Canadian Pharmacy – cheaprxpharmstore.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!
Browse Our Selection Today! –> http://cheaprxpharmstore.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
70.45.198.3 Puerto Rico (San Juan)* Whois Google DNSStuff Urgentmessage.org
207.115.36.164 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Phoebe Roy Mon Aug 3 18:13:20 2009

Return-Path:
Authentication-Results: mta112.sbc.mail.re3.yahoo.com from=gdm.es; domainkeys=neutral (no sig); from=gdm.es; dkim=neutral (no sig)
Received: from 70.45.198.3 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta112.sbc.mail.re3.yahoo.com with SMTP; Mon, 03 Aug 2009 18:17:53 -0700
Received: from t79drp1 (host-70-45-198-3.onelinkpr.net [70.45.198.3])
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n741Hgcp019715;
Mon, 3 Aug 2009 20:17:51 -0500
Message-ID: <000701ca14a0$c17f9fd0$d828ea62@gdm.es>
Reply-To: “Phoebe Roy” <p.royha@gdm.es>
From: “Phoebe Roy” <p.royha@gdm.es>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Mon, 03 Aug 2009 20:13:20 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 173

Address lookup

canonical name cheaprxpharmstore.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmstore.com“…

   Domain Name: CHEAPRXPHARMSTORE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.VR4NS.COM
   Name Server: NS2.MQ2NS.MOBI
   Name Server: NS3.JY7NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 03-aug-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

>>> Last update of whois database: Tue, 04 Aug 2009 04:23:18 UTC <<<

Queried whois.ename.com with “cheaprxpharmstore.com“…

Domain Name : cheaprxpharmstore.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.vr4ns.com
ns2.mq2ns.mobi
ns3.jy7ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheaprxpharmstore.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns3.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns2.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns1.cheaprxpharmstore.com 86400s (1.00:00:00)
cheaprxpharmstore.com IN A 60.12.166.154 86400s (1.00:00:00)
cheaprxpharmstore.com IN NS ns4.cheaprxpharmstore.com 86400s (1.00:00:00)

— end —

http://www.ccpharma-sa.com/ – Cheap medicaments
http://www.ccppharmacypractice.com/ – Order pharmacy
http://www.ccrewspharmacy.com/ – Buy Silagra
http://www.ccrpharma.com/ – Cheap Kamagra
http://www.ccr-pharma.com/ – Buy Super Greens
http://www.ccrxpharmacy.com/ – Buy Protonix
http://www.ccspharma.com/ – Buy Silagra
http://www.ccurepharma.com/ – Cheap drugs
http://www.ccv-pharma.com/ – Buy Tenormin
http://www.ccwestpharma.com/ – Cheap tablets
http://www.cdcpharma.com/ – Buy pharmacy
http://www.cdcpharmacy.com/ – Cialis Soft Tabs On line
http://www.cdepharma.com/ – Buy Lioresal
http://www.cdherbariumpharmacy.com/ – Cheap Allegra
http://www.cdipharma.com/ – Order drugs
http://www.cdiscountpharma.com/ – Female Rx Oil On web
http://www.cdiscountpharmacy.com/ – Buy Tenormin
http://www.cdlpharma.com/ – Commercial Euphoria Cologne
http://www.cdmopharma.com/ – Discount Coumadin
http://www.cdmo-pharma.com/ – Buy Retin-A
http://www.cdmoptimizepharma.com/ – Order Avapro
http://www.cdmpharma.com/ – Purchase medicaments
http://www.cdm-pharma.com/ – Buy Zero Nicotine Patch
http://www.cdnpharma.com/ – Order Avapro
http://www.cdnpharmacy.com/ – Order Lipitor
http://www.cdn-pharmacy.com/ – Buy Paxil
http://www.cdnpharmacyoutlets.com/ – Discount Enhance9
http://www.cdpharma.com/ – Buy Super Greens
http://www.cd-pharma.com/ – Buy Female Rx Plus
http://www.cdpharmaasia.com/ – Crestor Online
http://www.cdpharmacy.com/ – Purchase Clomid
http://www.cdpharmaeurope.com/ – On line drugs
http://www.cdpharmaglobal.com/ – On web Nexium
http://www.cdpharmaindia.com/ – Buy Tamiflu
http://www.cdpharmaweb.com/ – Commercial Euphoria Cologne
http://www.cd-propharma.com/ – Order Avapro
http://www.cdspharmacy.com/ – Buy Soma
http://www.cdwdiscountpharmacy.com/ – On webpills
http://www.cealatpharm.com/ – Buy Zyban
http://www.ceapharma.com/ – Commercial tablets
http://www.cebupeoplespharmacy.com/ – Cheap Effexor XR
http://www.cecilpharma.com/ – Buy pills
http://www.cecl-ethypharm.com/ – Cheap Fosamax
http://www.cecpharm.com/ – Buy Zithromax
http://www.cecycpharma.com/ – Order Actos
http://www.cedapharm.com/ – Purchase pills
http://www.cedarburgpharma.com/ – Buy Zenegra
http://www.cedarcompoundingpharmacy.com/ – Purchase Liquid Rx Plus
http://www.cedarcreekpharmacy.com/ – Cheap tablets
http://www.cedarpharma.com/ – Discount tablets
http://www.cedarpharmacy.com/ – Discount Enhance9
http://www.cedarpharmacynv.com/ – Buy Viagra
http://www.cedarrapidspharmacies.com/ – Commercial Glucotrol XL
http://www.cedarspharmacy.com/ – On line pills
http://www.cedarviewpharmacy.com/ – Best tablets
http://www.cedempharm.com/ – Buy Propecia
http://www.cedenospharmacy.com/ – Purchase drugs
http://www.ceecurepharma.com/ – Cialis Online
http://www.ceepharma.com/ – Buy Zantac
http://www.ceepharmacafeteria.com/ – Best medicaments
http://www.ceepharmajobs.com/ – On line pills
http://www.ceepharmatrials.com/ – Buy Zocor
http://www.cefakpharma.com/ – Cialis Online
http://www.cegedimpharmacrm.com/ – Buy Avandia
http://www.cegipharma.com/ – Evista On line
http://www.cehrapharma.com/ – Buy Retin-A
http://www.celantpharmaceuticals.com/ – Buy Lioresal
http://www.celatorpharm.com/ – Buy Prevacid
http://www.celatorpharma.com/ – Buy Prevacid
http://www.celatorpharmaceuticals.com/ – Commercial Mevacor
http://www.celebrexonlinepharmacy.com/ – Cheap Lopressor
http://www.celebrexpharmacy.com/ – Cheap Fosamax
http://www.celebrex-pharmacy.com/ – Female Rx Oil On web
http://www.celebrex-pharmacyrx.com/ – Online drugs
http://www.celebrex-pharmacy-rx.com/ – Online medicaments
http://www.celebritybiopharma.com/ – On web pharmacy
http://www.celebritypharma.com/ – Discount Glucophage
http://www.celebritypharmacy.com/ – Buy Zyprexa
http://www.celebrity-pharmacy.com/ – Discount tablets
http://www.celekpharma.com/ – Purchase ED Trial Pack
http://www.celek-pharma.com/ – Buy Prilosec
http://www.celekpharmaceuticals.com/ – Buy Protonix
http://www.celentpharmaceuticals.com/ – Buy Retin-A
http://www.celerapharma.com/ – Depakote On web
http://www.celeritaspharma.com/ – Buy Zenegra
http://www.celerpharm.com/ – Female Rx Oil On web
http://www.celestepharmakorea.com/ – Purchase Joint Formula
http://www.celestialpharma.com/ – Order Claritin
http://www.celestialpharmacy.com/ – Buy Plavix
http://www.celexapharmacy.com/ – Commercial Mevacor
http://www.celforpharma.com/ – On line drugs
http://www.celgenpharm.com/ – Cheap Cardura
http://www.celinapharmacy.com/ – Order Actos
http://www.cellact-pharma.com/ – Buy Ultram
http://www.cellantpharma.com/ – Buy Yerba Diet
http://www.cellantpharmaceuticals.com/ – Evista On line
http://www.cellekpharma.com/ – Cheap Lopressor
http://www.cellentpharma.com/ – Commercial medicaments
http://www.cellentpharmaceuticals.com/ – Purchase Breast Success
http://www.cellispharma.com/ – Deltasone On line
http://www.cellpharm.com/ – Cheap Coreg
http://www.cell-pharm.com/ – Purchase drugs
http://www.cellpharma.com/ – Buy Viagra
http://www.celltechpharma.com/ – Online medicaments
http://www.celltech-pharma.com/ – Purchase Adalat
http://www.celltechpharmaceuticals.com/ – Buy Yerba Diet
http://www.celltech-pharmaceuticals.com/ – On web tablets
http://www.cellularpharmacist.com/ – Cheap Allegra
http://www.cellularpharmacy.com/ – Buy Zyban
http://www.cellulosepharmachem.com/ – Buy Singulair
http://www.cellvax-pharma.com/ – Order tablets
http://www.celogenpharma.com/ – Buy pills
http://www.celonexpharmaceuticals.com/ – Amoxil Online
http://www.celonpharma.com/ – Discount Caverta
http://www.celon-pharma.com/ – On web drugs
http://www.celpharm.com/ – Buy Clarinex
http://www.celtapharma.com/ – Purchase drugs
http://www.celticpharma.com/ – Buy Virility Pills
http://www.celticpharmacy.com/ – Cialis Online
http://www.celtic-pharmacy.com/ – Buy Zyrtec
http://www.celticpharmadev.com/ – Order medicaments
http://www.celticpharmaholdings.com/ – Online pharmacy
http://www.celtipharm.com/ – Cheap tablets
http://www.cemachpharmamachine.com/ – Best pills
http://www.cemara-pharmacy.com/ – Purchase Clomid
http://www.cemists-pharma-online.com/ – Online medicaments
http://www.cemopharma.com/ – Online drugs
http://www.cemo-pharma.com/ – Online Lasix
http://www.cempharma.com/ – Online tablets
http://www.cempharmacy.com/ – Online Multi Vitamin
http://www.cempharmacyonline.com/ – Purchase ED Trial Pack
http://www.cenipharm.com/ – Order Avapro
http://www.cenlapharmacy.com/ – Buy Female Rx Plus
http://www.centapharm.com/ – Evista On line
http://www.centaurpharma.com/ – Discount medicaments
http://www.centaurpharmaceuticals.com/ – Online Lasix
http://www.centauruspharma.com/ – Buy Virility Pills
http://www.centennialpharmacy.com/ – Discount Enhance9
http://www.centercarepharmacy.com/ – Buy pills
http://www.centereachpharmacy.com/ – Cheap pills
http://www.centerforcommunitypharmacyadvocacyandpublicaffairs.com/ – Online pharmacy
http://www.centerforpharmacy.com/ – Online medicaments
http://www.centerofpharmacy.com/ – Cheap Coreg
http://www.centerpetpharmacy.com/ – Buy Xenical
http://www.centerpharm.com/ – Depakote On web
http://www.centerpharmacy.com/ – Buy pharmacy
http://www.centerpharmacyinc.com/ – Discount drugs
http://www.centerpharmphysics.com/ – Buy Virility Patch Rx
http://www.centerpointpharma.com/ – Hoodia Patch On line
http://www.centerpointpharmaservices.com/ – Commercial Cozaar
http://www.centipharm.com/ – Discount Caverta
http://www.centourpharma.com/ – Buy Premarin
http://www.centpharm.com/ – Buy Norvasc
http://www.centralavenuepharmacy.com/ – Cheap Cardura
http://www.centralcarepharmacy.com/ – On web medicaments
http://www.centralcarolinapharmacy.com/ – Online pharmacy
http://www.centralcoastpharmacy.com/ – Purchase pharmacy
http://www.centralepharma.com/ – Buy Propecia
http://www.centrale-pharma.com/ – Buy Propecia
http://www.centralexpresspharmacy.com/ – Discount medicaments
http://www.centralfillpharmacist.com/ – On line Levitra
http://www.centralfillpharmacy.com/ – Cheap Kamagra
http://www.central-health-online-pharmacy-medication-prescription-drugs.com/ – Discount drugs
http://www.centralhealthpharmacy.com/ – On web pharmacy
http://www.centralindiapharmacy.com/ – Online tablets
http://www.centralpharm.com/ – Buy Prilosec
http://www.centralpharma.com/ – Buy Female Rx Plus
http://www.central-pharma.com/ – Buy Prevacid
http://www.centralpharmacies.com/ – Discount Altace
http://www.centralpharmaciesltd.com/ – Cheap Fosamax
http://www.centralpharmaciesuk.com/ – Purchase ED Trial Pack
http://www.centralpharmacp.com/ – Cheap Fosamax
http://www.centralpharmacy.com/ – Buy Norvasc
http://www.centralpharmacy1.com/ – Cheap Cardura
http://www.centralpharmacyaltus.com/ – Buy Nolvadex
http://www.centralpharmacyboston.com/ – Buy Tenormin
http://www.centralpharmacyrx.com/ – Buy Nolvadex
http://www.centralpharmcies.com/ – Best tablets
http://www.centralpharm-niger.com/ – Female Rx Oil On web
http://www.centralrockiespharmacy.com/ – Discount Altace
http://www.centralvalleypharmacy.com/ – On web pharmacy
http://www.centrapharm.com/ – Buy Aciphex
http://www.centreafricainpharmaceutique.com/ – Discount pills
http://www.centrepetpharmacy.com/ – Buy Propecia
http://www.centrepharma.com/ – Online tablets
http://www.centrepharmaceutique.com/ – Online Multi Vitamin
http://www.centrepharmacy.com/ – Buy Imitrex
http://www.centrepharmacyservices.com/ – Order pills
http://www.centrixpharma.com/ – On web pharmacy
http://www.centrixpharmaceutical.com/ – Buy Prilosec
http://www.centrixpharmaceuticals.com/ – Evista On line
http://www.centrixpharmaoncall.com/ – Buy pharmacy
http://www.centropharm.com/ – Cheap Lopressor
http://www.centropharm-europe.com/ – Buy pharmacy
http://www.centropharm-ukraine.com/ – Buy Aciphex
http://www.centrosepharma.com/ – Buy Female Rx Plus
http://www.centrumpharma.com/ – Online drugs
http://www.centrumpharmaceuticals.com/ – Commercial tablets
http://www.centrum-pharmaceuticals.com/ – Hoodia Patch On line
http://www.centrxpharmaceuticals.com/ – Buy Lioresal
http://www.centumpharma.com/ – Purchase ED Trial Pack
http://www.centurepharma.com/ – Commercial tablets
http://www.centurionpharma.com/ – Euphoria Perfume Online
http://www.centurpharma.com/ – Cheap tablets
http://www.centurycitypharmacy.com/ – Buy Zenegra
http://www.centurypharma.com/ – Buy Propecia
http://www.century-pharma.com/ – Cheap tablets
http://www.centurypharmaceuticals.com/ – Purchase Adalat
http://www.centurypharmacy.com/ – Cheap Kamagra
http://www.century-pharmacy.com/ – Discount Caverta
http://www.centurysquarepharmacy.com/ – Discount Coumadin
http://www.cenwaypharma.com/ – Cheap medicaments
http://www.cepalpharma.com/ – On web pharmacy
http://www.cepapharma.com/ – Buy Clarinex
http://www.cephalonpharma.com/ – Buy Premium Diet Patch
http://www.cepharm.com/ – Order Actos
http://www.cepharma.com/ – Commercial Glucotrol XL
http://www.cepharmacist.com/ – Order tablets
http://www.ce-pharmacist.com/ – Buy Xenical
http://www.cepharmacology.com/ – Buy Female Rx Plus
http://www.ce-pharmacology.com/ – Commercial pills
http://www.cepharmacy.com/ – Purchase Breast Success
http://www.ce-pharm-appel.com/ – Evista On line
http://www.cequentpharma.com/ – Commercial Euphoria Cologne
http://www.cequentpharmaceuticals.com/ – Cheap tablets
http://www.cerapharm.com/ – Commercial Celebrex
http://www.cerbiospharma.com/ – Buy Tamiflu
http://www.cerbios-pharma.com/ – Discount Kamagra Oral Jelly
http://www.cerebrumpharma.com/ – Best pills
http://www.cerespharm.com/ – Buy medicaments
http://www.cerespharmaceuticals.com/ – Buy Imitrex
http://www.cerestarpharma.com/ – Purchase ED Trial Pack
http://www.cerexapharma.com/ – Purchase Clomid
http://www.cerexapharmaceuticals.com/ – Buy Tadalis SX
http://www.cerimonpharma.com/ – Buy Retin-A
http://www.ceriumpharma.com/ – Cheap medicaments
http://www.ceriumpharmaceuticals.com/ – Buy Plavix
http://www.cermakpharmacy.com/ – Cheap medicaments
http://www.certifiedconsultantpharmacistsinc.com/ – Buy Synthroid
http://www.certifiedonlinepharmacies.com/ – Commercial Cozaar
http://www.certifiedonlinepharmacy.com/ – Purchase Liquid Rx Plus
http://www.certifiedpharma.com/ – On webpills
http://www.certifiedpharmaceuticals.com/ – Deltasone On line
http://www.certifiedpharmacies.com/ – Buy Protonix
http://www.certifiedpharmacy.com/ – Buy Aciphex
http://www.certifiedpharmacytech.com/ – Discount Enhance9
http://www.certifiedpharmacytechnician.com/ – Buy Singulair
http://www.certifiedpharmacytechnicianjobs.com/ – On line drugs
http://www.certifiedpharmacytechnicians.com/ – Online medicaments
http://www.certifiedpharmacytechnicianschools.com/ – Buy Zyprexa
http://www.certifiedpharmacytechniciansofflorida.com/ – Buy Zithromax
http://www.certifiedpharmacytechschools.com/ – Discount pharmacy
http://www.certifiedpharmacytechtest.com/ – On webpills
http://www.certipharm.com/ – Discount drugs
http://www.certipharma.com/ – Order Diovan
http://www.certpharma.com/ – Purchase pharmacy
http://www.certpharmacytechnician.com/ – Commercial Lamisil Oral
http://www.certrispharma.com/ – Cheap pharmacy
http://www.certuspharma.com/ – Buy Zyrtec
http://www.certuspharmaceuticals.com/ – Purchase ED Trial Pack
http://www.ceruleanpharm.com/ – Buy Yerba Diet
http://www.ceruleanpharma.com/ – Commercial Amaryl
http://www.cerulean-pharma.com/ – On line drugs
http://www.ceruleanpharmaceutical.com/ – Cheap Coreg
http://www.cerulean-pharmaceutical.com/ – Buy Plavix
http://www.ceruleanpharmaceuticals.com/ – Buy Zantac
http://www.cerulean-pharmaceuticals.com/ – Commercial Euphoria Cologne
http://www.ceruleanpharmacsuticals.com/ – Amoxil Online
http://www.cervelopharm.com/ – Hoodia Gordonii Online
http://www.cervelopharma.com/ – Buy Plavix
http://www.cespharm.com/ – Euphoria Perfume Online
http://www.cession-pharmacie.com/ – Purchase Florinef
http://www.cestlaviepharma.com/ – Purchase Adalat
http://www.cetadelpharmacy.com/ – Cialis Soft Tabs On line
http://www.cetapharmaceutical.com/ – Buy Synthroid
http://www.cetapharmaceuticals.com/ – Buy Tamiflu
http://www.cetekpharma.com/ – Buy Viagra Soft Tabs
http://www.cetekpharmaceuticals.com/ – Commercial Mevacor
http://www.cetipharm.com/ – Order tablets
http://www.cetuspharma.com/ – Commercial Cozaar
http://www.ceuticapharma.com/ – Order Flomax
http://www.cevec-pharma.com/ – Hoodia Gordonii Online
http://www.cevec-pharmaceuticals.com/ – Discount Altace
http://www.cevraidirecte-pharma.com/ – Best medicaments
http://www.cevraidirect-pharma.com/ – Buy tablets
http://www.ceylincopharma.com/ – Cheap Fosamax
http://www.cfapharma-besancon.com/ – On line pharmacy
http://www.cfapharmacie.com/ – Commercial Celebrex
http://www.cfapharmacie1.com/ – Cheap Allegra
http://www.cfapharmacie2.com/ – Discount Lotensin
http://www.cfa-pharmacie-besancon.com/ – Purchase Adalat
http://www.cfa-pharmacie-drome-ardeche.com/ – Buy Plavix
http://www.cfa-pharmacie-troyes.com/ – Cheap medicaments

http://www.cfa-pharma-sante.com/ – Order Actos
http://www.cfdt-delpharm-reims.com/ – Commercial Euphoria Cologne
http://www.cffoundationpharmacy.com/ – Order Actos
http://www.cfipharmacy.com/ – Cheap tablets
http://www.cflpharma.com/ – Cheap tablets
http://www.cfmpharma.com/ – Discount drugs
http://www.cfpharm.com/ – Arava On line
http://www.cfpharma.com/ – Buy Zyrtec
http://www.cfpharmaceutical.com/ – Purchase Clomid
http://www.cfpharmacy.com/ – Order Isoptin
http://www.cfpharminc.com/ – Buy Diflucan
http://www.cfservicespharmacy.com/ – Cialis Online
http://www.cgbiopharma.com/ – Arava On line
http://www.cgf-pharmatech.com/ – On web Lexapro
http://www.cghealthpharm.com/ – Buy Singulair
http://www.cgipharma.com/ – Purchase pills
http://www.cgipharmaceuticals.com/ – Buy Imitrex
http://www.cglaw-pharmaceutical-lawyers.com/ – Buy tablets
http://www.cgmpchempharm.com/ – Buy Xenical
http://www.cgoodepharmacy.com/ – Buy Pravachol
http://www.cgpharm.com/ – Depakote On web
http://www.cgpharma.com/ – Buy Zantac
http://www.cgpharmchem.com/ – On line tablets
http://www.cgspharmacy.com/ – Cheap pharmacy
http://www.chadddiscountpharmacy.com/ – Purchase pills
http://www.chaddertonpharmacy.com/ – On line drugs
http://www.chadpharma.com/ – Order medicaments
http://www.chaichempharma.com/ – Purchase Liquid Rx Plus
http://www.chaimalas-pharmacy.com/ – Purchase pharmacy
http://www.chainpharmacist.com/ – Cheap medicaments
http://www.chainpharmacy.com/ – Buy Ultram
http://www.chainpharmacyjobs.com/ – Commercial Celebrex
http://www.chainpharmacynews.com/ – Buy Paxil
http://www.chainpharmacyreimbursement.com/ – Evista On line
http://www.chainpharmacyreport.com/ – Cheap pharmacy
http://www.chainpharmacyreview.com/ – Buy Ultram
http://www.chaircitypharmacy.com/ – Purchase ED Trial Pack
http://www.chaitanyapharma.com/ – Buy Soma
http://www.chaitanyapharmaceuticals.com/ – Buy Tadalis SX
http://www.chalfontpharmacy.com/ – On web Lexapro
http://www.chalilpharmaceuticals.com/ – Buy Protonix
http://www.challengepharma.com/ – Crestor Online
http://www.chalpharm.com/ – Order pharmacy
http://www.chamberpharmacy.com/ – Buy Zocor
http://www.chamberpharmacycard.com/ – Buy Singulair
http://www.chambersdiscountpharmacy.com/ – Cheap Kamagra
http://www.champharma.com/ – Buy Protonix
http://www.championpharmacy.com/ – Buy Viagra
http://www.championsofpharmacy.com/ – Atarax On web
http://www.champpharma.com/ – On line drugs
http://www.chanakyapharma.com/ – Cheap Lopressor
http://www.chandrapharmaceuticals.com/ – Buy Diflucan
http://www.chaneypharmacy.com/ – Cheap Cardura
http://www.chaneyspharmacy.com/ – Buy Zyprexa
http://www.changdapharm.com/ – Depakote On web
http://www.changingpharmacychanginglives.com/ – Buy Avandia
http://www.changingpharmacy-changinglives.com/ – Purchase tablets
http://www.changjiang-pharm.com/ – Buy Aciphex
http://www.changmingpharm.com/ – Buy Soma
http://www.chanhnam-pharma.com/ – Buy Norvasc
http://www.chantalpharmaceuticals.com/ – Buy Soma
http://www.chantalpharmaceuticalscorporation.com/ – Online Lasix
http://www.chantixonlinepharmacy.com/ – Buy Tamiflu
http://www.chantixpharma.com/ – Cipro On web
http://www.chantixpharmacist.com/ – On web Nexium
http://www.chapelhillpharma.com/ – Best pills
http://www.chapelhillpharmaceuticals.com/ – Discount Kamagra Oral Jelly
http://www.chapelpharmacy.com/ – Buy Prilosec
http://www.chapinpharmacy.com/ – On web Lexapro
http://www.chapmanpharmaceuticalgallery.com/ – Buy Zenegra
http://www.chapmanpharmaceuticalhealthfoundation.com/ – Buy Imitrex
http://www.chapmanpharmaceuticals.com/ – Buy Plavix
http://www.chapmanpharmaceuticalsconsulting.com/ – On web tablets
http://www.chapmanpharmacy.com/ – On web pharmacy
http://www.charakpharma.com/ – Buy Zero Nicotine Patch
http://www.charingcrosspharmacy.com/ – Cheap pills
http://www.chariotpharm.com/ – Buy Retin-A
http://www.chariotpharma.com/ – Purchase Adalat
http://www.charispharma.com/ – Buy pills
http://www.charitypharmacy.com/ – Buy Diflucan
http://www.charlesevansmddisocuntpharmacy.com/ – Cialis Online
http://www.charlesgastonpharmacy.com/ – On line pills
http://www.charlespharma.com/ – Online tablets
http://www.charlestonpharmacies.com/ – Buy Singulair
http://www.charlestonpharmacist.com/ – On web medicaments
http://www.charlottebiopharmajobs.com/ – Arava On line
http://www.charlottebiopharmaresumes.com/ – Cheap pills
http://www.charlottecompoundingpharmacy.com/ – Buy Plavix
http://www.charlottepharmaceuticaljobs.com/ – Discount medicaments
http://www.charlottepharmaceuticalresumes.com/ – Commercial Glucotrol XL
http://www.charlottepharmaceuticals.com/ – Commercial Lamisil Oral
http://www.charlottepharmaceuticalsalesjobs.com/ – Purchase medicaments
http://www.charlottepharmaceuticalsalesresumes.com/ – Buy Zyrtec
http://www.charlottepharmacies.com/ – Order pharmacy
http://www.charlottepharmacist.com/ – Buy Protonix
http://www.charlottepharmacistjobs.com/ – Commercial drugs
http://www.charlottepharmacyjobs.com/ – Commercial Glucotrol XL
http://www.charlottepharmajobs.com/ – Discount Kamagra Oral Jelly
http://www.charlottepharmaresumes.com/ – Commercial tablets
http://www.charlotteswebdiscountpharmacy.com/ – Buy Norvasc
http://www.charnwoodpharmacy.com/ – Buy Zyrtec
http://www.charterpharmacy.com/ – Cheap drugs
http://www.chartfieldpharmacy.com/ – Order tablets
http://www.chasepharm.com/ – Cialis Online
http://www.chasepharma.com/ – Hoodia Patch On line
http://www.chasepharmaceuticals.com/ – Buy VPRx Oil
http://www.chasepharmacy.com/ – Buy medicaments
http://www.chasepharmajobs.com/ – Order pills
http://www.chatou-pharmacie.com/ – Cheap medicaments
http://www.chatpharm.com/ – Crestor Online
http://www.chattanoogapharmacies.com/ – Euphoria Perfume Online
http://www.chatwithpharmacist.com/ – Buy Tadalis SX
http://www.chatwithpharmacists.com/ – Commercial pills
http://www.chaudeshwaripharmaequipments.com/ – Buy Aciphex
http://www.chavadipharma.com/ – On web tablets
http://www.chazanpharmacy.com/ – Buy Female Rx Plus
http://www.chdpharma.com/ – Discount Altace
http://www.cheap24hourpharmacy.com/ – Cheap tablets
http://www.cheapamericanpharmacy.com/ – Purchase drugs
http://www.cheaparapharmacy.com/ – Discount Altace
http://www.cheapcanadapharmacy.com/ – Discount tablets
http://www.cheapcanadianpharmacy.com/ – Buy Tadalis SX
http://www.cheap-canadianpharmacy.com/ – Buy Norvasc
http://www.cheapdiscountpharmacy.com/ – Best drugs
http://www.cheap-discount-pharmacy-online.com/ – On line pills
http://www.cheap-dream-pharmaceutical.com/ – Cialis Soft Tabs On line
http://www.cheapdrugpharm.com/ – Buy Plavix
http://www.cheapdrugpharmacy.com/ – Order tablets
http://www.cheapdrugspharma.com/ – Cheap Cardura
http://www.cheapdrugspharmacy.com/ – Buy Prilosec
http://www.cheap-drugs-pharmacy.com/ – Order Avapro
http://www.cheapdrugsrxpharmacy.com/ – Commercial pills
http://www.cheaperpharma.com/ – Commercial pharmacy
http://www.cheaper-pharma.com/ – Atarax On web
http://www.cheaperpharmacy.com/ – Order Diovan
http://www.cheaper-pharmacy.com/ – Discount Caverta
http://www.cheapest-acyclovir-pharmacy.com/ – Discount tablets
http://www.cheapest-adipex-pharmacy.com/ – Buy Tadalis SX
http://www.cheapest-ambien-pharmacy.com/ – Commercial tablets
http://www.cheapest-bupropion-pharmacy.com/ – Amoxil Online
http://www.cheapest-canadian-pharmacy.com/ – Commercial medicaments
http://www.cheapest-celebrex-pharmacy.com/ – Buy Singulair
http://www.cheapestcialispharmacy.com/ – Buy Norvasc
http://www.cheapest-cialis-pharmacy.com/ – Euphoria Perfume Online
http://www.cheapest-condylox-pharmacy.com/ – Discount medicaments
http://www.cheapest-cyclobenzaprine-pharmacy.com/ – Buy Pravachol
http://www.cheapest-didrex-pharmacy.com/ – Cheap pills
http://www.cheapest-discount-pharmacy.com/ – Cheap Kamagra
http://www.cheapestdrugpharmacy.com/ – Buy Plavix
http://www.cheapestdrugspharmacy.com/ – Online drugs
http://www.cheapest-fioricet-pharmacy.com/ – Buy Pravachol
http://www.cheapestmedicalpharmacy.com/ – Order Flomax
http://www.cheapestmedspharmacy.com/ – Order Diovan
http://www.cheapest-meridia-pharmacy.com/ – Buy Super Greens
http://www.cheapestonlinepharmacy.com/ – Order Lipitor
http://www.cheapest-onlinepharmacy.com/ – Purchase pharmacy
http://www.cheapest-online-pharmacy.com/ – On web pharmacy
http://www.cheapest-online-pharmacy-store.com/ – Purchase drugs
http://www.cheapestpharmacey.com/ – Commercial drugs
http://www.cheapestpharmacies.com/ – Buy medicaments
http://www.cheapestpharmacist.com/ – Purchase drugs
http://www.cheapestpharmacuti.com/ – Buy Zero Nicotine Patch
http://www.cheapestpharmacy.com/ – On web Nexium
http://www.cheapest-pharmacy.com/ – Buy tablets
http://www.cheapestpharmacycanada.com/ – Best medicaments
http://www.cheapestpharmacydiscountsonline.com/ – Arava On line
http://www.cheapestpharmacydrugs.com/ – Buy Nolvadex
http://www.cheapestpharmacyguides.com/ – Buy Pravachol
http://www.cheapestpharmacymeds.com/ – Buy Prilosec
http://www.cheapestpharmacyonline.com/ – Buy Viagra Soft Tabs
http://www.cheapest-pharmacyonline.com/ – Depakote On web
http://www.cheapest-pharmacy-online.com/ – Discount Coumadin
http://www.cheapestpharmacypills.com/ – Buy Premium Diet Patch
http://www.cheapestpharmacystore.com/ – Buy Norvasc
http://www.cheapestpharmarc.com/ – Order pills
http://www.cheapestpharmonline.com/ – Order tablets
http://www.cheapestpharmrep.com/ – Purchase pharmacy
http://www.cheapestpharmsite.com/ – Commercial medicaments
http://www.cheapestpharmtech.com/ – Cheap pills
http://www.cheapestpharmworld.com/ – Crestor Online
http://www.cheapest-phendimetrazine-pharmacy.com/ – Commercial Celebrex
http://www.cheapestpillpharmacy.com/ – Buy drugs
http://www.cheapestpillspharmacy.com/ – Cialis Online
http://www.cheapest-prozac-pharmacy.com/ – Order pills
http://www.cheapestrxpharmacy.com/ – Cheap tablets
http://www.cheapest-soma-pharmacy.com/ – Buy Prilosec
http://www.cheapest-tamiflu-pharmacy.com/ – Cheap Kamagra
http://www.cheapest-tramadol-pharmacy.com/ – Online drugs
http://www.cheapest-ultracet-pharmacy.com/ – On web Lexapro
http://www.cheapest-valtrex-pharmacy.com/ – Order Avapro
http://www.cheapest-viagra-online-pharmacy.com/ – Commercial pills
http://www.cheapest-wellbutrin-pharmacy.com/ – Buy Virility Pills
http://www.cheapest-zoloft-pharmacy.com/ – Discount Lotensin
http://www.cheapgenericpharmaceuticals.com/ – Discount drugs
http://www.cheapgenericpharmacy.com/ – Commercial tablets
http://www.cheapharm.com/ – Online pharmacy
http://www.cheapharma.com/ – Buy pharmacy
http://www.cheapharmacy.com/ – Commercial Euphoria Cologne
http://www.cheapharmacyonline.com/ – Purchase Clomid
http://www.cheapharmonica.com/ – Commercial Lamisil Oral
http://www.cheapharmonicas.com/ – Discount pharmacy
http://www.cheapinexpensivepharmacy.com/ – Commercial tablets
http://www.cheapinternetpharmacy.com/ – Buy Silagra
http://www.cheapjobspharmacy.com/ – Buy Synthroid
http://www.cheaplegalpharmacy.com/ – On line Neurontin
http://www.cheap-levitra-pharmacy.com/ – On line medicaments
http://www.cheapmedicalpharmacy.com/ – Buy Plavix
http://www.cheap-medicine-pharmacy.com/ – Buy Nolvadex
http://www.cheapmedpharmacy.com/ – Buy Lioresal
http://www.cheapmexicanpharmacy.com/ – Commercial Cozaar
http://www.cheap-mexican-pharmacy.com/ – Cheap pharmacy
http://www.cheapmexicopharmacy.com/ – Discount drugs
http://www.cheapnationalpharmacy.com/ – Commercial pharmacy
http://www.cheaponlinepharmacies.com/ – Cheap Kamagra
http://www.cheaponlinepharmacy.com/ – Buy Nolvadex
http://www.cheap-online-pharmacy.com/ – Cheap pills
http://www.cheapon-linepharmacy.com/ – Order Diovan
http://www.cheaponline-pharmacy.com/ – Order Flomax
http://www.cheaponlinepharmacyaustralia.com/ – Buy medicaments
http://www.cheaponlinepharmacy-online.com/ – On web drugs
http://www.cheap-online-pharmacy-rx.com/ – Commercial Mevacor
http://www.cheap-online-pharmacy-store.com/ – Crestor Online
http://www.cheap-online-pharmacy-usa.com/ – Best tablets

Canadian Pharmacy – online-tabs.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

CANADIAN PHARMACY-McCann Schoolonline tablet

Address lookup

canonical name online-tabs.net.
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
online-tabs.net IN SOA
server: ns1.nscontrol.com
email: root.online-tabs.net
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
online-tabs.net IN A 195.95.155.3 60s (00:01:00)
online-tabs.net IN NS ns2.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns3.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns5.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns4.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns1.nscontrol.com 60s (00:01:00)

— end —

Canadian Pharmacy Spam Servers – rx-partners. biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: dns2.onlinemedson.net
ns0.rx-sharedhost.com
ns0.rxp-hosting.com
ns1.edportu.com
ns1.partners-dns.com
ns1.viagravendita.com
ns2.bestpharm.org
ns2.drugs-on.net
ns2.edportu.com
ns2.esfarmaciaonline.com
ns2.genericdrugson.net
ns2.healthproductson.net
ns2.medications-on.net
ns2.medsshop.org
ns3.cesaonline.net
whatever.rxp-alive.com
Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com
buyusarx.com
edcustomer.com
enjoymeds.com
hoodiaweightlosstablets.com
longlovetabs.com
medextreme.com
medsjoy.com
pillsfm.com
rxfeel.com
rxfeeling.com
rxp-hosting.com
rxparty.com
farmacia-es.com
linkzpage.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy- cheapest-drug.org – rx-partners.biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Submitted by Rune on May 18, 2008 – 16:05

I don’t ever bother to mention the problematic “affiliate did it” argument.

This guy is not directly spamming the domain in question, cheapest-drug.org.
He has instead registered as a user on several forums/communities, giving a link to a domain (or several) in his userprofile and spamvertizes his userprofile via comments.

The latest from today came in via 207.38.4.12 which appears to be a free open proxy on “M9 Systems” in Canada. Tries to leave a comment on the posting about can-spam mailers.

“User”: Paeal (including a link to a wikidot.com site, I reckon they will nuke it).
Subject: “Your site has very much liked me.” (That seems to be a favourite among commentspammers).
The links in the commentspam:
http://forums.ugo.com/member.php?u=46618 “>Buy Viagra
http://www.mixx.com/users/viagrapill “>buy viagra online<
http://ubuntuforums.org/member.php?u=580712 “>buy cialis online
http://www.flixster.com/user/levitraa “>buy levitra

For examples of this comment- (and guestbook-) spammer, see this search result (Google):
“u=46618” +ugo

The links in the userprofiles at the forums/communities above all goes to various pages at cheapest-drug.org.
cheapest-drug.org is hosted at 91.199.112.8, which is rx-partners.biz who has their own listing in Spamhaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64756

rx-partners.biz are sneaky. This probably does not violate their policies and their “affiliates” can happily continue with their comment spam. Or what, Jessica? (rx-partners won’t listen, jessicaeagloff@yahoo.co.uk comes back to me and their form submission does not work/or I can’t read their captcha. Not my problem)

Screenshot from cheapest-drug.org (click on it for a larger one):

Address lookup

canonical name cheapest-drug.org.
aliases
addresses 91.199.112.104

Domain Whois record

Queried whois.publicinterestregistry.net with “cheapest-drug.org“…

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:01-Jan-2009 00:28:52 UTC
Expiration Date:15-Nov-2009 17:56:41 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:OK
Registrant ID:ec82bbcdbb3
Registrant Name:WhoisGuard  Protected
Registrant Organization:WhoisGuard
Registrant Street1:8939 S. Sepulveda Blvd. #110 -
Registrant City:Westchester
Registrant State/Province:CA
Registrant Postal Code:90045
Registrant Country:US
Registrant Phone:+1.6613102107
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Admin ID:ec82bbcdbb3
Admin Name:WhoisGuard  Protected
Admin Organization:WhoisGuard
Admin Street1:8939 S. Sepulveda Blvd. #110 -
Admin City:Westchester
Admin State/Province:CA
Admin Postal Code:90045
Admin Country:US
Admin Phone:+1.6613102107
Admin Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Tech ID:ec82bbcdbb3
Tech Name:WhoisGuard  Protected
Tech Organization:WhoisGuard
Tech Street1:8939 S. Sepulveda Blvd. #110 -
Tech City:Westchester
Tech State/Province:CA
Tech Postal Code:90045
Tech Country:US
Tech Phone:+1.6613102107
Tech Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Name Server:ELD.STEELURK.COM
Name Server:ISA.STEELURK.COM

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.104“…

Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 104.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheapest-drug.org IN SOA
server: eld.steelurk.com
email: root.steelurk.com
serial: 2006669692
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
cheapest-drug.org IN NS eld.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN NS isa.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN A 91.199.112.104 1200s (00:20:00)

— end —

cheapest-drug.org

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:22-Jan-2008 13:37:03 UTC
Expiration Date:15-Nov-2008 17:56:41 UTC
Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd.
					d/b/a PublicDomainRegistry.com (R27-LROR)
Status:OK
Registrant ID:DI_7040912
Registrant Name:saniok
Registrant Organization:RX-partner
Registrant Street1:Alexandr cel bun 94/53
Registrant City:Hincesti
Registrant State/Province:0
Registrant Postal Code:3401
Registrant Country:MD
Registrant Phone:+373.079777957
Registrant Phone Ext.:
Registrant Email:saniok44@gmail.com

Admin ID:DI_7040912
Admin Name:saniok
Admin Organization:RX-partner
Admin Street1:Alexandr cel bun 94/53
Admin City:Hincesti
Admin State/Province:0
Admin Postal Code:3401
Admin Country:MD
Admin Phone:+373.079777957
Admin Email:saniok44@gmail.com

Tech ID:DI_7040912
Tech Name:saniok
Tech Organization:RX-partner
Tech Street1:Alexandr cel bun 94/53
Tech City:Hincesti
Tech State/Province:0
Tech Postal Code:3401
Tech Country:MD
Tech Phone:+373.079777957
Tech Phone Ext.:

Tech Email:saniok44@gmail.com
Name Server:ONLINE.RXP-FOREVER.COM
Name Server:LIVE.RXP-FOREVER.COM

; <<>> DiG 9.3.4-P1 <<>> cheapest-drug.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59717
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;cheapest-drug.org.             IN      A

;; ANSWER SECTION:
cheapest-drug.org.      1200    IN      A       91.199.112.8

;; AUTHORITY SECTION:
cheapest-drug.org.      1200    IN      NS      online.rxp-forever.com.
cheapest-drug.org.      1200    IN      NS      live.rxp-forever.com.

;; ADDITIONAL SECTION:
live.rxp-forever.com.   52213   IN      A       91.199.112.8
online.rxp-forever.com. 52213   IN      A       91.199.112.7

;; Query time: 201 msec
;; SERVER: 217.13.7.140#53(217.13.7.140)
;; WHEN: Sun May 18 14:58:55 2008
;; MSG SIZE  rcvd: 138

91.199.112.8

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
source:         RIPE # Filtered

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
source:         RIPE # Filtered

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

“jessica Eagloff”. That is rx-partners.biz.
See this SBL-listing:

Canadian Pharmacy – securedtabs.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


securedtabs

Address lookup

canonical name www.securetabs.com.
aliases
addresses 94.75.215.12

Domain Whois record

Queried whois.internic.net with “dom securetabs.com“…

Domain Name: SECURETABS.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.DNS-DIY.NET
Name Server: NS2.DNS-DIY.NET
Status: ok
Updated Date: 18-apr-2009
Creation Date: 22-jul-2007
Expiration Date: 22-jul-2010

Last update of whois database: Sat, 01 Aug 2009 22:54:01 UTC

Queried whois.onlinenic.com with “securetabs.com“…

Query error: TimedOut

Network Whois record

Queried whois.ripe.net with “-B 94.75.215.12“…

Information related to ‘94.75.215.0 – 94.75.215.255’

inetnum: 94.75.215.0 – 94.75.215.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: assignment LEASEWEB 20080723
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: LEASEWEB-MNT
changed: ripe@leaseweb.com 20080725
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

Information related to ‘94.75.192.0/18AS16265’

route: 94.75.192.0/18
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20080725
source: RIPE

DNS records

name class type data time to live
http://www.securetabs.com IN A 94.75.215.12 3600s (01:00:00)
securetabs.com IN SOA
server:
email: hostmaster.nameserver
serial: 16
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 5
3600s (01:00:00)
securetabs.com IN A 94.75.215.12 3600s (01:00:00)
securetabs.com IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
securetabs.com IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
securetabs.com IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
securetabs.com IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
securetabs.com IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
12.215.75.94.in-addr.arpa IN PTR hosted-by.leaseweb.com 86400s (1.00:00:00)

— end —

Canadian Pharmacy – Botnet Hosting – 1-888-298-7454

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Here is the url:

http://www.foresight.org/briefing/?buy-levitra-online-sildenafil-citrate&briefing=395

www.viagrasupply.com – Viagra Supply

Address lookup

canonical name www.foresight.org.
aliases
addresses 66.201.49.40

Domain Whois record

Queried whois.publicinterestregistry.net with “foresight.org“…

Domain ID:D825803-LROR
Domain Name:FORESIGHT.ORG
Created On:18-Feb-1994 05:00:00 UTC
Last Updated On:13-Feb-2009 20:49:17 UTC
Expiration Date:19-Feb-2010 05:00:00 UTC
Sponsoring Registrar:Dotster, Inc. (R34-LROR)
Status:OK
Registrant ID:DOT-Y3GBIH2PZG0C
Registrant Name:Foresight Institute
Registrant Organization:Foresight Institute
Registrant Street1:PO Box 61058
Registrant City:Palo Alto
Registrant State/Province:CA
Registrant Postal Code:94306
Registrant Country:US
Registrant Phone:+1.6502890860
Registrant Email:domaininfo@foresight.org
Admin ID:DOT-3HF0UXIJAJJF
Admin Name:Foresight Institute
Admin Organization:Foresight Institute
Admin Street1:PO Box 61058
Admin City:Palo Alto
Admin State/Province:CA
Admin Postal Code:94306
Admin Country:US
Admin Phone:+1.6502890860
Admin Email:domaininfo@foresight.org
Tech ID:DOT-UKF3EN547CDK
Tech Name:Foresight Institute
Tech Organization:Foresight Institute
Tech Street1:PO Box 61058
Tech City:Palo Alto
Tech State/Province:CA
Tech Postal Code:94306
Tech Country:US
Tech Phone:+1.6502890860
Tech Email:domaininfo@foresight.org
Name Server:NS1.NAMERESOLVE.COM
Name Server:NS2.NAMERESOLVE.COM
Name Server:NS3.NAMERESOLVE.COM
Name Server:NS4.NAMERESOLVE.COM

Network Whois record

Queried whois.arin.net with “!NET-66-201-49-0-1“…

CustName:   Tarlton Properties
Address:    1455 Adams Drive
City:       Menlo Park
StateProv:  CA
PostalCode: 94025
Country:    US
RegDate:    2008-06-18
Updated:    2008-06-18

NetRange:   66.201.49.0 - 66.201.49.127
CIDR:       66.201.49.0/25
OriginAS:   AS26803
NetName:    TARLTONPROPERTIESMBP
NetHandle:  NET-66-201-49-0-1
Parent:     NET-66-201-32-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-06-18
Updated:    2008-06-18

RTechHandle: BEV-ARIN
RTechName:   Evans, Bob
RTechPhone:  +1-650-330-0428
RTechEmail:  bob@fiberinternetcenter.com 

OrgNOCHandle: FIBER-ARIN
OrgNOCName:   FiberNOC
OrgNOCPhone:  +1-650-330-0428
OrgNOCEmail:  info@fiberinternetcenter.com

OrgTechHandle: BEV-ARIN
OrgTechName:   Evans, Bob
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  bob@fiberinternetcenter.com

OrgTechHandle: SWIPI-ARIN
OrgTechName:   Swip Information
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  swip@fiberinternetcenter.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.foresight.org IN A 66.201.49.40 3600s (01:00:00)
foresight.org IN SOA
server: ns1.nameresolve.com
email: hostmaster.foresight.org
serial: 2009080112
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
86400s (1.00:00:00)
foresight.org IN NS ns1.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns2.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns3.nameresolve.com 86400s (1.00:00:00)
foresight.org IN NS ns4.nameresolve.com 86400s (1.00:00:00)
foresight.org IN MX
preference: 20
exchange: snow.he.net
3600s (01:00:00)
foresight.org IN TXT “v=spf1″v=spf1 a mx a:thorin.netconcepts.com ~all” 86400s (1.00:00:00)
foresight.org IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx5.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx4.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
foresight.org IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
foresight.org IN A 66.201.49.40 3600s (01:00:00)
40.49.201.66.in-addr.arpa IN PTR foresight.org 1200s (00:20:00)

— end —

Address lookup

canonical name www.viagrasupply.com.
aliases
addresses 74.52.66.139

Domain Whois record

Queried whois.internic.net with “dom viagrasupply.com“…

   Domain Name: VIAGRASUPPLY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: DNS1.ANSWERABLE.COM
   Name Server: DNS2.ANSWERABLE.COM
   Status: ok
   Updated Date: 11-dec-2008
   Creation Date: 07-aug-2008
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Sat, 01 Aug 2009 22:52:14 UTC <<<

Queried whois.onlinenic.com with “viagrasupply.com“…

Query error: TimedOut

Network Whois record

Queried whois.arin.net with “74.52.66.139“…

OrgName:    ThePlanet.com Internet Services, Inc.
OrgID:      TPCM
Address:    315 Capitol
Address:    Suite 205
City:       Houston
StateProv:  TX
PostalCode: 77002
Country:    US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange:   74.52.0.0 - 74.55.255.255
CIDR:       74.52.0.0/14
OriginAS:   AS13749,  AS21844,  AS30315,  AS36420
NetName:    NETBLK-THEPLANET-BLK-14
NetHandle:  NET-74-52-0-0-1
Parent:     NET-74-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate:    2006-02-17
Updated:    2009-02-24

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560
RAbuseEmail:  abuse@theplanet.com 

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3555
RNOCEmail:  noc@theplanet.com 

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-214-782-7800
RTechEmail:  admins@theplanet.com 

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560
OrgAbuseEmail:  abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3555
OrgNOCEmail:  noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-214-782-7800
OrgTechEmail:  admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name class type data time to live
http://www.viagrasupply.com IN A 74.52.66.139 38380s (10:39:40)
viagrasupply.com IN A 74.52.66.139 38400s (10:40:00)
viagrasupply.com IN NS dns2.answerable.com 38400s (10:40:00)
viagrasupply.com IN SOA
server: dns1.answerable.com
email: claytonrand.hotmail.com
serial: 2008100502
refresh: 7200
retry: 7200
expire: 2419200
minimum ttl: 38400
86400s (1.00:00:00)
viagrasupply.com IN NS dns4.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns3.answerable.com 38400s (10:40:00)
viagrasupply.com IN NS dns1.answerable.com 38400s (10:40:00)
139.66.52.74.in-addr.arpa IN PTR 8b.42.344a.static.theplanet.com 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – cheaprxpharmonline.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

cheaprxpharmonline

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
122.56.218.44 New Zealand (Auckland)* Whois Google DNSStuff Urgentmessage.org
207.115.20.183 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Harold Messer Wed Jul 29 18:44:25 2009
Return-Path:
Authentication-Results: mta153.sbc.mail.mud.yahoo.com from=sm.luth.se; domainkeys=neutral (no sig); from=sm.luth.se; dkim=neutral (no sig)
Received: from 122.56.218.44 (EHLO flpi181.prodigy.net) (207.115.20.183)
by mta153.sbc.mail.mud.yahoo.com with SMTP; Wed, 29 Jul 2009 18:44:40 -0700
Received: from 7n8k622 (122-56-218-44.mobile.telecom.co.nz [122.56.218.44] (may be forged))
by flpi181.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6U1hWEk003354;
Wed, 29 Jul 2009 18:44:37 -0700
Message-ID: <000701ca10b7$44cbffc0$627e0202@sm.luth.se>
Reply-To: “Harold Messer” <haroldmesser_zw@sm.luth.se
From: “Harold Messer” <haroldmesser_zw@sm.luth.se
To: , ,
Subject: Need some help focusing?.. get Ritalin!
Date: Wed, 29 Jul 2009 18:44:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 219

VicodinES, XanaxAmbien, Codeine, Phentermin and many more!
No Doctor or Prescription Needed! Brand & Generic Names Available!
Fast Trackable USPS Shipping!
Browse Our Site Today –> http://cheaprxpharmonline.com

SmartFilter Category: Not Categorized
Make Category Suggestions
IP: 60.12.166.154
Nameservers: ns1.cheaprxpharmonline.comns2.cheaprxpharmonline.com

ns3.cheaprxpharmonline.com

ns4.cheaprxpharmonline.com

nameservers missing in zone
hot1gaming.com X X
ns1.bd4ns.com X X
ns1.cheaprxpharmonline.com


X X
ns2.cheaprxpharmonline.com


X X
ns2.ef2ns.com X X
ns3.br4ns.com X X
ns3.cheaprxpharmonline.com


X X
ns4.cheaprxpharmonline.com


X X
sdavaiteres.com

hostnames sharing ip with a-records
*.sdavaiteres.com


hot1gaming.com


ns1.listendns.com


ns1.sdavaiteres.com


ns2.sdavaiteres.com


ns3.fa6ns.com


ns3.sdavaiteres.com


ns4.sdavaiteres.com


sdavaiteres.com


www.softokors.com

Address lookup

canonical name cheaprxpharmonline.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmonline.com“…

   Domain Name: CHEAPRXPHARMONLINE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.BD4NS.COM
   Name Server: NS2.EF2NS.COM
   Name Server: NS3.BR4NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-jul-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

 Last update of whois database: Thu, 30 Jul 2009 15:12:12 UTC <<<

Queried whois.ename.com with “cheaprxpharmonline.com“…

Domain Name : cheaprxpharmonline.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.bd4ns.com
ns2.ef2ns.com
ns3.br4ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheaprxpharmonline.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns3.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns2.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns1.cheaprxpharmonline.com 86400s (1.00:00:00)
cheaprxpharmonline.com IN A 60.12.166.154 86400s (1.00:00:00)
cheaprxpharmonline.com IN NS ns4.cheaprxpharmonline.com 86400s (1.00:00:00)

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: ConnectionRefused
HTTP – 80
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —

Candian Pharmacy – Spam Sites

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
omhca.com
prescriptionspoint.com

74.125.45.100 test1111.com
74.125.45.100 test1112.com
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 http://www.getantivirusplusnow.com
74.125.45.100 http://www.secure-plus-payments.com
74.125.45.100 http://www.securesoftwarebill.com

Generic-Pharmacy – generic-pharmacy.net

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.


best-generic

eneric-Pharmacy.net: Superior quality at unbeatable prices!
We are proud up to offer up to 80% off on safe and approved pharmaceutical products that meet the highest WHO (World Health Organization) standards. Since 2002, we have been dedicated to providing our customers with the highest quality products offered in an affordable and easy-to-use service. Over 250,000 satisfied customers globally have benefited from our broad array of generic medications; we invite you to become a satisfied customer as well! Special offer for returning customers…

Using 17 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

Domain Name: generic-pharmacy.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2017/07/17 UTC
Record created on 2003/07/17 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/07 13:43:45 PST <<<

Network Whois record

Queried whois.arin.net with "72.52.5.6"...
OrgName:    Prolexic Technologies, Inc.
OrgID:      PROLE
Address:    Prolexic Technologies
Address:    1930 Harrison Street
City:       Hollywood
StateProv:  FL
PostalCode: 33020
Country:    US

NetRange:   72.52.0.0 - 72.52.63.255
CIDR:       72.52.0.0/18
NetName:    PROLEXIC
NetHandle:  NET-72-52-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.PROLEXIC.NET
NameServer: NS2.PROLEXIC.NET
Comment:    http://www.prolexic.com / NOC hours are 24/7
RegDate:    2005-07-11
Updated:    2007-06-27

RTechHandle: HOSTM528-ARIN
RTechName:   Hostmaster
RTechPhone:  +1-866-800-0366
RTechEmail:  hostmaster@prolexic.com 

OrgTechHandle: HOSTM528-ARIN
OrgTechName:   Hostmaster
OrgTechPhone:  +1-866-800-0366
OrgTechEmail:  hostmaster@prolexic.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

name class type data time to live
generic-pharmacy.net IN A 72.52.5.6 1800s (00:30:00)
generic-pharmacy.net IN MX
preference: 20
exchange: mx2.emailsrvr.com
1800s (00:30:00)
generic-pharmacy.net IN MX
preference: 10
exchange: mx1.emailsrvr.com
1800s (00:30:00)
generic-pharmacy.net IN NS ns0.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns2.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns4.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns1.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN NS ns3.dnsmadeeasy.com 86400s (1.00:00:00)
generic-pharmacy.net IN SOA
server: ns0.dnsmadeeasy.com
email: dns.dnsmadeeasy.com
serial: 2006010220
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)
6.5.52.72.in-addr.arpa IN PTR unknown.prolexic.com 85680s (23:48:00)

Traceroute

Tracing route to generic-pharmacy.net [72.52.5.6]

hop rtt rtt rtt ip address fully qualified domain name
1 1 1 0 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.25 et3-2.ibr04.dllstx3.theplanet.com
5 0 0 0 64.208.170.197 gigabitethernet7-3.ar2.dal2.gblx.net
6 30 30 30 207.138.122.214 wbs-connect-miami.tengigabitethernet2-4.1121.ar1.mia2.gblx.net
7 30 30 30 209.200.132.34 blackhole.prolexic.com
8 30 30 30 72.52.5.6 unknown.prolexic.com

Canadian Pharmacy – www.bestliferx.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act


bestlifeRx

pharmrxdirect.com
pharmarxdirect.com
JumpRx.com
bestbillprice.com
globalmeds24.com

877-334-5579

Address lookup

canonical name bestliferx.com.
aliases
addresses 74.213.177.13

Domain Whois record

Queried whois.internic.net with “dom bestliferx.com“…

Domain Name: BESTLIFERX.COM
Registrar: EASYDNS TECHNOLOGIES, INC.
Whois Server: whois.easydns.com
Referral URL: http://www.easydns.com
Name Server: NS1.HUSHTECH.NET
Name Server: NS2.HUSHTECH.NET
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 18-jul-2009
Creation Date: 13-apr-2006
Expiration Date: 13-apr-2012

Last update of whois database: Fri, 24 Jul 2009 11:44:18 UTC

Queried whois.easydns.com with “bestliferx.com“…

Registrant:
BestLifeRx.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU

Domain name: BESTLIFERX.COM

Administrative Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Technical Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Registrar of Record: easyDNS Technologies, Inc.
Record last updated on 18-Jul-2009.
Record expires on 13-Apr-2012.
Record created on 13-Apr-2006.

Domain servers in listed order:
NS2.HUSHTECH.NET
NS1.HUSHTECH.NET

Domain status: clientTransferProhibited
clientUpdateProhibited

This domain is being managed via EASYDNS
The DNS Hosting specialists since 1998
DNS Hosting / Dynamic DNS / Failover DNS / DNS Anycast
Unconditional Guarantee, No tricks, No gimmicks: http://easyDNS.com
System Status Updates: http://easyurl.net/easystatus
( Or Follow us on Twitter http://twitter.com/easydns )

You have 4 lookups left today

Network Whois record

Queried whois.arin.net with “!NET-74-213-176-0-1“…

CustName: Momentum Advanced Solution
Address: 155 Commerce Valley Drive East
City: Thornhill
StateProv: ON
PostalCode: L3T-7T2
Country: CA
RegDate: 2009-01-13
Updated: 2009-01-13

NetRange: 74.213.176.0 – 74.213.177.255
CIDR: 74.213.176.0/23
OriginAS: AS23498
NetName: CDSI-MOMENTUMADVANCEDSOLUTION
NetHandle: NET-74-213-176-0-1
Parent: NET-74-213-160-0-1
NetType: Reassigned
Comment:
RegDate: 2009-01-13
Updated: 2009-01-13

OrgAbuseHandle: ATP1-ARIN
OrgAbuseName: ARIN Tech POC
OrgAbusePhone: +1-416-840-5978
OrgAbuseEmail: arintech@cogecodata.com

OrgNOCHandle: CDSIN-ARIN
OrgNOCName: CDSI NOC
OrgNOCPhone: +1-416-542-2525
OrgNOCEmail: arintech@cogecodata.com

OrgTechHandle: ATP1-ARIN
OrgTechName: ARIN Tech POC
OrgTechPhone: +1-416-840-5978
OrgTechEmail: arintech@cogecodata.com

# ARIN WHOIS database, last updated 2009-07-23 20:00

DNS records

name class type data time to live
bestliferx.com IN MX
preference: 0
exchange: server305.hushtech.net
3600s (01:00:00)
bestliferx.com IN SOA
server: ns1.hushtech.net
email: webadminrx.gmail.com
serial: 2009061907
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
bestliferx.com IN NS ns2.hushtech.net 86400s (1.00:00:00)
bestliferx.com IN NS ns1.hushtech.net 86400s (1.00:00:00)
bestliferx.com IN A 74.213.177.13 3600s (01:00:00)
13.177.213.74.in-addr.arpa IN CNAME 13.0-24.177.213.74.in-addr.arpa 86400s (1.00:00:00)
13.0-24.177.213.74.in-addr.arpa IN PTR 74-213-177-13.ultrahosting.com 3600s (01:00:00)

— end —

Canadian Pharmacy Spam – http://cheaprx02.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
78.251.40.213 France* Whois Google DNSStuff Urgentmessage.org
207.115.20.133 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Clarence Overton Sat Jul 18 05:37:31 2009
Return-Path:
Authentication-Results: mta131.sbc.mail.re2.yahoo.com from=addenbrookes.nhs.uk; domainkeys=neutral (no sig); from=addenbrookes.nhs.uk; dkim=neutral (no sig)
Received: from 78.251.40.213 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta131.sbc.mail.re2.yahoo.com with SMTP; Sat, 18 Jul 2009 06:41:41 -0700
Received: from x5lwy53 ([78.251.40.213])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6IDfOH8020044;
Sat, 18 Jul 2009 06:41:39 -0700
Message-ID: <000701ca07a4$84a00130$627e2c7a@addenbrookes.nhs.uk>
Reply-To: “Clarence Overton”  clarenceovertonqc@addenbrookes.nhs.uk
From: “Clarence Overton”  <clarenceovertonqc@addenbrookes.nhs.uk>
To: ScamBuster aka ScamFraudAlert.com
Subject: great deals goin on
Date: Sat, 18 Jul 2009 08:37:31 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

lookup failed cheaprx02.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom cheaprx02.com“…

   Domain Name: CHEAPRX02.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FE5NS.COM
   Name Server: SP536.DELETEDNS.COM
   Status: clientHold
   Status: clientTransferProhibited
   Updated Date: 19-jul-2009
   Creation Date: 27-jun-2009
   Expiration Date: 27-jun-2010

Last update of whois database: Mon, 20 Jul 2009 05:34:57 UTC

Queried whois.onlinenic.com with “cheaprx02.com“…

Registrant:
	 Serpino Berbeto ad6@safe-mail.net +1.2128848801
	 Serpino Berbeto
	 403 po box
	 New York,NY,US 10037

Domain Name:cheaprx02.com
Record last updated at 2009-07-16 19:25:01
Record created on 2009/6/27
Record expired on 2010/6/27

Domain servers in listed order:
	 ns1.fe5ns.com 	 ns2.re3ns.com 

Administrator:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Technical Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Billing Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
cheaprx02.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprx02.com IN A 220.248.172.39 86400s (1.00:00:00)
cheaprx02.com IN NS ns1.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns2.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns3.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns4.cheaprx02.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: ns1.99999ns.com
ns1.thebestusrx.com
ns1.thebestusrxnow.com
ns1.usacheapmeds.com
ns2.hotrxlive.com
ns2.thebestusrx.com
ns4.tertorests.com
acounterstas.com
afropeloses.com
awepolikars.com
dertorests.com
tertorests.com
yertorests.com
sertorests.com
sategonovas.com
aredouters.com
aertorests.com
pertorests.com
uertorests.com
fertorests.com
iertorests.com
oertorests.com
gemenysofts.com
friokeares.com
wallouters.com
qertorests.com
softenouss.com
rertorests.com
bartolosofts.com
verobounss.com
adremacolares.com
grefoulsofs.com
wertorests.com
hropokons.com
jimenesouns.com
grestosofts.com

“Canadian/European PharmacyCanadian Healthcare scam – selfsnow.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name selfsnow.com.
aliases
addresses 218.75.144.6
60.191.239.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom selfsnow.com“…

   Domain Name: SELFSNOW.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.WHICHDOLLAR.IN
   Name Server: NS2.WHICHDOLLAR.IN
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: ok
   Updated Date: 21-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

 Last update of whois database: Sun, 12 Jul 2009 17:45:30 UTC <<<

Queried whois.namerich.cn with “selfsnow.com“…

 DomainName : selfsnow.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.WHICHDOLLAR.IN
Name Server......................NS3.BOTHSTART.RU
Name Server......................NS5.CREASEON.PL
Name Server......................NS2.WHICHDOLLAR.IN
Name Server......................NS4.BOTHSTART.RU
Name Server......................NS6.CREASEON.PL
Status...........................ok
Creation  Date ..................2009-06-15
Expiration Date .................2010-06-15
Last Update  Date ...............2009-06-21

Registrant ID ...................V-X-57514-12921
Registrant Name .................ZHANG MING
Registrant Organization .........ZHANG MING
Registrant Address ..............HAIXINGNANLU26
Registrant City..................SZ
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........215039
Registrant Phone Number .........+86.051269124125
Registrant Fax ..................+86.051269124125
Registrant Email ................sboameh@163.com

Administrative ID ...............V-X-57514-12921
Administrative Name .............ZHANG MING
Administrative Organization .....ZHANG MING
Administrative Address ..........HAIXINGNANLU26
Administrative City..............SZ
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......215039
Administrative Phone Number .....+86.051269124125
Administrative Fax ..............+86.051269124125
Administrative Email ............sboameh@163.com

Billing ID ......................V-X-57514-12921
Billing Name ....................ZHANG MING
Billing Organization ............ZHANG MING
Billing Address .................HAIXINGNANLU26
Billing City.....................SZ
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............215039
Billing Phone Number ............+86.051269124125
Billing Fax .....................+86.051269124125
Billing Email ...................sboameh@163.com

Technical ID ....................V-X-57514-12921
Technical Name ..................ZHANG MING
Technical Organization...........ZHANG MING
Technical Address ...............HAIXINGNANLU26
Technical City...................SZ
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........215039
Technical Phone Number ..........+86.051269124125
Technical Fax ...................+86.051269124125
Technical Email .................sboameh@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
selfsnow.com IN A 218.75.144.6 10800s (03:00:00)
selfsnow.com IN A 60.191.239.150 10800s (03:00:00)
selfsnow.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Domains Listing

SmartFilter Category: Malicious Sites
Make Category Suggestions Namerservers on IP: dns1.nightmodest.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.carryfit.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.duckspruce.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.inchkept.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.loneextol.com
dns3.luckyoxygen.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.overbehind.com
dns3.pamperextra.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.regionthe.com
dns3.relaxrange.com
dns3.ridebought.com
dns3.ropebird.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns4.nightmodest.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns1.112911.org
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.bedplain.com
ns1.bedsing.com
ns1.busyorder.com
ns1.chartflat.in
ns1.deluxecrop.com
ns1.exceptexotic.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.felttwenty.com
ns1.fromview.com
ns1.gonemade.com
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.moralgrand.com
ns1.noticezap.com
ns1.okhalf.com
ns1.pickcool.in

Canadian Pharmacy – pridegive.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

An Incredible Canadian Pharmacy is available at your Fingertips!
NoDoctor Needed! Browse our Site Today! -> http://pridegive.com

Address lookup

canonical name pridegive.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150
124.42.91.162

Domain Whois record

Queried whois.internic.net with “dom pridegive.com“…

   Domain Name: PRIDEGIVE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.MIGHTPAGE.COM
   Name Server: NS2.MIGHTPAGE.COM
   Name Server: NS3.LETJEWEL.RU
   Name Server: NS4.LETJEWEL.RU
   Name Server: NS5.LISTGENTLE.COM
   Name Server: NS6.LISTGENTLE.COM
   Status: ok
   Updated Date: 04-jul-2009
   Creation Date: 04-jul-2009
   Expiration Date: 04-jul-2010

Last update of whois database: Fri, 10 Jul 2009 06:03:45 UTC <<<

Queried whois.namerich.cn with “pridegive.com“…

 DomainName : pridegive.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LETJEWEL.RU
Name Server......................NS3.LETJEWEL.RU
Name Server......................NS1.MIGHTPAGE.COM
Name Server......................NS2.MIGHTPAGE.COM
Name Server......................NS5.LISTGENTLE.COM
Name Server......................NS6.LISTGENTLE.COM
Status...........................ok
Creation  Date ..................2009-07-04
Expiration Date .................2010-07-04
Last Update  Date ...............2009-07-04

Registrant ID ...................V-X-58730-14742
Registrant Name .................QIAO GUANGLIANG
Registrant Organization .........QIAO GUANGLIANG
Registrant Address ..............HUANZHUGUANGCHANG31
Registrant City..................CD
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........415063
Registrant Phone Number .........+86.073657561248
Registrant Fax ..................+86.073657561248
Registrant Email ................opjakeg@163.com

Administrative ID ...............V-X-58730-14742
Administrative Name .............QIAO GUANGLIANG
Administrative Organization .....QIAO GUANGLIANG
Administrative Address ..........HUANZHUGUANGCHANG31
Administrative City..............CD
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......415063
Administrative Phone Number .....+86.073657561248
Administrative Fax ..............+86.073657561248
Administrative Email ............opjakeg@163.com

Billing ID ......................V-X-58730-14742
Billing Name ....................QIAO GUANGLIANG
Billing Organization ............QIAO GUANGLIANG
Billing Address .................HUANZHUGUANGCHANG31
Billing City.....................CD
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............415063
Billing Phone Number ............+86.073657561248
Billing Fax .....................+86.073657561248
Billing Email ...................opjakeg@163.com

Technical ID ....................V-X-58730-14742
Technical Name ..................QIAO GUANGLIANG
Technical Organization...........QIAO GUANGLIANG
Technical Address ...............HUANZHUGUANGCHANG31
Technical City...................CD
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........415063
Technical Phone Number ..........+86.073657561248
Technical Fax ...................+86.073657561248
Technical Email .................opjakeg@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
pridegive.com IN A 60.191.239.150 10800s (03:00:00)
pridegive.com IN A 203.93.208.86 10800s (03:00:00)
pridegive.com IN A 218.75.144.6 10800s (03:00:00)
pridegive.com IN A 124.42.91.162 10800s (03:00:00)

— end —


Canadian Pharmacy – ottawadrugs.com

Canadian Pharmacy A conartist and a fraud Jogeshwari West Mumaia – 400 060 India

Canadian Pharmacy
http://ottawadrugs.com/
Nationwide,
U.S.A.

I ordered 30 Viagra 100 mg tablets, plus 4 free ones that you advertised on the internet and I just received 34 sildenafil100 mg tablets from you. Viagra is a brand name product made by Pfizer, Inc. and the sildenafil is a generic product that can be made by any company without the controls of the FDA. There is no mention about Viagra anywhere on the package or the pill itself. The package was sent from Indiaand was wrapped in an India newspaper!

The pharmaceutical agency you mentioned in your advertisement Licensed by The College of Pharmacist of British Columbia is a fraudulent location. No individual can contact them by writing to the college at 200-1765 West 8th Ave. Vancouver, BCCanada V6J 5C6 or contact them at +1 (210) 888-9089. You also state that please, keep your order I.D. every time you make a call, and that statement is which just another misrepresentation!

You stated in order confirmation:

Attention, Please!
Any charge-backs to credit cards without communicating with us first are treated as Fraudulent. All details, including original order form, username, IP addresses and access logs bearing members IP addresses and/or e-mail addresses and username will be forwarded to the issuing Credit Card Company (Fraud Division), F.B.I. (Credit Card Fraud Division) and all Credit Reference Agencies which will probably result in a query into members credit card payment habits. Credit Card Fraud is a serious crime and will not be tolerated. YES indeed, YOUR FRAUD is a crime.

There is NOT a country in the world that would license you and/or your company as pharmacy, especially in Canada and/or the United States. Please tell me where to send you back this package for a full credit on my charge card. This is my third request!

You are fraudulently misrepresenting a company and the products. I am going to challenge this charge with American Express and tell them of the internet fraud you are perpetrating. PLEASE CALL the F.B.I. and American Express to let them know about your scam. Hopefully American Express will terminate your contract and the F.B.I. will prosecute you.

Gary
Westbrook, Connecticut
U.S.A.

Canadian Pharmacy Spam – bluepillusa.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

BluePillusa

Address lookup

canonical name bluepillusa.com.
aliases
addresses 78.159.118.218

Domain Whois record

Queried whois.internic.net with “dom bluepillusa.com“…

   Domain Name: BLUEPILLUSA.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS3.01ISP.COM
   Name Server: NS4.01ISP.NET
   Status: clientTransferProhibited
   Updated Date: 21-oct-2008
   Creation Date: 21-oct-2008
   Expiration Date: 21-oct-2009

>>> Last update of whois database: Mon, 06 Jul 2009 03:04:10 UTC <<<

Queried whois.todaynic.com with “bluepillusa.com“…

Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: bluepillusa.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Alexey M. Arkhipov
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Administrative Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500
Phone: +7.9611327925
Fax: +7.9611327925
Email: arkipal@gmail.com

Technical Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Nameserver Information:
    ns3.01isp.com
    ns4.01isp.net

Create: 2008-10-22 00:20:06
Update: 2008-10-22
Expired: 2009-10-22
QueryTimes: 80

If any of the information above is inaccurate, you must correct it by visiting our website or contact us.
(If your review indicates that all of the information above is accurate, you do not need to take any action.)
Please remember that under the terms of your registration agreement, the provision of false Whois information
can be grounds for cancellation of your domain name registration.
Todaynic.com,Inc. reserves the right to modify these terms at any time.

Network Whois record

Queried whois.ripe.net with “-B 78.159.118.218“…

% Information related to '78.159.118.0 - 78.159.121.255'

inetnum:        78.159.118.0 - 78.159.121.255
netname:        NETDIRECT-NET
descr:          netdirekt e.K.
remarks:        INFRA-AW
country:        DE
admin-c:        WW200-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20080311
source:         RIPE

person:       Wiethold Wagner
address:      netdirekt e. K.
address:      Kleyer Strasse 79 / Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       info@netdirekt.de
nic-hdl:      WW200-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '78.159.96.0/19AS28753'

route:	        78.159.96.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20071011
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
bluepillusa.com IN SOA
server: ns3.01isp.com
email: webmaster.now.net.cn
serial: 2008102210
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 7200
7200s (02:00:00)
bluepillusa.com IN NS ns3.01isp.com 43200s (12:00:00)
bluepillusa.com IN NS ns4.01isp.net 43200s (12:00:00)
bluepillusa.com IN A 78.159.118.218 7200s (02:00:00)
218.118.159.78.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 12345
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN PTR 78-159-118-218.internetserviceteam.com 100000s (1.03:46:40)

— end —

AUTH WHOiS]
[Querying whois.verisign-grs.comhttp://whois.verisign-grs.com]
[whois.verisign-grs.comhttp://whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.nethttp://www.internic.net
for detailed information.

Domain Name: RXMEDS4ALL.COMhttp://RXMEDS4ALL.COM
Registrar: TODAYNIC.COMhttp://TODAYNIC.COM, INC.
Whois Server: whois.todaynic.comhttp://whois.todaynic.com
Referral URL: http://www.NOW.CNhttp://www.NOW.CN
Name Server: NS1.FREEDNS.WShttp://NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WShttp://NS2.FREEDNS.WS
Status: clientTransferProhibited
Updated Date: 26-nov-2008
Creation Date: 13-feb-2008
Expiration Date: 13-feb-2010

>>> Last update of whois database: Sat, 07 Feb 2009 09:50:51 EST

Canadian Pharmacy – www.online-generic-pills.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


Address lookup

canonical name online-generic-pills.com.
aliases http://www.online-generic-pills.com
addresses 174.132.167.8

Domain Whois record

Queried whois.internic.net with “dom online-generic-pills.com“…

Domain Name: ONLINE-GENERIC-PILLS.COM
Registrar: DYNADOT, LLC
Whois Server: whois.dynadot.com
Referral URL: http://www.dynadot.com
Name Server: NS1403.HOSTGATOR.COM
Name Server: NS1404.HOSTGATOR.COM
Status: clientTransferProhibited
Updated Date: 23-apr-2009
Creation Date: 23-apr-2009
Expiration Date: 23-apr-2010

Last update of whois database: Sun, 05 Jul 2009 4:31:30 UTC

Queried whois.dynadot.com with “online-generic-pills.com“…

Domain Name: online-generic-pills.com
Registered at http://www.dynadot.com

Registrant:
Dan Dan
Adress 1
Citytown 60001
United States

Administrative Contact:
Dan Dan
Adress 1
Citytown 60001
United States
dan113dan113@gmail.com
+1 32412534

Technical Contact:
Dan Dan
Adress 1
Citytown 60001
United States
dan113dan113@gmail.com
+1 32412534

Record expires on 2010/04/23 UTC
Record created on 2009/04/23 UTC

Domain servers in listed order:
ns1403.hostgator.com
ns1404.hostgator.com

>>> Last update of whois database: 2009/07/05 07:28:45 PST

Network Whois record

Queried whois.arin.net with “174.132.167.8“…

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 174.132.0.0 – 174.133.255.255
CIDR: 174.132.0.0/15
OriginAS: AS13749, AS21844, AS30315, AS36420
NetName: NETBLK-THEPLANET-BLK-15
NetHandle: NET-174-132-0-0-1
Parent: NET-174-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate: 2008-06-17
Updated: 2008-06-17

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-04 19:10

DNS records

name class type data time to live
http://www.online-generic-pills.com IN CNAME online-generic-pills.com 14400s (04:00:00)
online-generic-pills.com IN TXT v=spf1 a mx include:websitewelcome.com ~all 14400s (04:00:00)
online-generic-pills.com IN MX
preference: 0
exchange: online-generic-pills.com
14400s (04:00:00)
online-generic-pills.com IN SOA
server: ns1403.hostgator.com
email: root.gator702.hostgator.com
serial: 2009042301
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
online-generic-pills.com IN NS ns1403.hostgator.com 86400s (1.00:00:00)
online-generic-pills.com IN NS ns1404.hostgator.com 86400s (1.00:00:00)
online-generic-pills.com IN A 174.132.167.8 14400s (04:00:00)
8.167.132.174.in-addr.arpa IN PTR 8.a7.84ae.static.theplanet.com 79794s (22:09:54)

— end —

Stolen Identity Canadian Pharmacy – pfizer-incorporated.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

pfizer-incorporated

Address lookup

canonical name pfizer-incorporated.com.
aliases
addresses 91.207.4.202

Domain Whois record

Queried whois.internic.net with “dom pfizer-incorporated.com“…

   Domain Name: PFIZER-INCORPORATED.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.PFIZER-INCORPORATED.COM
   Name Server: NS2.PFIZER-INCORPORATED.COM
   Name Server: NS3.PFIZER-INCORPORATED.COM
   Name Server: NS4.PFIZER-INCORPORATED.COM
   Status: clientTransferProhibited
   Updated Date: 02-jul-2009
   Creation Date: 02-jul-2009
   Expiration Date: 02-jul-2010

>>> Last update of whois database: Sat, 04 Jul 2009 11:41:46 UTC <<<

Queried whois.onlinenic.com with “pfizer-incorporated.com“…

Registrant:
	 Deloris P Perticone fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by +7.4294967295
	 N/A
	 ul. Tsentral'naya, d. 18, kv. 11
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:pfizer-incorporated.com 
Record last updated at 2009-07-02 10:19:48
Record created on 2009/7/2
Record expired on 2010/7/2

Domain servers in listed order:
	 ns1.pfizer-incorporated.com 	 ns2.pfizer-incorporated.com 

Administrator:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto 
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.ripe.net with “-B 91.207.4.202“…

% Information related to '91.207.4.0 - 91.207.9.255'

inetnum:        91.207.4.0 - 91.207.9.255
netname:        SteepHost-DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-63-618-45-00
descr:          +380-67-375-27-03
remarks:        Please send all spam/scam/fraud abuse to abuse@steephost.com
country:        UA
org:            ORG-SH7-RIPE
admin-c:        SH3855-RIPE
tech-c:         SH3855-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         SH3855-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     SH3855-MNT
mnt-domains:    SH3855-MNT
changed:        hostmaster@ripe.net 20080911
source:         RIPE

organisation:   ORG-SH7-RIPE
org-name:       SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
org-type:       OTHER
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
mnt-ref:        SH3855-MNT
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
changed:        hostmaster@ripe.net 20080911
source:         RIPE

role:           SteepHost DC-UA
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
admin-c:        AK5709-RIPE
tech-c:         AK5709-RIPE
nic-hdl:        SH3855-RIPE
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
source:         RIPE

% Information related to '91.207.4.0/22AS47142'

route:          91.207.4.0/22
descr:          SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-67-375-27-03
descr:          +380-63-618-45-00
descr:          Please send all spam/scam/fraud abuse to abuse@steephost.com
origin:         AS47142
mnt-by:         SH3855-MNT
changed:        noc@steephost.com 20080911
source:         RIPE

DNS records

DNS query for 202.4.207.91.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
pfizer-incorporated.com IN A 91.207.4.202 3600s (01:00:00)

— end —

MyNewCanadianPharmacy – www.bulnalei.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

MyNewCanadianPharmacy

Address lookup

canonical name bulnalei.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bulnalei.net IN SOA
server: ns1.bulnalei.net
email: admin.bulnalei.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
bulnalei.net IN NS ns1.bulnalei.net 600s (00:10:00)
bulnalei.net IN NS ns2.bulnalei.net 600s (00:10:00)
bulnalei.net IN MX
preference: 10
exchange: mail.bulnalei.net
600s (00:10:00)
bulnalei.net IN A 212.174.200.111 600s (00:10:00)

— end —

Canadian Pharmacy Spam – magnetaroma.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
202.22.220.7 Japan (Kiryu)* Whois Google DNSStuff Urgentmessage.org
207.115.20.191 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
7.220.22.202 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://magnetaroma.com

From Augustine Chung Mon Jun 29 04:16:55 2009
Return-Path:  <a_chung_jh@charters.com.au>
Authentication-Results: mta165.sbc.mail.mud.yahoo.com from=charters.com.au; domainkeys=neutral (no sig); from=charters.com.au; dkim=neutral (no sig)
Received: from 202.22.220.7 (EHLO flpi189.prodigy.net) (207.115.20.191)
by mta165.sbc.mail.mud.yahoo.com with SMTP; Mon, 29 Jun 2009 04:18:55 -0700
Received: from x687a82 (7.220.22.202.ktv.ne.jp [202.22.220.7])
by flpi189.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5TBHsNa023999;
Mon, 29 Jun 2009 04:18:52 -0700
Message-ID: <000701c9f8ab$1c7f4a50$d828ea62@charters.com.au>
Reply-To: “Augustine Chung”  <a_chung_jh@charters.com.au>
From: “Augustine Chung”   <a_chung_jh@charters.com.au>
To:
Subject: Want great sex? Get..
Date: Mon, 29 Jun 2009 06:16:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

Address lookup

canonical name magnetaroma.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom magnetaroma.com“…

   Domain Name: MAGNETAROMA.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:00:22 UTC <<<

Queried whois.namerich.cn with “magnetaroma.com“…

 DomainName : magnetaroma.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
magnetaroma.com IN A 218.75.144.6 10800s (03:00:00)
magnetaroma.com IN A 119.39.238.2 10800s (03:00:00)
magnetaroma.com IN A 203.93.208.86 10800s (03:00:00)
magnetaroma.com IN A 222.241.150.146 10800s (03:00:00)
magnetaroma.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy Spam – CANADIAN-HEALTHCARE-SHOP.COM

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration



DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada


canadian-healtcare-shop

1 (210) 888-9089

Address lookup

canonical name canadian-healthcare-shop.com.
aliases
addresses 195.95.155.11

Domain Whois record

Queried whois.internic.net with “dom canadian-healthcare-shop.com“…

   Domain Name: CANADIAN-HEALTHCARE-SHOP.COM
   Registrar: EURODNS S.A
   Whois Server: whois.eurodns.com
   Referral URL: http://www.eurodns.com
   Name Server: NS1.EURODNS.COM
   Name Server: NS2.EURODNS.COM
   Status: clientTransferProhibited
   Updated Date: 04-feb-2009
   Creation Date: 04-feb-2009
   Expiration Date: 04-feb-2010

>>> Last update of whois database: Thu, 02 Jul 2009 04:48:12 UTC <<<

Queried whois.eurodns.com with “canadian-healthcare-shop.com“…

Domain: canadian-healthcare-shop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Technical Contact:
Company:
Name: Sokoloff Seurgey
Address: 177 Whalley Range
City: Blackburn
Country: UNITED STATES
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: health.three@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.11“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 11.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-healthcare-shop.com IN A 195.95.155.11 700s (00:11:40)
canadian-healthcare-shop.com IN MX
preference: 10
exchange: mail.canadian-healthcare-shop.com
3600s (01:00:00)
canadian-healthcare-shop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009051500
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)
canadian-healthcare-shop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dns1.nightmodest.com
dns4.nightmodest.com
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.againseat.com
ns1.bedplain.com
ns1.busyorder.com
ns1.chartflat.in
ns1.exceptexotic.com
ns1.fabledmaxi.com
ns1.felttwenty.com
ns1.moralgrand.com
ns1.noticezap.com
ns1.pickcool.in
ns1.poundanger.com
ns1.saidcold.com
ns1.sendbusy.com
ns1.skinglad.com
ns1.thosekept.com
ns1.wooddoes.in
ns1.yearbusy.com
ns2.11121.org
ns2.12332.org
ns2.13231.org
ns2.7594.org
ns2.againseat.com
ns2.bedplain.com
ns2.chartflat.in
ns2.expectcoast.com
ns2.felttwenty.com
ns2.fewwhole.com
ns2.heartcorner.in
ns2.linewhich.com
ns2.listwere.com
ns2.noticezap.com
ns2.pickcool.in
ns2.tendereach.com
ns2.thosekept.com
ns2.wooddoes.in
ns2.wouldwealth.com
ns3.9736.org
ns3.againseat.com
ns3.alertglad.ru
ns3.bothstart.ru
ns3.coolpride.ru
ns3.doctorstill.com
ns3.eastoccur.ru
ns3.fabledmaxi.com
ns3.flattry.com
ns3.freshalive.ru
ns3.gladlive.ru
ns3.heavymeek.ru
ns3.listenface.ru
ns3.med22.org
ns3.prettysign.ru
ns3.quietfree.ru
ns3.sendbusy.com
ns3.skinglad.com
ns3.strongoffer.ru
ns3.tendereach.com
ns3.thosekept.com
ns3.tradearrive.com
ns3.tubeold.com
ns3.wouldwealth.com
ns3.yearbusy.com
ns4.12332.org
ns4.13123.org
ns4.7594.org
ns4.9736.org
ns4.againseat.com
ns4.aglowarm.com
ns4.bothstart.ru
ns4.coolpride.ru
ns4.eastoccur.ru
ns4.exceptexotic.com
ns4.expectcoast.com
ns4.fewwhole.com
ns4.freshalive.ru
ns4.gladlive.ru
ns4.listenface.ru
ns4.organcamp.ru
ns4.prettysign.ru
ns4.quietfree.ru
ns4.skinglad.com
ns4.tendereach.com
ns4.thinkspace.ru
ns4.thosekept.com
ns4.tradearrive.com
ns4.truereap.ru
ns4.wouldwealth.com
ns4.yearbusy.com
ns4.youngliquid.com
ns5.blueawake.com
ns5.madeonly.pl
ns5.motionseeker.pl
ns6.wesuch.p