Canadian Pharmacy Spam – pharmacyplacebetter.com

October 2, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

www.storepharmsglad.com
www.perfectpharmdraw.com
www.pharmacyplacebetter.com
www.pharmplacesong.com
www.storemedicaltime.com

canonical name	pharmacyplacebetter.com.
aliases
addresses	61.191.63.150

Domain Whois record

Queried whois.internic.net with “dom pharmacyplacebetter.com“…

   Domain Name: PHARMACYPLACEBETTER.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.PHARMACYPLACEBETTER.COM
   Name Server: NS2.PHARMACYPLACEBETTER.COM
   Status: clientTransferProhibited
   Updated Date: 26-sep-2009
   Creation Date: 25-sep-2009
   Expiration Date: 25-sep-2010

>>> Last update of whois database: Fri, 02 Oct 2009 10:40:42 UTC <<<

Queried whois.dns.com.cn with “pharmacyplacebetter.com“…

Domain Name.......... pharmacyplacebetter.com
  Creation Date........ 2009-09-25 23:12:35
  Registration Date.... 2009-09-25 23:12:35
  Expiry Date.......... 2010-09-25 23:12:35
  Organisation Name.... li wen ge
  Organisation Address. Fujian prosdce,Xiamen City
  Organisation Address.
  Organisation Address. jingmen
  Organisation Address. 457000
  Organisation Address. BJ
  Organisation Address. CN

Admin Name........... liuwen ge
  Admin Address........ Fujian prosdce,Xiamen City
  Admin Address........
  Admin Address........ jingmen
  Admin Address........ 457000
  Admin Address........ BJ
  Admin Address........ CN
  Admin Email.......... lihongli008@163.com
  Admin Phone.......... +86.7178647512-0
  Admin Fax............ +86.7178647512

Tech Name............ lu chuan
  Tech Address......... guangzhou
  Tech Address.........
  Tech Address......... Guangzhou
  Tech Address......... 510660
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... 350286@qq.com
  Tech Phone........... +86.2033199123
  Tech Fax............. +86.2033199123

Bill Name............ lu chuan
  Bill Address......... guangzhou
  Bill Address.........
  Bill Address......... Guangzhou
  Bill Address......... 510660
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... 350286@qq.com
  Bill Phone........... +86.2033199123
  Bill Fax............. +86.2033199123
  Name Server.......... ns2.pharmacyplacebetter.com
  Name Server.......... ns1.pharmacyplacebetter.com

Network Whois record

Queried whois.apnic.net with “61.191.63.150“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 150.63.191.61.in-addr.arpa failed: WouldBlock

name	class	type	data	time to live
pharmacyplacebetter.com	IN	A	61.191.63.150	3600s	(01:00:00)

— end —

Canadian Pharmacy Spam – discountedxxxmegastore.com

October 2, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

canonical name	discountedxxxmegastore.com.
aliases
addresses	66.223.17.119

Domain Whois record

Queried whois.internic.net with “dom discountedxxxmegastore.com“…

   Domain Name: DISCOUNTEDXXXMEGASTORE.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS55.DOMAINCONTROL.COM
   Name Server: NS56.DOMAINCONTROL.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 01-oct-2009
   Creation Date: 01-oct-2009
   Expiration Date: 01-oct-2010

>>> Last update of whois database: Fri, 02 Oct 2009 10:25:22 UTC <<<

Queried whois.godaddy.com with “discountedxxxmegastore.com“…

Registrant:
   Domains by Proxy, Inc.
   DomainsByProxy.com
   15111 N. Hayden Rd., Ste 160, PMB 353
   Scottsdale, Arizona 85260
   United States

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: DISCOUNTEDXXXMEGASTORE.COM
      Created on: 30-Sep-09
      Expires on: 30-Sep-10
      Last Updated on: 30-Sep-09

   Administrative Contact:
      Private, Registration  DISCOUNTEDXXXMEGASTORE.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Technical Contact:
      Private, Registration  DISCOUNTEDXXXMEGASTORE.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Domain servers in listed order:
      NS55.DOMAINCONTROL.COM
      NS56.DOMAINCONTROL.COM

Network Whois record

Queried whois.arin.net with “66.223.17.119“…

OrgName:    Peer 1 Dedicated Hosting 
OrgID:      P1DH-1
Address:    101 Marietta Street
Address:    Suite 500
City:       Atlanta
StateProv:  GA
PostalCode: 30303
Country:    US

NetRange:   66.223.0.0 - 66.223.127.255 
CIDR:       66.223.0.0/17 
OriginAS:   AS11305
NetName:    66-223-0-0-NET
NetHandle:  NET-66-223-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.PEER1.NET
NameServer: NS2.PEER1.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2002-01-25
Updated:    2008-08-01

RTechHandle: DCOPE2-ARIN
RTechName:   DC Operations 
RTechPhone:  +1-678-365-2835
RTechEmail:  dhswip@peer1.com 

OrgTechHandle: DCOPE2-ARIN
OrgTechName:   DC Operations 
OrgTechPhone:  +1-678-365-2835
OrgTechEmail:  dhswip@peer1.com

# ARIN WHOIS database, last updated 2009-10-01 20:00

DNS records

name

class

type

data

time to live

discountedxxxmegastore.com

SOA

server:	ns55.domaincontrol.com
email:	dns.jomax.net
serial:	2009093000
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	86400

86400s

(1.00:00:00)

discountedxxxmegastore.com

66.223.17.119

3600s

(01:00:00)

discountedxxxmegastore.com

ns55.domaincontrol.com

3600s

(01:00:00)

discountedxxxmegastore.com

ns56.domaincontrol.com

3600s

(01:00:00)

discountedxxxmegastore.com

preference:	0
exchange:	smtp.secureserver.net

3600s

(01:00:00)

discountedxxxmegastore.com

preference:	10
exchange:	mailstore1.secureserver.net

3600s

(01:00:00)

119.17.223.66.in-addr.arpa

PTR

baconsteaksinvestments.com

1800s

(00:30:00)

— end —

Canadian Pharmacy Spam – newrx4champions.com

September 30, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Rx-Medications Online!
Browse Our Selection Today! -> http://newrx4champions.com

Address lookup

canonical name	newrx4champions.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom newrx4champions.com“…

   Domain Name: NEWRX4CHAMPIONS.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.BIDOKODJU.COM
   Name Server: NS4.BIDOKODJU.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Wed, 30 Sep 2009 20:07:11 UTC

Queried whois.namerich.cn with “newrx4champions.com“…

 DomainName : newrx4champions.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS4.BIDOKODJU.COM
Name Server......................NS6.HOSTLIFE45.COM
Name Server......................NS3.BIDOKODJU.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-23

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
newrx4champions.com	IN	A	60.12.166.154	54s	(00:00:54)

— end —

Canadian Pharmacy Spam – beatingallcompetition.com

September 28, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.167 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
119.17.17.167 Korea, Republic of (Taegu)* Whois Google DNSStuff Urgentmessage.org
207.115.20.132 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address
Here is the text you submitted, with the IP addresses highlighted:

Order All your_Favorite_Rx-Medications_Online!
Browse Our Selecton Today! -> http://beatingallcompetition.com

Address lookup

canonical name	beatingallcompetition.com.	aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom beatingallcompetition.com“…

Domain Name: BEATINGALLCOMPETITION.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 24-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

Last update of whois database: Mon, 28 Sep 2009 15:44:17 UTC

Queried whois.namerich.cn with “beatingallcompetition.com“…

DomainName : beatingallcompetition.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS5.HOSTLIFE45.COM
Name Server………………….NS1.UBR34NS.COM
Name Server………………….NS2.UBR34NS.COM
Name Server………………….NS4.BIDOKODJU.COM
Name Server………………….NS6.HOSTLIFE45.COM
Name Server………………….NS3.BIDOKODJU.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-09-16
Expiration Date ……………..2010-09-16
Last Update Date ……………2009-09-25

Registrant ID ……………….V-X-58522-14215
Registrant Name ……………..ZHANG WENQI
Registrant Organization ………ZHANG WENQI
Registrant Address …………..JIAOTONGLU16
Registrant City………………DL
Registrant Province/State …….LN
Registrant Country Code ………CN
Registrant Postal Code ……….116049
Registrant Phone Number ………+86.041128805621
Registrant Fax ………………+86.041128805621
Registrant Email …………….kaokga@126.com

Administrative ID ……………V-X-58522-14215
Administrative Name ………….ZHANG WENQI
Administrative Organization …..ZHANG WENQI
Administrative Address ……….JIAOTONGLU16
Administrative City…………..DL
Administrative Province/State …LN
Administrative Country Code …..CN
Administrative Postal Code ……116049
Administrative Phone Number …..+86.041128805621
Administrative Fax …………..+86.041128805621
Administrative Email …………kaokga@126.com

Billing ID ………………….V-X-58522-14215
Billing Name ………………..ZHANG WENQI
Billing Organization …………ZHANG WENQI
Billing Address ……………..JIAOTONGLU16
Billing City…………………DL
Billing Province/State ……….LN
Billing Country Code …………CN
Billing Postal Code ………….116049
Billing Phone Number …………+86.041128805621
Billing Fax …………………+86.041128805621
Billing Email ……………….kaokga@126.com

Technical ID ………………..V-X-58522-14215
Technical Name ………………ZHANG WENQI
Technical Organization………..ZHANG WENQI
Technical Address ……………JIAOTONGLU16
Technical City……………….DL
Technical Province/State………LN
Technical Country Code ……….CN
Technical Postal Code ………..116049
Technical Phone Number ……….+86.041128805621
Technical Fax ……………….+86.041128805621
Technical Email ……………..kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for beatingallcompetition.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

SmartFilter Category:	Spam URLs Make Category Suggestions
Namerservers on IP:	ns1.actcticns.com ns1.fa6ns.com ns1.mic4ns.com ns1.nr9ns.com ns1.ubr34ns.com ns2.actcticns.com ns2.fa6ns.com ns2.lightingdnsflash.com ns2.mic4ns.com ns2.nr9ns.com ns2.sechost888.com ns3.briilovens.com ns3.constress.com ns3.drlsdro.com ns3.gt6ns.com ns3.mic4ns.com ns3.nr9ns.com ns4.bg8ns.com ns4.briilovens.com ns4.constress.com

Canadian Spam Site – incrediblerx4u.com

September 26, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.168 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
66.49.180.230 Canada (Mississauga)* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address
Here is the text you submitted, with the IP addresses highlighted:

From Antonia H. Minor Sat Sep 26 10:24:55 2009
X-Apparently-To: Sat, 26 Sep 2009 17:25:01 -0700
Return-Path:
X-YahooFilteredBulk: 66.49.180.230
X-YMailISG: 0ilVpQsWLDvNKcmSLeRHlqpK8I.AacGWTXo8XsRqbSm8hHGywSr8T2SqDSZsSaZTTM.DBR5B2HhuMOi8wIYdBHr3btPG5TDvYJnCPWcg04iKMcYsDc3_V8fQS.XwcsPXv4jeLCvsXSKHwUrj3YIIkZWeFn11W343dx6qhOgCO2DYhzbrbMNm7ajfBpvXqvB9ITvdJ0az5RIgncjz58hLQRn6PnTHrugz1jU._4L6uSIPDTprLzNTuCOvzlFbRa0ApXqjMjcrJpQrxgiXhbv1aad7PuJKZPKjpYFWyp_Edd3E
X-Originating-IP: [66.49.180.230]
Authentication-Results: mta117.sbc.mail.gq1.yahoo.com from=iff.fhg.de; domainkeys=neutral (no sig); from=iff.fhg.de; dkim=neutral (no sig)
Received: from 66.49.180.230 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta117.sbc.mail.gq1.yahoo.com with SMTP; Sat, 26 Sep 2009 17:25:01 -0700
X-Originating-IP: [66.49.180.230]
Received: from jbm4o71 (powrtube.com [66.49.180.230] (may be forged))
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8R0OA5M026351;
Sat, 26 Sep 2009 17:24:58 -0700
Message-ID: <000701ca3ece$43c3a200$627e09ca@iff.fhg.de>
Reply-To: “Antonia H. Minor” <antoniaminorjf@iff.fhg.de>
From: “Antonia H. Minor” <antoniaminorjf@iff.fhg.de>
To: ,
Subject: Rxmed Refill?
Date: Sat, 26 Sep 2009 10:24:55 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 106

Order_all your Favorite_RxMedications_Online!
Browse Our Website Today! -> http://incrediblerx4u.com

Address lookup

lookup failed incrediblerx4u.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom incrediblerx4u.com”…

Domain Name: INCREDIBLERX4U.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

Last update of whois database: Sun, 27 Sep 2009 02:33:25 UTC
DomainName : incrediblerx4u.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Don’t have an IP address for which to get a record

DNS records

DNS query for incrediblerx4u.com failed: WouldBlock

No records to display

— end —

Canadian Pharmacy Spam – allthebestatyourfingertips.com

September 25, 2009Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.168	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
216.100.91.6	United States (Orange)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.18	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

O0rder all your Favorite_Medications 0nline!
Browse Our Selection Today! -> http://allthebestatyourfingertips.com

From Ronda Morris Fri Sep 25 03:12:24 2009
X-Apparently- Fri, 25 Sep 2009 10:12:31 -0700
Return-Path: <rondamorris_yd@resmed.com.au>
X-YahooFilteredBulk: 216.100.91.6
X-YMailISG: ZVkpBtYWLDus6bK24BEw6wDy_AzUhvchxxHMuHz21VQUqtGfsANfuLs.2DrfYv8SQ_.OW0gp2CS2_DQktjA5dCJib.x99JuqYcpWnJdFhd6qmHUcY66BcQhLyycD2L7VfG_5KYUTHkjblhzFg3bIuYGfCDe9N0PsK18E7ZWY9OWUj36o.eLTkiGEmG7KDBtMJVaJDc4gIu_61lL1_ruYoay2WWX4aDE8enWF0Pr6Kis68CfceTNFahxRmJZVPTVd2.WVj9NsyQj3yNiaEaz4t8whmFSMGNqJ92rNfIom9qKMCQmzKLkEZn.g4Al_91376LnsQAfZTaYhIBWG2E3G
X-Originating-IP: [216.100.91.6]
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=resmed.com.au; domainkeys=neutral (no sig); from=resmed.com.au; dkim=neutral (no sig)
Received: from 216.100.91.6 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Fri, 25 Sep 2009 10:12:31 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[216.100.91.6]
X-Originating-IP: [216.100.91.6]
Received: from jwu8wm2 ([216.100.91.6])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8PHAsnV003600;
Fri, 25 Sep 2009 10:12:27 -0700
Message-ID: <000701ca3dc8$ad9272d0$627e09ca@resmed.com.au>
Reply-To: “Ronda Morris” <rondamorris_yd@resmed.com.au>
From: “Ronda Morris” <rondamorris_yd@resmed.com.au>
To: ,
Subject: Get RxMed without a Doctor online!
Date: Fri, 25 Sep 2009 03:12:24 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 118

Address lookup

canonical name allthebestatyourfingertips.com.
aliases
addresses 60.12.166.154
Domain Whois record

Queried whois.internic.net with “dom allthebestatyourfingertips.com”…

Domain Name: ALLTHEBESTATYOURFINGERTIPS.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

>>> Last update of whois database: Fri, 25 Sep 2009 21:54:58 UTC <<<
Queried whois.namerich.cn with “allthebestatyourfingertips.com”…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

DomainName : allthebestatyourfingertips.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Queried whois.apnic.net with “60.12.166.154”…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC
DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
allthebestatyourfingertips.com IN A 60.12.166.154 162s (00:02:42)
— end —

Canadian Pharmacy Spam – championrxsource.com

September 24, 20092 Comments

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

From Janell Good Thu Sep 24 05:02:19 2009
X-Apparently- Wed, 23 Sep 2009 21:01:27 -0700
Return-Path:
X-YahooFilteredBulk: 188.186.145.158
X-YMailISG: 9lV5WXMWLDsi3aWaiPBYRtkFvS1sPClB1rxe3blVbgpuMDwIUj1HdCQSoaHPflxVmq9crV5clAcY.3mSt.M1lWJQ8tmtw9iJ2Rzi3B3uov5rOpTYTQ01HhOaxtRljn3RG4V7hOP0swbZuiNyzeQxqiNFCLxsWbnbxdJr3UsX_FiQx6k209FY6w6kdfha
X-Originating-IP: [188.186.145.158]
Authentication-Results: mta105.sbc.mail.gq1.yahoo.com from=uni-duisburg.de; domainkeys=neutral (no sig); from=uni-duisburg.de; dkim=neutral (no sig)
Received: from 188.186.145.158 (EHLO flpd121.prodigy.net) (207.115.20.131)
by mta105.sbc.mail.gq1.yahoo.com with SMTP; Wed, 23 Sep 2009 21:01:26 -0700
X-Header-Overseas: Mail.from.Overseas.source.188.186.145.158
X-Originating-IP: [188.186.145.158]
Received: from zmexsw3 (net145.186.188-158.dynamic.omskdom.ru [188.186.145.158])
by flpd121.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8O40Z6d011560;
Wed, 23 Sep 2009 21:01:19 -0700
Message-ID: <000701ca3d0e$ddba21c0$627e18e2@uni-duisburg.de>
Reply-To: “Janell Good” <janell_goodqe@uni-duisburg.de>
From: “Janell Good” <janell_goodqe@uni-duisburg.de>
To:
Subject: Order Any Drug With NoPRESCRIPTION Needed!
Date: Thu, 24 Sep 2009 05:02:19 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 108

Order all your Favorite Medications Online!
Browse 0ur Selection Today! -> http://championrxsource.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.166	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
188.186.145.158	Russian Federation (Perm)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.131	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Address lookup

canonical name	championrxsource.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom championrxsource.com“…

Domain Name: CHAMPIONRXSOURCE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

Last update of whois database: Thu, 24 Sep 2009 15:47:52 UTC

Queried whois.namerich.cn with “championrxsource.com“…

DomainName : championrxsource.com
RSP: China Springboard Inc.
URL: http://www.namerich.cn

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

DNS records

DNS query for championrxsource.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

Traceroute

Tracing route to championrxsource.com [60.12.166.154]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.5

po101.dsr02.dllstx5.theplanet.com

70.85.127.109

po52.dsr02.dllstx3.theplanet.com

70.87.253.25

et3-2.ibr04.dllstx3.theplanet.com

12.87.41.149

12.122.138.118

cr2.dlstx.ip.att.net

12.122.28.178

cr2.la2ca.ip.att.net

12.122.31.134

cr2.sffca.ip.att.net

12.122.136.169

209

12.88.147.14

217

219.158.29.213

253

252

253

219.158.5.113

264

263

264

219.158.12.42

260

259

221.12.82.106

270

272

281

221.12.82.78

Trace aborted

Canadian Pharmacy Spam – Rx-Medications 0nline – rxsourceforwinners.com

September 23, 2009Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

0rder all your Favorite Rx-Medications0nline!
N0DoctorNeeded!
Browse 0ur Website Today! –> http://rxsourceforwinners.com

Address lookup

canonical name	rxsourceforwinners.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom rxsourceforwinners.com”…
Domain Name: RXSOURCEFORWINNERS.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

>>> Last update of whois database: Wed, 23 Sep 2009 16:23:38 UTC
Queried whois.namerich.cn with “rxsourceforwinners.com”…
DomainName : rxsourceforwinners.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154”…
inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

DNS records

DNS query for rxsourceforwinners.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – choosefr0mthebest.com

September 20, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order all your Favorite Rx-MedicationsOnline! NODoctorNeeded!

Browse Our Website Today! –> http://choosefr0mthebest.com

Address lookup

canonical name	choosefr0mthebest.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom choosefr0mthebest.com“…

   Domain Name: CHOOSEFR0MTHEBEST.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 20-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

>>> Last update of whois database: Mon, 21 Sep 2009 03:08:18 UTC <<<

Queried whois.namerich.cn with “choosefr0mthebest.com“…

 DomainName : choosefr0mthebest.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-21

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

choosefr0mthebest.com

SOA

server:	ns.choosefr0mthebest.com
email:	admin.choosefr0mthebest.com
serial:	2009091601
refresh:	300
retry:	300
expire:	14400
minimum ttl:	300

300s

(00:05:00)

choosefr0mthebest.com

60.12.166.154

300s

(00:05:00)

— end —

Canadian HealthCare Spam – www.chickace.com

September 20, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

An Incredible CanadianPharmacy is available at your_Fingertips!
NODoctorNeeded!
Browse our Selection Today! -> http://chickace.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.171 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.204.135.90 Puerto Rico* Whois Google DNSStuff Urgentmessage.org
207.115.36.93 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Ray Street Mon Sep 21 01:16:43 2009
X-Apparently- Sun, 20 Sep 2009 17:16:14 -0700
Return-Path:
X-YahooFilteredBulk: 207.204.135.90
X-YMailISG: 4bTbQVAWLDt3L7DHtkSfRqY7wcZyenIOTkXxFB6HvlklL4wSmD7zYrCLKxXHpH
6yIm3pzbtjjnNMXc_2S00oMsmoGRaxjand3D2AaLNN.N5WX.uzSJuxVg2meYb3qWwd
VGnre4HzOOnaUp5t3WlDQquJZkXJ9npQKdk9DiY4UgwAOx.lN4t.IH8av4y1Kw_fZMXqcPlBKj5
OScYV.kNxiPdqLpbTRaR0jqBCfG_O
X-Originating-IP: [207.204.135.90]
Authentication-Results: mta104.sbc.mail.re2.yahoo.com from=zoltar.dk; domainkeys=neutral (no sig); from=zoltar.dk; dkim=neutral (no sig)
Received: from 207.115.36.93 (EHLO nlpi077.prodigy.net) (207.115.36.93)
by mta104.sbc.mail.re2.yahoo.com with SMTP; Sun, 20 Sep 2009 17:16:14 -0700
X-Originating-IP: [207.204.135.90]
Received: from 29geuy3 (adsl-207-204-135-90.prtc.net [207.204.135.90])
by nlpi077.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8L0FtXi019049;
Sun, 20 Sep 2009 19:16:08 -0500
Message-ID: <000701ca3a93$da7eb160$627e1892@zoltar.dk>
Reply-To: “Ray Street”
From: “Ray Street”
To: ,
Subject: Exclusvie Pharmacy Offers!
Date: Mon, 21 Sep 2009 04:16:43 -0400

Address lookup

canonical name chickace.com.
aliases
addresses 220.196.59.35
91.213.33.11
203.93.208.86
211.95.79.70
Domain Whois record

Queried whois.internic.net with “dom chickace.com”…

Domain Name: CHICKACE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.BREEZYLONG.COM
Name Server: NS2.BREEZYLONG.COM
Name Server: NS3.ADVOCACYDISTANT.COM
Name Server: NS4.ADVOCACYDISTANT.COM
Name Server: NS5.6OC.RU
Name Server: NS6.6OC.RU
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 17-sep-2009
Creation Date: 17-sep-2009
Expiration Date: 17-sep-2010

Last update of whois database: Mon, 21 Sep 2009 02:50:54 UTC
Queried whois.namerich.cn with “chickace.com”…

DomainName : chickace.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS5.6OC.RU
Name Server………………….NS6.6OC.RU
Name Server………………….NS1.BREEZYLONG.COM
Name Server………………….NS4.ADVOCACYDISTANT.COM
Name Server………………….NS3.ADVOCACYDISTANT.COM
Name Server………………….NS2.BREEZYLONG.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-09-17
Expiration Date ……………..2010-09-17
Last Update Date ……………2009-09-17

Registrant ID ……………….V-X-58856-14893
Registrant Name ……………..QIAN ANXING
Registrant Organization ………QIAN ANXING
Registrant Address …………..DONGSHANLU67
Registrant City………………HZ
Registrant Province/State …….ZJ
Registrant Country Code ………CN
Registrant Postal Code ……….310067
Registrant Phone Number ………+86.057182421519
Registrant Fax ………………+86.057182421519
Registrant Email …………….jiakeng@yeah.net

Administrative ID ……………V-X-58856-14893
Administrative Name ………….QIAN ANXING
Administrative Organization …..QIAN ANXING
Administrative Address ……….DONGSHANLU67
Administrative City…………..HZ
Administrative Province/State …ZJ
Administrative Country Code …..CN
Administrative Postal Code ……310067
Administrative Phone Number …..+86.057182421519
Administrative Fax …………..+86.057182421519
Administrative Email …………jiakeng@yeah.net

Billing ID ………………….V-X-58856-14893
Billing Name ………………..QIAN ANXING
Billing Organization …………QIAN ANXING
Billing Address ……………..DONGSHANLU67
Billing City…………………HZ
Billing Province/State ……….ZJ
Billing Country Code …………CN
Billing Postal Code ………….310067
Billing Phone Number …………+86.057182421519
Billing Fax …………………+86.057182421519
Billing Email ……………….jiakeng@yeah.net

Technical ID ………………..V-X-58856-14893
Technical Name ………………QIAN ANXING
Technical Organization………..QIAN ANXING
Technical Address ……………DONGSHANLU67
Technical City……………….HZ
Technical Province/State………ZJ
Technical Country Code ……….CN
Technical Postal Code ………..310067
Technical Phone Number ……….+86.057182421519
Technical Fax ……………….+86.057182421519
Technical Email ……………..jiakeng@yeah.net

; Please register your domains at
; http://www.namerich.cn
Network Whois record

Queried whois.apnic.net with “220.196.59.35”…

inetnum: 220.192.0.0 – 220.207.255.255
netname: UNICOM
descr: China United Network Communications Corporation Limited
descr: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
admin-c: XZ67-AP
tech-c: XZ67-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20090424
source: APNIC

person: Xiaomin Zhou
address: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
country: CN
phone: +86-10-66259626
fax-no: +86-10-66259626
e-mail: zhouxm@chinaunicom.cn
nic-hdl: XZ67-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090617
source: APNIC

inetnum: 220.192.0.0 – 220.207.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
admin-c: JY7-CN
tech-c: JY7-CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-UNICOM
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20071010
source: CNNIC

person: Jin Yang
nic-hdl: JY7-CN
e-mail: ip_address@chinaunicom.com.cn
address: No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone: +86-10-66505588
fax-no: +86-10-66504252
country: CN
changed: ipas@cnnic.net.cn 20070927
mnt-by: MAINT-CNNIC-AP
source: CNNIC
DNS records

DNS query for 35.59.196.220.in-addr.arpa returned an error from the server: NameError

name class type data time to live
chickace.com IN A 220.196.59.35 3600s (01:00:00)
chickace.com IN A 203.93.208.86 3600s (01:00:00)
chickace.com IN A 211.95.79.70 3600s (01:00:00)
chickace.com IN A 91.213.33.11 3600s (01:00:00)
— end —

Canadian Pharmacy Spam – Stimul-cash.com (www.happeningrxcenter.com)

September 17, 2009Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

0rder all your Favorite Rx~Medications 0nline!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://happeningrxcenter.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.169	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
164.77.200.130	Chile (Santiago)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.119	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Caleb Henderson Wed Sep 16 11:41:48 2009
X-Apparently-To: ; Wed, 16 Sep 2009 11:39:48 -0700
Return-Path:
X-YahooFilteredBulk: 164.77.200.130
X-YMailISG: nt555YEWLDveVZbH1kYbzWeVbM9G4WRxyS.Kx_uai_pU02hKAXpaZeUMCEuJ
H8K8L5B7KsaSXQZXTeXekwFImkTADxR5uIWapkRrg42ri48py3F38C
_wVzwVod2XQjhVo.3p
QGMHQJq4jQZsJJGO1bLJdXHZcv68h_
Qf3WkmA1jWjbD29ggGbNYC9McI4La_J2C0hsFZp47OGS5MF5Qb03
Loui8QQI2qnu2wx7NeS1OINO4nji2DmUpJ0z.8zVgEgqs3cDOGgTWIJqFE0
pQEz28RXcIJ6K.qtUfF1Wbnu02nuNE_I4h34H0Dp0bLgz.AUlzNQucCiWt2lQ–
X-Originating-IP: [164.77.200.130]
Authentication-Results: mta134.sbc.mail.re2.yahoo.com from=canter.fi; domainkeys=neutral (no sig); from=canter.fi; dkim=neutral (no sig)
Received: from 164.77.200.130 (EHLO flpd109.prodigy.net) (207.115.20.119)
by mta134.sbc.mail.re2.yahoo.com with SMTP; Wed, 16 Sep 2009 11:39:48 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[164.77.200.130]
X-Originating-IP: [164.77.200.130]
Received: from d8ja2a3 ([164.77.200.130])
by flpd109.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8GIdQj0013048;
Wed, 16 Sep 2009 11:39:44 -0700
Message-ID: <000701ca36fd$5906bcc0$627e0f72@canter.fi>
Reply-To: “Caleb Henderson” <c.henderson_ky@canter.fi>
From: “Caleb Henderson” <c.henderson_ky@canter.fi>
To: ,
Subject: Get all the medications you want online!
Date: Wed, 16 Sep 2009 11:41:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 130

Address lookup

canonical name	happeningrxcenter.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom happeningrxcenter.com“…

Domain Name: HAPPENINGRXCENTER.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

>>> Last update of whois database: Thu, 17 Sep 2009 13:24:23 UTC

Queried whois.hupo.com with “happeningrxcenter.com“…

Domain Name: happeningrxcenter.com

Registrant Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Administrative Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Technical Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Billing Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

happeningrxcenter.com

SOA

server:	ns.happeningrxcenter.com
email:	admin.happeningrxcenter.com
serial:	2006123101
refresh:	300
retry:	300
expire:	86400
minimum ttl:	300

300s

(00:05:00)

happeningrxcenter.com

60.12.166.154

300s

(00:05:00)

— end —

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Canadian Pharamacy Spam – Stimul-cash.com (www.getallyourfavorites.com)

September 17, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.166	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
76.210.238.82	United States (Beaumont)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.184	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Order all your Favorite Rx`Medications_0nline!
NoPrescription_Needed!
Browse_Our Selection_Today! –> http://getallyourfavorites.com

Address lookup

canonical name	getallyourfavorites.com.
aliases	http://www.getallyourfavorites.com
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom getallyourfavorites.com“…

   Domain Name: GETALLYOURFAVORITES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 16-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Thu, 17 Sep 2009 13:13:38 UTC <<<

Queried whois.namerich.cn with “getallyourfavorites.com“…

DomainName : getallyourfavorites.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-16

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

http://www.getallyourfavorites.com

CNAME

getallyourfavorites.com

300s

(00:05:00)

getallyourfavorites.com

SOA

server:	ns.getallyourfavorites.com
email:	admin.getallyourfavorites.com
serial:	2009091601
refresh:	300
retry:	300
expire:	14400
minimum ttl:	300

300s

(00:05:00)

getallyourfavorites.com

60.12.166.154

300s

(00:05:00)

— end —

Canadian Pharmacy Spam – wehavewhaturlookingfor.com

September 13, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________________________

Order all your Favorite Rx~Medications Online! No Doctor Needed!
Browse Our Selection Today! –> http://wehavewhaturlookingfor.com

______________________________________________________________________

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.172	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
207.144.100.125	United States (Lexington)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.88	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Carolina Evans Sun Sep 13 06:01:31 2009
X-Apparently-To: 13 Sep 2009 05:59:42 -0700
Return-Path:
X-YahooFilteredBulk: 207.144.100.125
X-YMailISG: CJFKwrQWLDuy0vndKRqizfC.yhTuXOT0vEuSG9r6TIYF0YRFNo7JJnIEJ90Bu2ZBhh1kBKwOwqAAd6aHYHZyiZWh_tTPZJabL4SPFV07n8icbd5uLRsKgJgy1uyjAL_4p_kaY1XWevUAf1_rXwb57h6RxfGCkA8zqrkpkqOa_KvK0Svy1AwNUlL7YQ52GoNCzbjaGz1V8Y57B7CyArP.b31kFStrRIEOn1Ic1L_93WENyMLIAMNn.nN18Q1mYZikO8ZJq_kiNaCoDmZbz03xef0klPzBPorVIWSoPpj2Spe4TiOOXJjNhDBTqgiGidfOoK9NXrVq1uXOq36uAiAK_rc-
X-Originating-IP: [207.144.100.125]
Authentication-Results: mta111.sbc.mail.re2.yahoo.com from=altranet.fr; domainkeys=neutral (no sig); from=altranet.fr; dkim=neutral (no sig)
Received: from 207.144.100.125 (EHLO nlpi105.prodigy.net) (207.115.36.88)
by mta111.sbc.mail.re2.yahoo.com with SMTP; Sun, 13 Sep 2009 05:59:41 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[207.144.100.125]
X-Originating-IP: [207.144.100.125]
Received: from xda72aq ([207.144.100.125])
by nlpi105.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8DCxTTF030044;
Sun, 13 Sep 2009 07:59:39 -0500
Message-ID: <000701ca3472$50902320$627e0202@altranet.fr>
Reply-To: “Carolina Evans”
From: “Carolina Evans”
To: , ,
Subject: Get all the medications you want online!
Date: Sun, 13 Sep 2009 06:01:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 137

Address lookup

canonical name	wehavewhaturlookingfor.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom wehavewhaturlookingfor.com”…

   Domain Name: WEHAVEWHATURLOOKINGFOR.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Sun, 13 Sep 2009 16:14:20 UTC <<<

Queried whois.hupo.com with “wehavewhaturlookingfor.com”…

Domain Name: wehavewhaturlookingfor.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:50:07
Expireation Date:2010-08-22 14:50:07

Network Whois record

Queried whois.apnic.net with “60.12.166.154”…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

wehavewhaturlookingfor.com

SOA

server:	ns.wehavewhaturlookingfor.com
email:	admin.wehavewhaturlookingfor.com
serial:	2006123101
refresh:	300
retry:	300
expire:	86400
minimum ttl:	300

300s

(00:05:00)

wehavewhaturlookingfor.com

60.12.166.154

300s

(00:05:00)

— end —

Pure Magnum Pro – fullafrica.com – puremagnumpro.com

September 11, 20093 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
“Pure Magnum Pro” is an alleged male enhancement product promoted through spam by criminals. They offer you a “free trial bottle”, but you still have to hand over your credit card details for shipping. That information is of course exactly what these criminals are after, and they know the right strings to pull. But you’re not that stupid, are you? Of course they don’t leave it there. If you read the fine print you will notice that they will automatically send you a new bottle subject to a charge every month, unless you opt out. And guess what? You can’t opt out, because their contact information is missing and their contact/opt-out forms are useless. Your credit card would keep being charged until the sun explodes.

Did I already mention they are criminals?

Address lookup

canonical name	fullafrica.com.
aliases
addresses	60.12.166.134

Domain Whois record

Queried whois.internic.net with “dom fullafrica.com“…

Domain Name: FULLAFRICA.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.PIJORGOF.COM
Name Server: NS1.TUQOTGAC.COM
Name Server: NS2.PIJORGOF.COM
Name Server: NS2.TUQOTGAC.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 06-sep-2009
Creation Date: 25-aug-2009
Expiration Date: 25-aug-2010

Last update of whois database: Fri, 11 Sep 2009 11:51:14 UTC

Queried whois.namerich.cn with “fullafrica.com“…

DomainName : fullafrica.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS1.TUQOTGAC.COM
Name Server………………….NS2.PIJORGOF.COM
Name Server………………….NS2.TUQOTGAC.COM
Name Server………………….NS1.PIJORGOF.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-08-25
Expiration Date ……………..2010-08-25
Last Update Date ……………2009-09-07

Registrant ID ……………….V-X-59719-16703
Registrant Name ……………..HUANG QINGHUA
Registrant Organization ………HUANG QINGHUA
Registrant Address …………..DONGFANGLU26
Registrant City………………HF
Registrant Province/State …….AH
Registrant Country Code ………CN
Registrant Postal Code ……….230061
Registrant Phone Number ………+86.051154732151
Registrant Fax ………………+86.051154732151
Registrant Email …………….nioehdk@126.com

Administrative ID ……………V-X-59719-16703
Administrative Name ………….HUANG QINGHUA
Administrative Organization …..HUANG QINGHUA
Administrative Address ……….DONGFANGLU26
Administrative City…………..HF
Administrative Province/State …AH
Administrative Country Code …..CN
Administrative Postal Code ……230061
Administrative Phone Number …..+86.051154732151
Administrative Fax …………..+86.051154732151
Administrative Email …………nioehdk@126.com

Billing ID ………………….V-X-59719-16703
Billing Name ………………..HUANG QINGHUA
Billing Organization …………HUANG QINGHUA
Billing Address ……………..DONGFANGLU26
Billing City…………………HF
Billing Province/State ……….AH
Billing Country Code …………CN
Billing Postal Code ………….230061
Billing Phone Number …………+86.051154732151
Billing Fax …………………+86.051154732151
Billing Email ……………….nioehdk@126.com

Technical ID ………………..V-X-59719-16703
Technical Name ………………HUANG QINGHUA
Technical Organization………..HUANG QINGHUA
Technical Address ……………DONGFANGLU26
Technical City……………….HF
Technical Province/State………AH
Technical Country Code ……….CN
Technical Postal Code ………..230061
Technical Phone Number ……….+86.051154732151
Technical Fax ……………….+86.051154732151
Technical Email ……………..nioehdk@126.com

Please register your domains at
http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.134“…

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

DNS records

DNS query for 134.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

fullafrica.com

60.12.166.134

600s

(00:10:00)

fullafrica.com

SOA

server:	ns1.fullafrica.com
email:	ns2.fullafrica.com
serial:	2009097594
refresh:	600
retry:	600
expire:	2419200
minimum ttl:	600

600s

(00:10:00)

fullafrica.com

ns1.heyodziz.com

600s

(00:10:00)

fullafrica.com

ns2.heyodziz.com

600s

(00:10:00)

fullafrica.com

ns2.bilulkog.com

600s

(00:10:00)

fullafrica.com

ns1.bilulkog.com

600s

(00:10:00)

— end —

Address lookup

canonical name	puremagnumpro.com.
aliases
addresses	123.108.108.175

Domain Whois record

Queried whois.internic.net with “dom puremagnumpro.com“…

Domain Name: PUREMAGNUMPRO.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.PUREMAGNUMPRO.COM
Name Server: NS2.PUREMAGNUMPRO.COM
Status: clientTransferProhibited
Updated Date: 09-jul-2009
Creation Date: 07-jul-2009
Expiration Date: 07-jul-2010

Last update of whois database: Fri, 11 Sep 2009 11:57:07 UTC

Queried whois.onlinenic.com with “puremagnumpro.com“…

Domain Name:puremagnumpro.com
Record created:2009/7/7
Record expired:2010/7/7

Domain servers in listed order:
ns1.puremagnumpro.com ns2.puremagnumpro.com

Administrat:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904501@absolutee.com
Technical Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904502@absolutee.com
Billing Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784003@absolutee.com
Registrant Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784004@absolutee.com

Network Whois record

Queried whois.apnic.net with “123.108.108.175“…

inetnum: 123.108.108.0 – 123.108.111.255
netname: PANGNET
descr: Pang International Limited
descr: Dedicated Server and Colocation Service Provider
country: HK
admin-c: YL2194-AP
tech-c: YL2194-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-PANG
mnt-routes: MAINT-HK-PANG
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081224
source: APNIC

person: Yu Pang Law
nic-hdl: YL2194-AP
e-mail: admin@pangintl.com
address: 2D Hung Hay Building,
address: 1st Fa Yuen Street,
address: Mong Kok,
address: Kowloon,
address: Hong Kong
phone: +852-6172-5306
fax-no: +852-2332-8934
country: HK
changed: pang@laws.ms 20081229
mnt-by: MAINT-HK-PANG
source: APNIC<

DNS records

name	class	type	data	time to live
175.108.108.123.in-addr.arpa	IN	PTR	scdc.worra.com	259200s	(3.00:00:00)

— end —

Canadian Pharmacy Spam – nodocneededforrxmedz.com

September 9, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Favorite RxMedications Online!
Browse Our Selection Today! –> http://nodocneededforrxmedz.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.172	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
131.178.248.63	Mexico (Monterrey)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.186	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Jared Bradley Mon Sep 7 19:50:35 2009

X-Apparently-To: Mon, 07 Sep 2009 19:49:06 -0700
Return-Path:
X-YahooFilteredBulk: 131.178.248.63
X-YMailISG: kPEUCM0WLDsMZaRt0mugjhf81VGYWsnwQHTkTCdQznTOCLgu6bQtzKJUvHEXN1soHFIP.LfJX3JoDImx9GesvkxdX.9bZG.RplT5N.bJmrYr7nKs.gTA21px0sHlf1uyJLdCmE.5pB6D1rCvaIVdt5T9J5DEeo5NRYDJfSdg9uQW7px1NFjynTLb.TngKiHHwiJuxEAzV9Qoo4IZKCZU9HI8S0PYMhSKH3jRuuNtSJsTLf1XPoi4_t7NPmK4q4br43MhDinm_jspY9c4ze5cT5udqV6_UwZXf.Q.xS887XJSoief4CdSigE-
X-Originating-IP: [131.178.248.63]
Authentication-Results: mta110.sbc.mail.re2.yahoo.com from=kalbe.co.id; domainkeys=neutral (no sig); from=kalbe.co.id; dkim=neutral (no sig)
Received: from 131.178.248.63 (EHLO flpi184.prodigy.net) (207.115.20.186)
by mta110.sbc.mail.re2.yahoo.com with SMTP; Mon, 07 Sep 2009 19:49:05 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[131.178.248.63]
X-Originating-IP: [131.178.248.63]
Received: from 7hwnqa7 ([131.178.248.63])
by flpi184.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n882kLgi029857;
Mon, 7 Sep 2009 19:48:49 -0700
Message-ID: <000701ca302f$23f0cbe0$627e0f72@kalbe.co.id>
Reply-To: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
From: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
To: , ,
Subject: We have weight loss and pain med!
Date: Mon, 07 Sep 2009 19:50:35 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 112

Address lookup

canonical name	nodocneededforrxmedz.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom nodocneededforrxmedz.com“…

   Domain Name: NODOCNEEDEDFORRXMEDZ.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Wed, 09 Sep 2009 07:31:03 UTC <<<

Queried whois.hupo.com with “nodocneededforrxmedz.com“…

Domain Name: nodocneededforrxmedz.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

nodocneededforrxmedz.com

SOA

server:	ns.nodocneededforrxmedz.com
email:	admin.nodocneededforrxmedz.com
serial:	2006123101
refresh:	300
retry:	300
expire:	86400
minimum ttl:	300

300s

(00:05:00)

nodocneededforrxmedz.com

60.12.166.154

300s

(00:05:00)

— end —

Canadian Pharmacy Spam- hardtofindrxmedz.com

September 6, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All_of your favorite Rx~Medications are available at your_Fingertips!
Browse_Our Selection Today –> http://hardtofindrxmedz.com

Address lookup

canonical name	hardtofindrxmedz.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom hardtofindrxmedz.com“…

   Domain Name: HARDTOFINDRXMEDZ.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

Last update of whois database: Sun, 06 Sep 2009 21:26:29 UTC <<<

Queried whois.hupo.com with “hardtofindrxmedz.com“…

Domain Name: hardtofindrxmedz.com

Registrant Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Administrative Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Technical Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Billing Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
hardtofindrxmedz.com	IN	A	60.12.166.154	232s	(00:03:52)

— end —

Canadian Pharmacy Spam – http://getrxmedicationshere.com

September 5, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All_of your favorite Rx~Medications are available at your_Fingertips!
Browse_Our Selection Today –> http://getrxmedicationshere.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.170	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.185	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Conrad Bonner Sat Sep 5 10:59:37 2009
X-Apparently- Sat, 05 Sep 2009 10:58:16 -0700
Return-Path:
X-YahooFilteredBulk: 109.87.19.108
X-YMailISG: H.phxEAWLDtB_eE2RNGcrV7bll_Bl_DUObhczWx9uct6I5p3PQMWm4WLoEaPqrp80fVAB8_099N8nselcFG2Y86RwWtYMCtUvyL8tuAj0FH5MkgLAxwDk19fBlqhCwVA5EiAkhbBgDqEh_xVIFI.E12Rw4QdmdG9.kmLz1iyiAGfAl_TFzugyJuLU6g8pX5PmJINB9K_0hTmREpxFCk5JRp5rRid7cs7FPN.ZGz_6uh3dDsQwMuw24MluI0gpkPG7QIJWjJT43_E2NQmkpwoS90yOkKk40W5uUX.pj.0R6Ab1_YIVdd6WbWfpgtsiRfMUE4j6.mD84PJxvjE4hz7hte5_IpTLoiVZyEsMeMhQvvb01Cxh8E3nvl1fQ–
X-Originating-IP: [109.87.19.108]
Authentication-Results: mta121.sbc.mail.re3.yahoo.com from=software-solutions.co.nz; domainkeys=neutral (no sig); from=software-solutions.co.nz; dkim=neutral (no sig)
Received: from 109.87.19.108 (EHLO flpi183.prodigy.net) (207.115.20.185)
by mta121.sbc.mail.re3.yahoo.com with SMTP; Sat, 05 Sep 2009 10:58:14 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[109.87.19.108]
X-Originating-IP: [109.87.19.108]
Received: from w6agsd3 ([109.87.19.108])
by flpi183.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n85Hutix024595;
Sat, 5 Sep 2009 10:58:08 -0700
Message-ID: <000701ca2e52$a20da680$627e0f72@software-solutions.co.nz>
Reply-To: “Conrad Bonner” <conradbonnerxj@software-solutions.co.nz>
From: “Conrad Bonner”
To:
Subject: PharmacyOnNet sells Phentermin, Ambien …
Date: Sat, 05 Sep 2009 10:59:37 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 139

Address lookup

canonical name	getrxmedicationshere.com.
aliases
addresses	60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom getrxmedicationshere.com“…

   Domain Name: GETRXMEDICATIONSHERE.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Sat, 05 Sep 2009 19:46:04 UTC <<<

Queried whois.hupo.com with “getrxmedicationshere.com“…

Domain Name: getrxmedicationshere.com

Registrant Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Administrative Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Technical Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Billing Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:51:42
Expireation Date:2010-08-22 14:51:42

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

getrxmedicationshere.com

SOA

server:	ns.getrxmedicationshere.com
email:	admin.getrxmedicationshere.com
serial:	2006123101
refresh:	300
retry:	300
expire:	86400
minimum ttl:	300

300s

(00:05:00)

getrxmedicationshere.com

60.12.166.135

300s

(00:05:00)

— end —

Address lookup

lookup failed	109.87.19.108
	Could not find a domain name corresponding to this IP address.

Domain Whois record

Don’t have a domain name for which to get a record

Network Whois record

Queried whois.ripe.net with “-B 109.87.19.108“…

% Information related to '109.87.16.0 - 109.87.31.255'

inetnum:        109.87.16.0 - 109.87.31.255
netname:        TRIOLAN
descr:          TRIOLAN, Simferopol
country:        UA
admin-c:        KID3-RIPE
admin-c:        MICH-RIPE
tech-c:         MICH-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090902
source:         RIPE

person:         Konstantin I Doljenko
address:        pr-t Frunze, 26
address:        310007, Kharkov
address:        Ukraine
phone:          +380 572 179727
fax-no:         +380 572 191510
e-mail:         boma@bi.com.ua
nic-hdl:        KID3-RIPE
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20040218
source:         RIPE

person:         Mihail A.Vovk
address:        Ukraine, Kyiv
phone:          +380667206611
e-mail:         mich@michael.com.ua
nic-hdl:        MICH-RIPE
mnt-by:         MICH-MNT
notify:         mich@michael.com.ua
changed:        mich@michael.com.ua 20060105
source:         RIPE

% Information related to '109.86.0.0/15AS13188'

route:          109.86.0.0/15
descr:          TRIOLAN
descr:          Triple Play Services
descr:          Ukraine
origin:         AS13188
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090820
source:         RIPE

% Information related to '109.87.16.0/20AS13188'

route:          109.87.16.0/20
descr:          TRIOLAN, Simferopol
descr:          Triple Play Services
descr:          Ukraine
origin:         AS13188
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090902
source:         RIPE

DNS records

DNS query for 108.19.87.109.in-addr.arpa returned an error from the server: NameError

No records to display

Traceroute

Tracing route to 109.87.19.108 [109.87.19.108]…

Canadian Pharmacy Spam – readysetgetmedz.com

September 4, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All your favorite RxMedications are available at your Fingertips!
Browse Our Website Today –> http://readysetgetmedz.com

Address lookup

canonical name	readysetgetmedz.com.
aliases
addresses	60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom readysetgetmedz.com“…

   Domain Name: READYSETGETMEDZ.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

Last update of whois database: Sat, 05 Sep 2009 00:44:13 UTC <<<

DomainName : readysetgetmedz.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.84GNK.COM
Name Server......................NS1.ACTCTICNS.COM
Name Server......................NS2.ACTCTICNS.COM
Name Server......................NS6.84GNK.COM
Name Server......................NS3.BRIILOVENS.COM
Name Server......................NS4.BRIILOVENS.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-08-22
Expiration Date .................2010-08-22
Last Update  Date ...............2009-09-03

Registrant ID ...................V-X-60144-17241
Registrant Name .................zhang mingxuan
Registrant Organization .........zhang mingxuan
Registrant Address ..............LANCHANGLU28
Registrant City..................NT
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........226037
Registrant Phone Number .........+86.051382642427
Registrant Fax ..................+86.051382642427
Registrant Email ................haieya01@126.com

Administrative ID ...............V-X-60144-17241
Administrative Name .............zhang mingxuan
Administrative Organization .....zhang mingxuan
Administrative Address ..........LANCHANGLU28
Administrative City..............NT
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......226037
Administrative Phone Number .....+86.051382642427
Administrative Fax ..............+86.051382642427
Administrative Email ............haieya01@126.com

Billing ID ......................V-X-60144-17241
Billing Name ....................zhang mingxuan
Billing Organization ............zhang mingxuan
Billing Address .................LANCHANGLU28
Billing City.....................NT
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............226037
Billing Phone Number ............+86.051382642427
Billing Fax .....................+86.051382642427
Billing Email ...................haieya01@126.com

Technical ID ....................V-X-60144-17241
Technical Name ..................zhang mingxuan
Technical Organization...........zhang mingxuan
Technical Address ...............LANCHANGLU28
Technical City...................NT
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........226037
Technical Phone Number ..........+86.051382642427
Technical Fax ...................+86.051382642427
Technical Email .................haieya01@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
readysetgetmedz.com	IN	NS	ns3.briilovens.com	172800s	(2.00:00:00)
readysetgetmedz.com	IN	NS	ns6.84gnk.com	172800s	(2.00:00:00)
readysetgetmedz.com	IN	NS	ns4.briilovens.com	172800s	(2.00:00:00)
readysetgetmedz.com	IN	NS	ns2.actcticns.com	172800s	(2.00:00:00)
readysetgetmedz.com	IN	NS	ns5.84gnk.com	172800s	(2.00:00:00)
readysetgetmedz.com	IN	NS	ns1.actcticns.com	172800s	(2.00:00:00)

— end —

Canadian Pharmacy Spam – easyonlinerxmedz.com

September 2, 20091 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Order All your Favorite RxMedications Online!
Browse Our Selection Today –> http://easyonlinerxmedz.com

Address lookup

canonical name	easyonlinerxmedz.com.
aliases
addresses	60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom easyonlinerxmedz.com“…

Domain Name: EASYONLINERXMEDZ.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

Last update of whois database: Thu, 03 Sep 2009 03:00:02 UTC

Queried whois.hupo.com with “easyonlinerxmedz.com“…

Domain Name: easyonlinerxmedz.com

Registrant Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Administrative Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Technical Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Billing Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

DNS records

DNS query for easyonlinerxmedz.com returned an error from the server: ServerFailure

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – ng-systems.net

September 2, 20092 Comments

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
68.142.207.169	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
67.195.14.109	United States (Sunnyvale)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.132	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
75.213.113.93	United States (Los Angeles)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Robert Sexton Wed Sep 2 09:16:46 2009
X-Apparently-Wed, 02 Sep 2009 09:17:11 -0700
Return-Path:
X-YahooFilteredBulk: 67.195.14.109
X-YMailISG: TBYRKD8WLDtrypfO6NxNXGP0yDAzrz3CdYN4uNyB8zdkhJygyME2AhOzjHKhRrUpZq._NUInKsP.EyiIliCb157CnYhB0BqaezKzuUp53Qiu9w1Ljzy0zv3rJhK5JqUEngfcMKEaQiOlPYusfPPFQNkIjgjQV1yX3poFuPqlw1ZVyf0YPmnOOoAmpd5Ks8lY0n3Erej6ctnbMy1U8NtEpWaiL7oIBA5W5Q8XzWGYudFTGG5Ees2iLR9HSjvwZTwsimeHnMAI8y0e9q.BpsyFwVw0OvYAXKdqkNTqaKXEdLp8WNBeamfQbhhP2gak5mTnjKNACj0Skf1P4L9iyBIPRjskRx4Mnd78YLfNHkQL_tjdrZd4juoFvgSGlm5d9EDxq_CR3dnJlN8Q7uqANIL0zO8SZ2SC5klu.HC983GsCBDV
X-Originating-IP: [67.195.14.109]
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ng-systems.net; domainkeys=neutral (no sig); from=ng-systems.net; dkim=neutral (no sig)
Received: from 207.115.20.132 (EHLO flpd122.prodigy.net) (207.115.20.132)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Wed, 02 Sep 2009 09:17:11 -0700
X-Originating-IP: [67.195.14.109]
Received: from smtp106.sbc.mail.gq1.yahoo.com (smtp106.sbc.mail.gq1.yahoo.com [67.195.14.109])
by flpd122.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n82GHA2X021427
for ; Wed, 2 Sep 2009 09:17:10 -0700
Message-Id: <200909021617.n82GHA2X021427@flpd122.prodigy.net>
Received: (qmail 53401 invoked from network); 2 Sep 2009 16:17:10 -0000
Received: from unknown (HELO 13.sub-70-213-117.myvzw.com) (bob@75.213.113.93 with login)
by smtp106.sbc.mail.gq1.yahoo.com with SMTP; 2 Sep 2009 16:17:09 -0000
X-Yahoo-SMTP: 9I.gPjKswBDDpZ74lhf2pkNv37iwyZQ3CbOW
X-YMail-OSG: oUhrznUVM1m0i7c_kQUv33Cnb7rJoF.P1fFuiaoKzRi8KB0dRejSrtUR4IWuStPzGEB3UdtW6IkkTv4A9iT_8EMnu54dGGZlg38LsYrtSE7mFs.culAKmpimV3LbxXx.QLjcbmTEeZSqqqAz7DeIb9PTuMvIVAetjNSBXaQDPxqbrX4Vduu_t1LnL_tVwCoLase2jJzB53Jc7vU-
X-Yahoo-Newman-Property: ymail-3
From: “Robert Sexton” <bob@ng-systems.net>
To:
Subject: Online pharmacies (9/2/2009)
Date: Wed, 2 Sep 2009 09:16:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset=”utf-8″
Content-Transfer-Encoding: 8bit
Content-Length: 783

Hello,

I represent a company called SPN Solutions, a company that does what’s known as advanced search engine placement. We reach a Network of over 35 million people who are predominantly US based. Our Network is entirely opt-in, and the users on our Network allow us to present them with a preferred choice whenever they are looking for anything on the top sixteen search engines. (GOOGLE, YAHOO, MSN and thirteen others.)

I seek one source to send the users on our Network, from the major search engines, for online pharmacies in various Canadian markets.

Please contact me at your earliest convenience. I am in the office daily from 9:00 AM to 5:00 PM Pacific time.

Best regards,

Robert Sexton
Dir/Business Development, SPN Solutions
Phone: 800.481.2979, ext 2001

Address lookup

canonical name	myvzw.com.
aliases
addresses	207.68.174.238

Domain Whois record

Queried whois.internic.net with “dom myvzw.com“…

   Domain Name: MYVZW.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: CARKDNS.VZWDOMAIN.COM
   Name Server: NJBRDNS.VZWDOMAIN.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jan-2009
   Creation Date: 31-may-2000
   Expiration Date: 31-may-2012

>>> Last update of whois database: Thu, 03 Sep 2009 02:55:26 UTC <<<

Queried whois.markmonitor.com with “myvzw.com“…

Registrant:
        Verizon Trademark Services LLC
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669

    Domain Name: myvzw.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Administrator
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669
    Technical Contact, Zone Contact:
        Domain Technician
        Verizon
        1320 North Court House Road
         Arlington VA 22201
        US
        sysmgr@verizon.com +1.7033513164 Fax: +1.7033513669

    Created on..............: 2000-05-31.
    Expires on..............: 2012-05-31.
    Record last updated on..: 2009-05-30.

    Domain servers in listed order:

    njbrdns.vzwdomain.com
    carkdns.vzwdomain.com

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protection™
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at www.markmonitor.com
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300

Network Whois record

Queried whois.arin.net with “207.68.174.238“…

OrgName:    Microsoft Corp 
OrgID:      MSFT
Address:    One Microsoft Way
City:       Redmond
StateProv:  WA
PostalCode: 98052
Country:    US

NetRange:   207.68.128.0 - 207.68.207.255 
CIDR:       207.68.128.0/18, 207.68.192.0/20 
NetName:    MICROSOFT-CORP-MSN-BLK
NetHandle:  NET-207-68-128-0-1
Parent:     NET-207-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:    
RegDate:    1996-03-26
Updated:    2005-06-29

RTechHandle: ZM39-ARIN
RTechName:   Microsoft 
RTechPhone:  +1-425-882-8080
RTechEmail:  noc@microsoft.com 

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName:   Hotmail Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName:   MSN ABUSE 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName:   Microsoft Corporation 
OrgNOCPhone:  +1-425-882-8080
OrgNOCEmail:  noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName:   MSFT-POC 
OrgTechPhone:  +1-425-882-8080
OrgTechEmail:  iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-09-02 20:00

DNS records

DNS query for 238.174.68.207.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

myvzw.com

SOA

server:	njbrnsmgr.vzwdomain.com
email:	cdsdns.verizonwireless.com
serial:	2009073100
refresh:	43200
retry:	7200
expire:	1209600
minimum ttl:	10800

7200s

(02:00:00)

myvzw.com

njbrdns.vzwdomain.com

7200s

(02:00:00)

myvzw.com

carkdns.vzwdomain.com

7200s

(02:00:00)

myvzw.com

207.68.174.238

7200s

(02:00:00)

— end —

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Traceroute

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Header Analysis

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says