The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.

Address lookup
canonical name viagraonlinewithoutprescriptionfqd.com
aliases
addresses 37.1.204.48
Domain Whois record

Queried whois.internic.net with “dom viagraonlinewithoutprescriptionfqd.com”…

Domain Name: VIAGRAONLINEWITHOUTPRESCRIPTIONFQD.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: FREEDNS1.REGISTRAR-SERVERS.COM
Name Server: FREEDNS2.REGISTRAR-SERVERS.COM
Name Server: FREEDNS3.REGISTRAR-SERVERS.COM
Name Server: FREEDNS4.REGISTRAR-SERVERS.COM
Name Server: FREEDNS5.REGISTRAR-SERVERS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 09-oct-2012
Creation Date: 09-oct-2012
Expiration Date: 09-oct-2013

Last update of whois database: Sun, 14 Oct 2012 16:31:36 UTC

Queried whois.bizcn.com with “viagraonlinewithoutprescriptionfqd.com
Domain name: viagraonlinewithoutprescriptionfqd.com

Registrant Contact:
Allington GHERT.
Gordon Allington gordonalljustfeel@aol.com
+54324892532557 fax: +54324892532552
Retsotern 8 – 174
Hailsham East Sussex 7571
gb

Administrative Contact:
Gordon Allington gordonalljustfeel@aol.com
+54324892532557 fax: +54324892532552
Retsotern 8 – 174
Hailsham East Sussex 7571
gb

Technical Contact:
Gordon Allington gordonalljustfeel@aol.com
+54324892532557 fax: +54324892532552
Retsotern 8 – 174
Hailsham East Sussex 7571
gb

Billing Contact:
Gordon Allington gordonalljustfeel@aol.com
+54324892532557 fax: +54324892532552
Retsotern 8 – 174
Hailsham East Sussex 7571
gb

Registration Service Provider:
name: DomainCompany

DNS:
freedns1.registrar-servers.com
freedns2.registrar-servers.com
freedns3.registrar-servers.com
freedns4.registrar-servers.com
freedns5.registrar-servers.com

Created: 2012-10-09
Expires: 2013-10-09

Network Whois record

Queried whois.ripe.net with “-B 37.1.204.48
Information related to ‘37.1.200.0 – 37.1.207.255’

inetnum: 37.1.200.0 – 37.1.207.255
netname: INFERNO-NL-DE
descr:
country: NL
admin-c: TNTS-RIPE
tech-c: TNTS-RIPE
status: ASSIGNED PA
mnt-by: MNT-3NT
mnt-routes: swiftway-mnt
remarks: 3NT Hosting Network
remarks: Technical issues…………..: support@3nt.com
remarks: Services request…………..: sales@3nt.com
remarks: Abuse departament………….: abuse@3nt.com
remarks: Corporate web site…………: http://www.3nt.com
changed: snoop@linkbeat.net 20120315
source: RIPE

person: Neil Young
address: 3NT SOLUTIONS LLP
address: DALTON HOUSE 60, WINDSOR AVENUE
address: LONDON, UK
phone: +442081333030
e-mail: info@3nt.com
nic-hdl: TNTS-RIPE
mnt-by: MNT-3NT
changed: noc@3nt.com 20111020
source: RIPE

% Information related to ‘37.1.200.0/21AS35017’

route: 37.1.200.0/21
descr: 3NT Solutions
origin: AS35017
notify: ops@swiftway.co.uk
mnt-by: swiftway-mnt
changed: hostmaster@info-tel.net 20120315
source: RIPE

% This query was served by the RIPE Database Query Service version 1.35 (WHOIS4)

DNS records

DNS query for 48.204.1.37.in-addr.arpa returned an error from the server: NameError
name class type data time to live
viagraonlinewithoutprescriptionfqd.com IN NS freedns2.registrar-servers.com 1800s (00:30:00)
viagraonlinewithoutprescriptionfqd.com IN NS freedns5.registrar-servers.com 1800s (00:30:00)
viagraonlinewithoutprescriptionfqd.com IN A 37.1.204.48 3600s (01:00:00)
viagraonlinewithoutprescriptionfqd.com IN NS freedns1.registrar-servers.com 1800s (00:30:00)
viagraonlinewithoutprescriptionfqd.com IN SOA
server: freedns1.registrar-servers.com
email: hostmaster@registrar-servers.com
serial: 2012100900
refresh: 3600
retry: 1801
expire: 604800
minimum ttl: 3601
3601s (01:00:01)
viagraonlinewithoutprescriptionfqd.com IN NS freedns4.registrar-servers.com 1800s (00:30:00)
viagraonlinewithoutprescriptionfqd.com IN NS freedns3.registrar-servers.com 1800s (00:30:00)

— end —

buyviagraonlinedvx.com
download.gotovideosonline.com
genericviagraonlinejst.com
genericcialisonlinedvl.com
genericreductil.com
genericsibutramine.com
phentermineaustralia.net
reductilaustralia.com
sibutramineaustralia.com
weightlossspeed.com
buyaciphexonline20mg.net
buyalbendazolenoprescription.net
buyalbuterolnoprescription.org
buyallopurinolonline.net
buyamitriptylineonline50mg.net
buyamoxicillinonline500mg.net
buyclomipheneonline.net
buycolchicineonline.net
buycozaaronline50mg.net
buycytoteconline200mg.net
buyelavilonline10mg.net
buyelocononline.net
buyflomaxonline04mg.net
buyfurosemidenoprescription.net
buypropeciaon.org
buypropeciaon.org
buypropeclaon.com
lincolnmedsonline.us
medicineinpeopleslives.com
innovativetaxgroup.com
viagra100mgpricedst.com
viagraforsalecheapmbr.com
approvedpharmacyvnx.com
viagra200mgcostgkr.com
genericpharmacyrts.com
viagraordernoprescriptionlgj.com
onlinepharmacydpn.com
neosizexl-pills.com
orderviagraoninesamples.com
viagraonlineordercheap.com
buycialisonline-canada.com
buyviagraonlinecanada.net
buyviagraonlineus.net
viagraonlinebuyhere.com
northamericanpharmacystore.com
onlinepharmacy47.com
buycialispills36.com
cialisonlinedrug.com
buypropecia5.com
buyvaltrex5.com
ibuycipro.com
viagramoc.com
buyviagraonlinemed.com
viagrasalenow.com
onlinecialisbuying.com
buyviagraquality.com
epharmacie-france.com
buyvyvanse.net
viagranoprescriptionmmm.com
cialisonlinemrl.com
buycialisjgs.com
buycialisonlinefdv.com
buyviagrakdc.com
buyviagraonlineswn.com
cheapcialisjrp.com
cheapviagrafdm.com
genericviagrajxz.com
viagraforsalertv.com

WhoIs ~ medexpressrx.com

October 9, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name http://www.medexpressrx.com
aliases
addresses 199.59.166.168
Domain Whois record

Queried whois.internic.net with “dom medexpressrx.com

Domain Name: MEDEXPRESSRX.COM
Registrar: HOMESTEAD LIMITED DBA NAMEVAULT.COM
Whois Server: whois.namevault.com
Referral URL: http://www.namevault.com
Name Server: NS1.P27.DYNECT.NET
Name Server: NS2.P27.DYNECT.NET
Name Server: NS3.P27.DYNECT.NET
Name Server: NS4.P27.DYNECT.NET
Status: ok
Updated Date: 14-jul-2011
Creation Date: 18-jul-2003
Expiration Date: 18-jul-2016

Last update of whois database: Tue, 09 Oct 2012 15:52:09 UTC

Queried whois.namevault.com with “medexpressrx.com

Domain Name: MEDEXPRESSRX.COM

Registrant:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Creation Date: 18-Jul-2003
Expiration Date: 18-Jul-2016

Domain servers in listed order:
ns1.p27.dynect.net
ns2.p27.dynect.net
ns3.p27.dynect.net
ns4.p27.dynect.net

Administrative Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Technical Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Billing Contact:
PrivacyProtect.org
Domain Admin contact@privacyprotect.org
ID#10760, PO Box 16
Note – All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Status:ACTIVE

Network Whois record
Queried rwhois.blacklotus.net with “199.59.166.168

rwhois V-1.0,V-1.5:00090h:00 support.blacklotus.net (Ubersmith RWhois Server V-2.2.0)
autharea=199.59.166.0/24
xautharea=199.59.166.0/24
network:Class-Name:network
network:Auth-Area:199.59.166.0/24
network:ID:NET-2400.199.59.166.168
network:Network-Name:SSL Enabled Web Sites
network:IP-Network:199.59.166.168
network:IP-Network-Block:199.59.166.168
network:Org-Name:Intelecorp
network:Street-Address:502 A Wing Great Eastern Chamber CBD
network:City:Navi Mumbai
network:State:Maharashtra
network:Postal-Code:400614
network:Country-Code:IN
network:Tech-Contact:MAINT-2400.199.59.166.168
network:Created:20120803231358000
network:Updated:20120803231358000
network:Updated-By:support@blacklotus.net
contact:POC-Name:Network Operations Center
contact:POC-Email:support@blacklotus.net
contact:POC-Phone:(323) 657-5944
contact:Tech-Name:Network Operations Center
contact:Tech-Email:support@blacklotus.net
contact:Tech-Phone:(323) 657-5944
ok

Queried whois.arin.net with “n 199.59.166.168

NetRange: 199.59.160.0 – 199.59.167.255
CIDR: 199.59.160.0/21
OriginAS: AS32421
NetName: BLACK-LOTUS-COMMUNICATIONS
NetHandle: NET-199-59-160-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-11-29
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-59-160-0-1

OrgName: Black Lotus Communications
OrgId: BLC-92
Address: 1000 N. West St., Suite 1200
City: Wilmington
StateProv: DE
PostalCode: 19801
Country: US
RegDate: 2004-04-22
Updated: 2012-09-30
Comment: Please route any abuse concerns to abuse@blacklotus.net
Ref: http://whois.arin.net/rest/org/BLC-92

ReferralServer: rwhois://rwhois.blacklotus.net:4321

OrgNOCHandle: NOC1554-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-757-304-0668
OrgNOCEmail: noc@blacklotus.net
OrgNOCRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

OrgAbuseHandle: NOC1554-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-757-304-0668
OrgAbuseEmail: noc@blacklotus.net
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

OrgTechHandle: NOC1554-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-757-304-0668
OrgTechEmail: noc@blacklotus.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RTechHandle: NOC1554-ARIN
RTechName: Network Operations Center
RTechPhone: +1-757-304-0668
RTechEmail: noc@blacklotus.net
RTechRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RAbuseHandle: NOC1554-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-757-304-0668
RAbuseEmail: noc@blacklotus.net
RAbuseRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

RNOCHandle: NOC1554-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-757-304-0668
RNOCEmail: noc@blacklotus.net
RNOCRef: http://whois.arin.net/rest/poc/NOC1554-ARIN

DNS records
name class type data time to live
http://www.medexpressrx.com IN A 199.59.166.168 300s (00:05:00)
medexpressrx.com IN SOA
server: ns1.p27.dynect.net
email: jettsalls@gmail.com
serial: 95
refresh: 3600
retry: 600
expire: 604800
minimum ttl: 60
86400s (1.00:00:00)
medexpressrx.com IN NS ns2.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns4.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns1.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN NS ns3.p27.dynect.net 86400s (1.00:00:00)
medexpressrx.com IN A 199.59.166.168 300s (00:05:00)
medexpressrx.com IN MX
preference: 30
exchange: alt2.aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN MX
preference: 10
exchange: aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN MX
preference: 20
exchange: alt1.aspmx.l.google.com
86400s (1.00:00:00)
medexpressrx.com IN TXT v=spf1 include:_spf.google.com ~all 86400s (1.00:00:00)
medexpressrx.com IN TXT google-site-verification=Us9olDg61Gvfdbuvs35E-LgT4fFGvVICB4s51HQomb8 86400s (1.00:00:00)
medexpressrx.com IN SPF v=spf1 include:_spf.google.com ~all 86400s (1.00:00:00)
168.166.59.199.in-addr.arpa IN AAAA ::1 500s (00:08:20)
168.166.59.199.in-addr.arpa IN MX
preference: 10
exchange: domain.not.configured
120s (00:02:00)
168.166.59.199.in-addr.arpa IN PTR domain.not.configured 120s (00:02:00)
168.166.59.199.in-addr.arpa IN A 208.94.147.150 120s (00:02:00)
166.59.199.in-addr.arpa IN A 208.94.147.150 120s (00:02:00)
166.59.199.in-addr.arpa IN PTR domain.not.configured 120s (00:02:00)
166.59.199.in-addr.arpa IN MX
preference: 10
exchange: domain.not.configured
120s (00:02:00)
166.59.199.in-addr.arpa IN AAAA ::1 500s (00:08:20)
166.59.199.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-10-19 12:00:36Z
signature inception: 2012-10-09 12:00:36Z
key tag: 25838
signer’s name: 199.in-addr.arpa
signature:
(1024 bits)
6317s (01:45:17)
166.59.199.in-addr.arpa IN NSEC
next domain name: 167.59.199.in-addr.arpa
record types: NS RRSIG NSEC
6317s (01:45:17)
166.59.199.in-addr.arpa IN NS ns4.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns2.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns5.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns1.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns6.ethproxy.com 81917s (22:45:17)
166.59.199.in-addr.arpa IN NS ns3.ethproxy.com 81917s (22:45:17)

— end —

WhoIs ~ softdrugstore.com

October 2, 2012October 7, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name softdrugstore.com
aliases
addresses 109.236.84.213
Domain Whois record

Queried whois.internic.net with “dom softdrugstore.com

Domain Name: SOFTDRUGSTORE.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com
Name Server: NS.LOCAL-PROVIDER.COM
Name Server: NS.LOCAL-PROVIDER2.COM
Name Server: NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WS
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 04-sep-2012
Creation Date: 28-sep-2010
Expiration Date: 28-sep-2013

Last update of whois database: Tue, 02 Oct 2012 22:39:12 UTC
Queried whois.moniker.com with “softdrugstore.com

Domain Name: SOFTDRUGSTORE.COM
Registrar: MONIKER

Registrant [1541393]:
Jeffrey Thomas Archacki navaikus@gmail.com
72 Spring Street
11th Floor
New York
NY
10012
US

Administrative Contact [1541393]:
Jeffrey Thomas Archacki navaikus@gmail.com
72 Spring Street
11th Floor
New York
NY
10012
US
Phone: +1.12124398688

Billing Contact [1541393]:
Jeffrey Thomas Archacki navaikus@gmail.com
72 Spring Street
11th Floor
New York
NY
10012
US
Phone: +1.12124398688

Technical Contact [1541393]:
Jeffrey Thomas Archacki navaikus@gmail.com
72 Spring Street
11th Floor
New York
NY
10012
US
Phone: +1.12124398688

Domain servers in listed order:

NS.LOCAL-PROVIDER.COM
NS.LOCAL-PROVIDER2.COM
NS1.FREEDNS.WS
NS2.FREEDNS.WS

Record created on: 2010-09-28 13:01:19.0
Database last updated on: 2012-09-04 10:30:24.19
Domain Expires on: 2013-09-28 13:01:19.0

Network Whois record

Queried whois.ripe.net with “-B 109.236.84.213
Information related to ‘109.236.84.0 – 109.236.84.255’

inetnum: 109.236.84.0 – 109.236.84.255
netname: WORLDSTREAM
descr: WorldStream IPv4.27
country: NL
admin-c: WS1670-RIPE
tech-c: WS1670-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: MNT-WORLDSTREAM
changed: info@worldstream.nl 20100511
source: RIPE

role: WORLDSTREAM DBM
address: Honderdland 111F
address: 2676LT Maasdijk
phone: +31174712117
fax-no: +31174512310
e-mail: info@worldstream.nl
abuse-mailbox: abuse@worldstream.nl
admin-c: DV1495-RIPE
tech-c: DV1495-RIPE
nic-hdl: WS1670-RIPE
mnt-by: MNT-WORLDSTREAM
changed: info@worldstream.nl 20080515
source: RIPE

% Information related to ‘109.236.80.0/20AS49981’

route: 109.236.80.0/20
descr: WORLDSTREAM-BLK-109.236.80.0
origin: AS49981
remarks: ————————————————
remarks: Abuse notifications to: abuse@worldstream.nl
remarks: ————————————————
mnt-by: MNT-WORLDSTREAM
changed: info@worldstream.nl 20091209
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS4)

DNS records
name class type data time to live
softdrugstore.com IN SOA
server: ns.local-provider.com
email: ns@local-provider2.com
serial: 2012082702
refresh: 3600
retry: 900
expire: 3600000
minimum ttl: 3600
10800s (03:00:00)
softdrugstore.com IN A 109.236.84.213 10800s (03:00:00)
softdrugstore.com IN NS ns.local-provider2.com 10800s (03:00:00)
softdrugstore.com IN NS ns.local-provider.com 10800s (03:00:00)
213.84.236.109.in-addr.arpa IN PTR customer.worldstream.nl 1000s (00:16:40)
84.236.109.in-addr.arpa IN SOA
server: ns1.worldstream.nl
email: hostmaster@worldstream.nl
serial: 2012091700
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
84.236.109.in-addr.arpa IN NS ns1.worldstream.nl 3600s (01:00:00)
84.236.109.in-addr.arpa IN NS ns2.worldstream.nl 3600s (01:00:00)

— end —

Sites on IP 178.250.244.122
Displaying items 1 to 100, out of a total of 269

WhoIs ~ pharmonlinerx.com

October 1, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

(800) 532-4808
(718) 313-1498
+44-203-0110241

Address lookup
canonical name pharmonlinerx.com
aliases
addresses 91.218.212.30
Domain Whois record

Queried whois.internic.net with “dom pharmonlinerx.com”…

Domain Name: PHARMONLINERX.COM
Registrar: VAUTRON RECHENZENTRUM AG
Whois Server: whois.antagus.de
Name Server: DNS1.INTERNIC.AT
Name Server: DNS2.INTERNIC.AT
Name Server: NS501.INTERNIC.AT
Name Server: NS57.INTERNIC.AT
Status: ok
Updated Date: 31-jul-2012
Creation Date: 16-may-2011
Expiration Date: 16-may-2013

Last update of whois database: Mon, 01 Oct 2012 23:42:45 UTC
Queried whois.antagus.de with “pharmonlinerx.com

Whois Server Version 2.1 at whois.tmagnic.net
Database contains ONLY .COM, .NET, .TV, .CC domains.

Owner Contact:
Mark Vance
–
54 Glenilla Rd 54
London, 317, UK

Punycode Name: pharmonlinerx.com
Unicode Name: pharmonlinerx.com

Admin Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Technical Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Zone Contact
Mark Vance
–
iron.vance.666@gmail.com
54 Glenilla Rd 54
London, 317, UK
phone: +44.7039400869

Record expires on: 2013-05-16 17:50:01

Domain servers in listed order:

dns2.internic.at 212.126.66.30
ns57.internic.at 106.187.44.82
dns1.internic.at 212.126.64.70
ns501.internic.at 66.175.216.204

Network Whois record

Queried whois.ripe.net with “-B 91.218.212.30″…

% Information related to ‘91.218.212.0 – 91.218.215.255’

inetnum: 91.218.212.0 – 91.218.215.255
netname: DLH2-NET
descr: TOV ‘Dream Line Holding’
country: UA
org: ORG-DLH1-RIPE
admin-c: BABY-RIPE
tech-c: MIMA-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: DREAM-MNT
mnt-routes: DREAM-MNT
mnt-domains: DREAM-MNT
changed: hostmaster@ripe.net 20100816
source: RIPE

organisation: ORG-DLH1-RIPE
org-name: TOV ‘Dream Line Holding’
org-type: OTHER
address: Predslavinska str., 28
address: Ukraine, Kiev
e-mail: johnson@johnson.kiev.ua
abuse-mailbox: abuse@qos.kiev.ua
mnt-ref: DREAM-MNT
mnt-by: DREAM-MNT
changed: mim@qos.kiev.ua 20090818
source: RIPE

person: Evgeniy Zbarazhskiy
address: UA,Kiev
e-mail: johnson@johnson.kiev.ua
phone: +380442370000
nic-hdl: BABY-RIPE
mnt-by: BABY-MNT
changed: hostmaster@ripe.net 20050603
source: RIPE

person: Gregory Prokopenko
address: UA,Kiev
e-mail: mim@qos.kiev.ua
phone: +380443324607
nic-hdl: MIMA-RIPE
mnt-by: MIMA-MNT
notify: mim@qos.kiev.ua
changed: mim@qos.kiev.ua 20070731
source: RIPE

% Information related to ‘91.218.212.0/24AS42352’

route: 91.218.212.0/24
descr: TOV Dream Line Holding
origin: AS42352
mnt-by: DREAM-MNT
changed: mim@qos.kiev.ua 20100816
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)
DNS records

name class type data time to live
pharmonlinerx.com IN A 91.218.212.30 86400s (1.00:00:00)
pharmonlinerx.com IN NS dns2.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS ns57.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS ns501.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN NS dns1.internic.at 86400s (1.00:00:00)
pharmonlinerx.com IN SOA
server: dns1.internic.at
email: hostmaster@internic.at
serial: 2011051712
refresh: 10800
retry: 3600
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
30.212.218.91.in-addr.arpa IN PTR unallocated.qos.kiev.ua 3600s (01:00:00)
212.218.91.in-addr.arpa IN SOA
server: ns.qos.kiev.ua
email: hostmaster@qos.kiev.ua
serial: 2012092100
refresh: 43000
retry: 5000
expire: 2400000
minimum ttl: 86400
3600s (01:00:00)
212.218.91.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-10-31 11:52:34Z
signature inception: 2012-10-01 10:52:34Z
key tag: 1456
signer’s name: 91.in-addr.arpa
signature:
(1024 bits)
4D14983E5113B95AB8E6E337840D9202
77A8CA14CB4C4CA1E852E17BE3E64665
30C68B4E242C937D3F1BD7194AD2451D
C0A5F5185434F084F69D5371E13D9C92
F25116949ADDA08831CD6CCC68727942
1C8077544D1AE7DF7B9B44FB83E8CDC4
BCC30FABAC3A381CDC1ACE65A1F7BEFC
361BB949BEA57218BA6480C535098A64
7200s (02:00:00)
212.218.91.in-addr.arpa IN NSEC
next domain name: 213.218.91.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
212.218.91.in-addr.arpa IN NS ns.qos.kiev.ua 3600s (01:00:00)
212.218.91.in-addr.arpa IN NS ns.dream.net.ua 3600s (01:00:00)
— end —

Sites on IP 91.218.212.30

WhoIs approvedpharmacyvnx.com

October 1, 20121 Comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name approvedpharmacyvnx.com
aliases
addresses 37.1.202.76
Domain Whois record

Queried whois.internic.net with “dom approvedpharmacyvnx.com”…

Domain Name: APPROVEDPHARMACYVNX.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: FREEDNS1.REGISTRAR-SERVERS.COM
Name Server: FREEDNS2.REGISTRAR-SERVERS.COM
Name Server: FREEDNS3.REGISTRAR-SERVERS.COM
Name Server: FREEDNS4.REGISTRAR-SERVERS.COM
Name Server: FREEDNS5.REGISTRAR-SERVERS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 31-aug-2012
Creation Date: 31-aug-2012
Expiration Date: 31-aug-2013

Last update of whois database: Mon, 01 Oct 2012 22:49:22 UTC
Queried whois.bizcn.com with “approvedpharmacyvnx.com

Domain name: approvedpharmacyvnx.com

Registrant Contact:
Sigala Corp.
Morgan Sigala admin@approvedpharmacyvnx.com
+634973446485 fax: +634973446486
Chermisholl 92 – 10
Jamestown Virginia 2591
us

Administrative Contact:
Morgan Sigala admin@approvedpharmacyvnx.com
+634973446485 fax: +634973446486
Chermisholl 92 – 10
Jamestown Virginia 2591
us

Technical Contact:
Morgan Sigala admin@approvedpharmacyvnx.com
+634973446485 fax: +634973446486
Chermisholl 92 – 10
Jamestown Virginia 2591
us

Billing Contact:
Morgan Sigala admin@approvedpharmacyvnx.com
+634973446485 fax: +634973446486
Chermisholl 92 – 10
Jamestown Virginia 2591
us

Registration Service Provider:
name: DomainCompany

DNS:
freedns1.registrar-servers.com
freedns2.registrar-servers.com
freedns3.registrar-servers.com
freedns4.registrar-servers.com
freedns5.registrar-servers.com

Created: 2012-08-31
Expires: 2013-08-31
Network Whois record

Queried whois.ripe.net with “-B 37.1.202.76″…

% Information related to ‘37.1.200.0 – 37.1.207.255’

inetnum: 37.1.200.0 – 37.1.207.255
netname: INFERNO-NL-DE
descr: ********************************************************
descr: * We provide virtual and dedicated servers on this Subnet.
descr: *
descr: * Those services are self managed by our customers
descr: * therefore, we are not using this IP space ourselves
descr: * and it could be assigned to various end customers.
descr: *
descr: * In case of issues related with SPAM, Fraud,
descr: * Phishing, DDoS, portscans or others,
descr: * feel free to contact us with relevant info
descr: * and we will shut down this server: abuse@3nt.com
descr: ********************************************************
country: NL
admin-c: TNTS-RIPE
tech-c: TNTS-RIPE
status: ASSIGNED PA
mnt-by: MNT-3NT
mnt-routes: swiftway-mnt
remarks: 3NT Hosting Network
remarks: Technical issues…………..: support@3nt.com
remarks: Services request…………..: sales@3nt.com
remarks: Abuse departament………….: abuse@3nt.com
remarks: Corporate web site…………: http://www.3nt.com
changed: snoop@linkbeat.net 20120315
source: RIPE

% Information related to ‘37.1.200.0/21AS35017’

route: 37.1.200.0/21
descr: 3NT Solutions
origin: AS35017
notify: ops@swiftway.co.uk
mnt-by: swiftway-mnt
changed: hostmaster@info-tel.net 20120315
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS4)
DNS records

DNS query for 76.202.1.37.in-addr.arpa returned an error from the server: NameError

name class type data time to live
approvedpharmacyvnx.com IN NS freedns1.registrar-servers.com 1800s (00:30:00)
approvedpharmacyvnx.com IN NS freedns5.registrar-servers.com 1800s (00:30:00)
approvedpharmacyvnx.com IN A 37.1.202.76 3600s (01:00:00)
approvedpharmacyvnx.com IN NS freedns2.registrar-servers.com 1800s (00:30:00)
approvedpharmacyvnx.com IN SOA
server: freedns1.registrar-servers.com
email: hostmaster@registrar-servers.com
serial: 2012083100
refresh: 3600
retry: 1801
expire: 604800
minimum ttl: 3601
3601s (01:00:01)
approvedpharmacyvnx.com IN NS freedns4.registrar-servers.com 1800s (00:30:00)
approvedpharmacyvnx.com IN NS freedns3.registrar-servers.com 1800s (00:30:00)
— end —

WhoIs – www.sun-pharmacy.com

September 16, 2012September 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor. This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.

Buying controlled substances online without a valid prescription may be punishable by imprisonment under Federal law. Often drugs ordered from rogue websites come from foreign countries. It is a felony to import drugs into the United States and ship to a non-DEA registrant.

Buying drugs online may not be only illegal, but dangerous. The American Medical Association and state boards of medicine and pharmacy have all condemned the practice of cyber doctors issuing online prescriptions as unacceptable medical care. Drugs delivered by rogue websites may be the wrong drugs, adulterated or expired, the wrong dosage strength, or have no dosage directions or warnings.

DEA is targeting rogue online pharmacies for prosecution and shutting down these illegal websites. See the results of one such investigation, Operation Cyber Chase, at www.usdoj.gov/dea/pubs/pressrel/pr042005.html.

To report illegal prescription drug sales and/or rogue pharmacies operating on the Internet call the anonymous Pharmaceutical Drug Abuse Hotline: 1-877-RxAbuse (1-877-792-2873)

Address lookup
canonical name http://www.sun-pharmacy.com
aliases
addresses 206.188.192.121
Domain Whois record

Queried whois.internic.net with “dom sun-pharmacy.com

Domain Name: SUN-PHARMACY.COM
Registrar: NAME.COM LLC
Whois Server: whois.name.com
Referral URL: http://www.name.com
Name Server: NS1JLP.NAME.COM
Name Server: NS2KQZ.NAME.COM
Name Server: NS3FLT.NAME.COM
Name Server: NS4CLQ.NAME.COM
Status: clientTransferProhibited
Updated Date: 09-sep-2012
Creation Date: 21-sep-2005
Expiration Date: 21-sep-2013

Last update of whois database: Sun, 16 Sep 2012 15:25:24 UTC

Queried whois.name.com with “sun-pharmacy.com
Domain Name: sun-pharmacy.com
Registrar: Name.com LLC

Protected Domain Services Customer ID: NCR-2551413

Expiration Date: 2013-09-22 02:38:14
Creation Date: 2005-09-22 02:38:14

Name Servers:
ns1jlp.name.com
ns2kqz.name.com
ns3flt.name.com
ns4clq.name.com

REGISTRANT CONTACT INFO
Protected Domain Services – Customer ID: NCR-2551413
P.O. Box 6197
Denver
CO
80206
US
Phone: +1.303-747-4010
Email Address: sun-pharmacy.com@protecteddomainservices.com

ADMINISTRATIVE CONTACT INFO
Protected Domain Services – Customer ID: NCR-2551413
P.O. Box 6197
Denver
CO
80206
US
Phone: +1.303-747-4010
Email Address: sun-pharmacy.com@protecteddomainservices.com

TECHNICAL CONTACT INFO
Protected Domain Services – Customer ID: NCR-2551413
P.O. Box 6197
Denver
CO
80206
US
Phone: +1.303-747-4010
Email Address: sun-pharmacy.com@protecteddomainservices.com

BILLING CONTACT INFO
Protected Domain Services – Customer ID: NCR-2551413
P.O. Box 6197
Denver
CO
80206
US
Phone: +1.3037474010
Email Address: sun-pharmacy.com@protecteddomainservices.com

Timestamp: 1347809156.7678

Cached on: 2012-09-16T09:25:56-06:00
Network Whois record

Queried whois.arin.net with “n ! NET-206-188-192-0-2

NetRange: 206.188.192.0 – 206.188.199.255
CIDR: 206.188.192.0/21
OriginAS: AS14441, AS19871, AS6245
NetName: NTSL-03
NetHandle: NET-206-188-192-0-2
Parent: NET-206-188-192-0-1
NetType: Reassigned
RegDate: 2010-02-04
Updated: 2010-02-04
Ref: http://whois.arin.net/rest/net/NET-206-188-192-0-2

OrgName: Network Solutions, LLC
OrgId: NETWO-59
Address: 13861 Sunrise Valley Dr
Address: Suite 300
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
RegDate: 2004-08-05
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/NETWO-59

OrgAbuseHandle: NOC2042-ARIN
OrgAbuseName: NOC
OrgAbusePhone: +1-703-668-4900
OrgAbuseEmail: noc@networksolutions.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2042-ARIN

OrgTechHandle: NOC2042-ARIN
OrgTechName: NOC
OrgTechPhone: +1-703-668-4900
OrgTechEmail: noc@networksolutions.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC2042-ARIN

RNOCHandle: NOC2042-ARIN
RNOCName: NOC
RNOCPhone: +1-703-668-4900
RNOCEmail: noc@networksolutions.com
RNOCRef: http://whois.arin.net/rest/poc/NOC2042-ARIN

DNS records

DNS query for 192.188.206.in-addr.arpa returned an error from the server: ServerFailure
name class type data time to live
http://www.sun-pharmacy.com IN A 206.188.192.121 300s (00:05:00)
sun-pharmacy.com IN MX
preference: 10
exchange: aspmx.l.google.com
1800s (00:30:00)
sun-pharmacy.com IN SOA
server: ns1jlp.name.com
email: support@name.com
serial: 1
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
300s (00:05:00)
sun-pharmacy.com IN MX
preference: 30
exchange: aspmx3.googlemail.com
1800s (00:30:00)
sun-pharmacy.com IN MX
preference: 30
exchange: aspmx4.googlemail.com
1800s (00:30:00)
sun-pharmacy.com IN NS ns2kqz.name.com 300s (00:05:00)
sun-pharmacy.com IN A 206.188.192.121 300s (00:05:00)
sun-pharmacy.com IN MX
preference: 30
exchange: aspmx5.googlemail.com
1800s (00:30:00)
sun-pharmacy.com IN NS ns3flt.name.com 300s (00:05:00)
sun-pharmacy.com IN NS ns1jlp.name.com 300s (00:05:00)
sun-pharmacy.com IN MX
preference: 30
exchange: aspmx2.googlemail.com
1800s (00:30:00)
sun-pharmacy.com IN MX
preference: 20
exchange: alt2.aspmx.l.google.com
1800s (00:30:00)
sun-pharmacy.com IN NS ns4clq.name.com 300s (00:05:00)
sun-pharmacy.com IN MX
preference: 20
exchange: alt1.aspmx.l.google.com
1800s (00:30:00)
121.192.188.206.in-addr.arpa IN PTR vux.netsolhost.com 10800s (03:00:00)

— end —

WhoIs tramadol-cheap.com

September 16, 2012September 16, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Address lookup
canonical name tramadol-cheap.com
aliases
addresses 173.254.28.112
Domain Whois record

Queried whois.internic.net with “dom tramadol-cheap.com”…

Domain Name: TRAMADOL-CHEAP.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.PIPEDNS.COM
Name Server: NS2.PIPEDNS.COM
Name Server: NS3.PIPEDNS.COM
Status: clientTransferProhibited
Updated Date: 12-oct-2010
Creation Date: 28-jul-2004
Expiration Date: 28-jul-2013

Last update of whois database: Sun, 16 Sep 2012 13:59:09 UTC
Queried whois.joker.com with “tramadol-cheap.com

domain: tramadol-cheap.com
owner: – –
organization: WhoisGuard
email: manager@dudleypark.com
address: 8939 S. Sepulveda Blvd. #110 – 732
city: Westchester
state: —
postal-code: CA 90045
country: US
phone: +1.6613102107
fax: +1.6613102107
admin-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
tech-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
billing-c: CCOM-1633807 be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
nserver: ns1.pipedns.com
nserver: ns2.pipedns.com
nserver: ns3.pipedns.com
status: lock
created: 2004-07-28 08:58:19 UTC
modified: 2010-10-15 17:59:02 UTC
expires: 2013-07-28 08:58:19 UTC
query-source: 216.197.114.174

contact-hdl: CCOM-1633807
person: – –
organization: WhoisGuard
email: be780016d4c646ec94fd02268125e9c4.protect@whoisguard.com
address: 8939 S. Sepulveda Blvd. #110 – 732
city: Westchester
state: —
postal-code: CA 90045
country: US
phone: +1.6613102107

source: joker.com live whois service
query-time: 0.01476
db-updated: 2012-09-16 13:59:45

Network Whois record
Queried whois.arin.net with “n 173.254.28.112

NetRange: 173.254.0.0 – 173.254.127.255
CIDR: 173.254.0.0/17
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-8
NetHandle: NET-173-254-0-0-1
Parent: NET-173-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-10-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-173-254-0-0-1

OrgName: Bluehost Inc.
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2011-09-27
Ref: http://whois.arin.net/rest/org/BLUEH-2

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
http://www.tramadol-cheap.com IN CNAME tramadol-cheap.com 14400s (04:00:00)
tramadol-cheap.com IN MX
preference: 0
exchange: tramadol-cheap.com
14400s (04:00:00)
tramadol-cheap.com IN TXT v=spf1 +a +mx +ip4:173.254.28.112 ?all 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns1.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns3.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN NS ns2.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN A 173.254.28.112 14400s (04:00:00)
tramadol-cheap.com IN SOA
server: ns1.pipedns.com
email: root@cx59.justhost.com
serial: 2012081000
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
tramadol-cheap.com IN NS ns2.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN SOA
server: ns1.pipedns.com
email: root@cx59.justhost.com
serial: 2012081000
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
tramadol-cheap.com IN MX
preference: 0
exchange: tramadol-cheap.com
14400s (04:00:00)
tramadol-cheap.com IN NS ns1.pipedns.com 86400s (1.00:00:00)
tramadol-cheap.com IN TXT v=spf1 +a +mx +ip4:173.254.28.112 ?all 86400s (1.00:00:00)
tramadol-cheap.com IN A 173.254.28.112 14400s (04:00:00)
tramadol-cheap.com IN NS ns3.pipedns.com 86400s (1.00:00:00)
112.28.254.173.in-addr.arpa IN PTR just112.justhost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN NS ns2.bluehost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN NS ns1.bluehost.com 86400s (1.00:00:00)
28.254.173.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2012070301
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)

— end —

EASY-TO-USE-PHARMACY.COM

September 15, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

ns1.diorchid.com
ns2.alninak.com
ns2.every-good.com
ns2.permianick.com
ns2.silkarn.com
Safe-ed-Pills.com
Helpful-Online-Pharmacy.com
Airstorepills.com
rx-partners.biz
edeuro.com
best-ed-solution.com
EASY-TO-USE-PHARMACY.COM
freehostp.com
europeantablets.com
onlinehostlocation.com
fast-ed-solution.com
Mysecurebilling.com
pay-for-order.com
best-ed-solution.com
Helpful-online-pharmacy.com
Best-ed-store.com
airstorepills.com
Popular-pills-online.com
ever.online-ns.com
ns1.alninak.com
ns1.diorchid.com
ns1.onefirma.com
ns1.stimulcash.com
ns2.doublefirma.com
ns2.every-good.com
ns2.silkarn.com
ns2.st-dns.com
ns2.stimul-media.com
airstorepills.com
best-ed-solution.com
easy-to-use-pharmacy.com
edeuro.com
fast-ed-solution.com
french-pharmacy.com
helpful-online-pharmacy.com
himos-ed-selected.com
perfect-pharmacy.com
safe-ed-pills.com
spanish-pharmacy.com
http://www.drugstorebestbuys.com

Domain Name: EASY-TO-USE-PHARMACY.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM

Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.SILKARN.COM
Name Server: NS2.SILKARN.COM
Status: clientTransferProhibited
Updated Date: 27-aug-2010
Creation Date: 16-jun-2010
Expiration Date: 16-jun-2012
Registrars.domain: easy-to-use-pharmacy.com
owner: Henry Dobson
email: henryadobson@yahoo.com
address: 34A-36 Kilburn High Road
city: London
state: —
postal-code: NW6 5UA
country: GB
phone: +44.7005930944
admin-c: CCOM-1390681 henryadobson@yahoo.com
tech-c: CCOM-1390681 henryadobson@yahoo.com
billing-c: CCOM-1390681 henryadobson@yahoo.com
nserver: ns1.silkarn.com 193.105.210.73
nserver: ns2.silkarn.com 31.44.184.199
status: lock
created: 2010-06-16 10:27:29 UTC
modified: 2010-08-27 15:39:10 UTC
expires: 2012-06-16 10:27:29 UTC
query-source: 74.117.177.167
contact-hdl: CCOM-1390681
person: Henry Dobson
email: henryadobson@yahoo.com
address: 34A-36 Kilburn High Road
city: London
state: —
postal-code: NW6 5UA
country: GB
phone: +44.7039401952
source: joker.com live whois service
query-time: 0.007733
db-updated: 2012-02-23 00:03:00

WhoIs ~ best-ed-solution.com

September 15, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

(800) 532-4808
(718) 313-1498

Address lookup
canonical name best-ed-solution.com
aliases
addresses 91.207.60.27
Domain Whois record

Queried whois.internic.net with “dom best-ed-solution.com”…

Domain Name: BEST-ED-SOLUTION.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.SILKARN.COM
Name Server: NS2.SILKARN.COM
Status: clientTransferProhibited
Updated Date: 26-jun-2012
Creation Date: 14-jul-2009
Expiration Date: 14-jul-2013

Last update of whois database: Sun, 16 Sep 2012 01:27:14 UTC
Queried whois.joker.com with “best-ed-solution.com

domain: best-ed-solution.com
owner: Henry Dobson
email: henryadobson@yahoo.com
address: 34A-36 Kilburn High Road
city: London
state: —
postal-code: NW6 5UA
country: GB
phone: +44.7005930944
admin-c: CCOM-1390681 henryadobson@yahoo.com
tech-c: CCOM-1390681 henryadobson@yahoo.com
billing-c: CCOM-1390681 henryadobson@yahoo.com
nserver: ns1.silkarn.com 176.53.24.115
nserver: ns2.silkarn.com 85.95.236.65
status: lock
created: 2009-07-14 12:33:16 UTC
modified: 2012-06-26 11:57:20 UTC
expires: 2013-07-14 12:33:16 UTC
query-source: 209.200.73.218

contact-hdl: CCOM-1390681
person: Henry Dobson
email: henryadobson@yahoo.com
address: 34A-36 Kilburn High Road
city: London
state: —
postal-code: NW6 5UA
country: GB
phone: +44.7039401952

source: joker.com live whois service
query-time: 0.007597
db-updated: 2012-09-16 01:27:52

Queried whois.ripe.net with “-B 91.207.60.27″…

% Information related to ‘91.207.60.0 – 91.207.61.255’

inetnum: 91.207.60.0 – 91.207.61.255
netname: XServer-IP-Network
descr: PE Ivanov Vitaliy Sergeevich
country: UA
org: ORG-IV2-RIPE
admin-c: IV25-RIPE
tech-c: IV25-RIPE
status: ASSIGNED PI
notify: info@xserver.ua
mnt-by: RIPE-NCC-END-MNT
mnt-by: MNT-IV25
mnt-lower: RIPE-NCC-END-MNT
mnt-routes: MNT-IV25
mnt-routes: ITL-MNT
mnt-domains: MNT-IV25
changed: hostmaster@ripe.net 20080930
changed: hostmaster@ripe.net 20110622
changed: info@xserver.ua 20120427
source: RIPE

organisation: ORG-IV2-RIPE
org-name: PE Ivanov Vitaliy Sergeevich
org-type: OTHER
address: 42-A Tobolskaya street, office 230, Kharkov, Ukraine
e-mail: vitaliy@xserver.ua
mnt-ref: MNT-IV25
mnt-by: MNT-IV25
source: RIPE
changed: vitaliy@xserver.ua 20111130

person: Ivanov Vitaliy
address: 42-A Tobolskaya street, office 230, Kharkov, Ukraine
phone: +380 57 728 12 67
nic-hdl: IV25-RIPE
mnt-by: MNT-IV25
changed: vitaliy@xserver.ua 20111026
source: RIPE

% Information related to ‘91.207.60.0/23AS48031’

route: 91.207.60.0/23
descr: XSERVER
origin: AS48031
mnt-by: MNT-IV25
source: RIPE
changed: snoop@itl.ua 20120302

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS3)

DNS records

DNS query for 27.60.207.91.in-addr.arpa returned an error from the server: NameError
name class type data time to live
best-ed-solution.com IN MX
preference: 1
exchange: mail.best-ed-solution.com
1200s (00:20:00)
best-ed-solution.com IN TXT v=spf1 +ip4:85.95.236.138/32 -all 1200s (00:20:00)
best-ed-solution.com IN TXT spf2.0/pra +ip4:85.95.236.138/32 -all 1200s (00:20:00)
best-ed-solution.com IN SOA
server: ns1.silkarn.com
email: root@silkarn.com
serial: 2016003811
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
best-ed-solution.com IN NS ns2.silkarn.com 1200s (00:20:00)
best-ed-solution.com IN NS ns1.silkarn.com 1200s (00:20:00)
best-ed-solution.com IN A 91.207.60.27 1200s (00:20:00)

— end —

ns1.diorchid.com
ns2.alninak.com
ns2.every-good.com
ns2.permianick.com
ns2.silkarn.com
Safe-ed-Pills.com
Helpful-Online-Pharmacy.com
Airstorepills.com
rx-partners.biz
edeuro.com
best-ed-solution.com
EASY-TO-USE-PHARMACY.COM
freehostp.com
europeantablets.com
onlinehostlocation.com
fast-ed-solution.com
Mysecurebilling.com
pay-for-order.com
best-ed-solution.com
Helpful-online-pharmacy.com
Best-ed-store.com
airstorepills.com
Popular-pills-online.com
ever.online-ns.com
ns1.alninak.com
ns1.diorchid.com
ns1.onefirma.com
ns1.stimulcash.com
ns2.doublefirma.com
ns2.every-good.com
ns2.silkarn.com
ns2.st-dns.com
ns2.stimul-media.com
airstorepills.com
best-ed-solution.com
easy-to-use-pharmacy.com
edeuro.com
fast-ed-solution.com
french-pharmacy.com
helpful-online-pharmacy.com
himos-ed-selected.com
perfect-pharmacy.com
safe-ed-pills.com
spanish-pharmacy.com

Domain Name: EASY-TO-USE-PHARMACY.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM

adBF.steelmedic.ru

September 2, 2012September 2, 2012Leave a comment

Email Header Analysis

IP Address: 59.164.51.97 (59.164.51.97.man-dynamic.vsnl.net.in)
IP Address Country: India
IP Continent: Asia
IP Address City Location: Chennai
IP Address Region: Tamil Nadu
IP Address Latitude: 13.0833,
IP Address Longtitude: 80.2833
Organization: Tata Communications

Hello

.Cilais = 1.73$
.Levtira = 1.63$
.Vigara = 0.73$
.Femela Vigara = 1.41$
.Professional Pack = 3.32$
.Famyli Pakc = 2.24$

Your link – http://adBF.steelmedic.ru/

Address lookup
canonical name adbf.steelmedic.ru
aliases
addresses 84.22.127.36
Domain Whois record

Queried whois.ripn.net with “steelmedic.ru”…

domain: STEELMEDIC.RU
nserver: ns1.dnsstep.com.
nserver: ns2.rbkxhost.su.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: REGRU-REG-RIPN
admin-contact: http://www.reg.ru/whois/admin_contact
created: 2012.08.27
paid-till: 2013.08.27
free-date: 2013.09.27
source: TCI

Last updated on 2012.09.02 23:06:32 MSK

Network Whois record

Queried whois.ripe.net with “-B 84.22.127.36″…

% Information related to ‘84.22.127.32 – 84.22.127.39’

inetnum: 84.22.127.32 – 84.22.127.39
netname: A84-22-127-32
descr: A84-22-127-32
admin-c: UNSP1-RIPE
tech-c: UNSP1-RIPE
country: AQ
status: ASSIGNED PA
mnt-by: CUSTOMER-RESOURCES-MNT
mnt-lower: CUSTOMER-RESOURCES-MNT
mnt-routes: CUSTOMER-RESOURCES-MNT
changed: hostmaster@ripe.net 20120831
source: RIPE

role: Details Unspecified
nic-hdl: UNSP1-RIPE
address: Customer did not enter their own contact details yet
e-mail: noc@cb3rob.net
changed: hostmaster@ripe.net 20100922
admin-c: UNSP1-RIPE
tech-c: UNSP1-RIPE
mnt-by: CUSTOMER-RESOURCES-MNT
source: RIPE

% Information related to ‘84.22.96.0/19AS34109’

route: 84.22.96.0/19
descr: R84-22-96-0
origin: AS34109
mnt-by: MNT-CB3ROB
changed: hostmaster@cb3rob.net 20100330
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS4)

DNS records

DNS query for 36.127.22.84.in-addr.arpa failed: TimedOut
name class type data time to live
adbf.steelmedic.ru IN A 84.22.127.36 3600s (01:00:00)
steelmedic.ru IN A 84.22.127.36 3600s (01:00:00)
steelmedic.ru IN NS ns1.dnsstep.com 324743s (3.18:12:23)
steelmedic.ru IN NS ns2.rbkxhost.su 324743s (3.18:12:23)

— end —

The following A records are set to 84.22.127.36:

anyfeela.com
aokkmedic.com
aselmedic.com
asynmedic.com
canwhilegeta.com
centaercolddry.com
darimedic.com
dntemedic.com
dontatahinkexample.com
drasmedic.com
drtemedic.com
dslamedic.com
dxmamedic.com
ectrmedic.com
fanightoedo.com
findseempiece.com
goodpioycome.com
halfstaystand.com
havehotcenter.com
homemountainhere.com
houldyearwhilerin.com
knewvoicehe.com
likeredrun.com
mayhalfboth.com
medicalay.com
medicaley.com
medicaliy.com
medicallp.com
medicallr.com
medicalty.com
medicandr.com
medicantt.com
medicanty.com
medicardr.com
medicarit.com
medicatey.com
medicatos.com
medicatsr.com
mediccour.com
medicectb.com
medicedeb.com
medicediy.com
medicendr.com
medicengs.com
medicerfl.com
medicergs.com
medicestl.com
medicests.com
medicewog.com
medichary.com
medichert.com
medichiky.com
medichong.com
medichpol.com
medichypt.com
medicielg.com
medicielr.com
medicienr.com
medicintl.com
medicisty.com
medicitil.com
medicixiy.com
medickaty.com
medickclk.com
medickenr.com
medickery.com
medickifl.com
medickscy.com
medickstg.com
medickyug.com
mediclebp.com
mediclefy.com
medicleyr.com
medicogip.com
medicomeh.com
medicomep.com
medicomnr.com
medicomsr.com
mediconar.com
mediconat.com
mediconip.com
mediconir.com
medicorkr.com
medicorpp.com
medicortp.com
medicosir.com
medicotor.com
medicrogr.com
medicromt.com
medicspit.com
medictiot.com
medictivt.com
mediculut.com
medicycor.com
menstareetahere.com
muchsidenumeral.com
nowtaruecause.com
ofcarlook.com
ofheardmean.com
omawou.com
omleteartidemaine.com
onanyshape.com
onedrytahere.com
onetaurnpiefore.com
piirdpiotahhis.com
pillsappe.com
pillsasilo.com
pillsball.com
pillsbass.com
pillsbatt.com
pillsbuf.com
pillsc.com
pillscanc.com
pillscrus.com
pillsding.com
pillseieyo.com
pillsexhu.com
pillsf.com
pillsg.com
pillsgolf.com
pillshead.com
pillsjapa.com
pillskam.com
pillskaya.com
pillsleop.com
pillsnut.com
pillsoutp.com
pillsoxy.com
pillspuf.com
pillspuma.com
pillsq.com
pillsr.com
pillsreas.com
pillsrefu.com
pillsrevo.com
pillsrota.com
pillsshap.com
pillsslav.com
pillsslop.com
pillssou.com
pillsstur.com
pillssurf.com
pillsteet.com
pillstie.com
pillstoil.com
pillsvisi.com
pillsw.com
pillswall.com
piroughtataheypiesta.com
plantlargeleave.com
pulfishno.com
pulspecialnew.com
remempieractataree.com
ruletaoldsmal.com
shouldmonita.com
smalneverdraw.com
somewhilerain.com
sowaypiuta.com
specialactamake.com
stataesuchporta.com
tahemagainstaif.com
tahereareastaudy.com
taimehereidea.com
takegroundtahey.com
taolduspioy.com
thanmapcame.com
tillaneue.com
untailwhymorning.com
upearyarson.com
wantalayhouse.com
watachcompletaedecide.com
welrantahere.com
whelwelhow.com
workwelfolow.com
xanapills.com
xapills.com
xbpills.com
xdpills.com
xedipills.com
xesypills.com
xgpills.com
xnpills.com
xonepills.com
xtprpills.com
yetataeachnew.com
zvpills.com
zzsppills.com

Hijacked Site – Nova.Stanford University

September 2, 2012September 3, 20121 Comment

Compromised Site Being Use For Pharmacy Spamming

India pharmacies levitra, Buy cheap viagra no prescription …
Viagra online without prescription super active, India pharmacies levitra.
<http://nova.stanford.edu/vlf/data_requests/requests/SW/tom.php?zuz=20624&page=india-pharmacies-levitra&GMY=1346464801>

Hijacked Site – cs.northwestern.edu

September 2, 2012September 3, 20122 Comments

How much does viagra cost 100 mg, Buy cheap viagra no …
Viagra online overnight dosage, How much does viagra cost 100 mg. … .edu/
2012.php?cqk=31332&page=how-to-get-prescribed-for-viagra&HMN= 1346572801
…
<http://www.cs.northwestern.edu/2012.php?cqk=1940&page=how-much-does-viagra-cost-100-mg&HMN=1346572801>

buycialisonline24h.com

September 1, 2012September 1, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.

Address lookup
canonical name buycialisonline24h.com
aliases
addresses 74.52.238.243
Domain Whois record

Queried whois.internic.net with “dom buycialisonline24h.com

Domain Name: BUYCIALISONLINE24H.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.ZEOHOST.COM
Name Server: NS2.ZEOHOST.COM
Status: clientTransferProhibited
Updated Date: 30-aug-2012
Creation Date: 30-aug-2012
Expiration Date: 30-aug-2013

Last update of whois database: Sat, 01 Sep 2012 13:52:55 UTC
Queried whois.todaynic.com with “buycialisonline24h.com”…

Domain name: buycialisonline24h.com
Status: Active

Registrant:
Name: Myron S. Devita
Organization: Myron S. Devita
Address: 1640 Woodbridge Lane
City: Southfield
Province/state: MI
Country: US
Postal Code: 48034
Email: abuse@canadianpharmacyaccreditation.com

Administrative Contact:
Name: Myron S. Devita
Organization: Myron S. Devita
Address: 1640 Woodbridge Lane
City: Southfield
Province/state: MI
Country: US
Postal Code: 48034
Phone: +1.3135072195
Fax: +1.3135072195
Email: abuse@canadianpharmacyaccreditation.com

Technical Contact:
Name: Myron S. Devita
Organization: Myron S. Devita
Address: 1640 Woodbridge Lane
City: Southfield
Province/state: MI
Country: US
Postal Code: 48034

Nameserver Information:
ns1.zeohost.com
ns2.zeohost.com

Create: 2012-08-31 03:32:03
Update: 2012-08-31
Expired: 2013-08-31
QueryTimes: 5

Network Whois record
Queried rwhois.theplanet.com with “74.52.238.243”…

rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-14
network:Auth-Area:74.52.0.0/14
network:Network-Name:TPIS-BLK-74-52-238-0
network:IP-Network:74.52.238.240/28
network:IP-Network-Block:74.52.238.240 – 74.52.238.255
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20061223
network:Updated:20061223

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 74.52.238.243″…

NetRange: 74.52.0.0 – 74.55.255.255
CIDR: 74.52.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-14
NetHandle: NET-74-52-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-02-17
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-74-52-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-822-4204
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-822-4204
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

DNS records
name class type data time to live
buycialisonline24h.com IN TXT v=spf1 a mx include:websitewelcome.com ~all 14400s (04:00:00)
buycialisonline24h.com IN MX
preference: 0
exchange: buycialisonline24h.com
14400s (04:00:00)
buycialisonline24h.com IN SOA
server: ns1.zeohost.com
email: root@chevette.websitewelcome.com
serial: 2012083001
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
buycialisonline24h.com IN NS ns2.zeohost.com 86400s (1.00:00:00)
buycialisonline24h.com IN NS ns1.zeohost.com 86400s (1.00:00:00)
buycialisonline24h.com IN A 74.52.238.243 14400s (04:00:00)
243.238.52.74.in-addr.arpa IN PTR f3.ee.344a.static.theplanet.com 86400s (1.00:00:00)
238.52.74.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2011083100
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
238.52.74.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)
238.52.74.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)

— end —

eassyshop.com

August 14, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name eassyshop.com
aliases
addresses 174.36.199.45
Domain Whois record

Queried whois.internic.net with “dom eassyshop.com”…

Domain Name: EASSYSHOP.COM
Registrar: INDIALINKS WEB HOSTING PVT.LTD.
Whois Server: whois.domainsrs.com
Referral URL: http://www.indialinks.com
Name Server: FERRARI1.HOSTRIGHTNOW.COM
Name Server: FERRARI2.HOSTRIGHTNOW.COM
Status: ok
Updated Date: 08-aug-2012
Creation Date: 26-feb-2012
Expiration Date: 26-feb-2013

Last update of whois database: Tue, 14 Aug 2012 17:42:20 UTC
Queried whois.domainsrs.com with “eassyshop.com

Registrant:
eassyshop com
villege-gosai purwa
post-dehras
purauspur, gonda 271314
IN

Domain name: EASSYSHOP.COM

Administrative Contact:
ramsajan, yadav ramsajanyadav123@gmail.com
villege-gosai purwa
post-dehras
purauspur, gonda 271314
IN
+91.9161619267
Technical Contact:
ramsajan, yadav ramsajanyadav123@gmail.com
villege-gosai purwa
post-dehras
purauspur, gonda 271314
IN
+91.9161619267

Registrar of Record: DomainSRS
Record last updated on 08-Aug-2012.
Record expires on 26-Feb-2013.
Record created on 26-Feb-2012.

Registrar Domain Name Help Center:
FooterFile /osrs/conf/opensrs-etc/whois_footers/indialinks

Domain servers in listed order:
FERRARI1.HOSTRIGHTNOW.COM
FERRARI2.HOSTRIGHTNOW.COM

Domain status: ok

Network Whois record

Queried rwhois.softlayer.com with “174.36.199.45”…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.174.36.192.0/18
network:Auth-Area:174.36.192.0/18
network:Network-Name:SOFTLAYER-174.36.192.0
network:IP-Network:174.36.199.44/30
network:IP-Network-Block:174.36.199.44-174.36.199.47
network:Organization;I:Hostrightnow Technologies In Pvt Ltd
network:Street-Address:2nd Floor A279 244 Fifth Avenue
network:City:New York
network:State:NY
network:Postal-Code:11001
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@hrn9.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:20081120
network:Updated:20100414
network:Updated-By:ipadmin@softlayer.com

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Queried whois.arin.net with “n 174.36.199.45″…

NetRange: 174.36.0.0 – 174.37.255.255
CIDR: 174.36.0.0/15
OriginAS: AS36351
NetName: SOFTLAYER-4-7
NetHandle: NET-174-36-0-0-1
Parent: NET-174-0-0-0-0
NetType: Direct Allocation
Comment: Our motto: Innovate or Die.
RegDate: 2008-09-12
Updated: 2012-03-09
Ref: http://whois.arin.net/rest/net/NET-174-36-0-0-1

OrgName: SoftLayer Technologies Inc.
OrgId: SOFTL
Address: 4849 Alpha Rd.
City: Dallas
StateProv: TX
PostalCode: 75244
Country: US
RegDate: 2005-10-26
Updated: 2012-01-27
Ref: http://whois.arin.net/rest/org/SOFTL

ReferralServer: rwhois://rwhois.softlayer.com:4321

OrgTechHandle: IPADM258-ARIN
OrgTechName: IP Admin
OrgTechPhone: +1-214-442-0601
OrgTechEmail: ipadmin@softlayer.com
OrgTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-442-0605
OrgAbuseEmail: abuse@softlayer.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

RTechHandle: IPADM258-ARIN
RTechName: IP Admin
RTechPhone: +1-214-442-0601
RTechEmail: ipadmin@softlayer.com
RTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

RAbuseHandle: ABUSE1025-ARIN
RAbuseName: Abuse
RAbusePhone: +1-214-442-0605
RAbuseEmail: abuse@softlayer.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

RNOCHandle: IPADM258-ARIN
RNOCName: IP Admin
RNOCPhone: +1-214-442-0601
RNOCEmail: ipadmin@softlayer.com
RNOCRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

DNS records
name class type data time to live
eassyshop.com IN MX
preference: 0
exchange: eassyshop.com
14400s (04:00:00)
eassyshop.com IN SOA
server: ferrari2.hostrightnow.com
email: rajk07687@gmail.com
serial: 2012080802
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
eassyshop.com IN NS ferrari2.hostrightnow.com 86400s (1.00:00:00)
eassyshop.com IN NS ferrari1.hostrightnow.com 86400s (1.00:00:00)
eassyshop.com IN A 174.36.199.45 14400s (04:00:00)
45.199.36.174.in-addr.arpa IN PTR 174.36.199.45-static.reverse.softlayer.com 3600s (01:00:00)
199.36.174.in-addr.arpa IN SOA
server: ns1.arpa.global-datacenter.com
email: root@softlayer.com
serial: 2012073000
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
199.36.174.in-addr.arpa IN NS ns1.arpa.global-datacenter.com 3600s (01:00:00)
199.36.174.in-addr.arpa IN NS ns2.arpa.global-datacenter.com 3600s (01:00:00)

— end —

WhoIs www.us-pills.net

August 11, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name http://www.us-pills.net.
aliases
addresses 89.144.57.56
Domain Whois record

Queried whois.internic.net with “dom us-pills.net”…

Domain Name: US-PILLS.NET
Registrar: NETWORKING4ALL B.V.
Whois Server: whois.networking4all.com
Referral URL: http://www.networking4all.com
Name Server: NS1.DOUBLEFIRMA.COM
Name Server: NS2.DOUBLEFIRMA.COM
Status: ok
Updated Date: 19-sep-2011
Creation Date: 19-sep-2011
Expiration Date: 19-sep-2012

>>> Last update of whois database: Sun, 12 Aug 2012 04:47:28 UTC <<<

Queried whois.networking4all.com with "us-pills.net"…

Registration service provided by:

Networking4all B.V.

info@networking4all.com

Domain name: us-pills.net

Registrant:

Handle…………..: KBO-993890
Name…………….: Kirill Bobrov
Street…………..: Dushinskaya 6
Postalcode……….: 111024
City…………….: Moscow
Province…………: Moscow
Country………….: RU
E-mail…………..: bobrovki@gmail.com
Phone……………: ++7.9850248019

Administrative contact:

Handle…………..: KBF-856963
Name…………….: Kirill Bobrov
Street…………..: Dushinskaya 6
Postalcode……….: 111024
City…………….: Moscow
Province…………: Moscow
Country………….: RU
E-mail…………..: bobrovki@gmail.com
Phone……………: ++7.9850248019

Technical contact:

Domain nameservers:

NS1.DOUBLEFIRMA.COM
NS2.DOUBLEFIRMA.COM

Status…………..: 0010(clientTransferProhibited)
Updated date……..: ma 19 sep 2011
Created date……..: ma 19 sep 2011
Expiration date…..: wo 19 sep 2012

Notice and terms of use:

Network Whois record
Queried whois.ripe.net with "-B 89.144.57.56
Information related to '89.144.0.0 – 89.144.63.255'

inetnum: 89.144.0.0 – 89.144.63.255
netname: DE-ISP4P-20060126
org: ORG-IIS11-RIPE
descr: ISP4P IT Services
country: DE
admin-c: OD250-RIPE
tech-c: OD250-RIPE
status: ALLOCATED PA
notify: hostmaster@isp4p.net
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ISP4P-MNT
mnt-routes: ISP4P-MNT
mnt-routes: IWERK-MNT

organisation: ORG-IIS11-RIPE
org-name: ISP4P IT Services
org-type: LIR
address: ISP4P IT Services
address: Oliver Dzombic
address: BORNWIESENWEG 12
address: 63599 BIEBERGEMUEND
address: GERMANY
phone: +4917622523306
fax-no: +496050912539
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ISP4P-MNT
mnt-by: RIPE-NCC-HM-MNT

person: Oliver Dzombic
address: ISP4P IT Services
Bornwiesenweg 12
63599 Biebergemuend
DE
phone: +49-176-22523306
fax-no: +49-6050-912539
e-mail: hostmaster@isp4p.com
nic-hdl: OD250-RIPE
mnt-by: ISP4P-MNT
changed: hostmaster@isp4p.net 20041209
source: RIPE

% Information related to '89.144.0.0/18AS197071'

route: 89.144.0.0/18
descr: IP Routing via interwerk.de
origin: AS197071
mnt-by: IWERK-MNT
mnt-by: ISP4P-MNT
changed: medler@optimate-server.de 20110927
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS2)

DNS records
name class type data time to live
http://www.us-pills.net IN A 89.144.57.56 300s (00:05:00)
us-pills.net IN SOA
server: ns1.doublefirma.com
email: root@doublefirma.com
serial: 2015700232
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
300s (00:05:00)
us-pills.net IN NS ns2.doublefirma.com 300s (00:05:00)
us-pills.net IN NS ns1.doublefirma.com 300s (00:05:00)
us-pills.net IN A 89.144.57.56 300s (00:05:00)
56.57.144.89.in-addr.arpa IN PTR s3.vinderpost.dk 3600s (01:00:00)
57.144.89.in-addr.arpa IN NS ns4.isp4p.net 3600s (01:00:00)
57.144.89.in-addr.arpa IN NS ns3.isp4p.net 3600s (01:00:00)
57.144.89.in-addr.arpa IN SOA
server: ns3.isp4p.net
email: hostmaster@isp4p.net
serial: 2005110900
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
172800s (2.00:00:00)

— end —

Displaying items 1 to 100, out of a total of 279

WhoIs dutypharmacy.com

August 7, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name dutypharmacy.com.
aliases
addresses 64.15.75.80
Domain Whois record

Queried whois.internic.net with “dom dutypharmacy.com”…

Domain Name: DUTYPHARMACY.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DUTYPHARMACY.COM
Name Server: NS2.DUTYPHARMACY.COM
Status: clientTransferProhibited
Updated Date: 01-jul-2011
Creation Date: 16-may-2008
Expiration Date: 16-may-2013

Last update of whois database: Tue, 07 Aug 2012 16:40:52 UTC
Queried whois.joker.com with “dutypharmacy.com

domain: http://www.dutypharmacy.com
owner: – –
organization: Anatolii Larionov
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +49.11111111
admin-c: CCOM-1543215 mydomains@list.ru
tech-c: CCOM-1543218 mydomains@list.ru
billing-c: CCOM-1543218 mydomains@list.ru
nserver: ns1.dutypharmacy.com 64.15.75.80
nserver: ns2.dutypharmacy.com 64.15.75.80
status: lock
created: 2008-05-16 10:07:12 UTC
modified: 2011-07-01 09:44:06 UTC
expires: 2013-05-16 10:07:12 UTC
query-source: 209.200.73.210

contact-hdl: CCOM-1543215
person: – –
organization: Larionov, Anatolii
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +895.945535

contact-hdl: CCOM-1543218
person: – –
organization: Larionov, Anatolii
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +895.945535

source: joker.com live whois service
query-time: 0.00795
db-updated: 2012-08-07 16:41:13
NOTE: By submitting a WHOIS query, you agree to abide by the

Network Whois record
Queried rwhois.netelligent.ca with “64.15.75.80”…

rwhois V-1.5:003eff:00 rwhois.netelligent.ca (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETEL-64.15.75.64-127
network:Auth-Area:64.15.75.0/26
network:Network-Name:NETELLIGENT-64.15.75.64-127
network:IP-Network:64.15.75.64/26
network:IP-Network-Block:64.15.75.64-127
network:Org-Name;I:Inferno Solutions
network:City:Minsk
network:Postal-Code:220000
network:Country-Code:BY
network:Tech-Contact;I:support@netelligent.ca
network:Admin-Contact;I:admin@netelligent.ca
network:Updated-By:admin@netelligent.ca

referral rwhois://root.rwhois.net:4321/auth-area=.
ok
Queried whois.arin.net with “n 64.15.75.80

NetRange: 64.15.64.0 – 64.15.79.255
CIDR: 64.15.64.0/20
OriginAS: AS10929
NetName: NETEL-ARIN-BLK01
NetHandle: NET-64-15-64-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
RegDate: 2005-11-18
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-15-64-0-1

OrgName: Netelligent Hosting Services Inc.
OrgId: NHS-31
Address: 1396 Franklin Drive
City: Laval
StateProv: QC
PostalCode: H7W-1K6
Country: CA
RegDate: 2005-03-09
Updated: 2012-03-01
Ref: http://whois.arin.net/rest/org/NHS-31

ReferralServer: rwhois://rwhois.netelligent.ca:4321

OrgAbuseHandle: NETEL2-ARIN
OrgAbuseName: Netelligent Abuse
OrgAbusePhone: +1-514-369-2209
OrgAbuseEmail: abuse@netelligent.ca
OrgAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

OrgTechHandle: NETEL1-ARIN
OrgTechName: Netelligent Ops
OrgTechPhone: +1-514-369-2209
OrgTechEmail: ops@netelligent.ca
OrgTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RNOCHandle: NETEL-ARIN
RNOCName: Netelligent Admin
RNOCPhone: +1-514-369-2209
RNOCEmail: admin@netelligent.ca
RNOCRef: http://whois.arin.net/rest/poc/NETEL-ARIN

RTechHandle: NETEL1-ARIN
RTechName: Netelligent Ops
RTechPhone: +1-514-369-2209
RTechEmail: ops@netelligent.ca
RTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RAbuseHandle: NETEL2-ARIN
RAbuseName: Netelligent Abuse
RAbusePhone: +1-514-369-2209
RAbuseEmail: abuse@netelligent.ca
RAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

DNS records
name class type data time to live
dutypharmacy.com IN TXT v=spf1 ip4:178.170.250.20 ip4:64.15.75.80 a mx ~all 3600s (01:00:00)
dutypharmacy.com IN SOA
server: ns1.dutypharmacy.com
email: root@dutypharmacy.com
serial: 2011062026
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
dutypharmacy.com IN NS ns1.dutypharmacy.com 3600s (01:00:00)
dutypharmacy.com IN NS ns2.dutypharmacy.com 3600s (01:00:00)
dutypharmacy.com IN MX
preference: 10
exchange: mail.dutypharmacy.com
3600s (01:00:00)
dutypharmacy.com IN MX
preference: 20
exchange: mail.dutypharmacy.com
3600s (01:00:00)
dutypharmacy.com IN A 64.15.75.80 3600s (01:00:00)
80.75.15.64.in-addr.arpa IN PTR dutypharmacy.com 3600s (01:00:00)
75.15.64.in-addr.arpa IN SOA
server: dns02.netel.ca
email: hostmaster@netelligent.ca
serial: 2012012500
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
14400s (04:00:00)
75.15.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-08-17 12:02:03Z
signature inception: 2012-08-07 12:02:03Z
key tag: 5015
signer’s name: 64.in-addr.arpa
signature:
(1024 bits)

10800s (03:00:00)
75.15.64.in-addr.arpa IN NSEC
next domain name: 76.15.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
75.15.64.in-addr.arpa IN NS dns12.netelligent.ca 86400s (1.00:00:00)
75.15.64.in-addr.arpa IN NS dns11.netelligent.ca 86400s (1.00:00:00)

— end —

worldbestonlinepharmacy.com

August 3, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name worldbestonlinepharmacy.com.
aliases
addresses 89.248.172.129
Domain Whois record

Queried whois.internic.net with “dom worldbestonlinepharmacy.com”…

Domain Name: WORLDBESTONLINEPHARMACY.COM
Registrar: WEB WERKS INDIA PVT. LTD.
Whois Server: whois.dfordomains.com
Referral URL: http://www.dfordomains.com
Name Server: NS1.ONEFIRMA.COM
Name Server: NS2.ONEFIRMA.COM
Status: ok
Updated Date: 06-mar-2012
Creation Date: 07-mar-2011
Expiration Date: 07-mar-2013

>>> Last update of whois database: Fri, 03 Aug 2012 18:13:54 UTC <<<

Queried whois.dfordomains.com with "worldbestonlinepharmacy.com"…

Query error: TimedOut
Network Whois record

Queried whois.ripe.net with "-B 89.248.172.129"…

% Information related to '89.248.172.62 – 89.248.172.255'

inetnum: 89.248.172.62 – 89.248.172.255
netname: NL-ECATEL
descr: AS29073, Ecatel LTD
country: NL
admin-c: EL25-RIPE
tech-c: EL25-RIPE
status: ASSIGNED PA
mnt-by: ECATEL-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
changed: noc@ecatel.net 20080621
source: RIPE

role: Ecatel LTD
address: P.O.Box 19533
address: 2521 CA The Hague
address: Netherlands
abuse-mailbox: abuse@ecatel.net
remarks: —————————————————-
remarks: ECATEL LTD
remarks: Dedicated and Co-location hosting services
remarks: —————————————————-
remarks: for abuse complaints : abuse@ecatel.net
remarks: for any other questions : info@ecatel.net
remarks: —————————————————-
e-mail: noc@ecatel.net
admin-c: EL25-RIPE
tech-c: EL25-RIPE
nic-hdl: EL25-RIPE
mnt-by: ECATEL-MNT
changed: noc@ecatel.net 20090813
source: RIPE

% Information related to '89.248.172.0/23AS29073'

route: 89.248.172.0/23
descr: AS29073, Route object
origin: AS29073
mnt-by: ECATEL-MNT
changed: noc@ecatel.net 20071119
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS4)

DNS records

DNS query for 129.172.248.89.in-addr.arpa returned an error from the server: NameError
name class type data time to live
worldbestonlinepharmacy.com IN SOA
server: ns1.onefirma.com
email: root@onefirma.com
serial: 2015624975
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
300s (00:05:00)
worldbestonlinepharmacy.com IN NS ns1.onefirma.com 300s (00:05:00)
worldbestonlinepharmacy.com IN NS ns2.onefirma.com 300s (00:05:00)
worldbestonlinepharmacy.com IN A 89.248.172.129 300s (00:05:00)

— end —

Sites on IP 89.248.172.129

Displaying items 1 to 32, out of a total of 32

http://best-online-cialis-store.com/
http://best-online-ed-store.com/
http://best-online-levitra-store.com/
http://buygenericsfromindia.com/
http://contactsupportteam.com/
http://fasttoslim.com/
http://generics-from-india.com/
http://instant-online-refills.com/
http://natural-excel.com/
http://perfect-edstore.com/
http://popularedproducts.com/
http://top-viagra-store-online.com/
http://worldbestonlinepharmacy.com/
http://worlds-bestpharmacy.com/
http://www.best-online-cialis-store.com/
http://www.best-online-ed-store.com/
http://www.best-online-levitra-store.com/
http://www.buygenericsfromindia.com/
http://www.contactsupportteam.com/
http://www.fasttoslim.com/
http://www.generics-from-india.com/
http://www.herbal-yagara.com/
http://www.natural-excel.com/
http://www.perfect-edstore.com/
http://www.popularedproducts.com/
http://www.top-viagra-store-online.com/
http://www.worldbestonlinepharmacy.com/
http://www.worlds-bestpharmacy.com/
http://www.yagara-stock.com/
http://www.your-best-pills-online.com/
http://yagara-stock.com/
http://your-best-pills-online.com/

online-generic24.com

August 3, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name online-generic24.com
aliases
addresses 77.79.10.52
89.144.12.224
Domain Whois record

Queried whois.internic.net with “dom online-generic24.com

Domain Name: ONLINE-GENERIC24.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.NS4FREEHOST.COM
Name Server: NS2.NS4FREEHOST.COM
Name Server: NS3.SECNSSERVER.COM
Name Server: NS4.SECNSSERVER.COM
Status: clientTransferProhibited
Updated Date: 02-jul-2012
Creation Date: 02-jul-2012
Expiration Date: 02-jul-2013

Last update of whois database: Fri, 03 Aug 2012 17:05:11 UTC
Queried whois.todaynic.com with “online-generic24.com

Domain name: online-generic24.com
Status: Active

Registrant:
Name: Reg
Organization: Org
Address: City1
City: City
Province/state: STATE
Country: AF
Postal Code: 234515
Email: sam32b653@googlemail.com

Administrative Contact:
Name: Reg
Organization: Org
Address: City1
City: City
Province/state: STATE
Country: AF
Postal Code: 234515
Phone: +86.7562282583
Fax: +86.7562282583
Email: sam32b653@googlemail.com

Technical Contact:
Name: Reg
Organization: Org
Address: City1
City: City
Province/state: STATE
Country: AF
Postal Code: 234515

Nameserver Information:
ns1.ns4freehost.com
ns2.ns4freehost.com
ns3.secnsserver.com
ns4.secnsserver.com

Create: 2012-07-03 01:59:55
Update: 2012-07-03
Expired: 2013-07-03
QueryTimes: 27

Network Whois record
Queried whois.ripe.net with “-B 77.79.10.52″…
Information related to ‘77.79.10.0 – 77.79.11.255’

inetnum: 77.79.10.0 – 77.79.11.255
netname: LT-ALEJA
org: ORG-UIA2-RIPE
descr: Webhosting, collocation services
country: LT
admin-c: RL3425-RIPE
tech-c: MS16708-RIPE
status: ASSIGNED PA
mnt-by: SPLIUS-MNT
changed: linasl@splius.lt 20100804
source: RIPE

organisation: ORG-UIA2-RIPE
org-name: UAB Duomenu Centras
org-type: OTHER
address: Tilzes 74
address: LT-78140 Siauliai
address: Lithuania
e-mail: abuse@aleja.lt
mnt-ref: SPLIUS-MNT
mnt-by: SPLIUS-MNT
changed: hostmaster@splius.lt 20070816
changed: hostmaster@splius.lt 20070906
changed: hostmaster@splius.lt 20090618
source: RIPE

person: Martynas Simkevicius
address: Tilzes 74-320
address: LT-76247 Siauliai
address: Lithuania
phone: +37041503503
nic-hdl: MS16708-RIPE
e-mail: abuse@aleja.lt
mnt-by: SPLIUS-MNT
changed: hostmaster@splius.lt 20070814
changed: hostmaster@splius.lt 20080204
changed: hostmaster@splius.lt 20100907
source: RIPE

person: Remigijus Laurutis
address: Tilzes 74-320
address: LT-76247 Siauliai
address: Lithuania
phone: +37041503500
nic-hdl: RL3425-RIPE
e-mail: abuse@aleja.lt
mnt-by: SPLIUS-MNT
changed: hostmaster@splius.lt 20070814
changed: hostmaster@splius.lt 20080204
changed: hostmaster@splius.lt 20100907
source: RIPE

Information related to ‘77.79.8.0/22AS16125’

route: 77.79.8.0/22
descr: DC-LT
origin: AS16125
mnt-by: SPLIUS-MNT
changed: hostmaster@splius.lt 20110329
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS4)

DNS records
name class type data time to live
online-generic24.com IN NS ns1.ns4freehost.com 150s (00:02:30)
online-generic24.com IN SOA
server: master.online-generic24.com
email: 2012080313
serial: 0
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
150s (00:02:30)
online-generic24.com IN NS ns3.secnsserver.com 150s (00:02:30)
online-generic24.com IN A 77.79.10.52 150s (00:02:30)
online-generic24.com IN NS ns4.secnsserver.com 150s (00:02:30)
online-generic24.com IN MX
preference: 0
exchange: online-generic24.com
150s (00:02:30)
online-generic24.com IN NS ns2.ns4freehost.com 150s (00:02:30)
online-generic24.com IN A 89.144.12.224 150s (00:02:30)
online-generic24.com IN NS ns3.ns4freehost.com 150s (00:02:30)
52.10.79.77.in-addr.arpa IN PTR hst-10-52.duomenucentras.lt 3600s (01:00:00)
10.79.77.in-addr.arpa IN SOA
server: ns1.duomenucentras.lt
email: root@dns.aleja.lt
serial: 2009040513
refresh: 3600
retry: 600
expire: 86400
minimum ttl: 3600
3600s (01:00:00)
10.79.77.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-09-02 10:51:38Z
signature inception: 2012-08-03 09:51:38Z
key tag: 25627
signer’s name: 77.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
10.79.77.in-addr.arpa IN NSEC
next domain name: 100.79.77.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
10.79.77.in-addr.arpa IN NS ns2.duomenucentras.lt 3600s (01:00:00)
10.79.77.in-addr.arpa IN NS ns1.duomenucentras.lt 3600s (01:00:00)

— end —

The following A records are set to 89.144.12.224:

orderbrand.com
prime-meds.com
safedrugstock.com

The following A records are set to 77.79.10.52:

bepharmacy.com
bestmedicareonline.com
euromedhub.com
genericpills-store.com
med-s-store.com
online-generic24.com
ottawa-healthcare.com
pharmaonlineshop.com
pill24.org
purchasetablets.net
selpha.com

WhoIs mymedsdiet.com a/k/a Canadian Health & Care Mall

July 29, 2012July 29, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name mymedsdiet.com
aliases
addresses 176.67.172.232
Domain Whois record

Queried whois.internic.net with “dom mymedsdiet.com

Domain Name: MYMEDSDIET.COM
Registrar: PSI-USA, INC. DBA DOMAIN ROBOT
Whois Server: whois.psi-usa.info
Referral URL: http://www.psi-usa.info
Name Server: NS1.MYMEDSDIET.COM
Name Server: NS2.MYMEDSDIET.COM
Status: clientTransferProhibited
Updated Date: 28-jul-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

Last update of whois database: Sun, 29 Jul 2012 18:52:12 UTC
Queried whois.psi-usa.info with “mymedsdiet.com”…

=============
PSI-USA, Inc.
=============
This is the PSI-USA, Inc. WHOIS server.
All requests are logged.

Requesting IP: 63.134.201.88
Requesting URL: http://whois.psi-usa.info
Requesting Object: domain mymedsdiet.com
Timestamp: 2012-07-29 20:52:45

domain: mymedsdiet.com
status: LOCK,TRANSFER-LOCK-60
owner-c: LULU-11609453
admin-c: LULU-11609453
tech-c: LULU-11609453
zone-c: LULU-11609453
nserver: ns1.mymedsdiet.com
nserver: ns2.mymedsdiet.com
created: 2012-07-09 21:36:29
expire: 2013-07-09 21:36:29 (registry time)
changed: 2012-07-28 22:05:16

[owner-c] handle: 11609453
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Elias
[owner-c] lname: Haapasalo
[owner-c] org:
[owner-c] address: Ulimarinpolku 61
[owner-c] city: Porsanmaki
[owner-c] pcode: 74550
[owner-c] country: FI
[owner-c] state: Porsanmaki
[owner-c] phone: +358-04188-02728
[owner-c] fax: +358-04188-02728
[owner-c] email: badajsky@evermail.org
[owner-c] protection: B
[owner-c] updated: 2012-07-09 21:36:19

[admin-c] handle: 11609453
[admin-c] type: PERSON
[admin-c] title:
[admin-c] fname: Elias
[admin-c] lname: Haapasalo
[admin-c] org:
[admin-c] address: Ulimarinpolku 61
[admin-c] city: Porsanmaki
[admin-c] pcode: 74550
[admin-c] country: FI
[admin-c] state: Porsanmaki
[admin-c] phone: +358-04188-02728
[admin-c] fax: +358-04188-02728
[admin-c] email: badajsky@evermail.org
[admin-c] protection: B
[admin-c] updated: 2012-07-09 21:36:19

[tech-c] handle: 11609453
[tech-c] type: PERSON
[tech-c] title:
[tech-c] fname: Elias
[tech-c] lname: Haapasalo
[tech-c] org:
[tech-c] address: Ulimarinpolku 61
[tech-c] city: Porsanmaki
[tech-c] pcode: 74550
[tech-c] country: FI
[tech-c] state: Porsanmaki
[tech-c] phone: +358-04188-02728
[tech-c] fax: +358-04188-02728
[tech-c] email: badajsky@evermail.org
[tech-c] protection: B
[tech-c] updated: 2012-07-09 21:36:19

[zone-c] handle: 11609453
[zone-c] type: PERSON
[zone-c] title:
[zone-c] fname: Elias
[zone-c] lname: Haapasalo
[zone-c] org:
[zone-c] address: Ulimarinpolku 61
[zone-c] city: Porsanmaki
[zone-c] pcode: 74550
[zone-c] country: FI
[zone-c] state: Porsanmaki
[zone-c] phone: +358-04188-02728
[zone-c] fax: +358-04188-02728
[zone-c] email: badajsky@evermail.org
[zone-c] protection: B
[zone-c] updated: 2012-07-09 21:36:19

Network Whois record
Queried whois.ripe.net with “-B 176.67.172.232
Information related to ‘176.67.172.0 – 176.67.172.255’

inetnum: 176.67.172.0 – 176.67.172.255
netname: UK2-INFRA-VPS-DOT-NET-FRANCE
descr: UK2 Infrastructure
country: GB
admin-c: BB963-RIPE
tech-c: BB963-RIPE
status: ASSIGNED PA
remarks: Abuse matters to: abuse@vps.net
remarks: Abuse mail to any other address may be ignored
mnt-by: AS13213-MNT
notify: hostmaster@uk2.net
changed: paul.death@uk2.net 20120416
source: RIPE

person: Bo Bendtsen
address: UK2.NET
address: One Canada Square, Canary Wharf
address: London
address: UK
phone: +44 20 7987 1200
fax-no: +44 20 7987 0449
e-mail: ripe@uk2.net
nic-hdl: BB963-RIPE
mnt-by: AS13213-MNT
changed: this@is.not.an.email.address 19991029
changed: this@is.not.an.email.address 20000510
changed: this@is.not.an.email.address 20000529
source: RIPE

Information related to ‘176.67.160.0/20AS13213
route: 176.67.160.0/20
descr: UK2.NET announcement
origin: AS13213
mnt-by: AS13213-MNT
changed: ripe@netsumo.com 20110614
source: RIPE

This query was served by the RIPE Database Query Service version 1.19 (WHOIS3)
DNS records
DNS query for 232.172.67.176.in-addr.arpa returned an error from the server: NameError
name class type data time to live
mymedsdiet.com IN SOA
server: ns1.mymedsdiet.com
email: admin@mymedsdiet.com
serial: 2009000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
mymedsdiet.com IN NS ns1.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN NS ns2.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN MX
preference: 10
exchange: mail.mymedsdiet.com
600s (00:10:00)
mymedsdiet.com IN A 176.67.172.232 600s (00:10:00)

— end —

The following A records are set to 176.67.172.232:

acequrke.com
aircanadatablet.com
canadamedsgroup.com
caretabletgroup.com
childcaremeds.com
contabdrugstore.com
dietpillsale.com
drugstoreherbal.net
drugstorepillsgroup.com
dyecajor.com
familymedicineprescription.com
getusedsoft.com
healthcarejobstablet.net
healthcarerxhealth.com
healthrxhealthcare.com
hospitalcaretab.com
hospitalpills.com
levitrameds.com
medicalphpatients.com
medicaresrx.net
medsdietobesity.com
mymedsdiet.com
mymedtablet.com
mypharmacymed.com
mypharmacymedical.com

EDSelection.com Viagra Superstore

July 28, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup

canonical name	www.edselection.com.
aliases
addresses	91.199.112.8

Domain Whois record

Queried whois.internic.net with “dom edselection.com“…

Domain Name: EDSELECTION.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 11-jul-2009
Creation Date: 29-nov-2005
Expiration Date: 29-nov-2009

>>> Last update of whois database: Sat, 25 Jul 2009 16:02:18 UTC

Queried whois.directnic.com with “edselection.com“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: EDSELECTION.COM

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:08:28 AM
Record expires on 11-29-2009
Record created on 11-29-2005

Domain servers in listed order:
NS0.PARTNERS-DNS.COM 83.149.85.32
NS1.PARTNERS-DNS.COM 91.199.112.8

The compilation, repackaging, dissemination, or other use of this WHOIS
data is expressly prohibited without the prior written consent of
directNIC.com.

directNIC.com reserves the right to terminate your access to its WHOIS
database in its sole discretion, including without limitation, for
excessive querying of the database or for failure to otherwise abide by
this policy.

directNIC reserves the right to modify these terms at any time.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

http://www.edselection.com

91.199.112.8

1200s

(00:20:00)

edselection.com

SOA

server:	ns1.partners-dns.com
email:	root.partners-dns.com
serial:	2006665128
refresh:	3600
retry:	900
expire:	604800
minimum ttl:	1200

1200s

(00:20:00)

edselection.com

ns0.partners-dns.com

1200s

(00:20:00)

edselection.com

vip2.partners-dns.com

1200s

(00:20:00)

edselection.com

vip1.partners-dns.com

1200s

(00:20:00)

edselection.com

vip3.partners-dns.com

1200s

(00:20:00)

edselection.com

ns1.partners-dns.com

1200s

(00:20:00)

edselection.com

91.199.112.8

1200s

(00:20:00)

Traceroute

Tracing route to http://www.edselection.com [91.199.112.8]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.1

po101.dsr01.dllstx5.theplanet.com

70.85.127.105

po51.dsr01.dllstx3.theplanet.com

70.87.253.5

et5-1.ibr03.dllstx3.theplanet.com

157.238.225.5

xe-2-4.r01.dllstx09.us.bb.gin.ntt.net

144.232.24.69

144.232.19.177

sl-crs1-fw-0-6-3-0.sprintlink.net

144.232.19.101

sl-crs1-dc-0-8-5-0.sprintlink.net

118

144.232.19.147

sl-bb20-par-1-0-0.sprintlink.net

128

213.206.129.66

sl-bb21-fra-13-0-0.sprintlink.net

128

217.147.96.42

sl-gw10-fra-15-0-0.sprintlink.net

169

150

173

217.147.109.22

179

165

194.186.157.137

cat07.moscow.gldn.net

165

195.239.10.202

te1-1.maxwell.msk.wahome.ru

166

77.91.225.76

vl-500.ampere.msk.wahome.ru

166

92.241.162.66

Trace aborted

Service scan

FTP – 21 Error: TimedOut

SMTP – 25 Error: TimedOut

HTTP – 80 HTTP/1.1 200 OK Date: Sat, 25 Jul 2009 15:07:40 GMT Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e X-Powered-By: PHP/5.2.9 Set-Cookie: PHPSESSID=ee6439032ebf71a1fe77d430143ad656; expires=Mon, 24-Aug-2009 15:07:40 GMT; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html;charset=iso-8859-1

POP3 – 110 Error: TimedOut

IMAP – 143 Error: TimedOut

— end —

Domains sharing name servers:

ed-solution.com
ed-sup.com
edcollection.com
edcustomer.com
edselection.com
luxpharmacy.com
manfriendly.com
partners-dns.com
perfectgenerics.com
prescriptionspoint.com
propeciahair.com
rx-partners.biz
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
yoursecurebilling.com
raypharma.com
64.128.93.5
buyviagra-online.com
buyvigrxpills.com
edhealthshop.com
extenzedeal.com
extenzediscount.com
myrxmart.com
norxsexpills.com
ordercheapviagra.com
proactol4u.com
rxnetshop.com
samsexpills.com
viagra0.com
viagraorviagra.com
http://www.cheap-edpills.com
xmedicines.com
youredstore.com
74.86.81.154
theindiantv.com
crocmint.com
croc2host.com
ns1.croc2host.com
ns2.croc2host.com
caliplus.org
croc2host.com
crocitalia.com
crocmintdb2.com
securedinfo.net
vigaplus.org
vitopay.com
vitosaver.com
vitoslim.com
mail.hoodia-absolute.com
hoodia-absolute.com
securedinfo.net
bill.rx-partners.biz
rx-partners.biz
topsecured.net
securedtrack.com
mysecurebilling.com
vigrxplus.com
extenzedeal.com
shareasale.com
zenerx.com
everestnutrition.com
4rx.com
proactol.com
vigaplus.com
cheap-pharma.com
cheap-pharma.net
cheap-pharma.org
ezymedical.com
aviagra.net
edhelp.biz
ezmedz.net
mediaplace.biz
meds4all.net
rxp-alive.com
buys-pills.com

funny whois entry

Registrant Contact:
Personality
Alexey Goncharov ()
per. Ryabinoviy 7
Krasnodar, KRASNODAR 353182
RU

(800) 532-4808 (718) 313-1498 +44-203-0110241

(800) 532-4808 (718) 313-1498

Email Header Analysis

Compromised Site Being Use For Pharmacy Spamming

Address lookup

Domain Whois record

Network Whois record

DNS records

Traceroute

Service scan

(800) 532-4808
(718) 313-1498
+44-203-0110241

(800) 532-4808
(718) 313-1498