Canadian Pharmacy Spam – discountedxxxmegastore.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup

canonical name discountedxxxmegastore.com.
aliases
addresses 66.223.17.119

Domain Whois record

Queried whois.internic.net with “dom discountedxxxmegastore.com“…

   Domain Name: DISCOUNTEDXXXMEGASTORE.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS55.DOMAINCONTROL.COM
   Name Server: NS56.DOMAINCONTROL.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 01-oct-2009
   Creation Date: 01-oct-2009
   Expiration Date: 01-oct-2010

>>> Last update of whois database: Fri, 02 Oct 2009 10:25:22 UTC <<<

Queried whois.godaddy.com with “discountedxxxmegastore.com“…

Registrant:
   Domains by Proxy, Inc.
   DomainsByProxy.com
   15111 N. Hayden Rd., Ste 160, PMB 353
   Scottsdale, Arizona 85260
   United States

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: DISCOUNTEDXXXMEGASTORE.COM
      Created on: 30-Sep-09
      Expires on: 30-Sep-10
      Last Updated on: 30-Sep-09

   Administrative Contact:
      Private, Registration  DISCOUNTEDXXXMEGASTORE.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Technical Contact:
      Private, Registration  DISCOUNTEDXXXMEGASTORE.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Domain servers in listed order:
      NS55.DOMAINCONTROL.COM
      NS56.DOMAINCONTROL.COM

Network Whois record

Queried whois.arin.net with “66.223.17.119“…

OrgName:    Peer 1 Dedicated Hosting 
OrgID:      P1DH-1
Address:    101 Marietta Street
Address:    Suite 500
City:       Atlanta
StateProv:  GA
PostalCode: 30303
Country:    US

NetRange:   66.223.0.0 - 66.223.127.255 
CIDR:       66.223.0.0/17 
OriginAS:   AS11305
NetName:    66-223-0-0-NET
NetHandle:  NET-66-223-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.PEER1.NET
NameServer: NS2.PEER1.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2002-01-25
Updated:    2008-08-01

RTechHandle: DCOPE2-ARIN
RTechName:   DC Operations 
RTechPhone:  +1-678-365-2835
RTechEmail:  dhswip@peer1.com 

OrgTechHandle: DCOPE2-ARIN
OrgTechName:   DC Operations 
OrgTechPhone:  +1-678-365-2835
OrgTechEmail:  dhswip@peer1.com

# ARIN WHOIS database, last updated 2009-10-01 20:00

DNS records

name class type data time to live
discountedxxxmegastore.com IN SOA
server: ns55.domaincontrol.com
email: dns.jomax.net
serial: 2009093000
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
discountedxxxmegastore.com IN A 66.223.17.119 3600s (01:00:00)
discountedxxxmegastore.com IN NS ns55.domaincontrol.com 3600s (01:00:00)
discountedxxxmegastore.com IN NS ns56.domaincontrol.com 3600s (01:00:00)
discountedxxxmegastore.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
discountedxxxmegastore.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
119.17.223.66.in-addr.arpa IN PTR baconsteaksinvestments.com 1800s (00:30:00)

— end —

Canadian Pharmacy Spam – newrx4champions.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Rx-Medications Online!
Browse Our Selection Today! -> http://newrx4champions.com

Address lookup

canonical name newrx4champions.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom newrx4champions.com“…

   Domain Name: NEWRX4CHAMPIONS.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.BIDOKODJU.COM
   Name Server: NS4.BIDOKODJU.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Wed, 30 Sep 2009 20:07:11 UTC

Queried whois.namerich.cn with “newrx4champions.com“…

 DomainName : newrx4champions.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS4.BIDOKODJU.COM
Name Server......................NS6.HOSTLIFE45.COM
Name Server......................NS3.BIDOKODJU.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-23

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
newrx4champions.com IN A 60.12.166.154 54s (00:00:54)

— end —

Canadian Pharmacy Spam – Rx-Medications 0nline – rxsourceforwinners.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

 


0rder all your Favorite Rx-Medications0nline!
N0DoctorNeeded!
Browse 0ur Website Today! –> http://rxsourceforwinners.com

0rder all your Favorite Rx-Medications0nline!
N0DoctorNeeded!
Browse 0ur Website Today! –> http://rxsourceforwinners.com

Address lookup

canonical name rxsourceforwinners.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom rxsourceforwinners.com”…
Domain Name: RXSOURCEFORWINNERS.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

>>> Last update of whois database: Wed, 23 Sep 2009 16:23:38 UTC
Queried whois.namerich.cn with “rxsourceforwinners.com”…
DomainName : rxsourceforwinners.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS5.HOSTLIFE45.COM
Name Server………………….NS1.UBR34NS.COM
Name Server………………….NS2.UBR34NS.COM
Name Server………………….NS4.BIDOKODJU.COM
Name Server………………….NS6.HOSTLIFE45.COM
Name Server………………….NS3.BIDOKODJU.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-09-16
Expiration Date ……………..2010-09-16
Last Update Date ……………2009-09-23

Registrant ID ……………….V-X-58522-14215
Registrant Name ……………..ZHANG WENQI
Registrant Organization ………ZHANG WENQI
Registrant Address …………..JIAOTONGLU16
Registrant City………………DL
Registrant Province/State …….LN
Registrant Country Code ………CN
Registrant Postal Code ……….116049
Registrant Phone Number ………+86.041128805621
Registrant Fax ………………+86.041128805621
Registrant Email …………….kaokga@126.com

Administrative ID ……………V-X-58522-14215
Administrative Name ………….ZHANG WENQI
Administrative Organization …..ZHANG WENQI
Administrative Address ……….JIAOTONGLU16
Administrative City…………..DL
Administrative Province/State …LN
Administrative Country Code …..CN
Administrative Postal Code ……116049
Administrative Phone Number …..+86.041128805621
Administrative Fax …………..+86.041128805621
Administrative Email …………kaokga@126.com

Billing ID ………………….V-X-58522-14215
Billing Name ………………..ZHANG WENQI
Billing Organization …………ZHANG WENQI
Billing Address ……………..JIAOTONGLU16
Billing City…………………DL
Billing Province/State ……….LN
Billing Country Code …………CN
Billing Postal Code ………….116049
Billing Phone Number …………+86.041128805621
Billing Fax …………………+86.041128805621
Billing Email ……………….kaokga@126.com

Technical ID ………………..V-X-58522-14215
Technical Name ………………ZHANG WENQI
Technical Organization………..ZHANG WENQI
Technical Address ……………JIAOTONGLU16
Technical City……………….DL
Technical Province/State………LN
Technical Country Code ……….CN
Technical Postal Code ………..116049
Technical Phone Number ……….+86.041128805621
Technical Fax ……………….+86.041128805621
Technical Email ……………..kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154”…
inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for rxsourceforwinners.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – choosefr0mthebest.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

getallyourfavorites

Order all your Favorite Rx-MedicationsOnline! NODoctorNeeded!

Browse Our Website Today! –> http://choosefr0mthebest.com

Address lookup

canonical name choosefr0mthebest.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom choosefr0mthebest.com“…

   Domain Name: CHOOSEFR0MTHEBEST.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 20-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

>>> Last update of whois database: Mon, 21 Sep 2009 03:08:18 UTC <<<

Queried whois.namerich.cn with “choosefr0mthebest.com“…

 DomainName : choosefr0mthebest.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-21

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
choosefr0mthebest.com IN SOA
server: ns.choosefr0mthebest.com
email: admin.choosefr0mthebest.com
serial: 2009091601
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
choosefr0mthebest.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharmacy Spam – Stimul-cash.com (www.happeningrxcenter.com)

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration


DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


0rder all your Favorite Rx~Medications 0nline!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://happeningrxcenter.com

 

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
164.77.200.130 Chile (Santiago)* Whois Google DNSStuff Urgentmessage.org
207.115.20.119 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Caleb Henderson Wed Sep 16 11:41:48 2009
X-Apparently-To: ; Wed, 16 Sep 2009 11:39:48 -0700
Return-Path:
X-YahooFilteredBulk: 164.77.200.130
X-YMailISG: nt555YEWLDveVZbH1kYbzWeVbM9G4WRxyS.Kx_uai_pU02hKAXpaZeUMCEuJ
H8K8L5B7KsaSXQZXTeXekwFImkTADxR5uIWapkRrg42ri48py3F38C
_wVzwVod2XQjhVo.3p
QGMHQJq4jQZsJJGO1bLJdXHZcv68h_
Qf3WkmA1jWjbD29ggGbNYC9McI4La_J2C0hsFZp47OGS5MF5Qb03
Loui8QQI2qnu2wx7NeS1OINO4nji2DmUpJ0z.8zVgEgqs3cDOGgTWIJqFE0
pQEz28RXcIJ6K.qtUfF1Wbnu02nuNE_I4h34H0Dp0bLgz.AUlzNQucCiWt2lQ–
X-Originating-IP: [164.77.200.130]
Authentication-Results: mta134.sbc.mail.re2.yahoo.com from=canter.fi; domainkeys=neutral (no sig); from=canter.fi; dkim=neutral (no sig)
Received: from 164.77.200.130 (EHLO flpd109.prodigy.net) (207.115.20.119)
by mta134.sbc.mail.re2.yahoo.com with SMTP; Wed, 16 Sep 2009 11:39:48 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[164.77.200.130]
X-Originating-IP: [164.77.200.130]
Received: from d8ja2a3 ([164.77.200.130])
by flpd109.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8GIdQj0013048;
Wed, 16 Sep 2009 11:39:44 -0700
Message-ID: <000701ca36fd$5906bcc0$627e0f72@canter.fi>
Reply-To: “Caleb Henderson” <c.henderson_ky@canter.fi>
From: “Caleb Henderson” <c.henderson_ky@canter.fi>
To: ,
Subject: Get all the medications you want online!
Date: Wed, 16 Sep 2009 11:41:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 130

Address lookup

canonical name happeningrxcenter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom happeningrxcenter.com“…

Domain Name: HAPPENINGRXCENTER.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

>>> Last update of whois database: Thu, 17 Sep 2009 13:24:23 UTC

Queried whois.hupo.com with “happeningrxcenter.com“…

Domain Name: happeningrxcenter.com

Registrant Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Administrative Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Technical Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Billing Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
happeningrxcenter.com IN SOA
server: ns.happeningrxcenter.com
email: admin.happeningrxcenter.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
happeningrxcenter.com IN A 60.12.166.154 300s (00:05:00)

— end —

ww.stimul-cash.com Stimul-media.com Centralux Limited


13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Pure Magnum Pro – fullafrica.com – puremagnumpro.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning



“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
“Pure Magnum Pro” is an alleged male enhancement product promoted through spam by criminals. They offer you a “free trial bottle”, but you still have to hand over your credit card details for shipping. That information is of course exactly what these criminals are after, and they know the right strings to pull. But you’re not that stupid, are you? Of course they don’t leave it there. If you read the fine print you will notice that they will automatically send you a new bottle subject to a charge every month, unless you opt out. And guess what? You can’t opt out, because their contact information is missing and their contact/opt-out forms are useless. Your credit card would keep being charged until the sun explodes.

Did I already mention they are criminals?
Pure Magnum

Address lookup

canonical name fullafrica.com.
aliases
addresses 60.12.166.134

Domain Whois record

Queried whois.internic.net with “dom fullafrica.com“…

Domain Name: FULLAFRICA.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.PIJORGOF.COM
Name Server: NS1.TUQOTGAC.COM
Name Server: NS2.PIJORGOF.COM
Name Server: NS2.TUQOTGAC.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 06-sep-2009
Creation Date: 25-aug-2009
Expiration Date: 25-aug-2010

Last update of whois database: Fri, 11 Sep 2009 11:51:14 UTC

Queried whois.namerich.cn with “fullafrica.com“…

DomainName : fullafrica.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS1.TUQOTGAC.COM
Name Server………………….NS2.PIJORGOF.COM
Name Server………………….NS2.TUQOTGAC.COM
Name Server………………….NS1.PIJORGOF.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-08-25
Expiration Date ……………..2010-08-25
Last Update Date ……………2009-09-07

Registrant ID ……………….V-X-59719-16703
Registrant Name ……………..HUANG QINGHUA
Registrant Organization ………HUANG QINGHUA
Registrant Address …………..DONGFANGLU26
Registrant City………………HF
Registrant Province/State …….AH
Registrant Country Code ………CN
Registrant Postal Code ……….230061
Registrant Phone Number ………+86.051154732151
Registrant Fax ………………+86.051154732151
Registrant Email …………….nioehdk@126.com

Administrative ID ……………V-X-59719-16703
Administrative Name ………….HUANG QINGHUA
Administrative Organization …..HUANG QINGHUA
Administrative Address ……….DONGFANGLU26
Administrative City…………..HF
Administrative Province/State …AH
Administrative Country Code …..CN
Administrative Postal Code ……230061
Administrative Phone Number …..+86.051154732151
Administrative Fax …………..+86.051154732151
Administrative Email …………nioehdk@126.com

Billing ID ………………….V-X-59719-16703
Billing Name ………………..HUANG QINGHUA
Billing Organization …………HUANG QINGHUA
Billing Address ……………..DONGFANGLU26
Billing City…………………HF
Billing Province/State ……….AH
Billing Country Code …………CN
Billing Postal Code ………….230061
Billing Phone Number …………+86.051154732151
Billing Fax …………………+86.051154732151
Billing Email ……………….nioehdk@126.com

Technical ID ………………..V-X-59719-16703
Technical Name ………………HUANG QINGHUA
Technical Organization………..HUANG QINGHUA
Technical Address ……………DONGFANGLU26
Technical City……………….HF
Technical Province/State………AH
Technical Country Code ……….CN
Technical Postal Code ………..230061
Technical Phone Number ……….+86.051154732151
Technical Fax ……………….+86.051154732151
Technical Email ……………..nioehdk@126.com

Please register your domains at
http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.134“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for 134.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
fullafrica.com IN A 60.12.166.134 600s (00:10:00)
fullafrica.com IN SOA
server: ns1.fullafrica.com
email: ns2.fullafrica.com
serial: 2009097594
refresh: 600
retry: 600
expire: 2419200
minimum ttl: 600
600s (00:10:00)
fullafrica.com IN NS ns1.heyodziz.com 600s (00:10:00)
fullafrica.com IN NS ns2.heyodziz.com 600s (00:10:00)
fullafrica.com IN NS ns2.bilulkog.com 600s (00:10:00)
fullafrica.com IN NS ns1.bilulkog.com 600s (00:10:00)

— end —

Address lookup

canonical name puremagnumpro.com.
aliases
addresses 123.108.108.175

Domain Whois record

Queried whois.internic.net with “dom puremagnumpro.com“…

Domain Name: PUREMAGNUMPRO.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.PUREMAGNUMPRO.COM
Name Server: NS2.PUREMAGNUMPRO.COM
Status: clientTransferProhibited
Updated Date: 09-jul-2009
Creation Date: 07-jul-2009
Expiration Date: 07-jul-2010

Last update of whois database: Fri, 11 Sep 2009 11:57:07 UTC

Queried whois.onlinenic.com with “puremagnumpro.com“…

Domain Name:puremagnumpro.com
Record created:2009/7/7
Record expired:2010/7/7

Domain servers in listed order:
ns1.puremagnumpro.com ns2.puremagnumpro.com

Administrat:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904501@absolutee.com
Technical Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904502@absolutee.com
Billing Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784003@absolutee.com
Registrant Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784004@absolutee.com

Network Whois record

Queried whois.apnic.net with “123.108.108.175“…

inetnum: 123.108.108.0 – 123.108.111.255
netname: PANGNET
descr: Pang International Limited
descr: Dedicated Server and Colocation Service Provider
country: HK
admin-c: YL2194-AP
tech-c: YL2194-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-PANG
mnt-routes: MAINT-HK-PANG
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081224
source: APNIC

person: Yu Pang Law
nic-hdl: YL2194-AP
e-mail: admin@pangintl.com
address: 2D Hung Hay Building,
address: 1st Fa Yuen Street,
address: Mong Kok,
address: Kowloon,
address: Hong Kong
phone: +852-6172-5306
fax-no: +852-2332-8934
country: HK
changed: pang@laws.ms 20081229
mnt-by: MAINT-HK-PANG
source: APNIC<

DNS records

name class type data time to live
175.108.108.123.in-addr.arpa IN PTR scdc.worra.com 259200s (3.00:00:00)

— end —

Canadian Pharmacy Spam- hardtofindrxmedz.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All_of your favorite Rx~Medications are available at your_Fingertips!
Browse_Our Selection Today –> http://hardtofindrxmedz.com

Address lookup

canonical name hardtofindrxmedz.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom hardtofindrxmedz.com“…

   Domain Name: HARDTOFINDRXMEDZ.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

Last update of whois database: Sun, 06 Sep 2009 21:26:29 UTC <<<

Queried whois.hupo.com with “hardtofindrxmedz.com“…

Domain Name: hardtofindrxmedz.com

Registrant Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Administrative Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Technical Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Billing Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
hardtofindrxmedz.com IN A 60.12.166.154 232s (00:03:52)

— end —

tramadol tamoxifen online
Perfect site, i like it!
23.08.2009 15:13:13 | tramadol tamoxifen online | 68.32.69.86 | Reply
phentermine without doctors prescription
Perfect work!
23.08.2009 15:13:17 | phentermine without doctors prescription | 41.249.118.11 | Reply
diet online phentermine pill purchase
Great. Now i can say thank you!
23.08.2009 15:13:19 | diet online phentermine pill purchase | 211.238.75.161 | Reply
cialis allergic
Beautiful site!
23.08.2009 15:13:19 | cialis allergic | 68.99.5.160 | Reply
coumadin interaction with tramadol hcl
Great work, webmaster, nice design!
23.08.2009 15:13:25 | coumadin interaction with tramadol hcl | 68.4.131.177 | Reply
phentermine 180 days
Beautiful site!
23.08.2009 15:13:30 | phentermine 180 days | 75.83.207.22 | Reply
cialis attorney columbus
Great. Now i can say thank you!
23.08.2009 15:13:32 | cialis attorney columbus | 76.251.71.72 | Reply
tramadol interaction paxil
Beautiful site!
23.08.2009 15:13:41 | tramadol interaction paxil | 71.195.225.27 | Reply
diet pills phentermine prescription adipex
Incredible site!
23.08.2009 15:13:44 | diet pills phentermine prescription adipex | 68.7.137.62 | Reply
adipex no prescription us pharmacy
Great. Now i can say thank you!
23.08.2009 15:13:46 | adipex no prescription us pharmacy | 78.159.82.53 | Reply
tramadol doage
I bookmarked this link. Thank you for good job!
23.08.2009 15:13:55 | tramadol doage | 213.93.252.239 | Reply
cialis soft tab india
Perfect site, i like it!
23.08.2009 15:14:26 | cialis soft tab india | 66.190.179.220 | Reply
mixing lexapro with xanax
Great site. Keep doing.
23.08.2009 15:14:27 | mixing lexapro with xanax | 201.82.100.102 | Reply
tramadol 4 50mg tablets overdose
Beautiful site!
23.08.2009 15:14:44 | tramadol 4 50mg tablets overdose | 67.149.6.104 | Reply
free viagra sildenafil citrate
Excellent site. It was pleasant to me.
23.08.2009 15:14:51 | free viagra sildenafil citrate | 94.54.76.149 | Reply
tramadol recreational dosage
Great site. Keep doing.
23.08.2009 15:14:58 | tramadol recreational dosage | 67.84.248.216 | Reply
do not take tramadol with tylenol
Perfect site, i like it!
23.08.2009 15:15:03 | do not take tramadol with tylenol | 80.56.217.254 | Reply
tramadol apap limit dosage
Great. Now i can say thank you!
23.08.2009 15:15:39 | tramadol apap limit dosage | 68.55.87.73 | Reply
phentermine no rx master card
It is the coolest site, keep so!
23.08.2009 15:15:47 | phentermine no rx master card | 67.84.207.225 | Reply
feline dose tramadol
Great site. Keep doing.
23.08.2009 15:16:02 | feline dose tramadol | 76.202.227.202 | Reply
xanax doseage
I bookmarked this link. Thank you for good job!
23.08.2009 15:16:12 | xanax doseage | 98.112.19.112 | Reply
adipex by phone
Perfect site, i like it!
23.08.2009 15:16:18 | adipex by phone | 174.102.64.147 | Reply
phentermine without physician’s approval
I want to say – thank you for this!
23.08.2009 15:16:24 | phentermine without physician’s approval | 24.184.101.31 | Reply
buy viagra in england
I want to say – thank you for this!
23.08.2009 15:16:45 | buy viagra in england | 85.86.136.254 | Reply
cheapest cialis professional
Incredible site!
23.08.2009 15:16:47 | cheapest cialis professional | 190.78.41.46 | Reply
danger of nitroglycerin and viagra
It is the coolest site, keep so!
23.08.2009 15:16:56 | danger of nitroglycerin and viagra | 76.184.200.71 | Reply
viagra long term
Very interesting site. Hope it will always be alive!
23.08.2009 15:16:59 | viagra long term | 71.65.2.83 | Reply
viagra rock
Very interesting site. Hope it will always be alive!
23.08.2009 15:17:09 | viagra rock | 65.189.237.75 | Reply
phentermine amphetamine
Great site. Keep doing.
23.08.2009 15:17:15 | phentermine amphetamine | 76.99.38.223 | Reply
lowest price generic viagra
I bookmarked this link. Thank you for good job!
23.08.2009 15:17:25 | lowest price generic viagra | 85.202.153.8 | Reply
new drug cialis
Great site. Good info.
23.08.2009 15:17:34 | new drug cialis | 89.103.49.128 | Reply
adipex hrt website in florida
Incredible site!
23.08.2009 15:17:40 | adipex hrt website in florida | 190.205.35.129 | Reply
2.5mg cialis
I bookmarked this link. Thank you for good job!
23.08.2009 15:17:44 | 2.5mg cialis | 83.252.161.162 | Reply
phentermine anesthesia
I want to say – thank you for this!
23.08.2009 15:17:51 | phentermine anesthesia | 124.144.164.44 | Reply
sizes xanax colors
Great work, webmaster, nice design!
23.08.2009 15:17:55 | sizes xanax colors | 24.176.81.138 | Reply
adipex phentermine treetop
Great site. Good info.
23.08.2009 15:19:55 | adipex phentermine treetop | 67.160.169.98 | Reply
adipex with mastercard
Beautiful site!
23.08.2009 15:23:22 | adipex with mastercard | 125.128.205.93 | Reply
RJbzyfrGlbuJXAU
niuotzfm tacjsjum ramsrqxb
23.08.2009 15:25:55 | viagra generico | 95.169.190.71 | Reply
order viagra with mastercard
Perfect site, i like it!
23.08.2009 15:28:36 | order viagra with mastercard | 76.202.227.202 | Reply
drug testing phentermine
Great work, webmaster, nice design!
23.08.2009 15:32:05 | drug testing phentermine | 98.226.9.86 | Reply
mocha vodka valium latte
I bookmarked this link. Thank you for good job!
23.08.2009 15:32:18 | mocha vodka valium latte | 67.162.65.142 | Reply
wBkUBsLOqIhgeFsoH
rchaunlt ecvnxzkh fbxgtzoy
23.08.2009 15:39:04 | viagra generique | 95.169.190.71 | Reply
phentermine cod orders
Very interesting site. Hope it will always be alive!
23.08.2009 15:44:39 | phentermine cod orders | 76.189.144.239 | Reply
restaurants in soma san francisco
Excellent site. It was pleasant to me.
23.08.2009 15:49:16 | restaurants in soma san francisco | 64.150.224.224 | Reply
what is tramadol ultram
Perfect work!
23.08.2009 15:51:50 | what is tramadol ultram | 93.103.105.10 | Reply
asnSyqhNKITPtSQjQ
elevpgot smygzazi ttldttwe
23.08.2009 15:51:55 | compra viagra italia | 95.169.190.71 | Reply
cialis and levitra viagra made site
Great site. Keep doing.
23.08.2009 15:55:34 | cialis and levitra viagra made site | 115.138.222.102 | Reply
JQdJwTDVpWoZPFkujw
jfszpizz qbgfhpcr vsytfjoo
23.08.2009 16:06:31 | cialis | 95.169.190.71 | Reply
JjnpvrvYXmSp
rwdxuavd ssvhnrcs vsuadoug
23.08.2009 16:18:48 | acquisto viagra in farmacia | 95.169.190.71 | Reply
efOmTCmPyy
pwfgbbtr nvwctneo vqxwdcqi
23.08.2009 16:31:55 | viagra bestellen | 95.169.190.71 | Reply

Canadian Pharmacy Spam – http://getrxmedicationshere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All_of your favorite Rx~Medications are available at your_Fingertips!
Browse_Our Selection Today –> http://getrxmedicationshere.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.170 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.115.20.185 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Conrad Bonner Sat Sep 5 10:59:37 2009
X-Apparently- Sat, 05 Sep 2009 10:58:16 -0700
Return-Path:
X-YahooFilteredBulk: 109.87.19.108
X-YMailISG: H.phxEAWLDtB_eE2RNGcrV7bll_Bl_DUObhczWx9uct6I5p3PQMWm4WLoEaPqrp80fVAB8_099N8nselcFG2Y86RwWtYMCtUvyL8tuAj0FH5MkgLAxwDk19fBlqhCwVA5EiAkhbBgDqEh_xVIFI.E12Rw4QdmdG9.kmLz1iyiAGfAl_TFzugyJuLU6g8pX5PmJINB9K_0hTmREpxFCk5JRp5rRid7cs7FPN.ZGz_6uh3dDsQwMuw24MluI0gpkPG7QIJWjJT43_E2NQmkpwoS90yOkKk40W5uUX.pj.0R6Ab1_YIVdd6WbWfpgtsiRfMUE4j6.mD84PJxvjE4hz7hte5_IpTLoiVZyEsMeMhQvvb01Cxh8E3nvl1fQ–
X-Originating-IP: [109.87.19.108]
Authentication-Results: mta121.sbc.mail.re3.yahoo.com from=software-solutions.co.nz;
domainkeys=neutral (no sig); from=software-solutions.co.nz; dkim=neutral (no sig)
Received: from 109.87.19.108 (EHLO flpi183.prodigy.net) (207.115.20.185)
by mta121.sbc.mail.re3.yahoo.com with SMTP; Sat, 05 Sep 2009 10:58:14 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[109.87.19.108]
X-Originating-IP: [109.87.19.108]
Received: from w6agsd3 ([109.87.19.108])
by flpi183.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n85Hutix024595;
Sat, 5 Sep 2009 10:58:08 -0700
Message-ID: <000701ca2e52$a20da680$627e0f72@software-solutions.co.nz>
Reply-To: “Conrad Bonner” <conradbonnerxj@software-solutions.co.nz>
From: “Conrad Bonner”
To:
Subject: PharmacyOnNet sells Phentermin, Ambien …
Date: Sat, 05 Sep 2009 10:59:37 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 139

Address lookup

canonical name getrxmedicationshere.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom getrxmedicationshere.com“…

   Domain Name: GETRXMEDICATIONSHERE.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Sat, 05 Sep 2009 19:46:04 UTC <<<

Queried whois.hupo.com with “getrxmedicationshere.com“…

Domain Name: getrxmedicationshere.com

Registrant Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Administrative Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Technical Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Billing Contact:
  CAI JIASHAN
  CAI JIASHAN
  Email:chouren_n@yeah.net
  Tel:+86.051283254915
  Fax:+86.051283254915
  HUAXINLU24
  KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:51:42
Expireation Date:2010-08-22 14:51:42

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
getrxmedicationshere.com IN SOA
server: ns.getrxmedicationshere.com
email: admin.getrxmedicationshere.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
getrxmedicationshere.com IN A 60.12.166.135 300s (00:05:00)

— end —

Address lookup

lookup failed 109.87.19.108
Could not find a domain name corresponding to this IP address.

Domain Whois record

Don’t have a domain name for which to get a record

Network Whois record

Queried whois.ripe.net with “-B 109.87.19.108“…

% Information related to '109.87.16.0 - 109.87.31.255'

inetnum:        109.87.16.0 - 109.87.31.255
netname:        TRIOLAN
descr:          TRIOLAN, Simferopol
country:        UA
admin-c:        KID3-RIPE
admin-c:        MICH-RIPE
tech-c:         MICH-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090902
source:         RIPE

person:         Konstantin I Doljenko
address:        pr-t Frunze, 26
address:        310007, Kharkov
address:        Ukraine
phone:          +380 572 179727
fax-no:         +380 572 191510
e-mail:         boma@bi.com.ua
nic-hdl:        KID3-RIPE
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20040218
source:         RIPE

person:         Mihail A.Vovk
address:        Ukraine, Kyiv
phone:          +380667206611
e-mail:         mich@michael.com.ua
nic-hdl:        MICH-RIPE
mnt-by:         MICH-MNT
notify:         mich@michael.com.ua
changed:        mich@michael.com.ua 20060105
source:         RIPE

% Information related to '109.86.0.0/15AS13188'

route:          109.86.0.0/15
descr:          TRIOLAN
descr:          Triple Play Services
descr:          Ukraine
origin:         AS13188
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090820
source:         RIPE

% Information related to '109.87.16.0/20AS13188'

route:          109.87.16.0/20
descr:          TRIOLAN, Simferopol
descr:          Triple Play Services
descr:          Ukraine
origin:         AS13188
mnt-by:         BOMASC-MNT
changed:        boma@bi.com.ua 20090902
source:         RIPE

DNS records

DNS query for 108.19.87.109.in-addr.arpa returned an error from the server: NameError

No records to display

Traceroute

Tracing route to 109.87.19.108 [109.87.19.108]

Canadian Pharmacy Spam – readysetgetmedz.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All your favorite RxMedications are available at your Fingertips!
Browse Our Website Today –> http://readysetgetmedz.com

Address lookup

canonical name readysetgetmedz.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom readysetgetmedz.com“…

   Domain Name: READYSETGETMEDZ.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

Last update of whois database: Sat, 05 Sep 2009 00:44:13 UTC <<<

DomainName : readysetgetmedz.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.84GNK.COM
Name Server......................NS1.ACTCTICNS.COM
Name Server......................NS2.ACTCTICNS.COM
Name Server......................NS6.84GNK.COM
Name Server......................NS3.BRIILOVENS.COM
Name Server......................NS4.BRIILOVENS.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-08-22
Expiration Date .................2010-08-22
Last Update  Date ...............2009-09-03

Registrant ID ...................V-X-60144-17241
Registrant Name .................zhang mingxuan
Registrant Organization .........zhang mingxuan
Registrant Address ..............LANCHANGLU28
Registrant City..................NT
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........226037
Registrant Phone Number .........+86.051382642427
Registrant Fax ..................+86.051382642427
Registrant Email ................haieya01@126.com

Administrative ID ...............V-X-60144-17241
Administrative Name .............zhang mingxuan
Administrative Organization .....zhang mingxuan
Administrative Address ..........LANCHANGLU28
Administrative City..............NT
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......226037
Administrative Phone Number .....+86.051382642427
Administrative Fax ..............+86.051382642427
Administrative Email ............haieya01@126.com

Billing ID ......................V-X-60144-17241
Billing Name ....................zhang mingxuan
Billing Organization ............zhang mingxuan
Billing Address .................LANCHANGLU28
Billing City.....................NT
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............226037
Billing Phone Number ............+86.051382642427
Billing Fax .....................+86.051382642427
Billing Email ...................haieya01@126.com

Technical ID ....................V-X-60144-17241
Technical Name ..................zhang mingxuan
Technical Organization...........zhang mingxuan
Technical Address ...............LANCHANGLU28
Technical City...................NT
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........226037
Technical Phone Number ..........+86.051382642427
Technical Fax ...................+86.051382642427
Technical Email .................haieya01@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
readysetgetmedz.com IN NS ns3.briilovens.com 172800s (2.00:00:00)
readysetgetmedz.com IN NS ns6.84gnk.com 172800s (2.00:00:00)
readysetgetmedz.com IN NS ns4.briilovens.com 172800s (2.00:00:00)
readysetgetmedz.com IN NS ns2.actcticns.com 172800s (2.00:00:00)
readysetgetmedz.com IN NS ns5.84gnk.com 172800s (2.00:00:00)
readysetgetmedz.com IN NS ns1.actcticns.com 172800s (2.00:00:00)

— end —

Canadian Pharmacy Spam – ng-systems.net

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
67.195.14.109 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.115.20.132 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
75.213.113.93 United States (Los Angeles)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Robert Sexton Wed Sep 2 09:16:46 2009
X-Apparently-Wed, 02 Sep 2009 09:17:11 -0700
Return-Path:
X-YahooFilteredBulk: 67.195.14.109
X-YMailISG: TBYRKD8WLDtrypfO6NxNXGP0yDAzrz3CdYN4uNyB8zdkhJygyME2AhOzjHKhRrUpZq._NUInKsP.EyiIliCb157CnYhB0BqaezKzuUp53Qiu9w1Ljzy0zv3rJhK5JqUEngfcMKEaQiOlPYusfPPFQNkIjgjQV1yX3poFuPqlw1ZVyf0YPmnOOoAmpd5Ks8lY0n3Erej6ctnbMy1U8NtEpWaiL7oIBA5W5Q8XzWGYudFTGG5Ees2iLR9HSjvwZTwsimeHnMAI8y0e9q.BpsyFwVw0OvYAXKdqkNTqaKXEdLp8WNBeamfQbhhP2gak5mTnjKNACj0Skf1P4L9iyBIPRjskRx4Mnd78YLfNHkQL_tjdrZd4juoFvgSGlm5d9EDxq_CR3dnJlN8Q7uqANIL0zO8SZ2SC5klu.HC983GsCBDV
X-Originating-IP: [67.195.14.109]
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ng-systems.net; domainkeys=neutral (no sig); from=ng-systems.net; dkim=neutral (no sig)
Received: from 207.115.20.132 (EHLO flpd122.prodigy.net) (207.115.20.132)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Wed, 02 Sep 2009 09:17:11 -0700
X-Originating-IP: [67.195.14.109]
Received: from smtp106.sbc.mail.gq1.yahoo.com (smtp106.sbc.mail.gq1.yahoo.com [67.195.14.109])
by flpd122.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n82GHA2X021427
for ; Wed, 2 Sep 2009 09:17:10 -0700
Message-Id: <200909021617.n82GHA2X021427@flpd122.prodigy.net>
Received: (qmail 53401 invoked from network); 2 Sep 2009 16:17:10 -0000
Received: from unknown (HELO 13.sub-70-213-117.myvzw.com) (bob@75.213.113.93 with login)
by smtp106.sbc.mail.gq1.yahoo.com with SMTP; 2 Sep 2009 16:17:09 -0000
X-Yahoo-SMTP: 9I.gPjKswBDDpZ74lhf2pkNv37iwyZQ3CbOW
X-YMail-OSG: oUhrznUVM1m0i7c_kQUv33Cnb7rJoF.P1fFuiaoKzRi8KB0dRejSrtUR4IWuStPzGEB3UdtW6IkkTv4A9iT_8EMnu54dGGZlg38LsYrtSE7mFs.culAKmpimV3LbxXx.QLjcbmTEeZSqqqAz7DeIb9PTuMvIVAetjNSBXaQDPxqbrX4Vduu_t1LnL_tVwCoLase2jJzB53Jc7vU-
X-Yahoo-Newman-Property: ymail-3
From: “Robert Sexton” <bob@ng-systems.net>
To:
Subject: Online pharmacies (9/2/2009)
Date: Wed, 2 Sep 2009 09:16:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset=”utf-8″
Content-Transfer-Encoding: 8bit
Content-Length: 783

Hello,

I represent a company called SPN Solutions, a company that does what’s known as advanced search engine placement. We reach a Network of over 35 million people who are predominantly US based. Our Network is entirely opt-in, and the users on our Network allow us to present them with a preferred choice whenever they are looking for anything on the top sixteen search engines. (GOOGLE, YAHOO, MSN and thirteen others.)

I seek one source to send the users on our Network, from the major search engines, for online pharmacies in various Canadian markets.

Please contact me at your earliest convenience. I am in the office daily from 9:00 AM to 5:00 PM Pacific time.

Best regards,

Robert Sexton
Dir/Business Development, SPN Solutions
Phone: 800.481.2979, ext 2001

Address lookup

canonical name myvzw.com.
aliases
addresses 207.68.174.238

Domain Whois record

Queried whois.internic.net with “dom myvzw.com“…

   Domain Name: MYVZW.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: CARKDNS.VZWDOMAIN.COM
   Name Server: NJBRDNS.VZWDOMAIN.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jan-2009
   Creation Date: 31-may-2000
   Expiration Date: 31-may-2012

>>> Last update of whois database: Thu, 03 Sep 2009 02:55:26 UTC <<<

Queried whois.markmonitor.com with “myvzw.com“…

Registrant:
        Verizon Trademark Services LLC
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669

    Domain Name: myvzw.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Administrator
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669
    Technical Contact, Zone Contact:
        Domain Technician
        Verizon
        1320 North Court House Road
         Arlington VA 22201
        US
        sysmgr@verizon.com +1.7033513164 Fax: +1.7033513669

    Created on..............: 2000-05-31.
    Expires on..............: 2012-05-31.
    Record last updated on..: 2009-05-30.

    Domain servers in listed order:

    njbrdns.vzwdomain.com
    carkdns.vzwdomain.com

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protection™
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at www.markmonitor.com
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300

Network Whois record

Queried whois.arin.net with “207.68.174.238“…

OrgName:    Microsoft Corp 
OrgID:      MSFT
Address:    One Microsoft Way
City:       Redmond
StateProv:  WA
PostalCode: 98052
Country:    US

NetRange:   207.68.128.0 - 207.68.207.255 
CIDR:       207.68.128.0/18, 207.68.192.0/20 
NetName:    MICROSOFT-CORP-MSN-BLK
NetHandle:  NET-207-68-128-0-1
Parent:     NET-207-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:    
RegDate:    1996-03-26
Updated:    2005-06-29

RTechHandle: ZM39-ARIN
RTechName:   Microsoft 
RTechPhone:  +1-425-882-8080
RTechEmail:  noc@microsoft.com 

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName:   Hotmail Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName:   MSN ABUSE 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName:   Microsoft Corporation 
OrgNOCPhone:  +1-425-882-8080
OrgNOCEmail:  noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName:   MSFT-POC 
OrgTechPhone:  +1-425-882-8080
OrgTechEmail:  iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-09-02 20:00

DNS records

DNS query for 238.174.68.207.in-addr.arpa returned an error from the server: NameError

name class type data time to live
myvzw.com IN SOA
server: njbrnsmgr.vzwdomain.com
email: cdsdns.verizonwireless.com
serial: 2009073100
refresh: 43200
retry: 7200
expire: 1209600
minimum ttl: 10800
7200s (02:00:00)
myvzw.com IN NS njbrdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN NS carkdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN A 207.68.174.238 7200s (02:00:00)

— end —


RezXtra – www.medsxtra.com

RezXtra (medsxtra.com) medsxtra.com – St. louis, Missouri Net Natural Laboratories, London Scam!!! Buyer Beware!!! Misleading marketing Tatics!!! Internet

RezXtra (medsxtra.com)
Phone: 8883399872
Fax: 888-339-9872
www.medsxtra.com
Internet, Missouri 63129
United States of America

Buyer Beware.  This company offers you a trial for Resveratrol through their website but the product that they ship is not the one featured on 60 minutes.  They do not disclose the price of the products they sale on their website nor do they ship any information to that matter with the product.  Also you will find unauthorized charges on your credit card.  Even the shipping is more than what they advertise. Impossible to get through their customerservice toll free number. On their website, under terms and conditions, they claim to provide 24/7 customer service. Which is also not true. This is not a reputable company.  Once they get a hold of your credit card it is over. DO NOT ORDER ANYTHING FROM THEIR WEBSITE.

Address lookup

canonical name www.medsxtra.com.
aliases
addresses 67.55.86.148

Domain Whois record

Queried whois.internic.net with “dom medsxtra.com“…

   Domain Name: MEDSXTRA.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS.WEBAIR.NET
   Name Server: NS2.WEBAIR.NET
   Status: ok
   Updated Date: 20-aug-2009
   Creation Date: 23-mar-2009
   Expiration Date: 23-mar-2010

Last update of whois database: Fri, 28 Aug 2009 06:09:40 UTC <<<

Queried whois.godaddy.com with “medsxtra.com“…

Registrant:
   Domains by Proxy, Inc.

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: MEDSXTRA.COM

   Domain servers in listed order:
      NS.WEBAIR.NET
      NS2.WEBAIR.NET

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “67.55.86.148“…

OrgName:    Webair Internet Development Inc 
OrgID:      WAIR
Address:    333 Jericho Tpke
Address:    Suite 200
City:       Jericho
StateProv:  NY
PostalCode: 11753
Country:    US

ReferralServer: rwhois://rwhois.webair.com:4321

NetRange:   67.55.64.0 - 67.55.127.255 
CIDR:       67.55.64.0/18 
NetName:    WEBAIRINTERNET6
NetHandle:  NET-67-55-64-0-1
Parent:     NET-67-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.WEBAIR.NET
NameServer: NS2.WEBAIR.NET
Comment:    All rwhois info can be found at rwhois.webair.com:4321
RegDate:    2006-07-28
Updated:    2007-04-18

RNOCHandle: ZW64-ARIN
RNOCName:   IPAdmin-Webair 
RNOCPhone:  +1-516-938-4100
RNOCEmail:  IPAdmin@webair.com 

OrgNOCHandle: ZW64-ARIN
OrgNOCName:   IPAdmin-Webair 
OrgNOCPhone:  +1-516-938-4100
OrgNOCEmail:  IPAdmin@webair.com

OrgTechHandle: ZW64-ARIN
OrgTechName:   IPAdmin-Webair 
OrgTechPhone:  +1-516-938-4100
OrgTechEmail:  IPAdmin@webair.com

# ARIN WHOIS database, last updated 2009-08-27 20:00

DNS records

name class type data time to live
http://www.medsxtra.com IN A 67.55.86.148 900s (00:15:00)
medsxtra.com IN SOA
server: ns.webair.net
email: webmaster.medsxtra.com
serial: 2009060401
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 43200
900s (00:15:00)
medsxtra.com IN NS ns.webair.net 900s (00:15:00)
medsxtra.com IN NS ns2.webair.net 900s (00:15:00)
medsxtra.com IN MX
preference: 10
exchange: filter.medsxtra.com
900s (00:15:00)
medsxtra.com IN A 67.55.86.148 900s (00:15:00)
148.86.55.67.in-addr.arpa IN PTR technet.webair.com 43200s (12:00:00)

— end —

Canadian Pharmacy – reliableflowagehere.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.



Threat Chaos – Pharmacy Fraud Escalates

Order your Favorite Rx-Medications Online!

Click Here! –> http://happeninggoodtime.com

Order your all Favorite Rx~Medications Online! Browse Our Selection Today! –> http://reliableflowagehere.com

From Fredric Jennings Mon Aug 24 15:19:27 2009
X-Apparently-To: agr2@sbcglobal.net via 68.142.207.172; Mon, 24 Aug 2009 15:18:44 -0700
Return-Path:
X-YahooFilteredBulk: 186.112.8.247
X-YMailISG: YfBx818WLDv93VBKlC8zeJ4RnIh.PVrE72QQn.xz3DDr4v0ETMkWr.DRbRvqBFnnpjTkMJW8TTFv2OCYNwgNMTqPTHsIiRBdNimG6Yb8D9pdFbW5P62hKy81l58Ct4NBJ0vDIfK1diVDjWTYQbEbHvSwkSJs_hfF2Q–
X-Originating-IP: [186.112.8.247]
Authentication-Results: mta103.sbc.mail.re3.yahoo.com from=arel.com.au; domainkeys=neutral (no sig); from=arel.com.au; dkim=neutral (no sig)
Received: from 207.115.20.124 (EHLO flpd114.prodigy.net) (207.115.20.124)
by mta103.sbc.mail.re3.yahoo.com with SMTP; Mon, 24 Aug 2009 15:18:44 -0700
X-Header-Overseas: Mail.from.Overseas.source.186.112.8.247
X-Header-NoReverseIP: IP.name.lookup.failed[186.112.8.247]
X-Originating-IP: [186.112.8.247]
Received: from 687n82s ([186.112.8.247])
by flpd114.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7OMIQmo016747;
Mon, 24 Aug 2009 15:18:34 -0700
Message-ID: <000701ca2508$f1653bb0$627e0f72@arel.com.au>
Reply-To: “Fredric Jennings”
From: “Fredric Jennings”
To: , ,
Subject: Buy Hydrocodone Online from a US Pharmacy
Date: Mon, 24 Aug 2009 15:19:27 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 117

Address lookup

canonical name reliableflowagehere.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom reliableflowagehere.com“…

Domain Name: RELIABLEFLOWAGEHERE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.LIGHTINGDNSFLASH.COM
Name Server: NS2.LIGHTINGDNSFLASH.COM
Name Server: NS3.CEASEDNSERROR.COM
Name Server: NS4.CEASEDNSERROR.COM
Name Server: NS5.YELLOWDNSPLACE.COM
Name Server: NS6.YELLOWDNSPLACE.COM
Status: ok
Updated Date: 23-aug-2009
Creation Date: 15-aug-2009
Expiration Date: 15-aug-2010

Last update of whois database: Tue, 25 Aug 2009 00:33:13 UTC

Queried whois.namerich.cn with “reliableflowagehere.com“…

DomainName : reliableflowagehere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS3.CEASEDNSERROR.COM
Name Server………………….NS1.LIGHTINGDNSFLASH.COM
Name Server………………….NS6.YELLOWDNSPLACE.COM
Name Server………………….NS5.YELLOWDNSPLACE.COM
Name Server………………….NS4.CEASEDNSERROR.COM
Name Server………………….NS2.LIGHTINGDNSFLASH.COM
Status………………………ok
Creation Date ………………2009-08-15
Expiration Date ……………..2010-08-15
Last Update Date ……………2009-08-24

Registrant ID ……………….V-X-58472-14162
Registrant Name ……………..TIAN JUN
Registrant Organization ………TIAN JUN
Registrant Address …………..CAOANXILU991
Registrant City………………JN
Registrant Province/State …….SD
Registrant Country Code ………CN
Registrant Postal Code ……….272019
Registrant Phone Number ………+86.053727816329
Registrant Fax ………………+86.053727816329
Registrant Email …………….iagonane@126.com

Administrative ID ……………V-X-58472-14162
Administrative Name ………….TIAN JUN
Administrative Organization …..TIAN JUN
Administrative Address ……….CAOANXILU991
Administrative City…………..JN
Administrative Province/State …SD
Administrative Country Code …..CN
Administrative Postal Code ……272019
Administrative Phone Number …..+86.053727816329
Administrative Fax …………..+86.053727816329
Administrative Email …………iagonane@126.com

Billing ID ………………….V-X-58472-14162
Billing Name ………………..TIAN JUN
Billing Organization …………TIAN JUN
Billing Address ……………..CAOANXILU991
Billing City…………………JN
Billing Province/State ……….SD
Billing Country Code …………CN
Billing Postal Code ………….272019
Billing Phone Number …………+86.053727816329
Billing Fax …………………+86.053727816329
Billing Email ……………….iagonane@126.com

Technical ID ………………..V-X-58472-14162
Technical Name ………………TIAN JUN
Technical Organization………..TIAN JUN
Technical Address ……………CAOANXILU991
Technical City……………….JN
Technical Province/State………SD
Technical Country Code ……….CN
Technical Postal Code ………..272019
Technical Phone Number ……….+86.053727816329
Technical Fax ……………….+86.053727816329
Technical Email ……………..iagonane@126.com

Please register your domains at
ttp://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Network Communications Corporation Limited
descr: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
admin-c: XZ67-AP
tech-c: XZ67-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20090424
source: APNIC

person: Xiaomin Zhou
address: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
country: CN
phone: +86-10-66259626
fax-no: +86-10-66259626
e-mail: zhouxm@chinaunicom.cn
nic-hdl: XZ67-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090617
source: APNIC

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
admin-c: JY7-CN
tech-c: JY7-CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-UNICOM
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20071010
source: CNNIC

person: Jin Yang
nic-hdl: JY7-CN
e-mail: ip_address@chinaunicom.com.cn
address: No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone: +86-10-66505588
fax-no: +86-10-66504252
country: CN
changed: ipas@cnnic.net.cn 20070927
mnt-by: MAINT-CNNIC-AP
source: CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
reliableflowagehere.com IN SOA
server: ns.reliableflowagehere.com
email: admin.reliableflowagehere.com
serial: 2009081601
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
reliableflowagehere.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy Spam – honorablechoice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://honorablechoice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
62.42.59.126 Spain (Santander)* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Sammie Bunch Wed Aug 12 22:56:04 2009
X-Apparently-To: ; Wed, 12 Aug 2009 23:58:35 -0700
Return-Path:
X-YahooFilteredBulk: 62.42.59.126
X-YMailISG: rvnLE9oWLDuIrGNwFY2Mf.UYxYPXbMbHQSUmU29pgFwrrRn0a_fby4sBBoVPD0a6wATrS3dWZ_ISHDjIOKAcQ7OGcbYUPfbv0V8whPjdEFqbUzr1I37pa_tDrmmKTRhS6qW1OZLpRUq6mR3btLn2VnYAhw8VR56_L1R0bP0y4p5gLzled4fLv4DMR0aBvdZzVYsUBQX9951DX1ByDjy8bCHExz_xqe520bgATQ–
X-Originating-IP: [62.42.59.126]
Authentication-Results: mta115.sbc.mail.gq1.yahoo.com from=daa.com.au; domainkeys=neutral (no sig); from=daa.com.au; dkim=neutral (no sig)
Received: from 62.42.59.126 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta115.sbc.mail.gq1.yahoo.com with SMTP; Wed, 12 Aug 2009 23:58:35 -0700
X-Header-Overseas: Mail.from.Overseas.source.62.42.59.126
X-Originating-IP: [62.42.59.126]
Received: from 758gbn2 (62.42.59.126.dyn.user.ono.com [62.42.59.126])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7D6vgdW003701;
Wed, 12 Aug 2009 23:58:34 -0700
Message-ID: <000701ca1bda$be5e9310$627e2c7a@daa.com.au>
Reply-To: “Sammie Bunch” <sammie_bunchhb@daa.com.au
From: “Sammie Bunch”
To: ,
Subject: Codiene online NoPRESCRIPTION!
Date: Thu, 13 Aug 2009 01:56:04 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 150

Address lookup

canonical name honorablechoice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom honorablechoice.com“…

   Domain Name: HONORABLECHOICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Wed, 19 Aug 2009 03:33:51 UTC <<<

Queried whois.namerich.cn with “honorablechoice.com“…

Query error: TimedOut

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
honorablechoice.com IN SOA
server: ns.honorablechoice.com
email: admin.honorablechoice.com
serial: 2009080801
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
honorablechoice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Rx Commission – Unapproved Internet Pharmacy

http://www.Pharmacy-usa.biz is an Unapproved Internet Pharmacy

ANALYSIS

www.Pharmacy-usa.biz is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.

Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.

Rogue Internet pharmacy (definition):

A pharmacy website that intentionally or knowingly:

1. violates, appears to violate, or encourages violation of Federal or state law or regulation;
2. does not adhere to accepted standards of medicine and/or pharmacy practice, including standards of safety; and/or
3. engages in fraudulent or deceptive business practices.

Website Summary
URL: http://www.pharmacy-usa.biz
Registrar: eNom Inc.
Approval Status: rogue rogue (since 03/07/2009)
Online Status: online online
Network

This site seems to be part of the Rx Commission network.

Rx-Commission is a network of a number of rogue online pharmacies. LegitScript considers this network of pharmacy website to be extremely dangerous.

We have been contacted by an individual who purchased a drug from one of this network’s online pharmacies and ended up in the hospital. The drug was fake Cialis. The individual had health problems for several months, and the company that makes the real drug tested the product sold by the online pharmacy to confirm that it is counterfeit.

The drugs ordered from one of these pharmacy websites, when we conducted a test order, came from India.

Rx Commission’s pharmacies also provide controlled substances without a prescription from overseas. As such, the network violates the law in several respects and sells products that are hazardous to people’s health.

Source: LegitScript

rx commission


Domains Listed On Server – TrustedSource.org
us-pharmacy.us
trusted-tabs.us
terameds.org
deltapharm.org
rxmeds-online.net
buyonlineviagra.net
usrxmeds.net
approvedpharmacy.net
mypillshop.net
buycanadianpharmacy.net
dutyfreemeds.net
happypharmacy.net
generics-pharm.net
acaiberrymagic.net
cheapestcigarettes.net
bestrxpharm.net
top-drugstore.net
rx-market.info
preferredpharma.com
prescriptionsintl.com
quickgeneric.com
1st-european-pharmacy.com
e-pharmacy-usa.com
webrxmed.com
online-pharmacy-no-prescription.com
pillsshipping.com
buycanadianpharmacy.com
cheapdrugsmd.com
domain-admin-central.com
aprixe.com
pricedpills.com
medscourier.com
de-pharma.com
my-pill.com
rxgenericsstore.com
herbalmedsonline.com
global-generics-source.com
us-rx-meds.com
rxcalm.com
value-european-pharmacy.com
allgenericpills.com
nonrxmeds.com
online-pharma-rx.com
buy-american-pharma.com
swissmeds.com
american-pharm.com
mexican-pharma.com
swiss-meds.com
european-pharm.com
american-pharma.com
pharmacytouch.com
mypillsfinder.com
bestrxdeal.com
phentermine-online-shop.com
brand-meds.com
wellknowndrugs.com
bitrhconrtol.com
2009drugs.com
pharmazero.com
pharma-direct.com
americanmedsdirect.com
first-canadian-drugstore.com
first-swiss-meds.com
first-swiss-drugstore.com
first-canadian-pharm.com
first-canadian-pharmacy.com
european-drugstore.com
first-swiss-pharmacy.com
first-canadian-meds.com
first-swiss-pharm.com
first-canadian-pharma.com
approved-swiss-drugstore.com
approved-swiss-pharmacy.com
approved-swiss-pharma.com
approved-swiss-meds.com
approved-swiss-pharm.com
rxbynet.com
top-hotpills.com
4cheaprx.com
top-uspharm.com 

discountwebmeds.com
doctorphentermine.com
scandiamedic.com
pharmacy-usa.biz
ukmed.biz

Canadian Pharmacy – goodzchoices.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://goodzchoices.com

Address lookup

canonical name goodzchoices.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom goodzchoices.com“…

   Domain Name: GOODZCHOICES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Thu, 13 Aug 2009 01:04:47 UTC <<<

Queried whois.namerich.cn with “goodzchoices.com“…

 DomainName : goodzchoices.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.LIGHTINGDNSFLASH.COM
Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS6.YELLOWDNSPLACE.COM
Name Server......................NS5.YELLOWDNSPLACE.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS2.LIGHTINGDNSFLASH.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-11

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
goodzchoices.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
goodzchoices.com IN NS ns3.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns4.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns2.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN NS ns1.goodzchoices.com 86400s (1.00:00:00)
goodzchoices.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – geitwhileitshot.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://geitwhileitshot.com

Address lookup

canonical name geitwhileitshot.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom geitwhileitshot.com“…

   Domain Name: GEITWHILEITSHOT.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Tue, 11 Aug 2009 23:57:32 UTC <<<

Queried whois.hupo.com with “geitwhileitshot.com“…

Domain Name: geitwhileitshot.com

Registrant Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Administrative Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Technical Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Billing Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.lightingdnsflash.com
  ns2.lightingdnsflash.com
  ns3.ceasednserror.com
  ns4.ceasednserror.com
  ns5.yellowdnsplace.com
  ns6.yellowdnsplace.com

Registration Date:2009-08-07 05:53:14
Expireation Date:2010-08-07 05:53:14

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
geitwhileitshot.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
geitwhileitshot.com IN NS ns3.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns4.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns2.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns1.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —


Canadian Pharmacy Spam – mosthighlysoughtafter.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://mosthighlysoughtafter.com

Address lookup

canonical name mosthighlysoughtafter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom mosthighlysoughtafter.com“…

   Domain Name: MOSTHIGHLYSOUGHTAFTER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BIGBADDNS.COM
   Name Server: NS2.BIGBADDNS.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.STEADYDNSGOES.COM
   Name Server: NS6.STEADYDNSGOES.COM
   Status: ok
   Updated Date: 07-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Mon, 10 Aug 2009 15:27:46 UTC

Queried whois.namerich.cn with “mosthighlysoughtafter.com“…


 DomainName : mosthighlysoughtafter.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS1.BIGBADDNS.COM
Name Server......................NS6.STEADYDNSGOES.COM
Name Server......................NS2.BIGBADDNS.COM
Name Server......................NS5.STEADYDNSGOES.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-07

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
mosthighlysoughtafter.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns3.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns4.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns2.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns1.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN A 60.12.166.154 86400s (1.00:00:00)

Traceroute

Tracing route to mosthighlysoughtafter.com [60.12.166.154]

hop rtt rtt rtt ip address fully qualified domain name
1 11 3 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.29 et5-2.ibr04.dllstx3.theplanet.com
5 0 0 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 12 1 1 4.69.145.180 ae-83-80.ebr3.dallas1.level3.net
7 39 36 34 4.69.132.77 ae-3.ebr2.losangeles1.level3.net
8 33 33 33 4.69.144.72 ae-2-70.edge2.losangeles1.level3.net
9 209 212 206 4.78.202.18 china-netco.edge2.losangeles1.level3.net
10 209 208 206 219.158.3.185
11 207 208 206 219.158.4.110
12 206 207 206 219.158.12.42
13 224 224 226 221.12.82.106
14 261 291 258 221.12.82.78
15 213 212 214 60.12.166.154

Trace complete

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: TimedOut
HTTP – 80
POP3 – 110 Error: TimedOut
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:24:26 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

Traceroute

Tracing route to rxkingsatyourservice.com [211.95.78.2]

hop rtt rtt rtt ip address fully qualified domain name
1 4 4 3 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 2 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 1 1 7 4.69.145.204 ae-4-90.edge2.dallas3.level3.net
7 1 1 1 4.68.111.122 tiscali-level3-te.paris1.level3.net
8 1 1 1 152.63.96.46 0.ge-1-1-0.xl3.dfw7.alter.net
9 36 36 36 152.63.116.249 0.so-7-0-0.xt1.lax7.alter.net
10 36 36 37 152.63.118.33 gigabitethernet6-0-0.ig2.lax7.alter.net
11 205 205 205 63.65.154.222 chinaunicom-gw.customer.alter.net
12 205 206 206 211.94.39.97
13 206 205 206 211.94.44.14
14 206 206 206 211.95.88.25
15 206 205 206 211.95.74.17
16 206 206 206 211.95.78.2

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Mon, 10 Aug 2009 15:25:16 GMT
Server: Apache/2.2.11 (Fedora)
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=oghjitc99kb4rbu933bi3mhj00; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: dt=2009-08-10+15%3A25%3A16; expires=Mon, 10-Aug-2009 16:25:16 GMT
Connection: close
Content-Type: text/html; charset=UTF-8
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —


Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162