Canadian Pharmacy Spam Servers – rx-partners. biz

August 2, 2009Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

SmartFilter Category:	Not Categorized Make Category Suggestions
Namerservers on IP:	dns2.onlinemedson.net ns0.rx-sharedhost.com ns0.rxp-hosting.com ns1.edportu.com ns1.partners-dns.com ns1.viagravendita.com ns2.bestpharm.org ns2.drugs-on.net ns2.edportu.com ns2.esfarmaciaonline.com ns2.genericdrugson.net ns2.healthproductson.net ns2.medications-on.net ns2.medsshop.org ns3.cesaonline.net whatever.rxp-alive.com

Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com

buyusarx.com

edcustomer.com

enjoymeds.com

hoodiaweightlosstablets.com

Domain

ultimatepillstore.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy – www.myvaluepharm.com

July 31, 20091 Comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.

Address lookup

canonical name	myvaluepharm.com.
aliases
addresses	92.48.96.142

Domain Whois record

Queried whois.internic.net with “dom myvaluepharm.com“…

Domain Name: MYVALUEPHARM.COM

Registrar: SPOT DOMAIN LLC DBA DOMAINSITE.COM

Whois Server: whois.domainsite.com

Referral URL: http://www.domainsite.com

Name Server: NS2.ZONEEDIT.COM

Name Server: NS4.ZONEEDIT.COM

Status: clientDeleteProhibited

Status: clientRenewProhibited

Status: clientTransferProhibited

Status: clientUpdateProhibited

Updated Date: 14-jan-2009

Creation Date: 31-jul-2007

Expiration Date: 31-jul-2009

>>> Last update of whois database: Fri, 31 Jul 2009 14:07:22

Queried whois.domainsite.com with “myvaluepharm.com“…

Visit AboutUs.org for more information about myvaluepharm.com

<a href=”http://www.aboutus.org/myvaluepharm.com”>AboutUs: myvaluepharm.com</a>

Domain Name: myvaluepharm.com

Registrar: Spot Domain LLC

Protected Domain Services Customer ID: DSR-683523

Expiration Date: 2009-07-31 13:51:51

Creation Date: 2007-07-31 07:51:52

Name Servers:

ns2.zoneedit.com

ns4.zoneedit.com

REGISTRANT CONTACT INFO

Protected Domain Services – Customer ID: DSR-683523

125 Rampart Way

Suite 300

Denver

80230

Phone: +1.3034596012

Email Address: myvaluepharm.com@protecteddomainservices.com

ADMINISTRATIVE CONTACT INFO

Protected Domain Services – Customer ID: DSR-683523

125 Rampart Way

Suite 300

Denver

80230

Phone: +1.3034596012

Email Address: myvaluepharm.com@protecteddomainservices.com

TECHNICAL CONTACT INFO

Protected Domain Services – Customer ID: DSR-683523

125 Rampart Way

Suite 300

Denver

80230

Phone: +1.3034596012

Email Address: myvaluepharm.com@protecteddomainservices.com

BILLING CONTACT INFO

Protected Domain Services – Customer ID: DSR-683523

125 Rampart Way

Suite 300

Denver

80230

Phone: +1.3034596012

Email Address: myvaluepharm.com@protecteddomainservices.com

1249049292.5394

The Data in the Spot Domain LLC WHOIS database is provided by Spot Domain LLC for information purposes, and to assist persons in obtaining information about or related to a domain name registration record. Spot Domain LLC does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Spot Domain LLC (or its systems). Spot Domain LLC reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.

Network Whois record

Queried whois.ripe.net with “-B 92.48.96.142“…

Information related to ‘92.48.96.136 – 92.48.96.143’

inetnum: 92.48.96.136 – 92.48.96.143

netname: BlueConnex-44757

descr: BlueConnex transit customer

remarks: ##############################################

remarks: Please report abuse incidents to abuse@blueconnex.net

remarks: Messages sent to other contact addresses may not be acted upon.

remarks: ##############################################

country: GB

admin-c: BLO2-RIPE

tech-c: BLO2-RIPE

status: ASSIGNED PA

mnt-by: blueconnex-mnt

mnt-routes: blueconnex-mnt

source: RIPE

changed: pete.bristow@bluesquaredata.com 20090325

role: BlueConnex Ltd Operators

address: BlueConnex Ltd

address: BlueSquare House

address: Priors Way

address: Maidenhead

address: Berkshire

address: SL62HP

remarks: For abuse please contact abuse@blueconnex.net

phone: +44 (0)1628 673131

admin-c: PETE3-RIPE

admin-c: MM5420-RIPE

admin-c: ROB153-RIPE

tech-c: MM5420-RIPE

tech-c: ROB153-RIPE

mnt-by: blueconnex-mnt

tech-c: PETE3-RIPE

nic-hdl: BLO2-RIPE

changed: support@pcs-net.com 20081012

source: RIPE

e-mail: abuse@blueconnex.net

% Information related to ‘92.48.64.0/18AS29550’

route: 92.48.64.0/18

descr: Blueconnex Networks Ltd

origin: AS29550

remarks: ***********************************

remarks: * *

remarks: * Abuse: abuse@blueconnex.net *

remarks: * *

remarks: * Peering: peering@blueconnex.net *

remarks: * *

remarks: ***********************************

mnt-by: blueconnex-mnt

source: RIPE

changed: brian.ross@netsumo.com 20080718

DNS records

name

class

type

data

time to live

myvaluepharm.com

92.48.96.142

7200s

(02:00:00)

myvaluepharm.com

ns2.zoneedit.com

7200s

(02:00:00)

myvaluepharm.com

ns4.zoneedit.com

7200s

(02:00:00)

myvaluepharm.com

SOA

server:	ns2.zoneedit.com
email:	soacontact.zoneedit.com
serial:	1231961519
refresh:	14400
retry:	7200
expire:	950400
minimum ttl:	7200

7200s

(02:00:00)

myvaluepharm.com

preference:	0
exchange:	myvaluepharm.com

7200s

(02:00:00)

myvaluepharm.com

preference:	5
exchange:	mail.myvaluepharm.com

7200s

(02:00:00)

142.96.48.92.in-addr.arpa

PTR

myvaluepharm.com

86400s

(1.00:00:00)

— end —

Canadian Pharmacy Spam – andmelody.com.

July 21, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian`Pharmacy is available at your_Fingertips!
No_Doctor_Needed! Browse our Site Today! -> http://andmelody.com

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

canonical name	andmelody.com.
aliases
addresses	60.191.239.150 203.93.208.86 218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom andmelody.com“…

   Domain Name: ANDMELODY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 01:31:53 UTC

Queried whois.namerich.cn with “andmelody.com“…

 DomainName : andmelody.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
andmelody.com	IN	A	60.191.239.150	10800s	(03:00:00)
andmelody.com	IN	A	203.93.208.86	10800s	(03:00:00)
andmelody.com	IN	A	218.75.144.6	10800s	(03:00:00)

— end —

Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

July 19, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
217.150.55.94	Russian Federation (Moscow)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.108	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George” <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

MyNewCanadianPharmacy – www.bulnalei.net

July 4, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name	bulnalei.net.
aliases
addresses	212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

bulnalei.net

SOA

server:	ns1.bulnalei.net
email:	admin.bulnalei.net
serial:	2005000000
refresh:	600
retry:	900
expire:	1209600
minimum ttl:	43200

600s

(00:10:00)

bulnalei.net

ns1.bulnalei.net

600s

(00:10:00)

bulnalei.net

ns2.bulnalei.net

600s

(00:10:00)

bulnalei.net

preference:	10
exchange:	mail.bulnalei.net

600s

(00:10:00)

bulnalei.net

212.174.200.111

600s

(00:10:00)

— end —

Rogue Pharmacy Websites – Pharmacy Checker

July 3, 20092 Comments

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

24hsmeds.com

Amerisur.net

Buyphentermine4u.com

Buypillsonline.biz (“Canadian Pharmacy”)

BuyAmoxilOnline.PillsConcepts.info

Canadapharmacyline.com (“Canadian Pharmacy”)

Canadianmedsworld.com (“Canadian Meds”)

Canadianpharmacyltd.com (“Canadian Pharmacy”)

Cheap-pharmacy.us (“Canadian Health & Care Mail”)

Cod-rx.com

Dragon-rx.com

Eagle-meds.com (“US Drugstore”)

Edfriends.org (“Reliable Meds”)

Getlowdrugs.com (“US Drugstore”)

Gimmepills.com (Canadian Rx Drugs”)

Globalaccessrx.com

Globalrxpharmacy.net

Hyth.us

Lom-5.co.cc

Licensed-Rx.com

Max-pharm.com

Medsranch.com

My-pharm.com

Newcanadianhealthcare.com

Online-the.com/

OvernightMedsDirect.net

Pharmacynorthamerica.com

Pharmtransit.com

Pillzcctop.com (“US HealthCare Inc”)

Qualitygenerics.com

Rx-life.com

Rxpharma24hs.com

Shop.edmedsonline.com (“Canadian Pharmacy”)

Shoprxtoday.com

Thecanadianmeds.com (“Canadian Pharmacy”)

Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)

TrustedMedsMD.com

Us-rx-meds.com

Value-generics.com (“Generic Pharmacy”)

Value-pharm.com

Wholesale-generics.com

Xlpharmacy.com

Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)

Allrxonline.net

ApplyEdPills.info

Atterack.com (“My Canadian Pharmacy”)

Bestedmeds.com (“Canadian Pharmacy”)

Canadianmedsnow.com (“Canadian Pharmacy”)

Canadianpharmdirect.com (“Canadian Pharmacy”)

Canadianpharmacylive.com (“Canadian Family Pharmacy”)

Canapharmstore.com (“Canadian Health Center”)

Cheapviagstarmed.info

Directmedswhere.com (“Canadian Pharmacy”)

Drug-online.org (“Canadian Pharmacy”)

Fit-pharmacy.com

Generic365.com

Getfamilymedicines.com (“Canadian Health & Care Mall”)

Hot-drug.com (“Canadian Rx Drugs”)

Hotgrandpharm.com (“US Drugs”)

Interpill.com

Irontold.com (“Canadian Pharmacy”)

Jusikelsk.com (“US Healthcare, Inc”)

Laicsownsew.com (“World Pharmacy”)

Licensed-meds.com

Mantipu.com_world_drugs.com

Medicaldiscountrx.net

Meds35.com (“My Canadian Pharmacy”)

Medsmaster.com (“Official Medicines”)

Medsworldwidenetwork.com

Miztrust.cn (“My Canadian Pharmacy”)

Nextairsalepharm.com (“Canadian Health & Care Mall”)

Nextbestpharm.com (“My Canadian Pharmacy”)

Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)

Onlinepharmcanada.com (“Official Medicines”)

Ottowadrugs.com (“Canadian Pharmacy”)

Ourglobalpharm.com (“World Pharmacy”)

Pharmasavers.com

Phshuue.com (“U.S. Healthcare, Inc”)

Piromeds.com (“Drug Store”)

Pot-1.co.cc

Pot-7.co.cc

Poispp.com (“My Canadian Pharmacy”)

Premierpharmacy.net

Presidentrx.com

Proovernightpharm.com (“US Drugs”)

Qualitycandianmeds.com (“Canadian Pharmacy”)

Quickeasymed.com

Realairmentablets.com (“US Drugs”)

Rx-pillssshop.com (“Canadian Rx Drugs”)

Rx-toronto.net (“My Canadian Pharmacy”)

Targetpluspharma.com (“Canadian Health Care”)

Topcheappills.com (“Toronto Pharmacy”)

Topratedmedication.com (“Toronto Pharmacy”)

Turkbine.com (“Canadian Healthcare”)

Universallydrugstore.com (“Canadian Pharmacy”)

Viagraorder.org (“Canadian Pharmacy”)

Webdrugs.biz (“Canadian Pharmacy”)

Weekrequire.com (“Canadian Pharmacy”)

Worldshippingmeds.com

PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
Stealing people’s financial information.
Charging a consumer’s credit card without ever sending the purchased product (s).
Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
Selling prescription drugs, whether real or fake, without requiring a prescription.
Not responding to a consumer’s email or phone call after they have ordered a product.
Providing false contact information.
Selling a customer’s personal information to third parties without their consent.
Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.

We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS

On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Pharmacy Spam – dependprefer.com

July 3, 20099 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.125	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
61.161.148.135	China (Shenyang)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path: <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang” <b_yangcl@tacocity.com.tw>
From: “Barbra Yang” <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name	dependprefer.com.
aliases
addresses	218.75.144.6 222.241.150.146 61.191.191.241 119.39.238.2 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)

Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)

 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
dependprefer.com	IN	A	203.93.208.86	10800s	(03:00:00)
dependprefer.com	IN	A	222.241.150.146	10800s	(03:00:00)
dependprefer.com	IN	A	61.191.191.241	10800s	(03:00:00)
dependprefer.com	IN	A	218.75.144.6	10800s	(03:00:00)
dependprefer.com	IN	A	119.39.238.2	10800s	(03:00:00)

— end —

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

June 29, 2009Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
80.244.229.67	Russian Federation (Moscow)*	Whois	Google	DNSStuff	Urgentmessage.org
6.5.4.3	United States*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom	Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to		ScamFraudAlert@gmail.com
date		Mon, Jun 29, 2009 at 2:16 AM
subject		Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.

hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA

Canadian Pharmacy Spam – www.shop29.net aka www.shop75.net

June 28, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by taking those counterfeit drugs.

SmartFilter Category:

Malicious Sites
Make Category Suggestions

Namerservers on IP:

dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com

Address lookup

canonical name	www.shop29.net.
aliases
addresses	119.39.238.2 203.93.208.86 218.75.144.6 60.191.221.117 60.191.239.153 61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom shop29.net“…

   Domain Name: SHOP29.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:16:16 UTC <<<

Queried whois.onlinenic.com with “shop29.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop29.net
Record last updated at 2009-06-22 10:50:33
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Technical Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Billing Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for shop29.net failed: WouldBlock

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
http://www.shop29.net	IN	A	61.191.191.241	10799s	(02:59:59)
http://www.shop29.net	IN	A	119.39.238.2	10799s	(02:59:59)
http://www.shop29.net	IN	A	203.93.208.86	10799s	(02:59:59)
http://www.shop29.net	IN	A	218.75.144.6	10799s	(02:59:59)
http://www.shop29.net	IN	A	60.191.221.117	10799s	(02:59:59)
http://www.shop29.net	IN	A	60.191.239.153	10799s	(02:59:59)
shop29.net	IN	NS	ns6.creaseon.pl	172800s	(2.00:00:00)
shop29.net	IN	NS	ns4.bothstart.ru	172800s	(2.00:00:00)
shop29.net	IN	NS	ns3.bothstart.ru	172800s	(2.00:00:00)
shop29.net	IN	NS	ns5.creaseon.pl	172800s	(2.00:00:00)

— end —

Address lookup

canonical name	www.shop75.net.
aliases
addresses	61.191.191.241 119.39.238.2 203.93.208.86 218.75.144.6 60.191.221.117 60.191.239.153

Domain Whois record

Queried whois.internic.net with “dom shop75.net“…

   Domain Name: SHOP75.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:18:49 UTC <<<

Queried whois.onlinenic.com with “shop75.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop75.net
Record last updated at 2009-06-22 10:50:38
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
http://www.shop75.net	IN	A	60.191.239.153	10800s	(03:00:00)
http://www.shop75.net	IN	A	61.191.191.241	10800s	(03:00:00)
http://www.shop75.net	IN	A	119.39.238.2	10800s	(03:00:00)
http://www.shop75.net	IN	A	203.93.208.86	10800s	(03:00:00)
http://www.shop75.net	IN	A	218.75.144.6	10800s	(03:00:00)
http://www.shop75.net	IN	A	60.191.221.117	10800s	(03:00:00)
shop75.net	IN	A	61.191.191.241	10800s	(03:00:00)
shop75.net	IN	A	218.75.144.6	10800s	(03:00:00)
shop75.net	IN	A	119.39.238.2	10800s	(03:00:00)
shop75.net	IN	A	203.93.208.86	10800s	(03:00:00)
shop75.net	IN	A	60.191.221.117	10800s	(03:00:00)
shop75.net	IN	A	60.191.239.153	10800s	(03:00:00)

Canadian Pharmacy – Rx Partners – www.rx-partner.biz

June 24, 2009Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

rxpartner-sign in

Canadian Pharmacy Spamming Operation

Address lookup

canonical name rx-partners.biz.
aliases
addresses 91.199.112.18
Domain Whois record

Queried whois.biz with “rx-partners.biz”…

Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok

Registrant ID: 550770560-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: 2nd Floor
Registrant State/Province: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Facsimile Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Billing Contact Address2: 241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2: 241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Wed Jan 21 15:12:51 GMT 2009
Registrar Fields
—————-
IDNLang: de

Whois database was last updated on: Sat May 02 15:29:14 GMT 2009
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.18″…
Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for rx-partners.biz failed: MessageTruncated

DNS query for 18.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rx-partners.biz IN TXT v=spf1 +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN TXT spf2.0/pra +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006617085
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rx-partners.biz IN NS ns1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS ns0.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip3.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip2.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN A 91.199.112.18 1200s (00:20:00)
rx-partners.biz IN MX
preference: 10
exchange: mail.rx-partners.biz 1200s

Domain

ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
rx-partners.biz
rxpbill.biz
rxpcash.biz
rxpcheck.biz
rxppay.biz
tabzcash.biz
pillzcash.biz
pillzcheck.biz
pillzmeds.biz
tabpaid.biz
pay4meds.biz
pay4medz.biz
pay4pill.biz
pay4tabs.biz
pay4tabz.biz
pay4med.biz
pay4medc.biz
pay4pillz.biz
paid4meds.biz
ed-sup.com
edselection.com
manfriendly.com
omhca.com
partners-dns.com
perfectgenerics.com
prescriptionspoint.com
propeciahair.com
rxtrusted.com
secureccpay.com

83.149.69.46
83.149.69.47
83.149.82.186
91.199.112.7
91.199.112.8

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

SpamFilter IPs – TrustedSource.org (NameServers)

June 2, 20091 Comment

SmartFilter Category:

Spam URLs
Make Category Suggestions

Namerservers on IP:

dns1.carryfit.com
dns1.drivefabled.com
dns1.grewmile.com
dns1.relaxrange.com
dns1.towardhardy.com
dns1.trendysit.com
dns1.varystart.com
dns1.wentcrisp.com
dns1.winnertrue.com
dns2.angerboat.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.hasfeet.com
dns2.headraise.com
dns2.pridenature.com
dns2.shallcoat.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns3.drivefabled.com
dns3.headraise.com
dns3.noticematch.com
dns3.nounstudy.com
dns3.relaxrange.com
dns3.shallcoat.com
dns3.tangyprime.com
dns3.towardhardy.com
dns3.varystart.com
dns4.coursethey.com
dns4.createwere.com
dns4.dadfour.com
dns4.dreamylot.com
dns4.greatyule.com
dns4.headraise.com
dns4.joyfulthin.com
dns4.relaxrange.com
dns4.shallcoat.com
dns4.sliporgan.com
dns4.towardhardy.com
dns4.trendysit.com
dns4.varystart.com
dns4.winnertrue.com
host2.soonplay.com
host4.soonplay.com
ns1.activeinch.com
ns1.boatabove.com
ns1.breezycorner.com
ns1.cookmulti.com
ns1.croppast.com
ns1.dimplechair.com
ns1.dimplechaste.com
ns1.donewater.com
ns1.earlytwenty.com
ns1.feetreal.com
ns1.ideazeal.com
ns1.listenflower.com
ns1.plainable.com
ns1.posewill.com
ns1.powerhardy.com
ns1.silverwe.com
ns1.strongwisdom.com
ns1.toophrase.com
ns1.wheredone.com
ns2.activeinch.com
ns2.callold.com
ns2.cookmulti.com
ns2.croppast.com
ns2.cuddlyhumble.com
ns2.dimplechair.com
ns2.dimplechaste.com
ns2.earlytwenty.com
ns2.listenflower.com
ns2.lucidsoon.com
ns2.mightexcept.com
ns2.posewill.com
ns2.resttrust.com
ns2.ropemeant.com
ns2.toophrase.com
ns2.wheredone.com
ns3.activeinch.com
ns3.atbread.com
ns3.bandwater.com
ns3.briefdesire.com
ns3.burnround.com
ns3.callold.com
ns3.cookmulti.com
ns3.cuddlyhumble.com
ns3.dimplechair.com
ns3.dimplechaste.com
ns3.earlytwenty.com
ns3.fizzdecent.com
ns3.listenflower.com
ns3.lucidsoon.com
ns3.posewill.com
ns3.quietyet.com
ns3.radiothan.com

Canadian Pharmacy – www.stickscale.com

June 2, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
12.238.6.206	United States (Indianapolis)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.166	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Rusty Cisneros Mon Jun 1 22:06:20 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.re3.yahoo.com from=sievi.fi; domainkeys=neutral (no sig); from=sievi.fi; dkim=neutral (no sig)
Received: from 12.238.6.206 (EHLO nlpi152.prodigy.net) (207.115.36.166)
by mta111.sbc.mail.re3.yahoo.com with SMTP; Mon, 01 Jun 2009 22:06:20 -0700
Received: from atvvzcc ([12.238.6.206])
by nlpi152.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5255p2w017612;
Tue, 2 Jun 2009 00:06:19 -0500
Message-ID: <000701c9e33f$ddcdb2e0$4a37416a@sievi.fi>
Reply-To: “Rusty Cisneros” rusty_cisnerostv@sievi.fi
From: “Rusty Cisneros” <rusty_cisnerostv@sievi.fi>
To: , , <rusty_cisnerostv@sievi.fi>
Subject: Get all the medications you want online!
Date: Tue, 02 Jun 2009 00:06:20 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 128

An Incredible Canadian Pharmacy is available at your Fingertips!
N0_Doctor_Needed! Click Here -> http://stickscale.com

SmartFilter Category:	Not Categorized Make Category Suggestions
IPs:	60.191.239.181 61.191.63.150 203.93.208.86 58.17.3.41

Address lookup

canonical name	stickscale.com.
aliases
addresses	203.93.208.86 58.17.3.41 60.191.239.181 61.191.63.150

Domain Whois record

Queried whois.internic.net with “dom stickscale.com“…

   Domain Name: STICKSCALE.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.RESTLOYAL.COM
   Name Server: NS2.RESTLOYAL.COM
   Name Server: SP66.DELETEDNS.COM
   Name Server: SP68.DELETEDNS.COM
   Status: ok
   Updated Date: 01-jun-2009
   Creation Date: 31-may-2009
   Expiration Date: 31-may-2010

>>> Last update of whois database: Wed, 03 Jun 2009 06:08:42 UTC <<<

Queried whois.paycenter.com.cn with “stickscale.com“…

Domain Name      : stickscale.com
PunnyCode        : stickscale.com

Registrant:
  Organization   : HOUXINYI
  Name           : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013

Administrative Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Technical Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Billing Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
stickscale.com	IN	A	60.191.239.181	3600s	(01:00:00)
stickscale.com	IN	A	58.17.3.41	3600s	(01:00:00)
stickscale.com	IN	A	61.191.63.150	3600s	(01:00:00)
stickscale.com	IN	A	203.93.208.86	3600s	(01:00:00)

Canadian Pharmacy – pde.nkboiwer.cn

June 2, 20092 Comments

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
207.115.20.48	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
161.116.95.52	Spain (Barcelona)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Brandi Edra Tue Jun 2 01:51:23 2009
Return-Path:
Authentication-Results: mta175.sbc.mail.mud.yahoo.com from=jathomas.com; domainkeys=neutral (no sig); from=jathomas.com; dkim=neutral (no sig)
Received: from 207.115.20.48 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta175.sbc.mail.mud.yahoo.com with SMTP; Tue, 02 Jun 2009 02:51:18 -0700
Received: from epmjfcb (n052.el.ub.es [161.116.95.52] (may be forged))
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with ESMTP id n529pHVr002402;
Tue, 2 Jun 2009 02:51:19 -0700
Reply-To: “Brandi Edra” bedrayy@jathomas.com
Date: Tue, 02 Jun 2009 01:51:23 -0700
Subject: PenisEnlargement Pills, HarderErections & BiggerPenis vmpp y2r
Sender: bedrayy@jathomas.com
From: “Brandi Edra”
Message-ID: <1243932683.5646@jathomas.com>
In-Reply-To:
To:
Content-Type: text/plain;
charset=”iso-8859-2″
Content-Transfer-Encoding: 8bit
Content-Length: 736

GIVE YOURSELF A LongerPEN1S!!!!!!!!!!

Discover the Clinically Proven and Doctor Approved Formula to give you 3-4 inches more

Discover the Clinically Proven and Doctor Approved Formula to give you 3-4 inches more

Bigger, L0NGER, Harder & LastingErections
1ncrease SexualStamina and SexDrive
More powerful, Intense0rgasms
http://pde.nkboiwer.cn

Almost a decade ago, our formulator set out to develop a safe and powerful formula that would eliminate the SexualDifficulties that millions 0f men are quietly suffering with.

Fast forward to today and Leading Edge Herbals has developed the world’s leading male sexual enhancement product, Mas Gentle Man is helping tens of thousands of men from every corner of the globe banish the

http://pow.nkboiwer.cn

SmartFilter Category:	Not Categorized Make Category Suggestions
IPs:	82.203.170.221 87.99.70.86 89.232.37.181 116.75.231.145 123.238.15.215 201.231.58.158 62.84.51.85 79.132.75.139
Nameservers:	ns1.bydvwqcdw.com ns2.syyftgswdce.com ns3.bydvwqcdw.com ns4.syyftgswdce.com

Canadian Pharmacy – www.motherany.com

May 31, 20091 Comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
12.161.202.90	United States (Neffs)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.137	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

From Brendan Collier Sun May 31 05:31:41 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=dck.com.ar; domainkeys=neutral (no sig); from=dck.com.ar; dkim=neutral (no sig)
Received: from 12.161.202.90 (EHLO nlpi123.prodigy.net) (207.115.36.137)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Sat, 30 May 2009 21:31:35 -0700
Received: from 5s9gclp ([12.161.202.90])
by nlpi123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4V4VGXY028689;
Sat, 30 May 2009 23:31:33 -0500
Message-ID: <000701c9e1eb$c0242c10$627e2ad2@dck.com.ar>
Reply-To: “Brendan Collier”
From: “Brendan Collier”
To: ,
Subject: great deals goin on
Date: Sun, 31 May 2009 08:31:41 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
66.147.35.66	United States (Davenport)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.48	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

From Amparo Savage Fri May 29 11:46:23 2009

Return-Path:
Authentication-Results: mta102.sbc.mail.re3.yahoo.com from=blm.co.uk; domainkeys=neutral (no sig); from=blm.co.uk; dkim=neutral (no sig)
Received: from 66.147.35.66 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 22:35:52 -0700
Received: from tcdb592 (nsc66.147.35-66.newsouth.net [66.147.35.66])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4U5ZbWA013298;
Fri, 29 May 2009 22:35:52 -0700
Message-ID: <000701c9e08d$c3fa2150$627e2c7a@blm.co.uk>
Reply-To: “Amparo Savage” a.savage_go@blm.co.uk
From: “Amparo Savage” a.savage_go@blm.co.uk
To: ScamFraudAlert
Subject: Canadian Rx Medications to the rescue
Date: Fri, 29 May 2009 11:46:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

top-phar-medshop2

Canadian Pharmacy – the worst Internet fraud problem today. These criminals steal identities and credit card details from unsuspecting customers, to use later to pay for tens of thousands of domain name registrations. Don’t be fooled.
Similar sites to this are listed in the spam trap report at
http://rss.uribl.com/ns/plumbold_com.html
Use complainterator.com to generate complaints to the registrars, and include a link to this page for evidence.

Posted at 05/31/2009-12:43:06 AM by pharmalert, Experienced Reviewer

“Canadian Pharmacy” is a flagrant criminal operation that keeps opening thousands and thousands new sites promoting the same old illegal pharmaceuticals. You seldom see greedier scumbags than these criminals. They don’t care how much damage they cause to innocent people as long as they get all they want. No matter if people get seriously ill after taking their fake drugs, or lose their money after giving over their credit card details. This kind of scammers would be happy to sell their own mother for a quick buck (if they only had one).

It’s always better to stay far away from here and similar sites altogether. There’s no one on the face of earth who would gain by this scam but the criminals behind it, and possibly the poor schmucks who send all the spam for them. They think they are safe, but one day the tide will turn…

See evidence of fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed

Posted at 05/30/2009-08:56:12 PM by Nodus, Experienced Reviewer , View profile [ Reputation score: 9 / 9 ]

Address lookup

canonical name	www.motherany.com.
aliases
addresses	58.17.3.41 60.191.239.181 61.191.63.150 203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom motherany.com“…

   Domain Name: MOTHERANY.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PLUMBOLD.COM
   Name Server: NS2.PLUMBOLD.COM
   Name Server: NS3.MORALFLAIR.COM
   Name Server: NS4.MORALFLAIR.COM
   Status: ok
   Updated Date: 27-may-2009
   Creation Date: 25-may-2009
   Expiration Date: 25-may-2010

>>> Last update of whois database: Sun, 31 May 2009 18:19:27 UTC <<<

Queried whois.paycenter.com.cn with “motherany.com“…

Domain Name      : motherany.com
PunnyCode        : motherany.com

Registrant:
  Organization   : LIUJIARONG
  Name           : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064

Administrative Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Technical Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Billing Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Network Whois record

Queried whois.apnic.net with “58.17.3.41“…

inetnum:      58.17.3.32 - 58.17.3.47
netname:      CHAOREN-CAFE
country:      CN
descr:        Superman Internet Cafe
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      wujiawei@china-netcom.com 20070427
mnt-by:       MAINT-CNCGROUP-JX
source:       APNIC

route:        58.17.0.0/17
descr:        CNC Group CHINA169 Jiangxi Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060728
source:       APNIC

route:        58.17.0.0/17
descr:        CNCGroup JiangXi province network
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20050218
changed:      hm-changed@apnic.net 20050331
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
http://www.motherany.com	IN	A	60.191.239.181	3600s	(01:00:00)
http://www.motherany.com	IN	A	61.191.63.150	3600s	(01:00:00)
http://www.motherany.com	IN	A	203.93.208.86	3600s	(01:00:00)
http://www.motherany.com	IN	A	58.17.3.41	3600s	(01:00:00)
motherany.com	IN	A	58.17.3.41	3600s	(01:00:00)
motherany.com	IN	A	61.191.63.150	3600s	(01:00:00)
motherany.com	IN	A	203.93.208.86	3600s	(01:00:00)
motherany.com	IN	A	60.191.239.181	3600s	(01:00:00)

— end —

Canadian Pharmacy – Rxpayouts.com Complaint

May 31, 20091 Comment

RxPayouts.com Online Pharmacy Fraud Internet

RxPayouts.com
http://www.rxpayouts.com
Internet,
U.S.A.

I am a member of the affiliate program of RxPayouts.com, which is an online pharmacy.

On Oct 24, I was shocked to learn that my account was suspended due to inactivity when my store have been consistently operating for more than a month now. I immediately tried to contact their affiliate support through phone and email but to no avail, until on Oct 27 when one of my employees was able to reach an affiliate support personnel by phone by the name of allen.

Allen basically said that my store does not exist. How can my store not exist when Rxpayouts own customer support knows us and we are still able to process orders.

Rxpayouts faked a suspension then removed my account when we are about to receive our USD 4000 commission. Rxpayouts stole my commissions! This company is scamming people and affiliates should know!

To prove that my store still operates here is a shipped out transaction, note that sensitive info have been removed:
——————————————————————
This email is to notify you that an order for your store
greensafemeds.com has been shipped, all the details
are shown below.

Order ID: #2852237
Order Date: 2008-10-23 15:27:25

You are receiving this email because your email address is registered in the
back office (((Redacted)))
If you do not wish to receive these notification emails you can leave
Notify email blank for this store. All notification emails arrive with the
subject prefix ‘Admin:’ allowing you to easily filter these messages if you
have a high volume store.

If you have any questions please contact us at any time, but not by using this
email as this email was sent to you by our systems.

Thanks — (((Redacted)))

Phillip yao
Manila
Philippines

Rxpayouts payment fraud

Well they paid me for the USD 4000 a few weeks back. So I thought that the issue, whatever it was, was finally resolved.

Now three (3) weeks later and I have an unpaid commission of USD 8000+ and they won’t pay again.

They say I am under fraud investigation. They neglected to say what fraudulent act I supposedly did or that I was under investigation to begin with. If they want to put me under investigation, at the very least tell me so that I wouldn’t have wasted time selling their products.

It seems I am not the first to encounter this problem with Rxpayouts. It seems this is standard operation in our local industry. They have duped many affiliates.

Canadian Pharmacy – www.simple-op.net

May 31, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Address lookup

canonical name	simple-op.net.
aliases	http://www.simple-op.net
addresses	195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom simple-op.net“…

   Domain Name: SIMPLE-OP.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 31-jul-2008
   Creation Date: 06-jun-2008
   Expiration Date: 06-jun-2011

>>> Last update of whois database: Sun, 31 May 2009 12:11:56 UTC <<<

Queried whois.enom.com with “simple-op.net“…

Visit AboutUs.org for more information about simple-op.net
<a href="http://www.aboutus.org/simple-op.net">AboutUs: simple-op.net</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: simple-op.net

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 06 Jun 2008 09:43:55
Expiration date: 06 Jun 2011 09:43:55

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

http://www.simple-op.net

CNAME

simple-op.net

60s

(00:01:00)

simple-op.net

SOA

server:	ns1.adverdomain.com
email:	root.simple-op.net
serial:	2009030829
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	30

60s

(00:01:00)

simple-op.net

ns4.nscontrol.com

60s

(00:01:00)

simple-op.net

ns2.nscontrol.com

60s

(00:01:00)

simple-op.net

ns5.nscontrol.com

60s

(00:01:00)

simple-op.net

ns1.nscontrol.com

60s

(00:01:00)

simple-op.net

ns3.nscontrol.com

60s

(00:01:00)

simple-op.net

195.95.155.3

60s

(00:01:00)

Canadian Pharmacy – cheapfasteasy.info aka canadianpharmacyltd.com

May 30, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

http://www.canadianpharmacyltd.com/?aid=6644

Address lookup

canonical name	cheapfasteasy.info.
aliases
addresses	66.154.53.36

Domain Whois record

Queried whois.afilias.info with “cheapfasteasy.info“…

Domain ID:D24249387-LRMS
Domain Name:CHEAPFASTEASY.INFO
Created On:27-Mar-2008 13:56:30 UTC
Last Updated On:09-Apr-2009 16:36:03 UTC
Expiration Date:27-Mar-2010 13:56:30 UTC
Sponsoring Registrar:Name.com LLC (R279-LRMS)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:ncr-1910406-9413
Registrant Name:bodo unger
Registrant Organization:bodo unger
Registrant Street1:blk 1 door 1 consolation village
Registrant City:cagayan de oro city
Registrant State/Province:misamis oriental
Registrant Postal Code:9000
Registrant Country:PH
Registrant Phone:+63.9194311743
Registrant Email:bodounger@yahoo.de

Admin ID:nc-365243
Admin Name:bodo unger
Admin Organization:bodo unger
Admin Street1:blk 1 door 1 consolation village
Admin City:cagayan de oro city
Admin State/Province:misamis oriental
Admin Postal Code:9000
Admin Country:PH
Admin Phone:+63.9194311743
Admin Email:bodounger@yahoo.de

Billing ID:nc-365245
Billing Name:bodo unger
Billing Organization:bodo unger
Billing Street1:blk 1 door 1 consolation village
Billing City:cagayan de oro city
Billing State/Province:misamis oriental
Billing Postal Code:9000
Billing Country:PH
Billing Phone:+63.9194311743
Billing Email:bodounger@yahoo.de

Tech ID:nc-365244
Tech Name:bodo unger
Tech Organization:bodo unger
Tech Street1:blk 1 door 1 consolation village
Tech City:cagayan de oro city
Tech State/Province:misamis oriental
Tech Postal Code:9000
Tech Country:PH
Tech Phone:+63.9194311743

Tech Email:bodounger@yahoo.de
Name Server:NS1.CONEPUPPY.COM
Name Server:NS2.CONEPUPPY.COM

Network Whois record

Queried whois.arin.net with “66.154.53.36“…

OrgName:    Cyber Wurx LLC
OrgID:      CPCW
Address:    12430 Tesson Ferry Rd
City:       St Louis
StateProv:  MO
PostalCode: 63128
Country:    US

NetRange:   66.154.0.0 - 66.154.95.255
CIDR:       66.154.0.0/18, 66.154.64.0/19
NetName:    CONEPUPPY-COM
NetHandle:  NET-66-154-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.CONEPUPPY.COM
NameServer: NS2.CONEPUPPY.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-07-20
Updated:    2003-08-20

RTechHandle: CS1169-ARIN
RTechName:   IP SUPPORT, Christopher
RTechPhone:  +1-404-681-9888
RTechEmail:  ipsupport@cyberwurx.com 

OrgAbuseHandle: ABUSE2236-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-404-681-9888
OrgAbuseEmail:  abuse@cyberwurx.com

OrgTechHandle: NOC2137-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  routing@cyberwurx.com

OrgTechHandle: IPALL4-ARIN
OrgTechName:   ipallocation
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  arin@cyberwurx.com

# ARIN WHOIS database, last updated 2009-05-29 20:00

DNS records

name

class

type

data

time to live

cheapfasteasy.info

66.154.53.36

86400s

(1.00:00:00)

cheapfasteasy.info

SOA

server:	ns1.conepuppy.com
email:	hostmaster.conepuppy
serial:	2008090209
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	86400

86400s

(1.00:00:00)

cheapfasteasy.info

ns1.conepuppy.com

86400s

(1.00:00:00)

cheapfasteasy.info

ns2.conepuppy.com

86400s

(1.00:00:00)

cheapfasteasy.info

preference:	20
exchange:	cwmail2.conepuppy.com

86400s

(1.00:00:00)

cheapfasteasy.info

preference:	10
exchange:	cwmail.conepuppy.com

86400s

(1.00:00:00)

36.53.154.66.in-addr.arpa

PTR

bbwz.com

86400s

(1.00:00:00)

PharmacyUSA!- Canadian Pharmacy – droolplanet.com

May 25, 2009Leave a comment

PharmacyUSA!

	from	support@droolplanet.com
to
date		Mon, May 25, 2009 at 3:17 PM
subject		PharmacyUSA!

Address lookup

canonical name	droolplanet.com.
aliases
addresses	60.191.239.189 203.93.208.86 58.17.3.44

Domain Whois record

Queried whois.internic.net with “dom droolplanet.com“…

   Domain Name: DROOLPLANET.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.DROOLPLANET.COM
   Name Server: NS2.DROOLPLANET.COM
   Name Server: NS3.DROOLPLANET.COM
   Name Server: NS4.DROOLPLANET.COM
   Status: ok
   Updated Date: 25-may-2009
   Creation Date: 24-may-2009
   Expiration Date: 24-may-2010

>>> Last update of whois database: Mon, 25 May 2009 23:26:34 UTC <<<

Queried whois.paycenter.com.cn with “droolplanet.com“…

Query error: TimedOut

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
droolplanet.com	IN	A	60.191.239.189	600s	(00:10:00)

WhoIs Stimul-media? Rx-partners.com/Rx-partner.biz

May 24, 20092 Comments

WhoIs Stimul-media??? Rx-Partners ???

Fast-online-refills.com is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.

Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.

Rogue Internet pharmacy (definition):

A pharmacy website that intentionally or knowingly:

violates, appears to violate, or encourages violation of Federal or state law or regulation;
does not adhere to accepted standards of medicine and/or pharmacy practice, including standards of safety; and/or
engages in fraudulent or deceptive business practices.

Website Summary

URL:	http://www.fast-online-refills.com
Registrar:	Key-Systems
Approval Status:	rogue (since 07/31/2009)
Online Status:	online

Network

This site seems to be part of the Stimul-Cash network.

Stimul-Cash is a rogue Internet pharmacy affiliate program. Websites affiliated with this network admit offering prescription drugs from overseas without a valid prescription (which violates multiple US laws). Stimul-Cash’s website claims that the drugs come from India. However, India is known to be a source of illicit, sometimes counterfeit or adulterated, medicines.

Stimul-Cash’s forums are in Russian, which suggests that the operation is not actually run by Indians, but that the network may be linked to an organization in Russia. Additionally, Stimul-Cash appears to be linked to Rx-Partners.biz, another rogue online pharmacy network.

Pharma Fraud Escalates Dramatically

eSoft provided me with data on seven different templates they have discovered. The quantity is amazing. In four days last week they detected:

1,104 canadian_pharm_light_blue
993 canadian_pharm_blue
27 top_pharmacy
23 canadian_pharm_white
18 health_sol
6 canadian_pharm_blue2
1 canadian_pharm_p_images

That is 543 of these sites per day over four days — and only for these seven templates.

“The canadian_* templates are clearly the most prevalent and we have traced these back to “GlavMed”, which we believe operates out of the Russian Business Network and is likely tied to the Russian mafia. The GlavMed hosts tend to stay online for no more than a couple of weeks.”

The other major outfit is Rx Partners/Rx-Commission Networks/ Stimul Cash and they have websites:

http://www.rx-partners.biz
http://www.stimul-cash.com/sites.html

Here are some recent (last 4 days) examples of these sites

www.stimul-cash.com stimul-media.com Centralux Limited

13/02/2009

No comment

www.stimul-cash.com stimul-media.com Centralux Limited

Affiliation system for the sale of drugs
many spams Viagra type appear to be linked to these sites

www.stimul-cash.com 91.199.112.5

Stimuli-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, 16 appt. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: Inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

Address lookup

canonical name	stimul-media.com.
aliases
addresses	88.85.65.160

Domain Whois record

Queried whois.internic.net with “dom stimul-media.com“…

Domain Name: STIMUL-MEDIA.COM
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Name Server: NS1.STIMUL-MEDIA.COM
Name Server: NS2.STIMUL-MEDIA.COM
Status: clientTransferProhibited
Updated Date: 13-apr-2009
Creation Date: 18-apr-2006
Expiration Date: 18-apr-2011

>>> Last update of whois database: Sun,
24 May 2009 19:28:00 UTC

Queried whois.rrpproxy.net with “stimul-media.com“…

DOMAIN: STIMUL-MEDIA.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-AMM1304
owner-organization: STIMUL-MEDIA.COM
owner-fname: Asiyat
owner-lname: Marysheva
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: marysheva@yahoo.com

admin-contact: P-AMM1304
admin-organization: STIMUL-MEDIA.COM
admin-fname: Asiyat
admin-lname: Marysheva
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: marysheva@yahoo.com

tech-contact: P-AMM1304
tech-organization: STIMUL-MEDIA.COM
tech-fname: Asiyat
tech-lname: Marysheva
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: marysheva@yahoo.com

billing-contact: P-AMM1304
billing-organization: STIMUL-MEDIA.COM
billing-fname: Asiyat
billing-lname: Marysheva
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: marysheva@yahoo.com

nameserver: ns1.stimul-media.com 88.85.65.160
nameserver: ns2.stimul-media.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.160“…

Information related to ‘88.85.64.0 – 88.85.71.255’

inetnum: 88.85.64.0 – 88.85.71.255
netname: WEBAZILLA
descr: WebaZilla
country: NL
admin-c: WZNL1-RIPE
tech-c: WZNL1-RIPE
status: ASSIGNED PA
mnt-by: WZNET-MNT
mnt-routes: WZNET-MNT
changed: bk@webazilla.com 20070209
source: RIPE

role: WebaZilla RIPE Manager
address: WebaZilla B.V.
address: Postbus 19115
address: 3501DC Utrecht
address: Netherlands
phone: +31612253464
fax-no: +31303100299
e-mail: noc@webazilla.com
mnt-by: WZNET-MNT
admin-c: BK5536-RIPE
tech-c: BK5536-RIPE
tech-c: KV1670-RIPE
nic-hdl: WZNL1-RIPE
changed: bk@webazilla.com 20070718
source: RIPE

% Information related to ‘88.85.64.0/19AS35415’

route: 88.85.64.0/19
descr: WEBAZILLA
origin: AS35415
mnt-by: WZNET-MNT
changed: bk@webazilla.com 20060728
source: RIPE

DNS records

DNS query for 160.65.85.88.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

stimul-media.com

preference:	1
exchange:	mail.stimul-media.com

3600s

(01:00:00)

stimul-media.com

SOA

server:	stimul-media.com
email:	root.stimul-media.com
serial:	2009021601
refresh:	1200
retry:	240
expire:	43200
minimum ttl:	3600

3600s

(01:00:00)

stimul-media.com

ns2.stimul-media.com

3600s

(01:00:00)

stimul-media.com

ns1.stimul-media.com

3600s

(01:00:00)

stimul-media.com

88.85.65.160>

Domains Listings

stimulmedia.us
stimul-media.org
stimulmedia.org
x-traffic.org
indianmeds.org
stimul-media.net
stimulmedia.net
indianrx.net
pharmaceutical-news.net
stimulmedia.info
anti-fungal-meds.com
anti-headache-meds.com
bp-meds.com
cheap-anti-depressants.com
cheap-ed-drugs.com
cheap-ed-meds.com
cheap-ed-pills.com
cheap-pain-meds.com
discount-ed-meds.com
discount-ed-pills.com
extracheapdrugs.com
fullpocket.com
gastrointestinal-meds.com
get-your-movie.com
gpills.com
help-me-please.com
mens-best-friends.com
order-cheap-antibiotics.com
order-cheap-cialis.com
order-cheap-levitra.com
pills4boys.com
pr-drugs.com
reels777.com
stimulmedia.com
stimul-media.com
thyroid-meds.com
womens-health-meds.com
deli-drugs.com
delirx.com
delidrugs.com
delhi-drugs.com
delhidrugs.com
delhirx.com
perfect-ed-store.com
top-viagra-store.com
worlds-best-pharmacy.com
worldbestpharmacy.com
ordercheappills.com
bestdealviagra.com
yourpillshere.com
genericsfromindia.com
indian-generics.com
secure-my-card.com
mumbaidrugs.com
my-secure-billing.com
best-cialis-store.com
friendly-ed-pharmacy.com
popular-ed-products.com
best-levitra-store.com
rxpforum.com
rxpblog.com
rxpwiki.com
smok-ox.com
smokox.com
easy-export.biz
stimul-media.biz
farmaforum.biz
pharmforum.biz

CaCeWeb.com

stimulmedia.us

stimul-media.org

stimulmedia.org

x-traffic.org

indianmeds.org

stimul-media.net

stimulmedia.net

indianrx.net

pharmaceutical-news.net

stimulmedia.info

anti-fungal-meds.com

anti-headache-meds.com

bp-meds.com

cheap-anti-depressants.com

cheap-ed-drugs.com

cheap-ed-meds.com

cheap-ed-pills.com

cheap-pain-meds.com

discount-ed-meds.com

discount-ed-pills.com

extracheapdrugs.com

fullpocket.com

gastrointestinal-meds.com

get-your-movie.com

gpills.com

help-me-please.com

mens-best-friends.com

order-cheap-antibiotics.com

order-cheap-cialis.com

order-cheap-levitra.com

pills4boys.com

pr-drugs.com

reels777.com

stimulmedia.com

stimul-media.com

thyroid-meds.com

womens-health-meds.com

deli-drugs.com

delirx.com

delidrugs.com

delhi-drugs.com

delhidrugs.com

delhirx.com

perfect-ed-store.com

top-viagra-store.com

worlds-best-pharmacy.com

worldbestpharmacy.com

ordercheappills.com

bestdealviagra.com

yourpillshere.com

genericsfromindia.com

indian-generics.com

secure-my-card.com

mumbaidrugs.com

my-secure-billing.com

best-cialis-store.com

friendly-ed-pharmacy.com

popular-ed-products.com

best-levitra-store.com

rxpforum.com

rxpblog.com

rxpwiki.com

smok-ox.com

smokox.com

easy-export.biz

stimul-media.biz

farmaforum.biz

pharmforum.biz

WhoIs viagrasuperstore.net (Rx-Partners)

May 24, 20093 Comments

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act

Address lookup 1-800-532-4808

canonical name	viagrasuperstore.net
aliases
addresses	91.199.112.168

Domain ueried whois.internic.net with “dom viagrasuperstore.net“…

Domain Name: VIAGRASUPERSTORE.NET
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: ELD.STEELURK.COM
Name Server: ISA.STEELURK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 13-mar-2009
Creation Date: 03-may-2007
Expiration Date: 03-may-2010

Last update of whois database: Sun, 24 May 2009 10:22:42 UTC

Queried whois.directnic.com with “viagrasuperstore.net“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: VIAGRASUPERSTORE.NET

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:15:24 AM
Record expires on 05-03-2010
Record created on 05-03-2007

Domain servers in listed order:
ELD.STEELURK.COM 91.199.112.7
ISA.STEELURK.COM 91.199.112.8

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.168“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 168.112.199.91.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

viagrasuperstore.net

91.199.112.168

1200s

(00:20:00)

viagrasuperstore.net

SOA

server:	eld.steelurk.com
email:	root.steelurk.com
serial:	2006629636
refresh:	3600
retry:	900
expire:	604800
minimum ttl:	1200

1200s

(00:20:00)

viagrasuperstore.net

eld.steelurk.com

1200s

(00:20:00)

viagrasuperstore.net

isa.steelurk.com

1200s

(00:20:00)

Domains

lovepills.us
ed-drugs.us
bluepillsonline.org
caverta.org
cheapest-drug.org
edfriends.org
menssexpills.org
tableta.org
zenegra.org
pills-for-you.org
rxbuy.org
ukgenerics.net
achetercialis.net
bluepillsonline.net
aviagra.net
ezmedz.net
colmed.net
meds4all.net
genericsaver.net
pillsamples.net
viagrasuperstore.net
acquistoviagra.net
ezgenerics.net
rxdeal.net
edselected.net
cialis-generic.net
mens-pharmacy.net
uk-pharmacy.net
offshore-pharmacy.net
viagra-sample.net
pillskingdom.net
pills-kingdom.net
easy-pharmacy.net
comprarviagra.net
comprarcialis.net
indianpharmacyltd.net
pharmaciegenerique.net
trusted-tabs.net
farmaciagenerica.net
viagra-compare.net
cialiskaufen.net
bluepillsonline.info
cheap-generic.info
cheapestgeneric.info
cialis-bestellen.info
cialis-kaufen.info
discountgeneric.info
edfriends.info
generic-cialiss.info
generic-viagras.info
genericcialisuk.info
genericoviagra.info
genericviagras.info
order-generic.info
pharmacywholesale.info
quality-generic-cialis.info
qualitygeneric.info
tabs-pack.info
ukgeneric.info
viagra-bestellen.info
viagra-generic-cialis.info
viagra-generic-pharmacy.info
viagra-kaufen.info
viagra-pharmacy-online.info
viagra-samples.info
viagra100mg.info
viagraon-line.info
pillgen.info
onlinepharmacystore.com
cheapedpills.com
pharmacy-style.com
comprar-levitra.com
get-cheap-pills.com
genericsaver.com
cheap-viagra-pills.com
viagraon-line.com
viagra-gratis.com
247rxpharmacy.com
farmaciaazzurra.com
ed-generic.com
fcpconline.com
sildegen.com
bettergenerics.com
onlinedrugscatalogue.com
drugstoretrust.com
ordercheapdrugs.com
japanexpressgeneric.com
medicanasfiables.com
edgenerics.com
steelurk.com
ed-selection.com
pillsample1.com
genericsforlove.com
drugsshipping.com
erbaslim.com
menspillstore.com
pillsu.com
cheap-viagra-24.com
pillschoice.com
ed-meds-online.com
bestmedchoice.com
bestbluepills.com
global-online-pharmacy.com
enefibio.com
rx-trusted.com
usapharmacyvip.com
eddiscounts.com
buyacyclovirweb.com
bluepillsonline.com
edtrusted.com
perfectmenspill.com
viagratis.com
viagracomprare.com
pharma-top.com
edmedsidea.com
skyrxshop.com
drgreenpharmacy.com
worldexpressgeneric.com
getupsf.com
rxgenericexpress.com
trusted-tabs.com
rxedtabs.com
cialischoice.com
discountcaregivers.com
shreya-life.com
generic-viagra-shop.com
cheap-pills-store.com
yourpharmacyrx.com
bestpricelovetabs.com
erectile-pills.com
farmacialusa.com
farmaciaazul.com
kuzishop.com
generic-online-store.com
rx-pharmacy-worldwide.com
kamagra-generic-viagra.com
health-for-men.com
pills-now.com
generic-pills-online.com
generics-drugs.com
famouspills.com
ezgenerics.com
ukgenerics.com
generics-supplier.com
telepharmasite.com
genericonlinestore.com
buyedpills.com
ed-choice.com
comprarviagra24h.com
comprarviagrawww.com
edgrouppills.com
rxdstore.com
viagra-24.com
genericbuyer.com
genericviagrauk.com
canadagenericviagra.com
onlinepills4all.com
trustedtabletsonline.com
payformeds.com
cialison-line.com
lafarmaciaenlinea.com
pharmakings.com
bluemagicpill.com
pills-kingdom.com
drugskingdom.com
edportugal.com
vijapan.com
italiaed.com
tabletslist.com
qualitytablets.com
viopage.com
telegenericos.com
ukgenericviagra.com
telemedicamentos.com
pillskingdom.com
menhealth-pharmacy.com
the-med-store.com
safe-drugstore.com
trusty-pharmacy.com
edpillseu.com
farmaciaiberica.com
discount-levitra.com
findgenericviagra.com
cialis-sample.com
drug-buy.com
rxpstore.com
onlinepharms.com
edspain.com
vifrance.com
trustedgenericdrugs.com
trustedkamagra.com
edcurepills.com
ivlon.com
cheap-supplier.com
1stgenerics.com
edstorerx.com
genericorders.com
rxheal.com
rxcare-global.com
rxalfa.com
drugslines.com
caremedication.com
eu-pills.com
cheap-genericviagra.com
vigrox.com
softvigrax.com
best-quality-pills.com
you-cheap-drugstore.com
medicine-catalog.com
abc-pharmacy.com
viagraenligne.com
bestseller-tablets.com
hushpills.com
pillsamples.com
prescriptionsgiant.com
levitra-compare.com
viagramedic.com
edmedsworld.com
ed-guru.com
cialistore.com
acheterviagra.biz
ed-solution.biz
generic-levitra.biz
rxdrugstore.biz
securepharmacy.biz
steroids-online.biz
trusted-tabs.biz
trustedtablets.biz
viagra-generic.biz
edselected.biz
medical-pill.biz
viagra-ed.biz
pharma-market.biz

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

Header Analysis

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Address lookup

Domain Whois record

Network Whois record

DNS records

Canadian Pharmacy Spamming Operation

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Header Analysis

Domain Whois record

Network Whois record

DNS records

Header Analysis

Header Analysis

Header Analysis

Address lookup

Domain Whois record

Network Whois record

DNS records

RxPayouts.com Online Pharmacy Fraud Internet

Rxpayouts payment fraud

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Address lookup

Domain Whois record

DNS records

PharmacyUSA!

Domain Whois record

Network Whois record

DNS records

WhoIs Stimul-media??? Rx-Partners ???

Website Summary

Network

Address lookup

Domain Whois record

Network Whois record

DNS records

Domains Listings

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

Warning

Address lookup 1-800-532-4808

Domain ueried whois.internic.net with “dom viagrasuperstore.net“…

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration