Elite D Service – elitedservice.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

EliteDService2

Our company is the leader in wholesale produce distribution is seeking a dynamic individual to be responsible for the areas of:
Shipping manager.

You must enjoy working in a fast-paced, hands-on environment and
have strong multi-tasking abilities and interpersonal skills.
This job requires punctuality, good organizational skills and proficiency with Microsoft office programs to maintain inventory and fill in necessary forms.

You will receive packages with electronics from our suppliers and then forward it to our further world wide clients via major shipping
companies: Fedex, DHL, UPS, USPS.
You will generally receive high Tech. Equipment – computer hardware, audio systems, electronics etc.
You will handle all aspects of warehouse activities including shipping, receiving, and inventory.
Experience in freight and custom clearance is key to hire. Top compensation and a rewarding work environment that offers room for growth.
All candidates must be reliable. Previous warehouse experience and experience in a pick/pack environment preferred.
You should effectively communicate with the clients, located in another city while maintaining frequent calls with questions and/or special requests.

To qualify, you MUST:

1. Be at least 18
2. Be able to repeatedly lift 5-20 pound boxes.
3. Check your email several times a day (each hour is welcomed)
4. You need to respond immediately to emails.
5. Be responsible, hard working and communicable.
6. Be able to answer phone calls.

We offer competitive compensation, including base salary, commission, and expense reimbursement
Approximate quantity of packages/letters per week depends ONLY on your skills.

Employment

After you are accepted for employment, you will be assigned to our manager. The manager will inform you by E-mail about the time and nature of the first package.
Our company assumes full responsibility for insurance, customs and tax registration of packages. You will not have to fill out any documents or pay customs duties! For the initial period you will be offered a part-time employment, later depending on your activity results you can turn to the full-time employment.

If you would like to join our team please contact Greg Veach or Shanty Dershem.

Elite Delivery Service
Staffing/Management Group

Address lookup

canonical name elitedservice.com.
aliases
addresses 70.35.16.77

Domain Whois record

Queried whois.internic.net with “dom elitedservice.com“…

   Domain Name: ELITEDSERVICE.COM
   Registrar: NETFIRMS, INC.
   Whois Server: whois.netfirms.com
   Referral URL: http://www.netfirms.com
   Name Server: NS1.NETFIRMS.COM
   Name Server: NS2.NETFIRMS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 10-jul-2009
   Creation Date: 10-jul-2009
   Expiration Date: 10-jul-2010

>>> Last update of whois database: Fri, 24 Jul 2009 12:00:56 UTC <<<

Queried whois.netfirms.com with “elitedservice.com“…

Registrant:
  Reflections Hair Salon
  Lansing, Gary
  1778 sand rd
  Ossian, IA 52161
  US

  Domain name: elitedservice.com

  Administrative Contact:
    Reflections Hair Salon          gylansing0@gmail.com
    Lansing, Gary
    1778 sand rd
    Ossian, IA 52161
    US
    563-532-8936  Fax: 

  Technical Contact:
              support@netfirms.com
    Manager, Domains
    7030 Woodbine Ave. Suite 800
    Markham, ON L3R 6G2
    CA
    +1.4166612100  Fax: +14166610700

  Registrar of Record: Netfirms Inc.
  Record expires on 2010-07-10.
  Record created on 2009-07-10.
  Database last updated on 2009-07-24 06:51:35.

Network Whois record

Queried whois.arin.net with “70.35.16.77“…

OrgName:    Netfirms Inc 
OrgID:      NETFI
Address:    7030 Woodbine Ave.
Address:    Suite 800
City:       Markham
StateProv:  ON
PostalCode: L3R-6G2
Country:    CA

NetRange:   70.35.16.0 - 70.35.31.255 
CIDR:       70.35.16.0/20 
OriginAS:   AS12053
NetName:    NET-NF-00
NetHandle:  NET-70-35-16-0-1
Parent:     NET-70-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.NETFIRMS.COM
NameServer: NS2.NETFIRMS.COM
Comment:    
RegDate:    2009-02-09
Updated:    2009-05-21

RAbuseHandle: ABUSE2258-ARIN
RAbuseName:   Abuse Contact 
RAbusePhone:  +1-416-661-2100
RAbuseEmail:  abuse@netfirms.com 

RNOCHandle: NOC3593-ARIN
RNOCName:   Network Operations Centre 
RNOCPhone:  +1-416-661-2100
RNOCEmail:  noc@netfirms.com 

RTechHandle: HOSTM1367-ARIN
RTechName:   HOSTMASTER 
RTechPhone:  +1-416-661-2100
RTechEmail:  hostmaster@netfirms.com 

OrgAbuseHandle: ABUSE2258-ARIN
OrgAbuseName:   Abuse Contact 
OrgAbusePhone:  +1-416-661-2100
OrgAbuseEmail:  abuse@netfirms.com

OrgNOCHandle: NOC3593-ARIN
OrgNOCName:   Network Operations Centre 
OrgNOCPhone:  +1-416-661-2100
OrgNOCEmail:  noc@netfirms.com

OrgTechHandle: HOSTM1367-ARIN
OrgTechName:   HOSTMASTER 
OrgTechPhone:  +1-416-661-2100
OrgTechEmail:  hostmaster@netfirms.com

# ARIN WHOIS database, last updated 2009-07-23 20:00

DNS records

name class type data time to live
elitedservice.com IN MX
preference: 10
exchange: q0.netfirms.com
900s (00:15:00)
elitedservice.com IN MX
preference: 10
exchange: q1.netfirms.com
900s (00:15:00)
elitedservice.com IN SOA
server: ns1.netfirms.com
email: hostmaster.elitedservice.com
serial: 1248433200
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
2560s (00:42:40)
elitedservice.com IN NS ns1.netfirms.com 1000s (00:16:40)
elitedservice.com IN NS ns2.netfirms.com 1000s (00:16:40)
elitedservice.com IN A 70.35.16.77 900s (00:15:00)
77.16.35.70.in-addr.arpa IN PTR 70.35.16.77-static-host.netfirms.com 3600s (01:00:00)

— end —

Canadian Pharmacy – www.bestliferx.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act


bestlifeRx

pharmrxdirect.com
pharmarxdirect.com
JumpRx.com
bestbillprice.com
globalmeds24.com

877-334-5579

Address lookup

canonical name bestliferx.com.
aliases
addresses 74.213.177.13

Domain Whois record

Queried whois.internic.net with “dom bestliferx.com“…

Domain Name: BESTLIFERX.COM
Registrar: EASYDNS TECHNOLOGIES, INC.
Whois Server: whois.easydns.com
Referral URL: http://www.easydns.com
Name Server: NS1.HUSHTECH.NET
Name Server: NS2.HUSHTECH.NET
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 18-jul-2009
Creation Date: 13-apr-2006
Expiration Date: 13-apr-2012

Last update of whois database: Fri, 24 Jul 2009 11:44:18 UTC

Queried whois.easydns.com with “bestliferx.com“…

Registrant:
BestLifeRx.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU

Domain name: BESTLIFERX.COM

Administrative Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Technical Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Registrar of Record: easyDNS Technologies, Inc.
Record last updated on 18-Jul-2009.
Record expires on 13-Apr-2012.
Record created on 13-Apr-2006.

Domain servers in listed order:
NS2.HUSHTECH.NET
NS1.HUSHTECH.NET

Domain status: clientTransferProhibited
clientUpdateProhibited

This domain is being managed via EASYDNS
The DNS Hosting specialists since 1998
DNS Hosting / Dynamic DNS / Failover DNS / DNS Anycast
Unconditional Guarantee, No tricks, No gimmicks: http://easyDNS.com
System Status Updates: http://easyurl.net/easystatus
( Or Follow us on Twitter http://twitter.com/easydns )

You have 4 lookups left today

Network Whois record

Queried whois.arin.net with “!NET-74-213-176-0-1“…

CustName: Momentum Advanced Solution
Address: 155 Commerce Valley Drive East
City: Thornhill
StateProv: ON
PostalCode: L3T-7T2
Country: CA
RegDate: 2009-01-13
Updated: 2009-01-13

NetRange: 74.213.176.0 – 74.213.177.255
CIDR: 74.213.176.0/23
OriginAS: AS23498
NetName: CDSI-MOMENTUMADVANCEDSOLUTION
NetHandle: NET-74-213-176-0-1
Parent: NET-74-213-160-0-1
NetType: Reassigned
Comment:
RegDate: 2009-01-13
Updated: 2009-01-13

OrgAbuseHandle: ATP1-ARIN
OrgAbuseName: ARIN Tech POC
OrgAbusePhone: +1-416-840-5978
OrgAbuseEmail: arintech@cogecodata.com

OrgNOCHandle: CDSIN-ARIN
OrgNOCName: CDSI NOC
OrgNOCPhone: +1-416-542-2525
OrgNOCEmail: arintech@cogecodata.com

OrgTechHandle: ATP1-ARIN
OrgTechName: ARIN Tech POC
OrgTechPhone: +1-416-840-5978
OrgTechEmail: arintech@cogecodata.com

# ARIN WHOIS database, last updated 2009-07-23 20:00

DNS records

name class type data time to live
bestliferx.com IN MX
preference: 0
exchange: server305.hushtech.net
3600s (01:00:00)
bestliferx.com IN SOA
server: ns1.hushtech.net
email: webadminrx.gmail.com
serial: 2009061907
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
bestliferx.com IN NS ns2.hushtech.net 86400s (1.00:00:00)
bestliferx.com IN NS ns1.hushtech.net 86400s (1.00:00:00)
bestliferx.com IN A 74.213.177.13 3600s (01:00:00)
13.177.213.74.in-addr.arpa IN CNAME 13.0-24.177.213.74.in-addr.arpa 86400s (1.00:00:00)
13.0-24.177.213.74.in-addr.arpa IN PTR 74-213-177-13.ultrahosting.com 3600s (01:00:00)

— end —

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
114.92.205.227 China* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com


Canadian Pharmacy Spam – Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
97.80.187.119 United States (Lawrenceville)* Whois Google DNSStuff Urgentmessage.org
207.115.36.141 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lupe Knox Tue Jul 21 21:49:15 2009
Return-Path:
Authentication-Results: mta101.sbc.mail.mud.yahoo.com from=abnet.ca; domainkeys=neutral (no sig); from=abnet.ca; dkim=neutral (no sig)
Received: from 97.80.187.119 (EHLO nlpi127.prodigy.net) (207.115.36.141)
by mta101.sbc.mail.mud.yahoo.com with SMTP; Tue, 21 Jul 2009 21:52:53 -0700
Received: from p63upe2 (static.unknown.charter.com [97.80.187.119] (may be forged))
by nlpi127.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M4qSn7030845;
Tue, 21 Jul 2009 23:52:51 -0500
Message-ID: <000701ca0a87$c3c94250$d828ea62@abnet.ca>
Reply-To: “Lupe Knox”  lupe_knoxic @abnet.ca
From: “Lupe Knox”   lupe_knoxic @abnet.ca
To: ,
Subject: Much bigger, than you used to have it!
Date: Tue, 21 Jul 2009 23:49:15 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.cameegg.com
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.sawplump.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.watchnorth.com
ns1.yardaware.com
ns2.112911.org
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.beautybounce.com
ns2.beforebegin.com
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.coateach.com
ns2.cutfigure.com
ns2.deluxecrop.com
ns2.directlisten.com
ns2.doctorstill.com
ns2.dounder.com
ns2.eitherbounce.com
ns2.famousloyal.com
ns2.flattry.com
ns2.flypair.com
ns2.grewcall.com
ns2.growfour.com
ns2.growten.com
ns2.hadagree.ru
ns2.letterwant.com
ns2.listwere.com
ns2.mainhumble.com
ns2.med22.org
ns2.med95.net
ns2.pridebought.com
ns2.primehurry.com
ns2.re25.org
ns2.regionearly.com
ns2.roomrow.com
ns2.sawplump.com
ns2.seedequate.com
ns2.skinglad.com
ns2.streetgreat.com
ns2.te26.com
ns2.thosekept.com
ns2.towardlegend.in
ns2.tubeold.com
ns2.typetruck.com
ns2.via99.org
ns2.watchnorth.com
ns2.yearbusy.com

Canadian Pharmacy Spam – flowersuffix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.168.189.23 United States (Columbus)* Whois Google DNSStuff Urgentmessage.org
207.115.36.163 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Stewart Thurman Tue Jul 21 19:18:13 2009
Return-Path:
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ebay.ca; domainkeys=neutral (no sig); from=ebay.ca; dkim=neutral (no sig)
Received: from 66.168.189.23 (EHLO nlpi149.prodigy.net) (207.115.36.163)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Tue, 21 Jul 2009 19:21:50 -0700
Received: from wuhlju2 (static.unknown.charter.com [66.168.189.23] (may be forged))
by nlpi149.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M2LIQ2019630;
Tue, 21 Jul 2009 21:21:45 -0500
Message-ID: <000701ca0a72$aa470110$d828ea62@ebay.ca>
Reply-To: “Stewart Thurman” <stewartthurman_rl@ebay.ca>
From: “Stewart Thurman”  <stewartthurman_rl@ebay.ca>
To: , ,
Subject: Do you want it to be longer and stronger in bed?
Date: Tue, 21 Jul 2009 21:18:13 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom flowersuffix.com“…

   Domain Name: FLOWERSUFFIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 12:08:38 UTC <<<

Queried whois.namerich.cn with “flowersuffix.com“…

 DomainName : flowersuffix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
flowersuffix.com IN A 218.75.144.6 10800s (03:00:00)
flowersuffix.com IN A 60.191.239.150 10800s (03:00:00)
flowersuffix.com IN A 203.93.208.86 10800s (03:00:00)

— end —

SmartFilter Category: Malicious Sites, Spam URLs
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.moralgrand.com
ns1.noticezap.com
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.poundanger.com
ns1.putanger.com
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.saidcold.com
ns1.sawplump.com
ns1.sendbusy.com
ns1.sidebeauty.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.thosekept.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.via99.org
ns1.watchnorth.com
ns1.wooddoes.in
ns1.yardaware.com
ns1.yearbusy.com
ns2.112911.org
ns2.282715.com
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.andfell.com
ns2.aromafish.com
ns2.beautybounce.com
ns2.bedplain.com
ns2.bedsing.com
ns2.beforebegin.com
ns2.bitsshape.com
ns2.bluesign.in
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.breezyget.com
ns2.bu15.net
ns2.chartflat.in
ns2.clockbright.com
ns2.clothetrack.com
ns2.coateach.com
ns2.coatfather.com
ns2.cu28.com
ns2.cutfigure.com
ns2.cutheart.com
ns2.deluxecrop.com
ns2.desiresweet.com
ns2.directlisten.com
ns2.doctorstill.com

Canadian Pharmacy Spam – andmelody.com.

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible Canadian`Pharmacy is available at your_Fingertips!
No_Doctor_Needed! Browse our Site Today! -> http://andmelody.com

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

canonical name andmelody.com.
aliases
addresses 60.191.239.150
203.93.208.86
218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom andmelody.com“…

   Domain Name: ANDMELODY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 01:31:53 UTC

Queried whois.namerich.cn with “andmelody.com“…

 DomainName : andmelody.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
andmelody.com IN A 60.191.239.150 10800s (03:00:00)
andmelody.com IN A 203.93.208.86 10800s (03:00:00)
andmelody.com IN A 218.75.144.6 10800s (03:00:00)

— end —


Canadian Pharmacy Spam – www.flowersuffix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name flowersuffix.com.
aliases
addresses 60.191.239.150
203.93.208.86
218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom flowersuffix.com“…

   Domain Name: FLOWERSUFFIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SPEAKSMELL.COM
   Name Server: NS2.SPEAKSMELL.COM
   Name Server: NS3.STANDBRIEF.COM
   Name Server: NS4.STANDBRIEF.COM
   Name Server: NS5.B9T.RU
   Name Server: NS6.B9T.RU
   Status: ok
   Updated Date: 20-jul-2009
   Creation Date: 20-jul-2009
   Expiration Date: 20-jul-2010

Last update of whois database: Wed, 22 Jul 2009 01:30:06 UTC

Queried whois.namerich.cn with “flowersuffix.com“…

 DomainName : flowersuffix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.SPEAKSMELL.COM
Name Server......................NS6.B9T.RU
Name Server......................NS3.STANDBRIEF.COM
Name Server......................NS2.SPEAKSMELL.COM
Name Server......................NS5.B9T.RU
Name Server......................NS4.STANDBRIEF.COM
Status...........................ok
Creation  Date ..................2009-07-20
Expiration Date .................2010-07-20
Last Update  Date ...............2009-07-20

Registrant ID ...................V-X-59716-16698
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............HUANMEILU82
Registrant City..................CZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.059176147512
Registrant Fax ..................+86.059176147512
Registrant Email ................afwhndsg@126.com

Administrative ID ...............V-X-59716-16698
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........HUANMEILU82
Administrative City..............CZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.059176147512
Administrative Fax ..............+86.059176147512
Administrative Email ............afwhndsg@126.com

Billing ID ......................V-X-59716-16698
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................HUANMEILU82
Billing City.....................CZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.059176147512
Billing Fax .....................+86.059176147512
Billing Email ...................afwhndsg@126.com

Technical ID ....................V-X-59716-16698
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............HUANMEILU82
Technical City...................CZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.059176147512
Technical Fax ...................+86.059176147512
Technical Email .................afwhndsg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
flowersuffix.com IN A 60.191.239.150 10800s (03:00:00)
flowersuffix.com IN A 203.93.208.86 10800s (03:00:00)
flowersuffix.com IN A 218.75.144.6 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
217.150.55.94 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
207.115.36.108 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George”  <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Canadian Pharmacy Spam – http://cheaprx02.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
78.251.40.213 France* Whois Google DNSStuff Urgentmessage.org
207.115.20.133 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Clarence Overton Sat Jul 18 05:37:31 2009
Return-Path:
Authentication-Results: mta131.sbc.mail.re2.yahoo.com from=addenbrookes.nhs.uk; domainkeys=neutral (no sig); from=addenbrookes.nhs.uk; dkim=neutral (no sig)
Received: from 78.251.40.213 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta131.sbc.mail.re2.yahoo.com with SMTP; Sat, 18 Jul 2009 06:41:41 -0700
Received: from x5lwy53 ([78.251.40.213])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6IDfOH8020044;
Sat, 18 Jul 2009 06:41:39 -0700
Message-ID: <000701ca07a4$84a00130$627e2c7a@addenbrookes.nhs.uk>
Reply-To: “Clarence Overton”  clarenceovertonqc@addenbrookes.nhs.uk
From: “Clarence Overton”  <clarenceovertonqc@addenbrookes.nhs.uk>
To: ScamBuster aka ScamFraudAlert.com
Subject: great deals goin on
Date: Sat, 18 Jul 2009 08:37:31 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

lookup failed cheaprx02.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom cheaprx02.com“…

   Domain Name: CHEAPRX02.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FE5NS.COM
   Name Server: SP536.DELETEDNS.COM
   Status: clientHold
   Status: clientTransferProhibited
   Updated Date: 19-jul-2009
   Creation Date: 27-jun-2009
   Expiration Date: 27-jun-2010

Last update of whois database: Mon, 20 Jul 2009 05:34:57 UTC

Queried whois.onlinenic.com with “cheaprx02.com“…

Registrant:
	 Serpino Berbeto ad6@safe-mail.net +1.2128848801
	 Serpino Berbeto
	 403 po box
	 New York,NY,US 10037

Domain Name:cheaprx02.com
Record last updated at 2009-07-16 19:25:01
Record created on 2009/6/27
Record expired on 2010/6/27

Domain servers in listed order:
	 ns1.fe5ns.com 	 ns2.re3ns.com 

Administrator:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Technical Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Billing Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
cheaprx02.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprx02.com IN A 220.248.172.39 86400s (1.00:00:00)
cheaprx02.com IN NS ns1.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns2.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns3.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns4.cheaprx02.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: ns1.99999ns.com
ns1.thebestusrx.com
ns1.thebestusrxnow.com
ns1.usacheapmeds.com
ns2.hotrxlive.com
ns2.thebestusrx.com
ns4.tertorests.com
acounterstas.com
afropeloses.com
awepolikars.com
dertorests.com
tertorests.com
yertorests.com
sertorests.com
sategonovas.com
aredouters.com
aertorests.com
pertorests.com
uertorests.com
fertorests.com
iertorests.com
oertorests.com
gemenysofts.com
friokeares.com
wallouters.com
qertorests.com
softenouss.com
rertorests.com
bartolosofts.com
verobounss.com
adremacolares.com
grefoulsofs.com
wertorests.com
hropokons.com
jimenesouns.com
grestosofts.com

Canadian Pharmacy Spam Domains

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Domains on Nameserver ns2.growfour.com

Entries 1 – 26 of 26

Canadian Pharmacy – popular-ed-products.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.


   Domain Name: POPULAR-ED-PRODUCTS.COM
   Registrar: KEY-SYSTEMS GMBH
   Whois Server: whois.rrpproxy.net
   Referral URL: http://www.key-systems.net
   Name Server: NS1.STIMUL-MEDIA.COM
   Name Server: NS2.STIMUL-MEDIA.COM
   Status: clientTransferProhibited
   Updated Date: 13-apr-2009
   Creation Date: 02-sep-2008
   Expiration Date: 02-sep-2011

>>> Last update of whois database: Fri, 17 Jul 2009 14:11:38 UTC <<<

Queried whois.rrpproxy.net with “popular-ed-products.com“…

DOMAIN: POPULAR-ED-PRODUCTS.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-VLP199
owner-organization: STIMUL-MEDIA.COM
owner-fname: Vitaly
owner-lname: Petrov
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: vitalypetrov76@yahoo.com

admin-contact: P-VLP199
admin-organization: STIMUL-MEDIA.COM
admin-fname: Vitaly
admin-lname: Petrov
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: vitalypetrov76@yahoo.com

tech-contact: P-VLP199
tech-organization: STIMUL-MEDIA.COM
tech-fname: Vitaly
tech-lname: Petrov
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: vitalypetrov76@yahoo.com

billing-contact: P-VLP199
billing-organization: STIMUL-MEDIA.COM
billing-fname: Vitaly
billing-lname: Petrov
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: vitalypetrov76@yahoo.com

nameserver: ns1.stimul-media.com
nameserver: ns2.stimul-media.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.165“…

% Information related to '88.85.64.0 - 88.85.71.255'

inetnum:        88.85.64.0 - 88.85.71.255
netname:        WEBAZILLA
descr:          WebaZilla
country:        NL
admin-c:        WZNL1-RIPE
tech-c:         WZNL1-RIPE
status:         ASSIGNED PA
mnt-by:         WZNET-MNT
mnt-routes:     WZNET-MNT
changed:        bk@webazilla.com 20070209
source:         RIPE

role:           WebaZilla RIPE Manager
address:        WebaZilla B.V.
address:        Postbus 19115
address:        3501DC Utrecht
address:        Netherlands
phone:          +31612253464
fax-no:         +31303100299
e-mail:         noc@webazilla.com
mnt-by:         WZNET-MNT
admin-c:        BK5536-RIPE
tech-c:         BK5536-RIPE
tech-c:         KV1670-RIPE
nic-hdl:        WZNL1-RIPE
changed:        bk@webazilla.com 20070718
source:         RIPE

% Information related to '88.85.64.0/19AS35415'

route:          88.85.64.0/19
descr:          WEBAZILLA
origin:         AS35415
mnt-by:         WZNET-MNT
changed:        bk@webazilla.com 20060728
source:         RIPE

DNS records

DNS query for 165.65.85.88.in-addr.arpa returned an error from the server: NameError

name class type data time to live
popular-ed-products.com IN SOA
server: ns1.stimul-media.com
email: root.stimul-media.com
serial: 2008102903
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 38400
38400s (10:40:00)
popular-ed-products.com IN NS ns2.stimul-media.com 38400s (10:40:00)
popular-ed-products.com IN NS ns1.stimul-media.com 38400s (10:40:00)
popular-ed-products.com IN A 88.85.65.165 38400s (10:40:00)

— end —

Canadian Pharmacy Spam – tirethem.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
131.114.69.63 Italy (Serra)* Whois Google DNSStuff Urgentmessage.org
207.115.20.186 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Douglas Andrews Thu Jul 16 15:16:43 2009
Return-Path:
Authentication-Results: mta118.sbc.mail.mud.yahoo.com from=yeoy.fi; domainkeys=neutral (no sig); from=yeoy.fi; dkim=neutral (no sig)
Received: from 131.114.69.63 (EHLO flpi184.prodigy.net) (207.115.20.186)
by mta118.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 15:18:09 -0700
Received: from zelgti4 (verita.vet.unipi.it [131.114.69.63] (may be forged))
by flpi184.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GMGhA2014995;
Thu, 16 Jul 2009 15:18:06 -0700

Message-ID: <000701ca0663$19d4dcf0$627e2c0a@yeoy.fi>
Reply-To: “Douglas Andrews”   <douglas.andrewsip@yeoy.fi>
From: “Douglas Andrews”   <douglas.andrewsip@yeoy.fi>
To: ,
Subject: Have No Problem in BeD, RxMeds online!
Date: Thu, 16 Jul 2009 15:16:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 136

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://tirethem.com

_________________________________________________________________________

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
97.93.204.30 United States (Granbury)* Whois Google DNSStuff Urgentmessage.org
207.115.36.96 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Humberto Wade Thu Jul 16 12:23:14 2009
Return-Path:
Authentication-Results: mta167.sbc.mail.mud.yahoo.com from=cw-chamber.co.uk; domainkeys=neutral (no sig); from=cw-chamber.co.uk; dkim=neutral (no sig)
Received: from 97.93.204.30 (EHLO nlpi080.prodigy.net) (207.115.36.96)
by mta167.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 12:21:16 -0700
Received: from vyg3oj2 (static.unknown.charter.com
[97.93.204.30] (may be forged))
by nlpi080.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GJKlgD004846;
Thu, 16 Jul 2009 14:21:10 -0500
Message-ID: <000701ca064a$dd1d9350$431333e2@cw-chamber.co.uk>
Reply-To: “Humberto Wade” <hwade_ms@cw-chamber.co.uk>
From: “Humberto Wade”
To: , ,
Subject: great web offer
Date: Thu, 16 Jul 2009 14:23:14 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 137

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com

____________________________________________________________-

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
65.126.184.100 United States (Telluride)* Whois Google DNSStuff Urgentmessage.org
207.115.36.161 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lucille J. Stringer Thu Jul 16 10:02:34 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=crs-ltd.co.uk; domainkeys=neutral (no sig); from=crs-ltd.co.uk; dkim=neutral (no sig)
Received: from 65.126.184.100 (EHLO nlpi147.prodigy.net) (207.115.36.161)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Thu, 16 Jul 2009 10:05:49 -0700
Received: from 1blry72 ([65.126.184.100])
by nlpi147.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GH54dn028723;
Thu, 16 Jul 2009 12:05:42 -0500

Message-ID: <000701ca0637$36f56420$d828ea62@crs-ltd.co.uk>
Reply-To: “Lucille J. Stringer”   <lucille_stringer_es@crs-ltd.co.uk>
From: “Lucille J. Stringer”   <lucille_stringer_es@crs-ltd.co.uk>
To: , ,
Subject: Feeling unneeded in bedroom? We can change that..
Date: Thu, 16 Jul 2009 12:02:34 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 137

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com

________________________________________________

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.133 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
140.117.64.102 Taiwan (Kaohsiung)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Ashley J. Novak Thu Jul 16 02:30:44 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=londonthing.co.uk; domainkeys=neutral (no sig); from=londonthing.co.uk; dkim=neutral (no sig)
Received: from 207.115.20.133 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 05:32:34 -0700
Received: from yj6l901 ([140.117.64.102])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GCWUvG019198;
Thu, 16 Jul 2009 05:32:32 -0700
Message-ID: <000701ca05f8$181184b0$627e2b9a@londonthing.co.uk>
Reply-To: “Ashley J. Novak”  <ashleyjnovaksv@londonthing.co.uk>
From: “Ashley J. Novak”
To: ,
Subject: Make her climax multiple times
Date: Thu, 16 Jul 2009 05:30:44 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 136

Content-Length: 136

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://tirethem.com

Address lookup

canonical name tirethem.com.
aliases
addresses 60.191.239.150
203.93.208.86
218.75.144.6

Domain Whois record

Queried whois.internic.net with “dom tirethem.com“…

   Domain Name: TIRETHEM.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

Last update of whois database: Fri, 17 Jul 2009 04:46:46 UTC <<<

Queried whois.namerich.cn with “tirethem.com“…

 DomainName : tirethem.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.239.150“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
tirethem.com IN A 203.93.208.86 10800s (03:00:00)
tirethem.com IN A 218.75.144.6 10800s (03:00:00)
tirethem.com IN A 60.191.239.150 10800s (03:00:00)

— end —


Canadian Pharmacy Spam – liveevery.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://cornerdeep.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://widevaried.com

tiny dimension is your hidden shame, no need to worry, we ll help you! http://mialo.bgacipiq.cn/

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sexytangy.com

Address lookup

canonical name liveevery.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom liveevery.com“…

   Domain Name: LIVEEVERY.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:03:17 UTC <<<

Queried whois.namerich.cn with “liveevery.com“…

 DomainName : liveevery.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
liveevery.com IN A 203.93.208.86 10800s (03:00:00)
liveevery.com IN A 218.75.144.6 10800s (03:00:00)
liveevery.com IN A 60.191.239.150 10800s (03:00:00)

— end —

Address lookup

canonical name cornerdeep.com.
aliases
addresses 218.75.144.6
60.191.239.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom cornerdeep.com“…

   Domain Name: CORNERDEEP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GROWFOUR.COM
   Name Server: NS2.GROWFOUR.COM
   Name Server: NS3.COUNTFROM.RU
   Name Server: NS4.COUNTFROM.RU
   Name Server: NS5.SIXTHE.COM
   Name Server: NS6.SIXTHE.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 14-jul-2009
   Expiration Date: 14-jul-2010

>>> Last update of whois database: Thu, 16 Jul 2009 08:04:19 UTC <<<

Queried whois.namerich.cn with “cornerdeep.com“…

 DomainName : cornerdeep.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation  Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update  Date ...............2009-07-14

Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com

Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com

Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com

Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cornerdeep.com IN A 218.75.144.6 10800s (03:00:00)
cornerdeep.com IN A 60.191.239.150 10800s (03:00:00)
cornerdeep.com IN A 203.93.208.86 10800s (03:00:00)

— end —

cornerdeep.com


Canadian Pharmacy – circleso.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://circleso.com

Address lookup

canonical name circleso.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom circleso.com“…

   Domain Name: CIRCLESO.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BITSSHAPE.COM
   Name Server: NS2.BITSSHAPE.COM
   Name Server: NS3.MOTHERWIT.RU
   Name Server: NS4.MOTHERWIT.RU
   Name Server: NS5.YOURHELD.COM
   Name Server: NS6.YOURHELD.COM
   Status: ok
   Updated Date: 08-jul-2009
   Creation Date: 08-jul-2009
   Expiration Date: 08-jul-2010

Last update of whois database: Sun, 12 Jul 2009 18:35:23 UTC <<<

Queried whois.namerich.cn with “circleso.com“…

 DomainName : circleso.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.BITSSHAPE.COM
Name Server......................NS5.YOURHELD.COM
Name Server......................NS4.MOTHERWIT.RU
Name Server......................NS3.MOTHERWIT.RU
Name Server......................NS6.YOURHELD.COM
Name Server......................NS1.BITSSHAPE.COM
Status...........................ok
Creation  Date ..................2009-07-08
Expiration Date .................2010-07-08
Last Update  Date ...............2009-07-08

Registrant ID ...................V-X-59013-15146
Registrant Name .................GAO HAIFENG
Registrant Organization .........GAO HAIFENG
Registrant Address ..............XINGUANGNANLU61
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........310019
Registrant Phone Number .........+86.057182421519
Registrant Fax ..................+86.057182421519
Registrant Email ................diaineg@126.com

Administrative ID ...............V-X-59013-15146
Administrative Name .............GAO HAIFENG
Administrative Organization .....GAO HAIFENG
Administrative Address ..........XINGUANGNANLU61
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......310019
Administrative Phone Number .....+86.057182421519
Administrative Fax ..............+86.057182421519
Administrative Email ............diaineg@126.com

Billing ID ......................V-X-59013-15146
Billing Name ....................GAO HAIFENG
Billing Organization ............GAO HAIFENG
Billing Address .................XINGUANGNANLU61
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............310019
Billing Phone Number ............+86.057182421519
Billing Fax .....................+86.057182421519
Billing Email ...................diaineg@126.com

Technical ID ....................V-X-59013-15146
Technical Name ..................GAO HAIFENG
Technical Organization...........GAO HAIFENG
Technical Address ...............XINGUANGNANLU61
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........310019
Technical Phone Number ..........+86.057182421519
Technical Fax ...................+86.057182421519
Technical Email .................diaineg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
circleso.com IN A 218.75.144.6 10800s (03:00:00)
circleso.com IN A 60.191.239.150 10800s (03:00:00)
circleso.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Best-Meds.com – Discounted Canadian Prescription Medications

Qualitynet Or BestMeds.com Rip-off will cash check but does not send order or answer follow-up E-Mails. BEWARE Internet

Qualitynet
Bestmeds.com
Internet,
U.S.A.

Order from this company on-line, gave check information and they cashed check but no order ha arrived or been sent. I have floowed up with 3 E-Mils with no reponse what so ever. But they were quick to cash my check for order.
So, Please be aware and do not fall for their false advertising. wish i had checked them here first, would have saved me some money.
Thanks

Roberta
Boynton Beach, Florida
U.S.A.

Canadian Pharmacy – drivespring.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
75.136.9.179 United States (Dalton)* Whois Google DNSStuff Urgentmessage.org
207.115.36.164 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Fidel Gibson Fri Jul 3 15:37:35 2009
Return-Path: <f_gibson_je@hopwood.ac.uk>
Authentication-Results: mta101.sbc.mail.re3.yahoo.com from=hopwood.ac.uk; domainkeys=neutral (no sig); from=hopwood.ac.uk; dkim=neutral (no sig)
Received: from 75.136.9.179 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta101.sbc.mail.re3.yahoo.com with SMTP; Fri, 03 Jul 2009 15:39:54 -0700
Received: from xfjwjy2 (static.unknown.charter.com [75.136.9.179] (may be forged))
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n63MddZF013409;
Fri, 3 Jul 2009 17:39:53 -0500
Message-ID: <000701c9fc2e$dc8f16f0$d828ea62@hopwood.ac.uk>
Reply-To: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
From: “Fidel Gibson” <f_gibson_je@hopwood.ac.uk>
To:
Subject: Spice up your performance in bed
Date: Fri, 03 Jul 2009 17:37:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://drivespring.com

Address lookup

canonical name drivespring.com.
aliases
addresses 218.75.144.6
60.191.239.150
124.42.91.162
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom drivespring.com“…

   Domain Name: DRIVESPRING.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CHARTFLAT.IN
   Name Server: NS2.CHARTFLAT.IN
   Name Server: NS3.SELLCALL.RU
   Name Server: NS4.SELLCALL.RU
   Name Server: NS5.CIRCLEFRUIT.COM
   Name Server: NS6.CIRCLEFRUIT.COM
   Status: ok
   Updated Date: 29-jun-2009
   Creation Date: 29-jun-2009
   Expiration Date: 29-jun-2010

Last update of whois database: Fri, 10 Jul 2009 06:07:35 UTC <<<

Queried whois.namerich.cn with “drivespring.com“…

 DomainName : drivespring.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.CIRCLEFRUIT.COM
Name Server......................NS2.CHARTFLAT.IN
Name Server......................NS3.SELLCALL.RU
Name Server......................NS1.CHARTFLAT.IN
Name Server......................NS4.SELLCALL.RU
Name Server......................NS6.CIRCLEFRUIT.COM
Status...........................ok
Creation  Date ..................2009-06-29
Expiration Date .................2010-06-29
Last Update  Date ...............2009-06-29

Registrant ID ...................V-X-58378-14021
Registrant Name .................WANG JIE
Registrant Organization .........WANG JIE
Registrant Address ..............ZHONGYANGDADAO51
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313009
Registrant Phone Number .........+86.057258421551
Registrant Fax ..................+86.057258421551
Registrant Email ................ojanengzx@126.com

Administrative ID ...............V-X-58378-14021
Administrative Name .............WANG JIE
Administrative Organization .....WANG JIE
Administrative Address ..........ZHONGYANGDADAO51
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313009
Administrative Phone Number .....+86.057258421551
Administrative Fax ..............+86.057258421551
Administrative Email ............ojanengzx@126.com

Billing ID ......................V-X-58378-14021
Billing Name ....................WANG JIE
Billing Organization ............WANG JIE
Billing Address .................ZHONGYANGDADAO51
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313009
Billing Phone Number ............+86.057258421551
Billing Fax .....................+86.057258421551
Billing Email ...................ojanengzx@126.com

Technical ID ....................V-X-58378-14021
Technical Name ..................WANG JIE
Technical Organization...........WANG JIE
Technical Address ...............ZHONGYANGDADAO51
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313009
Technical Phone Number ..........+86.057258421551
Technical Fax ...................+86.057258421551
Technical Email .................ojanengzx@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
drivespring.com IN A 218.75.144.6 10800s (03:00:00)
drivespring.com IN A 124.42.91.162 10800s (03:00:00)
drivespring.com IN A 60.191.239.150 10800s (03:00:00)
drivespring.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Canadian Pharmacy – pridegive.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

An Incredible Canadian Pharmacy is available at your Fingertips!
NoDoctor Needed! Browse our Site Today! -> http://pridegive.com

Address lookup

canonical name pridegive.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150
124.42.91.162

Domain Whois record

Queried whois.internic.net with “dom pridegive.com“…

   Domain Name: PRIDEGIVE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.MIGHTPAGE.COM
   Name Server: NS2.MIGHTPAGE.COM
   Name Server: NS3.LETJEWEL.RU
   Name Server: NS4.LETJEWEL.RU
   Name Server: NS5.LISTGENTLE.COM
   Name Server: NS6.LISTGENTLE.COM
   Status: ok
   Updated Date: 04-jul-2009
   Creation Date: 04-jul-2009
   Expiration Date: 04-jul-2010

Last update of whois database: Fri, 10 Jul 2009 06:03:45 UTC <<<

Queried whois.namerich.cn with “pridegive.com“…

 DomainName : pridegive.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LETJEWEL.RU
Name Server......................NS3.LETJEWEL.RU
Name Server......................NS1.MIGHTPAGE.COM
Name Server......................NS2.MIGHTPAGE.COM
Name Server......................NS5.LISTGENTLE.COM
Name Server......................NS6.LISTGENTLE.COM
Status...........................ok
Creation  Date ..................2009-07-04
Expiration Date .................2010-07-04
Last Update  Date ...............2009-07-04

Registrant ID ...................V-X-58730-14742
Registrant Name .................QIAO GUANGLIANG
Registrant Organization .........QIAO GUANGLIANG
Registrant Address ..............HUANZHUGUANGCHANG31
Registrant City..................CD
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........415063
Registrant Phone Number .........+86.073657561248
Registrant Fax ..................+86.073657561248
Registrant Email ................opjakeg@163.com

Administrative ID ...............V-X-58730-14742
Administrative Name .............QIAO GUANGLIANG
Administrative Organization .....QIAO GUANGLIANG
Administrative Address ..........HUANZHUGUANGCHANG31
Administrative City..............CD
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......415063
Administrative Phone Number .....+86.073657561248
Administrative Fax ..............+86.073657561248
Administrative Email ............opjakeg@163.com

Billing ID ......................V-X-58730-14742
Billing Name ....................QIAO GUANGLIANG
Billing Organization ............QIAO GUANGLIANG
Billing Address .................HUANZHUGUANGCHANG31
Billing City.....................CD
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............415063
Billing Phone Number ............+86.073657561248
Billing Fax .....................+86.073657561248
Billing Email ...................opjakeg@163.com

Technical ID ....................V-X-58730-14742
Technical Name ..................QIAO GUANGLIANG
Technical Organization...........QIAO GUANGLIANG
Technical Address ...............HUANZHUGUANGCHANG31
Technical City...................CD
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........415063
Technical Phone Number ..........+86.073657561248
Technical Fax ...................+86.073657561248
Technical Email .................opjakeg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
pridegive.com IN A 60.191.239.150 10800s (03:00:00)
pridegive.com IN A 203.93.208.86 10800s (03:00:00)
pridegive.com IN A 218.75.144.6 10800s (03:00:00)
pridegive.com IN A 124.42.91.162 10800s (03:00:00)

— end —


Scam – WhoIs Gooodrugs.com – www.FDApharmacy.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Other sites listed

  1. http://www.nextdaytramadol.com
  2. http://www.totaltrustmeds.com
  3. http://www.online-pharmacy-directory.com
  4. medsite-24.com
  5. Buy-Tramadol-Online.com
  6. pharmacymed.net
  7. http://www.overnightmd.com
  8. http://www.nextdaytramadol.com
  9. us-canada-medications.com
  10. http://www.iOrderPills.com
  11. http://www.usa-pharm.com
  12. us-canadian-pharmacy.net
  13. chepest-medications.com
  14. pharmacymed.net
  15. chepest-medications.com
  16. http://www.usa-pharm.com
  17. top10pharms.com
  18. http://www.iOrderPills.com
  19. www.FDApharmacy.com
  20. trustpharmacy.com
  21. totaltrustmeds.com
  22. us-canada-medications.com
  23. http://www.nextdaytramadol.com

Address lookup

canonical name gooodrugs.com.
aliases
addresses 216.240.130.172

Domain Whois record

Queried whois.internic.net with “dom gooodrugs.com“…

Domain Name: GOOODRUGS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.GOOODRUGS.COM
Name Server: NS2.GOOODRUGS.COM
Status: clientTransferProhibited
Updated Date: 19-jun-2009
Creation Date: 19-jun-2009
Expiration Date: 19-jun-2010

>>> Last update of whois database: Mon, 06 Jul 2009 13:15:04 UTC

Queried whois.enom.com with “gooodrugs.com“…

Visit AboutUs.org for more information about gooodrugs.com
href=”http://www.aboutus.org/gooodrugs.com”>AboutUs: gooodrugs.com</a>

Registration Service Provided By: –
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: gooodrugs.com

Registrant Contact:
Nexton Limited
Whois Agent

Fax:
Irpinskaya 69
Kiev, 03142
UA

Administrative Contact:
Nexton Limited
Whois Agent support@ruler-domains.com
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA

Technical Contact:
Nexton Limited
Whois Agent support@ruler-domains.com
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA

Status: Locked

Name Servers:
ns1.gooodrugs.com
ns2.gooodrugs.com

Creation date: 19 Jun 2009 10:16:07
Expiration date: 19 Jun 2010 10:16:07

Get Noticed on the Internet! Increase visibility for this domain name by listing it at http://www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “216.240.130.172“…

OrgName: ATMLINK, INC.
OrgID: ATMLIN
Address: 600 W. 7th Street
Address: Suite 360
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US

NetRange: 216.240.128.0 – 216.240.159.255
CIDR: 216.240.128.0/19
NetName: C-COMMUNICATIONS
NetHandle: NET-216-240-128-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.CALPOP.COM
NameServer: NS2.CALPOP.COM
Comment:
RegDate: 1999-09-22
Updated: 2006-03-30

OrgAbuseHandle: NOC1610-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-213-627-1937
OrgAbuseEmail: noc@atmlinkinc.com

OrgNOCHandle: KJO26-ARIN
OrgNOCName: Joostens, Ken
OrgNOCPhone: +1-213-627-1937
OrgNOCEmail: ken@calpop.com

OrgTechHandle: NOC1610-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-213-627-1937
OrgTechEmail: noc@atmlinkinc.com

# ARIN WHOIS database, last updated 2009-07-05 20:00

DNS records

DNS query for 172.130.240.216.in-addr.arpa returned an error from the server: NameError

name class type data time to live
gooodrugs.com IN MX
preference: 10
exchange: gooodrugs.com
30s (00:00:30)
gooodrugs.com IN SOA
server: ns1.gooodrugs.com
email: hostmaster.ns1.gooodrugs.com
serial: 710161
refresh: 60
retry: 30
expire: 604800
minimum ttl: 30
30s (00:00:30)
gooodrugs.com IN NS ns2.gooodrugs.com 30s (00:00:30)
gooodrugs.com IN NS ns1.gooodrugs.com 30s (00:00:30)
gooodrugs.com IN A 216.240.130.172 30s (00:00:30)

— end —

Canadian Pharmacy – ottawadrugs.com

Canadian Pharmacy A conartist and a fraud Jogeshwari West Mumaia – 400 060 India

Canadian Pharmacy
http://ottawadrugs.com/
Nationwide,
U.S.A.

I ordered 30 Viagra 100 mg tablets, plus 4 free ones that you advertised on the internet and I just received 34 sildenafil100 mg tablets from you. Viagra is a brand name product made by Pfizer, Inc. and the sildenafil is a generic product that can be made by any company without the controls of the FDA. There is no mention about Viagra anywhere on the package or the pill itself. The package was sent from Indiaand was wrapped in an India newspaper!

The pharmaceutical agency you mentioned in your advertisement Licensed by The College of Pharmacist of British Columbia is a fraudulent location. No individual can contact them by writing to the college at 200-1765 West 8th Ave. Vancouver, BCCanada V6J 5C6 or contact them at +1 (210) 888-9089. You also state that please, keep your order I.D. every time you make a call, and that statement is which just another misrepresentation!

You stated in order confirmation:

Attention, Please!
Any charge-backs to credit cards without communicating with us first are treated as Fraudulent. All details, including original order form, username, IP addresses and access logs bearing members IP addresses and/or e-mail addresses and username will be forwarded to the issuing Credit Card Company (Fraud Division), F.B.I. (Credit Card Fraud Division) and all Credit Reference Agencies which will probably result in a query into members credit card payment habits. Credit Card Fraud is a serious crime and will not be tolerated. YES indeed, YOUR FRAUD is a crime.

There is NOT a country in the world that would license you and/or your company as pharmacy, especially in Canada and/or the United States. Please tell me where to send you back this package for a full credit on my charge card. This is my third request!

You are fraudulently misrepresenting a company and the products. I am going to challenge this charge with American Express and tell them of the internet fraud you are perpetrating. PLEASE CALL the F.B.I. and American Express to let them know about your scam. Hopefully American Express will terminate your contract and the F.B.I. will prosecute you.

Gary
Westbrook, Connecticut
U.S.A.

Canadian Pharmacy Spam – bluepillusa.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

BluePillusa

Address lookup

canonical name bluepillusa.com.
aliases
addresses 78.159.118.218

Domain Whois record

Queried whois.internic.net with “dom bluepillusa.com“…

   Domain Name: BLUEPILLUSA.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS3.01ISP.COM
   Name Server: NS4.01ISP.NET
   Status: clientTransferProhibited
   Updated Date: 21-oct-2008
   Creation Date: 21-oct-2008
   Expiration Date: 21-oct-2009

>>> Last update of whois database: Mon, 06 Jul 2009 03:04:10 UTC <<<

Queried whois.todaynic.com with “bluepillusa.com“…

Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: bluepillusa.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Alexey M. Arkhipov
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Administrative Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500
Phone: +7.9611327925
Fax: +7.9611327925
Email: arkipal@gmail.com

Technical Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Nameserver Information:
    ns3.01isp.com
    ns4.01isp.net

Create: 2008-10-22 00:20:06
Update: 2008-10-22
Expired: 2009-10-22
QueryTimes: 80

If any of the information above is inaccurate, you must correct it by visiting our website or contact us.
(If your review indicates that all of the information above is accurate, you do not need to take any action.)
Please remember that under the terms of your registration agreement, the provision of false Whois information
can be grounds for cancellation of your domain name registration.
Todaynic.com,Inc. reserves the right to modify these terms at any time.

Network Whois record

Queried whois.ripe.net with “-B 78.159.118.218“…

% Information related to '78.159.118.0 - 78.159.121.255'

inetnum:        78.159.118.0 - 78.159.121.255
netname:        NETDIRECT-NET
descr:          netdirekt e.K.
remarks:        INFRA-AW
country:        DE
admin-c:        WW200-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20080311
source:         RIPE

person:       Wiethold Wagner
address:      netdirekt e. K.
address:      Kleyer Strasse 79 / Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       info@netdirekt.de
nic-hdl:      WW200-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '78.159.96.0/19AS28753'

route:	        78.159.96.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20071011
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
bluepillusa.com IN SOA
server: ns3.01isp.com
email: webmaster.now.net.cn
serial: 2008102210
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 7200
7200s (02:00:00)
bluepillusa.com IN NS ns3.01isp.com 43200s (12:00:00)
bluepillusa.com IN NS ns4.01isp.net 43200s (12:00:00)
bluepillusa.com IN A 78.159.118.218 7200s (02:00:00)
218.118.159.78.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 12345
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN PTR 78-159-118-218.internetserviceteam.com 100000s (1.03:46:40)

— end —

AUTH WHOiS]
[Querying whois.verisign-grs.comhttp://whois.verisign-grs.com]
[whois.verisign-grs.comhttp://whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.nethttp://www.internic.net
for detailed information.

Domain Name: RXMEDS4ALL.COMhttp://RXMEDS4ALL.COM
Registrar: TODAYNIC.COMhttp://TODAYNIC.COM, INC.
Whois Server: whois.todaynic.comhttp://whois.todaynic.com
Referral URL: http://www.NOW.CNhttp://www.NOW.CN
Name Server: NS1.FREEDNS.WShttp://NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WShttp://NS2.FREEDNS.WS
Status: clientTransferProhibited
Updated Date: 26-nov-2008
Creation Date: 13-feb-2008
Expiration Date: 13-feb-2010

>>> Last update of whois database: Sat, 07 Feb 2009 09:50:51 EST