f8cheap-viagra.com

Address lookup
canonical name f8cheap-viagra.com.
aliases
addresses 70.38.11.59
Domain Whois record

Queried whois.internic.net with “dom f8cheap-viagra.com”…

Domain Name: F8CHEAP-VIAGRA.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.MEGABYTEHOSTING.COM
Name Server: NS2.MEGABYTEHOSTING.COM
Status: clientTransferProhibited
Updated Date: 07-aug-2012
Creation Date: 07-aug-2012
Expiration Date: 07-aug-2013

Last update of whois database: Wed, 15 Aug 2012 01:01:55 UTC
Queried whois.todaynic.com with “f8cheap-viagra.com

Domain name: f8cheap-viagra.com
Status: Active

Registrant:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005
Email: admin@r8cheap-viagra.com

Administrative Contact:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005
Phone: +7.3412437222
Fax: +7.3412437222
Email: admin@r8cheap-viagra.com

Technical Contact:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005

Nameserver Information:
ns1.megabytehosting.com
ns2.megabytehosting.com

Create: 2012-08-07 16:07:03
Update: 2012-08-07
Expired: 2013-08-07
QueryTimes: 13

Network Whois record
Queried whois.arin.net with “n ! NET-70-38-11-32-1

NetRange: 70.38.11.32 – 70.38.11.63
CIDR: 70.38.11.32/27
OriginAS:
NetName: IWEB-CL-T111-01SH
NetHandle: NET-70-38-11-32-1
Parent: NET-70-38-0-0-1
NetType: Reassigned
RegDate: 2008-07-16
Updated: 2008-07-16
Ref: http://whois.arin.net/rest/net/NET-70-38-11-32-1

CustName: iWeb Dedicated CL2
Address: 5945, Couture
City: Montreal
StateProv: QC
PostalCode: H1P-1A8
Country: CA
RegDate: 2008-07-16
Updated: 2011-03-19
Ref: http://whois.arin.net/rest/customer/C01959552

OrgTechHandle: NETWO2356-ARIN
OrgTechName: Network Administrator
OrgTechPhone: +1-514-286-4242
OrgTechEmail: net-admin@noc.privatedns.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2356-ARIN

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName: Network Administrator
OrgNOCPhone: +1-514-286-4242
OrgNOCEmail: net-admin@noc.privatedns.com
OrgNOCRef: http://whois.arin.net/rest/poc/NETWO2356-ARIN

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName: Abuse Coordinator
OrgAbusePhone: +1-514-286-4242
OrgAbuseEmail: abuse@noc.privatedns.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1906-ARIN

DNS records
name class type data time to live
f8cheap-viagra.com IN TXT v=spf1 +a +mx +ip4:70.38.11.59 ?all 14400s (04:00:00)
f8cheap-viagra.com IN MX
preference: 0
exchange: f8cheap-viagra.com
14400s (04:00:00)
f8cheap-viagra.com IN SOA
server: ns1.megabytehosting.com
email: megabytehosting@gmail.com
serial: 2012080703
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
f8cheap-viagra.com IN NS ns1.megabytehosting.com 86400s (1.00:00:00)
f8cheap-viagra.com IN NS ns2.megabytehosting.com 86400s (1.00:00:00)
f8cheap-viagra.com IN A 70.38.11.59 14400s (04:00:00)
59.11.38.70.in-addr.arpa IN PTR not-assigned.privatedns.com 43200s (12:00:00)
11.38.70.in-addr.arpa IN SOA
server: ns1.iweb-hosting.com
email: hostmaster@iweb-hosting.com
serial: 2012081415
refresh: 3600
retry: 3600
expire: 604800
minimum ttl: 3600
43200s (12:00:00)
11.38.70.in-addr.arpa IN NS ns1.iweb-hosting.com 43200s (12:00:00)
11.38.70.in-addr.arpa IN NS ns2.iweb-hosting.com 43200s (12:00:00)

— end —

WhoIs mymedsdiet.com a/k/a Canadian Health & Care Mall

Drug Enforcement Agency

United States of America


The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.


DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.


Address lookup
canonical name mymedsdiet.com

aliases
addresses 176.67.172.232
Domain Whois record

Queried whois.internic.net with “dom mymedsdiet.com

Domain Name: MYMEDSDIET.COM
Registrar: PSI-USA, INC. DBA DOMAIN ROBOT
Whois Server: whois.psi-usa.info
Referral URL: http://www.psi-usa.info
Name Server: NS1.MYMEDSDIET.COM
Name Server: NS2.MYMEDSDIET.COM
Status: clientTransferProhibited
Updated Date: 28-jul-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

Last update of whois database: Sun, 29 Jul 2012 18:52:12 UTC
Queried whois.psi-usa.info with “mymedsdiet.com”…

=============
PSI-USA, Inc.
=============
This is the PSI-USA, Inc. WHOIS server.
All requests are logged.

Requesting IP: 63.134.201.88
Requesting URL: http://whois.psi-usa.info
Requesting Object: domain mymedsdiet.com
Timestamp: 2012-07-29 20:52:45

domain: mymedsdiet.com
status: LOCK,TRANSFER-LOCK-60
owner-c: LULU-11609453
admin-c: LULU-11609453
tech-c: LULU-11609453
zone-c: LULU-11609453
nserver: ns1.mymedsdiet.com
nserver: ns2.mymedsdiet.com
created: 2012-07-09 21:36:29
expire: 2013-07-09 21:36:29 (registry time)
changed: 2012-07-28 22:05:16

[owner-c] handle: 11609453
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Elias
[owner-c] lname: Haapasalo
[owner-c] org:
[owner-c] address: Ulimarinpolku 61
[owner-c] city: Porsanmaki
[owner-c] pcode: 74550
[owner-c] country: FI
[owner-c] state: Porsanmaki
[owner-c] phone: +358-04188-02728
[owner-c] fax: +358-04188-02728
[owner-c] email: badajsky@evermail.org
[owner-c] protection: B
[owner-c] updated: 2012-07-09 21:36:19

[admin-c] handle: 11609453
[admin-c] type: PERSON
[admin-c] title:
[admin-c] fname: Elias
[admin-c] lname: Haapasalo
[admin-c] org:
[admin-c] address: Ulimarinpolku 61
[admin-c] city: Porsanmaki
[admin-c] pcode: 74550
[admin-c] country: FI
[admin-c] state: Porsanmaki
[admin-c] phone: +358-04188-02728
[admin-c] fax: +358-04188-02728
[admin-c] email: badajsky@evermail.org
[admin-c] protection: B
[admin-c] updated: 2012-07-09 21:36:19

[tech-c] handle: 11609453
[tech-c] type: PERSON
[tech-c] title:
[tech-c] fname: Elias
[tech-c] lname: Haapasalo
[tech-c] org:
[tech-c] address: Ulimarinpolku 61
[tech-c] city: Porsanmaki
[tech-c] pcode: 74550
[tech-c] country: FI
[tech-c] state: Porsanmaki
[tech-c] phone: +358-04188-02728
[tech-c] fax: +358-04188-02728
[tech-c] email: badajsky@evermail.org
[tech-c] protection: B
[tech-c] updated: 2012-07-09 21:36:19

[zone-c] handle: 11609453
[zone-c] type: PERSON
[zone-c] title:
[zone-c] fname: Elias
[zone-c] lname: Haapasalo
[zone-c] org:
[zone-c] address: Ulimarinpolku 61
[zone-c] city: Porsanmaki
[zone-c] pcode: 74550
[zone-c] country: FI
[zone-c] state: Porsanmaki
[zone-c] phone: +358-04188-02728
[zone-c] fax: +358-04188-02728
[zone-c] email: badajsky@evermail.org
[zone-c] protection: B
[zone-c] updated: 2012-07-09 21:36:19

Network Whois record
Queried whois.ripe.net with “-B 176.67.172.232
Information related to ‘176.67.172.0 – 176.67.172.255’

inetnum: 176.67.172.0 – 176.67.172.255
netname: UK2-INFRA-VPS-DOT-NET-FRANCE
descr: UK2 Infrastructure
country: GB
admin-c: BB963-RIPE
tech-c: BB963-RIPE
status: ASSIGNED PA
remarks: Abuse matters to: abuse@vps.net
remarks: Abuse mail to any other address may be ignored
mnt-by: AS13213-MNT
notify: hostmaster@uk2.net
changed: paul.death@uk2.net 20120416
source: RIPE

person: Bo Bendtsen
address: UK2.NET
address: One Canada Square, Canary Wharf
address: London
address: UK
phone: +44 20 7987 1200
fax-no: +44 20 7987 0449
e-mail: ripe@uk2.net
nic-hdl: BB963-RIPE
mnt-by: AS13213-MNT
changed: this@is.not.an.email.address 19991029
changed: this@is.not.an.email.address 20000510
changed: this@is.not.an.email.address 20000529
source: RIPE

Information related to ‘176.67.160.0/20AS13213
route: 176.67.160.0/20
descr: UK2.NET announcement
origin: AS13213
mnt-by: AS13213-MNT
changed: ripe@netsumo.com 20110614
source: RIPE

This query was served by the RIPE Database Query Service version 1.19 (WHOIS3)
DNS records
DNS query for 232.172.67.176.in-addr.arpa returned an error from the server: NameError
name class type data time to live
mymedsdiet.com IN SOA
server: ns1.mymedsdiet.com
email: admin@mymedsdiet.com
serial: 2009000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
mymedsdiet.com IN NS ns1.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN NS ns2.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN MX
preference: 10
exchange: mail.mymedsdiet.com
600s (00:10:00)
mymedsdiet.com IN A 176.67.172.232 600s (00:10:00)

— end —

The following A records are set to 176.67.172.232:

  1. acequrke.com
  2. aircanadatablet.com
  3. canadamedsgroup.com
  4. caretabletgroup.com
  5. childcaremeds.com
  6. contabdrugstore.com
  7. dietpillsale.com
  8. drugstoreherbal.net
  9. drugstorepillsgroup.com
  10. dyecajor.com
  11. familymedicineprescription.com
  12. getusedsoft.com
  13. healthcarejobstablet.net
  14. healthcarerxhealth.com
  15. healthrxhealthcare.com
  16. hospitalcaretab.com
  17. hospitalpills.com
  18. levitrameds.com
  19. medicalphpatients.com
  20. medicaresrx.net
  21. medsdietobesity.com
  22. mymedsdiet.com
  23. mymedtablet.com
  24. mypharmacymed.com
  25. mypharmacymedical.com

EVA Pharmacy

United States of America


The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.


DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.


EVA Pharmacy & FIDELITY-NET.COM / Tripac International Ltd.


Spam for:
http://gacdehmfl.yourpils24.info/?bijkflxwwvygzctacdehm

Yet another EVA Pharmacy spam. The image at the bottom of the page say:
“Copyright EVA Pharmacy, 2000 – 2004, all rights reserved.”

Searching for unique text strings within the page yields the following:

==========

“I am truly enjoying my sexual rebirth. No more excuses, no more
frustration”

viagrastories.com/personal.shtml
setco.com/Viagra-for-low-sex-life.htm
fljkabh.pilsforhealth.info/ct/ index.php?page=testimonials&pid=_668
viagra-cialis-online.co.uk/ivf_viagra.html
orderviagra.biz/viagra/ english/wielangehltviagra.html
ineedpills.com/viagra-stories.htm

—–

“Cialis Soft Tabs enables you to respond spontaneously due to its longer
lasting effect up to 36 hours”

m-pharmacy.net/cialis-soft-tabs.htm
fljkabh.pilsforhealth.info/ ct/index.php?page=questions&pid=_668

—–

“Any our affiliate who SPAMS will have their account immediately
terminated and all monies earned will be suspended.”

efgmjacdhk.greatsekshealth.info/ hg/index.php?page=antispam&pid=_345
bfgikdhlm.pils4everyday.info/ vp/index.php?page=antispan&pid=_386
sexforlust.com/?page=antispam&pid=eph7382
fidelity-net.com/spam.htm
evameds.com/sm/index.php?page=antispan&pid=eph8620
masterjoy.biz/pp/index. php?page=antispam&pid=eph5653
evameds.biz/supergv/index. php?page=antispam&pid=eph3890
shop.evapharmacy.com/sm/?page=antispan&pid=
drbest.info/ct/index.php?page=antispan&pid=eph5616
dr-info.info/mm/index.php?page=antispan&pid=eph5653
powergra.com/antispampolicy.html

Note the weird phrasing “Any our affiliate who”… it comes up again later
in this post.

==========

dns yourpils24.info
Canonical name: yourpils24.info
Addresses:
222.47.183.120

==========

whois -h whois.completewhois.com yourpils24.info …
[DOMAIN whois information for YOURPILS24.INFO ]

Domain Name: YOURPILS24.INFO
Namespace: ICANN Unsponsored Generic TLD – http://www.icann.org
TLD Info: See IANA Whois – http://www.iana.org/root-whois/info.htm
Registry: Afilias LLC – http://www.afilias.info
Registrar: Tucows Inc. – http://domainhelp.tucows.com
Whois Server: whois.afilias.info
Name Server[from whois+dns, whois ip]: NS1.YOURPILS24.INFO
69.228.160.52
Name Server[from whois+dns, dns ip]: NS1.YOURPILS24.INFO 222.47.183.120
Name Server[whois+dns with ip] NS2.YOURPILS24.INFO 222.47.183.120
Status: ACTIVE
Status: OK
Creation Date: 28-Apr-2005 16:35:51 UTC
Updated Date: 18-May-2005 14:38:24 UTC
Expiration Date: 28-Apr-2006 16:35:51 UTC

[whois.afilias.info]
Domain ID: D10119209-LRMS
Domain Name: YOURPILS24.INFO
Created On: 28-Apr-2005 16:35:51 UTC
Last Updated On: 18-May-2005 14:38:24 UTC
Expiration Date: 28-Apr-2006 16:35:51 UTC
Sponsoring Registrar: R139-LRMS
Status: ACTIVE
Status: OK

Registrant ID: C9773590-LRMS
Registrant Name: Anna Nowicka
Registrant Organization: private
Registrant Street1: ul.Warszawska 2
Registrant City: Stare Babice
Registrant State/Province: na
Registrant Postal Code: 05082
Registrant Country: PL
Registrant Phone: +4.8227220622
Registrant Email: donstern47@yahoo.com

==========

IP Addresses:

222.47.183.120 (YOURPILS24.INFO, NS1.YOURPILS24.INFO)
http://www.spews.org/ask.cgi?x=222.47.183.120
http://www.spews.org/html/S1422.html

http://www.spamhaus.org/query/bl?ip=222.47.183.120
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL21980
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL24912
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL25609

—–

69.228.160.52 (NS1.YOURPILS24.INFO)
Not listed in SPEWS.

http://www.spamhaus.org/query/bl?ip=69.228.160.52
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL24129
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL25911

SBL24129:
“69.228.160.0/20 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Michael Lindsay /
iMedia Networks.”

SBL25911:
“69.228.160.52/32 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Michael Lindsay /
iMedia Networks.”

==========

QUESTIONS:
1) Who is FIDELITY-NET.COM?

From their website (http://www.fidelity-net.com/):
“Fidelity is an Internet Retailer for tangible and digital products and
services. Web businesses (suppliers/vendors) agree to sell their goods and
services to Fidelity for immediate resale to online customers. Fidelity
collects the proceeds from the sale, delivers the product and provides
online support to the customer.”

Also, from their website (http://www.fidelity-net.com/aboutus.htm):
“Suppliers continue to market and supply their products and content as
before. Fidelity uses its relationships with a number of financial
Institutions to provide a long term solution for suppliers who provide
adult entertainment, and distribute software, and other products through
the Internet.”

2) Why does FIDELITY-NET.COM have the exact same wording on their
anti-spam page as the Cialis spammer?

From http://www.fidelity-net.com/spam.htm:

==========

Got SPAM?
Report here

What is SPAM?
Any form of unsolicited advertising through email, newsgroups, IRC posts,
and/or instant messaging clients. Any SPAM complaint regarding a our
Affiliate is cause for immediate termination. This is a very serious
matter. DO NOT send email to anyone who has not made a specific request
for information.

What types of advertising are considered SPAM?
Bulk emailing (sending an email advertisement to persons listed on an
email address lead list). Advertising with bulk email services (companies
who will send an email advertisement to persons listed on an email address
lead list for you) will be grounds for immediate account termination.

Newsgroup Posting. Posting commercial messages is spam and any complaints
from newsgroup moderators about an affiliate will be grounds for immediate
account termination.

IRC/IM Clients Unsolicited messages through any media, including chat
rooms and instant messages is considered SPAM and will be grounds for
immediate account termination.

FAQ
Can I use a bulk email list from a company that sells the email addresses
of people who have previously agreed to join a mailing list?

No. The people on these lists may have forgotten that they joined, or
didn’t know what type of content that they were requesting when they
submitted their email address.

Can I avoid bulk emailing by sending my advertisements one at a time?

No, it’s not “bulk emailing,” but it will be received by people who have
not asked you for it, and that is considered SPAM.

What forms of advertising can your webmasters use?

Any form of advertising which targets legal sources of traffic are more
than welcome so long as they are not done via unsolicited means.

Are sales from Opt-in and/or Double Opt-in mailing lists acceptable?

Sales generated through the traffic sent from both single and double
opt-in mailing lists are UNacceptable.

Single Opt-in – With a single opt-in mailing list, an address is
automatically added to an email distribution list as soon as it’s
submitted.

Double Opt-in – With double opt-in, the submitted address is not
immediately added to this list. Instead, an email is first sent to the
address, requesting confirmation that this address should indeed be added
to the list.

What happens to your affiliates who choose to SPAM?
Any our affiliate who SPAMS will have their account immediately terminated
and all monies earned will be suspended.

==========

From http://gacdehmfl.yourpils24.info/ct/index.php?page=antispan&pid=:

==========

Got SPAM?
Report here

What is SPAM?
Any form of unsolicited advertising through email, newsgroups, IRC posts,
and/or instant messaging clients. Any SPAM complaint regarding a our
Affiliate is cause for immediate termination. This is a very serious
matter. DO NOT send email to anyone who has not made a specific request
for information.

What types of advertising are considered SPAM?

* Bulk emailing (sending an email advertisement to persons listed on
an email address lead list). Advertising with bulk email services
(companies who will send an email advertisement to persons listed on an
email address lead list for you) will be grounds for immediate account
termination.

* Newsgroup Posting. Posting commercial messages is spam and any
complaints from newsgroup moderators about an affiliate will be grounds
for immediate account termination.

* IRC/IM Clients Unsolicited messages through any media, including
chat rooms and instant messages is considered SPAM and will be grounds for
immediate account termination.

FAQ
Can I use a bulk email list from a company that sells the email addresses
of people who have previously agreed to join a mailing list?
No. The people on these lists may have forgotten that they joined, or
didn’t know what type of content that they were requesting when they
submitted their email address.

Can I avoid bulk emailing by sending my advertisements one at a time?
No, it’s not “bulk emailing,” but it will be received by people who have
not asked you for it, and that is considered SPAM.

What forms of advertising can your webmasters use?
Any form of advertising which targets legal sources of traffic are more
than welcome so long as they are not done via unsolicited means.

Are sales from Opt-in and/or Double Opt-in mailing lists acceptable?
Sales generated through the traffic sent from both single and double
opt-in mailing lists are UNacceptable.

Single Opt-in – With a single opt-in mailing list, an address is
automatically added to an email distribution list as soon as it’s
submitted.

Double Opt-in – With double opt-in, the submitted address is not
immediately added to this list. Instead, an email is first sent to the
address, requesting confirmation that this address should indeed be added
to the list.

What happens to your affiliates who choose to SPAM?
Any our affiliate who SPAMS will have their account immediately terminated
and all monies earned will be suspended.

==========

dns FIDELITY-NET.COM
Mail for FIDELITY-NET.COM is handled by mx.fidelity-net.com
Canonical name: fidelity-net.com
Addresses:
205.214.216.110

whois -h whois.completewhois.com fidelity-net.com …
[DOMAIN whois information for FIDELITY-NET.COM ]

Domain Name: FIDELITY-NET.COM
Namespace: ICANN Unsponsored Generic TLD – http://www.icann.org
TLD Info: See IANA Whois – http://www.iana.org/root-whois/com.htm
Registry: VeriSign, Inc. – http://www.verisign-grs.com
Registrar: TUCOWS INC. – http://domainhelp.tucows.com
Whois Server: whois.opensrs.net
Name Server[whois+dns with ip] NS1.FIDELITY-NET.COM 205.214.216.110
Name Server[whois+dns with ip] NS2.FIDELITY-NET.COM 205.214.216.110
Status: ACTIVE
Updated Date: 30-jan-2005
Creation Date: 15-mar-2004
Expiration Date: 15-mar-2006

[whois.opensrs.net]
Registrant:
dns services
32 Altona Cr
Hornsby
Sydney, Nsw 2000
AU

Domain name: FIDELITY-NET.COM
Administrative Contact:
frankston, sam humpyhumpy@hotmail.com
32 Altona Cr
Hornsby
Sydney, Nsw 2000
AU
617363876389

==========

IP addresses:

205.214.216.110 (FIDELITY-NET.COM, NS1.FIDELITY-NET.COM,
NS2.FIDELITY-NET.COM)
Not listed in SPEWS.

http://www.spamhaus.org/query/bl?ip=205.214.216.110
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL19959

SBL19959:
“205.214.216.110/32 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Tripac International
Limited.”

http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Tripac%20International%20Limited
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3565
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3566
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3571
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3572
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3977
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4085
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4188
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4189
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4196

==========


When will the stalker kook SuN Tsu / BananaNanae / theBanana(tm) apologize
for his false accusations and spam-friendly behavior?
http://www.hillscapital.com/StalkerKookSuNTsu/
NANAE newbies: For your own protection you should kill-file Sun Tsu.

If you want to get the pages more quickly, you might guess that
the home base is at the IP address of the other nameserver. After
all of the spammer is using one nameserver as webhost, he may well
be doing the same for the other … so, let’s check.

Either add an entry to one’s hosts file forcing gacdehmfl.yourpils24.info
to resolve to IP address 69.228.160.52 or use a programme like curl
which permits one to specifiy the “Host:” header (hostname) and
go to a particular address or use telnet and do things manually or …
(e.g. curl -H “Host: gacdehmfl.yourpils24.info” “http://69.228.160.52/?bijkflxwwvygzctacdehm”)

* Connected to 69.228.160.52
Host: gacdehmfl.yourpils24.info

and one finds the site up there (it redirects to
“ct/index.php?pid=_110 so one can get to the
content page directly using
curl -H “Host: gacdehmfl.yourpils24.info” “http://69.228.160.52/ct/index.php?pid=_110”
for example)

OrgName: Pac Bell Internet Services
OrgID: PACB
CIDR: 69.224.0.0/12
CustName: Mini VOIP Systems
CIDR: 69.228.160.0/20
69.228.160.52 is found in sbl.spamhaus.org
Lists “known spammers, spam gangs or spam support services.”
Ref: SBL25911

69.228.160.52/32 is listed on the Register Of Known Spam Operations (ROKSO)
database as being assigned to, under the control of, or providing service to a
known professional spam operation run by Michael Lindsay / iMedia Networks.

It has been here for awhile (at one time, he lost his China hosted
web site and had the nameserver resolve his spamvertized sites
actually to IP address 69.228.160.52 if I recall correctly).
The Spamvertized URL has varied in location, different china sites,
e.g. 202.99.172.156, 210.51.2.148 and others, but the “home base” seems
“protected” on Pac Bell.

pharcharmy.us

United States of America


The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.


DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.



Address lookup
canonical name pharcharmy.us

aliases
addresses 95.211.161.198
Domain Whois record

Queried whois.nic.us with “pharcharmy.us

Domain Name: PHARCHARMY.US
Domain ID: D27689718-US
Sponsoring Registrar: ENOM, INC.
Registrar URL (registration services): whois.enom.com
Domain Status: ok
Registrant ID: 5B971C12D890F923
Registrant Name: Richard Manchal
Registrant Organization: –
Registrant Address1: 112 W. 32th Street, 24 floor
Registrant City: New York
Registrant State/Province: NY
Registrant Postal Code: 10019
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.5305771935
Registrant Email: mynewsmail@yahoo.com
Registrant Application Purpose: P3
Registrant Nexus Category: C11

Administrative Contact ID: D1787B2E998AA1E5
Administrative Contact Name: Sergey Ryabov
Administrative Contact Organization: Ruler-Domains
Administrative Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Administrative Contact City: Saint-Petersburg
Administrative Contact State/Province: RU
Administrative Contact Postal Code: 197375
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +7.9219270961
Administrative Contact Email: support@ruler-domains.com
Administrative Application Purpose: P3
Administrative Nexus Category: C11

Billing Contact ID: D1787B2E998AA1E5
Billing Contact Name: Sergey Ryabov
Billing Contact Organization: Ruler-Domains
Billing Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Billing Contact City: Saint-Petersburg
Billing Contact State/Province: RU
Billing Contact Postal Code: 197375
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +7.9219270961
Billing Contact Email: support@ruler-domains.com
Billing Application Purpose: P3
Billing Nexus Category: C11

Technical Contact ID: D1787B2E998AA1E5
Technical Contact Name: Sergey Ryabov
Technical Contact Organization: Ruler-Domains
Technical Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Technical Contact City: Saint-Petersburg
Technical Contact State/Province: RU
Technical Contact Postal Code: 197375
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +7.9219270961
Technical Contact Email: support@ruler-domains.com
Technical Application Purpose: P3
Technical Nexus Category: C11

Name Server: NS1.DNS-SERVICE.BIZ
Name Server: NS2.DNS-SERVICE.BIZ
Name Server: NS3.NS-HOSTING.ORG
Name Server: NS4.NS-HOSTING.ORG

Created by Registrar: ENOM, INC.
Last Updated by Registrar: ENOM, INC.
Domain Registration Date: Sat Jun 12 12:22:21 GMT 2010
Domain Expiration Date: Tue Jun 11 23:59:59 GMT 2013
Domain Last Updated Date: Mon Jul 09 09:46:09 GMT 2012

Whois database was last updated on: Sun Jul 22 18:12:36 GMT 2012
Network Whois record

Queried whois.ripe.net with “-B 95.211.161.198″…
Information related to ‘95.211.161.0 – 95.211.161.255’

inetnum: 95.211.161.0 – 95.211.161.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20090201
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

Information related to ‘95.211.0.0/16AS16265’

route: 95.211.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20090205
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19 (WHOIS4)

DNS records
name class type data time to live
pharcharmy.us IN A 95.211.161.198 60s (00:01:00)
pharcharmy.us IN SOA
server: pharcharmy.us
email: root@pharcharmy.us
serial: 1342171080
refresh: 10800
retry: 3600
expire: 3600000
minimum ttl: 86400
60s (00:01:00)
pharcharmy.us IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 2
original ttl: 86400 (1.00:00:00)
signature expiration: 2012-08-14 16:25:07Z
signature inception: 2012-07-15 16:21:18Z
key tag: 48615
signer’s name: us
signature:
(1024 bits)

86400s (1.00:00:00)
pharcharmy.us IN NSEC
next domain name: phardy.us
record types: NS RRSIG NSEC
86400s (1.00:00:00)
pharcharmy.us IN NS 173.192.194.78 60s (00:01:00)
pharcharmy.us IN NS 94.102.55.100 60s (00:01:00)
198.161.211.95.in-addr.arpa IN PTR hosted-by.leaseweb.com 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.com
serial: 2012061105
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
161.211.95.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-08-21 10:01:58Z
signature inception: 2012-07-22 09:01:58Z
key tag: 8236
signer’s name: 95.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
161.211.95.in-addr.arpa IN NSEC
next domain name: 162.211.95.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
161.211.95.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)

— end —


http://akaltd.com/
http://alfageneric.com/
http://canadianmedicalgroup.com/
http://cheappills.biz/
http://do-not-get-sick.com/
http://drug–shop.com/
http://drug-broker.com/
http://drugspick.com/
http://drugstax.com/
http://drugstore-rx.com/
http://fastpillstore.com/
http://grand-pills.com/
http://grandmedshop.com/
http://grandpills.com/
http://healthheadlines.biz/
http://humanhealth.biz/
http://imed-s.com/
http://ipharmacystore.com/
http://md-pill.com/
http://med–shop.com/
http://med24store.com/
http://medsglobalrx.com/
http://medshop-pro.com/
http://neweffectpill.com/
http://online–rx.com/
http://online-prescription-pharmacy.com/
http://onlinepharmacyforall.com/
http://ordergenericcialis.org/
http://oxmeds.com/
http://ph-rx.com/
http://ph4md.com/
http://pharca.com/
http://pharcharmy.us/
http://pharmacy–store.com/
http://pharmacypillsx.com/
http://pharmacyreal.net/
http://rx-mix.com/
http://rx-q.com/
http://rxrvu.com/
http://secondaid.net/
http://support-rx.com/
http://trustonlinemeds.com/
http://vmedall.com/
http://we-will-help-you.com/
http://westdrugstore.com/
http://www.alfageneric.com/
http://www.americanpillsonline.com/
http://www.azepilloq.com/
http://www.best-5-htp.com/
http://www.canada-pharmacy-24h.com/
http://www.canadianmedicalgroup.com/
http://www.canadianpharcharmy.com/
http://www.cheappills.biz/
http://www.do-not-get-sick.com/
http://www.drug–shop.com/
http://www.drugs-prescription-online.com/
http://www.drugspick.com/
http://www.drugstax.com/
http://www.drugstore-rx.com/
http://www.efficultyr.com/
http://www.farmaword2012.com/
http://www.fastpillstore.com/
http://www.grand-pills.com/
http://www.grandmedshop.com/
http://www.grandpills.com/
http://www.healthheadlines.biz/
http://www.humanhealth.biz/
http://www.imed-s.com/
http://www.ipharmacystore.com/
http://www.md-pill.com/
http://www.med–shop.com/
http://www.medshop-pro.com/
http://www.nearestdrugstore.com/
http://www.online–rx.com/
http://www.online-prescription-pharmacy.com/
http://www.onlinepharmacyforall.com/
http://www.ordergenericcialis.org/
http://www.oxmeds.com/
http://www.ph-rx.com/
http://www.pharca.com/
http://www.pharcharmy.us/
http://www.pharmacy–store.com/
http://www.pilltobereal.com/
http://www.rx-mix.com/
http://www.rxrvu.com/
http://www.secondaid.net/
http://www.trustonlinemeds.com/
http://www.we-will-help-you.com/
http://www.westdrugstore.com/
http://www.your-generic.com/
http://your-generic.com/

www.best-usa-rx.com aka netmeorders.com

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Address lookup
lookup failed http://www.best-usa-rx.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom best-usa-rx.com”…

Domain Name: BEST-USA-RX.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.BEST-USA-RX.COM
Name Server: NS2.BEST-USA-RX.COM
Status: ok
Updated Date: 27-apr-2012
Creation Date: 26-apr-2008
Expiration Date: 26-apr-2013

Last update of whois database: Sun, 22 Jul 2012 16:16:01 UTC
Queried whois.yournamemonkey.com with “best-usa-rx.com

Query error: CouldNotResolveServerName
Network Whois record

Don’t have an IP address for which to get a record
DNS records

Displaying items 1 to 87, out of a total of 87
Displaying items 1 to 3, out of a total of 3

http://best-usa-rx.com/
http://ns1.best-usa-rx.com/
http://www.best-usa-rx.com/
24hpills.com
24sevenmeds.com
affordable-meds-online.com
allbestmeds.com
allpharmmeds.com
allthebestmeds.com
american-best-rx.com
american-rx-now.com
ameripills.net
anytime-meds.com
anytime-rx.com
approved-meds.com
best-care-pharmacy.com
best-edrugstore.com
best-epharmacy.com
best-mailorder-meds.com
best-medications.com
best-netmeds.com
best-online-usa.com
best-pharma.net
best-pill-price.com
best-price-meds.com
best-rapid-drugs.com
best-rx-place.com
buy-oneline-rx.com
buyamericanmeds.com
buybestmeds.com
buybrandmeds.com
buycapsonline.com
buycybermeds.com
buymedsanywhere.com
buyrx24-7.com
caring-pharma.com
cheap-rx-store.com
cheapest-pills.net
cheaprxmeds.net
choice-rx.net
fast-best-online-store.com
fillyourscript.com
getonlinemeds.com
highland-park-pharma.com
mail-order-rx.com
mybestmed.com
nations-best-shop.com
online-estore.net
pharmanextday.com
rapid-drug-store.com
speedyrxstore.com
superfast-meds.com
superfastmed.com
superspeedy-meds.com
http://www.24hpills.com
http://www.24sevenmeds.com
http://www.affordable-meds-online.com
http://www.allbestmeds.com
http://www.american-best-rx.com
http://www.american-rx-now.com
http://www.ameripills.net
http://www.anytime-meds.com
http://www.anytime-rx.com
http://www.approved-meds.com
http://www.be-well-pharmacy.com
http://www.best-care-pharmacy.com
http://www.best-mailorder-meds.com
http://www.best-medications.com
http://www.best-pharma.net
http://www.best-prestige-drugs.com
http://www.best-price-meds.com
http://www.best-rx-place.com
http://www.best-usa-rx.com
http://www.buybestmeds.com
http://www.buycapsonline.com
http://www.buymedsanywhere.com
http://www.buyrx24-7.com
http://www.caring-pharma.com
http://www.cheap-rx-store.com
http://www.cheapest-online-pills.com
http://www.cheapest-pills.net
http://www.cheaprxmeds.net
http://www.choice-rx.net
http://www.fillyourscript.com
http://www.highland-park-pharma.com
http://www.mybestmed.com
http://www.nations-best-shop.com
http://www.online-estore.net
http://www.rapid-drug-store.com
http://www.speedyrxstore.com
http://www.superfastmed.com


Domain Name: AMERICAN-RX-NOW.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.AMERICAN-RX-NOW.COM
Name Server: NS2.AMERICAN-RX-NOW.COM
Status: ok
Updated Date: 29-mar-2012
Creation Date: 28-mar-2005
Expiration Date: 28-mar-2013

Last update of whois database: Sun, 22 Jul 2012 16:21:09 UTC <<<
Registrars.Domain name: american-rx-now.com

Registrant Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Administrative Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Billing Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Technical Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Status:
Active

Name Servers:
NS1.AMERICAN-RX-NOW.COM
NS2.AMERICAN-RX-NOW.COM

Creation date: 28 Mar 2005 09:01:18
Expiration date: 28 Mar 2013 09:01:18