NL
admin-c: WZNL1-RIPE
tech-c: WZNL1-RIPE
status: ASSIGNED PA
mnt-by: WZNET-MNT
mnt-routes: WZNET-MNT
changed: bk@webazilla.com 20070209
source: RIPE

role: WebaZilla RIPE Manager
address: WebaZilla B.V.
address: Postbus 19115
address: 3501DC Utrecht
address: Netherlands
phone: +31612253464
fax-no: +31303100299
e-mail: noc@webazilla.com
mnt-by: WZNET-MNT
admin-c: BK5536-RIPE
tech-c: BK5536-RIPE
tech-c: KV1670-RIPE
nic-hdl: WZNL1-RIPE
changed: bk@webazilla.com 20070718
source: RIPE

% Information related to ‘88.85.64.0/19AS35415’

route: 88.85.64.0/19
descr: WEBAZILLA
origin: AS35415
mnt-by: WZNET-MNT
changed: bk@webazilla.com 20060728
source: RIPE

DNS records

DNS query for 160.65.85.88.in-addr.arpa returned an error from the server: NameError

name class type data time to live
stimul-media.com IN MX
preference: 1
exchange: mail.stimul-media.com
3600s (01:00:00)
stimul-media.com IN SOA
server: stimul-media.com
email: root.stimul-media.com
serial: 2009021601
refresh: 1200
retry: 240
expire: 43200
minimum ttl: 3600
3600s (01:00:00)
stimul-media.com IN NS ns2.stimul-media.com 3600s (01:00:00)
stimul-media.com IN NS ns1.stimul-media.com 3600s (01:00:00)
stimul-media.com IN A 88.85.65.160>

Domains Listings

  1. stimulmedia.us
  2. stimul-media.org
  3. stimulmedia.org
  4. x-traffic.org
  5. indianmeds.org
  6. stimul-media.net
  7. stimulmedia.net
  8. indianrx.net
  9. pharmaceutical-news.net
  10. stimulmedia.info
  11. anti-fungal-meds.com
  12. anti-headache-meds.com
  13. bp-meds.com
  14. cheap-anti-depressants.com
  15. cheap-ed-drugs.com
  16. cheap-ed-meds.com
  17. cheap-ed-pills.com
  18. cheap-pain-meds.com
  19. discount-ed-meds.com
  20. discount-ed-pills.com
  21. extracheapdrugs.com
  22. fullpocket.com
  23. gastrointestinal-meds.com
  24. get-your-movie.com
  25. gpills.com
  26. help-me-please.com
  27. mens-best-friends.com
  28. order-cheap-antibiotics.com
  29. order-cheap-cialis.com
  30. order-cheap-levitra.com
  31. pills4boys.com
  32. pr-drugs.com
  33. reels777.com
  34. stimulmedia.com
  35. stimul-media.com
  36. thyroid-meds.com
  37. womens-health-meds.com
  38. deli-drugs.com
  39. delirx.com
  40. delidrugs.com
  41. delhi-drugs.com
  42. delhidrugs.com
  43. delhirx.com
  44. perfect-ed-store.com
  45. top-viagra-store.com
  46. worlds-best-pharmacy.com
  47. worldbestpharmacy.com
  48. ordercheappills.com
  49. bestdealviagra.com
  50. yourpillshere.com
  51. genericsfromindia.com
  52. indian-generics.com
  53. secure-my-card.com
  54. mumbaidrugs.com
  55. my-secure-billing.com
  56. best-cialis-store.com
  57. friendly-ed-pharmacy.com
  58. popular-ed-products.com
  59. best-levitra-store.com
  60. rxpforum.com
  61. rxpblog.com
  62. rxpwiki.com
  63. smok-ox.com
  64. smokox.com
  65. easy-export.biz
  66. stimul-media.biz
  67. farmaforum.biz
  68. pharmforum.biz

CaCeWeb.com

stimulmedia.us
stimul-media.org
stimulmedia.org
x-traffic.org
indianmeds.org
stimul-media.net
stimulmedia.net
indianrx.net
pharmaceutical-news.net
stimulmedia.info
anti-fungal-meds.com
anti-headache-meds.com
bp-meds.com
cheap-anti-depressants.com
cheap-ed-drugs.com
cheap-ed-meds.com
cheap-ed-pills.com
cheap-pain-meds.com
discount-ed-meds.com
discount-ed-pills.com
extracheapdrugs.com
fullpocket.com
gastrointestinal-meds.com
get-your-movie.com
gpills.com
help-me-please.com
mens-best-friends.com
order-cheap-antibiotics.com
order-cheap-cialis.com
order-cheap-levitra.com
pills4boys.com
pr-drugs.com
reels777.com
stimulmedia.com
stimul-media.com
thyroid-meds.com
womens-health-meds.com
deli-drugs.com
delirx.com
delidrugs.com
delhi-drugs.com
delhidrugs.com
delhirx.com
perfect-ed-store.com
top-viagra-store.com
worlds-best-pharmacy.com
worldbestpharmacy.com
ordercheappills.com
bestdealviagra.com
yourpillshere.com
genericsfromindia.com
indian-generics.com
secure-my-card.com
mumbaidrugs.com
my-secure-billing.com
best-cialis-store.com
friendly-ed-pharmacy.com
popular-ed-products.com
best-levitra-store.com
rxpforum.com
rxpblog.com
rxpwiki.com
smok-ox.com
smokox.com
easy-export.biz
stimul-media.biz
farmaforum.biz
pharmforum.biz