Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
219.76.110.185 Hong Kong (Central District)* Whois Google DNSStuff Urgentmessage.org
207.115.36.162 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Marylou K. Howe Sat Aug 8 13:06:23 2009

Return-Path:
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=robobat.fr; domainkeys=neutral (no sig); from=robobat.fr; dkim=neutral (no sig)
Received: from 219.76.110.185 (EHLO nlpi148.prodigy.net) (207.115.36.162)
by mta147.sbc.mail.mud.yahoo.com with SMTP; Sat, 08 Aug 2009 13:06:13 -0700
Received: from vmpuhc1 (n219076110185.netvigator.com [219.76.110.185])
by nlpi148.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n78K2vNe028613;
Sat, 8 Aug 2009 15:06:01 -0500
Message-ID: <000701ca1863$b43ce8c0$627e0202@robobat.fr>
Reply-To: “Marylou K. Howe” <marylou_howeql@robobat.fr>
From: “Marylou K. Howe”  <marylou_howeql@robobat.fr>
To: , ,
Subject: Rxmed Refill?
Date: Sat, 08 Aug 2009 13:06:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 156

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Sat, 08 Aug 2009 22:06:56 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162

Canadian Pharmacy – Canadian-pharmacy-drugstore.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

canada-pharmacy-drugstore

www.officialmedicines.us
www.drugspill.org
www.pillsplanet.org
www.intermeds.org
www.online-order.org
www.simple-op.net
www.canadianmedications.net
www.cheap-medications.net
www.rx-drug-shop.net
www.meds24h.net
www.meetopillz.net
www.pharmacyforall.net
www.farm-med.net
www.pindosamdor.net
www.healthcare24h.net
www.drugs-expert.net
www.pharm-med.net
www.officialmedicines.info
www.medicationcenter.info
www.about-pills.info
www.cadmeds.info
www.cadpharmacy.info
www.canadian-healthcare.info
www.canapharm.info
www.pharminfo.info
www.rx-track.info
www.rxsupsite.info
www.doroven.info
www.approved-medication.com
www.mybuymeds.com
www.canadians-pharmacy.com
www.where-my-meds.com
www.cialis-online24h.com
www.viagra-online24h.com
www.canadianmedshop.com
www.your-drug-store.com
www.natural-treatment-online.com
www.nature-meds-shop.com
www.canadian-pharamacy-drugstore.com
www.rx-bill.com
www.rx-help1.com
www.pillsdeals.com
www.theusapills.com
www.rxbestpharmacy.com
www.mens-medication.com
www.uk-ed-med.com
www.pharmaceuticalnow.com
www.newpharmacydistribution.com
www.ph24h.com
www.pills2heal.com
www.pilltrade.com
www.pillstrade.com
www.absulutepills.com
www.prof-meds.com
www.nscontrol.com
www.phentermine1.com
www.ca-pharmacy-online.com
www.euro-drug-store.com
www.generic-or-brand.com
www.online-pharmacy7.com
www.online-rx-meds.com
www.meds24h.com
www.simple-op.com
www.xdtax.com
www.online-pharm-rx.com
www.bestmedicinestore.com
www.dedyfarm.com
www.drugstoreforall.com
www.sexualhealthtablets.com
www.bestcanadianmeds.com
www.online-pharm-site1.com
www.canada-ipharmacy.com
www.online-rxmeds.com
www.online-pharm-site.com
www.online-pharm-site3.com
www.online-pharm-site2.com
www.officialmedicines.com
www.7canadapharmacy.com
www.linemedication.com
www.pillsforlove.com
www.impotencekiller.com
www.mydrugtablets.com
www.rxnicepharmacy.com
www.rx-payment.com
www.rx-secure-payments.com
www.med-payments.com
www.easysavemeds.com
www.canadianmeds2u.com
www.checkout-rx.com
www.canada-online-med.com
www.canadianpharmacyltd.com
www.thecanadianmeds.com
www.canadianmedsworld.com
www.canadianhealthcareltd.com
www.pills-online24h.com
www.pills-supplier.com
www.canadians-health.com
www.med-cs.com
www.ed-cs1.com
www.online-rx1.com
www.pharm-bill.com
www.pharm-online1.com
www.pharmacy777.com
www.online-meds1.com
www.pharm-help.com
www.online-pharm1.com
www.pharm-charge.com
www.rx-charge.com
www.ed-cs2.com
www.ed-cs5.com
www.ed-cs3.com
www.rx-bill3.com
www.rx-bill5.com
www.rx-bill1.com
www.rx-bill2.com
www.rx-bill4.com
www.ed-cs4.com
www.allpharmacymeds.com
www.top-pharmacy-supplier.com
www.pills-for-men.com
www.medspill.com
www.top100medscom.com
www.rx-natural.com
www.ed-mega-shop.com
www.ed-pharmacy-store.com
www.medpharmacyselling.com
www.uk-ed-solutions.com
www.rx-support-team.com
www.prof-meds1.com
www.prof-meds2.com
www.prof-meds3.com
www.prof-meds4.com
www.cadpharmacy.com
www.rxsupsite.com
www.approved-med.com
www.rxsupp.com
www.mylowcostpills.com
www.order-drugs-today.com
www.promed-pharmacy.com
www.safehv.com
www.discountedtablets.com
www.le-pills.com
www.alltoppills.com
www.krser.com
www.pill-here.com
truststore24.com
atlasgenerics.com
medbox24.com
trusted-medication.com
propeciamed.com
911pillsrx.com
buypillsonline.biz
allpillshere.biz
check-order-status.biz
medsup.biz
top-pharmacy.biz
us-pharmacystore.com
ed-mega-mall.com
ed-parmacy-store.com
united-ed-solutions.com
nat-pharmacy.com
professional-med.com
cialisforlove.com
drug-order.com
ocp-foundation.com
medicineglav.com
pharmacy-elite.com
edrugs-catalog.com
pharmacyathomes.com
cheapdrugsrx.com
drugsandhealthcare.com
rxnice.com
recipe-easy.com
buyerectiononline.com
brightfutureabc.com
canadian-online-order.com
rx-products.com
genuinepharm.com
top-pharm-shop.com
24-hour-viagra.com

195.95.155.20

SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: ns0.my-order-status.info
ns0.wheremyorder.info
ns1.ariagenerics.com
ns1.my-order-status.info
ns1.thecanadianmeds.com
ns1.wheremyorder.info
ns2.ariagenerics.com
ns2.canadianmedsworld.com
ns2.canadianpharmacyltd.com
ns2.my-order-status.info
ns2.thecanadianmeds.com
ns3.ariagenerics.com
ns3.canadianmedsworld.com
ns3.canadianpharmacyltd.com
ns3.my-order-status.info
ns3.thecanadianmeds.com
ns4.ariagenerics.com
ns4.canadianmedsworld.com
ns4.thecanadianmeds.com
ns5.canada-rxpharmacy.com
ns5.pharmltd.com
ns6.canada-rxpharmacy.com
ns6.pharmltd.com

Canadian Pharmacy – cheaprxpharmstore.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!
Browse Our Selection Today! –> http://cheaprxpharmstore.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
70.45.198.3 Puerto Rico (San Juan)* Whois Google DNSStuff Urgentmessage.org
207.115.36.164 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Phoebe Roy Mon Aug 3 18:13:20 2009

Return-Path:
Authentication-Results: mta112.sbc.mail.re3.yahoo.com from=gdm.es; domainkeys=neutral (no sig); from=gdm.es; dkim=neutral (no sig)
Received: from 70.45.198.3 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta112.sbc.mail.re3.yahoo.com with SMTP; Mon, 03 Aug 2009 18:17:53 -0700
Received: from t79drp1 (host-70-45-198-3.onelinkpr.net [70.45.198.3])
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n741Hgcp019715;
Mon, 3 Aug 2009 20:17:51 -0500
Message-ID: <000701ca14a0$c17f9fd0$d828ea62@gdm.es>
Reply-To: “Phoebe Roy” <p.royha@gdm.es>
From: “Phoebe Roy” <p.royha@gdm.es>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Mon, 03 Aug 2009 20:13:20 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 173

Address lookup

canonical name cheaprxpharmstore.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmstore.com“…

   Domain Name: CHEAPRXPHARMSTORE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.VR4NS.COM
   Name Server: NS2.MQ2NS.MOBI
   Name Server: NS3.JY7NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 03-aug-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

>>> Last update of whois database: Tue, 04 Aug 2009 04:23:18 UTC <<<

Queried whois.ename.com with “cheaprxpharmstore.com“…

Domain Name : cheaprxpharmstore.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.vr4ns.com
ns2.mq2ns.mobi
ns3.jy7ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheaprxpharmstore.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns3.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns2.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns1.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN A 60.12.166.154 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns4.cheaprxpharmstore.com 86400s (1.00:00:00)

— end —

http://www.ccpharma-sa.com/ – Cheap medicaments
http://www.ccppharmacypractice.com/ – Order pharmacy
http://www.ccrewspharmacy.com/ – Buy Silagra
http://www.ccrpharma.com/ – Cheap Kamagra
http://www.ccr-pharma.com/ – Buy Super Greens
http://www.ccrxpharmacy.com/ – Buy Protonix
http://www.ccspharma.com/ – Buy Silagra
http://www.ccurepharma.com/ – Cheap drugs
http://www.ccv-pharma.com/ – Buy Tenormin
http://www.ccwestpharma.com/ – Cheap tablets
http://www.cdcpharma.com/ – Buy pharmacy
http://www.cdcpharmacy.com/ – Cialis Soft Tabs On line
http://www.cdepharma.com/ – Buy Lioresal
http://www.cdherbariumpharmacy.com/ – Cheap Allegra
http://www.cdipharma.com/ – Order drugs
http://www.cdiscountpharma.com/ – Female Rx Oil On web
http://www.cdiscountpharmacy.com/ – Buy Tenormin
http://www.cdlpharma.com/ – Commercial Euphoria Cologne
http://www.cdmopharma.com/ – Discount Coumadin
http://www.cdmo-pharma.com/ – Buy Retin-A
http://www.cdmoptimizepharma.com/ – Order Avapro
http://www.cdmpharma.com/ – Purchase medicaments
http://www.cdm-pharma.com/ – Buy Zero Nicotine Patch
http://www.cdnpharma.com/ – Order Avapro
http://www.cdnpharmacy.com/ – Order Lipitor
http://www.cdn-pharmacy.com/ – Buy Paxil
http://www.cdnpharmacyoutlets.com/ – Discount Enhance9
http://www.cdpharma.com/ – Buy Super Greens
http://www.cd-pharma.com/ – Buy Female Rx Plus
http://www.cdpharmaasia.com/ – Crestor Online
http://www.cdpharmacy.com/ – Purchase Clomid
http://www.cdpharmaeurope.com/ – On line drugs
http://www.cdpharmaglobal.com/ – On web Nexium
http://www.cdpharmaindia.com/ – Buy Tamiflu
http://www.cdpharmaweb.com/ – Commercial Euphoria Cologne
http://www.cd-propharma.com/ – Order Avapro
http://www.cdspharmacy.com/ – Buy Soma
http://www.cdwdiscountpharmacy.com/ – On webpills
http://www.cealatpharm.com/ – Buy Zyban
http://www.ceapharma.com/ – Commercial tablets
http://www.cebupeoplespharmacy.com/ – Cheap Effexor XR
http://www.cecilpharma.com/ – Buy pills
http://www.cecl-ethypharm.com/ – Cheap Fosamax
http://www.cecpharm.com/ – Buy Zithromax
http://www.cecycpharma.com/ – Order Actos
http://www.cedapharm.com/ – Purchase pills
http://www.cedarburgpharma.com/ – Buy Zenegra
http://www.cedarcompoundingpharmacy.com/ – Purchase Liquid Rx Plus
http://www.cedarcreekpharmacy.com/ – Cheap tablets
http://www.cedarpharma.com/ – Discount tablets
http://www.cedarpharmacy.com/ – Discount Enhance9
http://www.cedarpharmacynv.com/ – Buy Viagra
http://www.cedarrapidspharmacies.com/ – Commercial Glucotrol XL
http://www.cedarspharmacy.com/ – On line pills
http://www.cedarviewpharmacy.com/ – Best tablets
http://www.cedempharm.com/ – Buy Propecia
http://www.cedenospharmacy.com/ – Purchase drugs
http://www.ceecurepharma.com/ – Cialis Online
http://www.ceepharma.com/ – Buy Zantac
http://www.ceepharmacafeteria.com/ – Best medicaments
http://www.ceepharmajobs.com/ – On line pills
http://www.ceepharmatrials.com/ – Buy Zocor
http://www.cefakpharma.com/ – Cialis Online
http://www.cegedimpharmacrm.com/ – Buy Avandia
http://www.cegipharma.com/ – Evista On line
http://www.cehrapharma.com/ – Buy Retin-A
http://www.celantpharmaceuticals.com/ – Buy Lioresal
http://www.celatorpharm.com/ – Buy Prevacid
http://www.celatorpharma.com/ – Buy Prevacid
http://www.celatorpharmaceuticals.com/ – Commercial Mevacor
http://www.celebrexonlinepharmacy.com/ – Cheap Lopressor
http://www.celebrexpharmacy.com/ – Cheap Fosamax
http://www.celebrex-pharmacy.com/ – Female Rx Oil On web
http://www.celebrex-pharmacyrx.com/ – Online drugs
http://www.celebrex-pharmacy-rx.com/ – Online medicaments
http://www.celebritybiopharma.com/ – On web pharmacy
http://www.celebritypharma.com/ – Discount Glucophage
http://www.celebritypharmacy.com/ – Buy Zyprexa
http://www.celebrity-pharmacy.com/ – Discount tablets
http://www.celekpharma.com/ – Purchase ED Trial Pack
http://www.celek-pharma.com/ – Buy Prilosec
http://www.celekpharmaceuticals.com/ – Buy Protonix
http://www.celentpharmaceuticals.com/ – Buy Retin-A
http://www.celerapharma.com/ – Depakote On web
http://www.celeritaspharma.com/ – Buy Zenegra
http://www.celerpharm.com/ – Female Rx Oil On web
http://www.celestepharmakorea.com/ – Purchase Joint Formula
http://www.celestialpharma.com/ – Order Claritin
http://www.celestialpharmacy.com/ – Buy Plavix
http://www.celexapharmacy.com/ – Commercial Mevacor
http://www.celforpharma.com/ – On line drugs
http://www.celgenpharm.com/ – Cheap Cardura
http://www.celinapharmacy.com/ – Order Actos
http://www.cellact-pharma.com/ – Buy Ultram
http://www.cellantpharma.com/ – Buy Yerba Diet
http://www.cellantpharmaceuticals.com/ – Evista On line
http://www.cellekpharma.com/ – Cheap Lopressor
http://www.cellentpharma.com/ – Commercial medicaments
http://www.cellentpharmaceuticals.com/ – Purchase Breast Success
http://www.cellispharma.com/ – Deltasone On line
http://www.cellpharm.com/ – Cheap Coreg
http://www.cell-pharm.com/ – Purchase drugs
http://www.cellpharma.com/ – Buy Viagra
http://www.celltechpharma.com/ – Online medicaments
http://www.celltech-pharma.com/ – Purchase Adalat
http://www.celltechpharmaceuticals.com/ – Buy Yerba Diet
http://www.celltech-pharmaceuticals.com/ – On web tablets
http://www.cellularpharmacist.com/ – Cheap Allegra
http://www.cellularpharmacy.com/ – Buy Zyban
http://www.cellulosepharmachem.com/ – Buy Singulair
http://www.cellvax-pharma.com/ – Order tablets
http://www.celogenpharma.com/ – Buy pills
http://www.celonexpharmaceuticals.com/ – Amoxil Online
http://www.celonpharma.com/ – Discount Caverta
http://www.celon-pharma.com/ – On web drugs
http://www.celpharm.com/ – Buy Clarinex
http://www.celtapharma.com/ – Purchase drugs
http://www.celticpharma.com/ – Buy Virility Pills
http://www.celticpharmacy.com/ – Cialis Online
http://www.celtic-pharmacy.com/ – Buy Zyrtec
http://www.celticpharmadev.com/ – Order medicaments
http://www.celticpharmaholdings.com/ – Online pharmacy
http://www.celtipharm.com/ – Cheap tablets
http://www.cemachpharmamachine.com/ – Best pills
http://www.cemara-pharmacy.com/ – Purchase Clomid
http://www.cemists-pharma-online.com/ – Online medicaments
http://www.cemopharma.com/ – Online drugs
http://www.cemo-pharma.com/ – Online Lasix
http://www.cempharma.com/ – Online tablets
http://www.cempharmacy.com/ – Online Multi Vitamin
http://www.cempharmacyonline.com/ – Purchase ED Trial Pack
http://www.cenipharm.com/ – Order Avapro
http://www.cenlapharmacy.com/ – Buy Female Rx Plus
http://www.centapharm.com/ – Evista On line
http://www.centaurpharma.com/ – Discount medicaments
http://www.centaurpharmaceuticals.com/ – Online Lasix
http://www.centauruspharma.com/ – Buy Virility Pills
http://www.centennialpharmacy.com/ – Discount Enhance9
http://www.centercarepharmacy.com/ – Buy pills
http://www.centereachpharmacy.com/ – Cheap pills
http://www.centerforcommunitypharmacyadvocacyandpublicaffairs.com/ – Online pharmacy
http://www.centerforpharmacy.com/ – Online medicaments
http://www.centerofpharmacy.com/ – Cheap Coreg
http://www.centerpetpharmacy.com/ – Buy Xenical
http://www.centerpharm.com/ – Depakote On web
http://www.centerpharmacy.com/ – Buy pharmacy
http://www.centerpharmacyinc.com/ – Discount drugs
http://www.centerpharmphysics.com/ – Buy Virility Patch Rx
http://www.centerpointpharma.com/ – Hoodia Patch On line
http://www.centerpointpharmaservices.com/ – Commercial Cozaar
http://www.centipharm.com/ – Discount Caverta
http://www.centourpharma.com/ – Buy Premarin
http://www.centpharm.com/ – Buy Norvasc
http://www.centralavenuepharmacy.com/ – Cheap Cardura
http://www.centralcarepharmacy.com/ – On web medicaments
http://www.centralcarolinapharmacy.com/ – Online pharmacy
http://www.centralcoastpharmacy.com/ – Purchase pharmacy
http://www.centralepharma.com/ – Buy Propecia
http://www.centrale-pharma.com/ – Buy Propecia
http://www.centralexpresspharmacy.com/ – Discount medicaments
http://www.centralfillpharmacist.com/ – On line Levitra
http://www.centralfillpharmacy.com/ – Cheap Kamagra
http://www.central-health-online-pharmacy-medication-prescription-drugs.com/ – Discount drugs
http://www.centralhealthpharmacy.com/ – On web pharmacy
http://www.centralindiapharmacy.com/ – Online tablets
http://www.centralpharm.com/ – Buy Prilosec
http://www.centralpharma.com/ – Buy Female Rx Plus
http://www.central-pharma.com/ – Buy Prevacid
http://www.centralpharmacies.com/ – Discount Altace
http://www.centralpharmaciesltd.com/ – Cheap Fosamax
http://www.centralpharmaciesuk.com/ – Purchase ED Trial Pack
http://www.centralpharmacp.com/ – Cheap Fosamax
http://www.centralpharmacy.com/ – Buy Norvasc
http://www.centralpharmacy1.com/ – Cheap Cardura
http://www.centralpharmacyaltus.com/ – Buy Nolvadex
http://www.centralpharmacyboston.com/ – Buy Tenormin
http://www.centralpharmacyrx.com/ – Buy Nolvadex
http://www.centralpharmcies.com/ – Best tablets
http://www.centralpharm-niger.com/ – Female Rx Oil On web
http://www.centralrockiespharmacy.com/ – Discount Altace
http://www.centralvalleypharmacy.com/ – On web pharmacy
http://www.centrapharm.com/ – Buy Aciphex
http://www.centreafricainpharmaceutique.com/ – Discount pills
http://www.centrepetpharmacy.com/ – Buy Propecia
http://www.centrepharma.com/ – Online tablets
http://www.centrepharmaceutique.com/ – Online Multi Vitamin
http://www.centrepharmacy.com/ – Buy Imitrex
http://www.centrepharmacyservices.com/ – Order pills
http://www.centrixpharma.com/ – On web pharmacy
http://www.centrixpharmaceutical.com/ – Buy Prilosec
http://www.centrixpharmaceuticals.com/ – Evista On line
http://www.centrixpharmaoncall.com/ – Buy pharmacy
http://www.centropharm.com/ – Cheap Lopressor
http://www.centropharm-europe.com/ – Buy pharmacy
http://www.centropharm-ukraine.com/ – Buy Aciphex
http://www.centrosepharma.com/ – Buy Female Rx Plus
http://www.centrumpharma.com/ – Online drugs
http://www.centrumpharmaceuticals.com/ – Commercial tablets
http://www.centrum-pharmaceuticals.com/ – Hoodia Patch On line
http://www.centrxpharmaceuticals.com/ – Buy Lioresal
http://www.centumpharma.com/ – Purchase ED Trial Pack
http://www.centurepharma.com/ – Commercial tablets
http://www.centurionpharma.com/ – Euphoria Perfume Online
http://www.centurpharma.com/ – Cheap tablets
http://www.centurycitypharmacy.com/ – Buy Zenegra
http://www.centurypharma.com/ – Buy Propecia
http://www.century-pharma.com/ – Cheap tablets
http://www.centurypharmaceuticals.com/ – Purchase Adalat
http://www.centurypharmacy.com/ – Cheap Kamagra
http://www.century-pharmacy.com/ – Discount Caverta
http://www.centurysquarepharmacy.com/ – Discount Coumadin
http://www.cenwaypharma.com/ – Cheap medicaments
http://www.cepalpharma.com/ – On web pharmacy
http://www.cepapharma.com/ – Buy Clarinex
http://www.cephalonpharma.com/ – Buy Premium Diet Patch
http://www.cepharm.com/ – Order Actos
http://www.cepharma.com/ – Commercial Glucotrol XL
http://www.cepharmacist.com/ – Order tablets
http://www.ce-pharmacist.com/ – Buy Xenical
http://www.cepharmacology.com/ – Buy Female Rx Plus
http://www.ce-pharmacology.com/ – Commercial pills
http://www.cepharmacy.com/ – Purchase Breast Success
http://www.ce-pharm-appel.com/ – Evista On line
http://www.cequentpharma.com/ – Commercial Euphoria Cologne
http://www.cequentpharmaceuticals.com/ – Cheap tablets
http://www.cerapharm.com/ – Commercial Celebrex
http://www.cerbiospharma.com/ – Buy Tamiflu
http://www.cerbios-pharma.com/ – Discount Kamagra Oral Jelly
http://www.cerebrumpharma.com/ – Best pills
http://www.cerespharm.com/ – Buy medicaments
http://www.cerespharmaceuticals.com/ – Buy Imitrex
http://www.cerestarpharma.com/ – Purchase ED Trial Pack
http://www.cerexapharma.com/ – Purchase Clomid
http://www.cerexapharmaceuticals.com/ – Buy Tadalis SX
http://www.cerimonpharma.com/ – Buy Retin-A
http://www.ceriumpharma.com/ – Cheap medicaments
http://www.ceriumpharmaceuticals.com/ – Buy Plavix
http://www.cermakpharmacy.com/ – Cheap medicaments
http://www.certifiedconsultantpharmacistsinc.com/ – Buy Synthroid
http://www.certifiedonlinepharmacies.com/ – Commercial Cozaar
http://www.certifiedonlinepharmacy.com/ – Purchase Liquid Rx Plus
http://www.certifiedpharma.com/ – On webpills
http://www.certifiedpharmaceuticals.com/ – Deltasone On line
http://www.certifiedpharmacies.com/ – Buy Protonix
http://www.certifiedpharmacy.com/ – Buy Aciphex
http://www.certifiedpharmacytech.com/ – Discount Enhance9
http://www.certifiedpharmacytechnician.com/ – Buy Singulair
http://www.certifiedpharmacytechnicianjobs.com/ – On line drugs
http://www.certifiedpharmacytechnicians.com/ – Online medicaments
http://www.certifiedpharmacytechnicianschools.com/ – Buy Zyprexa
http://www.certifiedpharmacytechniciansofflorida.com/ – Buy Zithromax
http://www.certifiedpharmacytechschools.com/ – Discount pharmacy
http://www.certifiedpharmacytechtest.com/ – On webpills
http://www.certipharm.com/ – Discount drugs
http://www.certipharma.com/ – Order Diovan
http://www.certpharma.com/ – Purchase pharmacy
http://www.certpharmacytechnician.com/ – Commercial Lamisil Oral
http://www.certrispharma.com/ – Cheap pharmacy
http://www.certuspharma.com/ – Buy Zyrtec
http://www.certuspharmaceuticals.com/ – Purchase ED Trial Pack
http://www.ceruleanpharm.com/ – Buy Yerba Diet
http://www.ceruleanpharma.com/ – Commercial Amaryl
http://www.cerulean-pharma.com/ – On line drugs
http://www.ceruleanpharmaceutical.com/ – Cheap Coreg
http://www.cerulean-pharmaceutical.com/ – Buy Plavix
http://www.ceruleanpharmaceuticals.com/ – Buy Zantac
http://www.cerulean-pharmaceuticals.com/ – Commercial Euphoria Cologne
http://www.ceruleanpharmacsuticals.com/ – Amoxil Online
http://www.cervelopharm.com/ – Hoodia Gordonii Online
http://www.cervelopharma.com/ – Buy Plavix
http://www.cespharm.com/ – Euphoria Perfume Online
http://www.cession-pharmacie.com/ – Purchase Florinef
http://www.cestlaviepharma.com/ – Purchase Adalat
http://www.cetadelpharmacy.com/ – Cialis Soft Tabs On line
http://www.cetapharmaceutical.com/ – Buy Synthroid
http://www.cetapharmaceuticals.com/ – Buy Tamiflu
http://www.cetekpharma.com/ – Buy Viagra Soft Tabs
http://www.cetekpharmaceuticals.com/ – Commercial Mevacor
http://www.cetipharm.com/ – Order tablets
http://www.cetuspharma.com/ – Commercial Cozaar
http://www.ceuticapharma.com/ – Order Flomax
http://www.cevec-pharma.com/ – Hoodia Gordonii Online
http://www.cevec-pharmaceuticals.com/ – Discount Altace
http://www.cevraidirecte-pharma.com/ – Best medicaments
http://www.cevraidirect-pharma.com/ – Buy tablets
http://www.ceylincopharma.com/ – Cheap Fosamax
http://www.cfapharma-besancon.com/ – On line pharmacy
http://www.cfapharmacie.com/ – Commercial Celebrex
http://www.cfapharmacie1.com/ – Cheap Allegra
http://www.cfapharmacie2.com/ – Discount Lotensin
http://www.cfa-pharmacie-besancon.com/ – Purchase Adalat
http://www.cfa-pharmacie-drome-ardeche.com/ – Buy Plavix
http://www.cfa-pharmacie-troyes.com/ – Cheap medicaments

http://www.cfa-pharma-sante.com/ – Order Actos
http://www.cfdt-delpharm-reims.com/ – Commercial Euphoria Cologne
http://www.cffoundationpharmacy.com/ – Order Actos
http://www.cfipharmacy.com/ – Cheap tablets
http://www.cflpharma.com/ – Cheap tablets
http://www.cfmpharma.com/ – Discount drugs
http://www.cfpharm.com/ – Arava On line
http://www.cfpharma.com/ – Buy Zyrtec
http://www.cfpharmaceutical.com/ – Purchase Clomid
http://www.cfpharmacy.com/ – Order Isoptin
http://www.cfpharminc.com/ – Buy Diflucan
http://www.cfservicespharmacy.com/ – Cialis Online
http://www.cgbiopharma.com/ – Arava On line
http://www.cgf-pharmatech.com/ – On web Lexapro
http://www.cghealthpharm.com/ – Buy Singulair
http://www.cgipharma.com/ – Purchase pills
http://www.cgipharmaceuticals.com/ – Buy Imitrex
http://www.cglaw-pharmaceutical-lawyers.com/ – Buy tablets
http://www.cgmpchempharm.com/ – Buy Xenical
http://www.cgoodepharmacy.com/ – Buy Pravachol
http://www.cgpharm.com/ – Depakote On web
http://www.cgpharma.com/ – Buy Zantac
http://www.cgpharmchem.com/ – On line tablets
http://www.cgspharmacy.com/ – Cheap pharmacy
http://www.chadddiscountpharmacy.com/ – Purchase pills
http://www.chaddertonpharmacy.com/ – On line drugs
http://www.chadpharma.com/ – Order medicaments
http://www.chaichempharma.com/ – Purchase Liquid Rx Plus
http://www.chaimalas-pharmacy.com/ – Purchase pharmacy
http://www.chainpharmacist.com/ – Cheap medicaments
http://www.chainpharmacy.com/ – Buy Ultram
http://www.chainpharmacyjobs.com/ – Commercial Celebrex
http://www.chainpharmacynews.com/ – Buy Paxil
http://www.chainpharmacyreimbursement.com/ – Evista On line
http://www.chainpharmacyreport.com/ – Cheap pharmacy
http://www.chainpharmacyreview.com/ – Buy Ultram
http://www.chaircitypharmacy.com/ – Purchase ED Trial Pack
http://www.chaitanyapharma.com/ – Buy Soma
http://www.chaitanyapharmaceuticals.com/ – Buy Tadalis SX
http://www.chalfontpharmacy.com/ – On web Lexapro
http://www.chalilpharmaceuticals.com/ – Buy Protonix
http://www.challengepharma.com/ – Crestor Online
http://www.chalpharm.com/ – Order pharmacy
http://www.chamberpharmacy.com/ – Buy Zocor
http://www.chamberpharmacycard.com/ – Buy Singulair
http://www.chambersdiscountpharmacy.com/ – Cheap Kamagra
http://www.champharma.com/ – Buy Protonix
http://www.championpharmacy.com/ – Buy Viagra
http://www.championsofpharmacy.com/ – Atarax On web
http://www.champpharma.com/ – On line drugs
http://www.chanakyapharma.com/ – Cheap Lopressor
http://www.chandrapharmaceuticals.com/ – Buy Diflucan
http://www.chaneypharmacy.com/ – Cheap Cardura
http://www.chaneyspharmacy.com/ – Buy Zyprexa
http://www.changdapharm.com/ – Depakote On web
http://www.changingpharmacychanginglives.com/ – Buy Avandia
http://www.changingpharmacy-changinglives.com/ – Purchase tablets
http://www.changjiang-pharm.com/ – Buy Aciphex
http://www.changmingpharm.com/ – Buy Soma
http://www.chanhnam-pharma.com/ – Buy Norvasc
http://www.chantalpharmaceuticals.com/ – Buy Soma
http://www.chantalpharmaceuticalscorporation.com/ – Online Lasix
http://www.chantixonlinepharmacy.com/ – Buy Tamiflu
http://www.chantixpharma.com/ – Cipro On web
http://www.chantixpharmacist.com/ – On web Nexium
http://www.chapelhillpharma.com/ – Best pills
http://www.chapelhillpharmaceuticals.com/ – Discount Kamagra Oral Jelly
http://www.chapelpharmacy.com/ – Buy Prilosec
http://www.chapinpharmacy.com/ – On web Lexapro
http://www.chapmanpharmaceuticalgallery.com/ – Buy Zenegra
http://www.chapmanpharmaceuticalhealthfoundation.com/ – Buy Imitrex
http://www.chapmanpharmaceuticals.com/ – Buy Plavix
http://www.chapmanpharmaceuticalsconsulting.com/ – On web tablets
http://www.chapmanpharmacy.com/ – On web pharmacy
http://www.charakpharma.com/ – Buy Zero Nicotine Patch
http://www.charingcrosspharmacy.com/ – Cheap pills
http://www.chariotpharm.com/ – Buy Retin-A
http://www.chariotpharma.com/ – Purchase Adalat
http://www.charispharma.com/ – Buy pills
http://www.charitypharmacy.com/ – Buy Diflucan
http://www.charlesevansmddisocuntpharmacy.com/ – Cialis Online
http://www.charlesgastonpharmacy.com/ – On line pills
http://www.charlespharma.com/ – Online tablets
http://www.charlestonpharmacies.com/ – Buy Singulair
http://www.charlestonpharmacist.com/ – On web medicaments
http://www.charlottebiopharmajobs.com/ – Arava On line
http://www.charlottebiopharmaresumes.com/ – Cheap pills
http://www.charlottecompoundingpharmacy.com/ – Buy Plavix
http://www.charlottepharmaceuticaljobs.com/ – Discount medicaments
http://www.charlottepharmaceuticalresumes.com/ – Commercial Glucotrol XL
http://www.charlottepharmaceuticals.com/ – Commercial Lamisil Oral
http://www.charlottepharmaceuticalsalesjobs.com/ – Purchase medicaments
http://www.charlottepharmaceuticalsalesresumes.com/ – Buy Zyrtec
http://www.charlottepharmacies.com/ – Order pharmacy
http://www.charlottepharmacist.com/ – Buy Protonix
http://www.charlottepharmacistjobs.com/ – Commercial drugs
http://www.charlottepharmacyjobs.com/ – Commercial Glucotrol XL
http://www.charlottepharmajobs.com/ – Discount Kamagra Oral Jelly
http://www.charlottepharmaresumes.com/ – Commercial tablets
http://www.charlotteswebdiscountpharmacy.com/ – Buy Norvasc
http://www.charnwoodpharmacy.com/ – Buy Zyrtec
http://www.charterpharmacy.com/ – Cheap drugs
http://www.chartfieldpharmacy.com/ – Order tablets
http://www.chasepharm.com/ – Cialis Online
http://www.chasepharma.com/ – Hoodia Patch On line
http://www.chasepharmaceuticals.com/ – Buy VPRx Oil
http://www.chasepharmacy.com/ – Buy medicaments
http://www.chasepharmajobs.com/ – Order pills
http://www.chatou-pharmacie.com/ – Cheap medicaments
http://www.chatpharm.com/ – Crestor Online
http://www.chattanoogapharmacies.com/ – Euphoria Perfume Online
http://www.chatwithpharmacist.com/ – Buy Tadalis SX
http://www.chatwithpharmacists.com/ – Commercial pills
http://www.chaudeshwaripharmaequipments.com/ – Buy Aciphex
http://www.chavadipharma.com/ – On web tablets
http://www.chazanpharmacy.com/ – Buy Female Rx Plus
http://www.chdpharma.com/ – Discount Altace
http://www.cheap24hourpharmacy.com/ – Cheap tablets
http://www.cheapamericanpharmacy.com/ – Purchase drugs
http://www.cheaparapharmacy.com/ – Discount Altace
http://www.cheapcanadapharmacy.com/ – Discount tablets
http://www.cheapcanadianpharmacy.com/ – Buy Tadalis SX
http://www.cheap-canadianpharmacy.com/ – Buy Norvasc
http://www.cheapdiscountpharmacy.com/ – Best drugs
http://www.cheap-discount-pharmacy-online.com/ – On line pills
http://www.cheap-dream-pharmaceutical.com/ – Cialis Soft Tabs On line
http://www.cheapdrugpharm.com/ – Buy Plavix
http://www.cheapdrugpharmacy.com/ – Order tablets
http://www.cheapdrugspharma.com/ – Cheap Cardura
http://www.cheapdrugspharmacy.com/ – Buy Prilosec
http://www.cheap-drugs-pharmacy.com/ – Order Avapro
http://www.cheapdrugsrxpharmacy.com/ – Commercial pills
http://www.cheaperpharma.com/ – Commercial pharmacy
http://www.cheaper-pharma.com/ – Atarax On web
http://www.cheaperpharmacy.com/ – Order Diovan
http://www.cheaper-pharmacy.com/ – Discount Caverta
http://www.cheapest-acyclovir-pharmacy.com/ – Discount tablets
http://www.cheapest-adipex-pharmacy.com/ – Buy Tadalis SX
http://www.cheapest-ambien-pharmacy.com/ – Commercial tablets
http://www.cheapest-bupropion-pharmacy.com/ – Amoxil Online
http://www.cheapest-canadian-pharmacy.com/ – Commercial medicaments
http://www.cheapest-celebrex-pharmacy.com/ – Buy Singulair
http://www.cheapestcialispharmacy.com/ – Buy Norvasc
http://www.cheapest-cialis-pharmacy.com/ – Euphoria Perfume Online
http://www.cheapest-condylox-pharmacy.com/ – Discount medicaments
http://www.cheapest-cyclobenzaprine-pharmacy.com/ – Buy Pravachol
http://www.cheapest-didrex-pharmacy.com/ – Cheap pills
http://www.cheapest-discount-pharmacy.com/ – Cheap Kamagra
http://www.cheapestdrugpharmacy.com/ – Buy Plavix
http://www.cheapestdrugspharmacy.com/ – Online drugs
http://www.cheapest-fioricet-pharmacy.com/ – Buy Pravachol
http://www.cheapestmedicalpharmacy.com/ – Order Flomax
http://www.cheapestmedspharmacy.com/ – Order Diovan
http://www.cheapest-meridia-pharmacy.com/ – Buy Super Greens
http://www.cheapestonlinepharmacy.com/ – Order Lipitor
http://www.cheapest-onlinepharmacy.com/ – Purchase pharmacy
http://www.cheapest-online-pharmacy.com/ – On web pharmacy
http://www.cheapest-online-pharmacy-store.com/ – Purchase drugs
http://www.cheapestpharmacey.com/ – Commercial drugs
http://www.cheapestpharmacies.com/ – Buy medicaments
http://www.cheapestpharmacist.com/ – Purchase drugs
http://www.cheapestpharmacuti.com/ – Buy Zero Nicotine Patch
http://www.cheapestpharmacy.com/ – On web Nexium
http://www.cheapest-pharmacy.com/ – Buy tablets
http://www.cheapestpharmacycanada.com/ – Best medicaments
http://www.cheapestpharmacydiscountsonline.com/ – Arava On line
http://www.cheapestpharmacydrugs.com/ – Buy Nolvadex
http://www.cheapestpharmacyguides.com/ – Buy Pravachol
http://www.cheapestpharmacymeds.com/ – Buy Prilosec
http://www.cheapestpharmacyonline.com/ – Buy Viagra Soft Tabs
http://www.cheapest-pharmacyonline.com/ – Depakote On web
http://www.cheapest-pharmacy-online.com/ – Discount Coumadin
http://www.cheapestpharmacypills.com/ – Buy Premium Diet Patch
http://www.cheapestpharmacystore.com/ – Buy Norvasc
http://www.cheapestpharmarc.com/ – Order pills
http://www.cheapestpharmonline.com/ – Order tablets
http://www.cheapestpharmrep.com/ – Purchase pharmacy
http://www.cheapestpharmsite.com/ – Commercial medicaments
http://www.cheapestpharmtech.com/ – Cheap pills
http://www.cheapestpharmworld.com/ – Crestor Online
http://www.cheapest-phendimetrazine-pharmacy.com/ – Commercial Celebrex
http://www.cheapestpillpharmacy.com/ – Buy drugs
http://www.cheapestpillspharmacy.com/ – Cialis Online
http://www.cheapest-prozac-pharmacy.com/ – Order pills
http://www.cheapestrxpharmacy.com/ – Cheap tablets
http://www.cheapest-soma-pharmacy.com/ – Buy Prilosec
http://www.cheapest-tamiflu-pharmacy.com/ – Cheap Kamagra
http://www.cheapest-tramadol-pharmacy.com/ – Online drugs
http://www.cheapest-ultracet-pharmacy.com/ – On web Lexapro
http://www.cheapest-valtrex-pharmacy.com/ – Order Avapro
http://www.cheapest-viagra-online-pharmacy.com/ – Commercial pills
http://www.cheapest-wellbutrin-pharmacy.com/ – Buy Virility Pills
http://www.cheapest-zoloft-pharmacy.com/ – Discount Lotensin
http://www.cheapgenericpharmaceuticals.com/ – Discount drugs
http://www.cheapgenericpharmacy.com/ – Commercial tablets
http://www.cheapharm.com/ – Online pharmacy
http://www.cheapharma.com/ – Buy pharmacy
http://www.cheapharmacy.com/ – Commercial Euphoria Cologne
http://www.cheapharmacyonline.com/ – Purchase Clomid
http://www.cheapharmonica.com/ – Commercial Lamisil Oral
http://www.cheapharmonicas.com/ – Discount pharmacy
http://www.cheapinexpensivepharmacy.com/ – Commercial tablets
http://www.cheapinternetpharmacy.com/ – Buy Silagra
http://www.cheapjobspharmacy.com/ – Buy Synthroid
http://www.cheaplegalpharmacy.com/ – On line Neurontin
http://www.cheap-levitra-pharmacy.com/ – On line medicaments
http://www.cheapmedicalpharmacy.com/ – Buy Plavix
http://www.cheap-medicine-pharmacy.com/ – Buy Nolvadex
http://www.cheapmedpharmacy.com/ – Buy Lioresal
http://www.cheapmexicanpharmacy.com/ – Commercial Cozaar
http://www.cheap-mexican-pharmacy.com/ – Cheap pharmacy
http://www.cheapmexicopharmacy.com/ – Discount drugs
http://www.cheapnationalpharmacy.com/ – Commercial pharmacy
http://www.cheaponlinepharmacies.com/ – Cheap Kamagra
http://www.cheaponlinepharmacy.com/ – Buy Nolvadex
http://www.cheap-online-pharmacy.com/ – Cheap pills
http://www.cheapon-linepharmacy.com/ – Order Diovan
http://www.cheaponline-pharmacy.com/ – Order Flomax
http://www.cheaponlinepharmacyaustralia.com/ – Buy medicaments
http://www.cheaponlinepharmacy-online.com/ – On web drugs
http://www.cheap-online-pharmacy-rx.com/ – Commercial Mevacor
http://www.cheap-online-pharmacy-store.com/ – Crestor Online
http://www.cheap-online-pharmacy-usa.com/ – Best tablets

Canadian Pharmacy Spam Servers – rx-partners. biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: dns2.onlinemedson.net
ns0.rx-sharedhost.com
ns0.rxp-hosting.com
ns1.edportu.com
ns1.partners-dns.com
ns1.viagravendita.com
ns2.bestpharm.org
ns2.drugs-on.net
ns2.edportu.com
ns2.esfarmaciaonline.com
ns2.genericdrugson.net
ns2.healthproductson.net
ns2.medications-on.net
ns2.medsshop.org
ns3.cesaonline.net
whatever.rxp-alive.com
Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com
buyusarx.com
edcustomer.com
enjoymeds.com
hoodiaweightlosstablets.com
longlovetabs.com
medextreme.com
medsjoy.com
pillsfm.com
rxfeel.com
rxfeeling.com
rxp-hosting.com
rxparty.com
farmacia-es.com
linkzpage.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy- cheapest-drug.org – rx-partners.biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Submitted by Rune on May 18, 2008 – 16:05

I don’t ever bother to mention the problematic “affiliate did it” argument.

This guy is not directly spamming the domain in question, cheapest-drug.org.
He has instead registered as a user on several forums/communities, giving a link to a domain (or several) in his userprofile and spamvertizes his userprofile via comments.

The latest from today came in via 207.38.4.12 which appears to be a free open proxy on “M9 Systems” in Canada. Tries to leave a comment on the posting about can-spam mailers.

“User”: Paeal (including a link to a wikidot.com site, I reckon they will nuke it).
Subject: “Your site has very much liked me.” (That seems to be a favourite among commentspammers).
The links in the commentspam:
http://forums.ugo.com/member.php?u=46618 “>Buy Viagra
http://www.mixx.com/users/viagrapill “>buy viagra online<
http://ubuntuforums.org/member.php?u=580712 “>buy cialis online
http://www.flixster.com/user/levitraa “>buy levitra

For examples of this comment- (and guestbook-) spammer, see this search result (Google):
“u=46618” +ugo

The links in the userprofiles at the forums/communities above all goes to various pages at cheapest-drug.org.
cheapest-drug.org is hosted at 91.199.112.8, which is rx-partners.biz who has their own listing in Spamhaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64756

rx-partners.biz are sneaky. This probably does not violate their policies and their “affiliates” can happily continue with their comment spam. Or what, Jessica? (rx-partners won’t listen, jessicaeagloff@yahoo.co.uk comes back to me and their form submission does not work/or I can’t read their captcha. Not my problem)

Screenshot from cheapest-drug.org (click on it for a larger one):

Address lookup

canonical name cheapest-drug.org.
aliases
addresses 91.199.112.104

Domain Whois record

Queried whois.publicinterestregistry.net with “cheapest-drug.org“…

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:01-Jan-2009 00:28:52 UTC
Expiration Date:15-Nov-2009 17:56:41 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:OK
Registrant ID:ec82bbcdbb3
Registrant Name:WhoisGuard  Protected
Registrant Organization:WhoisGuard
Registrant Street1:8939 S. Sepulveda Blvd. #110 -
Registrant City:Westchester
Registrant State/Province:CA
Registrant Postal Code:90045
Registrant Country:US
Registrant Phone:+1.6613102107
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Admin ID:ec82bbcdbb3
Admin Name:WhoisGuard  Protected
Admin Organization:WhoisGuard
Admin Street1:8939 S. Sepulveda Blvd. #110 -
Admin City:Westchester
Admin State/Province:CA
Admin Postal Code:90045
Admin Country:US
Admin Phone:+1.6613102107
Admin Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Tech ID:ec82bbcdbb3
Tech Name:WhoisGuard  Protected
Tech Organization:WhoisGuard
Tech Street1:8939 S. Sepulveda Blvd. #110 -
Tech City:Westchester
Tech State/Province:CA
Tech Postal Code:90045
Tech Country:US
Tech Phone:+1.6613102107
Tech Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Name Server:ELD.STEELURK.COM
Name Server:ISA.STEELURK.COM

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.104“…

Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 104.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheapest-drug.org IN SOA
server: eld.steelurk.com
email: root.steelurk.com
serial: 2006669692
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
cheapest-drug.org IN NS eld.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN NS isa.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN A 91.199.112.104 1200s (00:20:00)

— end —

cheapest-drug.org

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:22-Jan-2008 13:37:03 UTC
Expiration Date:15-Nov-2008 17:56:41 UTC
Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd.
					d/b/a PublicDomainRegistry.com (R27-LROR)
Status:OK
Registrant ID:DI_7040912
Registrant Name:saniok
Registrant Organization:RX-partner
Registrant Street1:Alexandr cel bun 94/53
Registrant City:Hincesti
Registrant State/Province:0
Registrant Postal Code:3401
Registrant Country:MD
Registrant Phone:+373.079777957
Registrant Phone Ext.:
Registrant Email:saniok44@gmail.com

Admin ID:DI_7040912
Admin Name:saniok
Admin Organization:RX-partner
Admin Street1:Alexandr cel bun 94/53
Admin City:Hincesti
Admin State/Province:0
Admin Postal Code:3401
Admin Country:MD
Admin Phone:+373.079777957
Admin Email:saniok44@gmail.com

Tech ID:DI_7040912
Tech Name:saniok
Tech Organization:RX-partner
Tech Street1:Alexandr cel bun 94/53
Tech City:Hincesti
Tech State/Province:0
Tech Postal Code:3401
Tech Country:MD
Tech Phone:+373.079777957
Tech Phone Ext.:

Tech Email:saniok44@gmail.com
Name Server:ONLINE.RXP-FOREVER.COM
Name Server:LIVE.RXP-FOREVER.COM

; <<>> DiG 9.3.4-P1 <<>> cheapest-drug.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59717
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;cheapest-drug.org.             IN      A

;; ANSWER SECTION:
cheapest-drug.org.      1200    IN      A       91.199.112.8

;; AUTHORITY SECTION:
cheapest-drug.org.      1200    IN      NS      online.rxp-forever.com.
cheapest-drug.org.      1200    IN      NS      live.rxp-forever.com.

;; ADDITIONAL SECTION:
live.rxp-forever.com.   52213   IN      A       91.199.112.8
online.rxp-forever.com. 52213   IN      A       91.199.112.7

;; Query time: 201 msec
;; SERVER: 217.13.7.140#53(217.13.7.140)
;; WHEN: Sun May 18 14:58:55 2008
;; MSG SIZE  rcvd: 138

91.199.112.8

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
source:         RIPE # Filtered

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
source:         RIPE # Filtered

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

“jessica Eagloff”. That is rx-partners.biz.
See this SBL-listing:

Canadian Pharmacy – Botnet Hosting – 1-888-298-7454

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Here is the url:

http://www.foresight.org/briefing/?buy-levitra-online-sildenafil-citrate&briefing=395

www.viagrasupply.com – Viagra Supply

Address lookup

canonical name www.foresight.org.
aliases
addresses 66.201.49.40

Domain Whois record

Queried whois.publicinterestregistry.net with “foresight.org“…

Domain ID:D825803-LROR
Domain Name:FORESIGHT.ORG
Created On:18-Feb-1994 05:00:00 UTC
Last Updated On:13-Feb-2009 20:49:17 UTC
Expiration Date:19-Feb-2010 05:00:00 UTC
Sponsoring Registrar:Dotster, Inc. (R34-LROR)
Status:OK
Registrant ID:DOT-Y3GBIH2PZG0C
Registrant Name:Foresight Institute
Registrant Organization:Foresight Institute
Registrant Street1:PO Box 61058
Registrant City:Palo Alto
Registrant State/Province:CA
Registrant Postal Code:94306
Registrant Country:US
Registrant Phone:+1.6502890860
Registrant Email:domaininfo@foresight.org
Admin ID:DOT-3HF0UXIJAJJF
Admin Name:Foresight Institute
Admin Organization:Foresight Institute
Admin Street1:PO Box 61058
Admin City:Palo Alto
Admin State/Province:CA
Admin Postal Code:94306
Admin Country:US
Admin Phone:+1.6502890860
Admin Email:domaininfo@foresight.org
Tech ID:DOT-UKF3EN547CDK
Tech Name:Foresight Institute
Tech Organization:Foresight Institute
Tech Street1:PO Box 61058
Tech City:Palo Alto
Tech State/Province:CA
Tech Postal Code:94306
Tech Country:US
Tech Phone:+1.6502890860
Tech Email:domaininfo@foresight.org
Name Server:NS1.NAMERESOLVE.COM
Name Server:NS2.NAMERESOLVE.COM
Name Server:NS3.NAMERESOLVE.COM
Name Server:NS4.NAMERESOLVE.COM

Network Whois record

Queried whois.arin.net with “!NET-66-201-49-0-1“…

CustName:   Tarlton Properties
Address:    1455 Adams Drive
City:       Menlo Park
StateProv:  CA
PostalCode: 94025
Country:    US
RegDate:    2008-06-18
Updated:    2008-06-18

NetRange:   66.201.49.0 - 66.201.49.127
CIDR:       66.201.49.0/25
OriginAS:   AS26803
NetName:    TARLTONPROPERTIESMBP
NetHandle:  NET-66-201-49-0-1
Parent:     NET-66-201-32-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-06-18
Updated:    2008-06-18

RTechHandle: BEV-ARIN
RTechName:   Evans, Bob
RTechPhone:  +1-650-330-0428
RTechEmail:  bob@fiberinternetcenter.com 

OrgNOCHandle: FIBER-ARIN
OrgNOCName:   FiberNOC
OrgNOCPhone:  +1-650-330-0428
OrgNOCEmail:  info@fiberinternetcenter.com

OrgTechHandle: BEV-ARIN
OrgTechName:   Evans, Bob
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  bob@fiberinternetcenter.com

OrgTechHandle: SWIPI-ARIN
OrgTechName:   Swip Information
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  swip@fiberinternetcenter.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.foresight.org IN A 66.201.49.40 3600s (01:00:00)
foresight.org IN SOA
server: ns1.nameresolve.com
email: hostmaster.foresight.org
serial: 2009080112
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
86400s (1.00:00:00)
foresight.org IN NS ns1.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns2.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns3.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns4.nameresolve.com 86400s (1.00:00:00)
foresight.org IN MX
preference: 20
exchange: snow.he.net
3600s (01:00:00)
foresight.org IN TXT “v=spf1″v=spf1 a mx a:thorin.netconcepts.com ~all” 86400s (1.00:00:00)
foresight.org IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx5.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx4.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
foresight.org IN A 66.201.49.40 3600s (01:00:00)
40.49.201.66.in-addr.arpa IN PTR foresight.org 1200s (00:20:00)

— end —

Address lookup

canonical name www.viagrasupply.com.
aliases
addresses 74.52.66.139

Domain Whois record

Queried whois.internic.net with “dom viagrasupply.com“…

   Domain Name: VIAGRASUPPLY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: DNS1.ANSWERABLE.COM
   Name Server: DNS2.ANSWERABLE.COM
   Status: ok
   Updated Date: 11-dec-2008
   Creation Date: 07-aug-2008
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Sat, 01 Aug 2009 22:52:14 UTC <<<

Queried whois.onlinenic.com with “viagrasupply.com“…

Query error: TimedOut

Network Whois record

Queried whois.arin.net with “74.52.66.139“…

OrgName:    ThePlanet.com Internet Services, Inc.
OrgID:      TPCM
Address:    315 Capitol
Address:    Suite 205
City:       Houston
StateProv:  TX
PostalCode: 77002
Country:    US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange:   74.52.0.0 - 74.55.255.255
CIDR:       74.52.0.0/14
OriginAS:   AS13749,  AS21844,  AS30315,  AS36420
NetName:    NETBLK-THEPLANET-BLK-14
NetHandle:  NET-74-52-0-0-1
Parent:     NET-74-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate:    2006-02-17
Updated:    2009-02-24

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560
RAbuseEmail:  abuse@theplanet.com 

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3555
RNOCEmail:  noc@theplanet.com 

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-214-782-7800
RTechEmail:  admins@theplanet.com 

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560
OrgAbuseEmail:  abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3555
OrgNOCEmail:  noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-214-782-7800
OrgTechEmail:  admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.viagrasupply.com IN A 74.52.66.139 38380s (10:39:40)
viagrasupply.com IN A 74.52.66.139 38400s (10:40:00)
viagrasupply.com IN NS dns2.answerable.com 38400s (10:40:00)
viagrasupply.com IN SOA
server: dns1.answerable.com
email: claytonrand.hotmail.com
serial: 2008100502
refresh: 7200
retry: 7200
expire: 2419200
minimum ttl: 38400
86400s (1.00:00:00)
viagrasupply.com IN NS dns4.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns3.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns1.answerable.com 38400s (10:40:00)
139.66.52.74.in-addr.arpa IN PTR 8b.42.344a.static.theplanet.com 86400s (1.00:00:00)

— end —

Canadian Pharmacy – usonlinepharm.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

usonlinepharm

Address lookup

canonical name usonlinepharm.com.
aliases
addresses 92.48.96.141

Domain Whois record

Queried whois.internic.net with “dom usonlinepharm.com“…

   Domain Name: USONLINEPHARM.COM
   Registrar: SPOT DOMAIN LLC DBA DOMAINSITE.COM
   Whois Server: whois.domainsite.com
   Referral URL: http://www.domainsite.com
   Name Server: NS2.ZONEEDIT.COM
   Name Server: NS4.ZONEEDIT.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 16-nov-2008
   Creation Date: 22-oct-2008
   Expiration Date: 22-oct-2009

>>> Last update of whois database: Fri, 31 Jul 2009 14:31:56 UTC <<<

Queried whois.domainsite.com with “usonlinepharm.com“…

Visit AboutUs.org for more information about usonlinepharm.com
<a href="http://www.aboutus.org/usonlinepharm.com">AboutUs: usonlinepharm.com</a>

Domain Name:     usonlinepharm.com
Registrar:       Spot Domain LLC

Protected Domain Services Customer ID: DSR-860526

Expiration Date: 2009-10-22 21:14:17
Creation Date:   2008-10-22 15:14:17

Name Servers:
	ns2.zoneedit.com
	ns4.zoneedit.com

REGISTRANT CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

ADMINISTRATIVE CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

TECHNICAL CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

BILLING CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

1249050755.9468

The Data in the Spot Domain LLC WHOIS database is provided by Spot Domain LLC for information purposes, and to assist persons in obtaining information about or related to a domain name registration record.  Spot Domain LLC does not guarantee its accuracy.  By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to:  (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Spot Domain LLC (or its systems). Spot Domain LLC reserves the right to modify these terms at any time.  By submitting this query, you agree to abide by this policy.

Network Whois record

Queried whois.ripe.net with “-B 92.48.96.141“…

% Information related to '92.48.96.136 - 92.48.96.143'

inetnum:        92.48.96.136 - 92.48.96.143
netname:        BlueConnex-44757
descr:          BlueConnex transit customer
remarks: ##############################################################
remarks:        Please report abuse incidents to abuse@blueconnex.net
remarks:        Messages sent to other contact addresses may not be acted upon.
remarks: ##############################################################
country:        GB
admin-c:        BLO2-RIPE
tech-c:         BLO2-RIPE
status:         ASSIGNED PA
mnt-by:         blueconnex-mnt
mnt-routes:     blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20090325

role:           BlueConnex Ltd Operators
address:        BlueConnex Ltd
address:        BlueSquare House
address:        Priors Way
address:        Maidenhead
address:        Berkshire
address:        SL62HP
remarks:        For abuse please contact abuse@blueconnex.net
phone:          +44 (0)1628 673131
admin-c:        PETE3-RIPE
admin-c:        MM5420-RIPE
admin-c:        ROB153-RIPE
tech-c:         MM5420-RIPE
tech-c:         ROB153-RIPE
mnt-by:         blueconnex-mnt
tech-c:         PETE3-RIPE
nic-hdl:        BLO2-RIPE
changed:        support@pcs-net.com 20081012
source:         RIPE
e-mail:         abuse@blueconnex.net

% Information related to '92.48.64.0/18AS29550'

route:          92.48.64.0/18
descr:          Blueconnex Networks Ltd
origin:         AS29550
remarks:        ***********************************
remarks:        *                                 *
remarks:        * Abuse: abuse@blueconnex.net     *
remarks:        *                                 *
remarks:        * Peering: peering@blueconnex.net *
remarks:        *                                 *
remarks:        ***********************************
mnt-by:         blueconnex-mnt
source:         RIPE
changed:        brian.ross@netsumo.com 20080718

DNS records

name class type data time to live
usonlinepharm.com IN A 92.48.96.141 7200s (02:00:00)
usonlinepharm.com IN NS ns2.zoneedit.com 7200s (02:00:00)
usonlinepharm.com IN NS ns4.zoneedit.com 7200s (02:00:00)
usonlinepharm.com IN SOA
server: ns2.zoneedit.com
email: soacontact.zoneedit.com
serial: 1226850235
refresh: 14400
retry: 7200
expire: 950400
minimum ttl: 7200
7200s (02:00:00)
usonlinepharm.com IN MX
preference: 0
exchange: mail.usonlinepharm.com
7200s (02:00:00)
141.96.48.92.in-addr.arpa IN PTR 92-48-96-141.static.as29550.net 86400s (1.00:00:00)

— end —


Canadian Pharmacy Spam – cheaprxpharmonline.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

cheaprxpharmonline

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
122.56.218.44 New Zealand (Auckland)* Whois Google DNSStuff Urgentmessage.org
207.115.20.183 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Harold Messer Wed Jul 29 18:44:25 2009
Return-Path:
Authentication-Results: mta153.sbc.mail.mud.yahoo.com from=sm.luth.se; domainkeys=neutral (no sig); from=sm.luth.se; dkim=neutral (no sig)
Received: from 122.56.218.44 (EHLO flpi181.prodigy.net) (207.115.20.183)
by mta153.sbc.mail.mud.yahoo.com with SMTP; Wed, 29 Jul 2009 18:44:40 -0700
Received: from 7n8k622 (122-56-218-44.mobile.telecom.co.nz [122.56.218.44] (may be forged))
by flpi181.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6U1hWEk003354;
Wed, 29 Jul 2009 18:44:37 -0700
Message-ID: <000701ca10b7$44cbffc0$627e0202@sm.luth.se>
Reply-To: “Harold Messer” <haroldmesser_zw@sm.luth.se
From: “Harold Messer” <haroldmesser_zw@sm.luth.se
To: , ,
Subject: Need some help focusing?.. get Ritalin!
Date: Wed, 29 Jul 2009 18:44:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 219

VicodinES, XanaxAmbien, Codeine, Phentermin and many more!
No Doctor or Prescription Needed! Brand & Generic Names Available!
Fast Trackable USPS Shipping!
Browse Our Site Today –> http://cheaprxpharmonline.com

SmartFilter Category: Not Categorized
Make Category Suggestions
IP: 60.12.166.154
Nameservers: ns1.cheaprxpharmonline.comns2.cheaprxpharmonline.com

ns3.cheaprxpharmonline.com

ns4.cheaprxpharmonline.com

nameservers missing in zone
hot1gaming.com X X
ns1.bd4ns.com X X
ns1.cheaprxpharmonline.com


X X
ns2.cheaprxpharmonline.com


X X
ns2.ef2ns.com X X
ns3.br4ns.com X X
ns3.cheaprxpharmonline.com


X X
ns4.cheaprxpharmonline.com


X X
sdavaiteres.com

hostnames sharing ip with a-records
*.sdavaiteres.com


hot1gaming.com


ns1.listendns.com


ns1.sdavaiteres.com


ns2.sdavaiteres.com


ns3.fa6ns.com


ns3.sdavaiteres.com


ns4.sdavaiteres.com


sdavaiteres.com


www.softokors.com

Address lookup

canonical name cheaprxpharmonline.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmonline.com“…

   Domain Name: CHEAPRXPHARMONLINE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.BD4NS.COM
   Name Server: NS2.EF2NS.COM
   Name Server: NS3.BR4NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-jul-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

 Last update of whois database: Thu, 30 Jul 2009 15:12:12 UTC <<<

Queried whois.ename.com with “cheaprxpharmonline.com“…

Domain Name : cheaprxpharmonline.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.bd4ns.com
ns2.ef2ns.com
ns3.br4ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheaprxpharmonline.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns3.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns2.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns1.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN A 60.12.166.154 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns4.cheaprxpharmonline.com 86400s (1.00:00:00)

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: ConnectionRefused
HTTP – 80
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —

Canadian Pharmacy – winpolls.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

winpolls

winpolls2

winpolls3

winpolls4

Address lookup

canonical name winpolls.com.
aliases
addresses 64.120.173.118

Domain Whois record

Queried whois.internic.net with “dom winpolls.com“…

In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. As a librarian, I’m particularly concerned that grand visions of digital libraries may entail trade-offs whose full implications are not being attended to. One immediate thought:. In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. Natural Substance Knock Offs in the FDA Pipeline Could be Dangerous; By American Association for Health Freedom

   Domain Name: WINPOLLS.COM
   Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
   Whois Server: whois.PublicDomainRegistry.com
   Referral URL: http://www.PublicDomainRegistry.com
   Name Server: D1.REGNAME.BIZ
   Name Server: D2.REGNAME.BIZ
   Name Server: D3.REGNAME.BIZ
   Name Server: D4.REGNAME.BIZ
   Status: ok
   Updated Date: 05-jun-2009
   Creation Date: 19-aug-2008
   Expiration Date: 19-aug-2009

>>> Last update of whois database: Tue, 28 Jul 2009 07:15:27 UTC <<<

Queried whois.publicdomainregistry.com with “winpolls.com“…

Registration Service Provided By: REGNAME.BIZ
Contact: +1.2014674681
Website: http://www.regname.biz

Domain Name: WINPOLLS.COM 

Registrant:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Creation Date: 19-Aug-2008
Expiration Date: 19-Aug-2009

Domain servers in listed order:
    d4.regname.biz
    d3.regname.biz
    d2.regname.biz
    d1.regname.biz

Administrative Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Technical Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Billing Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Status:ACTIVE

Network Whois record

Queried whois.arin.net with “64.120.173.118“…

OrgName:    Network Operations Center Inc.
OrgID:      NOC
Address:    PO Box 591
City:       Scranton
StateProv:  PA
PostalCode: 18501-0591
Country:    US

ReferralServer: rwhois://rwhois.hostnoc.net:4321/

NetRange:   64.120.128.0 - 64.120.191.255
CIDR:       64.120.128.0/18
OriginAS:   AS21788
NetName:    HOSTNOC-5BLK
NetHandle:  NET-64-120-128-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.HOSTNOC.NET
NameServer: NS2.HOSTNOC.NET
Comment:
RegDate:    2009-04-27
Updated:    2009-04-27

RAbuseHandle: SMA4-ARIN
RAbuseName:   Arcus, S. Matthew
RAbusePhone:  +1-570-343-8551
RAbuseEmail:  nic@hostnoc.net 

RNOCHandle: SMA4-ARIN
RNOCName:   Arcus, S. Matthew
RNOCPhone:  +1-570-343-8551
RNOCEmail:  nic@hostnoc.net 

RTechHandle: SMA4-ARIN
RTechName:   Arcus, S. Matthew
RTechPhone:  +1-570-343-8551
RTechEmail:  nic@hostnoc.net 

OrgTechHandle: SMA4-ARIN
OrgTechName:   Arcus, S. Matthew
OrgTechPhone:  +1-570-343-8551
OrgTechEmail:  nic@hostnoc.net

# ARIN WHOIS database, last updated 2009-07-27 20:00

DNS records

name class type data time to live
winpolls.com IN SOA
server: d4.regname.biz
email: a.kosterin.yahoo.com
serial: 2009060503
refresh: 7200
retry: 7200
expire: 7200
minimum ttl: 7200
38400s (10:40:00)
winpolls.com IN NS d4.regname.biz 38400s (10:40:00)
winpolls.com IN NS d2.regname.biz 38400s (10:40:00)
winpolls.com IN NS d1.regname.biz 38400s (10:40:00)
winpolls.com IN A 64.120.173.118 28800s (08:00:00)
winpolls.com IN NS d3.regname.biz 38400s (10:40:00)
118.173.120.64.in-addr.arpa IN PTR 64-120-173-118.hostnoc.net 86400s (1.00:00:00)

— end —

Canadian Pharmacy – EDSelection.com Viagra Superstore

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


 


 

edselection

Address lookup

canonical name www.edselection.com.
aliases
addresses 91.199.112.8

Domain Whois record

Queried whois.internic.net with “dom edselection.com“…

Domain Name: EDSELECTION.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 11-jul-2009
Creation Date: 29-nov-2005
Expiration Date: 29-nov-2009

>>> Last update of whois database: Sat, 25 Jul 2009 16:02:18 UTC

Queried whois.directnic.com with “edselection.com“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: EDSELECTION.COM

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:08:28 AM
Record expires on 11-29-2009
Record created on 11-29-2005

Domain servers in listed order:
NS0.PARTNERS-DNS.COM 83.149.85.32
NS1.PARTNERS-DNS.COM 91.199.112.8

The compilation, repackaging, dissemination, or other use of this WHOIS
data is expressly prohibited without the prior written consent of
directNIC.com.

directNIC.com reserves the right to terminate your access to its WHOIS
database in its sole discretion, including without limitation, for
excessive querying of the database or for failure to otherwise abide by
this policy.

directNIC reserves the right to modify these terms at any time.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.edselection.com IN A 91.199.112.8 1200s (00:20:00)
edselection.com IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006665128
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
edselection.com IN NS ns0.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip2.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip1.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip3.partners-dns.com 1200s (00:20:00)
edselection.com IN NS ns1.partners-dns.com 1200s (00:20:00)
edselection.com IN A 91.199.112.8 1200s (00:20:00)

Traceroute

Tracing route to http://www.edselection.com [91.199.112.8]

hop rtt rtt rtt ip address fully qualified domain name
1 6 4 4 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 5 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.5 et5-1.ibr03.dllstx3.theplanet.com
5 0 0 0 157.238.225.5 xe-2-4.r01.dllstx09.us.bb.gin.ntt.net
6 1 1 1 144.232.24.69
7 3 3 3 144.232.19.177 sl-crs1-fw-0-6-3-0.sprintlink.net
8 39 40 40 144.232.19.101 sl-crs1-dc-0-8-5-0.sprintlink.net
9 118 118 118 144.232.19.147 sl-bb20-par-1-0-0.sprintlink.net
10 128 128 128 213.206.129.66 sl-bb21-fra-13-0-0.sprintlink.net
11 128 128 128 217.147.96.42 sl-gw10-fra-15-0-0.sprintlink.net
12 169 150 173 217.147.109.22
13 179 165 165 194.186.157.137 cat07.moscow.gldn.net
14 165 165 165 195.239.10.202 te1-1.maxwell.msk.wahome.ru
15 166 166 166 77.91.225.76 vl-500.ampere.msk.wahome.ru
16 166 166 166 92.241.162.66
17 * * *
18 * * *
19 * * *
20 * * *

Trace aborted

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Sat, 25 Jul 2009 15:07:40 GMT
Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=ee6439032ebf71a1fe77d430143ad656; expires=Mon, 24-Aug-2009 15:07:40 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html;charset=iso-8859-1
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —

Domains sharing name servers:

  1. ed-solution.com
  2. ed-sup.com
  3. edcollection.com
  4. edcustomer.com
  5. edselection.com
  6. luxpharmacy.com
  7. manfriendly.com
  8. partners-dns.com
  9. perfectgenerics.com
  10. prescriptionspoint.com
  11. propeciahair.com
  12. rx-partners.biz
  13. rxtrusted.com
  14. secureccpay.com
  15. somaextreme.com
  16. trustedtablets.com
  17. trustedtabs.com
  18. ultimatepillstore.com
  19. viagracomparison.com
  20. yoursecurebilling.com
  21. raypharma.com
  22. 64.128.93.5
  23. buyviagra-online.com
  24. buyvigrxpills.com
  25. edhealthshop.com
  26. extenzedeal.com
  27. extenzediscount.com
  28. myrxmart.com
  29. norxsexpills.com
  30. ordercheapviagra.com
  31. proactol4u.com
  32. rxnetshop.com
  33. samsexpills.com
  34. viagra0.com
  35. viagraorviagra.com
  36. http://www.cheap-edpills.com
  37. xmedicines.com
  38. youredstore.com
  39. 74.86.81.154
  40. theindiantv.com
  41. crocmint.com
  42. croc2host.com
  43. ns1.croc2host.com
  44. ns2.croc2host.com
  45. caliplus.org
  46. croc2host.com
  47. crocitalia.com
  48. crocmintdb2.com
  49. securedinfo.net
  50. vigaplus.org
  51. vitopay.com
  52. vitosaver.com
  53. vitoslim.com
  54. mail.hoodia-absolute.com
  55. hoodia-absolute.com
  56. securedinfo.net
  57. bill.rx-partners.biz
  58. rx-partners.biz
  59. topsecured.net
  60. securedtrack.com
  61. mysecurebilling.com
  62. vigrxplus.com
  63. extenzedeal.com
  64. shareasale.com
  65. zenerx.com
  66. everestnutrition.com
  67. 4rx.com
  68. proactol.com
  69. vigaplus.com
  70. cheap-pharma.com
  71. cheap-pharma.net
  72. cheap-pharma.org
  73. ezymedical.com
  74. aviagra.net
  75. edhelp.biz
  76. ezmedz.net
  77. mediaplace.biz
  78. meds4all.net
  79. rxp-alive.com
  80. buys-pills.com

funny whois entry

Registrant Contact:
Personality
Alexey Goncharov ()
per. Ryabinoviy 7
Krasnodar, KRASNODAR 353182
RU

Canadian Pharmacy – DirectParma – www.directpharma.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Here, in DirectPharma.net we are committed to bringing you the best meds for the lowest prices. Please check out our catalog with confidence that each one the listed items was tested for both Quality and Affectivity. We are connected to the most reputable suppliers, to bring you the best quality products. Because your health is at the center of our attention


Direct-pharm

Address lookup

canonical name directpharma.net.
aliases http://www.directpharma.net
addresses 67.192.134.225

Domain Whois record

Queried whois.internic.net with “dom directpharma.net“…

   Domain Name: DIRECTPHARMA.NET
   Registrar: DYNADOT, LLC
   Whois Server: whois.dynadot.com
   Referral URL: http://www.dynadot.com
   Name Server: NS0.DNSMADEEASY.COM
   Name Server: NS1.DNSMADEEASY.COM
   Name Server: NS2.DNSMADEEASY.COM
   Name Server: NS3.DNSMADEEASY.COM
   Name Server: NS4.DNSMADEEASY.COM
   Status: clientTransferProhibited
   Updated Date: 14-jun-2009
   Creation Date: 07-jun-2005
   Expiration Date: 07-jun-2011

>>> Last update of whois database: Sat, 25 Jul 2009 15:39:47 UTC <<<

Queried whois.dynadot.com with “directpharma.net“…

Domain Name: directpharma.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2011/06/07 UTC
Record created on 2005/06/07 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/25 08:35:39 PST <<<

Network Whois record

Queried whois.arin.net with “!NET-67-192-134-224-1“…

CustName:   ProNet
Address:    9725 Datapoint
City:       San Antonio
StateProv:  TX
PostalCode: 78225
Country:    US
RegDate:    2008-04-14
Updated:    2008-04-14

NetRange:   67.192.134.224 - 67.192.134.231
CIDR:       67.192.134.224/29
NetName:    RSPC-1208189406980389
NetHandle:  NET-67-192-134-224-1
Parent:     NET-67-192-0-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-04-14
Updated:    2008-04-14

RAbuseHandle: ABUSE45-ARIN
RAbuseName:   Abuse Desk
RAbusePhone:  +1-210-892-4000
RAbuseEmail:  abuse@rackspace.com 

RTechHandle: IPADM17-ARIN
RTechName:   IPADMIN
RTechPhone:  +1-210-892-4000
RTechEmail:  ipadmin@rackspace.com 

OrgAbuseHandle: ABUSE45-ARIN
OrgAbuseName:   Abuse Desk
OrgAbusePhone:  +1-210-892-4000
OrgAbuseEmail:  abuse@rackspace.com

OrgTechHandle: IPADM17-ARIN
OrgTechName:   IPADMIN
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  ipadmin@rackspace.com

OrgTechHandle: ZR9-ARIN
OrgTechName:   Rackspace, com
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  hostmaster@rackspace.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

DNS query for 225.134.192.67.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.directpharma.net IN CNAME directpharma.net 1741s (00:29:01)
directpharma.net IN MX
preference: 10
exchange: mail.directpharma.net
1800s (00:30:00)
directpharma.net IN A 67.192.134.225 1800s (00:30:00)
directpharma.net IN NS ns0.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns2.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns3.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns1.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN NS ns4.dnsmadeeasy.com 86400s (1.00:00:00)
directpharma.net IN SOA
server: ns0.dnsmadeeasy.com
email: dns.dnsmadeeasy.com
serial: 2006010159
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)

Traceroute

Tracing route to http://www.directpharma.net [67.192.134.225]

hop rtt rtt rtt ip address fully qualified domain name
1 1 2 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 0 0 206.223.118.7 eq-dfw.rackspace.net
6 0 0 0 72.3.128.250 edge3-backbone1.dfw1.rackspace.net
7 2 2 2 67.192.56.229 vlan905.core5.dfw1.rackspace.com
8 3 2 2 67.192.56.15
9 2 2 2 67.192.134.225

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 301 Moved Permanently
Date: Sat, 25 Jul 2009 15:41:27 GMT
Server: Apache/2.0.52 (Red Hat)
X-Powered-By: PHP/5.2.10
Location: /en/
Set-Cookie: PHPSESSID=s7c0u3b9lb9garb3s9gq66o290; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

Canadian Pharmacy Spam KING

The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal your money.

The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.

http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

Jonathan Owens

jowens@unifiedmarkets.com (current)
jowens@unifiedmarket.com (previous)
www.unifiedmarkets.com (current)
www.unifiedmarket.com (previous)
640 Grand Ave.
Carlsbad, North San Diego County
CA 92008-2365
+1 (760) 730-9864

You can find his foot prints by searching the following keywords;

210-888-9089 – Canadian Pharmacy
210-888-9089 – US Drugstore
+ 020 3239 7731 – (new number) Canadian Pharmacy
210 787 1711 – Bogus Marcus Med
845-709-8044 – Bogus university degree
718-524-2096 – Bogus OEM software
888-245-4117 – Bogus collection agency
support@canadianpharmsupport.com
210 East 59st Street New York, NY 10021

The good news is that this scammer has extreme hatered against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency that if you send a lot of spams to him, he will remove you from his spam databases. THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!
You will get far less spams!

jowens@unifiedmarkets.com
owensw@unifiedmarkets.com
dmoonfire@unifiedmarkets.com
uminfo@unifiedmarkets.com
dholden@unifiedmarkets.com

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
114.92.205.227 China* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com


Canadian Pharmacy Spam – flowersuffix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.168.189.23 United States (Columbus)* Whois Google DNSStuff Urgentmessage.org
207.115.36.163 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Stewart Thurman Tue Jul 21 19:18:13 2009
Return-Path:
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ebay.ca; domainkeys=neutral (no sig); from=ebay.ca; dkim=neutral (no sig)
Received: from 66.168.189.23 (EHLO nlpi149.prodigy.net) (207.115.36.163)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Tue, 21 Jul 2009 19:21:50 -0700
Received: from wuhlju2 (static.unknown.charter.com [66.168.189.23] (may be forged))
by nlpi149.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M2LIQ2019630;
Tue, 21 Jul 2009 21:21:45 -0500
Message-ID: <000701ca0a72$aa470110$d828ea62@ebay.ca>
Reply-To: “Stewart Thurman” <stewartthurman_rl@ebay.ca>
From: “Stewart Thurman”  <stewartthurman_rl@ebay.ca>
To: , ,
Subject: Do you want it to be longer and stronger in bed?
Date: Tue, 21 Jul 2009 21:18:13 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom flowersuffix.com“…

   Domain Name: FLOWERSUFFIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 12:08:38 UTC <<<

Queried whois.namerich.cn with “flowersuffix.com“…

 DomainName : flowersuffix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
flowersuffix.com IN A 218.75.144.6 10800s (03:00:00)
flowersuffix.com IN A 60.191.239.150 10800s (03:00:00)
flowersuffix.com IN A 203.93.208.86 10800s (03:00:00)

— end —

SmartFilter Category: Malicious Sites, Spam URLs
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.moralgrand.com
ns1.noticezap.com
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.poundanger.com
ns1.putanger.com
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.saidcold.com
ns1.sawplump.com
ns1.sendbusy.com
ns1.sidebeauty.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.thosekept.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.via99.org
ns1.watchnorth.com
ns1.wooddoes.in
ns1.yardaware.com
ns1.yearbusy.com
ns2.112911.org
ns2.282715.com
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.andfell.com
ns2.aromafish.com
ns2.beautybounce.com
ns2.bedplain.com
ns2.bedsing.com
ns2.beforebegin.com
ns2.bitsshape.com
ns2.bluesign.in
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.breezyget.com
ns2.bu15.net
ns2.chartflat.in
ns2.clockbright.com
ns2.clothetrack.com
ns2.coateach.com
ns2.coatfather.com
ns2.cu28.com
ns2.cutfigure.com
ns2.cutheart.com
ns2.deluxecrop.com
ns2.desiresweet.com
ns2.directlisten.com
ns2.doctorstill.com

Canadian Pharmacy Spam – www.flowersuffix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name flowersuffix.com.
aliases
addresses 60.191.239.150
203.93.208.86
218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom flowersuffix.com“…

   Domain Name: FLOWERSUFFIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 01:30:06 UTC

Queried whois.namerich.cn with “flowersuffix.com“…

 DomainName : flowersuffix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
flowersuffix.com IN A 60.191.239.150 10800s (03:00:00)
flowersuffix.com IN A 203.93.208.86 10800s (03:00:00)
flowersuffix.com IN A 218.75.144.6 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – alliance-leicester324.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

#1 ukdihw.cn Tue, 21 Jul 2009 12:08:28 +0000
#2 mg-bzs.cn Tue, 21 Jul 2009 09:09:25 +0000
#3 yahoo2008.net Tue, 21 Jul 2009 09:08:13 +0000
#4 chowreporter.com Tue, 21 Jul 2009 06:50:24 +0000
#5 ibmgold.com Tue, 21 Jul 2009 05:17:04 +0000
#6 ghxbkc.cn Tue, 21 Jul 2009 03:45:02 +0000
#7 jvbidc.cn Tue, 21 Jul 2009 03:34:27 +0000
#8 gpl-global.com Tue, 21 Jul 2009 03:34:10 +0000
#9 alliance-leicester324.com Mon, 20 Jul 2009 21:38:23 +0000
#10 cinatrade.com Mon, 20 Jul 2009 20:01:50 +0000
#11 impeachedwatches.cn Mon, 20 Jul 2009 15:09:52 +0000
#12 index-brander.net Mon, 20 Jul 2009 15:06:47 +0000
#13 mb-associates.com.cn Mon, 20 Jul 2009 11:39:04 +0000
#14 hydrationwatches.cn Mon, 20 Jul 2009 08:22:29 +0000
#15 joawa.net Mon, 20 Jul 2009 06:12:27 +0000
#16 zhuzhu88.com Sun, 19 Jul 2009 22:15:17 +0000
#17 bffizm.cn Sun, 19 Jul 2009 20:04:17 +0000
#18 ehethu.cn Sun, 19 Jul 2009 20:04:03 +0000
#19 iyrymv.cn Sun, 19 Jul 2009 20:02:53 +0000
#20 avbyzi.cn Sun, 19 Jul 2009 19:57:30 +0000
#21 rxtachometer.cn Sun, 19 Jul 2009 12:31:40 +0000
#22 electronics-provider.com Sun, 19 Jul 2009 11:03:34 +0000
#23 tszgqt.cn Sun, 19 Jul 2009 10:57:38 +0000
#24 psnukp.cn Sun, 19 Jul 2009 10:57:31 +0000
#25 dudescreen.com Sat, 18 Jul 2009 16:21:06 +0000
#26 evictorswatches.cn Sat, 18 Jul 2009 15:44:07 +0000
#27 14296.com.cn Sat, 18 Jul 2009 08:46:22 +0000
#28 forevedm.com Sat, 18 Jul 2009 03:55:48 +0000
#29 chinamysql.com Sat, 18 Jul 2009 03:11:57 +0000
#30 cattilywatches.cn Fri, 17 Jul 2009 21:17:06 +0000
#31 expresscmc.com Fri, 17 Jul 2009 20:18:33 +0000
#32 true668.com Fri, 17 Jul 2009 07:37:10 +0000
#33 kmr555.com Fri, 17 Jul 2009 05:56:50 +0000
#34 nulldesk.com Fri, 17 Jul 2009 04:43:34 +0000
#35 chinacngbus.com Fri, 17 Jul 2009 04:12:23 +0000

These are the brands that were regularly caught in spam honey pots in the past 3 days.

  • Acai Berry Boom
  • Acai Elite
  • Canadian_Healthcare
  • Canadian_Pharmacy
  • DrugStore
  • MaxGentleman
  • Privilege_Club_Casino
  • ED Pill Store


Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
217.150.55.94 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
207.115.36.108 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George”  <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Canadian Pharmacy Spam Domains

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Domains on Nameserver ns2.growfour.com

Entries 1 – 26 of 26

Canadian Pharmacy Spam – liveevery.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://cornerdeep.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

tiny dimension is your hidden shame, no need to worry, we ll help you! http://mialo.bgacipiq.cn/

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

Address lookup

canonical name liveevery.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom liveevery.com“…

   Domain Name: LIVEEVERY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:03:17 UTC <<<

Queried whois.namerich.cn with “liveevery.com“…

 DomainName : liveevery.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
liveevery.com IN A 203.93.208.86 10800s (03:00:00)
liveevery.com IN A 218.75.144.6 10800s (03:00:00)
liveevery.com IN A 60.191.239.150 10800s (03:00:00)

— end —

Address lookup

canonical name cornerdeep.com.
aliases
addresses 218.75.144.6
60.191.239.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom cornerdeep.com“…

   Domain Name: CORNERDEEP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:04:19 UTC <<<

Queried whois.namerich.cn with “cornerdeep.com“…

 DomainName : cornerdeep.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cornerdeep.com IN A 218.75.144.6 10800s (03:00:00)
cornerdeep.com IN A 60.191.239.150 10800s (03:00:00)
cornerdeep.com IN A 203.93.208.86 10800s (03:00:00)

— end —

cornerdeep.com