WhoIs 89.189.191.95 – warez-free-all


Consumer & Business Alert – Stolen Identity!!!! fraudalert
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

89.189.191.95

Address lookup

canonical name gw-95.211.ru.
aliases
addresses 89.189.191.95

Domain Whois record

Queried whois.ripn.net with “211.ru“…

warez-free-all.blogspot.com/
Author : Virtualia (IP: 89.189.191.95 , gw-95.211.ru)
E-mail : virt@gmail.com

% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:     211.RU
type:       CORPORATE
nserver:    ns.211.ru. 193.238.131.195
nserver:    ns2.211.ru. 89.189.191.224
state:      REGISTERED, DELEGATED
org:        Ltd. "Siberian Networks"
phone:      +7 383 2209211
phone:      +7 383 2209280
fax-no:     +7 383 2209211
e-mail:     noc@211.ru
registrar:  RUCENTER-REG-RIPN
created:    2004.06.16
paid-till:  2010.06.16
source:     TC-RIPN

Last updated on 2009.07.04 04:54:11 MSK/MSD

Network Whois record

Queried whois.ripe.net with “-B 89.189.191.95“…

% Information related to '89.189.184.0 - 89.189.191.255'

inetnum:        89.189.184.0 - 89.189.191.255
netname:        RU-ISP-SIBNET-NSK-2
descr:          Siberian Networks
country:        RU
admin-c:        SAS-RIPE
tech-c:         SAS-RIPE
status:         ASSIGNED PA
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070301
source:         RIPE

person:         Stanislav A. Svirid
address:        Siberian Networks
address:        21/1, Dachnaya Street
address:        630082, Novosibirsk
address:        Russia
phone:          +7 383 2209280
fax-no:         +7 383 2209211
nic-hdl:        SAS-RIPE
e-mail:         count@211.ru
notify:         count@211.ru
notify:         noc@211.ru
mnt-by:         SIBNET-NSK-MNT
changed:        sva@riss-telecom.ru 20001102
changed:        frolov@riss-telecom.ru 20021218
changed:        count@211.ru 20070322
source:         RIPE

% Information related to '89.189.184.0/21AS34757'

route:          89.189.184.0/21
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070322
source:         RIPE

% Information related to '89.189.176.0/20AS34757'

route:          89.189.176.0/20
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20080328
source:         RIPE

DNS records

name class type data time to live
gw-95.211.ru IN A 89.189.191.95 43200s (12:00:00)
211.ru IN SOA
server: ns2.211.ru
email: noc.211.ru
serial: 2009063002
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 86400
43200s (12:00:00)
211.ru IN TXT v=spf1 ip4:193.238.128.0/22 ip4:89.189.176.0/20 ip4:80.64.168.0/21 ip4:217.106.28.136/30 mx ptr mx:193.238.131.194 ~all 43200s (12:00:00)
211.ru IN A 193.238.131.200 43200s (12:00:00)
211.ru IN MX
preference: 0
exchange: mx.211.ru
43200s (12:00:00)
211.ru IN NS ns.211.ru 43200s (12:00:00)
211.ru IN NS ns2.211.ru 43200s (12:00:00)
95.191.189.89.in-addr.arpa IN PTR gw-95.211.ru

Canadian Pharmacy Spam – visitslip.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
207.115.20.46 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
211.186.220.30 Korea, Republic of (Seoul)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://visitslip.com

From Kristin B. Jacobs Tue Jun 30 12:07:48 2009
Return-Path: <kristin_b.jacobsks@zip.co.nz>
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=zip.co.nz; domainkeys=neutral (no sig); from=zip.co.nz; dkim=neutral (no sig)
Received: from 207.115.20.46 (EHLO flph263.prodigy.net) (207.115.20.46)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Tue, 30 Jun 2009 03:20:01 -0700
Received: from cmh7fb2 ([211.186.220.30])
by flph263.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5UAJv6O009087;
Tue, 30 Jun 2009 03:19:59 -0700
Message-ID: <000701c9f9b6$0f0093f0$ae8bf302@zip.co.nz>
Reply-To: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
From: “Kristin B. Jacobs” <kristin_b.jacobsks@zip.co.nz>
To:
Subject: Make you wife moan in pleasure!
Date: Tue, 30 Jun 2009 15:07:48 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 139

Address lookup

canonical name visitslip.com.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
222.241.150.146

Domain Whois record

Queried whois.internic.net with “dom visitslip.com“…

   Domain Name: VISITSLIP.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:19:02 UTC <<<

Queried whois.namerich.cn with “visitslip.com“…

 DomainName : visitslip.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
visitslip.com IN A 119.39.238.2 10800s (03:00:00)
visitslip.com IN A 203.93.208.86 10800s (03:00:00)
visitslip.com IN A 222.241.150.146 10800s (03:00:00)
visitslip.com IN A 61.191.191.241 10800s (03:00:00)
visitslip.com IN A 218.75.144.6 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – magnetaroma.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
202.22.220.7 Japan (Kiryu)* Whois Google DNSStuff Urgentmessage.org
207.115.20.191 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
7.220.22.202 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

An Incredible Canadian Pharmacy is available at your Fingertips!
*No~Doctor~Needed*! Browse our Site Today! -> http://magnetaroma.com

From Augustine Chung Mon Jun 29 04:16:55 2009
Return-Path:  <a_chung_jh@charters.com.au>
Authentication-Results: mta165.sbc.mail.mud.yahoo.com from=charters.com.au; domainkeys=neutral (no sig); from=charters.com.au; dkim=neutral (no sig)
Received: from 202.22.220.7 (EHLO flpi189.prodigy.net) (207.115.20.191)
by mta165.sbc.mail.mud.yahoo.com with SMTP; Mon, 29 Jun 2009 04:18:55 -0700
Received: from x687a82 (7.220.22.202.ktv.ne.jp [202.22.220.7])
by flpi189.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5TBHsNa023999;
Mon, 29 Jun 2009 04:18:52 -0700
Message-ID: <000701c9f8ab$1c7f4a50$d828ea62@charters.com.au>
Reply-To: “Augustine Chung”  <a_chung_jh@charters.com.au>
From: “Augustine Chung”   <a_chung_jh@charters.com.au>
To:
Subject: Want great sex? Get..
Date: Mon, 29 Jun 2009 06:16:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 141

Address lookup

canonical name magnetaroma.com.
aliases
addresses 218.75.144.6
222.241.150.146
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom magnetaroma.com“…

   Domain Name: MAGNETAROMA.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.HEARTCORNER.IN
   Name Server: NS2.HEARTCORNER.IN
   Name Server: NS3.HEAVYMEEK.RU
   Name Server: NS4.HEAVYMEEK.RU
   Name Server: NS5.BLUEAWAKE.COM
   Name Server: NS6.BLUEAWAKE.COM
   Status: ok
   Updated Date: 26-jun-2009
   Creation Date: 26-jun-2009
   Expiration Date: 26-jun-2010

Last update of whois database: Fri, 03 Jul 2009 08:00:22 UTC <<<

Queried whois.namerich.cn with “magnetaroma.com“…

 DomainName : magnetaroma.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.BLUEAWAKE.COM
Name Server......................NS6.BLUEAWAKE.COM
Name Server......................NS3.HEAVYMEEK.RU
Name Server......................NS4.HEAVYMEEK.RU
Name Server......................NS1.HEARTCORNER.IN
Name Server......................NS2.HEARTCORNER.IN
Status...........................ok
Creation  Date ..................2009-06-26
Expiration Date .................2010-06-26
Last Update  Date ...............2009-06-26

Registrant ID ...................V-X-58203-13799
Registrant Name .................DU QIAOWEN
Registrant Organization .........DU QIAOWEN
Registrant Address ..............YIYANGLU46
Registrant City..................YY
Registrant Province/State .......HN
Registrant Country Code .........CN
Registrant Postal Code ..........413069
Registrant Phone Number .........+86.073768512419
Registrant Fax ..................+86.073768512419
Registrant Email ................soangka@163.com

Administrative ID ...............V-X-58203-13799
Administrative Name .............DU QIAOWEN
Administrative Organization .....DU QIAOWEN
Administrative Address ..........YIYANGLU46
Administrative City..............YY
Administrative Province/State ...HN
Administrative Country Code .....CN
Administrative Postal Code ......413069
Administrative Phone Number .....+86.073768512419
Administrative Fax ..............+86.073768512419
Administrative Email ............soangka@163.com

Billing ID ......................V-X-58203-13799
Billing Name ....................DU QIAOWEN
Billing Organization ............DU QIAOWEN
Billing Address .................YIYANGLU46
Billing City.....................YY
Billing Province/State ..........HN
Billing Country Code ............CN
Billing Postal Code .............413069
Billing Phone Number ............+86.073768512419
Billing Fax .....................+86.073768512419
Billing Email ...................soangka@163.com

Technical ID ....................V-X-58203-13799
Technical Name ..................DU QIAOWEN
Technical Organization...........DU QIAOWEN
Technical Address ...............YIYANGLU46
Technical City...................YY
Technical Province/State.........HN
Technical Country Code ..........CN
Technical Postal Code ...........413069
Technical Phone Number ..........+86.073768512419
Technical Fax ...................+86.073768512419
Technical Email .................soangka@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
magnetaroma.com IN A 218.75.144.6 10800s (03:00:00)
magnetaroma.com IN A 119.39.238.2 10800s (03:00:00)
magnetaroma.com IN A 203.93.208.86 10800s (03:00:00)
magnetaroma.com IN A 222.241.150.146 10800s (03:00:00)
magnetaroma.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy – www.flattry.com – www.tendereach.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Address lookup

canonical name www.flattry.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241
119.39.238.2

flattery

Domain Whois record

Queried whois.internic.net with “dom flattry.com“…

   Domain Name: FLATTRY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FLATTRY.COM
   Name Server: NS2.FLATTRY.COM
   Name Server: NS3.FLATTRY.COM
   Name Server: NS4.FLATTRY.COM
   Status: clientTransferProhibited
   Updated Date: 23-jun-2009
   Creation Date: 10-jun-2009
   Expiration Date: 10-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:36:22 UTC <<<

Queried whois.onlinenic.com with “flattry.com“…

Registrant:
	 Merido Vallici ad667@safe-mail.net +1.2128843301
	 Merido Vallici
	 4033 po box
	 New York,NY,US 10137

Domain Name:flattry.com
Record last updated at 2009-06-23 07:38:35
Record created on 2009/6/10
Record expired on 2010/6/10

Domain servers in listed order:
	 ns1.flattry.com 	 ns2.flattry.com 

Administrator:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Technical Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Billing Contactor:
	 name: Merido Vallici
 mail: ad667@safe-mail.net tel: +1.2128843301
	 org: Merido Vallici

address: 4033 po box
	 city: New York
,province: NY
,country: US
 postcode: 10137

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.flattry.com IN A 60.191.239.153 10800s (03:00:00)
http://www.flattry.com IN A 61.191.191.241 10800s (03:00:00)
http://www.flattry.com IN A 119.39.238.2 10800s (03:00:00)
http://www.flattry.com IN A 203.93.208.86 10800s (03:00:00)
http://www.flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 218.75.144.6 10800s (03:00:00)
flattry.com IN A 119.39.238.2 10800s (03:00:00)
flattry.com IN A 203.93.208.86 10800s (03:00:00)
flattry.com IN A 60.191.239.153 10800s (03:00:00)
flattry.com IN A 61.191.191.241 10800s (03:00:00)

— end —

Address lookup

canonical name www.tendereach.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom tendereach.com“…

   Domain Name: TENDEREACH.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.TENDEREACH.COM
   Name Server: NS2.TENDEREACH.COM
   Name Server: NS3.TENDEREACH.COM
   Name Server: NS4.TENDEREACH.COM
   Status: clientTransferProhibited
   Updated Date: 24-jun-2009
   Creation Date: 23-jun-2009
   Expiration Date: 23-jun-2010

>>> Last update of whois database: Mon, 29 Jun 2009 13:43:47 UTC <<<

Queried whois.onlinenic.com with “tendereach.com“…

Registrant:
	 Lorenv Cerre ad0@safe-mail.net +1.2138848801
	 Lorenv Cerre
	 4033 po box
	 New York,NY,US 10337

Domain Name:tendereach.com
Record last updated at 2009-06-24 08:21:43
Record created on 2009/6/23
Record expired on 2010/6/23

Domain servers in listed order:
	 ns1.tendereach.com 	 ns2.tendereach.com 

Administrator:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Technical Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre
Billing Contactor:
	 4033 po box
	 New York
NY,
US
 10337

	 name:(Lorenv Cerre)
mail:(ad0@safe-mail.net) +1.2138848801
	 Lorenv Cerre

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.tendereach.com IN A 218.75.144.6 10800s (03:00:00)
http://www.tendereach.com IN A 60.191.239.153 10800s (03:00:00)
http://www.tendereach.com IN A 61.191.191.241 10800s (03:00:00)
http://www.tendereach.com IN A 119.39.238.2 10800s (03:00:00)
http://www.tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 119.39.238.2 10800s (03:00:00)
tendereach.com IN A 203.93.208.86 10800s (03:00:00)
tendereach.com IN A 60.191.239.153 10800s (03:00:00)
tendereach.com IN A 61.191.191.241 10800s (03:00:00)
tendereach.com IN A 218.75.144.6 10800s (03:00:00)

Canadian Pharmacy – canadiannetmall.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Canadiannetmall

Address lookup

canonical name canadiannetmall.com.
aliases
addresses 94.76.196.49

Domain Whois record

Queried whois.internic.net with “dom canadiannetmall.com“…

   Domain Name: CANADIANNETMALL.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.CANADIANNETMALL.COM
   Name Server: NS2.CANADIANNETMALL.COM
   Status: clientTransferProhibited
   Updated Date: 23-dec-2008
   Creation Date: 03-mar-2008
   Expiration Date: 03-mar-2010

>>> Last update of whois database:
Mon, 29 Jun 2009 12:10:38 UTC <<<

Queried whois.enom.com with “canadiannetmall.com“…

Visit AboutUs.org for more information about canadiannetmall.com
<a href="http://www.aboutus.org/canadiannetmall.com">AboutUs: canadiannetmall.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: canadiannetmall.com

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (2cff3071e8e6460a9344b23d586d00e8.protect@whoisguard.com)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.canadiannetmall.com
   ns2.canadiannetmall.com

Creation date: 03 Mar 2008 14:53:00
Expiration date: 03 Mar 2010 14:53:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 94.76.196.49“…

% Information related to '94.76.196.48 - 94.76.196.55'

inetnum:        94.76.196.48 - 94.76.196.55
netname:        Poundhost-3253
descr:          Poundhost customer server
remarks: ##############################################################
remarks:        Please report abuse incidents to abuse@poundhost.com.
remarks:        Messages sent to other contact addresses may not be acted upon.
remarks: ##############################################################
country:        GB
admin-c:        BLO2-RIPE
tech-c:         BLO2-RIPE
status:         ASSIGNED PA
mnt-by:         blueconnex-mnt
mnt-routes:     blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20090114

role:           BlueConnex Ltd Operators
address:        BlueConnex Ltd
address:        BlueSquare House
address:        Priors Way
address:        Maidenhead
address:        Berkshire
address:        SL62HP
remarks:        For abuse please contact abuse@blueconnex.net
phone:          +44 (0)1628 673131
admin-c:        PETE3-RIPE
admin-c:        MM5420-RIPE
admin-c:        ROB153-RIPE
tech-c:         MM5420-RIPE
tech-c:         ROB153-RIPE
mnt-by:         blueconnex-mnt
tech-c:         PETE3-RIPE
nic-hdl:        BLO2-RIPE
changed:        support@pcs-net.com 20081012
source:         RIPE
e-mail:         abuse@blueconnex.net

% Information related to '94.76.192.0/18AS29550'

route:          94.76.192.0/18
descr:          Blueconnex Networks Ltd
origin:         AS29550
remarks:        ***********************************
remarks:        *                                 *
remarks:        * Abuse: abuse@blueconnex.net     *
remarks:        *                                 *
remarks:        * Peering: peering@blueconnex.net *
remarks:        *                                 *
remarks:        ***********************************
mnt-by:         blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20080814

DNS records

name class type data time to live
canadiannetmall.com IN MX
preference: 10
exchange: mail.canadiannetmall.com
14400s (04:00:00)
canadiannetmall.com IN TXT v=spf1 a mx ip4:92.48.119.157 ~all 14400s (04:00:00)
canadiannetmall.com IN SOA
server: ns1.canadiannetmall.com
email: root.canadiannetmall.com
serial: 2008122300
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
canadiannetmall.com IN NS ns2.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN NS ns1.canadiannetmall.com 14400s (04:00:00)
canadiannetmall.com IN A 94.76.196.49 14400s (04:00:00)
49.196.76.94.in-addr.arpa IN PTR 94-76-196-49.static.as29550.net 86400s (1.00:00:00)

— end —

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
80.244.229.67 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
6.5.4.3 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to ScamFraudAlert@gmail.com
date Mon, Jun 29, 2009 at 2:16 AM
subject Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA

Canadian Pharmacy Spam – grewsix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
129.10.63.40 United States (Boston)* Whois Google DNSStuff Urgentmessage.org
207.115.36.121 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Terry G. Parks Fri Jun 26 10:09:27 2009
Return-Path:
Authentication-Results: mta107.sbc.mail.re3.yahoo.com from=vdc.lv; domainkeys=neutral (no sig); from=vdc.lv; dkim=neutral (no sig)
Received: from 129.10.63.40 (EHLO nlpi107.prodigy.net) (207.115.36.121)
by mta107.sbc.mail.re3.yahoo.com with SMTP; Fri, 26 Jun 2009 10:09:22 -0700
Received: from 329a0d2 ([129.10.63.40])
by nlpi107.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5QH9Euq004296;
Fri, 26 Jun 2009 12:09:21 -0500
Message-ID:  <000701c9f680$dcd89cc0$4a37416a@vdc.lv>
Reply-To: “Terry G. Parks”  <tg_parkszh@vdc.lv>
From: “Terry G. Parks”
To:
Subject: eye opening
Date: Fri, 26 Jun 2009 12:09:27 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 135

An Incredible Canadian Pharmacy is available at your Fingertips!
N0~Doctor~Needed! Browse our site Today! -> http://grewsix.com

Address lookup

An Incredible Canadian Pharmacy is available at your Fingertips!
NO `Doctor `Needed! Browse our site Today! -> http://camebear.com

canonical name grewsix.com. aliases
addresses 218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom grewsix.com“…

   Domain Name: GREWSIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RUNMOTHER.IN
   Name Server: NS2.RUNMOTHER.IN
   Name Server: NS3.LISTENFACE.RU
   Name Server: NS4.LISTENFACE.RU
   Name Server: NS5.WESUCH.PL
   Name Server: NS6.WESUCH.PL
   Status: ok
   Updated Date: 22-jun-2009
   Creation Date: 22-jun-2009
   Expiration Date: 22-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 15:51:35 UTC <<<

Queried whois.namerich.cn with “grewsix.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : grewsix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LISTENFACE.RU
Name Server......................NS2.RUNMOTHER.IN
Name Server......................NS6.WESUCH.PL
Name Server......................NS1.RUNMOTHER.IN
Name Server......................NS5.WESUCH.PL
Name Server......................NS3.LISTENFACE.RU
Status...........................ok
Creation  Date ..................2009-06-22
Expiration Date .................2010-06-22
Last Update  Date ...............2009-06-22

Registrant ID ...................V-X-57955-13465
Registrant Name .................ZHAO LET
Registrant Organization .........ZHAO LEI
Registrant Address ..............JIEFANGLU19
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116019
Registrant Phone Number .........+86.04112880527
Registrant Fax ..................+86.04112880527
Registrant Email ................mklao9he@126.com

Administrative ID ...............V-X-57955-13465
Administrative Name .............ZHAO LET
Administrative Organization .....ZHAO LEI
Administrative Address ..........JIEFANGLU19
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116019
Administrative Phone Number .....+86.04112880527
Administrative Fax ..............+86.04112880527
Administrative Email ............mklao9he@126.com

Billing ID ......................V-X-57955-13465
Billing Name ....................ZHAO LET
Billing Organization ............ZHAO LEI
Billing Address .................JIEFANGLU19
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116019
Billing Phone Number ............+86.04112880527
Billing Fax .....................+86.04112880527
Billing Email ...................mklao9he@126.com

Technical ID ....................V-X-57955-13465
Technical Name ..................ZHAO LET
Technical Organization...........ZHAO LEI
Technical Address ...............JIEFANGLU19
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116019
Technical Phone Number ..........+86.04112880527
Technical Fax ...................+86.04112880527
Technical Email .................mklao9he@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
grewsix.com IN A 203.93.208.86 10800s (03:00:00)
grewsix.com IN A 60.191.221.117 10800s (03:00:00)
grewsix.com IN A 60.191.239.153 10800s (03:00:00)
grewsix.com IN A 61.191.191.241 10800s (03:00:00)
grewsix.com IN A 218.75.144.6 10800s (03:00:00)
grewsix.com IN A 119.39.238.2 10800s (03:00:00)

xxxxxxxxxx

sharepolite.com
luckyown.com
raincool.com
pathtotal.com
shareproper.com
rightthin.com
zapblack.com
verycuddly.com
offront.com
railactive.com
seekersmiles.com
windowdouble.com
bottomvanish.com
twentyparent.com
sailnotice.com
airproper.com
howheld.com
talkown.com
againnoon.com
minutewood.com
thatcost.com
onthick.com
allthough.com
grewsix.com
heardzest.com
lovingbehind.com
shellyou.com
amtreat.com
wouldground.com
gardenguess.com
wrotemotion.com
legacyshall.com
stateequate.com
beatsshe.com
humanemy.com
camebear.com
rainthree.com
chieftype.com
abovegray.com
deluxeparent.com
centerthen.com
cowzip.com
plumlegend.com
heartlong.com
expectjust.com
causejewel.com
cowwhose.com
simpleinvent.com
streamput.com
pamperthree.com
legendvisit.com
blue-admin.com
via-grashop.com
99-22.com
luckyyour.com
prizefor.com
objectlead.com
awardfelt.com
workenough.com
motiontasty.com
caringwow.com
eagerthin.com
degreeproper.com
recordweight.com
eagerbuild.com
jewelspread.com
shellsmiles.com
caringhigh.com
nosewife.com
serveseemly.com
stoodeight.com
fizzdry.com
99-33.com
80-30.com

Canadian Pharmacy Spam – www.shop29.net aka www.shop75.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

shop75dotnet

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation.  Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by taking those counterfeit drugs.

  1. Bestdrugs.net.cn
  2. Cheap-meds.cn
  3. Cheap-pill.cn
  4. Cheapdrugs.com.cn
  5. Coolagree.cn
  6. Discountpills.cn
  7. Drugsdirectmoral.com
  8. Lovecanadianpower.com
  9. Lowpricepills.cn
  10. Medsbestone.com.cn
  11. Medstoresome.com.cn
  12. Newmedslofty.com
  13. Newpharmthe.com.cn
  14. Pharmacyonlinefound.com
  15. Pharmssitefarm.com.cn
  16. Pillsiteadd.com.cn
  17. Placepharmacygentle.com
  18. Ridestone.com
  19. Siterxmoral.com
  20. Smartdrugtell.com.cn
  21. Storemedburn.com.cn
  22. Thosefuns.com
  23. Topdrugalive.com
  24. Topmedsraise.com
  25. Toppharmlike.com.cn
  26. Toppilldrink.com.cn
  27. Wholesaledrugsand.com.cn
  28. Wholesalepharmsfirst.com
SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com

Address lookup

canonical name www.shop29.net.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom shop29.net“…

   Domain Name: SHOP29.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:16:16 UTC <<<

Queried whois.onlinenic.com with “shop29.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop29.net
Record last updated at 2009-06-22 10:50:33
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Technical Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Billing Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for shop29.net failed: WouldBlock

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop29.net IN A 61.191.191.241 10799s (02:59:59)
http://www.shop29.net IN A 119.39.238.2 10799s (02:59:59)
http://www.shop29.net IN A 203.93.208.86 10799s (02:59:59)
http://www.shop29.net IN A 218.75.144.6 10799s (02:59:59)
http://www.shop29.net IN A 60.191.221.117 10799s (02:59:59)
http://www.shop29.net IN A 60.191.239.153 10799s (02:59:59)
shop29.net IN NS ns6.creaseon.pl 172800s (2.00:00:00)
shop29.net IN NS ns4.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns3.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns5.creaseon.pl 172800s (2.00:00:00)

— end —

Address lookup

canonical name www.shop75.net.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153

Domain Whois record

Queried whois.internic.net with “dom shop75.net“…

   Domain Name: SHOP75.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:18:49 UTC <<<

Queried whois.onlinenic.com with “shop75.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop75.net
Record last updated at 2009-06-22 10:50:38
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop75.net IN A 60.191.239.153 10800s (03:00:00)
http://www.shop75.net IN A 61.191.191.241 10800s (03:00:00)
http://www.shop75.net IN A 119.39.238.2 10800s (03:00:00)
http://www.shop75.net IN A 203.93.208.86 10800s (03:00:00)
http://www.shop75.net IN A 218.75.144.6 10800s (03:00:00)
http://www.shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 61.191.191.241 10800s (03:00:00)
shop75.net IN A 218.75.144.6 10800s (03:00:00)
shop75.net IN A 119.39.238.2 10800s (03:00:00)
shop75.net IN A 203.93.208.86 10800s (03:00:00)
shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 60.191.239.153 10800s (03:00:00)

Canadian Pharmacy – canadianpharmacy-shop.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


canadian pharmacy shop

Address lookup

canonical name canadian-medshop.com.
aliases
addresses 195.95.155.22

Domain Whois record

Queried whois.internic.net with “dom canadian-medshop.com“…

Now, don’t you think giving your personal or credit card information to such ruthless criminals would be sheer madness? You would possibly get some fake product (which in case of pharmaceuticals can endanger your health). But most probably you’d get nothing at all, and they would just rip you off. They couldn’t care less about you
Domain Name: CANADIAN-MEDSHOP.COM
Registrar: EURODNS S.A
Whois Server: whois.eurodns.com
Referral URL: http://www.eurodns.com
Name Server: NS1.EURODNS.COM
Name Server: NS2.EURODNS.COM
Status: clientTransferProhibited
Updated Date: 04-feb-2009
Creation Date: 04-feb-2009
Expiration Date: 04-feb-2010

Last update of whois database: Sat, 27 Jun 2009 23:31:12 UTC
Queried whois.eurodns.com with “canadian-medshop.com

By submitting this query, you agree to abide by the above policy.

Domain: canadian-medshop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Technical Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.22

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 22.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-medshop.com IN A 195.95.155.22 700s (00:11:40)
canadian-medshop.com IN MX
preference: 10
exchange: mail.canadian-medshop.com
3600s (01:00:00)
canadian-medshop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009062000
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-medshop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)
canadian-medshop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)

afsfsd

Address lookup

canonical name canadianpharmacy-shop.com.
aliases http://www.canadianpharmacy-shop.com
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom canadianpharmacy-shop.com“…

   Domain Name: CANADIANPHARMACY-SHOP.COM
   Registrar: EVERYONES INTERNET, LTD. DBA RESELLONE.NET
   Whois Server: whois.resellone.net
   Referral URL: http://www.resellone.net
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jun-2009
   Creation Date: 22-apr-2009
   Expiration Date: 22-apr-2010

Last update of whois database: Sat, 27 Jun 2009 23:39:39 UTC <<<

Queried whois.resellone.net with “canadianpharmacy-shop.com“…

Registrant:
 n/a
 p.o. box 1928
 CHERNIGOV, UA 14000
 UA

 Domain name: CANADIANPHARMACY-SHOP.COM

 Administrative Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614
 Technical Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614

 Registration Service Provider:
    IT-SPEC.COM, info@it-spec.com
    +3.80913018614
    http://it-spec.com
    IT-SPEC.COM - PROFESSIONAL DOMAIN REGISTRATION
    SEND FOR ABUSE: domain-abuse@it-spec.com

 Registrar of Record: Everyones Internet, LLC dba Resellone.net
 Record last updated on 21-Jun-2009.
 Record expires on 22-Apr-2010.
 Record created on 22-Apr-2009.

 Domain servers in listed order:
    NS1.SUSPENDED-DOMAINS.NET
    NS2.SUSPENDED-DOMAINS.NET   

 Domain status: clientTransferProhibited
                clientUpdateProhibited
Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

% Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.canadianpharmacy-shop.com IN CNAME canadianpharmacy-shop.com 60s (00:01:00)
canadianpharmacy-shop.com IN SOA
server: ns1.nscontrol.com
email: root.canadianpharmacy-shop.com
serial: 2007100805
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
canadianpharmacy-shop.com IN NS ns4.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns5.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns2.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns1.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns3.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN A 195.95.155.3 60s (00:01:00)

— end —

Canadian Pharmacy Scam – thepharmacydiscount.com – internetserviceteam.com

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Address lookup

canonical name thepharmacydiscount.com.
aliases
addresses 95.168.177.116 – internetserviceteam.com

Internetserviceteam is a known content scraper bot operator, they are known to crawl the web to steal images (photos), they also run spam harvesting bots (scanning for email addresses) and scrape web page content to produce spam pages.

Domain Whois record

Queried whois.internic.net with “dom thepharmacydiscount.com“…

Domain Name: THEPHARMACYDISCOUNT.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.EVERYDNS.NET
Name Server: NS2.EVERYDNS.NET
Name Server: NS3.EVERYDNS.NET
Name Server: NS4.EVERYDNS.NET
Status: clientTransferProhibited
Updated Date: 20-may-2009
Creation Date: 02-dec-2008
Expiration Date: 02-dec-2009

Last update of whois database: Sat, 27 Jun 2009 22:59:29 UTC

Queried whois.todaynic.com with “thepharmacydiscount.com“…Network Whois record

Queried whois.ripe.net with “-B 95.168.177.116“…

Information related to ‘95.168.177.0 – 95.168.177.255’

inetnum: 95.168.177.0 – 95.168.177.255
netname: V3SERVERS-NET-967806
descr: v3servers.net VPS&VDS customer server
country: BY
admin-c: SA4597-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20090417
source: RIPE

person: Sogreev Anton
address: 12 Knez Mihailova
address: apt. 18
address: Belgrade
address: 11000
address: Serbia
phone: +1 619 684 2664
e-mail: mail@v3servers.net
abuse-mailbox: abuse@v3servers.net
nic-hdl: SA4597-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20081010
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
source: RIPE

% Information related to ‘95.168.160.0/19AS28753’

route: 95.168.160.0/19
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20090126
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
source: RIPE

DNS records

name class type data time to live
thepharmacydiscount.com IN SOA
server: ns1.everydns.net
email: hostmaster.thepharmacydiscount.com
serial: 1246143007
refresh: 3600
retry: 900
expire: 1209600
minimum ttl: 3600
360s (00:06:00)
thepharmacydiscount.com IN NS ns1.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns2.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns3.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN NS ns4.everydns.net 86400s (1.00:00:00)
thepharmacydiscount.com IN A 95.168.177.116 3600s (01:00:00)
116.177.168.95.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 9042600
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
116.177.168.95.in-addr.arpa IN PTR 95.168.177.116.internetserviceteam.com 100000s (1.03:46:40)

Canadian Pharmacy – best-drug.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)


us drugstore

Address lookup

canonical name best-drug.com
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with dom best-drug.com

   Domain Name: BEST-DRUG.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 25-jun-2009
   Creation Date: 24-jun-2009
   Expiration Date: 24-jun-2010

Last update of whois database: Sat, 27 Jun 2009 20:46:56 UTC <<<

Queried whois.enom.com with “best-drug.com“…

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: best-drug.com
Registrant Contact:
   slay slayer
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Administrative Contact:
   slay slayer (sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Technical Contact:
   slay slayer  sslaayeerr@googlemail.com
   +310212121212
   Fax:
   grosse strasse 32,31
   erfurt,  2123
   DE

Status: Locked
Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 24 Jun 2009 18:34:09
Expiration date: 24 Jun 2010 18:34:09

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
best-drug.com IN SOA
server: ns1.nscontrol.com
email: root.best-drug.com
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
best-drug.com IN A 195.95.155.3 60s (00:01:00)
best-drug.com IN NS ns4.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns3.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns5.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns1.nscontrol.com 60s (00:01:00)
best-drug.com IN NS ns2.nscontrol.com 60s (00:01:00)

WhoIs ns1.ispvds.com

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


used as nameserver but missing in zone
0uk.net
5070.info
5z0.net
absolute-portal.com
alternatenet.net
bakomatex.com
banstock.com
birdtower.com
blueiontech.com
blueorange.be
bluepills-rx.net
brandpills.net
cafeschlag.com
carlvdupre.com
casino-consul.com
ced-wb.org
clearcutsemblance.com
club-ip.net
cvswebclient.net
dikoepole.org
diversionmedia.net
dooopa.net
ediz.ru
egreenrx.net
eis-ru.net
entec-systems.com
esposende.com
etherealrealm.org
facechange.com
findadive.com
finncrosse.com
forexdvd.net
foustok.net
gabrielaschutz.com
garden-office.net
generationplus.net
geniev.net
get43.net
go34.net
goodweeks.biz
gozetle.net
gozetleme.net
graszoden.be
hard-exotique.com
hard-lesbienne.com
hard-mature.com
hard-pipe.com
hard-sodo.com
imagesalon.net
indylink.net
inmedicines.net
islandofmusic.com
isp-server.com
job-hunts.net
kitetelecom.net
koschalk.com
kyotogames.com
l0a.net
lansman.org
loftd.com
matota.com
max-price.net
maxicus.com
mbcbe.com
mdcheap.net
mdski.net
mdsrx.net
meds-cheap.net
medsbuy.net
mgastudios.net
mobilia-online.com
mobipic.net
mosgu.net
motorhomesscotland.net
mouvementreformateur.net
mymultitracker.net
myspot.info
nedved.net
nervenne.com
new-pharm.net
nydragoes.com
onlinerxmeds.net
orangeblack.org
pandaetu.info
paradis-fiscaux.com
paris-rent-apartment.com
pmds.org
promotion-theatre.org
rxviagra.net
salatmix.com
samiasmahi.net
selseg.com
seo2you.com
seohacker.net
silvacabinetry.com
slavmobile.com
smartdietcenter.com
sochiguide.net
spectraimaging.net
supereach.net
svjatoshino.com
svyatoshino.com
sztdr.net
telecharger-video-x.com
telfordhouse.com
thedreamstore.com
ttsmaster.com
ua-beckhoff.com
umkabooks.com
umpkb.com
urozhay.com
vitaminize.net
webteriors.com
welieverchevrolet.com
wmplanet.net
yourshopper.net
zaboysultra.com
znai.net
domains using this as nameserver
3foisrien.com
4senses.ispvds.com
5070.info
activebiometrix.com
actualfree.com
aksmarket.ru
akvadar.ru
al-multimix.ispvds.com
allpets.ru
amakan.ru
amsu.ru
apdsystem.com
aries-hosting.com
artec-group.com
aska-shop.com.ua
astropolis.net
at-hosting.com
avto-sait.ru
bakomatex.com
banstock.isp-server.com
beffective.ca
belgasite.be
belsite.com
betsee.com
bossavit.com
bruhost-2.ispvds.com
bruhost.ispvds.com
carrefourmedical.net
cell-tissuetransplantation.com
centreindigo.org
chemport.ru
chemy.ru
chronorace.be
cogendi.com
cotejardins.ch
cracnet.com
cyberdepot.biz
daniel.ispvds.com
de-troyer.be
deine-freunde.net
drnd.be
drvrn.com
e-ticket.ru
ediz.ru
efireice.com
elbase.ispvds.com
esales.ru
etobolsk.ru
euroconsultants.be
evm.ru
fastorder.net
foratel.com
format21.com
freekerrybook.org
g9e.ru
george.ispvds.com
geot.ispvds.com
gooddays.ru
gouralnik.com
graphic-lettering.be
hote.net
houebe.com
idsbd.net
intermedia-communication.biz
ishango.ispvds.com
isobel.be
ispserver.com
ispsystem.com
ispvds.com
itcomplex.ru
jbsoares.net
kgora.ru
kinologia.ru
labstyle.com
ls.ispvds.com
luxuryparlor.ispvds.com
mail.amsu.ru
markopizza.ru
matota.com
mdbt.be
megaded.info
merlin-worlds.ru
merscomdocs.com
mirronix.com
momotaro.biz
moving-storage.net
mskhost-2.ispvds.com
mskhost.ispvds.com
multiactivist.com
mykorzina.com
norsite.net
novgorod.su
nyhost-2.ispvds.com
nyk-backup.ispvds.com
openforall.net
pavel.ispvds.com
planbweb.com
progsight.be
reanimator.ispvds.com
redin.info
rental-apartment-paris.com
rolissisp.ispvds.com
rus.aero
rusaero.aero
sdv2.antipode.info
seli01.be
sferaweb.ru
sidora.net
societe-internationale.com
stagingarea3.com
staquet.net
synergir.com
taxpolicy.ru
tlnh.ru
totogolo.com
transmaster177.ru
triniforce.ispvds.com
vdelo.ru
webcoop.org
wildboarmusic.co

WhoIs GlavMed.com aka Canadian Pharmacy

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Glavmed is the public-facing affiliate program which sponsors spammers to promote what are generally known to be illegal pharmacy websites. It appears to be a cover for the real sponsor organization behind all of these sites: Spamit. These include [Canadian Pharmacy], one of the most-spammed properties during 2006-2008. Glavmed is alternately known in the spammer community as the “Spamit” program, making it clear that this operation endorses and condones illegal spamming in the promotion of their properties.

This was learned from postings on bulkerforum.biz by username “kref”, who would invite users to promote for their properties. kref is also known as “fakir f” (his Skype username.)

Glavmed (Spamit) is believed to be based out of Moscow, and thought to be very closely related to the “Russian Business Network”, or “RBN.


Spamtracker.eu


GlavMed2

Address lookup

canonical name www.glavmed.com.
aliases
addresses 74.86.34.144

Domain Whois record

Queried whois.internic.net with “dom glavmed.com“…

   Domain Name: GLAVMED.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.GLAVMED.COM
   Name Server: NS2.GLAVMED.COM
   Status: ok
   Updated Date: 23-jan-2009
   Creation Date: 14-mar-2006
   Expiration Date: 14-mar-2013

>>> Last update of whois database: Sat, 27 Jun 2009 02:40:08 UTC <<<

Queried whois.regtime.net with “glavmed.com“…

% Regtime Ltd. WHOIS server

Domain name: glavmed.com

Name servers:
    ns1.glavmed.com
    ns2.glavmed.com

Registrar: Regtime Ltd.
Creation date: 2009-01-15
Expiration date: 2013-03-14
Status: active

Registrant:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Administrative Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Technical Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Billing Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747

Network Whois record

Queried whois.arin.net with “!NET-74-86-34-144-1“…

CustName:   Dmitry Fedorov
Address:    Ivanov st 31
City:       Moscow
StateProv:
PostalCode: 125725
Country:    RU
RegDate:    2009-03-19
Updated:    2009-03-19

NetRange:   74.86.34.144 - 74.86.34.151
CIDR:       74.86.34.144/29
NetName:    NET-74-86-34-144
NetHandle:  NET-74-86-34-144-1
Parent:     NET-74-86-0-0-1
NetType:    Reassigned
Comment:    Send abuse issues to abuse@softlayer.com
RegDate:    2009-03-19
Updated:    2009-03-19

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  abuse@softlayer.com 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin
RNOCPhone:  +1-214-442-0600
RNOCEmail:  ipadmin@softlayer.com 

RTechHandle: IPADM258-ARIN
RTechName:   IP Admin
RTechPhone:  +1-214-442-0600
RTechEmail:  ipadmin@softlayer.com 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  abuse@softlayer.com

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  ipadmin@softlayer.com

# ARIN WHOIS database, last updated 2009-06-26 19:10

DNS records

name class type data time to live
http://www.glavmed.com IN A 74.86.34.144 60s (00:01:00)
glavmed.com IN SOA
server: ns1.glavmed.com
email: root.glavmed.com
serial: 2009041832
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
glavmed.com IN NS ns1.glavmed.com 60s (00:01:00)
glavmed.com IN NS ns2.glavmed.com 60s (00:01:00)
glavmed.com IN MX
preference: 10
exchange: mail.glavmed.com
60s (00:01:00)
glavmed.com IN A 74.86.34.144 60s (00:01:00)
144.34.86.74.in-addr.arpa IN PTR 74.86.34.144-static.reverse.softlayer.com 3600s (01:00:00)

— end —

Canadian Pharmacy – www.firmvictor.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
151.95.186.133 Italy (Pignone)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lorena N. Livingston Mon Jun 22 17:26:07 2009
Return-Path: <llivingston_wt@avantgarde.de>
Authentication-Results: mta112.sbc.mail.gq1.yahoo.com from=avantgarde.de; domainkeys=neutral (no sig); from=avantgarde.de; dkim=neutral (no sig)
Received: from 151.95.186.133 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta112.sbc.mail.gq1.yahoo.com with SMTP; Tue, 23 Jun 2009 04:14:27 -0700
Received: from lqdbnh2 ([151.95.186.133])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5NBDbs2029631;
Tue, 23 Jun 2009 04:14:25 -0700
Message-ID: <000701c9f399$334e5fd0$627e2c7a@avantgarde.de>
Reply-To: “Lorena N. Livingston”
From: “Lorena N. Livingston” <llivingston_wt@avantgarde.de>
To: ScamFraudAlert
Subject: Stay Hard and Last Longer in Bed!
Date: Mon, 22 Jun 2009 17:26:07 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 126

From: Lorena N. Livingston <llivingston_wt@avantgarde.de>
To: ScamFraudAlert.com
Sent: Monday, June 22, 2009 5:26:07 PM
Subject: Stay Hard and Last Longer in Bed!

An Incredible Canadian Pharmacy is available at your Fingertips!
No_Doctor_Needed! Click Here -> http://firmvictor.com

This spam brand has the dubious distinction of being the most heavily spammed domain our staff receives.

The “Canadian Pharmacy” titled sites are the most common. They may also be labeled “European Pharmacy” for visitors from IP addresses located outside North America.

Other sites include “PharmSite” and “best online PHARMACY.” They are riddled with identical fraudulent claims.

For simplicity, this entry refers by default to Canadian Pharmacy, but the false claims apply equally to all of these.

The copyright statement in the trailers for “PharmSite” and “best online PHARMACY” actually contains the words Copyright Canadian Pharmacy.

Visitors to these sites are cautioned against placing an unsecure order for any of the products advertised. With so much obvious fraud in the set up of the web site, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant criminals.

See Spamtracker.eu – Canadian Pharmacy

firmvictor

Address lookup

canonical name firmvictor.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom firmvictor.com“…

   Domain Name: FIRMVICTOR.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SOUNDPRIZE.IN
   Name Server: NS2.SOUNDPRIZE.IN
   Name Server: NS3.GROUNDBED.COM
   Name Server: NS4.GROUNDBED.COM
   Name Server: NS5.CHANGESTORY.PL
   Name Server: NS6.CHANGESTORY.PL
   Status: ok
   Updated Date: 18-jun-2009
   Creation Date: 18-jun-2009
   Expiration Date: 18-jun-2010

>>> Last update of whois database: Thu, 25 Jun 2009 07:36:37 UTC <<<

Queried whois.namerich.cn with “firmvictor.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : firmvictor.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.SOUNDPRIZE.IN
Name Server......................NS6.CHANGESTORY.PL
Name Server......................NS4.GROUNDBED.COM
Name Server......................NS5.CHANGESTORY.PL
Name Server......................NS1.SOUNDPRIZE.IN
Name Server......................NS3.GROUNDBED.COM
Status...........................ok
Creation  Date ..................2009-06-18
Expiration Date .................2010-06-18
Last Update  Date ...............2009-06-18

Registrant ID ...................V-X-57697-13132
Registrant Name .................GU FEI
Registrant Organization .........GU FEI
Registrant Address ..............FUZHOUGUANGCHANG29
Registrant City..................FZ
Registrant Province/State .......FJ
Registrant Country Code .........CN
Registrant Postal Code ..........350019
Registrant Phone Number .........+86.059175695124
Registrant Fax ..................+86.059175695124
Registrant Email ................baijakdfe@yeah.net

Administrative ID ...............V-X-57697-13132
Administrative Name .............GU FEI
Administrative Organization .....GU FEI
Administrative Address ..........FUZHOUGUANGCHANG29
Administrative City..............FZ
Administrative Province/State ...FJ
Administrative Country Code .....CN
Administrative Postal Code ......350019
Administrative Phone Number .....+86.059175695124
Administrative Fax ..............+86.059175695124
Administrative Email ............baijakdfe@yeah.net

Billing ID ......................V-X-57697-13132
Billing Name ....................GU FEI
Billing Organization ............GU FEI
Billing Address .................FUZHOUGUANGCHANG29
Billing City.....................FZ
Billing Province/State ..........FJ
Billing Country Code ............CN
Billing Postal Code .............350019
Billing Phone Number ............+86.059175695124
Billing Fax .....................+86.059175695124
Billing Email ...................baijakdfe@yeah.net

Technical ID ....................V-X-57697-13132
Technical Name ..................GU FEI
Technical Organization...........GU FEI
Technical Address ...............FUZHOUGUANGCHANG29
Technical City...................FZ
Technical Province/State.........FJ
Technical Country Code ..........CN
Technical Postal Code ...........350019
Technical Phone Number ..........+86.059175695124
Technical Fax ...................+86.059175695124
Technical Email .................baijakdfe@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
firmvictor.com IN A 218.75.144.6 10800s (03:00:00)
firmvictor.com IN A 119.39.238.2 10800s (03:00:00)
firmvictor.com IN A 203.93.208.86 10800s (03:00:00)
firmvictor.com IN A 60.191.221.117 10800s (03:00:00)
firmvictor.com IN A 60.191.239.153 10800s (03:00:00)
firmvictor.com IN A 61.191.191.241 10800s (03:00:00)

WHOIS www.ruler-domains.com

WHOIS informations for ruler-domains.com

AboutUs: ruler-domains.com

Registration Service Provided By:

Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name:
ruler-domains.com

Administrative Contact:


Sergey Ryabov director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Technical Contact:

Sergey Ryabov  director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Registrant Contact:

Sergey Ryabov ()

Fax:

Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Status: Locked

Name Servers:

ns1.ruler-domains.com
ns2.ruler-domains.com

Creation date:
18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet! Increase visibility for this domain name by listing it atwww.whoisbusinesslistings.com

We reserve the right to modify these terms at any time. By submitting
this query, you agree to abide by these terms.
Version 6.3 4/3/2002

Websites linked from ruler-domains.com:

WHOIS informations for megastock.ru

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
http://www.ripn.net/about/servpol.html#3.2 (in Russian)
http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:
MEGASTOCK.RU
type: CORPORATE
nserver: ns.molot.ru.
nserver: ns.relsoft.ru.
nserver: ns.relsoftcom.ru.
state: REGISTERED, DELEGATED
org: Joint Stock Company “Computing Forces”
phone: +7 495 7274333
fax-no: +7 495 7274333
e-mail: shalopin@webmoney.ru
registrar: RUCENTER-REG-RIPN
created: 2001.03.24
paid-till: 2010.03.27
source: TC-RIPN

Last updated on 2009.07.26 18:01:10 MSK/MSD

Websites linked from megastock.ru:

Domain
ruler-domains.com
richisoftware2.com
castoholder.com

Address lookup

canonical name ruler-domains.com.
aliases
addresses 213.174.139.29

Domain Whois record

Queried whois.internic.net with “dom ruler-domains.com“…

   Domain Name: RULER-DOMAINS.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.RULER-DOMAINS.COM
   Name Server: NS2.RULER-DOMAINS.COM
   Status: clientTransferProhibited
   Updated Date: 17-may-2009
   Creation Date: 17-nov-2008
   Expiration Date: 17-nov-2010

>>> Last update of whois database: Sun, 26 Jul 2009 14:04:26 UTC <<<

Queried whois.enom.com with “ruler-domains.com“…

Visit AboutUs.org for more information about ruler-domains.com
<a href="http://www.aboutus.org/ruler-domains.com">AboutUs: ruler-domains.com</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: ruler-domains.com

Administrative Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Technical Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Registrant Contact:
   -
   Sergey Ryabov ()

   Fax:
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Status: Locked

Name Servers:
   ns1.ruler-domains.com
   ns2.ruler-domains.com

Creation date: 18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 213.174.139.29“…

% Information related to '213.174.136.0 - 213.174.139.255'

inetnum:        213.174.136.0 - 213.174.139.255
netname:        ADVANCEDHOSTERS-NET
descr:          Advanced Hosters
country:        US
admin-c:        AH36-RIPE
tech-c:         AH36-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
remarks:        Send abuse reports to abuse@advancedhosters.com
mnt-by:         ADVANCEDHOSTERS-MNT
mnt-lower:      ADVANCEDHOSTERS-MNT
mnt-routes:     ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090402
source:         RIPE

role:           ADVANCEDHOSTERS LIMITED
address:        THE MERIDIAN 4 COPTHALL HOUSE, STATION SQUARE, COVENTRY,
address:        WEST MIDLANDS, CV1 2FL, United Kingdom
org:            ORG-AH11-RIPE
e-mail:         ripe@advancedhosters.com
admin-c:        OAVO1-RIPE
tech-c:         OAVO1-RIPE
nic-hdl:        AH36-RIPE
changed:        ripe@advancedhosters.com 20090331
source:         RIPE

% Information related to '213.174.128.0/19AS39572'

route:          213.174.128.0/19
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

% Information related to '213.174.136.0/22AS39572'

route:          213.174.136.0/22
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

DNS records

DNS query for 29.139.174.213.in-addr.arpa returned an error from the server: NameError

name class type data time to live
ruler-domains.com IN A 213.174.139.29 86400s (1.00:00:00)
ruler-domains.com IN MX
preference: 10
exchange: mail.ruler-domains.com
86400s (1.00:00:00)
ruler-domains.com IN SOA
server: localhost.ruler-domains.com
email: root.ruler-domains.com
serial: 4
refresh: 10800
retry: 900
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
ruler-domains.com IN NS ns1.ruler-domains.com 86400s (1.00:00:00)
ruler-domains.com IN NS ns2.ruler-domains.com 86400s (1.00:00:00)

Traceroute

Tracing route to ruler-domains.com [213.174.139.29]

hop rtt rtt rtt ip address fully qualified domain name
1 2 4 10 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 1 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.1 et3-1.ibr03.dllstx3.theplanet.com
5 32 32 32 70.87.253.190 be.fd.5746.static.theplanet.com
6 32 33 32 206.223.115.120 10g.r0.eqix.ash.va.us.iptp.net
7 32 33 32 87.239.188.250
8 32 32 32 213.174.139.29

Trace complete

Service scan

FTP – 21 220 (vsFTPd 2.0.5)
500 OOPS: vsf_sysutil_recv_peek: no data
500 OOPS: child died
SMTP – 25 220 localhost.localdomain ESMTP Sendmail 8.13.8/8.13.8; Sun, 26 Jul 2009 10:02:28 -0400
HTTP – 80
POP3 – 110 +OK Dovecot ready.
IMAP – 143 * OK Dovecot ready.

— end —

Canadian Pharmacy – genericspharm.org

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


  1. happy-pills.net
  2. noprecriptiontablets.net
  3. pharmascop.com
  4. buyneurontin.com
  5. educationequipment.net
  6. genericspharm.org
  7. yourdose.net
  8. lamisil-store.com
  9. luvchat.com
  10. sitewisellc.com
  11. allpharmacyonline.com
  12. drugpurchase.com
  13. aciphex-drugstore.com
  14. www.pharmaorder.com
  15. original-doctor.com
  16. edsupport.info
  17. meds-without-prescription.com
  18. pillsforweight.com
  19. clomid-medication.com
  20. viagra-levitra.com
  21. rxplls.com
  22. generic-allegra.net
  23. zithromax-without-prescription.com
  24. canadian-medstore.com
  25. amerismart.org
  26. vigra.rx-ed.info
  27. cialis-buy.info
  28. viagra-100mg.net
  29. allpharmacyonline.net
  30. aciphex-drugstore.com
  31. buyneurontin.com
  32. pharmaorder.com
  33. drugspurchase.com
  34. genericspharm.org
  35. yourdose.net
  36. original-doctor.com
  37. viagra-100mg.net
  38. anxietyzoloft.com
  39. orccug.com
  40. ca-drugstore.com
  41. largestonlinepharmacy.com
  42. drugsdelivery.net
  43. amazing-drugs.com
  44. amoxicillinnoprescription.com
  45. officialpharmacy.com

happy-pills.net
noprecriptiontablets.net
pharmascop.com
buyneurontin.com
educationequipment.net
genericspharm.org
yourdose.net
lamisil-store.com
luvchat.com
sitewisellc.com
allpharmacyonline.com
drugpurchase.com
aciphex-drugstore.com
original-doctor.com
edsupport.info
meds-without-prescription.com
pillsforweight.com
clomid-medication.com
viagra-levitra.com
rxplls.com
generic-allegra.net
zithromax-without-prescription.com
canadian-medstore.com
amerismart.org
vigra.rx-ed.info
cialis-buy.info
viagra-100mg.net
allpharmacyonline.net
aciphex-drugstore.com
buyneurontin.com
pharmaorder.com
drugspurchase.com
genericspharm.org
yourdose.net
original-doctor.com
viagra-100mg.net
anxietyzoloft.com
orccug.com
ca-drugstore.com
largestonlinepharmacy.com
drugsdelivery.net
amazing-drugs.com
amoxicillinnoprescription.com
officialpharmacy.com

Address lookup

canonical name genericspharm.org.
aliases
addresses 85.17.177.196

Domain Whois record

Queried whois.publicinterestregistry.net with “genericspharm.org“…

Domain ID:D155629905-LROR
Domain Name:GENERICSPHARM.ORG
Created On:16-Mar-2009 17:52:09 UTC
Last Updated On:16-May-2009 03:52:27 UTC
Expiration Date:16-Mar-2010 17:52:09 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:cb61fa3d409
Registrant Name:Whois Agent
Registrant Organization:Nexton Limited
Registrant Street1:Irpinskaya 69
Registrant City:Kiev
Registrant State/Province:
Registrant Postal Code:03142
Registrant Country:UA
Registrant Phone:+380.993161649
Registrant Email:support@ruler-domains.com

Admin ID:cb61fa3d409
Admin Name:Whois Agent
Admin Organization:Nexton Limited
Admin Street1:Irpinskaya 69
Admin City:Kiev
Admin State/Province:
Admin Postal Code:03142
Admin Country:UA
Admin Phone:+380.993161649
Admin Email:support@ruler-domains.com

Tech ID:cb61fa3d409
Tech Name:Whois Agent
Tech Organization:Nexton Limited
Tech Street1:Irpinskaya 69
Tech City:Kiev
Tech State/Province:
Tech Postal Code:03142
Tech Country:UA
Tech Phone:+380.993161649
Tech Email:support@ruler-domains.com

Name Server:NS1.MEDICATIONS-ONLINE.CO.UK
Name Server:NS2.MEDICATIONS-ONLINE.CO.UK
Name Server:

Network Whois record

Queried whois.ripe.net with “-B 85.17.177.196“…

Information related to ‘85.17.177.0 – 85.17.177.255’

inetnum: 85.17.177.0 – 85.17.177.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070710
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘85.17.0.0/16AS16265’

route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE

DNS records

DNS query for genericspharm.org failed: WouldBlock

name class type data time to live
196.177.17.85.in-addr.arpa IN PTR belhost.biz 86400s (1.00:00:00)
SmartFilter Category: Not Categorized
Make Category Suggestions
IP: 85.17.177.196
Nameservers: ns1.kpv007.local
ns2.kpv007.local

Crime Canadian Pharmacy Spam Servers

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 58.17.3.41
60.191.221.123
60.191.239.166
61.191.191.241
203.93.208.86

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.agreecrop.com
dns3.deepworthy.com
dns3.drivefabled.com
dns3.fireideal.com
dns3.fullrail.com
dns3.headraise.com
dns3.leadspitch.com
dns3.littletrue.com
dns3.nationdimple.com
dns3.nationreap.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.nounstudy.com
dns3.personsuffix.com
dns3.pleaseself.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.replyvoice.com
dns3.ropebird.com
dns3.saidplan.com
dns3.shallcoat.com
dns3.tangyprime.com
dns3.towardhardy.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns4.agreecrop.com
dns4.buyvalued.com
dns4.camediffer.com
dns4.coursethey.com
dns4.createwere.com
dns4.dadfour.com
dns4.decidesmile.com
dns4.deepworthy.com

Canadian Pharmacy Spam – homevaried.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.18.238.145 Canada (Calgary)* Whois Google DNSStuff Urgentmessage.org
207.115.36.154 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Todd Hinkle Sat Jun 13 16:47:50 2009 Return-Path: todd.hinklexs@netron.cz
Authentication-Results: mta167.sbc.mail.mud.yahoo.com from=netron.cz; domainkeys=neutral (no sig); from=netron.cz; dkim=neutral (no sig) Received: from 66.18.238.145 (EHLO nlpi140.prodigy.net) (207.115.36.154) by mta167.sbc.mail.mud.yahoo.com with SMTP;
Sat, 13 Jun 2009 16:47:48 -0700 Received: from zjl05r3 (dsl-vlan458-66-18-238-145.nucleus.com [66.18.238.145]) by nlpi140.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5DNlSlm031067; Sat, 13 Jun 2009 18:47:47 -0500 Message-ID: <000701c9ec81$5c956240$4a37416a@netron.cz>
Reply-To: “Todd Hinkle” todd.hinklexs@netron.cz
From: “Todd Hinkle” todd.hinklexs@netron.cz
To: ScamFraudAlert
Subject: Get anti anxiety medications online!!
Date: Sat, 13 Jun 2009 18:47:50 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=”windows-1250″ reply-type=original Content-Transfer-Encoding: 7bit Content-Length: 136
An Incredible CanadianPharmacy is available at your Fingertips!
No Doctor Needed! Browse our SiteToday! -> http://homevaried.com

Address lookup

canonical name homevaried.com.
aliases
addresses 60.191.221.123
60.191.239.166
61.191.191.241
203.93.208.86
58.17.3.41

Domain Whois record

Queried whois.internic.net with “dom homevaried.com“…

   Domain Name: HOMEVARIED.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BEDPLAIN.COM
   Name Server: NS2.BEDPLAIN.COM
   Name Server: NS3.AGAINTAIL.COM
   Name Server: NS4.AGAINTAIL.COM
   Name Server: NS5.OUTMILK.IM
   Name Server: NS6.OUTMILK.IM
   Status: ok
   Updated Date: 10-jun-2009
   Creation Date: 10-jun-2009
   Expiration Date: 10-jun-2010

Last update of whois database: Thu, 18 Jun 2009 07:58:28 UTC <<<

Queried whois.namerich.cn with “homevaried.com“…

 DomainName : homevaried.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.OUTMILK.IM
Name Server......................NS3.AGAINTAIL.COM
Name Server......................NS1.BEDPLAIN.COM
Name Server......................NS6.OUTMILK.IM
Name Server......................NS4.AGAINTAIL.COM
Name Server......................NS2.BEDPLAIN.COM
Status...........................ok
Creation  Date ..................2009-06-10
Expiration Date .................2010-06-10
Last Update  Date ...............2009-06-10

Registrant ID ...................V-X-57187-12492
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............LONGSHABEILU12
Registrant City..................TianJin
Registrant Province/State .......TianJin
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.02251251685
Registrant Fax ..................+86.02251251685
Registrant Email ................xianeldb@126.com

Administrative ID ...............V-X-57187-12492
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........LONGSHABEILU12
Administrative City..............TianJin
Administrative Province/State ...TianJin
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.02251251685
Administrative Fax ..............+86.02251251685
Administrative Email ............xianeldb@126.com

Billing ID ......................V-X-57187-12492
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................LONGSHABEILU12
Billing City.....................TianJin
Billing Province/State ..........TianJin
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.02251251685
Billing Fax .....................+86.02251251685
Billing Email ...................xianeldb@126.com

Technical ID ....................V-X-57187-12492
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............LONGSHABEILU12
Technical City...................TianJin
Technical Province/State.........TianJin
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.02251251685
Technical Fax ...................+86.02251251685
Technical Email .................xianeldb@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.221.123“…

inetnum:      60.191.221.0 - 60.191.221.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd IDC Center
descr:
admin-c:      LW1143-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW1143-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-83285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 123.221.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
homevaried.com IN A 58.17.3.41 3600s (01:00:00)
homevaried.com IN A 60.191.239.166 3600s (01:00:00)
homevaried.com IN A 60.191.221.123 3600s (01:00:00)
homevaried.com IN A 61.191.191.241 3600s (01:00:00)
homevaried.com IN A 203.93.208.86 3600s (01:00:00)

— end —


Rx Partners Online Pharmacy Scam (stimul-media.com/stimul-cash.com)

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


This was brought to our attention that RxPartners are associated with 121Doc Affiliate which is also associated with Health Affiliate Network
________________________________

If you have a website with a focus on health and medicine, 121doc has an affiliate program that is worth exploring. The 121doc affiliate program is part of a larger affiliate program called the Health Affiliates Network. 121doc offers expert medical consultation in a large range of areas from weight loss and impotence to cardiovascular diseases. Patients come to the website and fill out information about their medical condition; the doctors of 121doc then give consultation and prescribe medicine as needed. The 121doc focus on consultation differentiates the site from many other competitors that prescribe medicine in a much less reliable format. The company is based in the U.K. but offers service all over the world. As an affiliate of 121Doc, you can promote popular products such as Cialis and Viagra. You get lifetime commissions, too, for 121doc customers that re-order products from the site, which is a huge plus. Every product that you promote through 121doc is name brand and clinically-certified.


Also See ThreatChaos


Other Domains Listed On Server:

  1. 0903.org
  2. 101drug.com
  3. 24viagra.com
  4. 40pills.com
  5. a-pills.com
  6. abcat.info
  7. accutane.biz
  8. achat-viagra-generique.com
  9. achetercialis.biz
  10. achetercialis.net
  11. achetercialissurinternet.com
  12. acheterdespilules.info
  13. acheterlevitra.biz
  14. acheterlevitra.net
  15. acheterpropecia.com
  16. acheterpropecia.net
  17. achetersildenafil.com
  18. achetertadalafil.com
  19. acheterviagra.biz
  20. acheterviagra.com
  21. acheterviagra.info
  22. acheterviagra.net
  23. acquisto-viagra.info
  24. acquistocialis.biz
  25. acquistocialis.net
  26. acquistoviagra.com
  27. acquistoviagra.net
  28. albumblog.info
  29. all4health.net
  30. allpills.info
  31. allpillsonline.net
  32. american-pharmacy-shop.com
  33. apotheke-ge.com
  34. articledash.com
  35. articlesafari.com
  36. articlesoup.com
  37. aupharma.com
  38. aviagra.net
  39. belekok.com
  40. best-buy-cialis.biz
  41. best-buy-levitra.biz
  42. best-buy-rx.org
  43. best-buy-viagra.biz
  44. best-quality-pills.com
  45. best-viagra-online.info
  46. bestbluepills.com
  47. bestedpills.com
  48. bestmedchoice.com
  49. bestmedsworld.com
  50. bestonlinepharmacy.biz
  51. bestpharm.org
  52. bestprice-edrx.com
  53. bestprice-pharmacy-online.com
  54. bestpricelovetabs.com
  55. bestviagra.org
  56. bestviagrapills.biz
  57. bettergenerics.com
  58. bill-my-card.com
  59. billmed.biz
  60. billtabs.biz
  61. billzchk.biz
  62. bisina.info
  63. blogfocus.info
  64. bluemagicpill.com
  65. bluepillsonline.biz
  66. bluepillsonline.com
  67. bluepillsonline.info
  68. bluepillsonline.net
  69. bluepillsonline.org
  70. bonerrx.com
  71. bonerrx.net
  72. bulkgeneric.info
  73. buy-canada.info
  74. buy-cheap-generic-viagra-online.com
  75. buy-cheap-generic-viagra-online.info
  76. buy-cheap-viagra-online.biz
  77. buy-europe.info
  78. buy-fast.info
  79. buy-pills-here.com
  80. buy-pills-on-line.com
  81. buy-prozac.us
  82. buy-tabs.com
  83. buy-viagra-for-love.info
  84. buy-viagra-on-line.net
  85. buy-viagra-uk.info
  86. buy-viagra.org
  87. buyaccutane.biz
  88. buycialishere.biz
  89. buycialisinuk.com
  90. buyedpills.com
  91. buygenericonline.info
  92. buygenericpropecia.info
  93. buylevitrahere.com
  94. buynowviagra.com
  95. buypillsonlinediscount.com
  96. buyrxpill.com
  97. buyusarx.com
  98. buyviagracialis.biz
  99. buyviagrahere.biz
  100. buyviagrainengland.com
  101. ca-drugstore.biz
  102. californiasexrx.com
  103. canada-generic.info
  104. canada-parmacy.com
  105. canadagenericviagra.com
  106. canadian-generic.info
  107. canadian-health-mall.com
  108. canadian-onlinepharmacy.info
  109. canadian-pharmacy-online.us
  110. canadianmeds2u.biz
  111. canadianpharmacy-ltd.net
  112. canadianprescriptionpharmacy.com
  113. carisoprodol-soma.info
  114. cashrx.biz
  115. caverta.org
  116. certified-drugs.com
  117. cesaonline.net
  118. cheap-generic.info
  119. cheap-online-generic-pharmacy.info
  120. cheap-pills-store.com
  121. cheap-viagra-24.com
  122. cheap-viagra-pills.com
  123. cheapapills.com
  124. cheapest-drug.org
  125. cheapest-drugs.org
  126. cheapest-generic-viagra.net
  127. cheapest-generic.info
  128. cheapestgeneric.info
  129. cheapestpharm.com
  130. cheapgeneric.info
  131. cheapgenericpharmacy.info
  132. cheappharma.info
  133. cheappricepills.com
  134. checkrx.biz
  135. cialis-bestellen.info
  136. cialis-generic.net
  137. cialis-kaufen.info
  138. cialis-sample.com
  139. cialis20mg.com
  140. cialischoice.com
  141. cialisgeneric.us
  142. cialisgenericviagra.info
  143. cialisgenericviagra.net
  144. cialisjoy.com
  145. cialiskaufen.biz
  146. cialiskaufen.net
  147. cialisnewzealand.com
  148. cialison-line.com
  149. cialison-line.info
  150. cialiss.info
  151. citrato-de-sildenafil.com
  152. classic-viagra.com
  153. clinix-es.com
  154. colmed.net
  155. com-price.info
  156. compracialis.biz
  157. compracialis.net
  158. comprarcialis.biz
  159. comprarcialisgenerico.com
  160. comprarecialis.biz
  161. comprarecialis.info
  162. comprarecialis.net
  163. comprarecialis.org
  164. comprarecialisgenerico.com
  165. comprarelepillole.info
  166. comprarelevitra.biz
  167. comprarelevitra.com
  168. comprarelevitra.info
  169. comprarelevitra.net
  170. comprarepropecia.biz
  171. comprarepropecia.com
  172. comprarepropecia.info
  173. comprarepropecia.net
  174. comprareviagra.biz
  175. comprareviagra.info
  176. comprareviagra.net
  177. comprareviagra.org
  178. comprarlevitra.biz
  179. comprarpropecia.biz
  180. comprarsildenafil.biz
  181. comprartadalafil.biz
  182. comprarviagra.biz
  183. comprarviagra24h.com
  184. comprarviagrawww.com
  185. compraviagra.biz
  186. comprepildoras.info
  187. consideryoursource.com
  188. dinopills.com
  189. discount-generic-cialis.info
  190. discount-levitra.com
  191. discountcaregivers.com
  192. discountgeneric.info
  193. discountsviagra.com
  194. discreetgeneric.info
  195. doroven.info
  196. doroven.org
  197. dorovey.org
  198. dr-plus.com
  199. drbluepill.net
  200. drugs-rx.org
  201. drugs-shopping.com
  202. drugs2006.com
  203. drugsale.org
  204. drugskingdom.com
  205. drugsshipping.com
  206. drugstobuy.com
  207. drugstore-4us.com
  208. drugstore-best.com
  209. drugstore4us.com
  210. drugstorefda.com
  211. drugstoretrust.com
  212. easy-pharmacy.net
  213. ed-choice.com
  214. ed-drugs.biz
  215. ed-drugs.us
  216. ed-drugsonline.com
  217. ed-generic.com
  218. ed-guru.com
  219. ed-guru.net
  220. ed-meds-online.com
  221. ed-ph.com
  222. ed-pharmacy.net
  223. ed-pillstore.com
  224. ed-selection.com
  225. ed-solution.biz
  226. ed-solution.com
  227. ed-sup.com
  228. ed-tablets.com
  229. ed-tabs.com
  230. edacquisto.com
  231. edapotheke.com
  232. edbuyonline.net
  233. edcomparison.com
  234. edcurepills.com
  235. edcustomer.com
  236. eddiscounts.com
  237. edealthchoices.com
  238. edendrugs.com
  239. edfriends.info
  240. edfriends.org
  241. edgenerics.com
  242. edgrouppills.com
  243. edhealthcenter.com
  244. edhealthdirect.com
  245. edhealthplus.com
  246. edhelp.biz
  247. edmedsidea.com
  248. edmedstore.com
  249. ednihon.com
  250. edpharmacy.info
  251. edpharmacydrugs.com
  252. edpharmsale.com
  253. edpharmshop.com
  254. edpharmshop.org
  255. edpillschoice.com
  256. edpillseu.com
  257. edpillsworld.com
  258. edpleasures.com
  259. edportu.com
  260. edportugal.com
  261. edselected-viagra.com
  262. edselected.net
  263. edselection.com
  264. edside.com
  265. edspain.com
  266. edtrusted.com
  267. enjoymeds.biz
  268. enjoymeds.com
  269. epharmacypro.com
  270. epicmedcare.com
  271. epills.org
  272. epillspro.com
  273. erbaslim.com
  274. erectiledrugs.us
  275. erectionforsale.com
  276. esfarma.com
  277. esfarmaciaonline.com
  278. eudrugstore.net
  279. express-medicines.com
  280. ezgenerics.com
  281. ezgenerics.info
  282. ezgenerics.net
  283. ezmedz.net
  284. caronna-dr-fabio-farmacia.com
  285. f5solution.com
  286. famousdrugstore.com
  287. famouspills.com
  288. farmacia-es.com
  289. farmacia-es.org
  290. farmacia-it.com
  291. farmaciaazul.com
  292. farmaciaazzurra.com
  293. farmaciaiberica.com
  294. farmaciainsvizzera.com
  295. farmacialusa.com
  296. fast-shipping.info
  297. fast-tablets.com
  298. fastgenerics.info
  299. fastmedz.com
  300. find-generic-viagra.info
  301. find-generic.info
  302. findgenericviagra.com
  303. firehotsite.com
  304. fjuck.org
  305. foto-women.com
  306. free-generic-viagra.info
  307. free-porn-downloads.net
  308. freegenericviagra.info
  309. frumil.com
  310. futuredrugservices.com
  311. g-enericviagra.info
  312. gcmedicine.com
  313. generalsdrugs.com
  314. generic–cialis.net
  315. generic-cialis-levitra-viagra.com
  316. generic-cialis-pharmacy.info
  317. generic-cialis-tadalafil.info
  318. generic-cialis-viagra-levitra.com
  319. generic-cialis-viagra-levitra.org
  320. generic-cialis-viagra-online-pharmacy.info
  321. generic-cialis-viagra-online.info
  322. generic-cialiss.info
  323. generic-levitra.biz
  324. generic-medication-online.info
  325. generic-offshore-pharmacy.info
  326. generic-online-pharmacy.info
  327. generic-online-store.com
  328. generic-pharmacy-online.info
  329. generic-pills-online.com
  330. generic-viagra-cialis-levitra.info
  331. generic-viagra-generique.com
  332. generic-viagra-online-pharmacy.info
  333. generic-viagra-prices.info
  334. generic-viagra-shop.com
  335. generic-viagra-sildenafil.info
  336. generic-viagra-tabs.info
  337. generic-viagras.info
  338. generic-viagras.net
  339. genericcialiss.info
  340. genericcialisuk.info
  341. genericocialis.info
  342. genericonlinestore.com
  343. genericoviagra.info
  344. genericpharmacy-rx.com
  345. genericpharmacy-rx.net
  346. genericpharmacydrug.com
  347. generics-drugs.com
  348. genericsaver.com
  349. genericsaver.net
  350. genericsofttabs.info
  351. genericspecialist.info
  352. genericspecialists.info
  353. genericssupplier-rx.com
  354. genericssupplier.net
  355. genericswanted.com
  356. generictadalafil.info
  357. genericviagra.us
  358. genericviagracialis.info
  359. genericviagras.info
  360. genericviagrauk.com
  361. genericworld.biz
  362. generisch-viagra.com
  363. generisch-viagra.net
  364. generischviagra.biz
  365. generischviagra.com
  366. get-cheap-pills.com
  367. getupsf.com
  368. global-online-pharmacy.com
  369. godpills.com
  370. goldencoinproductions.com
  371. gospelclinic.com
  372. greatabz.com
  373. greatpills.org
  374. gspotrx.com
  375. gymnasticsdivine.org
  376. health-for-men.com
  377. hehe-ny.org
  378. help24online.com
  379. hoodiadietrx.com
  380. hoodiatoday.com
  381. hoodiaweightlosstablets.com
  382. hosting-types.com
  383. hushpills.com
  384. india-generic.info
  385. india-pharmacy.net
  386. india-pharmacy.org
  387. indiadrug.org
  388. indiandrugs.biz
  389. indianpharmacies.org
  390. indianpharmacy.info
  391. indiapharmacy.biz
  392. indiarx.biz
  393. info-meds-guide.com
  394. ishere4u.com
  395. italiaed.com
  396. ivlon.com
  397. japan-rx.com
  398. japanexpressgeneric.com
  399. jessewhite2006.com
  400. jonespharmacy.com
  401. kamagra-generic-viagra.com
  402. lafarmaciaenlinea.com
  403. leavealegacy-lancaster.org
  404. legalgenerics.com
  405. levialis.com
  406. levitra-bestellen.info
  407. levitra-cialis-viagra.info
  408. levitra-cialis-viagra.org
  409. levitra-kaufen.info
  410. levitra-viagra-cialis.net
  411. levitrageneric.us
  412. levitrajoy.com
  413. leweekenddrug.com
  414. linkzpage.com
  415. livepharm.net
  416. livesexualpower.com
  417. longlovetabs.biz
  418. longlovetabs.com
  419. lovepills.us
  420. mail-order-generic-pharmacy.info
  421. maincanadianpharmacy.com
  422. manfriendly.com
  423. matmedical.com
  424. medcash.biz
  425. medextreme.biz
  426. medextreme.com
  427. medical-diet.biz
  428. medical-pill.biz
  429. medicanasfiables.com
  430. medicentr.info
  431. medicine-catalog.com
  432. medicineshop.biz
  433. medicomedrx.com
  434. medistore.org
  435. medpaid.biz
  436. medretailer.com
  437. meds-4us.com
  438. meds4all.net
  439. medsjoy.biz
  440. medsjoy.com
  441. medsmaster.net
  442. medspay.biz
  443. medsshop.org
  444. medviagra.net
  445. medzcash.biz
  446. medzorder.biz
  447. medzpay.biz
  448. meetmeatthefountain.com
  449. megapharm.biz
  450. menhealth-pharmacy.com
  451. menprocare.com
  452. menrxpills.com
  453. mens-pharmacy.net
  454. mensgenerics.com
  455. menspillstore.com
  456. menssexpills.org
  457. mexican-pharmacy-online.info
  458. minnesotahomecare.com
  459. my-medicine.net
  460. myphonline.com
  461. myrxmart.com
  462. mysecurebilling.com
  463. myworldsearch.org
  464. natamed.com
  465. newbreastsuccess.com
  466. no-prescription-online-pharmacy.info
  467. offshore-pharmacy.net
  468. offshorecialis.info
  469. offshoregeneric.info
  470. okmen.info
  471. on-drugstore.com
  472. on-linepharmacy.info
  473. online-canadian-pharmacy.org
  474. online-canadian-pharmacy.us
  475. online-generic-pharmacy.info
  476. online-generic.net
  477. online-pharmacy-generic.info
  478. onlinecanadianpharmacy.us
  479. onlinedrugscatalogue.com
  480. onlinegenericviagra.com
  481. onlinemedsshop.com
  482. onlinepharm.org
  483. onlinepharmacychoice.com
  484. onlinepharmacyfda.com
  485. onlinepharmacystore.com
  486. onlinepharmacytrusted.com
  487. onlinepharms.com
  488. onlinepills4all.com
  489. onlinesexpills.com
  490. onlytrustedtabs.com
  491. opendrugs.com
  492. order-cheap.info
  493. order-fast.info
  494. order-generic-viagra.info
  495. order-generic.info
  496. ordercheapdrugs.com
  497. orderedpills.com
  498. orderviagra24h.com
  499. ordinaviagra.org
  500. oregonsexrx.com
  501. overseasdrugstore.net
  502. p-cun.com
  503. pack3786.org
  504. paid4med.com
  505. paid4meds.biz
  506. paid4meds.com
  507. paid4pill.com
  508. paid4pills.com
  509. paid4tabs.com
  510. panaceadrugstore.com
  511. partners-dns.com
  512. pay4med.biz
  513. pay4medc.biz
  514. pay4meds.biz
  515. pay4medz.biz
  516. pay4pill.biz
  517. pay4pillz.biz
  518. pay4tabs.biz
  519. pay4tabz.biz
  520. payrx.biz
  521. penisvergroting.org
  522. perfectgenerics-rx.biz
  523. perfectgenerics-rx.com
  524. perfectgenerics-rx.net
  525. perfectgenerics.biz
  526. perfectgenerics.com
  527. perfectgenerics.info
  528. perfectgenerics.net
  529. perfectmenspill.com
  530. pharma-top.com
  531. pharma-top.org
  532. pharmacie-fr.org
  533. pharmacies-4us.com
  534. pharmacieviagra.com
  535. pharmacy-onlineshop.com
  536. pharmacy-pills-delivery.com
  537. pharmacy-sales-online.com
  538. pharmacy-style.com
  539. pharmacy-superstore.net
  540. pharmacy-xmas-sale.com
  541. pharmacynewlive.net
  542. pharmacywholesale.info
  543. pharmahere.com
  544. pharmakings.com
  545. pharmalinex.com
  546. pharmatrustgroup.com
  547. pharmshoponline.com
  548. pharmstore.org
  549. pharmtabs.com
  550. pill1.com
  551. pillauction.com
  552. pillgen.info
  553. pillhaus.com
  554. pills-are-us.com
  555. pills-center.com
  556. pills-choice.com
  557. pills-express.com
  558. pills-for-you.org
  559. pills-in.net
  560. pills-kingdom.com
  561. pills-kingdom.net
  562. pills-now.com
  563. pills777.com
  564. pillsample1.com
  565. pillsamples.com
  566. pillsamples.net
  567. pillschoice.com
  568. pillsclick.com
  569. pillsfm.biz
  570. pillsfm.com
  571. pillskingdom.com
  572. pillskingdom.net
  573. pillspharm.info
  574. pillssex.com
  575. pillsstore.us
  576. pillsu.com
  577. pillza.com
  578. pillzcash.biz
  579. pillzcheck.biz
  580. pillzmeds.biz
  581. planetafarmacia.com
  582. potenzfix.com
  583. prescription-generic-drugs.info
  584. privatebuyonline.com
  585. prolover.com
  586. propecia-online.com
  587. propeciahair.com
  588. purchase-meds.com
  589. purchasepill.com
  590. quality-generic-cialis.info
  591. qualitygeneric.info
  592. qualityrxmeds.com
  593. quick-shipping.info
  594. quick-tablets.com
  595. redrugstore.com
  596. refusetohide.com
  597. reliablemeds-rx.com
  598. reliablemedsrx.com
  599. relimeds.com
  600. rkmug.org
  601. robertprather.us
  602. robertyanagisawa.com
  603. rubicondevelopments.com
  604. rx-best-buy.org
  605. rx-buy.org
  606. rx-ed-sales.com
  607. rx-partners.biz
  608. rx-pharmacy-worldwide.com
  609. rx-power.info
  610. rx-sharedhost.com
  611. rx-trusted.com
  612. rx-white.com
  613. rx32.com
  614. rxalfa.com
  615. rxbestprice.org
  616. rxbills.biz
  617. rxbuy.org
  618. rxcare-global.com
  619. rxcare-global.net
  620. rxcaredrugs.com
  621. rxclubusa.com
  622. rxdeal.net
  623. rxdrugstore.biz
  624. rxdstore.com
  625. rxedtabs.com
  626. rxfeel.com
  627. rxfeeling.com
  628. rxgenericexpress.com
  629. rxgoodpharmacy.com
  630. rxhelp.biz
  631. rxmedsonline.net
  632. rxp-alive.com
  633. rxp-forever.com
  634. rxparty.com
  635. rxpbill.biz
  636. rxpcash.biz
  637. rxpcheck.biz
  638. rxpillsshop.com
  639. rxppay.biz
  640. rxpstore.com
  641. rxquarters.com
  642. rxreview.biz
  643. rxroll.com
  644. rxside.com
  645. rxstore.biz
  646. rxstuffs.com
  647. rxtabs.biz
  648. rxtop10.com
  649. rxtrusted.com
  650. safe-drugstore.com
  651. safe-supplier.com
  652. safegenerics.info
  653. search4pharmacy.info
  654. secureccpay.com
  655. securepharmacy.biz
  656. seekandgrab.com
  657. selected-generics.info
  658. selectedgenerics.info
  659. sensationdrugstore.com
  660. seriouspills.com
  661. sharpgenerics.com
  662. sharpmeds.info
  663. shopcialis.org
  664. shopsviagra.com
  665. shopsviagra.org
  666. shopviagracialis.com
  667. shopviagracialis.org
  668. shreya-life.com
  669. sildegen.com
  670. sildenafil-generic-viagra.info
  671. sildenafil-generic.info
  672. sildenafil-generique.com
  673. skyrxshop.com
  674. somaextreme.com
  675. spaindrugstore.com
  676. spankycams.com
  677. steelurk.com
  678. steroids-online.biz
  679. supermedsbuyonline.com
  680. superviagracialis.biz
  681. surerect.com
  682. tabcheck.biz
  683. tableta.org
  684. tabletsbuy.com
  685. tabletsstore.com
  686. tabpaid.biz
  687. tabpay.biz
  688. tabsbill.biz
  689. tabscash.biz
  690. tabscheck.biz
  691. tabspay.biz
  692. tabzbillz.biz
  693. tabzcahs.biz
  694. tabzcash.biz
  695. tabzchk.biz
  696. tadalafil-generic-cialis.info
  697. tadalafil-generic.info
  698. tadalafil-vardenafil.com
  699. takepill.com
  700. tbwskywarn.org
  701. telepharmasite.com
  702. texassexrx.com
  703. the-med-store.com
  704. theclinicpub.com
  705. theviagracheap.biz
  706. todaygenerics.info
  707. tolerancethroughknowledge.com
  708. tolerancethroughknowledge.org
  709. top-drugs.org
  710. top-drugstore.com
  711. top-drugstore.us
  712. top3rxpills.com
  713. topedmeds.com
  714. topmedicineonline.com
  715. topmedsshop.com
  716. tr-tabs.com
  717. trial-packs.com
  718. trialpackhere.net
  719. trusted-drugs-shop.com
  720. trusted-drugs.com
  721. trusted-pharmacy.com
  722. trusted-tabs.biz
  723. trusted-tabs.com
  724. trusted-tabs.net
  725. trustedgenericdrugs.com
  726. trustedmedsonline.org
  727. trustedpharmacy.org
  728. trustedpharmacyworld.com
  729. trustedrxpills.com
  730. trustedtablets.biz
  731. trustedtablets.com
  732. trustedtabletsworld.com
  733. trustedtabs-edrx.com
  734. trustedtabs-rx.com
  735. trustedtabs.biz
  736. trustedtabs.com
  737. trustedtabsrx.com
  738. trustepharmacy.org
  739. trustgenerics.info
  740. trusty-pharmacy.com
  741. uk-meds.org
  742. uk-pharmacy.net
  743. uk-viagra.info
  744. ukgeneric.info
  745. ukgenerics.com
  746. ukgenerics.net
  747. ukgenericviagra.com
  748. ultimatepillstore.com
  749. unvergesslichenacht.net
  750. us-onlinedrug.com
  751. us-viagra.us
  752. usanaturalhealth.com
  753. usapharmacyvip.com
  754. usgenericpills.com
  755. valuegenerics.info
  756. viagra-24.com
  757. viagra-barato.com
  758. viagra-barato.net
  759. viagra-bestellen.info
  760. viagra-buy-viagra-online.com
  761. viagra-drugs.com
  762. viagra-ed.biz
  763. viagra-ed.com
  764. viagra-generic-cialis.info
  765. viagra-generic-online.info
  766. viagra-generic-pharmacy.info
  767. viagra-generic-sildenafil.info
  768. viagra-generic-viagra.info
  769. viagra-generic.biz
  770. viagra-generico.org
  771. viagra-generique.com
  772. viagra-generique.net
  773. viagra-gratis.com
  774. viagra-hoodia.info
  775. viagra-kaufen.info
  776. viagra-levitra-xenical.com
  777. viagra-online-kaufen.com
  778. viagra-pharmacy-online.info
  779. viagra-sample.net
  780. viagra-samples.info
  781. viagra-shopping.com
  782. viagra-store.info
  783. viagra100mg.info
  784. viagra2000.com
  785. viagrabarato.biz
  786. viagracialisale.org
  787. viagracialishop.org
  788. viagracomparison.com
  789. viagracomprare.com
  790. viagracy.info
  791. viagraenespana.info
  792. viagraenligne.com
  793. viagrag.info
  794. viagragenerico.net
  795. viagragenerique.com
  796. viagragenerique.net
  797. viagrakaufen.biz
  798. viagran.info
  799. viagraon-line.com
  800. viagraon-line.info
  801. viagrasansordonnance.com
  802. viagraspharmacy.info
  803. viagrasuperstore.net
  804. viagrasurinternet.com
  805. viagratis.com
  806. viagratrade.com
  807. viagrav.info
  808. viagravendita.com
  809. viagraya.com
  810. vifrance.com
  811. vijapan.com
  812. vpluspharmacy.com
  813. washingtonsex.com
  814. washingtonsex.net
  815. washingtonsexbbw.com
  816. washingtonsexrx.com
  817. web-drug.biz
  818. webdrugshop.com
  819. webmedstore.info
  820. weightlosscentre.org
  821. westcoastmarriage.com
  822. win-shops.com
  823. wonderfulpharmacy.com
  824. world-pharmacy-online.com
  825. world-viagra.com
  826. world-wide-viagra.com
  827. worldexpressgeneric.com
  828. wwwrxshop.com
  829. xlbuyusarx.com
  830. yahoooy.com
  831. yanamodeling.com
  832. yes-generic.info
  833. yesgenerics.info
  834. you-cheap-drugstore.com
  835. yourpharmacare.com
  836. zenegra.org
  837. zenegra.us

____________________________________

[91.199.112.8]

  • trustedtablets.biz
  • NS5.VIAGRAVENDITA.COM
  • NS0.RX-SHAREDHOST.COM
  • NS1.RXP-HOSTING.COM
  • NS2.ALL4HEALTH.NET
  • NS1.PARTNERS-DNS.COM
  • NS2.TOPMEDSSHOP.COM
  • NS2.MYTOPPHARMACY.COM
  • NS1.ESFARMACIAONLINE.COM
  • NS0.RXP-HOSTING.COM
  • NS2.GENERICDRUGSON.NET
  • NS2.MEDICATIONS-ON.NET
  • DNS2.HEALTHPRODUCTSON.NET
  • NS3.EDPORTU.COM
  • LIVE.RXP-FOREVER.COM
  • WHATEVER.RXP-ALIVE.COM
  • NS2.EDPORTU.COM
  • NS4.EDPORTU.COM
  • ISA.STEELURK.COM
  • NS5.EDPORTU.COM
  • NS1.EDPORTU.COM
  • NS5.ESFARMACIAONLINE.COM
  • NS4.CESAONLINE.NET
  • NS3.ESFARMACIAONLINE.COM
  • NS2.VIAGRAVENDITA.COM
  • NS3.CESAONLINE.NET
  • NS4.ESFARMACIAONLINE.COM
  • NS4.VIAGRAVENDITA.COM
  • NS5.CESAONLINE.NET
  • NS2.DRUGS-ON.NET
  • NS2.CESAONLINE.NET
  • NS3.VIAGRAVENDITA.COM
  • NS2.PERFECTPHARM.COM
  • NS1.VIAGRAVENDITA.COM
  • NS2.ESFARMACIAONLINE.COM
  • NS1.CESAONLINE.NET
  • NS2.ONLINEMEDSSHOP.COM
  • NS2.TABLETSSTORE.COM
  • DNS2.ONLINEMEDSON.NE

28-Jan-2009 02:22 GMT | SR04

RX-PARTNERS.BIZ / partners-dns.com pill spam program

Checking server [whois.neulevel.biz]
Results:
Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok
Registrant ID: 549542340-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.441315167104
Registrant Facsimile Number: +44.441315167104
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1:
3rd Floor Prospero House,
241 Borough High St.
Billing Contact Address2:
241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1:
3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2:
241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Fri Nov 09 10:32:34 GMT 2007

  1. 91.199.112.7 always.rxp-alive.com
  2. 91.199.112.7 dns1.onlinemedson.net
  3. 91.199.112.7 eld.steelurk.com
  4. 91.199.112.7 ns0.partners-dns.com
  5. 91.199.112.7 ns1.acquistarecialis.info
  6. 91.199.112.7 ns1.all4health.net
  7. 91.199.112.7 ns1.bestpharm.org
  8. 91.199.112.7 ns1.comprareviagragenerico.info
  9. 91.199.112.7 ns1.genericdrugson.net
  10. 91.199.112.7 ns1.medicineshop.biz
  11. 91.199.112.7 ns1.medsshop.org
  12. 91.199.112.7 ns1.mytoppharmacy.com
  13. 91.199.112.7 ns1.onlinemedsshop.com
  14. 91.199.112.7 ns1.perfectpharm.com
  15. 91.199.112.7 ns1.pillsstore.us
  16. 91.199.112.7 ns1.rx-power.info
  17. 91.199.112.7 ns1.tabletsstore.com
  18. 91.199.112.7 ns1.topmedsshop.com
  19. 91.199.112.7 online.rxp-forever.com
  20. 91.199.112.8 dns2.onlinemedson.net
  21. 91.199.112.8 isa.steelurk.com
  22. 91.199.112.8 live.rxp-forever.com
  23. 91.199.112.8 ns0.rx-sharedhost.com
  24. 91.199.112.8 ns0.rxp-hosting.com
  25. 91.199.112.8 ns1.all4health.net
  26. 91.199.112.8 ns1.cesaonline.net
  27. 91.199.112.8 ns1.edportu.com
  28. 91.199.112.8 ns1.esfarmaciaonline.com
  29. 91.199.112.8 ns1.partners-dns.com
  30. 91.199.112.8 ns1.rx-sharedhost.com
  31. 91.199.112.8 ns1.rxp-hosting.com
  32. 91.199.112.8 ns1.viagravendita.com
  33. 91.199.112.8 ns2.acquistarecialis.info
  34. 91.199.112.8 ns2.all4health.net
  35. 91.199.112.8 ns2.bestpharm.org
  36. 91.199.112.8 ns2.cesaonline.net
  37. 91.199.112.8 ns2.comprareviagragenerico.info
  38. 91.199.112.8 ns2.edportu.com
  39. 91.199.112.8 ns2.esfarmaciaonline.com
  40. 91.199.112.8 ns2.genericdrugson.net
  41. 91.199.112.8 ns2.medicineshop.biz
  42. 91.199.112.8 ns2.medsshop.org
  43. 91.199.112.8 ns2.mytoppharmacy.com
  44. 91.199.112.8 ns2.onlinemedsshop.com
  45. 91.199.112.8 ns2.perfectpharm.com
  46. 91.199.112.8 ns2.pillsstore.us
  47. 91.199.112.8 ns2.rx-power.info
  48. 91.199.112.8 ns2.tabletsstore.com
  49. 91.199.112.8 ns2.topmedsshop.com
  50. 91.199.112.8 ns2.viagravendita.com
  51. 91.199.112.8 ns3.cesaonline.net
  52. 91.199.112.8 ns3.edportu.com
  53. 91.199.112.8 whatever.rxp-alive.com

  1. 91.199.112.7 always.rxp-alive.com
  2. 91.199.112.7 dns1.healthproductson.net
  3. 91.199.112.7 dns1.onlinemedson.net
  4. 91.199.112.7 eld.steelurk.com
  5. 91.199.112.7 ns0.partners-dns.com
  6. 91.199.112.7 ns1.acquistarecialis.info
  7. 91.199.112.7 ns1.all4health.net
  8. 91.199.112.7 ns1.bestpharm.org
  9. 91.199.112.7 ns1.comprareviagragenerico.info
  10. 91.199.112.7 ns1.drugs-on.net
  11. 91.199.112.7 ns1.genericdrugson.net
  12. 91.199.112.7 ns1.medications-on.net
  13. 91.199.112.7 ns1.medicineshop.biz
  14. 91.199.112.7 ns1.medsshop.org
  15. 91.199.112.7 ns1.mytoppharmacy.com
  16. 91.199.112.7 ns1.onlinemedsshop.com
  17. 91.199.112.7 ns1.perfectpharm.com
  18. 91.199.112.7 ns1.pillsstore.us
  19. 91.199.112.7 ns1.rx-power.info
  20. 91.199.112.7 ns1.rx-sharedhost.com
  21. 91.199.112.7 ns1.tabletsstore.com
  22. 91.199.112.7 ns1.topmedsshop.com
  23. 91.199.112.7 online.rxp-forever.com
  24. 91.199.112.8 dns2.healthproductson.net
  25. 91.199.112.8 dns2.onlinemedson.net
  26. 91.199.112.8 isa.steelurk.com
  27. 91.199.112.8 live.rxp-forever.com
  28. 91.199.112.8 ns0.rx-sharedhost.com
  29. 91.199.112.8 ns0.rxp-hosting.com
  30. 91.199.112.8 ns1.all4health.net
  31. 91.199.112.8 ns1.cesaonline.net
  32. 91.199.112.8 ns1.edportu.com
  33. 91.199.112.8 ns1.esfarmaciaonline.com
  34. 91.199.112.8 ns1.partners-dns.com
  35. 91.199.112.8 ns1.rx-sharedhost.com
  36. 91.199.112.8 ns1.rxp-hosting.com
  37. 91.199.112.8 ns1.viagravendita.com
  38. 91.199.112.8 ns2.acquistarecialis.info
  39. 91.199.112.8 ns2.all4health.net
  40. 91.199.112.8 ns2.bestpharm.org
  41. 91.199.112.8 ns2.cesaonline.net
  42. 91.199.112.8 ns2.comprareviagragenerico.info
  43. 91.199.112.8 ns2.drugs-on.net
  44. 91.199.112.8 ns2.edportu.com
  45. 91.199.112.8 ns2.esfarmaciaonline.com
  46. 91.199.112.8 ns2.genericdrugson.net
  47. 91.199.112.8 ns2.medications-on.net
  48. 91.199.112.8 ns2.medicineshop.biz
  49. 91.199.112.8 ns2.medsshop.org
  50. 91.199.112.8 ns2.mytoppharmacy.com
  51. 91.199.112.8 ns2.onlinemedsshop.com
  52. 91.199.112.8 ns2.perfectpharm.com
  53. 91.199.112.8 ns2.pillsstore.us
  54. 91.199.112.8 ns2.rx-power.info
  55. 91.199.112.8 ns2.tabletsstore.com
  56. 91.199.112.8 ns2.topmedsshop.com
  57. 91.199.112.8 ns2.viagravendita.com
  58. 91.199.112.8 ns3.cesaonline.net
  59. 91.199.112.8 ns3.edportu.com
  60. 91.199.112.8 whatever.rxp-alive.com