Pharmacy Spam Operators ~ Yambo Financials

October 20, 20121 Comment

This article is in response to news that My Canadian Pharmacy and its other web operations have been linked to Alex Polyakov an almost mythical character in the spam a world (possibly of Russian or Ukrainian descent), and his criminal scam organisation ‘Yambo Financials’ identified by Spamhaus as the worlds biggest spam operators. Since 2004 numerous Canadian pharmacies have been relentlessly dispatching spam emails across the world selling Generic Viagra. Current internet usage statistics estimates that spam email accounts for over 81% of all emails and around 40% of all internet traffic.

Viagra
The group operates a number of websites including International Legal RX US Drugs VIP Pharmacy Canadian Health&Care Mall
Yambo Financials never pay for a server, instead they host their sites on other peoples services. They do this by first identifying unsecure servers and hijacking them with Trojan horses. A clever system of switching sites and servers helps hide their tracks. In this way the operators have evaded capture despite being wanted by many law enforcement groups. They are also wanted for other fraudulent activities including credit card fraud, identity theft, and phishing scams. Indeed most customers never receive an order and where merchandise is received the medications usually turn out to be fake, or lack any active ingredient.
It is a testament to the intelligence of the scam that the operation is still running under the same brands that have been used for over 6 years. The Canadian brand was set up to take advantage of the large US market. The USA is the largest consumer nation in the world, and since the cost of prescription medications in the USA are very high US citizens have for many years now looking across to Canada for a cheaper alternative. The exact market placement of the My Canadian Pharmacy site shows a precise and clever understanding of the demands of the US consumer market, that Americans are always seeking cheaper treatments from their Canadian neighbours.
The reality is that operations like this offering generic Viagra are operating outside the US, UK and any other EU country. There is no legislative authority checking the quality of their service and products and no repercussions or penalties that they can incur. The main lesson to be learnt is never respond to any invitation to buy treatments online. Always double check the credentials of the site. Check if they have a phone number that is active. Scammers such as these have shown themselves all to able to avoid capture and detection and one wonders if they will ever be caught. Only by making sure that online users can spot fraudulent sites and are aware of how to protect themselves against scams can these fraudulent operators be discouraged to operate. So take care when shopping online and check out our how to buy Viagra online safely guide.

http://www.myonlinedoctor.co.uk/generic-viagra-from-canadian-pharmacies.html

The Yambo Financials Group seems to be a pretty widespread group of porn
and spam. The only link I could find to known spammers is Artofit, which
is SPEWS record S2128.
After being spammed by findagrant.com, went looking for “Owned and
operated by Yambo Financials”, which yielded
YAMBO.BIZ, VEGASWORLD.NET, GREENHILL-CASINO.COM, VIVIDINCEST.COM,and
FUCKINGYOUNG.COM.

Summary:
148.233.211.243 FINDAGRANT.COM
200.43.172.3 ns1.south-waters.biz
208.249.126.38 TRANSZAMBA.BIZ
66.246.3.192 YAMBO.BIZ
66.250.39.207 VEGASWORLD.NET
66.246.3.192 YAMBOCS.COM
193.220.58.137 GREENHILL-CASINO.COM
65.117.175.72 VIVIDINCEST.COM
66.230.152.66 COSMICANIME.COM
205.150.5.26 PRYTV.COM
66.34.48.244 FUCKINGYOUNG.COM
66.34.165.70 WEB-HOSTING-PRODUCTS.NET
66.230.133.38 OXEO.COM
66.114.73.58 ARTOFIT.COM S2128
66.114.74.6 ACECAPE.COM
193.220.59.134 WILDPARK.NET
193.219.193.135 TAIDE.NET
205.150.5.20 2MUCH.NET

[www.yambo.biz]
Translated Name: yambo.biz
IP Address: 66.246.3.192
Alias: http://www.yambo.biz
Looking up [yambo.biz]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
yambo.biz nameserver = NS1.ARTOFIT.COM
yambo.biz nameserver = NS1.yambo.biz
yambo.biz nameserver = NS2.yambo.biz

Authoritative answers can be found from:
yambo.biz nameserver = NS1.ARTOFIT.COM
yambo.biz nameserver = NS1.yambo.biz
yambo.biz nameserver = NS2.yambo.biz
NS1.yambo.biz internet address = 66.111.36.80
NS2.yambo.biz internet address = 66.111.36.88

[End Query]

http://www.vegasworld.net
[www.vegasworld.net]
Translated Name: http://www.vegasworld.net
IP Address: 66.250.39.207
[66.250.39.207]
Translated Name: srv-cogent-balance.host-system.com
IP Address: 66.250.39.207
Looking up [VEGASWORLD.NET]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
VEGASWORLD.NET nameserver = ns1.named1.NET
VEGASWORLD.NET nameserver = ns2.named1.NET

Authoritative answers can be found from:
VEGASWORLD.NET nameserver = ns1.named1.NET
VEGASWORLD.NET nameserver = ns2.named1.NET
ns1.named1.NET internet address = 66.250.39.35
ns2.named1.NET internet address = 66.250.39.36

[End Query]

http://www.yambocs.com
Translated Name: yambocs.com
IP Address: 66.246.3.192
Alias: http://www.yambocs.com
Looking up [YAMBOCS.COM]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
YAMBOCS.COM nameserver = ns1.artofit.COM
YAMBOCS.COM nameserver = ns1.yambo.biz
YAMBOCS.COM nameserver = ns2.yambo.biz

Authoritative answers can be found from:
YAMBOCS.COM nameserver = ns1.artofit.COM
YAMBOCS.COM nameserver = ns1.yambo.biz
YAMBOCS.COM nameserver = ns2.yambo.biz
ns1.artofit.COM internet address = 66.114.73.58

[End Query]

[www.greenhill-casino.com]
Translated Name: http://www.greenhill-casino.com
IP Address: 193.220.58.137
[193.220.58.137]
Looking up [greenhill-casino.com]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
greenhill-casino.com nameserver = DNS.WILDPARK.NET
greenhill-casino.com nameserver = NS0.greenhill-casino.com
greenhill-casino.com nameserver = PARABOL.TAIDE.NET

Authoritative answers can be found from:
greenhill-casino.com nameserver = DNS.WILDPARK.NET
greenhill-casino.com nameserver = NS0.greenhill-casino.com
greenhill-casino.com nameserver = PARABOL.TAIDE.NET
NS0.greenhill-casino.com internet address = 193.220.58.137
PARABOL.TAIDE.NET internet address = 193.219.193.135

[End Query]

http://www.vividincest.com
[www.vividincest.com]
Translated Name: http://www.vividincest.com
IP Address: 65.117.175.72
Looking up [vividincest.com]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
vividincest.com nameserver = elizabet.artofit.com
vividincest.com nameserver = ns2.artofit.com

Authoritative answers can be found from:
vividincest.com nameserver = elizabet.artofit.com
vividincest.com nameserver = ns2.artofit.com
elizabet.artofit.com internet address = 66.114.73.58
ns2.artofit.com internet address = 66.22.30.53

[End Query]

Looking up [www.artofit.com]

Server: ns1.sprintlink.net
Address: 204.117.214.10

http://www.artofit.com internet address = 66.114.73.58
artofit.com nameserver = elizabet.artofit.com
artofit.com nameserver = ns2.artofit.com
elizabet.artofit.com internet address = 66.114.73.58
elizabet.artofit.com internet address = 66.114.73.58

[End Query]
Looking up [www.artofit.com]

Server: colo3-58.acedsl.com
Address: 66.114.73.58

artofit.com
origin = elizabet.artofit.com
mail addr = hostmaster.artofit.com
serial = 1055037721
refresh = 16384(4 hours 33 mins 4 secs)
retry = 2048(34 mins 8 secs)
expire = 1048576(12 days 3 hours 16 mins 16 secs)
minimum ttl = 2560(42 mins 40 secs)

[End Query]

[Query: 65.117.175.72, Server: whois.arin.net]

Qwest Communications NET-QWEST-BLKS-4 (NET-65-112-0-0-1)
65.112.0.0 – 65.127.255.255
CREATIVE INTERNET TECHNIQUES QWST-65-117-175 (NET-65-117-175-0-1)
65.117.175.0 – 65.117.175.255

[www.cosmicanime.com]
Translated Name: cosmicanime.com
IP Address: 66.230.152.66
Alias: http://www.cosmicanime.com

Looking up [cosmicanime.com]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
cosmicanime.com nameserver = ns2.oxeo.com
cosmicanime.com nameserver = ns.oxeo.com

Authoritative answers can be found from:
cosmicanime.com nameserver = ns2.oxeo.com
cosmicanime.com nameserver = ns.oxeo.com
ns2.oxeo.com internet address = 66.230.133.180
ns.oxeo.com internet address = 66.230.133.40

[End Query]

http://www.prytv.com
[205.150.5.26]
http://www.fuckingyoung.com
[66.34.48.244]
Translated Name: 244-48-34-66-rev.propagation.net
IP Address: 66.34.48.244

Domain Name: YAMBO.BIZ
Domain ID: D2914606-BIZ
Sponsoring Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Domain Status: ok
Registrant ID: IMG-368485
Registrant Name: Customer Service
Registrant Organization: Yambo Financials Inc.
Registrant Address1: 1001 SW 16th Avenue, #103
Registrant City: Gainesville
Registrant State/Province: FL
Registrant Postal Code: 32601
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.12123017424
Registrant Email: custome…@yambo.biz
Administrative Contact ID: IMG-321421
Administrative Contact Name: Yegor Bugaenko
Administrative Contact Organization: Million Software Inc.
Administrative Contact Address1: Leningradskoe shosse, 5
Administrative Contact City: Moscow
Administrative Contact State/Province: Moscow
Administrative Contact Postal Code: 123007
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +7.70957963057
Administrative Contact Email: eg…@millionsoftware.com
Billing Contact ID: IMG-321421
Billing Contact Name: Yegor Bugaenko
Billing Contact Organization: Million Software Inc.
Billing Contact Address1: Leningradskoe shosse, 5
Billing Contact City: Moscow
Billing Contact State/Province: Moscow
Billing Contact Postal Code: 123007
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +7.70957963057
Billing Contact Email: eg…@millionsoftware.com
Technical Contact ID: IMG-321421
Technical Contact Name: Yegor Bugaenko
Technical Contact Organization: Million Software Inc.
Technical Contact Address1: Leningradskoe shosse, 5
Technical Contact City: Moscow
Technical Contact State/Province: Moscow
Technical Contact Postal Code: 123007
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +7.70957963057
Technical Contact Email: eg…@millionsoftware.com
Name Server: NS1.ARTOFIT.COM
Name Server: NS2.YAMBO.BIZ
Name Server: NS1.YAMBO.BIZ
Created by Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Last Updated by Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Domain Registration Date: Thu Apr 11 12:35:11 GMT 2002
Domain Expiration Date: Sat Apr 10 23:59:59 GMT 2004
Domain Last Updated Date: Thu May 29 11:57:51 GMT 2003
———————————————————————–
Domain Name: VEGASWORLD.NET

Administrative Contact:
Holan, John ad…@vegasworld.net
Republic of Kalmykia
Klykova str, building 1
Elista, RU 358000
RU
123-1234

Technical Contact:
Holan, John ad…@vegasworld.net
Republic of Kalmykia
Klykova str, building 1
Elista, RU 358000
RU
123-1234
———————————————————————-
Registrant:
Yambo Financials Inc.
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Domain Name: YAMBOCS.COM

Administrative Contact:
Service, Customer custome…@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424
Looking up [www.yambocs.com]

Non-authoritative answer:
http://www.yambocs.com canonical name = yambocs.com

Authoritative answers can be found from:
yambocs.com nameserver = ns1.yambo.biz
yambocs.com nameserver = million.dp.ua
ns1.yambo.biz internet address = 66.111.36.80
million.dp.ua internet address = 195.248.185.130
million.dp.ua internet address = 195.248.163.58

[End Query]

Technical Contact:
Service, Customer custome…@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424
———————————————————————–
Registrant:
artofit.com
350 Fifth Ave
Suite 6908
New York, NY 10118
US

Registrar: DOTSTER
Domain Name: ARTOFIT.COM
Created on: 19-JAN-00
Expires on: 19-JAN-04
Last Updated on: 21-JAN-03

Administrative Contact:
Administrator, Domain dom…@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683

Technical Contact:
Administrator, Domain dom…@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683

Domain servers in listed order:
NS1.ARTOFIT.COM
NS2.ARTOFIT.COM
Registrant:
None
23200 19th AVE SE
Bothell, WA 98021
US
425-483-6502

———————————————————-
Domain Name: COSMICANIME.COM

Administrative Contact:
Dalton, Robin webm…@ezsexarchives.com
23200 19th AVE SE
Bothell, WA 98021
US
425-483-6502

Technical Contact:
Dalton, Robin webm…@ezsexarchives.com
23200 19th AVE SE
Bothell, WA 98021
US
425-483-6502

Record last updated 04-04-2003 09:10:53 PM
Record expires on 01-28-2004
Record created on 01-28-2003

Domain servers in listed order:
NS.OXEO.COM 66.230.133.40
NS2.OXEO.COM 66.230.133.180
_________________________________________________________
Registrant:
BuckFifty Networks, Inc.
258 Prescott Ave
Staten Island, NY 10306
US

Registrar: DOTSTER
Domain Name: OXEO.COM
Created on: 31-JAN-02
Expires on: 01-FEB-05
Last Updated on: 18-DEC-02

Administrative Contact:
OXEO, Web Hosting sup…@oxeo.com
BuckFifty Networks, Inc.
258 Prescott Ave.
Suite 2
Staten Island, NY 10306
US
866-ASK-OXEO
718-504-4886

Technical Contact:
OXEO, Web Hosting sup…@oxeo.com
BuckFifty Networks, Inc.
258 Prescott Ave.
Suite 2
Staten Island, NY 10306
US
866-ASK-OXEO
718-504-4886

Domain servers in listed order:
NS.OXEO.COM
NS2.OXEO.COM
____________________________________________________

Registrant:
Aurumcash Inc.
Kalku iela 28-26
Riga, N/A LV-1340
LV

Registrar: DOTSTER
Domain Name: VIVIDINCEST.COM
Created on: 16-MAY-02
Expires on: 16-MAY-04
Last Updated on: 26-FEB-03

Administrative, Technical Contact:
Matveev, Pavel auru…@yahoo.com
Aurumcash Inc.
Kalku iela 28-26
Riga, N/A LV-1340
LV
+371-7437194
+371-7437194

Domain servers in listed order:
NS1.FOONET.NET
NS3.FOONET.NET
NS1.ARTOFIT.COM
NS1.NS-HOSTER.COM
NS1.SMARTDNS.ORG
___________________________________________________
Registrant:
PryTV
avenu 5
00 4 4
NY, NY 20625
US

Domain name: PRYTV.COM

Administrative Contact:
Miller, Zack adm…@pisem.net
avenu 5
00 4 4
New Yorck, NY 20625
US
416-555-11222
Technical Contact:
Miller, Zack adm…@pisem.net
avenu 5
00 4 4
New Yorck, NY 20625
US
416-555-11222
______________________________________________________

Looking up [PRYTV.COM]

Non-authoritative answer:
PRYTV.COM nameserver = ns2.2much.net
PRYTV.COM nameserver = ns1.2much.net

Authoritative answers can be found from:
PRYTV.COM nameserver = ns2.2much.net
PRYTV.COM nameserver = ns1.2much.net
ns2.2much.net internet address = 205.150.5.101
ns1.2much.net internet address = 205.150.5.2

[End Query]

Domain name: FUCKINGYOUNG.COM

Name servers:
NS.WEB-HOSTING-PRODUCTS.NET
NS2.WEB-HOSTING-PRODUCTS.NET

Creation date: 01/24/02 00:00:29
Expiration date: 01/24/04 00:00:29

Registrant Contact:
Web Hosting Products
erik hatch (dom…@web-hosting-products.net)
+1.8888888888
FAX: +1.8888888888
1605 Wright Drive
Sandwich, IL 60548
US

Administrative Contact:
Web Hosting Products
erik hatch (dom…@web-hosting-products.net)
+1.8888888888
FAX: +1.8888888888
1605 Wright Drive
Sandwich, IL 60548
US

Billing Contact:
Web Hosting Products
erik hatch (dom…@web-hosting-products.net)
+1.8888888888
FAX: +1.8888888888
1605 Wright Drive
Sandwich, IL 60548
US

Technical Contact:
Web Hosting Products
erik hatch (dom…@web-hosting-products.net)
+1.8888888888
FAX: +1.8888888888
1605 Wright Drive
Sandwich, IL 60548
US
——————————————————-
Registrant Contact:
NA
Web Hosting Products (NA)
NA
12289 Pembroke Road Suite 24
Pembroke Pines
FL, 33025
US

Administrative Contact:
NA
Web Hosting Products (NA)
NA
12289 Pembroke Road Suite 24
Pembroke Pines
FL, 33025
US

Billing Contact:
NA
Web Hosting Products (NA)
NA
12289 Pembroke Road Suite 24
Pembroke Pines
FL, 33025
US

Technical Contact:
n a
Tecnical Domain ( dom…@web-hosting-products.net)
877-766-8772
12289 Pembroke Road Suite 24
Pembroke Pines, FL 33025
US
____________________________________________________
Registrant:
RosBusinessConsulting (PISEM2-DOM)
78, Profsoyznaya st.
Moscow, RU 117393
RU

Domain Name: PISEM.NET

Administrative Contact, Technical Contact:
RosBusinessConsulting (21762514O) hosting@rbc.ru
RosBusinessConsulting
78, Profsoyznaya st.
Moscow, RU 117393
RU
+7 (095) 363-1111 fax: +7 (095) 363-1125

Record expires on 18-Oct-2003.
Record created on 18-Oct-2000.
Database last updated on 29-May-2003 23:51:29 EDT.

Domain servers in listed order:

RELAY.MAILRU.COM 80.68.244.2
RELAY1.MAILRU.COM 194.186.36.181

______________________________________________________
Registrant:
Creative Internet Techniques
3982 Powell Rd.
Suite 225
Powell, OH 43065
US

Registrar: DOTSTER
Domain Name: FOONET.NET
Created on: 17-JUN-96
Expires on: 16-JUN-04
Last Updated on: 05-FEB-03

Administrative Contact:
Support, CIT sup…@foonet.net
Creative Internet Techniques
3982 Powell Rd.
Suite 225
Powell, OH 43065
US
740 881 0323
419 710 1992

Technical Contact:
Support, CIT sup…@foonet.net
Creative Internet Techniques
3982 Powell Rd.
Suite 225
Powell, OH 43065
US
740 881 0323
419 710 1992

Domain servers in listed order:
NS1.FOONET.NET
NS3.FOONET.NET
——————————————————–
Registrant:
artofit.com
350 Fifth Ave
Suite 6908
New York, NY 10118
US

Registrar: DOTSTER
Domain Name: ARTOFIT.COM
Created on: 19-JAN-00
Expires on: 19-JAN-04
Last Updated on: 21-JAN-03

Administrative Contact:
Administrator, Domain dom…@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683

Technical Contact:
Administrator, Domain dom…@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683

Domain servers in listed order:
NS1.ARTOFIT.COM
NS2.ARTOFIT.COM

—————————————————
Registrant:
Acecape, Inc (ACEDSL-DOM)
325 West 38th Street
Suite 1005
New York, NY 10018
US

Domain Name: ACEDSL.COM

Administrative Contact, Technical Contact:
Acecape, Inc (22386040O) info@ACECAPE.COM
325 West 38th Street
Suite 1005
New York, NY 10018
US
212-868-2366 fax: 212-868-2356

Record expires on 05-Mar-2006.
Record created on 09-Sep-2002.
Database last updated on 7-Jun-2003 22:37:04 EDT.

Domain servers in listed order:

NS1.ACECAPE.COM 66.114.74.40
NS2.ACECAPE.COM 66.114.74.195

[End of Whois message]

Looking up [www.acecape.com]

http://www.acecape.com internet address = 66.114.74.6
acecape.com nameserver = ns2.acecape.com
acecape.com nameserver = ns1.acecape.com
ns1.acecape.com internet address = 66.114.74.40
ns2.acecape.com internet address = 66.114.74.195

[End Query]
Looking up [www.named1.net]

http://www.named1.net internet address = 66.159.20.60
named1.net nameserver = NS.ZIHOST.COM
named1.net nameserver = NS2.HOST-SYSTEM.COM
NS.ZIHOST.COM internet address = 66.159.20.60
NS2.HOST-SYSTEM.COM internet address = 66.250.39.23

[End Query]

Registrar: THE NAME IT CORPORATION DBA AITDOMAINS.COM

Domain Name: wildpark.net

Registrant:

Wildpark
Alexander Lapidus
Lenina av. 52

Nikolaev
UA UA 54021
al…@wildpark.net

Phone: +380-512-470555

Administrative Contact:
Alexander Lapidus
Lenina av. 52

Nikolaev
UA UA
54021
al…@wildpark.net

Phone: +380-512-470555

Technical Contact:
Alexander Lapidus
Lenina av. 52

Nikolaev
UA UA
54021
al…@wildpark.net

Phone: +380-512-470555

Billing Contact:
Igor Golubar
Lenina av. 52

Nikolaev
UA UA
54021
al…@wildpark.net

Phone: +380-512-470555

Record Created on…….. 1999-08-24 08:42:46.000
Record last updated on… 2001-11-22 03:59:27.000
Expire on……………. 2006-08-24 08:42:46.000

Domain servers in listed order:

dns.wildpark.net 193.220.59.133
parabol.taide.net 193.219.193.135
————————–
Looking up [www.wildpark.net]

http://www.wildpark.net canonical name = pop3.wildpark.net
wildpark.net nameserver = parabol.taide.net
wildpark.net nameserver = dns.wildpark.net
parabol.taide.net internet address = 193.219.193.135
dns.wildpark.net internet address = 193.220.59.133

[End Query]
Looking up [parabol.taide.net]

Non-authoritative answer:
parabol.taide.net internet address = 193.219.193.135

Authoritative answers can be found from:
taide.net nameserver = absolut.taide.net
taide.net nameserver = parabol.taide.net
taide.net nameserver = ns.nl.net
absolut.taide.net internet address = 193.219.193.130
parabol.taide.net internet address = 193.219.193.135
ns.nl.net internet address = 193.78.240.1

[End Query]
Registrant:
TAIDE NETWORK AS (TAIDE4-DOM)
Weidemannsgate 9
Holmestrand N-3081
NO

Domain Name: TAIDE.NET

Administrative Contact, Technical Contact:
Taide Network AS (TA3808-ORG) networksolutions@TAIDE.NET
Weidemannsgate 9
Holmestrand, Holmestrand
NO
+47 33 06 67 50 fax: +47 33 06 67 60

Record expires on 02-Aug-2003.
Record created on 09-Sep-2002.
Database last updated on 7-Jun-2003 22:54:43 EDT.

Domain servers in listed order:

PARABOL.TAIDE.NET 193.219.193.135
NS.NL.NET 193.78.240.1
ABSOLUT.TAIDE.NET 193.219.193.130

[End of Whois message]

[Query: 195.248.185.130, Server: whois.ripe.net]

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum: 195.248.185.128 – 195.248.185.143
netname: MILLION-CORP
descr: Million corp.
descr: Simferopolskaya st, h.21, of.205
descr: 49000, Dneipropetrovsk
country: UA
admin-c: YL40-RIPE
tech-c: YL40-RIPE
status: ASSIGNED PA
notify: regi…@alkar.net
mnt-by: AS6703-MNT
changed: nic…@alkar.net 20000818
source: RIPE

route: 195.248.160.0/19
descr: ALKAR
origin: AS6703
mnt-by: AS6703-MNT
changed: d…@alkar.net 19971007
source: RIPE

person: Yuri Lozinsky
address: Mironova st, h.15, of.317a
address: Dneipropetrovsk
address: 49000, Ukraine
phone: +380 0562 7782667
fax-no: +380 0562 340315
e-mail: u…@isd.dp.ua
nic-hdl: YL40-RIPE
notify: u…@isd.dp.ua
changed: u…@isd.dp.ua 20020627
source: RIPE

[End of Whois message]

Looking up [FINDAGRANT.COM]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
FINDAGRANT.COM nameserver = ns1.south-waters.biz
FINDAGRANT.COM nameserver = ns1.transzamba.biz
FINDAGRANT.COM nameserver = ns2.south-waters.biz
FINDAGRANT.COM nameserver = ns2.transzamba.biz

Authoritative answers can be found from:
FINDAGRANT.COM nameserver = ns1.south-waters.biz
FINDAGRANT.COM nameserver = ns1.transzamba.biz
FINDAGRANT.COM nameserver = ns2.south-waters.biz
FINDAGRANT.COM nameserver = ns2.transzamba.biz

[End Query]
Looking up [ns1.south-waters.biz]

Server: ns1.sprintlink.net
Address: 204.117.214.10

Non-authoritative answer:
ns1.south-waters.biz internet address = 200.43.172.3

Authoritative answers can be found from:
south-waters.biz nameserver = DNS1.south-waters.biz
south-waters.biz nameserver = DNS1.TRANSZAMBA.biz
south-waters.biz nameserver = DNS2.south-waters.biz
south-waters.biz nameserver = DNS2.TRANSZAMBA.biz
DNS1.south-waters.biz internet address = 208.249.126.36
DNS1.TRANSZAMBA.biz internet address = 208.249.126.38
DNS2.south-waters.biz internet address = 208.249.126.37
DNS2.TRANSZAMBA.biz internet address = 208.249.126.39

[End Query]

https://groups.google.com/forum/?fromgroups=#!topic/news.admin.net-abuse.email/LoXsZ1xf_BE

209.85.51.152 resolves to 209-85-51-152.opticaljungle.com.

The following A records are set to 209.85.51.152:
oldstreetadvisors.com, topwayse.com

Perviously 209.85.51.152
ns1.ceilnanete.com => 209.85.51.152
ns2.bestimportedmeds.eu => 216.8.179.25

casinadya.com
dathachastity.com
cynthiavivi.com
vivieblondie.com
suellenbecca.com
martamichaelina.com
josidanyette.com
janeybrittani.com
isahellabellina.com
hertastephie.com
harriettgusella.com
birgitdebora.com
rozinakarin.com
phillievonnyeba.com
odettekyrstin.com
nertaodelia.com
nertaodelia.com
minneraphaela.com
melliebelicia.com
junelynna.com
jillaneeilis.com
cookiediandra.com
barbesofie.com
adelaidasibylla.com
monicamelinda.com
milkajoeann.com
michaelinajoleen.com
marjoryadeline.com
luckyamie.com
lillidemeter.com
leandramattie.com
georgeannafiann.com
feystacie.com
darseykimbra.com
cordeliaannecorinne.com

domain: 33drugs.com
owner: – –
organization: 33 DRUGS LTD
email: domains@33drugs.com
address: Slington House, Rankine Road
address: Office 6
city: Basingstoke
state: Hampshire
postal-code: RG24 8PH
country: GB
phone: +44.2081338455
admin-c: CCOM-1283149 domains@33drugs.com
tech-c: CCOM-1283149 domains@33drugs.com
billing-c: CCOM-1283149 domains@33drugs.com
nserver: ns1.drugcustomer.com 83.233.30.151
nserver: ns2.drugcustomer.com 91.214.44.4
nserver: ns3.33drugs.com 94.102.49.110
nserver: ns4.33drugs.com 83.233.30.151
nserver: ns5.alpha-ns.com
status: lock
created: 2007-09-23 14:23:33 UTC
modified: 2010-08-26 19:51:09 UTC
expires: 2015-09-23 14:23:33 UTC

contact-hdl: CCOM-1283149
person: – – – – –
organization: 33 DRUGS LTD
email: domains@33drugs.com
address: Slington House, Rankine Road
address: Office 6
city: Basingstoke
state: Hampshire
postal-code: RG24 8PH
country: GB
phone: +44.2081338455

source: joker.com live whois service
query-time: 0.013566
db-updated: 2010-11-12 07:16:41

[whois.joker.com]
domain: drugcustomer.com
owner: James Schumaker
organization: DRUG CUSTOMER LTD
email: domains@drugcustomer.com
address: Poul Due Jensens Vej 7
city: Bjerringbro
state: —
postal-code: 8850
country: DK
phone: +49.1234578
admin-c: CCOM-1383292 domains@drugcustomer.com
tech-c: CCOM-1383294 domains@drugcustomer.com
billing-c: CCOM-1155673 domains@drugcustomer.com
nserver: ns1.drugcustomer.com 83.233.30.151
nserver: ns2.drugcustomer.com 91.214.44.4
nserver: ns3.drugcustomer.com 94.102.49.110
nserver: ns4.drugcustomer.com 83.233.30.151
nserver: ns5.drugcustomer.com 91.214.44.4
status: lock
created: 2007-10-15 12:30:41 UTC
modified: 2009-07-15 16:27:16 UTC
expires: 2013-10-15 12:30:41 UTC

contact-hdl: CCOM-1383292
person: James Schumaker
email: domains@drugcustomer.com
address: Poul Due Jensens Vej 7
city: Bjerringbro
state: —
postal-code: 8850
country: DK
phone: +45.36965520

contact-hdl: CCOM-1383294
person: James Schumaker
email: domains@drugcustomer.com
address: Poul Due Jensens Vej 7
city: Bjerringbro
state: —
postal-code: 8850
country: DK
phone: +45.36965520

contact-hdl: CCOM-1155673
person: – –
organization: DRUG CUSTOMER LTD
email: domains@drugcustomer.com
address: Poul Due Jensens Vej 7
city: Bjerringbro
state: —
postal-code: 8850
country: DK
phone: +45.36965520

source: joker.com live whois service
query-time: 0.014644
db-updated: 2010-11-12 07:16:12

Google.ie Hijacked and IEDR Site Offline (blacknight.com)
Tracking Malicious Activity with Passive DNS Query Monitoring (blogs.cisco.com)
Tracing DNS resolution with dnspython, beanstalk and graphviz (kaarsemaker.net)

rkprice-of-viagra24.com

October 20, 2012October 20, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)
Warning

The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Before making a purchase that can affect your health, we strongly recommend that you consult your physician & DO NOT self-medicate.

Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

The following A records are set to 69.162.185.71:

hainespolice.org
ns1.hainespolice.org
ns1.rkprice-of-viagra24.com
ns2.hainespolice.org
ns2.rkprice-of-viagra24.com
rkprice-of-viagra24.com

Address lookup
canonical name rkprice-of-viagra24.com
aliases
addresses 69.162.185.71
Domain Whois record

Queried whois.internic.net with “dom rkprice-of-viagra24.com”…

Domain Name: RKPRICE-OF-VIAGRA24.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: NS1.RKPRICE-OF-VIAGRA24.COM
Name Server: NS2.RKPRICE-OF-VIAGRA24.COM
Status: clientTransferProhibited
Updated Date: 30-sep-2012
Creation Date: 30-sep-2012
Expiration Date: 30-sep-2013

>>> Last update of whois database: Sat, 20 Oct 2012 12:32:12 UTC <<<
Queried whois.internet.bs with “rkprice-of-viagra24.com”…

Domain rkprice-of-viagra24.com

Date Registered: 2012-9-30
Date Modified: 2012-9-30
Expiry Date: 2013-9-30

DNS1: ns1.rkprice-of-viagra24.com
DNS2: ns2.rkprice-of-viagra24.com

Registrant
Alexey
Alexey Fedorov
Email:admin@rkprice-of-viagra24.com
ul. Koroleva 22-20
123457 Moscow
Russia
Tel: +7.4957553540

Administrative Contact
Alexey
Alexey Fedorov
Email:admin@rkprice-of-viagra24.com
ul. Koroleva 22-20
123457 Moscow
Russia
Tel: +7.4957553540

Technical Contact
Alexey
Alexey Fedorov
Email:admin@rkprice-of-viagra24.com
ul. Koroleva 22-20
123457 Moscow
Russia
Tel: +7.4957553540

Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/
Network Whois record

Queried rwhois.steadfast.net with “69.162.185.71”…

%rwhois V-1.0,V-1.5:00090h:00 manage.steadfast.net (Ubersmith RWhois Server V-2.3.0)
autharea=69.162.176.0/20
xautharea=69.162.176.0/20
network:Class-Name:network
network:Auth-Area:69.162.176.0/20
network:ID:NET-10299.69.162.176.0/20
network:Network-Name:IP Allocation
network:IP-Network:69.162.176.0/20
network:IP-Network-Block:69.162.176.0 – 69.162.191.255
network:Org-Name:Lanos Technologies Pvt. Ltd.
network:Street-Address:D-3, Rameshwar Society, SV Road, Santacruz West
Network:City:Mumbai
network:State:Maharashtra
network:Postal-Code:400054
network:Country-Code:IN
network:Tech-Contact:MAINT-10299.69.162.176.0/20
network:Created:20100818172801000
network:Updated:20100818172801000
network:Updated-By:noc@steadfast.net
contact:POC-Name:Steadfast Networks Network Operations Center
contact:POC-Email:noc@steadfast.net
contact:POC-Phone:+1-312-602-2689
contact:Tech-Name:Steadfast Networks Network Operations Center
contact:Tech-Email:noc@steadfast.net
contact:Tech-Phone:+1-312-602-2689
contact:Abuse-Name:Steadfast Networks Abuse Department
contact:Abuse-Email:abuse@steadfast.net
%ok
Queried whois.arin.net with “n 69.162.185.71″…

NetRange: 69.162.128.0 – 69.162.191.255
CIDR: 69.162.128.0/18
OriginAS: AS32748
NetName: STEADFAST-4
NetHandle: NET-69-162-128-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
Comment: Please submit all reports of abuse to
Comment: abuse@steadfast.net. Reports sent to
Comment: other addresses will not be processed.
RegDate: 2009-04-22
Updated: 2012-03-12
Ref: http://whois.arin.net/rest/net/NET-69-162-128-0-1

OrgName: Steadfast Networks
OrgId: NOZON
Address: 725 S Wells St.
Address: 8th Floor
City: Chicago
StateProv: IL
PostalCode: 60607
Country: US
RegDate: 2004-05-21
Updated: 2012-03-12
Comment: Please submit all reports of abuse to
Comment: abuse@steadfast.net. Reports sent to
Comment: other addresses will not be processed.
Ref: http://whois.arin.net/rest/org/NOZON

ReferralServer: rwhois://rwhois.steadfast.net:4321

OrgNOCHandle: NOG3-ARIN
OrgNOCName: Steadfast Networks Network Operations Center
OrgNOCPhone: +1-312-602-2689
OrgNOCEmail: noc@steadfast.net
OrgNOCRef: http://whois.arin.net/rest/poc/NOG3-ARIN

OrgTechHandle: NOG3-ARIN
OrgTechName: Steadfast Networks Network Operations Center
OrgTechPhone: +1-312-602-2689
OrgTechEmail: noc@steadfast.net
OrgTechRef: http://whois.arin.net/rest/poc/NOG3-ARIN

OrgAbuseHandle: ABUSE959-ARIN
OrgAbuseName: Steadfast Networks Abuse Department
OrgAbusePhone: +1-312-602-2688
OrgAbuseEmail: abuse@steadfast.net
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE959-ARIN

RAbuseHandle: ABUSE959-ARIN
RAbuseName: Steadfast Networks Abuse Department
RAbusePhone: +1-312-602-2688
RAbuseEmail: abuse@steadfast.net
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE959-ARIN

RTechHandle: NOG3-ARIN
RTechName: Steadfast Networks Network Operations Center
RTechPhone: +1-312-602-2689
RTechEmail: noc@steadfast.net
RTechRef: http://whois.arin.net/rest/poc/NOG3-ARIN

RNOCHandle: NOG3-ARIN
RNOCName: Steadfast Networks Network Operations Center
RNOCPhone: +1-312-602-2689
RNOCEmail: noc@steadfast.net
RNOCRef: http://whois.arin.net/rest/poc/NOG3-ARIN
DNS records

name class type data time to live
http://www.rkprice-of-viagra24.com IN CNAME rkprice-of-viagra24.com 14400s (04:00:00)
rkprice-of-viagra24.com IN A 69.162.185.71 14400s (04:00:00)
rkprice-of-viagra24.com IN SOA
server: ns1.rkprice-of-viagra24.com
email: admin@rkprice-of-viagra24.com
serial: 2011081601
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
rkprice-of-viagra24.com IN MX
preference: 0
exchange: rkprice-of-viagra24.com
14400s (04:00:00)
rkprice-of-viagra24.com IN NS ns2.rkprice-of-viagra24.com 86400s (1.00:00:00)
rkprice-of-viagra24.com IN NS ns1.rkprice-of-viagra24.com 86400s (1.00:00:00)
71.185.162.69.in-addr.arpa IN PTR ip71.69-162-185.static.steadfastdns.net 86400s (1.00:00:00)
185.162.69.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-10-30 08:02:36Z
signature inception: 2012-10-20 08:02:36Z
key tag: 1715
signer’s name: 69.in-addr.arpa
signature:
(1024 bits)

185.162.69.in-addr.arpa IN NSEC
next domain name: 186.162.69.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
185.162.69.in-addr.arpa IN NS ns4.steadfast.net 86400s (1.00:00:00)
185.162.69.in-addr.arpa IN NS ns3.steadfast.net 86400s (1.00:00:00)
— end —

Websites Hijacked Redirect~bogus pharmacy sites (unapprovedpharmacy.com)
Canadian Pharmacy Spam Sites (unapprovedpharmacy.wordpress.com)
WhoIs ~ ggbb.org (unapprovedpharmacy.com)
WhoIs ~ ggbb.org (scamfraudalert.org)
Viagra Explosion On the internet – Be Sure Before You Buy (thelonestarwatchdog.com)

WhoIs ~ ggbb.org

October 15, 20129 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Address lookup
canonical name ggbb.org
aliases
addresses:66.147.242.87
Domain Whois record

Queried whois.publicinterestregistry.net with “ggbb.org

Domain ID:D68705454-LROR
Domain Name:GGBB.ORG

Created On:02-Apr-2001 18:51:43 UTC
Last Updated On:03-Nov-2011 22:49:37 UTC
Expiration Date:02-Apr-2013 19:51:43 UTC
Sponsoring Registrar:Register.com, Inc. (R71-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:18484199f7ed7600
Registrant Name:Domain Discreet Privacy Service
Registrant Organization:ATTN: ggbb.org
Registrant Street1:12808 Gran Bay Pkwy
Registrant City:West Jacksonville
Registrant State/Province:FL
Registrant Postal Code:32258
Registrant Country:US
Registrant Phone:+1.9027492701
Registrant Email:500f4e570a1612203f78d43e8f5eb133@domaindiscreet.com

Admin ID:93595819f7ae9615
Admin Name:Domain Discreet Privacy Service
Admin Organization:ATTN: ggbb.org
Admin Street1:12808 Gran Bay Pkwy
Admin City:West Jacksonville
Admin State/Province:FL
Admin Postal Code:32258
Admin Country:US
Admin Phone:+1.9027492701
Admin Email:500f4e550a1612200af91b1279be9c24@domaindiscreet.com

Tech ID:78557579f7fee639
Tech Name:Domain Discreet Privacy Service
Tech Organization:ATTN: ggbb.org
Tech Street1:12808 Gran Bay Pkwy
Tech City:West Jacksonville
Tech State/Province:FL
Tech Postal Code:32258
Tech Country:US
Tech Phone:+1.9027492701
Tech Email:500f4e590a1612201873c2bcc0e710c2@domaindiscreet.com

Name Server:W.DNS.NETNATION.COM
Name Server:X.DNS.NETNATION.COM

DNSSEC:Unsigned

Network Whois record

Queried whois.arin.net with “n 66.147.242.87″…

NetRange: 66.147.240.0 – 66.147.255.255
CIDR: 66.147.240.0/20
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-4
NetHandle: NET-66-147-240-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
RegDate: 2008-05-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-66-147-240-0-1

OrgName: Bluehost Inc.
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2011-09-27
Ref: http://whois.arin.net/rest/org/BLUEH-2

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
ggbb.org IN SOA
server: ns1.netnation.com
email: hostmaster@netnation.com
serial: 2010032717
refresh: 14400
retry: 1800
expire: 3600000
minimum ttl: 300
300s (00:05:00)
ggbb.org IN MX
preference: 10
exchange: mail.ggbb.org
14400s (04:00:00)
ggbb.org IN NS ns1.netnation.com 14400s (04:00:00)
ggbb.org IN NS ns2.netnation.com 14400s (04:00:00)
ggbb.org IN A 66.147.242.87 14400s (04:00:00)
87.242.147.66.in-addr.arpa IN PTR box487.bluehost.com 86400s (1.00:00:00)
242.147.66.in-addr.arpa IN NS ns2.bluehost.com 86400s (1.00:00:00)
242.147.66.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2008051502
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
242.147.66.in-addr.arpa IN NS ns1.bluehost.com 86400s (1.00:00:00)

— end —

WhoIs ~ medexpressrx.com

October 9, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.

Address lookup
canonical name http://www.medexpressrx.com
aliases
addresses 199.59.166.168
Domain Whois record

Queried whois.internic.net with “dom medexpressrx.com

Domain Name: MEDEXPRESSRX.COM
Registrar: HOMESTEAD LIMITED DBA NAMEVAULT.COM
Whois Server: whois.namevault.com
Referral URL: http://www.namevault.com
Name Server: NS1.P27.DYNECT.NET
Name Server: NS2.P27.DYNECT.NET
Name Server: NS3.P27.DYNECT.NET
Name Server: NS4.P27.DYNECT.NET
Status: ok
Updated Date: 14-jul-2011
Creation Date: 18-jul-2003
Expiration Date: 18-jul-2016

Last update of whois database: Tue, 09 Oct 2012 15:52:09 UTC

Queried whois.namevault.com with “medexpressrx.com

Domain Name: MEDEXPRESSRX.COM

Registrant:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Creation Date: 18-Jul-2003
Expiration Date: 18-Jul-2016

Domain servers in listed order:
ns1.p27.dynect.net
ns2.p27.dynect.net
ns3.p27.dynect.net
ns4.p27.dynect.net

Administrative Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Status:ACTIVE

Network Whois record
Queried rwhois.blacklotus.net with “199.59.166.168

rwhois V-1.0,V-1.5:00090h:00 support.blacklotus.net (Ubersmith RWhois Server V-2.2.0)
autharea=199.59.166.0/24
xautharea=199.59.166.0/24
network:Class-Name:network
network:Auth-Area:199.59.166.0/24
network:ID:NET-2400.199.59.166.168
network:Network-Name:SSL Enabled Web Sites
network:IP-Network:199.59.166.168
network:IP-Network-Block:199.59.166.168
network:Org-Name:Intelecorp
network:Street-Address:502 A Wing Great Eastern Chamber CBD
network:City:Navi Mumbai
network:State:Maharashtra
network:Postal-Code:400614
network:Country-Code:IN
network:Tech-Contact:MAINT-2400.199.59.166.168
network:Created:20120803231358000
network:Updated:20120803231358000
network:Updated-By:support@blacklotus.net
contact:POC-Name:Network Operations Center
contact:POC-Email:support@blacklotus.net
contact:POC-Phone:(323) 657-5944
contact:Tech-Name:Network Operations Center
contact:Tech-Email:support@blacklotus.net
contact:Tech-Phone:(323) 657-5944
ok

Queried whois.arin.net with “n 199.59.166.168

NetRange: 199.59.160.0 – 199.59.167.255
CIDR: 199.59.160.0/21
OriginAS: AS32421
NetName: BLACK-LOTUS-COMMUNICATIONS
NetHandle: NET-199-59-160-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-11-29
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-59-160-0-1

OrgName: Black Lotus Communications
OrgId: BLC-92
Address: 1000 N. West St., Suite 1200
City: Wilmington
StateProv: DE
PostalCode: 19801
Country: US
RegDate: 2004-04-22
Updated: 2012-09-30
Comment: Please route any abuse concerns to abuse@blacklotus.net
Ref: http://whois.arin.net/rest/org/BLC-92

ReferralServer: rwhois://rwhois.blacklotus.net:4321

OrgNOCHandle: NOC1554-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-757-304-0668
OrgNOCEmail: noc@blacklotus.net
OrgNOCRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

OrgAbuseHandle: NOC1554-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-757-304-0668
OrgAbuseEmail: noc@blacklotus.net
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

OrgTechHandle: NOC1554-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-757-304-0668
OrgTechEmail: noc@blacklotus.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RTechHandle: NOC1554-ARIN
RTechName: Network Operations Center
RTechPhone: +1-757-304-0668
RTechEmail: noc@blacklotus.net
RTechRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RAbuseHandle: NOC1554-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-757-304-0668
RAbuseEmail: noc@blacklotus.net
RAbuseRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RNOCHandle: NOC1554-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-757-304-0668
RNOCEmail: noc@blacklotus.net
RNOCRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

DNS records
name class type data time to live
http://www.medexpressrx.com IN A 199.59.166.168 300s (00:05:00)
medexpressrx.com IN SOA
server: ns1.p27.dynect.net
email: jettsalls@gmail.com
serial: 95
refresh: 3600
retry: 600
expire: 604800
minimum ttl: 60
86400s (1.00:00:00)
medexpressrx.com IN NS ns2.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns4.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns1.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns3.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN A 199.59.166.168 300s (00:05:00)
medexpressrx.com IN MX
preference: 30
exchange: alt2.aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN MX
preference: 10
exchange: aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN MX
preference: 20
exchange: alt1.aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN TXT v=spf1 include:_spf.google.com ~all 86400s (1.00:00:00)
medexpressrx.com IN TXT google-site-verification=Us9olDg61Gvfdbuvs35E-LgT4fFGvVICB4s51HQomb8 86400s (1.00:00:00)
medexpressrx.com IN SPF v=spf1 include:_spf.google.com ~all 86400s (1.00:00:00)
168.166.59.199.in-addr.arpa IN AAAA ::1 500s (00:08:20)
168.166.59.199.in-addr.arpa IN MX
preference: 10
exchange: domain.not.configured
120s (00:02:00)
168.166.59.199.in-addr.arpa IN PTR domain.not.configured 120s (00:02:00)
168.166.59.199.in-addr.arpa IN A 208.94.147.150 120s (00:02:00)
166.59.199.in-addr.arpa IN A 208.94.147.150 120s (00:02:00)
166.59.199.in-addr.arpa IN PTR domain.not.configured 120s (00:02:00)
166.59.199.in-addr.arpa IN MX
preference: 10
exchange: domain.not.configured
120s (00:02:00)
166.59.199.in-addr.arpa IN AAAA ::1 500s (00:08:20)
166.59.199.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-10-19 12:00:36Z
signature inception: 2012-10-09 12:00:36Z
key tag: 25838
signer’s name: 199.in-addr.arpa
signature:
(1024 bits)
6317s (01:45:17)
166.59.199.in-addr.arpa IN NSEC
next domain name: 167.59.199.in-addr.arpa
record types: NS RRSIG NSEC
6317s (01:45:17)
166.59.199.in-addr.arpa IN NS ns4.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns2.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns5.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns1.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns6.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns3.ethproxy.com 81917s (22:45:17)

— end —

allneededpills.com ~ trustedtablets-online.com

October 7, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name http://www.trustedtablets-online.com
aliases
addresses 190.120.229.5
Domain Whois record

Queried whois.internic.net with “dom trustedtablets-online.com

Domain Name: TRUSTEDTABLETS-ONLINE.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.EXTENDEDLV.COM
Name Server: NS2.EXTENDEDLV.COM
Status: clientTransferProhibited
Updated Date: 16-feb-2012
Creation Date: 21-mar-2011
Expiration Date: 21-mar-2013

Last update of whois database: Sun, 07 Oct 2012 14:47:57 UTC
Queried whois.joker.com with “trustedtablets-online.com

domain: trustedtablets-online.com
owner: Eugene Kotovski
email: kotovskie@gmail.com
address: 59 Glenthorne Rd
city: London
state: —
postal-code: W6 0LJ
country: GB
phone: +44.7039400218
admin-c: CCOM-1692104 kotovskie@gmail.com
tech-c: CCOM-1692104 kotovskie@gmail.com
billing-c: CCOM-1692104 kotovskie@gmail.com
nserver: ns1.extendedlv.com 190.120.229.5
nserver: ns2.extendedlv.com 91.207.60.29
status: lock
created: 2011-03-21 11:55:08 UTC
modified: 2012-02-16 13:27:06 UTC
expires: 2013-03-21 11:55:08 UTC
query-source: 209.200.97.201

contact-hdl: CCOM-1692104
person: Eugene Kotovski
email: kotovskie@gmail.com
address: 59 Glenthorne Rd
city: London
state: —
postal-code: W6 0LJ
country: GB
phone: +44.7039400218

source: joker.com live whois service
query-time: 0.007634
db-updated: 2012-10-07 14:48:22

Network Whois record
Queried whois.lacnic.net with “190.120.229.5

inetnum: 190.120.228/22
status: reallocated
owner: Infolink Panama Corp.
ownerid: PA-IPCO3-LACNIC
responsible: Miguel Abood
address: APDO 0832-2745, –, Suite 152, World Trade C
address: 0832-2745 – Panama – PA
country: PA
phone: +507 3176046 []
owner-c: MIA17
tech-c: MIA17
abuse-c: MIA17
inetrev: 190.120.228/22
nserver: NS3.FORTATRUST.COM
nsstat: 20121004 AA
nslastaa: 20121004
created: 20120321
changed: 20120321
inetnum-up: 190.120.224/20

nic-hdl: MIA17
person: Miguel Abood
e-mail: noc@INFOLINKCO.COM
address: PCRC Switching Station, Corozal Oeste, 1, 0
address: 00000 – Panama – PA
country: PA
phone: +507 3176046 []
created: 20120221
changed: 20120221

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

DNS records

DNS query for 5.229.120.190.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.trustedtablets-online.com IN A 190.120.229.5 300s (00:05:00)
trustedtablets-online.com IN SOA
server: ns1.extendedlv.com
email: root@extendedlv.com
serial: 2016165390
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
300s (00:05:00)
trustedtablets-online.com IN NS ns2.extendedlv.com 300s (00:05:00)
trustedtablets-online.com IN NS ns1.extendedlv.com 300s (00:05:00)
trustedtablets-online.com IN A 190.120.229.5 300s (00:05:00)
— end —

Address lookup
canonical name allneededpills.com
aliases
addresses 190.120.229.5
Domain Whois record

Queried whois.internic.net with “dom allneededpills.com”…

Domain Name: ALLNEEDEDPILLS.COM
Registrar: WEB WERKS INDIA PVT. LTD.
Whois Server: whois.dfordomains.com
Referral URL: http://www.dfordomains.com
Name Server: NS1.EXTENDEDLV.COM
Name Server: NS2.EXTENDEDLV.COM
Status: ok
Updated Date: 27-dec-2011
Creation Date: 27-dec-2011
Expiration Date: 27-dec-2012

Last update of whois database: Sun, 07 Oct 2012 14:51:04 UTC <<<
Queried whois.dfordomains.com with “allneededpills.com”…

Domain Name : ALLNEEDEDPILLS.COM

Registrant:
Eugene Kotovski
Eugene Kotovski kotovskie@gmail.com
59 Glenthorne Road
London
London, W6 0LJ
GB
Tel. +44.7039400218 Fax. +44.7039400218

Creation Date : 12/27/2011 11:16:13 AM
Expiration Date : 12/27/2012 11:16:13 AM

Domain servers in listed order:
ns1.extendedlv.com
ns2.extendedlv.com

Administrator Contact :
Eugene Kotovski
Eugene Kotovski kotovskie@gmail.com
59 Glenthorne Road
London
London, W6 0LJ
GB
Tel. +44.7039400218 Fax. +44.7039400218

Technical Contact :
Eugene Kotovski
Eugene Kotovski kotovskie@gmail.com
59 Glenthorne Road
London
London, W6 0LJ
GB
Tel. +44.7039400218 Fax. +44.7039400218

Billing Contact :
Eugene Kotovski
Eugene Kotovski (kotovskie@gmail.com
59 Glenthorne Road
London
London, W6 0LJ
GB
Tel. +44.7039400218 Fax. +44.7039400218

Status: ok

———————
Network Whois record

Queried whois.lacnic.net with “190.120.229.5

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

DNS records

DNS query for 5.229.120.190.in-addr.arpa returned an error from the server: NameError

name class type data time to live
allneededpills.com IN SOA
server: ns1.extendedlv.com
email: root@extendedlv.com
serial: 2016165412
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
300s (00:05:00)
allneededpills.com IN NS ns2.extendedlv.com 300s (00:05:00)
allneededpills.com IN NS ns1.extendedlv.com 300s (00:05:00)
allneededpills.com IN A 190.120.229.5 300s (00:05:00)
— end —

The following A records are set to 190.120.229.5:

allneededpills.com
best-generics-supplier.com
bestpills-solution.com
besttabs-solution.com
ciplabrandmeds.net
eddrugs-solution.com
edeuromeds.com
edmedications-for-you.com
edmedications-online.com
edmeds-selection.com
edtabs-for-you.com
edtabs-selection.com
edtabs-sellout.com
edtabs-solution.com
fast-edhelp.com
fast-edsolution.com
french-online-pharmacy.com
genericmedstonorth.com
healthylife-time.com
meds2us.mobi
my-securebilling.com
ns1.extendedlv.com
perfect-onlinepharmacy.com
perfect-rxmedications.com
pharmacy-shop-online.net
popularpills-online.com
reliable-tablets.com
rxtabs-online.com
safe-edpills.com
spanish-online-pharmacy.com
trustedtablets-online.com
trustedtabs.mobi
ultimate-pill-store.com
ultimate-rxmedications.com
your-best-pharmacy.com
your-excellent-tablets.com
your-perfect-generics.com
EdMeds-selection.com
deluxe-meds.com
Justdropped.com
UsTabs.com
Safe-Meds.org
Your-Best-Pharmacy.com
EdTabs-for-you.com
Ultimate-RxMedications.com
RxTabs-Online.com
GenericMedstonorth.com
Reliable-Tablets.com
Your-excellent-Tablets.com
Ultimate-Pill-Store.com
Ed-farmacia.com
Trustedtablets-online.com
http://www.Trustedtablets-online.com
ed-sante.com
Tumedicfarm.biz
Justdropped.com
Fastmedsabroad.com
Promptpillstore.com
Ed-farmacia.com
Fastmedsabroad.com
cheaptablets.biz
HqPills24.com
Healthylife-time.com

Address lookup
canonical name deluxe-meds.com
aliases
addresses 78.110.170.23
Domain Whois record

Queried whois.internic.net with “dom deluxe-meds.com

Domain Name: DELUXE-MEDS.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com
Name Server: NS1.TECKBEANS.COM
Name Server: NS2.TECKBEANS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 11-mar-2012
Creation Date: 11-mar-2012
Expiration Date: 11-mar-2013

>>> Last update of whois database: Sun, 07 Oct 2012 15:05:07 UTC <<<
Queried whois.moniker.com with "deluxe-meds.com"…

Domain Name: DELUXE-MEDS.COM
Registrar: MONIKER

Registrant [3805628]:
Moniker Privacy Services DELUXE-MEDS.COM@monikerprivacy.net
Moniker Privacy Services
1800 SW 1st Avenue
Suite 440
Portland
OR
97201
US

Administrative Contact [3805628]:
Moniker Privacy Services DELUXE-MEDS.COM@monikerprivacy.net
Moniker Privacy Services
1800 SW 1st Avenue
Suite 440
Portland
OR
97201
US
Phone: +1.503-207-0147
Fax: +1.954-585-9186

Billing Contact [3805628]:
Moniker Privacy Services DELUXE-MEDS.COM@monikerprivacy.net
Moniker Privacy Services
1800 SW 1st Avenue
Suite 440
Portland
OR
97201
US
Phone: +1.5032070147
Fax: +1.9545859186

Technical Contact [3805628]:
Moniker Privacy Services DELUXE-MEDS.COM@monikerprivacy.net
Moniker Privacy Services
1800 SW 1st Avenue
Suite 440
Portland
OR
97201
US
Phone: +1.5032070147
Fax: +1.9545859186

Domain servers in listed order:

NS1.TECKBEANS.COM
NS2.TECKBEANS.COM

Record created on: 2012-03-11 13:39:01.0
Database last updated on: 2012-03-11 13:43:30.46
Domain Expires on: 2013-03-11 13:39:01.0
Network Whois record

Queried whois.ripe.net with "-B 78.110.170.23
Information related to '78.110.170.0 – 78.110.170.31'

inetnum: 78.110.170.0 – 78.110.170.31
netname: LDNI
descr: UK range for VPS provisioning
country: GB
admin-c: TR2946-RIPE
tech-c: TR2946-RIPE
status: ASSIGNED PA
mnt-by: UKSERVERS-MNT
changed: customer.accounts@ukservers.com 20120125
source: RIPE

person: Theo Robertson-Bonds
address: LDNI
address: 36 Mount Street
address: RH4 3HX Dorking
address: UNITED KINGDOM
phone: +441306400040
nic-hdl: TR2946-RIPE
mnt-by: UKSERVERS-MNT
changed: customer.accounts@ukservers.com 20110725
source: RIPE
remarks: LDNI IPs for managed IT hosting global subscriber provisioning
remarks: ****
remarks: SEND ABUSE NOTICES TO ABUSE@LDNI.NET
remarks: ***
abuse-mailbox: abuse@ldni.net

Information related to '78.110.160.0/20AS42831'

route: 78.110.160.0/20
descr: UK Dedicated Servers Limited
origin: AS42831
mnt-by: UKSERVERS-MNT
changed: david@ukservers.com 20070814
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS2)
DNS records

name class type data time to live
http://www.deluxe-meds.com IN CNAME deluxe-meds.com 300s (00:05:00)
deluxe-meds.com IN SOA
server: ns1.deluxe-meds.com
email: hostmaster@deluxe-meds.com
serial: 2009111905
refresh: 3600
retry: 600
expire: 86400
minimum ttl: 1800
300s (00:05:00)
deluxe-meds.com IN NS ns2.teckbeans.com 300s (00:05:00)
deluxe-meds.com IN NS ns1.teckbeans.com 300s (00:05:00)
deluxe-meds.com IN A 78.110.170.23 300s (00:05:00)
23.170.110.78.in-addr.arpa IN PTR 78-110-170-23.rdns.ldni.net 3600s (01:00:00)
170.110.78.in-addr.arpa IN SOA
server: ns1.ukservers.com
email: networks@ukservers.com
serial: 2008112811
refresh: 21600
retry: 3600
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
170.110.78.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-11-06 10:01:37Z
signature inception: 2012-10-07 09:01:37Z
key tag: 61185
signer's name: 78.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
170.110.78.in-addr.arpa IN NSEC
next domain name: 171.110.78.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
170.110.78.in-addr.arpa IN NS ns1.ukservers.com 86400s (1.00:00:00)
170.110.78.in-addr.arpa IN NS ns2.ukservers.com 86400s (1.00:00:00)
— end —

uk-medicines.org

October 6, 2012October 6, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name uk-medicines.org
aliases
addresses 66.6.58.47
Domain Whois record

Queried whois.publicinterestregistry.net with “uk-medicines.org”…

Domain ID:D154638287-LROR
Domain Name:UK-MEDICINES.ORG
Created On:07-Nov-2008 17:16:21 UTC
Last Updated On:14-Sep-2011 10:06:59 UTC
Expiration Date:07-Nov-2012 17:16:21 UTC
Sponsoring Registrar:Rebel.com Corp. (R1272-LROR)

Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED

Registrant ID:RBL1903863
Registrant Name:Tom Haughton
Registrant Organization:GDS Licensing LTD
Registrant Street1:Unit 2 – 28 Warrens Industrial Park
Registrant Street2:
Registrant Street3:
Registrant City:St Michael
Registrant State/Province:.
Registrant Postal Code:BB22026
Registrant Country:BB
Registrant Phone:+1.2464240434
Registrant Email:seodomains@gmail.com

Admin ID:RBL1903863
Admin Name:Tom Haughton
Admin Organization:GDS Licensing LTD
Admin Street1:Unit 2 – 28 Warrens Industrial Park
Admin Street2:
Admin Street3:
Admin City:St Michael
Admin State/Province:.
Admin Postal Code:BB22026
Admin Country:BB
Admin Phone:+1.2464240434
Admin Email:seodomains@gmail.com

Tech ID:RBL1903863
Tech Name:Tom Haughton
Tech Organization:GDS Licensing LTD
Tech Street1:Unit 2 – 28 Warrens Industrial Park
Tech City:St Michael
Tech State/Province:.
Tech Postal Code:BB22026
Tech Country:BB
Tech Phone:+1.2464240434
Tech Email:seodomains@gmail.com

Name Server:DNS.REBEL.COM
Name Server:DNS2.REBEL.COM

DNSSEC:Unsigned
Network Whois record

Queried whois.arin.net with “n 66.6.58.47″…

NetRange: 66.6.48.0 – 66.6.63.255
CIDR: 66.6.48.0/20
OriginAS:
NetName: MOMENTOUS
NetHandle: NET-66-6-48-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Assignment
RegDate: 2004-02-24
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-66-6-48-0-1

OrgName: MOMENTOUS
OrgId: MOMEN
Address: 26 Auriga Drive
City: Ottawa
StateProv: ON
PostalCode: K2E-7Y8
Country: CA
RegDate: 2002-09-25
Updated: 2012-04-19
Ref: http://whois.arin.net/rest/org/MOMEN

OrgAbuseHandle: NETWO28-ARIN
OrgAbuseName: Network Operations
OrgAbusePhone: +1-613-225-2000
OrgAbuseEmail: noc@momentous.ca
OrgAbuseRef: http://whois.arin.net/rest/poc/NETWO28-ARIN

OrgTechHandle: NETWO28-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-613-225-2000
OrgTechEmail: noc@momentous.ca
OrgTechRef: http://whois.arin.net/rest/poc/NETWO28-ARIN
DNS records

DNS query for 47.58.6.66.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
uk-medicines.org IN A 66.6.58.47 3600s (01:00:00)
uk-medicines.org IN SOA
server: dns.rebel.com
email: noc@rebel.com
serial: 3
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
uk-medicines.org IN NS dns2.rebel.com 3600s (01:00:00)
uk-medicines.org IN MX
preference: 10
exchange: loopback.rebel.com
3600s (01:00:00)
uk-medicines.org IN NS dns.rebel.com 3600s (01:00:00)
— end —

WhoIs ~ www.cheapviagrabuy.org (unapprovedpharmacy.wordpress.com)
WhoIs ~ universalrxpharmacy.com (scamfraudalert.org)
Potential Predators Scam (onlinecomplaintsboard.wordpress.com)

YOUR-GENERIC.COM

October 2, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.

Address lookup
canonical name your-generic.com
aliases
addresses 159.148.27.2
Domain Whois record

Queried whois.internic.net with “dom your-generic.com”…

Domain Name: YOUR-GENERIC.COM
Registrar: ASCIO TECHNOLOGIES, INC.
Whois Server: whois.ascio.com
Referral URL: http://www.ascio.com
Name Server: NS1.ALPHAHOST.LV
Name Server: NS2.ALPHAHOST.LV
Status: ok
Updated Date: 14-jul-2012
Creation Date: 09-dec-2011
Expiration Date: 09-dec-2012

Last update of whois database: Tue, 14 Aug 2012 18:12:03 UTC <
Queried whois.ascio.com with “your-generic.com”…

Registrant:
Oleg Gudzevatyj (1472282)
Avramenka 32, 5

Zaporizhzhya, , 0000
UA

Domain name: your-generic.com

Technical contact:
Tolvaisa, Viktoras (VT1472284)
OWEXX
Schlieper Str. 16

Berlin, Germany, 13507
DE
reg@hosting4web.eu
+370.65019120 Fax: +370.41550595

Administrative contact:
Tolvaisa, Viktoras (VT1472283)
OWEXX
Schlieper Str. 16

Berlin, Germany, 13507
DE
reg@hosting4web.eu
+370.65019120 Fax: +370.41550595

Record created: 2011-12-09 07:37:48
Record last updated: 2012-07-14 06:48:55
Record expires: 2012-12-09 07:37:00

Domain servers in listed order:
ns1.alphahost.lv (NS1ALPHA19612)
ns2.alphahost.lv (NS2ALPHA10480)

Network Whois record

Queried whois.ripe.net with “-B 159.148.27.2″…
Information related to ‘159.148.27.0 – 159.148.27.63’

inetnum: 159.148.27.0 – 159.148.27.63
netname: ATTISTIBASKOMPL
descr: Attistibas komplekss – ATTEKO SIA
country: LV
org: ORG-LA12-RIPE
admin-c: LN645-RIPE
tech-c: LN645-RIPE
status: ASSIGNED PA
mnt-by: LATNET-MNT
changed: hostmaster@latnet.lv 20070619
source: RIPE

organisation: ORG-LA12-RIPE
org-name: LATNET SERVISS Ltd.
org-type: LIR
descr: SIA Latnet Serviss
address: LATNET SERVISS SIA
Maskavas iela 240
LV1063 Riga
Latvia
phone: +37167186970
fax-no: +37167186969
e-mail: latnet@latnet.lv
abuse-mailbox: abuse@latnet.lv
admin-c: RB2548-RIPE
admin-c: UH246-RIPE
admin-c: UH246-RIPE
mnt-ref: AS2588-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: latnet-mnt
mnt-by: RIPE-NCC-HM-MNT

role: Latnet HostMaster
address: Latnet ISP
address: Latvia
phone: +371 67186970
fax-no: +371 67186968
e-mail: ripe@latnet.lv
remarks: trouble: Information: http://www.ls.lv
remarks: trouble: Questions — mailto:iproute@latnet.lv
remarks: trouble: Abuse reports — mailto:abuse@latnet.lv
org: ORG-LA12-RIPE
admin-c: UH246-RIPE
tech-c: RB2548-RIPE
nic-hdl: LN645-RIPE
abuse-mailbox: abuse@latnet.lv
notify: hostmaster@latnet.lv
mnt-by: AS2588-MNT
mnt-by: gclv-mnt
changed: hamins@latnet.lv 20041027
changed: kristine@latnet.lv 20051004
changed: hamins@latnet.lv 20070125
changed: hamins@latnet.lv 20070928
changed: hamins@latnet.lv 20080718
changed: uldis@latnetdc.lv 20120109
source: RIPE

% Information related to ‘159.148.0.0/16AS2588’

route: 159.148.0.0/16
descr: LATNET
origin: AS2588
notify: hostmaster@latnet.lv
mnt-by: AS2588-MNT
changed: janis@latnet.lv 19990315
changed: baiba@latnet.lv 20011029
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS2)

DNS records
name class type data time to live
your-generic.com IN SOA
server: ns1.alphahost.lv
email: webmaster@alphahost.lv
serial: 2012071701
refresh: 7200
retry: 3600
expire: 604800
minimum ttl: 86400
7200s (02:00:00)
your-generic.com IN NS ns2.alphahost.lv 7200s (02:00:00)
your-generic.com IN NS ns1.alphahost.lv 7200s (02:00:00)
your-generic.com IN MX
preference: 10
exchange: mx2.alphahost.lv
7200s (02:00:00)
your-generic.com IN MX
preference: 5
exchange: mx.alphahost.lv
7200s (02:00:00)
your-generic.com IN TXT v=spf1 a mx ~all 7200s (02:00:00)
your-generic.com IN TXT 7200s (02:00:00)
your-generic.com IN A 159.148.27.2 7200s (02:00:00)
2.27.148.159.in-addr.arpa IN PTR mx.alphahost.lv 7200s (02:00:00)
27.148.159.in-addr.arpa IN SOA
server: ns1.alphahost.lv
email: webmaster@alphahost.lv
serial: 2007040301
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 10800
7200s (02:00:00)
27.148.159.in-addr.arpa IN NS ns1.alphahost.lv 7200s (02:00:00)
27.148.159.in-addr.arpa IN NS ns2.alphahost.lv 7200s (02:00:00)

— end —

Name server: 173.192.194.78

Displaying items 1 to 100, out of a total of 146

WhoIs ~ pharmonlinerx.com

October 1, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

(800) 532-4808
(718) 313-1498
+44-203-0110241

Address lookup
canonical name pharmonlinerx.com
aliases
addresses 91.218.212.30
Domain Whois record

Queried whois.internic.net with “dom pharmonlinerx.com”…

Domain Name: PHARMONLINERX.COM
Registrar: VAUTRON RECHENZENTRUM AG
Whois Server: whois.antagus.de
Name Server: DNS1.INTERNIC.AT
Name Server: DNS2.INTERNIC.AT
Name Server: NS501.INTERNIC.AT
Name Server: NS57.INTERNIC.AT
Status: ok
Updated Date: 31-jul-2012
Creation Date: 16-may-2011
Expiration Date: 16-may-2013

Last update of whois database: Mon, 01 Oct 2012 23:42:45 UTC
Queried whois.antagus.de with “pharmonlinerx.com

Whois Server Version 2.1 at whois.tmagnic.net
Database contains ONLY .COM, .NET, .TV, .CC domains.

Owner Contact:
Mark Vance
–
54 Glenilla Rd 54
London, 317, UK

Punycode Name: pharmonlinerx.com
Unicode Name: pharmonlinerx.com

Admin Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Technical Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Zone Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Record expires on: 2013-05-16 17:50:01

Domain servers in listed order:

dns2.internic.at 212.126.66.30
ns57.internic.at 106.187.44.82
dns1.internic.at 212.126.64.70
ns501.internic.at 66.175.216.204

Network Whois record

Queried whois.ripe.net with “-B 91.218.212.30″…

% Information related to ‘91.218.212.0 – 91.218.215.255’

inetnum: 91.218.212.0 – 91.218.215.255
netname: DLH2-NET
descr: TOV ‘Dream Line Holding’
country: UA
org: ORG-DLH1-RIPE
admin-c: BABY-RIPE
tech-c: MIMA-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: DREAM-MNT
mnt-routes: DREAM-MNT
mnt-domains: DREAM-MNT
changed: hostmaster@ripe.net 20100816
source: RIPE

organisation: ORG-DLH1-RIPE
org-name: TOV ‘Dream Line Holding’
org-type: OTHER
address: Predslavinska str., 28
address: Ukraine, Kiev
e-mail: johnson@johnson.kiev.ua
abuse-mailbox: abuse@qos.kiev.ua
mnt-ref: DREAM-MNT
mnt-by: DREAM-MNT
changed: mim@qos.kiev.ua 20090818
source: RIPE

person: Evgeniy Zbarazhskiy
address: UA,Kiev
e-mail: johnson@johnson.kiev.ua
phone: +380442370000
nic-hdl: BABY-RIPE
mnt-by: BABY-MNT
changed: hostmaster@ripe.net 20050603
source: RIPE

person: Gregory Prokopenko
address: UA,Kiev
e-mail: mim@qos.kiev.ua
phone: +380443324607
nic-hdl: MIMA-RIPE
mnt-by: MIMA-MNT
notify: mim@qos.kiev.ua
changed: mim@qos.kiev.ua 20070731
source: RIPE

% Information related to ‘91.218.212.0/24AS42352’

route: 91.218.212.0/24
descr: TOV Dream Line Holding
origin: AS42352
mnt-by: DREAM-MNT
changed: mim@qos.kiev.ua 20100816
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)
DNS records

name class type data time to live
pharmonlinerx.com IN A 91.218.212.30 86400s (1.00:00:00)
pharmonlinerx.com IN NS dns2.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS ns57.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS ns501.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS dns1.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN SOA
server: dns1.internic.at
email: hostmaster@internic.at
serial: 2011051712
refresh: 10800
retry: 3600
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
30.212.218.91.in-addr.arpa IN PTR unallocated.qos.kiev.ua 3600s (01:00:00)
212.218.91.in-addr.arpa IN SOA
server: ns.qos.kiev.ua
email: hostmaster@qos.kiev.ua
serial: 2012092100
refresh: 43000
retry: 5000
expire: 2400000
minimum ttl: 86400
3600s (01:00:00)
212.218.91.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-10-31 11:52:34Z
signature inception: 2012-10-01 10:52:34Z
key tag: 1456
signer’s name: 91.in-addr.arpa
signature:
(1024 bits)
4D14983E5113B95AB8E6E337840D9202
77A8CA14CB4C4CA1E852E17BE3E64665
30C68B4E242C937D3F1BD7194AD2451D
C0A5F5185434F084F69D5371E13D9C92
F25116949ADDA08831CD6CCC68727942
1C8077544D1AE7DF7B9B44FB83E8CDC4
BCC30FABAC3A381CDC1ACE65A1F7BEFC
361BB949BEA57218BA6480C535098A64
7200s (02:00:00)
212.218.91.in-addr.arpa IN NSEC
next domain name: 213.218.91.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
212.218.91.in-addr.arpa IN NS ns.qos.kiev.ua 3600s (01:00:00)
212.218.91.in-addr.arpa IN NS ns.dream.net.ua 3600s (01:00:00)
— end —

Sites on IP 91.218.212.30

Bogus Online Pharmacies

September 30, 2012September 25, 20132 Comments

Domain	Criminal Network
247onlinemeds.co.uk	No network classification
24hbuyviagraonline.com	Rx-Partners
4med.co.uk	Pharmcash
55reviagra-dosage.com	Rx-Partners
76reviagra-dosage.com	Rx-Partners
777generic-viagra.co.uk	RxProfits
acai-sales.co.uk	No network classification
achat-tadalafil.com	Pharmcash
all-pharma.com	RxProfits
allaboutdiazepam.com	Multinetwork
alltabs4you.com	Pharmcash
apcalis-kamagra.co.uk	No network classification
aurogra.co.uk	No network classification
bajarxmeds.com	Medicina Mexico
bestpricelipitor.com	RxProfits
buy-online-com.ru	Rx-Partners
buy-tramadols-usa.us	Pill Program
buy-viagra-online-24h.com	Rx-Partners
buybluepower.com	No network classification
buyblues.co.uk	No network classification
buycheapgenericviagra.co.uk	No network classification
buycheaplevitraonline.co.uk	No network classification
buycheapritalin.com	Pharmcash
buycialisonlineinuk.co.uk	Rx-Partners
buyonlinewithoutaprescription.com	evapharmacy.ru
buypeptidesonline.com	No network classification
buysildenafilau.com	MyRxAffiliateProgram
buysynthroid.co.uk	Rx-Partners
buytadalafilau.com	MyRxAffiliateProgram
buyviagrainengland.co.uk	No network classification
buyviagraonlineone.co.uk	No network classification
checksafe.biz	MedsPartners
cialis-comprar.net	Rx-Partners
cialis-forsale.com	Rx-Partners
cialis1.ru	No network classification
cialis40mg.us	Rx-Partners
citalopram.co.uk	Rx-Partners
clerkmedic.ru	PharmacyExpress
comprahghonline.com	No network classification
comprar-tadalafil.net	Rx-Partners
comprarkamagraespana.com	Rx-Partners
comprarlevitraespana.com	Rx-Partners
comprarviagra-es.net	Pharmcash
discountvardenafil.com	RxProfits
discountviagrauk.co.uk	Rx-Partners
dropshipper.org.uk	No network classification
dwdoctor.ru	PharmacyExpress
each99.ru	No network classification
ed-sale.com	MyRxAffiliateProgram
edpillsonline.co.uk	Rx-Partners
ellenmeds.org	No network classification
espanacialis.com	Rx-Partners
espanakamagra.com	Rx-Partners
espanalevitra.com	Rx-Partners
espanapropecia.com	Rx-Partners
espanaviagra.com	Rx-Partners
eumedicstore.com	Pillchecks
expresshealthshoprx.com	RxProfits
fitgenerics.com	Pharmatheke
ftdeals.com	evapharmacy.ru
galaxytabcanada.at	evapharmacy.ru
gearedupshop.com	No network classification
generic-hgh.com	No network classification
genericmeds4less.com	RxProfits
genericosildenafil.com	Rx-Partners
genericotadalafil.com	Rx-Partners
globalcareshop.com	MyRxPartner
godsglorychurch.org	evapharmacy.ru
healthmd.biz	RxProfits
hmslim.com	No network classification
iron-juice.com	No network classification
kamagrabirmingham.com	No network classification
kamagraworld.net	No network classification
lbrmedic.ru	PharmacyExpress
levitra-generico.com	Rx-Partners
levitra1.ru	No network classification
levitrai.com	No network classification
lowcostlipitor.com	RxProfits
medforhealth.net	MyRxPartner
medicchick.ru	PharmacyExpress
medicedih.ru	PharmacyExpress
mediconds.ru	PharmacyExpress
medicpol.ru	PharmacyExpress
medicvi6.ru	PharmacyExpress
medicworks.ru	PharmacyExpress
meds-quick.com	No network classification
medshop-trust.net	Pharmcash
medsrxlist.org	Pharmacy-oNet
mega-meds.com	RxProfits
meridiadietabs.com	RxCash.biz
myhealthyerection.com	PharmacyExpress
mysecurepay.biz	MedsPartner
ndixmedic.ru	evapharmacy.ru
norx-de.net	evapharmacy.ru
oepills.ru	PharmacyExpress
online-health-shop.com	MyRxPartner
online-needs.com	No network classification
onlinepillmarket.com	Pharmcash
ordercheapbuyonline.com	evapharmacy.ru
ordermedsstore.com	RxProfits
patchspharm.com	RxProfits
pharmacie-dupin-bormes.com	Everest Network
pharmaonlinesales.com	RxProfits
phenterminelowcost.com	RxCash.biz
pillsformen.nl	No network classification
r5viagra-cost.org	Rx-Partners
reviagra-dosage.com	Rx-Partners
rightpurchase.biz	MedsPartners
rxpil.com	Pharmcash
safe-pay.biz	PharmacyExpress
safepayform.com	Pharmcash
savepillvip-rx.ru	PharmacyExpress
silagrahelp.com	Rx-Partners
sildenafilcomprar.net	Rx-Partners
sildenafiles.com	MyRxAffiliateProgram
steroidsftw.net	No network classification
superstar24.com	Rx-Partners
tadalafil40mg.us	Rx-Partners
tadalafil5mg.us	Rx-Partners
tadalafiles.com	MyRxAffiliateProgram/td>
top4pharmacy.com	RxProfits
topgenericos.com	Everest Network
trustedpaymentsystem.com	evapharmacy.ru
ultra-pharma.com	RxProfits
viagraburada.com	No network classification
vigourdrugstore.com	No network classification
wakefulnesstabs.com	RxCash.biz
wayshealth.net	MyRxPartner
web-pay-safe.com	Pharmcash
withoutaprescription.net	evapharmacy.ru
worldwide-generics.com	RxProfits
xanaxtabsnorx.com	RxCash.biz

Source: Legitscript.com

Medical Information At Your Fingertips (techwench.com)
ohotdamn.com Redirects ~ canadian-pharmacy-24h.com (unapprovedpharmacy.wordpress.com)
Canadian Pharmacy: BUY NOW VIAGRA & CIALIS ! (unapprovedpharmacy.wordpress.com)
Last But Not Least, Korean Register of Shipping Pulls The Plug On Iran (gcaptain.com)
How to Buy Drugs – Cheap Viagra, Cialis, Levitra – Online Pharmacy Reviews 2012 (prweb.com)
New Benefits of Blockbuster Drug Cialis Discovered; Sales Expected To Explode Says DoctorSolve.com (prweb.com)

WhoIs cartadmin.com

September 20, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Nameservers

ns1.cartadmin.com	(67.216.199.78)
ns2.cartadmin.com	(199.96.80.163)
ns3.cartadmin.com	(202.61.108.237)

Domain Record

Domain Domain Name: CARTADMIN.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Registrar Registrar URL: http://www.yournamemonkey.com
Name Servers: NS1.CARTADMIN.COM
Name Servers: NS2.CARTADMIN.COM
Name Servers: NS3.CARTADMIN.COM
Domain Status: ok
Updated: 17-feb-2012
Created: 16-feb-2004
Expires: 16-feb-2013

zithromaxbuyonline.us

September 20, 2012September 20, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name allergicdrugstore.com
aliases
addresses 89.248.172.114
Domain Whois record

Queried whois.internic.net with “dom allergicdrugstore.com

Domain Name: ALLERGICDRUGSTORE.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.ALLERGICDRUGSTORE.COM
Name Server: NS2.ALLERGICDRUGSTORE.COM
Status: clientTransferProhibited
Updated Date: 16-may-2012
Creation Date: 22-mar-2012
Expiration Date: 22-mar-2013

Last update of whois database: Thu, 20 Sep 2012 10:42:02 UTC
Queried whois.todaynic.com with “allergicdrugstore.com

Domain name: allergicdrugstore.com
Status: Active

Registrant:
Name: Private Protection Co.LTD
Organization: Private Protection Co.LTD.
Address: NO.1111 Chaoyang Road, Beijing
City: Beijing
Province/state: BJ
Country: CN
Postal Code: 100000

Administrative Contact:
Name: Private Protection Co.LTD. Zhuhai Branch
Organization: Private Protection Co.LTD.
Address: NO.1 Meihua Road
City: Zhuhai
Province/state: GD
Country: CN
Postal Code: 519000
Email: f33a2cf792cf9afe656c5a8ff26dee00@domain-private.com

Dispute Contact:
Name: Todaynic.com,Inc.
Organization: Todaynic.com,Inc.
Address: 6B XIHAI Building,
No.221 Renmin E Road, Xiangzhou District,

City: Zhuhai
Province/state: GD
Country: CN
Postal Code: 519000
Phone: +86.756-2281763

Nameserver Information:
ns1.allergicdrugstore.com
ns2.allergicdrugstore.com

Create: 2012-03-22 16:13:25
Update: 2012-05-16
Expired: 2013-03-22
QueryTimes: 76

Network Whois record

Queried whois.ripe.net with “-B 89.248.172.114
Information related to ‘89.248.172.62 – 89.248.172.255’
inetnum: 89.248.172.62 – 89.248.172.255
netname: NL-ECATEL
descr: AS29073, Ecatel LTD
country: NL
admin-c: EL25-RIPE
tech-c: EL25-RIPE
status: ASSIGNED PA
mnt-by: ECATEL-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
changed: noc@ecatel.net 20080621
source: RIPE

role: Ecatel LTD
address: P.O.Box 19533
address: 2521 CA The Hague
address: Netherlands
abuse-mailbox: abuse@ecatel.net
remarks: —————————————————-
remarks: ECATEL LTD
remarks: Dedicated and Co-location hosting services
remarks: —————————————————-
remarks: for abuse complaints : abuse@ecatel.net
remarks: for any other questions : info@ecatel.net
remarks: —————————————————-
e-mail: noc@ecatel.net
admin-c: EL25-RIPE
tech-c: EL25-RIPE
nic-hdl: EL25-RIPE
mnt-by: ECATEL-MNT
changed: noc@ecatel.net 20090813
source: RIPE

% Information related to ‘89.248.172.0/23AS29073’

route: 89.248.172.0/23
descr: AS29073, Route object
origin: AS29073
mnt-by: ECATEL-MNT
changed: noc@ecatel.net 20071119
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS2)

DNS records
name class type data time to live
allergicdrugstore.com IN MX
preference: 10
exchange: mail.allergicdrugstore.com
14400s (04:00:00)
allergicdrugstore.com IN TXT v=spf1 a mx ip4:89.248.172.38 ~all 14400s (04:00:00)
allergicdrugstore.com IN SOA
server: ns1.allergicdrugstore.com
email: hostmaster@allergicdrugstore.com
serial: 2012051602
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
allergicdrugstore.com IN NS ns2.allergicdrugstore.com 14400s (04:00:00)
allergicdrugstore.com IN NS ns1.allergicdrugstore.com 14400s (04:00:00)
allergicdrugstore.com IN A 89.248.172.114 14400s (04:00:00)
114.172.248.89.in-addr.arpa IN PTR hosted-by.ecatel.net 3600s (01:00:00)
172.248.89.in-addr.arpa IN NS ns2.ecatel.net 3600s (01:00:00)
172.248.89.in-addr.arpa IN NS ns1.ecatel.net 3600s (01:00:00)
172.248.89.in-addr.arpa IN SOA
server: ns1.ecatel.net
email: noc@ecatel.net
serial: 2012080900
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)

— end —

Sites on IP 89.248.172.114

Displaying items 1 to 7, out of a total of 7

Main Office

155 Front Street West,
Toronto, Ontario, Canada

E-mail support:

Phone support:
Track Your Order:

International Orders Department

2000, 1066 West Hastings Street,
Vancouver, BC,
Canada

Shipping Department:
Track Your Order:

USA Branch Office

700 10th Avenue South,
Minneapolis, MN
55414

genericmedix.com

September 19, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name genericmedix.com
aliases
addresses 174.120.29.252
Domain Whois record

Queried whois.internic.net with “dom genericmedix.com

Domain Name: GENERICMEDIX.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS2493.HOSTGATOR.COM
Name Server: NS2494.HOSTGATOR.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 20-apr-2012
Creation Date: 22-apr-2011
Expiration Date: 22-apr-2013

Last update of whois database: Wed, 19 Sep 2012 16:00:04 UTC
Queried whois.godaddy.com with “genericmedix.com”…

Registrant:
FutureMedia Inc.
Ashok Vihar, Phase-III
Near Palam Vihar, Block C2,
Gurgaon, Haryana 122001
India

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: GENERICMEDIX.COM
Created on: 22-Apr-11
Expires on: 22-Apr-13
Last Updated on: 20-Apr-12

Administrative Contact:
Bisht, Bhupal bisht2030@gmail.com
FutureMedia Inc.
Ashok Vihar, Phase-III
Near Palam Vihar, Block C2,
Gurgaon, Haryana 122004
India
(995) 361-1799

Technical Contact:
Bisht, Bhupal bisht2030@gmail.com
FutureMedia Inc.
Ashok Vihar, Phase-III
Near Palam Vihar, Block C2,
Gurgaon, Haryana 122004
India
(995) 361-1799

Domain servers in listed order:
NS2493.HOSTGATOR.COM
NS2494.HOSTGATOR.COM

Network Whois record

Queried rwhois.theplanet.com with “174.120.29.252
rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)

network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-16
network:Auth-Area:174.120.0.0/14
network:Network-Name:TPIS-BLK-174-120-29-0
network:IP-Network:174.120.29.224/27
network:IP-Network-Block:174.120.29.224 – 174.120.29.255
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20101001
network:Updated:20101101

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 174.120.29.252
NetRange: 174.120.0.0 – 174.123.255.255
CIDR: 174.120.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-16
NetHandle: NET-174-120-0-0-1
Parent: NET-174-0-0-0-0
NetType: Direct Allocation
RegDate: 2009-03-23
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-174-120-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

DNS records
name class type data time to live
genericmedix.com IN TXT v=spf1 +a +mx +ip4:174.120.29.226 ?all 14400s (04:00:00)
genericmedix.com IN MX
preference: 0
exchange: genericmedix.com
14400s (04:00:00)
genericmedix.com IN SOA
server: ns2493.hostgator.com
email: root@gator1247.hostgator.com
serial: 2012082000
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
genericmedix.com IN NS ns2493.hostgator.com 86400s (1.00:00:00)
genericmedix.com IN NS ns2494.hostgator.com 86400s (1.00:00:00)
genericmedix.com IN A 174.120.29.252 14400s (04:00:00)
252.29.120.174.in-addr.arpa IN PTR fc.1d.78ae.static.theplanet.com 86400s (1.00:00:00)
29.120.174.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2011083100
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
29.120.174.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)
29.120.174.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)

— end —

WhoIs – www.epills.com

September 16, 2012September 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name http://www.epills.com
aliases
addresses 74.86.197.160
208.87.34.15
Domain Whois record

Queried whois.internic.net with “dom epills.com

Domain Name: EPILLS.COM
Registrar: FABULOUS.COM PTY LTD.
Whois Server: whois.fabulous.com
Referral URL: http://www.fabulous.com
Name Server: NS1.DOMAINMANAGER.COM
Name Server: NS2.DOMAINMANAGER.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 20-dec-2011
Creation Date: 05-jan-2003
Expiration Date: 05-jan-2013

Last update of whois database: Sun, 16 Sep 2012 14:58:05 UTC
Queried whois.fabulous.com with “epills.com

Domain epills.com:
iGenesis Limited
26H Block 7 Beverly Garden
Tseung Kwan O, – – HK

Administrative contact:
Technical contact:
Billing contact:
iGenesis Limited
Domain Administrator
domain@igenesis.com
26H Block 7 Beverly Garden
Tseung Kwan O, – – HK
Phone: +852.93861402
Fax:

Record dates:
Record created on: 2003-01-05 19:01:38 UTC
Record modified on: 2011-12-20 23:53:34 UTC
Record expires on: 2013-01-05 UTC

Nameservers:
ns1.domainmanager.com
ns2.domainmanager.com

Network Whois record

Queried rwhois.softlayer.com with “74.86.197.160”…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.74.86.192.0/19
network:Auth-Area:74.86.192.0/19
network:Network-Name:SOFTLAYER-74.86.192.0
network:IP-Network:74.86.197.160/30
network:IP-Network-Block:74.86.197.160-74.86.197.163
network:Organization;I:PPX International Limited
network:Street-Address:250 Lytton Blvd
network:City:Toronto
network:State:ON
network:Postal-Code:M5N1R6
network:Country-Code:CA
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:chad.morland@ppx.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:20110201
network:Updated:20110201
network:Updated-By:ipadmin@softlayer.com

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 74.86.197.160

NetRange: 74.86.0.0 – 74.86.255.255
CIDR: 74.86.0.0/16
OriginAS: AS36351
NetName: SOFTLAYER-4-4
NetHandle: NET-74-86-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
Comment:
RegDate: 2007-05-16
Updated: 2012-03-28
Ref: http://whois.arin.net/rest/net/NET-74-86-0-0-1

OrgName: SoftLayer Technologies Inc.
OrgId: SOFTL
Address: 4849 Alpha Rd.
City: Dallas
StateProv: TX
PostalCode: 75244
Country: US
RegDate: 2005-10-26
Updated: 2012-01-27
Ref: http://whois.arin.net/rest/org/SOFTL

ReferralServer: rwhois://rwhois.softlayer.com:4321

OrgTechHandle: IPADM258-ARIN
OrgTechName: IP Admin
OrgTechPhone: +1-214-442-0601
OrgTechEmail: ipadmin@softlayer.com
OrgTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-442-0601
OrgAbuseEmail: abuse@softlayer.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

RAbuseHandle: ABUSE1025-ARIN
RAbuseName: Abuse
RAbusePhone: +1-214-442-0601
RAbuseEmail: abuse@softlayer.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

RNOCHandle: IPADM258-ARIN
RNOCName: IP Admin
RNOCPhone: +1-214-442-0601
RNOCEmail: ipadmin@softlayer.com
RNOCRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

RTechHandle: IPADM258-ARIN
RTechName: IP Admin
RTechPhone: +1-214-442-0601
RTechEmail: ipadmin@softlayer.com
RTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

DNS records
name class type data time to live
http://www.epills.com IN A 208.87.34.15 300s (00:05:00)
http://www.epills.com IN A 74.86.197.160 300s (00:05:00)
epills.com IN NS ns3.domainmanager.com 3600s (01:00:00)
epills.com IN MX
preference: 0
exchange: nullmx.domainmanager.com
3600s (01:00:00)
epills.com IN SOA
server: ns3.domainmanager.com
email: admin@domainmanager.com
serial: 2012060201
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
epills.com IN NS ns4.domainmanager.com 3600s (01:00:00)
epills.com IN A 74.86.197.160 300s (00:05:00)
epills.com IN A 208.87.34.15 300s (00:05:00)
160.197.86.74.in-addr.arpa IN PTR 74.86.197.160-static.reverse.softlayer.com 3600s (01:00:00)
197.86.74.in-addr.arpa IN SOA
server: ns1.arpa.global-datacenter.com
email: root@softlayer.com
serial: 2012071801
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
197.86.74.in-addr.arpa IN NS ns1.arpa.global-datacenter.com 3600s (01:00:00)
197.86.74.in-addr.arpa IN NS ns2.arpa.global-datacenter.com 3600s (01:00:00)

— end —

http://www.tramadol-cheap.com
MyNetMD.com
http://www.ecomeds.com
1-888-738-3822
ePharmacySuperstore.com
http://www.edrugsite.com
http://www.eztramadol.com
http://www.eztramadol.net
ezfioricet.com
usrxsecure.com
theonlinepharma.com
tramadol.com
levitraovernight.com
eztramadol.com
eztramadol.net
buyfdacialis.com
buyfdadrugs.com
usrxsecure.com
levitraovernight.com
dreampharmacy-online.com
1800petmeds.com
fioricet-butalbital.net
fioricet-butalbital.net
fioricet-buy-online.net
easymedicationsonline.com

drug-store-pharmacy.com

September 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name drug-store-pharmacy.com
aliases
addresses 74.117.116.69
Domain Whois record

Queried whois.internic.net with “dom drug-store-pharmacy.com

Domain Name: DRUG-STORE-PHARMACY.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.PARKED.COM
Name Server: NS2.PARKED.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 14-feb-2012
Creation Date: 24-feb-2005
Expiration Date: 24-feb-2013

Last update of whois database: Sun, 16 Sep 2012 14:31:20 UTC
Queried whois.godaddy.com with “drug-store-pharmacy.com

Registrant:
John Lester
2001 Bryan St., Suite 3010
Dallas, TX 75201
United States

Registered through: GoDaddy.com, LLC http://www.godaddy.com
Domain Name: DRUG-STORE-PHARMACY.COM
Created on: 24-Feb-05
Expires on: 24-Feb-13
Last Updated on: 14-Feb-12

Administrative Contact:
Lester, John success33@aol.com
2001 Bryan St., Suite 3010
Dallas, TX 75201
United States
(214) 748-2688

Technical Contact:
Lester, John success33@aol.com
2001 Bryan St., Suite 3010
Dallas, TX 75201
United States
(214) 748-2688

Domain servers in listed order:
NS1.PARKED.COM
NS2.PARKED.COM

Network Whois record

Queried whois.arin.net with “n 74.117.116.69″…

NetRange: 74.117.112.0 – 74.117.119.255
CIDR: 74.117.112.0/21
OriginAS:
NetName: PARKED-AMERICAS
NetHandle: NET-74-117-112-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Assignment
Comment: http://www.parked.com
RegDate: 2009-08-31
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-74-117-112-0-1

OrgName: Parked.com, Ltd.
OrgId: PARKE-38
Address: PO Box 10314
City: Grand Cayman
StateProv: CAYMAN ISLANDS
PostalCode: KY1-1003
Country: KY
RegDate: 2009-08-24
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/PARKE-38

OrgTechHandle: KH711-ARIN
OrgTechName: Hunt, Kevin
OrgTechPhone: +1-985-795-0025
OrgTechEmail: kevin@hbcorporate.com
OrgTechRef: http://whois.arin.net/rest/poc/KH711-ARIN

OrgAbuseHandle: KH711-ARIN
OrgAbuseName: Hunt, Kevin
OrgAbusePhone: +1-985-795-0025
OrgAbuseEmail: kevin@hbcorporate.com
OrgAbuseRef: http://whois.arin.net/rest/poc/KH711-ARIN

RNOCHandle: PNLR-ARIN
RNOCName: Parked NOC L Role
RNOCPhone: +1-345-745-6021
RNOCEmail: nocl@parked.com
RNOCRef: http://whois.arin.net/rest/poc/PNLR-ARIN

RTechHandle: KH711-ARIN
RTechName: Hunt, Kevin
RTechPhone: +1-985-795-0025
RTechEmail: kevin@hbcorporate.com
RTechRef: http://whois.arin.net/rest/poc/KH711-ARIN

DNS records
name class type data time to live
drug-store-pharmacy.com IN SOA
server: ns1.parked.com
email: admin@parked.com
serial: 2010011116
refresh: 28800
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
drug-store-pharmacy.com IN A 74.117.116.69 86400s (1.00:00:00)
drug-store-pharmacy.com IN NS ns1.parked.com 86400s (1.00:00:00)
drug-store-pharmacy.com IN NS ns2.parked.com 86400s (1.00:00:00)
69.116.117.74.in-addr.arpa IN A 173.212.56.97 86400s (1.00:00:00)
116.117.74.in-addr.arpa IN A 173.212.56.97 86400s (1.00:00:00)
116.117.74.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-09-26 00:07:09Z
signature inception: 2012-09-16 00:07:09Z
key tag: 7898
signer’s name: 74.in-addr.arpa
signature:
(1024 bits)

10800s (03:00:00)
116.117.74.in-addr.arpa IN NSEC
next domain name: 117.117.74.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
116.117.74.in-addr.arpa IN NS ns1.parked.com 86400s (1.00:00:00)
116.117.74.in-addr.arpa IN NS ns2.parked.com 86400s (1.00:00:00)

— end —

WhoIs tramadol-cheap.com

September 16, 2012September 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name tramadol-cheap.com
aliases
addresses 173.254.28.112
Domain Whois record

Queried whois.internic.net with “dom tramadol-cheap.com”…

Domain Name: TRAMADOL-CHEAP.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.PIPEDNS.COM
Name Server: NS2.PIPEDNS.COM
Name Server: NS3.PIPEDNS.COM
Status: clientTransferProhibited
Updated Date: 12-oct-2010
Creation Date: 28-jul-2004
Expiration Date: 28-jul-2013

Last update of whois database: Sun, 16 Sep 2012 13:59:09 UTC
Queried whois.joker.com with “tramadol-cheap.com

domain: tramadol-cheap.com
owner: – –
organization: WhoisGuard
email: manager@dudleypark.com
address: 8939 S. Sepulveda Blvd. #110 – 732
city: Westchester
state: —
postal-code: CA 90045
country: US
phone: +1.6613102107
fax: +1.6613102107
admin-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
tech-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
billing-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
nserver: ns1.pipedns.com
nserver: ns2.pipedns.com
nserver: ns3.pipedns.com
status: lock
created: 2004-07-28 08:58:19 UTC
modified: 2010-10-15 17:59:02 UTC
expires: 2013-07-28 08:58:19 UTC
query-source: 216.197.114.174

contact-hdl: CCOM-1633807
person: – –
organization: WhoisGuard
email: be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
address: 8939 S. Sepulveda Blvd. #110 – 732
city: Westchester
state: —
postal-code: CA 90045
country: US
phone: +1.6613102107

source: joker.com live whois service
query-time: 0.01476
db-updated: 2012-09-16 13:59:45

Network Whois record
Queried whois.arin.net with “n 173.254.28.112

NetRange: 173.254.0.0 – 173.254.127.255
CIDR: 173.254.0.0/17
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-8
NetHandle: NET-173-254-0-0-1
Parent: NET-173-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-10-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-173-254-0-0-1

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
http://www.tramadol-cheap.com IN CNAME tramadol-cheap.com 14400s (04:00:00)
tramadol-cheap.com IN MX
preference: 0
exchange: tramadol-cheap.com
14400s (04:00:00)
tramadol-cheap.com IN TXT v=spf1 +a +mx +ip4:173.254.28.112 ?all 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns1.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns3.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns2.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN A 173.254.28.112 14400s (04:00:00)
tramadol-cheap.com IN SOA
server: ns1.pipedns.com
email: root@cx59.justhost.com
serial: 2012081000
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
tramadol-cheap.com IN NS ns2.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN SOA
server: ns1.pipedns.com
email: root@cx59.justhost.com
serial: 2012081000
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
tramadol-cheap.com IN MX
preference: 0
exchange: tramadol-cheap.com
14400s (04:00:00)
tramadol-cheap.com IN NS ns1.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN TXT v=spf1 +a +mx +ip4:173.254.28.112 ?all 86400s (1.00:00:00)
tramadol-cheap.com IN A 173.254.28.112 14400s (04:00:00)
tramadol-cheap.com IN NS ns3.pipedns.com 86400s (1.00:00:00)
112.28.254.173.in-addr.arpa IN PTR just112.justhost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN NS ns2.bluehost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN NS ns1.bluehost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2012070301
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)

— end —

overnight-generic.com

September 15, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name overnight-generic.com
aliases
addresses 67.212.83.216
Domain Whois record

Queried whois.internic.net with “dom overnight-generic.com

Domain Name: OVERNIGHT-GENERIC.COM
Registrar: GKG.NET, INC.
Whois Server: whois.gkg.net
Referral URL: http://www.gkg.net
Name Server: NS1.OVERNIGHT-GENERIC.COM
Name Server: NS2.OVERNIGHT-GENERIC.COM
Status: clientTransferProhibited
Updated Date: 23-apr-2012
Creation Date: 30-apr-2011
Expiration Date: 30-apr-2013

Last update of whois database: Sun, 16 Sep 2012 03:14:58 UTC
Queried whois.gkg.net with “overnight-generic.com”…
Registrant:
John
John Stew
Boul. De Maissoneuve, app-42
Montreal, Qc H3T 7N8
CA
+1.8678471928
imintop@gmail.com

Administrative Contact:
John
John Stew
Boul. De Maissoneuve, app-42
Montreal, Qc H3T 7N8
CA
+1.8678471928
imintop@gmail.com

Technical Contact:
John
John Stew
Boul. De Maissoneuve, app-42
Montreal, Qc H3T 7N8
CA
+1.8678471928
imintop@gmail.com

Billing Contact
John
John Stew
Boul. De Maissoneuve, app-42
Montreal, Qc H3T 7N8
CA
+1.8678471928
imintop@gmail.com

Registrar..: gkg.net (http://register.gkg.net/)
Domain Name: OVERNIGHT-GENERIC.COM
Created on…………..: 30-APR-2011
Expires on…………..: 30-APR-2013
Record last updated on..: 24-APR-2012
Status………………: ACTIVE

Domain servers in listed order:

NS1.OVERNIGHT-GENERIC.COM
NS2.OVERNIGHT-GENERIC.COM

Network Whois record

queried rwhois.netelligent.ca with “67.212.83.216”…
rwhois V-1.5:003eff:00 rwhois.netelligent.ca (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETEL-67.212.83.192-255
network:Auth-Area:67.212.83.0/26
network:Network-Name:NETELLIGENT-67.212.83.192-255
network:IP-Network:67.212.83.192/26
network:IP-Network-Block:67.212.83.192-255
network:Org-Name;I:Inferno Solutions
network:City:Minsk
network:Postal-Code:220000
network:Country-Code:BY
network:Tech-Contact;I:support@netelligent.ca
network:Admin-Contact;I:admin@netelligent.ca
network:Updated-By:admin@netelligent.ca

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 67.212.83.216″…

NetRange: 67.212.64.0 – 67.212.95.255
CIDR: 67.212.64.0/19
OriginAS: AS10929
NetName: NETEL-ARIN-BLK03
NetHandle: NET-67-212-64-0-1
Parent: NET-67-0-0-0-0
NetType: Direct Allocation
RegDate: 2007-08-30
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-67-212-64-0-1

OrgName: Netelligent Hosting Services Inc.
OrgId: NHS-31
Address: 1396 Franklin Drive
City: Laval
StateProv: QC
PostalCode: H7W-1K6
Country: CA
RegDate: 2005-03-09
Updated: 2012-03-01
Ref: http://whois.arin.net/rest/org/NHS-31

ReferralServer: rwhois://rwhois.netelligent.ca:4321

OrgTechHandle: NETEL1-ARIN
OrgTechName: Netelligent Ops
OrgTechPhone: +1-514-369-2209
OrgTechEmail: ops@netelligent.ca
OrgTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

OrgAbuseHandle: NETEL2-ARIN
OrgAbuseName: Netelligent Abuse
OrgAbusePhone: +1-514-369-2209
OrgAbuseEmail: abuse@netelligent.ca
OrgAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

RNOCHandle: NETEL1-ARIN
RNOCName: Netelligent Ops
RNOCPhone: +1-514-369-2209
RNOCEmail: ops@netelligent.ca
RNOCRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RTechHandle: NETEL1-ARIN
RTechName: Netelligent Ops
RTechPhone: +1-514-369-2209
RTechEmail: ops@netelligent.ca
RTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RAbuseHandle: NETEL2-ARIN
RAbuseName: Netelligent Abuse
RAbusePhone: +1-514-369-2209
RAbuseEmail: abuse@netelligent.ca
RAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

DNS records

DNS query for 216.83.212.67.in-addr.arpa returned an error from the server: NameError
name class type data time to live
overnight-generic.com IN TXT v=spf1 ip4:67.212.83.216 a mx ~all 86400s (1.00:00:00)
overnight-generic.com IN SOA
server: ns1.server.domain.com
email: root@server.domain.com
serial: 2011092404
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
overnight-generic.com IN NS ns2.overnight-generic.com 86400s (1.00:00:00)
overnight-generic.com IN NS ns1.overnight-generic.com 86400s (1.00:00:00)
overnight-generic.com IN MX
preference: 20
exchange: mail.overnight-generic.com
86400s (1.00:00:00)
overnight-generic.com IN MX
preference: 10
exchange: mail.overnight-generic.com
86400s (1.00:00:00)
overnight-generic.com IN A 67.212.83.216 86400s (1.00:00:00)

— end —

The following A records are set to 67.212.83.216:

24h-genericstore.com
ns1.generico-farmacia.com
ns1.generique-pharmacie.com
ns1.orderrxstore.com
ns1.overnight-generic.com
ns1.rxdoctoronline.com
orderrxstore.com
overnight-generic.com
rxdoctoronline.com

WhoIs – generics-from-india.com

September 13, 2012September 15, 20126 Comments

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name generics-from-india.com.
aliases
addresses 89.248.172.129
Domain Whois record

Queried whois.internic.net with “dom generics-from-india.com”…

Domain Name: GENERICS-FROM-INDIA.COM
Registrar: WEB WERKS INDIA PVT. LTD.
Whois Server: whois.dfordomains.com
Referral URL: http://www.dfordomains.com
Name Server: NS1.ONEFIRMA.COM
Name Server: NS2.ONEFIRMA.COM
Status: ok
Updated Date: 06-mar-2012
Creation Date: 07-mar-2011
Expiration Date: 07-mar-2013

Last update of whois database: Thu, 13 Sep 2012 16:15:40 UTC
Queried whois.dfordomains.com with “generics-from-india.com

Domain Name : GENERICS-FROM-INDIA.COM

Registrant:
Kirill Bobrov
Kirill Bobrov bobrovki@gmail.com
Dushinskaya 6
Moscow
Moscow, 111024
RU
Tel. +7.985-024-8019 Fax. +7.9850248019

Creation Date : 3/7/2011 12:14:08 PM
Expiration Date : 3/7/2013 12:14:08 PM

Domain servers in listed order:
ns1.onefirma.com
ns2.onefirma.com

Administrator Contact :
Kirill Bobrov
Kirill Bobrov bobrovki@gmail.com
Dushinskaya 6
Moscow
Moscow, 111024
RU
Tel. +7.9850248019 Fax. +7.9850248019

Technical Contact :
Kirill Bobrov
Kirill Bobrov bobrovki@gmail.com
Dushinskaya 6
Moscow
Moscow, 111024
RU
Tel. +7.9850248019 Fax. +7.985-024-8019

Billing Contact :
Kirill Bobrov
Kirill Bobrov (bobrovki@gmail.com)
Dushinskaya 6
Moscow
Moscow, 111024
RU
Tel. +7.9850248019 Fax. +7.9850248019

Status: ok

Network Whois record
Queried whois.ripe.net with “-B 89.248.172.129

Information related to ‘89.248.172.62 – 89.248.172.255

inetnum: 89.248.172.62 – 89.248.172.255
netname: NL-ECATEL
descr: AS29073, Ecatel LTD
country: NL
admin-c: EL25-RIPE
tech-c: EL25-RIPE
status: ASSIGNED PA
mnt-by: ECATEL-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
changed: noc@ecatel.net 20080621
source: RIPE

Information related to ‘89.248.172.0/23AS29073

route: 89.248.172.0/23
descr: AS29073, Route object
origin: AS29073
mnt-by: ECATEL-MNT
changed: noc@ecatel.net 20071119
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)
DNS records
DNS query for 129.172.248.89.in-addr.arpa returned an error from the server: NameError
name class type data time to live
generics-from-india.com IN SOA
server: ns1.onefirma.com
email: root@onefirma.com
serial: 2015983625
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
300s (00:05:00)
generics-from-india.com IN NS ns1.onefirma.com 300s (00:05:00)
generics-from-india.com IN NS ns2.onefirma.com 300s (00:05:00)
generics-from-india.com IN A 89.248.172.129 300s (00:05:00)

— end —

Sites on IP 89.248.172.129
Displaying items 1 to 34, out of a total of 34

The following A records are set to 85.95.236.63:

ever.online-ns.com
ns-8.aff-hosting.com
ns1.doublefirma.com
ns1.onefirma.com
ns1.stimulcash.com
ns2.st-dns.com
ns2.stimul-media.com

Generics-Med.org
Helpful-Online-Pharmacy.com
mediaplace.biz
Europeantablets.com
europeantablets.com
onlinehostlocation.com – trustedtablets
FirstRxStore.biz
OrderqualityPills.com
Best-ed-Solution.com
Rx-Trust.org
Edeuro.com
onlinehostlocation.com
freehostp.com
generics-med.org
Easy-to-use-pharmacy.com
Edeuro.com
10-20mg.com
europeantablets.com
Telehost.biz

medicinebestdrugs.ru

September 3, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name medicinebestdrugs.ru
aliases
addresses 31.210.113.5
Domain Whois record

Queried whois.ripn.net with “medicinebestdrugs.ru

domain: MEDICINEBESTDRUGS.RU
nserver: ns1.tealp.ru.
nserver: ns2.retailersalemeds.com
state: REGISTERED – DELEGATED – VERIFIED
person: Private Person
registrar: REGRU-REG-RIPN
admin-contact: http://www.reg.ru/whois/admin_contact
created: 2012.04.23
paid-till: 2013.04.23
free-date: 2013.05.24
source: TCI

Last updated on 2012.09.03 23:01:36 MSK
Network Whois record
Queried whois.ripe.net with “-B 31.210.113.5
Information related to ‘31.210.113.0 – 31.210.113.255’

inetnum: 31.210.113.0 – 31.210.113.255
netname: SAYFA-NET
descr: INTER NET BILGISAYAR LTD STI
country: TR
admin-c: SNOC14-RIPE
tech-c: SNOC14-RIPE
status: ASSIGNED PA
mnt-by: SAYFA-NET-MNT
changed: registry@sayfa.net 20110504
source: RIPE

person: SAYFA-NET Network Operations Center
address: INTER NET BILGISAYAR LTD STI
address: Kemeralti Mh. 124 Sk. No.7 D5
address: Levent, Istanbul
address: Turkiye, TR
phone: +90 (232) 463 30 08
fax-no: +90 (532) 723 52 63
nic-hdl: SNOC14-RIPE
mnt-by: SAYFA-NET-MNT
e-mail: noc@sayfa.net
abuse-mailbox: abuse@sayfa.net
notify: registry@sayfa.net
changed: registry@sayfa.net 20110504
source: RIPE

Information related to ‘31.210.113.0/24AS42926

route: 31.210.113.0/24
descr: AS42926-NETWORK
origin: AS42926
mnt-by: AS42926-MNT
changed: registry@as42926.net 20110504
notify: registry@as42926.net
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)

DNS records
name class type data time to live
medicinebestdrugs.ru IN SOA
server: ns1.medicinebestdrugs.ru
email: admin@medicinebestdrugs.ru
serial: 2009000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
medicinebestdrugs.ru IN NS ns1.medicinebestdrugs.ru 600s (00:10:00)
medicinebestdrugs.ru IN NS ns2.medicinebestdrugs.ru 600s (00:10:00)
medicinebestdrugs.ru IN MX
preference: 10
exchange: mail.medicinebestdrugs.ru
600s (00:10:00)
medicinebestdrugs.ru IN A 31.210.113.5 600s (00:10:00)
5.113.210.31.in-addr.arpa IN PTR 31-210-113-5.turkrdns.com 86400s (1.00:00:00)
113.210.31.in-addr.arpa IN SOA
server: tr1.turkrdns.com
email: tr1@turkrdns.com
serial: 2011071703
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
113.210.31.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-10-03 10:01:45Z
signature inception: 2012-09-03 09:01:45Z
key tag: 24097
signer’s name: 31.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
113.210.31.in-addr.arpa IN NSEC
next domain name: 114.210.31.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
113.210.31.in-addr.arpa IN NS tr1.turkrdns.com 86400s (1.00:00:00)
113.210.31.in-addr.arpa IN NS tr2.turkrdns.com 86400s (1.00:00:00)

— end —

Sites on IP 94.63.240.180

Displaying items 1 to 100, out of a total of 256

WorldBestPharmacy – zviagra.com

August 28, 2012August 28, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

edpills4life.com

bestellen-cialis-generika.net

buy-bags-online.com

buypillsfast.org

prednisoneonline.ne

todaypills.com

small-penis-enlargement.com

zviagra.com

646-205-2937

866-417-5821

Address lookup
canonical name zviagra.com
aliases
addresses 88.196.222.80
Domain Whois record

Queried whois.internic.net with “dom zviagra.com
Domain Name: ZVIAGRA.COM
Registrar: 0101 INTERNET, INC.
Whois Server: whois.0101domain.com
Referral URL: http://www.0101domain.com
Name Server: NS3.FAIRYHOSTING.COM
Name Server: NS7.FAIRYHOSTING.COM
Status: clientTransferProhibited
Updated Date: 05-jun-2012
Creation Date: 04-jun-2012
Expiration Date: 04-jun-2013

Last update of whois database: Wed, 29 Aug 2012 01:25:59 UTC
Queried whois.0101domain.com with – zviagra.com

Domain Name: ZVIAGRA.COM

Registrant:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Creation Date: 04-Jun-2012
Expiration Date: 04-Jun-2013

Domain servers in listed order:
ns3.fairyhosting.com
ns7.fairyhosting.com

Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Status:LOCKED

Network Whois record

Queried whois.ripe.net with “-B 88.196.222.80″…
Information related to ‘88.196.222.64 – 88.196.222.255’

inetnum: 88.196.222.64 – 88.196.222.255
netname: EE-INTERFRAME
descr: OU Interframe
descr: Kangelaste 41-38
descr: Narva 20604
descr: Ida-Virumaa
descr: Estonia
country: EE
admin-c: AR6419-RIPE
tech-c: AR6419-RIPE
tech-c: ET332-RIPE
notify: ripe@elion.ee
status: ASSIGNED PA
mnt-by: ESTPAK-MNT
changed: ripe@elion.ee 20080508
source: RIPE

role: ESTPAK NOC
address: Elion Enterprises Ltd.
address: Sole str 14, Tallinn
address: Estonia
fax-no: +372 639 1180
e-mail: abuse@elion.ee
e-mail: ripe@elion.ee
remarks: trouble: 24/7 phone +372 639 1082
remarks: trouble: abuse@elion.ee
remarks: —————————————-
remarks: Abuse notifications to: abuse@elion.ee
remarks: Network problems to: noc@elion.ee
remarks: Peering requests to: peering@elion.ee
remarks: —————————————-
admin-c: MP11558-RIPE
tech-c: RIX2-RIPE
tech-c: AK546-RIPE
tech-c: HT600-RIPE
nic-hdl: ET332-RIPE
notify: ripe@elion.ee
mnt-by: ESTPAK-MNT
changed: ripe@elion.ee 20100816
source: RIPE
abuse-mailbox: abuse@elion.ee

person: Adrei Rumyantsev
address: OU Interframe
address: Kangelaste 41-38
address: Narva 20604
address: Ida-Virumaa
address: Estonia
phone: +372 35 92233
fax-no: +372 35 92233
e-mail: doran@interframe.ee
nic-hdl: AR6419-RIPE
changed: ripe@estpak.ee 20070227
source: RIPE

Information related to ‘88.196.0.0/16AS3249’

route: 88.196.0.0/16
descr: EE-ESTPAK-88-196-0-0-16
origin: AS3249
notify: rix@estpak.ee
mnt-by: ESTPAK-MNT
changed: rix@estpak.ee 20051208
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS3)

DNS records
name class type data time to live
zviagra.com IN SOA
server: ns3.fairyhosting.com
email: root@s5.fairyhosting.com
serial: 2012060500
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
zviagra.com IN NS ns3.fairyhosting.com 3600s (01:00:00)
zviagra.com IN NS ns7.fairyhosting.com 3600s (01:00:00)
zviagra.com IN A 88.196.222.80 3600s (01:00:00)
zviagra.com IN MX
preference: 10
exchange: mail.zviagra.com
3600s (01:00:00)
zviagra.com IN MX
preference: 20
exchange: mail.zviagra.com
3600s (01:00:00)
zviagra.com IN TXT v=spf1 ip4:188.66.6.248 a mx ~all 3600s (01:00:00)
80.222.196.88.in-addr.arpa IN PTR s5.fairyhosting.com 86400s (1.00:00:00)
222.196.88.in-addr.arpa IN SOA
server: ns.elion.ee
email: hostmaster@elion.ee
serial: 2012060101
refresh: 86400
retry: 900
expire: 1209600
minimum ttl: 10800
86400s (1.00:00:00)
222.196.88.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-09-27 10:01:42Z
signature inception: 2012-08-28 09:01:42Z
key tag: 1903
signer’s name: 88.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
222.196.88.in-addr.arpa IN NSEC
next domain name: 223.196.88.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
222.196.88.in-addr.arpa IN NS ns2.elion.ee 86400s (1.00:00:00)
222.196.88.in-addr.arpa IN NS ns.elion.ee 86400s (1.00:00:00)

— end —

Canadian Pharmacy: BUY NOW VIAGRA & CIALIS !

August 16, 2012August 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Email Header Analysis

IP Address: 186.122.69.215 (host215.186-122-69.telmex.net.ar)
IP Address Country: Argentina
IP Continent: South America
IP Address City Location: Federal
IP Address Region: Entre Rios
IP Address Latitude: -30.9546,
IP Address Longtitude: -58.7833
Organization: AMX Argentina S.A.

USPS – Fast Delivery Shipping 1-4 day USA
Best quality drugs
Fast Shipping USA
Professional packaging
100% guarantee on delivery
Best prices in the market
Discounts for returning customers
FDA approved productas
35000+ satisfied customers

http://lyegb.healthmedzkey.ru

Address lookup
canonical name healthmedzkey.ru
aliases
addresses 91.236.121.130
Domain Whois record

Queried whois.ripn.net with “healthmedzkey.ru

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain: HEALTHMEDZKEY.RU
nserver: ns1.hamgeah.ru.
nserver: ns2.bavacsers.ru.
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2012.08.13
paid-till: 2013.08.13
free-date: 2013.09.13
source: TCI

Last updated on 2012.08.16 17:56:51 MSK
Network Whois record

Queried whois.ripe.net with “-B 91.236.121.130″…
Information related to ‘91.236.121.0 – 91.236.121.255’

inetnum: 91.236.121.0 – 91.236.121.255
netname: VAIBOPROJECT-NET
descr: VAIBO PROJECT ltd.
country: UA
org: ORG-VPl8-RIPE
admin-c: KTS16-RIPE
tech-c: KTS16-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: MNT-VAIBOPROJECT
mnt-routes: MNT-VAIBOPROJECT
mnt-domains: MNT-VAIBOPROJECT
notify: support@danle.ru
changed: hostmaster@ripe.net 20120531
source: RIPE

organisation: ORG-VPl8-RIPE
org-name: VAIBO PROJECT ltd.
org-type: OTHER
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Ð, app.60
e-mail: support@danle.ru
mnt-ref: MNT-VAIBOPROJECT
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

person: Korobov Taras Sergeevich
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Ð, app.60
phone: +380 62 3110611
nic-hdl: KTS16-RIPE
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

Information related to ‘91.236.121.0/24AS58246’

route: 91.236.121.0/24
descr: VAIBOPROJECT-NET-2012
origin: AS58246
mnt-by: MNT-VAIBOPROJECT
changed: hostmaster@ripe.net 20120712
source: RIPE

The following A records are set to 202.149.72.17:

bandarticket.com
bimboong.com
centroelektronika.com
crossovergadget.com
dellstreak7.com
healthpin.com
infoterapiwicara.com
jabarpost.com
jangaro.net
jmasagi.net
katineunglearningcentre.com
kuliselular.com
lenovok1.com
locasee.com
oasebuku.com
ozone-bag.com
prucares.com
ragamproduk.com
sehationline.com
theciptahenings.com
yessipratiwi.asia

Related articles

Buying Prescription Drugs Online May Be Dangerous Says Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP) Warning

Related articles

Related articles

(800) 532-4808 (718) 313-1498 +44-203-0110241

Related articles

Nameservers

Domain Record

Main Office

International Orders Department

USA Branch Office

646-205-2937

866-417-5821

Email Header Analysis

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)
Warning

(800) 532-4808
(718) 313-1498
+44-203-0110241