Category: counterfeit medicines alert

Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

1 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
217.150.55.94 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
207.115.36.108 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George”  <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Canadian Pharmacy Spam Domains

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Domains on Nameserver ns2.growfour.com

Entries 1 – 26 of 26

Canadian Pharmacy – popular-ed-products.com

1 Comment

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.

   Domain Name: POPULAR-ED-PRODUCTS.COM
   Registrar: KEY-SYSTEMS GMBH
   Whois Server: whois.rrpproxy.net
   Referral URL: http://www.key-systems.net
   Name Server: NS1.STIMUL-MEDIA.COM
   Name Server: NS2.STIMUL-MEDIA.COM
   Status: clientTransferProhibited
   Updated Date: 13-apr-2009
   Creation Date: 02-sep-2008
   Expiration Date: 02-sep-2011

>>> Last update of whois database: Fri, 17 Jul 2009 14:11:38 UTC <<<

Queried whois.rrpproxy.net with “popular-ed-products.com“…

DOMAIN: POPULAR-ED-PRODUCTS.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-VLP199
owner-organization: STIMUL-MEDIA.COM
owner-fname: Vitaly
owner-lname: Petrov
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: vitalypetrov76@yahoo.com

admin-contact: P-VLP199
admin-organization: STIMUL-MEDIA.COM
admin-fname: Vitaly
admin-lname: Petrov
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: vitalypetrov76@yahoo.com

tech-contact: P-VLP199
tech-organization: STIMUL-MEDIA.COM
tech-fname: Vitaly
tech-lname: Petrov
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: vitalypetrov76@yahoo.com

billing-contact: P-VLP199
billing-organization: STIMUL-MEDIA.COM
billing-fname: Vitaly
billing-lname: Petrov
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: vitalypetrov76@yahoo.com

nameserver: ns1.stimul-media.com
nameserver: ns2.stimul-media.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.165“…

% Information related to '88.85.64.0 - 88.85.71.255'

inetnum:        88.85.64.0 - 88.85.71.255
netname:        WEBAZILLA
descr:          WebaZilla
country:        NL
admin-c:        WZNL1-RIPE
tech-c:         WZNL1-RIPE
status:         ASSIGNED PA
mnt-by:         WZNET-MNT
mnt-routes:     WZNET-MNT
changed:        bk@webazilla.com 20070209
source:         RIPE

role:           WebaZilla RIPE Manager
address:        WebaZilla B.V.
address:        Postbus 19115
address:        3501DC Utrecht
address:        Netherlands
phone:          +31612253464
fax-no:         +31303100299
e-mail:         noc@webazilla.com
mnt-by:         WZNET-MNT
admin-c:        BK5536-RIPE
tech-c:         BK5536-RIPE
tech-c:         KV1670-RIPE
nic-hdl:        WZNL1-RIPE
changed:        bk@webazilla.com 20070718
source:         RIPE

% Information related to '88.85.64.0/19AS35415'

route:          88.85.64.0/19
descr:          WEBAZILLA
origin:         AS35415
mnt-by:         WZNET-MNT
changed:        bk@webazilla.com 20060728
source:         RIPE

DNS records

DNS query for 165.65.85.88.in-addr.arpa returned an error from the server: NameError

name class type data time to live
popular-ed-products.com IN SOA
server: ns1.stimul-media.com
email: root.stimul-media.com
serial: 2008102903
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 38400
38400s (10:40:00)
popular-ed-products.com IN NS ns2.stimul-media.com 38400s (10:40:00)
popular-ed-products.com IN NS ns1.stimul-media.com 38400s (10:40:00)
popular-ed-products.com IN A 88.85.65.165 38400s (10:40:00)

— end —

Canadian Pharmacy Spam – liveevery.com

3 Comments

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://cornerdeep.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

tiny dimension is your hidden shame, no need to worry, we ll help you! http://mialo.bgacipiq.cn/

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

Address lookup

canonical name liveevery.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom liveevery.com“…

   Domain Name: LIVEEVERY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:03:17 UTC <<<

Queried whois.namerich.cn with “liveevery.com“…

 DomainName : liveevery.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
liveevery.com IN A 203.93.208.86 10800s (03:00:00)
liveevery.com IN A 218.75.144.6 10800s (03:00:00)
liveevery.com IN A 60.191.239.150 10800s (03:00:00)

— end —

Address lookup

canonical name cornerdeep.com.
aliases
addresses 218.75.144.6
60.191.239.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom cornerdeep.com“…

   Domain Name: CORNERDEEP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:04:19 UTC <<<

Queried whois.namerich.cn with “cornerdeep.com“…

 DomainName : cornerdeep.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cornerdeep.com IN A 218.75.144.6 10800s (03:00:00)
cornerdeep.com IN A 60.191.239.150 10800s (03:00:00)
cornerdeep.com IN A 203.93.208.86 10800s (03:00:00)

— end —

cornerdeep.com


Best-Meds.com – Discounted Canadian Prescription Medications

Leave a comment

Qualitynet Or BestMeds.com Rip-off will cash check but does not send order or answer follow-up E-Mails. BEWARE Internet

Qualitynet
Bestmeds.com
Internet,
U.S.A.

Order from this company on-line, gave check information and they cashed check but no order ha arrived or been sent. I have floowed up with 3 E-Mils with no reponse what so ever. But they were quick to cash my check for order.
So, Please be aware and do not fall for their false advertising. wish i had checked them here first, would have saved me some money.
Thanks

Roberta
Boynton Beach, Florida
U.S.A.

Canadian Pharmacy – drivespring.com

2 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
75.136.9.179 United States (Dalton)* Whois Google DNSStuff Urgentmessage.org
207.115.36.164 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Fidel Gibson Fri Jul 3 15:37:35 2009
Return-Path: <f_gibson_je@hopwood.ac.uk>
Authentication-Results: mta101.sbc.mail.re3.yahoo.com from=hopwood.ac.uk; domainkeys=neutral (no sig); from=hopwood.ac.uk; dkim=neutral (no sig)
Received: from 75.136.9.179 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta101.sbc.mail.re3.yahoo.com with SMTP; Fri, 03 Jul 2009 15:39:54 -0700
Received: from xfjwjy2 (static.unknown.charter.com [75.136.9.179] (may be forged))
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n63MddZF013409;
Fri, 3 Jul 2009 17:39:53 -0500
Message-ID: <000701c9fc2e$dc8f16f0$d828ea62@hopwood.ac.uk>
Reply-To: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
From: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
To:
Subject: Spice up your performance in bed
Date: Fri, 03 Jul 2009 17:37:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://drivespring.com

Address lookup

canonical name drivespring.com.
aliases
addresses 218.75.144.6
60.191.239.150
124.42.91.162
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom drivespring.com“…

   Domain Name: DRIVESPRING.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

Last update of whois database: Fri, 10 Jul 2009 06:07:35 UTC <<<

Queried whois.namerich.cn with “drivespring.com“…

 DomainName : drivespring.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
drivespring.com IN A 218.75.144.6 10800s (03:00:00)
drivespring.com IN A 124.42.91.162 10800s (03:00:00)
drivespring.com IN A 60.191.239.150 10800s (03:00:00)
drivespring.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Canadian Pharmacy – pridegive.com

1 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

An Incredible Canadian Pharmacy is available at your Fingertips!
NoDoctor Needed! Browse our Site Today! -> http://pridegive.com

Address lookup

canonical name pridegive.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150
124.42.91.162

Domain Whois record

Queried whois.internic.net with “dom pridegive.com“…

   Domain Name: PRIDEGIVE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.MIGHTPAGE.COM
   Name Server: NS2.MIGHTPAGE.COM
   Name Server: NS3.LETJEWEL.RU
   Name Server: NS4.LETJEWEL.RU
   Name Server: NS5.LISTGENTLE.COM
   Name Server: NS6.LISTGENTLE.COM
   Status: ok
   Updated Date: 04-jul-2009
   Creation Date: 04-jul-2009
   Expiration Date: 04-jul-2010

Last update of whois database: Fri, 10 Jul 2009 06:03:45 UTC <<<

Queried whois.namerich.cn with “pridegive.com“…

 DomainName : pridegive.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LETJEWEL.RU
Name Server......................NS3.LETJEWEL.RU
Name Server......................NS1.MIGHTPAGE.COM
Name Server......................NS2.MIGHTPAGE.COM
Name Server......................NS5.LISTGENTLE.COM
Name Server......................NS6.LISTGENTLE.COM
Status...........................ok
Creation  Date ..................2009-07-04
Expiration Date .................2010-07-04
Last Update  Date ...............2009-07-04

Registrant ID ...................V-X-58730-14742
Registrant Name .................QIAO GUANGLIANG
Registrant Organization .........QIAO GUANGLIANG
Registrant Address ..............HUANZHUGUANGCHANG31
Registrant City..................CD
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........415063
Registrant Phone Number .........+86.073657561248
Registrant Fax ..................+86.073657561248
Registrant Email ................opjakeg@163.com

Administrative ID ...............V-X-58730-14742
Administrative Name .............QIAO GUANGLIANG
Administrative Organization .....QIAO GUANGLIANG
Administrative Address ..........HUANZHUGUANGCHANG31
Administrative City..............CD
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......415063
Administrative Phone Number .....+86.073657561248
Administrative Fax ..............+86.073657561248
Administrative Email ............opjakeg@163.com

Billing ID ......................V-X-58730-14742
Billing Name ....................QIAO GUANGLIANG
Billing Organization ............QIAO GUANGLIANG
Billing Address .................HUANZHUGUANGCHANG31
Billing City.....................CD
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............415063
Billing Phone Number ............+86.073657561248
Billing Fax .....................+86.073657561248
Billing Email ...................opjakeg@163.com

Technical ID ....................V-X-58730-14742
Technical Name ..................QIAO GUANGLIANG
Technical Organization...........QIAO GUANGLIANG
Technical Address ...............HUANZHUGUANGCHANG31
Technical City...................CD
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........415063
Technical Phone Number ..........+86.073657561248
Technical Fax ...................+86.073657561248
Technical Email .................opjakeg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
pridegive.com IN A 60.191.239.150 10800s (03:00:00)
pridegive.com IN A 203.93.208.86 10800s (03:00:00)
pridegive.com IN A 218.75.144.6 10800s (03:00:00)
pridegive.com IN A 124.42.91.162 10800s (03:00:00)

— end —


Canadian Pharmacy Spam – bluepillusa.com

1 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

BluePillusa

Address lookup

canonical name bluepillusa.com.
aliases
addresses 78.159.118.218

Domain Whois record

Queried whois.internic.net with “dom bluepillusa.com“…

   Domain Name: BLUEPILLUSA.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS3.01ISP.COM
   Name Server: NS4.01ISP.NET
   Status: clientTransferProhibited
   Updated Date: 21-oct-2008
   Creation Date: 21-oct-2008
   Expiration Date: 21-oct-2009

>>> Last update of whois database: Mon, 06 Jul 2009 03:04:10 UTC <<<

Queried whois.todaynic.com with “bluepillusa.com“…

Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: bluepillusa.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Alexey M. Arkhipov
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Administrative Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500
Phone: +7.9611327925
Fax: +7.9611327925
Email: arkipal@gmail.com

Technical Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Nameserver Information:
    ns3.01isp.com
    ns4.01isp.net

Create: 2008-10-22 00:20:06
Update: 2008-10-22
Expired: 2009-10-22
QueryTimes: 80

If any of the information above is inaccurate, you must correct it by visiting our website or contact us.
(If your review indicates that all of the information above is accurate, you do not need to take any action.)
Please remember that under the terms of your registration agreement, the provision of false Whois information
can be grounds for cancellation of your domain name registration.
Todaynic.com,Inc. reserves the right to modify these terms at any time.

Network Whois record

Queried whois.ripe.net with “-B 78.159.118.218“…

% Information related to '78.159.118.0 - 78.159.121.255'

inetnum:        78.159.118.0 - 78.159.121.255
netname:        NETDIRECT-NET
descr:          netdirekt e.K.
remarks:        INFRA-AW
country:        DE
admin-c:        WW200-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20080311
source:         RIPE

person:       Wiethold Wagner
address:      netdirekt e. K.
address:      Kleyer Strasse 79 / Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       info@netdirekt.de
nic-hdl:      WW200-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '78.159.96.0/19AS28753'

route:	        78.159.96.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20071011
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
bluepillusa.com IN SOA
server: ns3.01isp.com
email: webmaster.now.net.cn
serial: 2008102210
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 7200
7200s (02:00:00)
bluepillusa.com IN NS ns3.01isp.com 43200s (12:00:00)
bluepillusa.com IN NS ns4.01isp.net 43200s (12:00:00)
bluepillusa.com IN A 78.159.118.218 7200s (02:00:00)
218.118.159.78.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 12345
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN PTR 78-159-118-218.internetserviceteam.com 100000s (1.03:46:40)

— end —

AUTH WHOiS]
[Querying whois.verisign-grs.comhttp://whois.verisign-grs.com]
[whois.verisign-grs.comhttp://whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.nethttp://www.internic.net
for detailed information.

Domain Name: RXMEDS4ALL.COMhttp://RXMEDS4ALL.COM
Registrar: TODAYNIC.COMhttp://TODAYNIC.COM, INC.
Whois Server: whois.todaynic.comhttp://whois.todaynic.com
Referral URL: http://www.NOW.CNhttp://www.NOW.CN
Name Server: NS1.FREEDNS.WShttp://NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WShttp://NS2.FREEDNS.WS
Status: clientTransferProhibited
Updated Date: 26-nov-2008
Creation Date: 13-feb-2008
Expiration Date: 13-feb-2010

>>> Last update of whois database: Sat, 07 Feb 2009 09:50:51 EST

Stolen Identity Canadian Pharmacy – pfizer-incorporated.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

pfizer-incorporated

Address lookup

canonical name pfizer-incorporated.com.
aliases
addresses 91.207.4.202

Domain Whois record

Queried whois.internic.net with “dom pfizer-incorporated.com“…

   Domain Name: PFIZER-INCORPORATED.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.PFIZER-INCORPORATED.COM
   Name Server: NS2.PFIZER-INCORPORATED.COM
   Name Server: NS3.PFIZER-INCORPORATED.COM
   Name Server: NS4.PFIZER-INCORPORATED.COM
   Status: clientTransferProhibited
   Updated Date: 02-jul-2009
   Creation Date: 02-jul-2009
   Expiration Date: 02-jul-2010

>>> Last update of whois database: Sat, 04 Jul 2009 11:41:46 UTC <<<

Queried whois.onlinenic.com with “pfizer-incorporated.com“…

Registrant:
	 Deloris P Perticone fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by +7.4294967295
	 N/A
	 ul. Tsentral'naya, d. 18, kv. 11
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:pfizer-incorporated.com 
Record last updated at 2009-07-02 10:19:48
Record created on 2009/7/2
Record expired on 2010/7/2

Domain servers in listed order:
	 ns1.pfizer-incorporated.com 	 ns2.pfizer-incorporated.com 

Administrator:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto 
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.ripe.net with “-B 91.207.4.202“…

% Information related to '91.207.4.0 - 91.207.9.255'

inetnum:        91.207.4.0 - 91.207.9.255
netname:        SteepHost-DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-63-618-45-00
descr:          +380-67-375-27-03
remarks:        Please send all spam/scam/fraud abuse to abuse@steephost.com
country:        UA
org:            ORG-SH7-RIPE
admin-c:        SH3855-RIPE
tech-c:         SH3855-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         SH3855-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     SH3855-MNT
mnt-domains:    SH3855-MNT
changed:        hostmaster@ripe.net 20080911
source:         RIPE

organisation:   ORG-SH7-RIPE
org-name:       SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
org-type:       OTHER
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
mnt-ref:        SH3855-MNT
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
changed:        hostmaster@ripe.net 20080911
source:         RIPE

role:           SteepHost DC-UA
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
admin-c:        AK5709-RIPE
tech-c:         AK5709-RIPE
nic-hdl:        SH3855-RIPE
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
source:         RIPE

% Information related to '91.207.4.0/22AS47142'

route:          91.207.4.0/22
descr:          SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-67-375-27-03
descr:          +380-63-618-45-00
descr:          Please send all spam/scam/fraud abuse to abuse@steephost.com
origin:         AS47142
mnt-by:         SH3855-MNT
changed:        noc@steephost.com 20080911
source:         RIPE

DNS records

DNS query for 202.4.207.91.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
pfizer-incorporated.com IN A 91.207.4.202 3600s (01:00:00)

— end —

MyNewCanadianPharmacy – www.bulnalei.net

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

MyNewCanadianPharmacy

Address lookup

canonical name bulnalei.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bulnalei.net IN SOA
server: ns1.bulnalei.net
email: admin.bulnalei.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
bulnalei.net IN NS ns1.bulnalei.net 600s (00:10:00)
bulnalei.net IN NS ns2.bulnalei.net 600s (00:10:00)
bulnalei.net IN MX
preference: 10
exchange: mail.bulnalei.net
600s (00:10:00)
bulnalei.net IN A 212.174.200.111 600s (00:10:00)

— end —

MyCanadianPharmacy Scam – greatpharmacyrxpads.net

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

mycanadianpharmacyxx

Address lookup

canonical name greatpharmacyrxpads.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom greatpharmacyrxpads.net“…

   Domain Name: GREATPHARMACYRXPADS.NET
   Registrar: 12 REGISTER BV
   Whois Server: whois.yoursrs.com
   Referral URL: http://www.yoursrs.com
   Name Server: NS1.BH4.RU
   Name Server: NS2.BESTPHARMACYOUTLET.NET
   Status: ok
   Updated Date: 17-jun-2009
   Creation Date: 19-may-2009
   Expiration Date: 19-may-2010

>>> Last update of whois database: Sat, 04 Jul 2009 16:51:38 UTC <<<

Queried whois.yoursrs.com with “greatpharmacyrxpads.net“…

Domain Name:greatpharmacyrxpads.net
Name Server:ns1.bh4.ru
Name Server:ns2.bestpharmacyoutlet.net
Created On:2009-05-19
Last Updated On:2009-06-17
Expiration Date:2010-05-19
Dealer:xss
Registrant ID:AntonNikiforov
Registrant Name:Anton Nikiforov
Registrant Organization:
Registrant Street1:ulitsa Smolnaya d.21 kv.360
Registrant Street2:
Registrant Street3:
Registrant City:Moskva
Registrant State/Province:Moskva
Registrant Postal Code:125445
Registrant Country:RU
Registrant Phone:+7.4957412992
Registrant Fax:
Registrant Email:nikiforov@seostudio.at
Admin ID:AlexanderBarkhatov
Admin Name:Alexander Barkhatov
Admin Organization:
Admin Street1:Perviy Mikrorajon dom 23 kv.177
Admin Street2:
Admin Street3:
Admin City:Kurganskaya oblast
Admin State/Province:Kurgan
Admin Postal Code:640024
Admin Country:RU
Admin Phone:+7.3522462300
Admin Fax:
Admin Email:barhatov@seostudio.at
Billing ID:AlexanderBarkhatov
Billing Name:Alexander Barkhatov
Billing Organization:
Billing Street1:Perviy Mikrorajon dom 23 kv.177
Billing Street2:
Billing Street3:
Billing City:Kurganskaya oblast
Billing State/Province:Kurgan
Billing Postal Code:640024
Billing Country:RU
Billing Phone:+7.3522462300
Billing Fax:
Billing Email:barhatov@seostudio.at
Tech ID:AlexanderBarkhatov
Tech Name:Alexander Barkhatov
Tech Organization:
Tech Street1:Perviy Mikrorajon dom 23 kv.177
Tech Street2:
Tech Street3:
Tech City:Kurganskaya oblast
Tech State/Province:Kurgan
Tech Postal Code:640024
Tech Country:RU
Tech Phone:+7.3522462300
Tech Fax:
Tech Email:barhatov@seostudio.at

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
greatpharmacyrxpads.net IN SOA
server: ns1.greatpharmacyrxpads.net
email: admin.greatpharmacyrxpads.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
greatpharmacyrxpads.net IN NS ns1.greatpharmacyrxpads.net 600s (00:10:00)
greatpharmacyrxpads.net IN NS ns2.greatpharmacyrxpads.net 600s (00:10:00)
greatpharmacyrxpads.net IN MX
preference: 10
exchange: mail.greatpharmacyrxpads.net
600s (00:10:00)
greatpharmacyrxpads.net IN A 212.174.200.111 600s (00:10:00)

— end —

medsyourhealth.com – Canadian Health&Care Mall ALANTRON BLTD.
superdrugtoretablets.com – Canadian Health&Care Mall COMMUNIGAL COMMUNICATIONS LTD
avkjiw.cn – Canadian Health&Care Mall ENAME.COM
vmkhiue.cn – Canadian Health&Care Mall ENAME.COM
nyovbaibgeu.com – Canadian Health&Care Mall GLOBEDOM DATENKOMMUNIKATIONS GMBH
sdolezyql.com – Canadian Health&Care Mall GLOBEDOM DATENKOMMUNIKATIONS GMBH
meardepryr.com – Canadian Health&Care Mall KEY-SYSTEMS GMBH
epoxfyud.com – Canadian Health&Care Mall MONIKER ONLINE SERVICES, INC.
rysvapjoed.com – Canadian Health&Care Mall REGISTER.COM, INC.
greatpharmacyrxpads.net – My Canadian Pharmacy 12 REGISTER BV
apnerpov.com – My Canadian Pharmacy EASYDNS TECHNOLOGIES, INC.
medshealthdrugstoresite.com – My Canadian Pharmacy VISESH INFOTECNICS LTD
bulnalei.com –  MyNewCanadianPharmacy 1 & 1 INTERNET AG
umzimsotu.com – MyNewCanadianPharmacy 101DOMAIN, INC.
bulnalei.net – MyNewCanadianPharmacy ONLINE SAS
elpulkut.com – MyNewCanadianPharmacy ONLINE SAS
elpulkut.net – USDrugs RANGER REGISTRATION (MADEIRA) LLC.
pharmacytabletspill.net – USDrugs 12 REGISTER BV
healthgiftstore.com – USDrugs COMMUNIGAL COMMUNICATIONS LTD
pipzulaw.com – USDrugs DIRECTNIC.COM
healthplansmarket.com –  USDrugs IA REGISTRY
hlounykry.com – USDrugs WEBNAMES.CA INC.

WhoIs 89.189.191.95 – warez-free-all

Leave a comment


Consumer & Business Alert – Stolen Identity!!!! fraudalert
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

89.189.191.95

Address lookup

canonical name gw-95.211.ru.
aliases
addresses 89.189.191.95

Domain Whois record

Queried whois.ripn.net with “211.ru“…

warez-free-all.blogspot.com/
Author : Virtualia (IP: 89.189.191.95 , gw-95.211.ru)
E-mail : virt@gmail.com

% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:     211.RU
type:       CORPORATE
nserver:    ns.211.ru. 193.238.131.195
nserver:    ns2.211.ru. 89.189.191.224
state:      REGISTERED, DELEGATED
org:        Ltd. "Siberian Networks"
phone:      +7 383 2209211
phone:      +7 383 2209280
fax-no:     +7 383 2209211
e-mail:     noc@211.ru
registrar:  RUCENTER-REG-RIPN
created:    2004.06.16
paid-till:  2010.06.16
source:     TC-RIPN

Last updated on 2009.07.04 04:54:11 MSK/MSD

Network Whois record

Queried whois.ripe.net with “-B 89.189.191.95“…

% Information related to '89.189.184.0 - 89.189.191.255'

inetnum:        89.189.184.0 - 89.189.191.255
netname:        RU-ISP-SIBNET-NSK-2
descr:          Siberian Networks
country:        RU
admin-c:        SAS-RIPE
tech-c:         SAS-RIPE
status:         ASSIGNED PA
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070301
source:         RIPE

person:         Stanislav A. Svirid
address:        Siberian Networks
address:        21/1, Dachnaya Street
address:        630082, Novosibirsk
address:        Russia
phone:          +7 383 2209280
fax-no:         +7 383 2209211
nic-hdl:        SAS-RIPE
e-mail:         count@211.ru
notify:         count@211.ru
notify:         noc@211.ru
mnt-by:         SIBNET-NSK-MNT
changed:        sva@riss-telecom.ru 20001102
changed:        frolov@riss-telecom.ru 20021218
changed:        count@211.ru 20070322
source:         RIPE

% Information related to '89.189.184.0/21AS34757'

route:          89.189.184.0/21
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070322
source:         RIPE

% Information related to '89.189.176.0/20AS34757'

route:          89.189.176.0/20
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20080328
source:         RIPE

DNS records

name class type data time to live
gw-95.211.ru IN A 89.189.191.95 43200s (12:00:00)
211.ru IN SOA
server: ns2.211.ru
email: noc.211.ru
serial: 2009063002
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 86400
43200s (12:00:00)
211.ru IN TXT v=spf1 ip4:193.238.128.0/22 ip4:89.189.176.0/20 ip4:80.64.168.0/21 ip4:217.106.28.136/30 mx ptr mx:193.238.131.194 ~all 43200s (12:00:00)
211.ru IN A 193.238.131.200 43200s (12:00:00)
211.ru IN MX
preference: 0
exchange: mx.211.ru
43200s (12:00:00)
211.ru IN NS ns.211.ru 43200s (12:00:00)
211.ru IN NS ns2.211.ru 43200s (12:00:00)
95.191.189.89.in-addr.arpa IN PTR gw-95.211.ru

Canadian Pharmacy Spam – dependprefer.com

9 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://dependprefer.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.125 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
61.161.148.135 China (Shenyang)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Barbra Yang Wed Jul 1 18:30:12 2009
Return-Path:  <b_yangcl@tacocity.com.tw>
Authentication-Results: mta130.sbc.mail.mud.yahoo.com from=tacocity.com.tw; domainkeys=neutral (no sig); from=tacocity.com.tw; dkim=neutral (no sig)
Received: from 207.115.20.125 (EHLO flpd115.prodigy.net) (207.115.20.125)
by mta130.sbc.mail.mud.yahoo.com with SMTP; Wed, 01 Jul 2009 18:32:23 -0700
Received: from 91pmey1 ([61.161.148.135])
by flpd115.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n621WIwh005457;
Wed, 1 Jul 2009 18:32:20 -0700
Message-ID: <000701c9fab4$a4f5cfc0$d828ea62@tacocity.com.tw>
Reply-To: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
From: “Barbra Yang”  <b_yangcl@tacocity.com.tw>
To:
Subject: International Pharm get med cheaper online
Date: Wed, 01 Jul 2009 20:30:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name dependprefer.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom dependprefer.com“…

   Domain Name: DEPENDPREFER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

>>> Last update of whois database: Fri, 03 Jul 2009 08:25:57 UTC <<<

Queried whois.namerich.cn with “dependprefer.com“…

This is a redirector site to the criminal fraud Canadian Pharmacy. 
The name servers that resolve access and the registrars sponsoring the crime are - 
ns1.plumpsize.in ns2.plumpsize.in - Visesh Infotecnics Ltd. (rbaweja@viseshinfo.com) 
ns3.dresshomes.ru ns4.dresshomes.ru - REGRU-REG-RIPN 
ns5.whosetangy.pl ns6.whosetangy.pl - EPAG Domainservices GmbH (support@epag.de)
Dirty NS IP addresses are 
60.191.221.117 (anti_spam@mail.jhptt.zj.cn) 
60.191.239.153 (anti_spam@mail.jhptt.zj.cn) 
61.191.191.241 (anti-spam@ns.chinanet.cn.net) 
119.39.238.2 (abuse@cnc-noc.net) 
203.93.208.86 (abuse@chinaunicom.cn) 
218.75.144.6 (abuse.szx@2118.com.cn)
 DomainName : dependprefer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
dependprefer.com IN A 203.93.208.86 10800s (03:00:00)
dependprefer.com IN A 222.241.150.146 10800s (03:00:00)
dependprefer.com IN A 61.191.191.241 10800s (03:00:00)
dependprefer.com IN A 218.75.144.6 10800s (03:00:00)
dependprefer.com IN A 119.39.238.2 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – visitslip.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.46 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
211.186.220.30 Korea, Republic of (Seoul)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://visitslip.com

From Kristin B. Jacobs Tue Jun 30 12:07:48 2009
Return-Path: <kristin_b.jacobsks@zip.co.nz>
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=zip.co.nz; domainkeys=neutral (no sig); from=zip.co.nz; dkim=neutral (no sig)
Received: from 207.115.20.46 (EHLO flph263.prodigy.net) (207.115.20.46)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Tue, 30 Jun 2009 03:20:01 -0700
Received: from cmh7fb2 ([211.186.220.30])
by flph263.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5UAJv6O009087;
Tue, 30 Jun 2009 03:19:59 -0700
Message-ID: <000701c9f9b6$0f0093f0$ae8bf302@zip.co.nz>
Reply-To: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
From: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
To:
Subject: Make you wife moan in pleasure!
Date: Tue, 30 Jun 2009 15:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 139

Address lookup

canonical name visitslip.com.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
222.241.150.146

Domain Whois record

Queried whois.internic.net with “dom visitslip.com“…

   Domain Name: VISITSLIP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:19:02 UTC <<<

Queried whois.namerich.cn with “visitslip.com“…

 DomainName : visitslip.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
visitslip.com IN A 119.39.238.2 10800s (03:00:00)
visitslip.com IN A 203.93.208.86 10800s (03:00:00)
visitslip.com IN A 222.241.150.146 10800s (03:00:00)
visitslip.com IN A 61.191.191.241 10800s (03:00:00)
visitslip.com IN A 218.75.144.6 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – magnetaroma.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
202.22.220.7 Japan (Kiryu)* Whois Google DNSStuff Urgentmessage.org
207.115.20.191 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
7.220.22.202 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://magnetaroma.com

From Augustine Chung Mon Jun 29 04:16:55 2009
Return-Path:  <a_chung_jh@charters.com.au>
Authentication-Results: mta165.sbc.mail.mud.yahoo.com from=charters.com.au; domainkeys=neutral (no sig); from=charters.com.au; dkim=neutral (no sig)
Received: from 202.22.220.7 (EHLO flpi189.prodigy.net) (207.115.20.191)
by mta165.sbc.mail.mud.yahoo.com with SMTP; Mon, 29 Jun 2009 04:18:55 -0700
Received: from x687a82 (7.220.22.202.ktv.ne.jp [202.22.220.7])
by flpi189.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5TBHsNa023999;
Mon, 29 Jun 2009 04:18:52 -0700
Message-ID: <000701c9f8ab$1c7f4a50$d828ea62@charters.com.au>
Reply-To: “Augustine Chung”  <a_chung_jh@charters.com.au>
From: “Augustine Chung”   <a_chung_jh@charters.com.au>
To:
Subject: Want great sex? Get..
Date: Mon, 29 Jun 2009 06:16:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

Address lookup

canonical name magnetaroma.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom magnetaroma.com“…

   Domain Name: MAGNETAROMA.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:00:22 UTC <<<

Queried whois.namerich.cn with “magnetaroma.com“…

 DomainName : magnetaroma.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
magnetaroma.com IN A 218.75.144.6 10800s (03:00:00)
magnetaroma.com IN A 119.39.238.2 10800s (03:00:00)
magnetaroma.com IN A 203.93.208.86 10800s (03:00:00)
magnetaroma.com IN A 222.241.150.146 10800s (03:00:00)
magnetaroma.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy Spam – CANADIAN-HEALTHCARE-SHOP.COM

2 Comments

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

canadian-healtcare-shop

1 (210) 888-9089

Address lookup

canonical name canadian-healthcare-shop.com.
aliases
addresses 195.95.155.11

Domain Whois record

Queried whois.internic.net with “dom canadian-healthcare-shop.com“…

   Domain Name: CANADIAN-HEALTHCARE-SHOP.COM
   Registrar: EURODNS S.A
   Whois Server: whois.eurodns.com
   Referral URL: http://www.eurodns.com
   Name Server: NS1.EURODNS.COM
   Name Server: NS2.EURODNS.COM
   Status: clientTransferProhibited
   Updated Date: 04-feb-2009
   Creation Date: 04-feb-2009
   Expiration Date: 04-feb-2010

>>> Last update of whois database: Thu, 02 Jul 2009 04:48:12 UTC <<<

Queried whois.eurodns.com with “canadian-healthcare-shop.com“…

Domain: canadian-healthcare-shop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Technical Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.11“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 11.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-healthcare-shop.com IN A 195.95.155.11 700s (00:11:40)
canadian-healthcare-shop.com IN MX
preference: 10
exchange: mail.canadian-healthcare-shop.com
3600s (01:00:00)
canadian-healthcare-shop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009051500
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dns1.nightmodest.com
dns4.nightmodest.com
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.againseat.com
ns1.bedplain.com
ns1.busyorder.com
ns1.chartflat.in
ns1.exceptexotic.com
ns1.fabledmaxi.com
ns1.felttwenty.com
ns1.moralgrand.com
ns1.noticezap.com
ns1.pickcool.in
ns1.poundanger.com
ns1.saidcold.com
ns1.sendbusy.com
ns1.skinglad.com
ns1.thosekept.com
ns1.wooddoes.in
ns1.yearbusy.com
ns2.11121.org
ns2.12332.org
ns2.13231.org
ns2.7594.org
ns2.againseat.com
ns2.bedplain.com
ns2.chartflat.in
ns2.expectcoast.com
ns2.felttwenty.com
ns2.fewwhole.com
ns2.heartcorner.in
ns2.linewhich.com
ns2.listwere.com
ns2.noticezap.com
ns2.pickcool.in
ns2.tendereach.com
ns2.thosekept.com
ns2.wooddoes.in
ns2.wouldwealth.com
ns3.9736.org
ns3.againseat.com
ns3.alertglad.ru
ns3.bothstart.ru
ns3.coolpride.ru
ns3.doctorstill.com
ns3.eastoccur.ru
ns3.fabledmaxi.com
ns3.flattry.com
ns3.freshalive.ru
ns3.gladlive.ru
ns3.heavymeek.ru
ns3.listenface.ru
ns3.med22.org
ns3.prettysign.ru
ns3.quietfree.ru
ns3.sendbusy.com
ns3.skinglad.com
ns3.strongoffer.ru
ns3.tendereach.com
ns3.thosekept.com
ns3.tradearrive.com
ns3.tubeold.com
ns3.wouldwealth.com
ns3.yearbusy.com
ns4.12332.org
ns4.13123.org
ns4.7594.org
ns4.9736.org
ns4.againseat.com
ns4.aglowarm.com
ns4.bothstart.ru
ns4.coolpride.ru
ns4.eastoccur.ru
ns4.exceptexotic.com
ns4.expectcoast.com
ns4.fewwhole.com
ns4.freshalive.ru
ns4.gladlive.ru
ns4.listenface.ru
ns4.organcamp.ru
ns4.prettysign.ru
ns4.quietfree.ru
ns4.skinglad.com
ns4.tendereach.com
ns4.thinkspace.ru
ns4.thosekept.com
ns4.tradearrive.com
ns4.truereap.ru
ns4.wouldwealth.com
ns4.yearbusy.com
ns4.youngliquid.com
ns5.blueawake.com
ns5.madeonly.pl
ns5.motionseeker.pl
ns6.wesuch.p

Canadian Pharmacy – safe-supplier.com

2 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

safe-supplier

Address lookup

canonical name safe-supplier.com.
aliases http://www.safe-supplier.com
addresses 72.167.131.144

Domain Whois record

Queried whois.internic.net with “dom safe-supplier.com“…

   Domain Name: SAFE-SUPPLIER.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS51.DOMAINCONTROL.COM
   Name Server: NS52.DOMAINCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 29-may-2009
   Creation Date: 15-mar-2007
   Expiration Date: 15-mar-2011

>>> Last update of whois database: Tue, 30 Jun 2009 04:16:27 UTC <<<

Queried whois.enom.com with “safe-supplier.com“…

Visit AboutUs.org for more information about safe-supplier.com
<a href="http://www.aboutus.org/safe-supplier.com">AboutUs: safe-supplier.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: safe-supplier.com

Registrant Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali ()

   Fax:
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Administrative Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Technical Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Status: Locked

Name Servers:
   ns51.domaincontrol.com
   ns52.domaincontrol.com

Creation date: 15 Mar 2007 10:44:00
Expiration date: 15 Mar 2011 10:44:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “72.167.131.144“…

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US

NetRange:   72.167.0.0 - 72.167.255.255
CIDR:       72.167.0.0/16
OriginAS:   AS26496
NetName:    GO-DADDY-SOFTWARE-INC
NetHandle:  NET-72-167-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate:    2007-07-05
Updated:    2008-01-18

RAbuseHandle: ABUSE51-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-480-624-2505
RAbuseEmail:  abuse@godaddy.com 

RNOCHandle: NOC124-ARIN
RNOCName:   Network Operations Center
RNOCPhone:  +1-480-505-8809
RNOCEmail:  noc@godaddy.com 

RTechHandle: NOC124-ARIN
RTechName:   Network Operations Center
RTechPhone:  +1-480-505-8809
RTechEmail:  noc@godaddy.com 

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809
OrgNOCEmail:  noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809
OrgTechEmail:  noc@godaddy.com

# ARIN WHOIS database, last updated 2009-06-29 20:00

DNS records

name class type data time to live
http://www.safe-supplier.com IN CNAME safe-supplier.com 3599s (00:59:59)
safe-supplier.com IN SOA
server: ns51.domaincontrol.com
email: dns.jomax.net
serial: 2009052800
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
safe-supplier.com IN A 72.167.131.144 3600s (01:00:00)
safe-supplier.com IN NS ns51.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN NS ns52.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
safe-supplier.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
144.131.167.72.in-addr.arpa IN PTR p3slh180.shr.phx3.secureserver.net 3600s (01:00:00)

Canadian Pharmacy – www.flattry.com – www.tendereach.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name www.flattry.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241
119.39.238.2

flattery

Domain Whois record

Queried whois.internic.net with “dom flattry.com“…

   Domain Name: FLATTRY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FLATTRY.COM
   Name Server: NS2.FLATTRY.COM
   Name Server: NS3.FLATTRY.COM
   Name Server: NS4.FLATTRY.COM
   Status: clientTransferProhibited
   Updated Date: 23-jun-2009
   Creation Date: 10-jun-2009
   Expiration Date: 10-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:36:22 UTC <<<

Queried whois.onlinenic.com with “flattry.com“…

Registrant:
	 Merido Vallici ad667@safe-mail.net +1.2128843301
	 Merido Vallici
	 4033 po box
	 New York,NY,US 10137

Domain Name:flattry.com
Record last updated at 2009-06-23 07:38:35
Record created on 2009/6/10
Record expired on 2010/6/10

Domain servers in listed order:
	 ns1.flattry.com 	 ns2.flattry.com 

Administrator:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Technical Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Billing Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.flattry.com IN A 60.191.239.153 10800s (03:00:00)
http://www.flattry.com IN A 61.191.191.241 10800s (03:00:00)
http://www.flattry.com IN A 119.39.238.2 10800s (03:00:00)
http://www.flattry.com IN A 203.93.208.86 10800s (03:00:00)
http://www.flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 119.39.238.2 10800s (03:00:00)
flattry.com IN A 203.93.208.86 10800s (03:00:00)
flattry.com IN A 60.191.239.153 10800s (03:00:00)
flattry.com IN A 61.191.191.241 10800s (03:00:00)

— end —

Address lookup

canonical name www.tendereach.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom tendereach.com“…

   Domain Name: TENDEREACH.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.TENDEREACH.COM
   Name Server: NS2.TENDEREACH.COM
   Name Server: NS3.TENDEREACH.COM
   Name Server: NS4.TENDEREACH.COM
   Status: clientTransferProhibited
   Updated Date: 24-jun-2009
   Creation Date: 23-jun-2009
   Expiration Date: 23-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:43:47 UTC <<<

Queried whois.onlinenic.com with “tendereach.com“…

Registrant:
	 Lorenv Cerre ad0@safe-mail.net +1.2138848801
	 Lorenv Cerre
	 4033 po box
	 New York,NY,US 10337

Domain Name:tendereach.com
Record last updated at 2009-06-24 08:21:43
Record created on 2009/6/23
Record expired on 2010/6/23

Domain servers in listed order:
	 ns1.tendereach.com 	 ns2.tendereach.com 

Administrator:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Technical Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Billing Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.tendereach.com IN A 218.75.144.6 10800s (03:00:00)
http://www.tendereach.com IN A 60.191.239.153 10800s (03:00:00)
http://www.tendereach.com IN A 61.191.191.241 10800s (03:00:00)
http://www.tendereach.com IN A 119.39.238.2 10800s (03:00:00)
http://www.tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 119.39.238.2 10800s (03:00:00)
tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 60.191.239.153 10800s (03:00:00)
tendereach.com IN A 61.191.191.241 10800s (03:00:00)
tendereach.com IN A 218.75.144.6 10800s (03:00:00)

Canadian Pharmacy – canadiannetmall.com

Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Canadiannetmall

Address lookup

canonical name canadiannetmall.com.
aliases
addresses 94.76.196.49

Domain Whois record

Queried whois.internic.net with “dom canadiannetmall.com“…

   Domain Name: CANADIANNETMALL.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.CANADIANNETMALL.COM
   Name Server: NS2.CANADIANNETMALL.COM
   Status: clientTransferProhibited
   Updated Date: 23-dec-2008
   Creation Date: 03-mar-2008
   Expiration Date: 03-mar-2010

>>> Last update of whois database:
Mon, 29 Jun 2009 12:10:38 UTC <<<

Queried whois.enom.com with “canadiannetmall.com“…

Visit AboutUs.org for more information about canadiannetmall.com
<a href="http://www.aboutus.org/canadiannetmall.com">AboutUs: canadiannetmall.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: canadiannetmall.com

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.canadiannetmall.com
   ns2.canadiannetmall.com

Creation date: 03 Mar 2008 14:53:00
Expiration date: 03 Mar 2010 14:53:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 94.76.196.49“…

% Information related to '94.76.196.48 - 94.76.196.55'

inetnum:        94.76.196.48 - 94.76.196.55
netname:        Poundhost-3253
descr:          Poundhost customer server
remarks: ##############################################################
remarks:        Please report abuse incidents to abuse@poundhost.com.
remarks:        Messages sent to other contact addresses may not be acted upon.
remarks: ##############################################################
country:        GB
admin-c:        BLO2-RIPE
tech-c:         BLO2-RIPE
status:         ASSIGNED PA
mnt-by:         blueconnex-mnt
mnt-routes:     blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20090114

role:           BlueConnex Ltd Operators
address:        BlueConnex Ltd
address:        BlueSquare House
address:        Priors Way
address:        Maidenhead
address:        Berkshire
address:        SL62HP
remarks:        For abuse please contact abuse@blueconnex.net
phone:          +44 (0)1628 673131
admin-c:        PETE3-RIPE
admin-c:        MM5420-RIPE
admin-c:        ROB153-RIPE
tech-c:         MM5420-RIPE
tech-c:         ROB153-RIPE
mnt-by:         blueconnex-mnt
tech-c:         PETE3-RIPE
nic-hdl:        BLO2-RIPE
changed:        support@pcs-net.com 20081012
source:         RIPE
e-mail:         abuse@blueconnex.net

% Information related to '94.76.192.0/18AS29550'

route:          94.76.192.0/18
descr:          Blueconnex Networks Ltd
origin:         AS29550
remarks:        ***********************************
remarks:        *                                 *
remarks:        * Abuse: abuse@blueconnex.net     *
remarks:        *                                 *
remarks:        * Peering: peering@blueconnex.net *
remarks:        *                                 *
remarks:        ***********************************
mnt-by:         blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20080814

DNS records

name class type data time to live
canadiannetmall.com IN MX
preference: 10
exchange: mail.canadiannetmall.com
14400s (04:00:00)
canadiannetmall.com IN TXT v=spf1 a mx ip4:92.48.119.157 ~all 14400s (04:00:00)
canadiannetmall.com IN SOA
server: ns1.canadiannetmall.com
email: root.canadiannetmall.com
serial: 2008122300
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
canadiannetmall.com IN NS ns2.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN NS ns1.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN A 94.76.196.49 14400s (04:00:00)
49.196.76.94.in-addr.arpa IN PTR 94-76-196-49.static.as29550.net 86400s (1.00:00:00)

— end —

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
80.244.229.67 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
6.5.4.3 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to ScamFraudAlert@gmail.com
date Mon, Jun 29, 2009 at 2:16 AM
subject Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA