“Canadian/European PharmacyCanadian Healthcare scam – selfsnow.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name selfsnow.com.
aliases
addresses 218.75.144.6
60.191.239.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom selfsnow.com“…

   Domain Name: SELFSNOW.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.WHICHDOLLAR.IN
   Name Server: NS2.WHICHDOLLAR.IN
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: ok
   Updated Date: 21-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

 Last update of whois database: Sun, 12 Jul 2009 17:45:30 UTC <<<

Queried whois.namerich.cn with “selfsnow.com“…

 DomainName : selfsnow.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.WHICHDOLLAR.IN
Name Server......................NS3.BOTHSTART.RU
Name Server......................NS5.CREASEON.PL
Name Server......................NS2.WHICHDOLLAR.IN
Name Server......................NS4.BOTHSTART.RU
Name Server......................NS6.CREASEON.PL
Status...........................ok
Creation  Date ..................2009-06-15
Expiration Date .................2010-06-15
Last Update  Date ...............2009-06-21

Registrant ID ...................V-X-57514-12921
Registrant Name .................ZHANG MING
Registrant Organization .........ZHANG MING
Registrant Address ..............HAIXINGNANLU26
Registrant City..................SZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........215039
Registrant Phone Number .........+86.051269124125
Registrant Fax ..................+86.051269124125
Registrant Email ................sboameh@163.com

Administrative ID ...............V-X-57514-12921
Administrative Name .............ZHANG MING
Administrative Organization .....ZHANG MING
Administrative Address ..........HAIXINGNANLU26
Administrative City..............SZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......215039
Administrative Phone Number .....+86.051269124125
Administrative Fax ..............+86.051269124125
Administrative Email ............sboameh@163.com

Billing ID ......................V-X-57514-12921
Billing Name ....................ZHANG MING
Billing Organization ............ZHANG MING
Billing Address .................HAIXINGNANLU26
Billing City.....................SZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............215039
Billing Phone Number ............+86.051269124125
Billing Fax .....................+86.051269124125
Billing Email ...................sboameh@163.com

Technical ID ....................V-X-57514-12921
Technical Name ..................ZHANG MING
Technical Organization...........ZHANG MING
Technical Address ...............HAIXINGNANLU26
Technical City...................SZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........215039
Technical Phone Number ..........+86.051269124125
Technical Fax ...................+86.051269124125
Technical Email .................sboameh@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
selfsnow.com IN A 218.75.144.6 10800s (03:00:00)
selfsnow.com IN A 60.191.239.150 10800s (03:00:00)
selfsnow.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Domains Listing

SmartFilter Category: Malicious Sites
Make Category Suggestions Namerservers on IP: dns1.nightmodest.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.carryfit.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.duckspruce.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.inchkept.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.loneextol.com
dns3.luckyoxygen.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.overbehind.com
dns3.pamperextra.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.regionthe.com
dns3.relaxrange.com
dns3.ridebought.com
dns3.ropebird.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns4.nightmodest.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns1.112911.org
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.bedplain.com
ns1.bedsing.com
ns1.busyorder.com
ns1.chartflat.in
ns1.deluxecrop.com
ns1.exceptexotic.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.felttwenty.com
ns1.fromview.com
ns1.gonemade.com
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.moralgrand.com
ns1.noticezap.com
ns1.okhalf.com
ns1.pickcool.in

Best-Meds.com – Discounted Canadian Prescription Medications

Qualitynet Or BestMeds.com Rip-off will cash check but does not send order or answer follow-up E-Mails. BEWARE Internet

Qualitynet
Bestmeds.com
Internet,
U.S.A.

Order from this company on-line, gave check information and they cashed check but no order ha arrived or been sent. I have floowed up with 3 E-Mils with no reponse what so ever. But they were quick to cash my check for order.
So, Please be aware and do not fall for their false advertising. wish i had checked them here first, would have saved me some money.
Thanks

Roberta
Boynton Beach, Florida
U.S.A.

Canadian Pharmacy – drivespring.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
75.136.9.179 United States (Dalton)* Whois Google DNSStuff Urgentmessage.org
207.115.36.164 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Fidel Gibson Fri Jul 3 15:37:35 2009
Return-Path: <f_gibson_je@hopwood.ac.uk>
Authentication-Results: mta101.sbc.mail.re3.yahoo.com from=hopwood.ac.uk; domainkeys=neutral (no sig); from=hopwood.ac.uk; dkim=neutral (no sig)
Received: from 75.136.9.179 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta101.sbc.mail.re3.yahoo.com with SMTP; Fri, 03 Jul 2009 15:39:54 -0700
Received: from xfjwjy2 (static.unknown.charter.com [75.136.9.179] (may be forged))
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n63MddZF013409;
Fri, 3 Jul 2009 17:39:53 -0500
Message-ID: <000701c9fc2e$dc8f16f0$d828ea62@hopwood.ac.uk>
Reply-To: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
From: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
To:
Subject: Spice up your performance in bed
Date: Fri, 03 Jul 2009 17:37:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://drivespring.com

Address lookup

canonical name drivespring.com.
aliases
addresses 218.75.144.6
60.191.239.150
124.42.91.162
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom drivespring.com“…

   Domain Name: DRIVESPRING.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

Last update of whois database: Fri, 10 Jul 2009 06:07:35 UTC <<<

Queried whois.namerich.cn with “drivespring.com“…

 DomainName : drivespring.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
drivespring.com IN A 218.75.144.6 10800s (03:00:00)
drivespring.com IN A 124.42.91.162 10800s (03:00:00)
drivespring.com IN A 60.191.239.150 10800s (03:00:00)
drivespring.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Canadian Pharmacy – pridegive.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

An Incredible Canadian Pharmacy is available at your Fingertips!
NoDoctor Needed! Browse our Site Today! -> http://pridegive.com

Address lookup

canonical name pridegive.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150
124.42.91.162

Domain Whois record

Queried whois.internic.net with “dom pridegive.com“…

   Domain Name: PRIDEGIVE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.MIGHTPAGE.COM
   Name Server: NS2.MIGHTPAGE.COM
   Name Server: NS3.LETJEWEL.RU
   Name Server: NS4.LETJEWEL.RU
   Name Server: NS5.LISTGENTLE.COM
   Name Server: NS6.LISTGENTLE.COM
   Status: ok
   Updated Date: 04-jul-2009
   Creation Date: 04-jul-2009
   Expiration Date: 04-jul-2010

Last update of whois database: Fri, 10 Jul 2009 06:03:45 UTC <<<

Queried whois.namerich.cn with “pridegive.com“…

 DomainName : pridegive.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LETJEWEL.RU
Name Server......................NS3.LETJEWEL.RU
Name Server......................NS1.MIGHTPAGE.COM
Name Server......................NS2.MIGHTPAGE.COM
Name Server......................NS5.LISTGENTLE.COM
Name Server......................NS6.LISTGENTLE.COM
Status...........................ok
Creation  Date ..................2009-07-04
Expiration Date .................2010-07-04
Last Update  Date ...............2009-07-04

Registrant ID ...................V-X-58730-14742
Registrant Name .................QIAO GUANGLIANG
Registrant Organization .........QIAO GUANGLIANG
Registrant Address ..............HUANZHUGUANGCHANG31
Registrant City..................CD
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........415063
Registrant Phone Number .........+86.073657561248
Registrant Fax ..................+86.073657561248
Registrant Email ................opjakeg@163.com

Administrative ID ...............V-X-58730-14742
Administrative Name .............QIAO GUANGLIANG
Administrative Organization .....QIAO GUANGLIANG
Administrative Address ..........HUANZHUGUANGCHANG31
Administrative City..............CD
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......415063
Administrative Phone Number .....+86.073657561248
Administrative Fax ..............+86.073657561248
Administrative Email ............opjakeg@163.com

Billing ID ......................V-X-58730-14742
Billing Name ....................QIAO GUANGLIANG
Billing Organization ............QIAO GUANGLIANG
Billing Address .................HUANZHUGUANGCHANG31
Billing City.....................CD
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............415063
Billing Phone Number ............+86.073657561248
Billing Fax .....................+86.073657561248
Billing Email ...................opjakeg@163.com

Technical ID ....................V-X-58730-14742
Technical Name ..................QIAO GUANGLIANG
Technical Organization...........QIAO GUANGLIANG
Technical Address ...............HUANZHUGUANGCHANG31
Technical City...................CD
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........415063
Technical Phone Number ..........+86.073657561248
Technical Fax ...................+86.073657561248
Technical Email .................opjakeg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
pridegive.com IN A 60.191.239.150 10800s (03:00:00)
pridegive.com IN A 203.93.208.86 10800s (03:00:00)
pridegive.com IN A 218.75.144.6 10800s (03:00:00)
pridegive.com IN A 124.42.91.162 10800s (03:00:00)

— end —


Canadian Pharmacy Spam – bluepillusa.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

BluePillusa

Address lookup

canonical name bluepillusa.com.
aliases
addresses 78.159.118.218

Domain Whois record

Queried whois.internic.net with “dom bluepillusa.com“…

   Domain Name: BLUEPILLUSA.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS3.01ISP.COM
   Name Server: NS4.01ISP.NET
   Status: clientTransferProhibited
   Updated Date: 21-oct-2008
   Creation Date: 21-oct-2008
   Expiration Date: 21-oct-2009

>>> Last update of whois database: Mon, 06 Jul 2009 03:04:10 UTC <<<

Queried whois.todaynic.com with “bluepillusa.com“…

Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: bluepillusa.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Alexey M. Arkhipov
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Administrative Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500
Phone: +7.9611327925
Fax: +7.9611327925
Email: arkipal@gmail.com

Technical Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Nameserver Information:
    ns3.01isp.com
    ns4.01isp.net

Create: 2008-10-22 00:20:06
Update: 2008-10-22
Expired: 2009-10-22
QueryTimes: 80

If any of the information above is inaccurate, you must correct it by visiting our website or contact us.
(If your review indicates that all of the information above is accurate, you do not need to take any action.)
Please remember that under the terms of your registration agreement, the provision of false Whois information
can be grounds for cancellation of your domain name registration.
Todaynic.com,Inc. reserves the right to modify these terms at any time.

Network Whois record

Queried whois.ripe.net with “-B 78.159.118.218“…

% Information related to '78.159.118.0 - 78.159.121.255'

inetnum:        78.159.118.0 - 78.159.121.255
netname:        NETDIRECT-NET
descr:          netdirekt e.K.
remarks:        INFRA-AW
country:        DE
admin-c:        WW200-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20080311
source:         RIPE

person:       Wiethold Wagner
address:      netdirekt e. K.
address:      Kleyer Strasse 79 / Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       info@netdirekt.de
nic-hdl:      WW200-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '78.159.96.0/19AS28753'

route:	        78.159.96.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20071011
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
bluepillusa.com IN SOA
server: ns3.01isp.com
email: webmaster.now.net.cn
serial: 2008102210
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 7200
7200s (02:00:00)
bluepillusa.com IN NS ns3.01isp.com 43200s (12:00:00)
bluepillusa.com IN NS ns4.01isp.net 43200s (12:00:00)
bluepillusa.com IN A 78.159.118.218 7200s (02:00:00)
218.118.159.78.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 12345
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN PTR 78-159-118-218.internetserviceteam.com 100000s (1.03:46:40)

— end —

AUTH WHOiS]
[Querying whois.verisign-grs.comhttp://whois.verisign-grs.com]
[whois.verisign-grs.comhttp://whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.nethttp://www.internic.net
for detailed information.

Domain Name: RXMEDS4ALL.COMhttp://RXMEDS4ALL.COM
Registrar: TODAYNIC.COMhttp://TODAYNIC.COM, INC.
Whois Server: whois.todaynic.comhttp://whois.todaynic.com
Referral URL: http://www.NOW.CNhttp://www.NOW.CN
Name Server: NS1.FREEDNS.WShttp://NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WShttp://NS2.FREEDNS.WS
Status: clientTransferProhibited
Updated Date: 26-nov-2008
Creation Date: 13-feb-2008
Expiration Date: 13-feb-2010

>>> Last update of whois database: Sat, 07 Feb 2009 09:50:51 EST

MyNewCanadianPharmacy – www.bulnalei.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

MyNewCanadianPharmacy

Address lookup

canonical name bulnalei.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bulnalei.net IN SOA
server: ns1.bulnalei.net
email: admin.bulnalei.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
bulnalei.net IN NS ns1.bulnalei.net 600s (00:10:00)
bulnalei.net IN NS ns2.bulnalei.net 600s (00:10:00)
bulnalei.net IN MX
preference: 10
exchange: mail.bulnalei.net
600s (00:10:00)
bulnalei.net IN A 212.174.200.111 600s (00:10:00)

— end —

Canadian Pharmacy – Vision Rx – pharmacyvis.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Vision Rx

Address lookup

canonical name pharmacyvis.com.
aliases
addresses 87.117.238.179

Domain Whois record

Queried whois.internic.net with “dom pharmacyvis.com“…

   Domain Name: PHARMACYVIS.COM
   Registrar: NAMESCOUT CORP
   Whois Server: whois.namescout.com
   Referral URL: http://www.namescout.com
   Name Server: NS1.PHARMACYVIS.COM
   Name Server: NS2.PHARMACYVIS.COM
   Status: ok
   Updated Date: 15-dec-2008
   Creation Date: 16-jul-2007
   Expiration Date: 16-jul-2011

Last update of whois database: Sat, 04 Jul 2009 09:19:16 UTC

Queried whois.namescout.com with “pharmacyvis.com“…

Domain: pharmacyvis.com

  Date Registered: 12/15/08
    Date Modified: 12/15/08
      Expiry Date: 07/16/11
      	     DNS1: ns1.pharmacyvis.com
      	     DNS2: ns2.pharmacyvis.com

  Registrant

                   VISION RX LTD
                   VISION RX
                   303 Aarti Chamber
                   Victoria, -- (SC)
                   0000

  Administrative Contact

                   VISION RX
                   VISION RX
                   303 Aarti Chamber
                   Victoria, -- (SC)
                   0000
                   support@rxvis.com
                   +08.5462578

  Technical Contact

                   VISION RX
                   VISION RX
                   303 Aarti Chamber
                   Victoria, -- (SC)
                   0000
                   support@rxvis.com
                   +08.5462578

        Registrar: Namescout.com

Register your domain now at www.Namescout.com

Network Whois record

Queried whois.ripe.net with “-B 87.117.238.179“…

% Information related to '87.117.238.0 - 87.117.238.255'

inetnum:        87.117.238.0 - 87.117.238.255
netname:        EUKHOST-2
descr:          EUKHOST LTD
country:        GB
admin-c:        RK3101-RIPE
tech-c:         RK3101-RIPE
status:         ASSIGNED PA
mnt-by:         RAPIDSWITCH-MNT
changed:        abuse@rapidswitch.com 20070212
source:         RIPE

person:         Robert King
address:        EUKHOST Ltd
address:        24 Clarence Street
address:        Bowburn,
address:        Durham,
address:        DH6 5BB
address:        England, UK
phone:          +44 (0)7753 341080
e-mail:         sales@eukhost.com
nic-hdl:        RK3101-RIPE
changed:        abuse@rapidswitch.com 20061110
mnt-by:         RAPIDSWITCH-MNT
source:         RIPE

% Information related to '87.117.192.0/18AS29131'

route:          87.117.192.0/18
descr:          RapidSwitch Ltd
origin:         AS29131
mnt-by:         RAPIDSWITCH-MNT
changed:        abuse@rapidswitch.com 20051119
source:         RIPE

DNS records

name class type data time to live
pharmacyvis.com IN MX
preference: 0
exchange: pharmacyvis.com
14400s (04:00:00)
pharmacyvis.com IN SOA
server: ns1.pharmacyvis.com
email: dnsadmin.vps5437.webhosting.uk.com
serial: 2009011400
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
pharmacyvis.com IN NS ns1.pharmacyvis.com 86400s (1.00:00:00)
pharmacyvis.com IN NS ns2.pharmacyvis.com 86400s (1.00:00:00)
pharmacyvis.com IN A 87.117.238.179 14400s (04:00:00)
179.238.117.87.in-addr.arpa IN PTR pharmacyvis.com 10800s (03:00:00)

— end —

Rogue Pharmacy Websites – Pharmacy Checker

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):
24hsmeds.com
Amerisur.net
Buyphentermine4u.com
Buypillsonline.biz (“Canadian Pharmacy”)
BuyAmoxilOnline.PillsConcepts.info
Canadapharmacyline.com (“Canadian Pharmacy”)
Canadianmedsworld.com (“Canadian Meds”)
Canadianpharmacyltd.com (“Canadian Pharmacy”)
Cheap-pharmacy.us (“Canadian Health & Care Mail”)
Cod-rx.com
Dragon-rx.com
Eagle-meds.com (“US Drugstore”)
Edfriends.org (“Reliable Meds”)
Getlowdrugs.com (“US Drugstore”)
Gimmepills.com (Canadian Rx Drugs”)
Globalaccessrx.com
Globalrxpharmacy.net
Hyth.us
Lom-5.co.cc
Licensed-Rx.com
Max-pharm.com
Medsranch.com
My-pharm.com
Newcanadianhealthcare.com
Online-the.com/
OvernightMedsDirect.net
Pharmacynorthamerica.com
Pharmtransit.com
Pillzcctop.com (“US HealthCare Inc”)
Qualitygenerics.com
Rx-life.com
Rxpharma24hs.com
Shop.edmedsonline.com (“Canadian Pharmacy”)
Shoprxtoday.com
Thecanadianmeds.com (“Canadian Pharmacy”)
Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)
TrustedMedsMD.com
Us-rx-meds.com
Value-generics.com (“Generic Pharmacy”)
Value-pharm.com
Wholesale-generics.com
Xlpharmacy.com



Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)
Allrxonline.net
ApplyEdPills.info
Atterack.com (“My Canadian Pharmacy”)
Bestedmeds.com (“Canadian Pharmacy”)
Canadianmedsnow.com (“Canadian Pharmacy”)
Canadianpharmdirect.com (“Canadian Pharmacy”)
Canadianpharmacylive.com (“Canadian Family Pharmacy”)
Canapharmstore.com (“Canadian Health Center”)
Cheapviagstarmed.info
Directmedswhere.com (“Canadian Pharmacy”)
Drug-online.org (“Canadian Pharmacy”)
Fit-pharmacy.com
Generic365.com
Getfamilymedicines.com (“Canadian Health & Care Mall”)
Hot-drug.com (“Canadian Rx Drugs”)
Hotgrandpharm.com (“US Drugs”)
Interpill.com
Irontold.com (“Canadian Pharmacy”)
Jusikelsk.com (“US Healthcare, Inc”)
Laicsownsew.com (“World Pharmacy”)
Licensed-meds.com
Mantipu.com_world_drugs.com
Medicaldiscountrx.net
Meds35.com (“My Canadian Pharmacy”)
Medsmaster.com (“Official Medicines”)
Medsworldwidenetwork.com
Miztrust.cn (“My Canadian Pharmacy”)
Nextairsalepharm.com (“Canadian Health & Care Mall”)
Nextbestpharm.com (“My Canadian Pharmacy”)
Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)
Onlinepharmcanada.com (“Official Medicines”)
Ottowadrugs.com (“Canadian Pharmacy”)
Ourglobalpharm.com (“World Pharmacy”)
Pharmasavers.com
Phshuue.com (“U.S. Healthcare, Inc”)
Piromeds.com (“Drug Store”)
Pot-1.co.cc
Pot-7.co.cc
Poispp.com (“My Canadian Pharmacy”)
Premierpharmacy.net
Presidentrx.com
Proovernightpharm.com (“US Drugs”)
Qualitycandianmeds.com (“Canadian Pharmacy”)
Quickeasymed.com
Realairmentablets.com (“US Drugs”)
Rx-pillssshop.com (“Canadian Rx Drugs”)
Rx-toronto.net (“My Canadian Pharmacy”)
Targetpluspharma.com (“Canadian Health Care”)
Topcheappills.com (“Toronto Pharmacy”)
Topratedmedication.com (“Toronto Pharmacy”)
Turkbine.com (“Canadian Healthcare”)
Universallydrugstore.com (“Canadian Pharmacy”)
Viagraorder.org (“Canadian Pharmacy”)
Webdrugs.biz (“Canadian Pharmacy”)
Weekrequire.com (“Canadian Pharmacy”)
Worldshippingmeds.com



PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

  • Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
  • Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
  • Stealing people’s financial information.
  • Charging a consumer’s credit card without ever sending the purchased product (s).
  • Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
  • Selling prescription drugs, whether real or fake, without requiring a prescription.
  • Not responding to a consumer’s email or phone call after they have ordered a product.
  • Providing false contact information.
  • Selling a customer’s personal information to third parties without their consent.
  • Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.



We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS


On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Health & Care Mall – cheap-pharmacy.us

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
                    Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Company information:
Canadian Health & Care Mall United States
cheap-pharmacy.us

I ordered medication online from this ‘alleged’ Canadian pharmacy. They sent me a follow up email saying they received my order. A few days later, they sent another another email saying my order shipped was shipped out that day.

There is no telephone number listed on their website to call, only an email address to write to. When you try to send a message from their website, it says to verify the anti-spam word text in a box next to the text of your message. But, there is no ‘word’. Consequently, their mail system will not accept your message because you have not typed in the anti-spam word.

I located a phone number for them from another source. My first call was unanswered. My second call was answered by an answering machine with a male voice with a very heavy middle-Eastern accent

I did not receive the ordered medication. My numerous emails, requesting shipment details, were never replied to.

This company is nothing but a SCAM – BEWARE!

Hi,The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal money your.The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

You can find his foot prints by searching the following keywords;

  • 210-888-9089 – Canadian Pharmacy
  • 845-709-8044 – Bogus university degree
  • 718-524-2096 – Bogus OEM software
  • support@canadianpharmsupport.com
  • 210 East 59st Street New York,
  • NY 10021

The good news is that this scammer has extreme hatered

cheap-pharmacydotUS

against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency hat if you send a lot of spams to him, he will remove you from his spam databases.

THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!

You will get far less spams!

  • jowens@unifiedmarkets.com
  • owensw@unifiedmarkets.com
  • dmoonfire@unifiedmarkets.com
  • uminfo@unifiedmarkets.com
  • dholden@unifiedmarkets.com

Source: Complaintsboard

Address lookup

canonical name cheap-pharmacy.us.
aliases http://www.cheap-pharmacy.us
addresses 66.29.77.104

Domain Whois record

Queried whois.nic.us with “cheap-pharmacy.us“…

Domain Name: CHEAP-PHARMACY.US
Domain ID: D12110398-US
Sponsoring Registrar: ENOM, INC.
Registrar URL (registration services): whois.enom.com

Domain Status: ok
Registrant ID: 493A5506065
Registrant Name: Calmes Douglass
Registrant Organization: n/a
Registrant Address1: 4209 West Bertona
Registrant City: Seattle
Registrant State/Province: Washington
Registrant Postal Code: 98199
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +7.9023065253
Registrant Email: support@cheap-pharmacy.us
Registrant Application Purpose: P1
Registrant Nexus Category: C11

Administrative Contact ID: 493A5506065
Administrative Contact Name: Calmes Douglass
Administrative Contact Organization: n/a
Administrative Contact Address1: 4209 West Bertona
Administrative Contact City: Seattle
Administrative Contact State/Province: Washington
Administrative Contact Postal Code: 98199
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +7.9023065253
Administrative Contact Email: support@cheap-pharmacy.us
Administrative Application Purpose: P1
Administrative Nexus Category: C11

Billing Contact ID: 493A5506065
Billing Contact Name: Calmes Douglass
Billing Contact Organization: n/a
Billing Contact Address1: 4209 West Bertona
Billing Contact City: Seattle
Billing Contact State/Province: Washington
Billing Contact Postal Code: 98199
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +7.9023065253
Billing Contact Email: support@cheap-pharmacy.us
Billing Application Purpose: P1
Billing Nexus Category: C11

Technical Contact ID: 493A5506065
Technical Contact Name: Calmes Douglass
Technical Contact Organization: n/a
Technical Contact Address1: 4209 West Bertona
Technical Contact City: Seattle
Technical Contact State/Province: Washington
Technical Contact Postal Code: 98199
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +7.9023065253
Technical Contact Email: support@cheap-pharmacy.us
Technical Application Purpose: P1
Technical Nexus Category: C11

Name Server: NS1.CHEAP-PHARMACY.US
Name Server: NS2.CHEAP-PHARMACY.US

Created by Registrar: ESTDOMAINS, INC.
Last Updated by Registrar: ENOM, INC.
Last Transferred Date: Tue Nov 04 16:05:36 GMT 2008
Domain Registration Date: Sun Mar 11 21:03:05 GMT 2007
Domain Expiration Date: Thu Mar 10 23:59:59 GMT 2016
Domain Last Updated Date: Wed Nov 05 01:50:21 GMT 2008

Whois database was last updated on: Fri Jul 03 09:40:07 GMT 2009

Network Whois record

Queried whois.arin.net with “66.29.77.104“…

OrgName: Net Access Corporation
OrgID: NAC
Address: 9 Wing Drive
City: Cedar Knolls
StateProv: NJ
PostalCode: 07927
Country: US

ReferralServer: rwhois://whois.nac.net:43

NetRange: 66.29.0.0 – 66.29.127.255
CIDR: 66.29.0.0/17
OriginAS: AS8001
NetName: NAC-NETBLK07
NetHandle: NET-66-29-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NAC.NET
NameServer: NS2.NAC.NET
Comment: Additional Information Available via whois.nac.net
RegDate: 2005-04-15
Updated: 2007-09-18

RAbuseHandle: ABUSE156-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-800-638-6336
RAbuseEmail: abuse@nac.net

RNOCHandle: NOC270-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-973-590-5050
RNOCEmail: network@nac.net

RTechHandle: ZN77-ARIN
RTechName: Legal Department
RTechPhone: +1-800-638-6336
RTechEmail: legal@nac.net

OrgAbuseHandle: ABUSE156-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-638-6336
OrgAbuseEmail: abuse@nac.net

OrgNOCHandle: NOC270-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-973-590-5050
OrgNOCEmail: network@nac.net

OrgTechHandle: AR97-ARIN
OrgTechName: Rubenstein, Alex
OrgTechPhone: +1-973-590-5101
OrgTechEmail: alex@nac.net

# ARIN WHOIS database, last updated 2009-07-02 20:00

DNS records

name class type data time to live
http://www.cheap-pharmacy.us IN CNAME cheap-pharmacy.us 10289s (02:51:29)
cheap-pharmacy.us IN SOA
server: ns1.cheap-pharmacy.us
email:
serial: 1229273885
refresh: 300
retry: 300
expire: 300
minimum ttl: 300
2560s (00:42:40)
cheap-pharmacy.us IN NS ns1.cheap-pharmacy.us 259200s (3.00:00:00)
cheap-pharmacy.us IN NS ns2.cheap-pharmacy.us 259200s (3.00:00:00)
cheap-pharmacy.us IN MX
preference: 0
exchange: mx1.cheap-pharmacy.us
86400s (1.00:00:00)
cheap-pharmacy.us IN A 66.29.77.104 86400s (1.00:00:00)
104.77.29.66.in-addr.arpa IN SOA
server: ns3.2dayhost.com
email: hostmaster.104.77.29.66.in-addr.arpa
serial: 1246007999
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
2560s (00:42:40)
104.77.29.66.in-addr.arpa IN NS ns3.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns4.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN PTR st-104-77-29-66.2dayhost.com 86400s (1.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns3.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN NS ns4.2dayhost.com 259200s (3.00:00:00)
104.77.29.66.in-addr.arpa IN PTR st-104-77-29-66.2dayhost.com 86400s (1.00:00:00)

— end —

superviagra.us
cialissofttabs.org
ordergenericviagra.org
orderlevitraonline.org
viagrasofttabs.org
allmp3hits.net
fast-mp3-search.net
full-mp3-albums.net
newmp3albums.net
canadianhealthcaremall.net
freshmp3downloads.com
mp3-downloads-forum.com
mp3-skyline.com
http://www.cheap-pharmacy.us/cnstats/index.php?st=log&stm=1246593600&ftm=1246679999

Read More…..

Canadian Pharmacy Spam – dependprefer.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.125 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
61.161.148.135 China (Shenyang)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path:  <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
From: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name dependprefer.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)
Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)
 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
dependprefer.com IN A 203.93.208.86 10800s (03:00:00)
dependprefer.com IN A 222.241.150.146 10800s (03:00:00)
dependprefer.com IN A 61.191.191.241 10800s (03:00:00)
dependprefer.com IN A 218.75.144.6 10800s (03:00:00)
dependprefer.com IN A 119.39.238.2 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – visitslip.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.46 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
211.186.220.30 Korea, Republic of (Seoul)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://visitslip.com

From Kristin B. Jacobs Tue Jun 30 12:07:48 2009
Return-Path: <kristin_b.jacobsks@zip.co.nz>
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=zip.co.nz; domainkeys=neutral (no sig); from=zip.co.nz; dkim=neutral (no sig)
Received: from 207.115.20.46 (EHLO flph263.prodigy.net) (207.115.20.46)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Tue, 30 Jun 2009 03:20:01 -0700
Received: from cmh7fb2 ([211.186.220.30])
by flph263.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5UAJv6O009087;
Tue, 30 Jun 2009 03:19:59 -0700
Message-ID: <000701c9f9b6$0f0093f0$ae8bf302@zip.co.nz>
Reply-To: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
From: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
To:
Subject: Make you wife moan in pleasure!
Date: Tue, 30 Jun 2009 15:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 139

Address lookup

canonical name visitslip.com.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
222.241.150.146

Domain Whois record

Queried whois.internic.net with “dom visitslip.com“…

   Domain Name: VISITSLIP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:19:02 UTC <<<

Queried whois.namerich.cn with “visitslip.com“…

 DomainName : visitslip.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
visitslip.com IN A 119.39.238.2 10800s (03:00:00)
visitslip.com IN A 203.93.208.86 10800s (03:00:00)
visitslip.com IN A 222.241.150.146 10800s (03:00:00)
visitslip.com IN A 61.191.191.241 10800s (03:00:00)
visitslip.com IN A 218.75.144.6 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – magnetaroma.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
202.22.220.7 Japan (Kiryu)* Whois Google DNSStuff Urgentmessage.org
207.115.20.191 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
7.220.22.202 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://magnetaroma.com

From Augustine Chung Mon Jun 29 04:16:55 2009
Return-Path:  <a_chung_jh@charters.com.au>
Authentication-Results: mta165.sbc.mail.mud.yahoo.com from=charters.com.au; domainkeys=neutral (no sig); from=charters.com.au; dkim=neutral (no sig)
Received: from 202.22.220.7 (EHLO flpi189.prodigy.net) (207.115.20.191)
by mta165.sbc.mail.mud.yahoo.com with SMTP; Mon, 29 Jun 2009 04:18:55 -0700
Received: from x687a82 (7.220.22.202.ktv.ne.jp [202.22.220.7])
by flpi189.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5TBHsNa023999;
Mon, 29 Jun 2009 04:18:52 -0700
Message-ID: <000701c9f8ab$1c7f4a50$d828ea62@charters.com.au>
Reply-To: “Augustine Chung”  <a_chung_jh@charters.com.au>
From: “Augustine Chung”   <a_chung_jh@charters.com.au>
To:
Subject: Want great sex? Get..
Date: Mon, 29 Jun 2009 06:16:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

Address lookup

canonical name magnetaroma.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom magnetaroma.com“…

   Domain Name: MAGNETAROMA.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:00:22 UTC <<<

Queried whois.namerich.cn with “magnetaroma.com“…

 DomainName : magnetaroma.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
magnetaroma.com IN A 218.75.144.6 10800s (03:00:00)
magnetaroma.com IN A 119.39.238.2 10800s (03:00:00)
magnetaroma.com IN A 203.93.208.86 10800s (03:00:00)
magnetaroma.com IN A 222.241.150.146 10800s (03:00:00)
magnetaroma.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy Spam – CANADIAN-HEALTHCARE-SHOP.COM

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada


canadian-healtcare-shop

1 (210) 888-9089

Address lookup

canonical name canadian-healthcare-shop.com.
aliases
addresses 195.95.155.11

Domain Whois record

Queried whois.internic.net with “dom canadian-healthcare-shop.com“…

   Domain Name: CANADIAN-HEALTHCARE-SHOP.COM
   Registrar: EURODNS S.A
   Whois Server: whois.eurodns.com
   Referral URL: http://www.eurodns.com
   Name Server: NS1.EURODNS.COM
   Name Server: NS2.EURODNS.COM
   Status: clientTransferProhibited
   Updated Date: 04-feb-2009
   Creation Date: 04-feb-2009
   Expiration Date: 04-feb-2010

>>> Last update of whois database: Thu, 02 Jul 2009 04:48:12 UTC <<<

Queried whois.eurodns.com with “canadian-healthcare-shop.com“…

Domain: canadian-healthcare-shop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Technical Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.11“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 11.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-healthcare-shop.com IN A 195.95.155.11 700s (00:11:40)
canadian-healthcare-shop.com IN MX
preference: 10
exchange: mail.canadian-healthcare-shop.com
3600s (01:00:00)
canadian-healthcare-shop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009051500
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dns1.nightmodest.com
dns4.nightmodest.com
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.againseat.com
ns1.bedplain.com
ns1.busyorder.com
ns1.chartflat.in
ns1.exceptexotic.com
ns1.fabledmaxi.com
ns1.felttwenty.com
ns1.moralgrand.com
ns1.noticezap.com
ns1.pickcool.in
ns1.poundanger.com
ns1.saidcold.com
ns1.sendbusy.com
ns1.skinglad.com
ns1.thosekept.com
ns1.wooddoes.in
ns1.yearbusy.com
ns2.11121.org
ns2.12332.org
ns2.13231.org
ns2.7594.org
ns2.againseat.com
ns2.bedplain.com
ns2.chartflat.in
ns2.expectcoast.com
ns2.felttwenty.com
ns2.fewwhole.com
ns2.heartcorner.in
ns2.linewhich.com
ns2.listwere.com
ns2.noticezap.com
ns2.pickcool.in
ns2.tendereach.com
ns2.thosekept.com
ns2.wooddoes.in
ns2.wouldwealth.com
ns3.9736.org
ns3.againseat.com
ns3.alertglad.ru
ns3.bothstart.ru
ns3.coolpride.ru
ns3.doctorstill.com
ns3.eastoccur.ru
ns3.fabledmaxi.com
ns3.flattry.com
ns3.freshalive.ru
ns3.gladlive.ru
ns3.heavymeek.ru
ns3.listenface.ru
ns3.med22.org
ns3.prettysign.ru
ns3.quietfree.ru
ns3.sendbusy.com
ns3.skinglad.com
ns3.strongoffer.ru
ns3.tendereach.com
ns3.thosekept.com
ns3.tradearrive.com
ns3.tubeold.com
ns3.wouldwealth.com
ns3.yearbusy.com
ns4.12332.org
ns4.13123.org
ns4.7594.org
ns4.9736.org
ns4.againseat.com
ns4.aglowarm.com
ns4.bothstart.ru
ns4.coolpride.ru
ns4.eastoccur.ru
ns4.exceptexotic.com
ns4.expectcoast.com
ns4.fewwhole.com
ns4.freshalive.ru
ns4.gladlive.ru
ns4.listenface.ru
ns4.organcamp.ru
ns4.prettysign.ru
ns4.quietfree.ru
ns4.skinglad.com
ns4.tendereach.com
ns4.thinkspace.ru
ns4.thosekept.com
ns4.tradearrive.com
ns4.truereap.ru
ns4.wouldwealth.com
ns4.yearbusy.com
ns4.youngliquid.com
ns5.blueawake.com
ns5.madeonly.pl
ns5.motionseeker.pl
ns6.wesuch.p

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
80.244.229.67 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
6.5.4.3 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to ScamFraudAlert@gmail.com
date Mon, Jun 29, 2009 at 2:16 AM
subject Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA

Canadian Pharmacy Spam – www.shop29.net aka www.shop75.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

shop75dotnet

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation.  Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by taking those counterfeit drugs.

  1. Bestdrugs.net.cn
  2. Cheap-meds.cn
  3. Cheap-pill.cn
  4. Cheapdrugs.com.cn
  5. Coolagree.cn
  6. Discountpills.cn
  7. Drugsdirectmoral.com
  8. Lovecanadianpower.com
  9. Lowpricepills.cn
  10. Medsbestone.com.cn
  11. Medstoresome.com.cn
  12. Newmedslofty.com
  13. Newpharmthe.com.cn
  14. Pharmacyonlinefound.com
  15. Pharmssitefarm.com.cn
  16. Pillsiteadd.com.cn
  17. Placepharmacygentle.com
  18. Ridestone.com
  19. Siterxmoral.com
  20. Smartdrugtell.com.cn
  21. Storemedburn.com.cn
  22. Thosefuns.com
  23. Topdrugalive.com
  24. Topmedsraise.com
  25. Toppharmlike.com.cn
  26. Toppilldrink.com.cn
  27. Wholesaledrugsand.com.cn
  28. Wholesalepharmsfirst.com
SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com

Address lookup

canonical name www.shop29.net.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom shop29.net“…

   Domain Name: SHOP29.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:16:16 UTC <<<

Queried whois.onlinenic.com with “shop29.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop29.net
Record last updated at 2009-06-22 10:50:33
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Technical Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Billing Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for shop29.net failed: WouldBlock

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop29.net IN A 61.191.191.241 10799s (02:59:59)
http://www.shop29.net IN A 119.39.238.2 10799s (02:59:59)
http://www.shop29.net IN A 203.93.208.86 10799s (02:59:59)
http://www.shop29.net IN A 218.75.144.6 10799s (02:59:59)
http://www.shop29.net IN A 60.191.221.117 10799s (02:59:59)
http://www.shop29.net IN A 60.191.239.153 10799s (02:59:59)
shop29.net IN NS ns6.creaseon.pl 172800s (2.00:00:00)
shop29.net IN NS ns4.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns3.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns5.creaseon.pl 172800s (2.00:00:00)

— end —

Address lookup

canonical name www.shop75.net.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153

Domain Whois record

Queried whois.internic.net with “dom shop75.net“…

   Domain Name: SHOP75.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:18:49 UTC <<<

Queried whois.onlinenic.com with “shop75.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop75.net
Record last updated at 2009-06-22 10:50:38
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop75.net IN A 60.191.239.153 10800s (03:00:00)
http://www.shop75.net IN A 61.191.191.241 10800s (03:00:00)
http://www.shop75.net IN A 119.39.238.2 10800s (03:00:00)
http://www.shop75.net IN A 203.93.208.86 10800s (03:00:00)
http://www.shop75.net IN A 218.75.144.6 10800s (03:00:00)
http://www.shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 61.191.191.241 10800s (03:00:00)
shop75.net IN A 218.75.144.6 10800s (03:00:00)
shop75.net IN A 119.39.238.2 10800s (03:00:00)
shop75.net IN A 203.93.208.86 10800s (03:00:00)
shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 60.191.239.153 10800s (03:00:00)

Canadian Pharmacy – canadianpharmacy-shop.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


canadian pharmacy shop

Address lookup

canonical name canadian-medshop.com.
aliases
addresses 195.95.155.22

Domain Whois record

Queried whois.internic.net with “dom canadian-medshop.com“…

Now, don’t you think giving your personal or credit card information to such ruthless criminals would be sheer madness? You would possibly get some fake product (which in case of pharmaceuticals can endanger your health). But most probably you’d get nothing at all, and they would just rip you off. They couldn’t care less about you
Domain Name: CANADIAN-MEDSHOP.COM
Registrar: EURODNS S.A
Whois Server: whois.eurodns.com
Referral URL: http://www.eurodns.com
Name Server: NS1.EURODNS.COM
Name Server: NS2.EURODNS.COM
Status: clientTransferProhibited
Updated Date: 04-feb-2009
Creation Date: 04-feb-2009
Expiration Date: 04-feb-2010

Last update of whois database: Sat, 27 Jun 2009 23:31:12 UTC
Queried whois.eurodns.com with “canadian-medshop.com

By submitting this query, you agree to abide by the above policy.

Domain: canadian-medshop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Technical Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.22

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 22.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-medshop.com IN A 195.95.155.22 700s (00:11:40)
canadian-medshop.com IN MX
preference: 10
exchange: mail.canadian-medshop.com
3600s (01:00:00)
canadian-medshop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009062000
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-medshop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)
canadian-medshop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)

afsfsd

Address lookup

canonical name canadianpharmacy-shop.com.
aliases http://www.canadianpharmacy-shop.com
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom canadianpharmacy-shop.com“…

   Domain Name: CANADIANPHARMACY-SHOP.COM
   Registrar: EVERYONES INTERNET, LTD. DBA RESELLONE.NET
   Whois Server: whois.resellone.net
   Referral URL: http://www.resellone.net
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jun-2009
   Creation Date: 22-apr-2009
   Expiration Date: 22-apr-2010

Last update of whois database: Sat, 27 Jun 2009 23:39:39 UTC <<<

Queried whois.resellone.net with “canadianpharmacy-shop.com“…

Registrant:
 n/a
 p.o. box 1928
 CHERNIGOV, UA 14000
 UA

 Domain name: CANADIANPHARMACY-SHOP.COM

 Administrative Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614
 Technical Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614

 Registration Service Provider:
    IT-SPEC.COM, info@it-spec.com
    +3.80913018614
    http://it-spec.com
    IT-SPEC.COM - PROFESSIONAL DOMAIN REGISTRATION
    SEND FOR ABUSE: domain-abuse@it-spec.com

 Registrar of Record: Everyones Internet, LLC dba Resellone.net
 Record last updated on 21-Jun-2009.
 Record expires on 22-Apr-2010.
 Record created on 22-Apr-2009.

 Domain servers in listed order:
    NS1.SUSPENDED-DOMAINS.NET
    NS2.SUSPENDED-DOMAINS.NET   

 Domain status: clientTransferProhibited
                clientUpdateProhibited
Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

% Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.canadianpharmacy-shop.com IN CNAME canadianpharmacy-shop.com 60s (00:01:00)
canadianpharmacy-shop.com IN SOA
server: ns1.nscontrol.com
email: root.canadianpharmacy-shop.com
serial: 2007100805
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
canadianpharmacy-shop.com IN NS ns4.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns5.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns2.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns1.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns3.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN A 195.95.155.3 60s (00:01:00)

— end —

Canadian Pharmacy – best-drug.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)


us drugstore

Address lookup

canonical name best-drug.com
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with dom best-drug.com

   Domain Name: BEST-DRUG.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 25-jun-2009
   Creation Date: 24-jun-2009
   Expiration Date: 24-jun-2010

Last update of whois database: Sat, 27 Jun 2009 20:46:56 UTC <<<

Queried whois.enom.com with “best-drug.com“…

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: best-drug.com
Registrant Contact:
   slay slayer
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Administrative Contact:
   slay slayer (sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Technical Contact:
   slay slayer  sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Status: Locked
Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 24 Jun 2009 18:34:09
Expiration date: 24 Jun 2010 18:34:09

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
best-drug.com IN SOA
server: ns1.nscontrol.com
email: root.best-drug.com
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
best-drug.com IN A 195.95.155.3 60s (00:01:00)
best-drug.com IN NS ns4.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns3.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns5.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns1.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns2.nscontrol.com 60s (00:01:00)

Legal Rx Drugs – www.legalrxdrugs.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Legalrxdrugs

Address lookup

canonical name www.legalrxdrugs.com.
aliases
addresses 85.17.189.163

Domain Whois record

Queried whois.internic.net with “dom legalrxdrugs.com“…

   Domain Name: LEGALRXDRUGS.COM
   Registrar: MONIKER ONLINE SERVICES, INC.
   Whois Server: whois.moniker.com
   Referral URL: http://www.moniker.com/whois.html
   Name Server: NS1.SPECIALHOSTING.INFO
   Name Server: NS2.SPECIALHOSTING.INFO
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 26-dec-2008
   Creation Date: 27-nov-2006
   Expiration Date: 27-nov-2009

>>> Last update of whois database: Thu, 25 Jun 2009 13:57:35 UTC <<<

Queried whois.moniker.com with “legalrxdrugs.com“…

Domain Name: LEGALRXDRUGS.COM

Registrant [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US

Administrative Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Billing Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Technical Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Domain servers in listed order:

        NS1.SPECIALHOSTING.INFO
        NS2.SPECIALHOSTING.INFO

        Record created on:        2006-11-27 18:22:00.0
        Database last updated on: 2008-12-26 06:35:00.293
        Domain Expires on:        2009-11-27 18:22:00.0

Network Whois record

Queried whois.ripe.net with “-B 85.17.189.163“…

% Information related to '85.17.189.0 - 85.17.189.255'

inetnum:        85.17.189.0 - 85.17.189.255
netname:        LEASEWEB
descr:          LeaseWeb
descr:          P.O. Box 93054
descr:          1090BB AMSTERDAM
descr:          Netherlands
descr:          www.leaseweb.com
remarks:        Please send email to "abuse@leaseweb.com" for complaints
remarks:        regarding portscans, DoS attacks and spam.
remarks:        INFRA-AW
country:        NL
admin-c:        LSW1-RIPE
tech-c:         LSW1-RIPE
status:         ASSIGNED PA
mnt-by:         OCOM-MNT
changed:        ripe@leaseweb.com 20070809
source:         RIPE

person:         RIP Mean
address:        P.O. Box 93054
address:        1090BB AMSTERDAM
address:        Netherlands
phone:          +31 20 3162880
fax-no:         +31 20 3162890
abuse-mailbox:  abuse@leaseweb.com
e-mail:         ripe@leaseweb.com
nic-hdl:        LSW1-RIPE
notify:         ripe@leaseweb.com
mnt-by:         OCOM-MNT
changed:        ripe@ocom.com 20050607
changed:        ripe@ocom.com 20060215
changed:        ripe@ocom.com 20060608
changed:        ripe@ocom.com 20080603
source:         RIPE

% Information related to '85.17.0.0/16AS16265'

route:          85.17.0.0/16
descr:          LEASEWEB
origin:         AS16265
remarks:        LeaseWeb
mnt-by:         OCOM-MNT
changed:        ripe@ocom.com 20050311
changed:        ripe@ocom.com 20070610
source:         RIPE

DNS records

name class type data time to live
http://www.legalrxdrugs.com IN A 85.17.189.163 14400s (04:00:00)
legalrxdrugs.com IN MX
preference: 10
exchange: mail.legalrxdrugs.com
14400s (04:00:00)
legalrxdrugs.com IN TXT v=spf1 a mx ip4:85.17.189.163 ?all 14400s (04:00:00)
legalrxdrugs.com IN A 85.17.189.163 14400s (04:00:00)
legalrxdrugs.com IN SOA
server: ns1.specialhosting.info
email: root.legalrxdrugs.com
serial: 2008040600
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
legalrxdrugs.com IN NS ns2.specialhosting.info 14400s (04:00:00)
legalrxdrugs.com IN NS ns1.specialhosting.info 14400s (04:00:00)
163.189.17.85.in-addr.arpa IN PTR hosted-by.leaseweb.com 86400s (1.00:00:00)
Domain
mobitube.org
phoneporn.org
dietdeals.net
gmgint.net
hotdrugs.net
myphentermine.net
paintabs.net
sleeptabs.net
yourphentermine.net
masterfibre.net
meds-easy.net
specialhosting.info
drugslive.com
germanycars-direct.com
legalrxdrugs.com
medicationstocks.com
trustpharm.com
unfairclients.com
veritypharma.com
replok.com
online-meds-order.com
acompliaweb.com
medical-and-pharmacy.com
webxanax.com
viagradirectonline.com
medmarketer.com
alpram.com
ruagra.com
meds-trade.com
meds-easy.com
buywmz.com
acompliageneric.com
ozernoe.com
meds-buy.com
sfordela.com

Canadian Pharmacy – www.firmvictor.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
151.95.186.133 Italy (Pignone)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lorena N. Livingston Mon Jun 22 17:26:07 2009
Return-Path: <llivingston_wt@avantgarde.de>
Authentication-Results: mta112.sbc.mail.gq1.yahoo.com from=avantgarde.de; domainkeys=neutral (no sig); from=avantgarde.de; dkim=neutral (no sig)
Received: from 151.95.186.133 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta112.sbc.mail.gq1.yahoo.com with SMTP; Tue, 23 Jun 2009 04:14:27 -0700
Received: from lqdbnh2 ([151.95.186.133])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5NBDbs2029631;
Tue, 23 Jun 2009 04:14:25 -0700
Message-ID: <000701c9f399$334e5fd0$627e2c7a@avantgarde.de>
Reply-To: “Lorena N. Livingston”
From: “Lorena N. Livingston” <llivingston_wt@avantgarde.de>
To: ScamFraudAlert
Subject: Stay Hard and Last Longer in Bed!
Date: Mon, 22 Jun 2009 17:26:07 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 126

From: Lorena N. Livingston <llivingston_wt@avantgarde.de>
To: ScamFraudAlert.com
Sent: Monday, June 22, 2009 5:26:07 PM
Subject: Stay Hard and Last Longer in Bed!

An Incredible Canadian Pharmacy is available at your Fingertips!
No_Doctor_Needed! Click Here -> http://firmvictor.com

This spam brand has the dubious distinction of being the most heavily spammed domain our staff receives.

The “Canadian Pharmacy” titled sites are the most common. They may also be labeled “European Pharmacy” for visitors from IP addresses located outside North America.

Other sites include “PharmSite” and “best online PHARMACY.” They are riddled with identical fraudulent claims.

For simplicity, this entry refers by default to Canadian Pharmacy, but the false claims apply equally to all of these.

The copyright statement in the trailers for “PharmSite” and “best online PHARMACY” actually contains the words Copyright Canadian Pharmacy.

Visitors to these sites are cautioned against placing an unsecure order for any of the products advertised. With so much obvious fraud in the set up of the web site, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant criminals.

See Spamtracker.eu – Canadian Pharmacy

firmvictor

Address lookup

canonical name firmvictor.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom firmvictor.com“…

   Domain Name: FIRMVICTOR.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SOUNDPRIZE.IN
   Name Server: NS2.SOUNDPRIZE.IN
   Name Server: NS3.GROUNDBED.COM
   Name Server: NS4.GROUNDBED.COM
   Name Server: NS5.CHANGESTORY.PL
   Name Server: NS6.CHANGESTORY.PL
   Status: ok
   Updated Date: 18-jun-2009
   Creation Date: 18-jun-2009
   Expiration Date: 18-jun-2010

>>> Last update of whois database: Thu, 25 Jun 2009 07:36:37 UTC <<<

Queried whois.namerich.cn with “firmvictor.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : firmvictor.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.SOUNDPRIZE.IN
Name Server......................NS6.CHANGESTORY.PL
Name Server......................NS4.GROUNDBED.COM
Name Server......................NS5.CHANGESTORY.PL
Name Server......................NS1.SOUNDPRIZE.IN
Name Server......................NS3.GROUNDBED.COM
Status...........................ok
Creation  Date ..................2009-06-18
Expiration Date .................2010-06-18
Last Update  Date ...............2009-06-18

Registrant ID ...................V-X-57697-13132
Registrant Name .................GU FEI
Registrant Organization .........GU FEI
Registrant Address ..............FUZHOUGUANGCHANG29
Registrant City..................FZ
Registrant Province/State .......FJ
Registrant Country Code .........CN
Registrant Postal Code ..........350019
Registrant Phone Number .........+86.059175695124
Registrant Fax ..................+86.059175695124
Registrant Email ................baijakdfe@yeah.net

Administrative ID ...............V-X-57697-13132
Administrative Name .............GU FEI
Administrative Organization .....GU FEI
Administrative Address ..........FUZHOUGUANGCHANG29
Administrative City..............FZ
Administrative Province/State ...FJ
Administrative Country Code .....CN
Administrative Postal Code ......350019
Administrative Phone Number .....+86.059175695124
Administrative Fax ..............+86.059175695124
Administrative Email ............baijakdfe@yeah.net

Billing ID ......................V-X-57697-13132
Billing Name ....................GU FEI
Billing Organization ............GU FEI
Billing Address .................FUZHOUGUANGCHANG29
Billing City.....................FZ
Billing Province/State ..........FJ
Billing Country Code ............CN
Billing Postal Code .............350019
Billing Phone Number ............+86.059175695124
Billing Fax .....................+86.059175695124
Billing Email ...................baijakdfe@yeah.net

Technical ID ....................V-X-57697-13132
Technical Name ..................GU FEI
Technical Organization...........GU FEI
Technical Address ...............FUZHOUGUANGCHANG29
Technical City...................FZ
Technical Province/State.........FJ
Technical Country Code ..........CN
Technical Postal Code ...........350019
Technical Phone Number ..........+86.059175695124
Technical Fax ...................+86.059175695124
Technical Email .................baijakdfe@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
firmvictor.com IN A 218.75.144.6 10800s (03:00:00)
firmvictor.com IN A 119.39.238.2 10800s (03:00:00)
firmvictor.com IN A 203.93.208.86 10800s (03:00:00)
firmvictor.com IN A 60.191.221.117 10800s (03:00:00)
firmvictor.com IN A 60.191.239.153 10800s (03:00:00)
firmvictor.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy – Rx Partners – www.rx-partner.biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


rx-partners

rxpartner-sign in

Canadian Pharmacy Spamming Operation

Address lookup

canonical name rx-partners.biz.
aliases
addresses 91.199.112.18
Domain Whois record

Queried whois.biz with “rx-partners.biz”…

Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok

Registrant ID: 550770560-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: 2nd Floor
Registrant State/Province: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Facsimile Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Billing Contact Address2: 241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2: 241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Wed Jan 21 15:12:51 GMT 2009
Registrar Fields
—————-
IDNLang: de

Whois database was last updated on: Sat May 02 15:29:14 GMT 2009
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.18″…
Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for rx-partners.biz failed: MessageTruncated

DNS query for 18.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rx-partners.biz IN TXT v=spf1 +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN TXT spf2.0/pra +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006617085
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rx-partners.biz IN NS ns1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS ns0.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip3.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip2.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN A 91.199.112.18 1200s (00:20:00)
rx-partners.biz IN MX
preference: 10
exchange: mail.rx-partners.biz 1200s

Domain

  1. ed-solution.com
  2. ed-sup.com
  3. edselection.com
  4. manfriendly.com
  5. partners-dns.com
  6. perfectgenerics.com
  7. propeciahair.com
  8. rxtrusted.com
  9. secureccpay.com
  10. somaextreme.com
  11. trustedtablets.com
  12. trustedtabs.com
  13. ultimatepillstore.com
  14. viagracomparison.com
  15. 4drugs.com
  16. paid4meds.com
  17. paid4med.com
  18. paid4pill.com
  19. paid4pills.com
  20. paid4tabs.com
  21. rx-partners.biz
  22. rxpbill.biz
  23. rxpcash.biz
  24. rxpcheck.biz
  25. rxppay.biz
  26. tabzcash.biz
  27. pillzcash.biz
  28. pillzcheck.biz
  29. pillzmeds.biz
  30. tabpaid.biz
  31. pay4meds.biz
  32. pay4medz.biz
  33. pay4pill.biz
  34. pay4tabs.biz
  35. pay4tabz.biz
  36. pay4med.biz
  37. pay4medc.biz
  38. pay4pillz.biz
  39. paid4meds.biz
  40. ed-sup.com
    edselection.com
    manfriendly.com
    omhca.com
    partners-dns.com
    perfectgenerics.com
    prescriptionspoint.com
    propeciahair.com
    rxtrusted.com
    secureccpay.com
  • 83.149.69.46
  • 83.149.69.47
  • 83.149.82.186
  • 91.199.112.7
  • 91.199.112.8

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus