f8cheap-viagra.com

August 14, 2012Leave a comment

Address lookup
canonical name f8cheap-viagra.com.
aliases
addresses 70.38.11.59
Domain Whois record

Queried whois.internic.net with “dom f8cheap-viagra.com”…

Domain Name: F8CHEAP-VIAGRA.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.MEGABYTEHOSTING.COM
Name Server: NS2.MEGABYTEHOSTING.COM
Status: clientTransferProhibited
Updated Date: 07-aug-2012
Creation Date: 07-aug-2012
Expiration Date: 07-aug-2013

Last update of whois database: Wed, 15 Aug 2012 01:01:55 UTC
Queried whois.todaynic.com with “f8cheap-viagra.com

Domain name: f8cheap-viagra.com
Status: Active

Registrant:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005
Email: admin@r8cheap-viagra.com

Administrative Contact:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005
Phone: +7.3412437222
Fax: +7.3412437222
Email: admin@r8cheap-viagra.com

Technical Contact:
Name: Alexey
Organization: Dorenko
Address: Lenina 45-981
City: Izhevsk
Province/state: NA
Country: RU
Postal Code: 426005

Nameserver Information:
ns1.megabytehosting.com
ns2.megabytehosting.com

Create: 2012-08-07 16:07:03
Update: 2012-08-07
Expired: 2013-08-07
QueryTimes: 13

Network Whois record
Queried whois.arin.net with “n ! NET-70-38-11-32-1

NetRange: 70.38.11.32 – 70.38.11.63
CIDR: 70.38.11.32/27
OriginAS:
NetName: IWEB-CL-T111-01SH
NetHandle: NET-70-38-11-32-1
Parent: NET-70-38-0-0-1
NetType: Reassigned
RegDate: 2008-07-16
Updated: 2008-07-16
Ref: http://whois.arin.net/rest/net/NET-70-38-11-32-1

CustName: iWeb Dedicated CL2
Address: 5945, Couture
City: Montreal
StateProv: QC
PostalCode: H1P-1A8
Country: CA
RegDate: 2008-07-16
Updated: 2011-03-19
Ref: http://whois.arin.net/rest/customer/C01959552

OrgTechHandle: NETWO2356-ARIN
OrgTechName: Network Administrator
OrgTechPhone: +1-514-286-4242
OrgTechEmail: net-admin@noc.privatedns.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2356-ARIN

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName: Network Administrator
OrgNOCPhone: +1-514-286-4242
OrgNOCEmail: net-admin@noc.privatedns.com
OrgNOCRef: http://whois.arin.net/rest/poc/NETWO2356-ARIN

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName: Abuse Coordinator
OrgAbusePhone: +1-514-286-4242
OrgAbuseEmail: abuse@noc.privatedns.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1906-ARIN

DNS records
name class type data time to live
f8cheap-viagra.com IN TXT v=spf1 +a +mx +ip4:70.38.11.59 ?all 14400s (04:00:00)
f8cheap-viagra.com IN MX
preference: 0
exchange: f8cheap-viagra.com
14400s (04:00:00)
f8cheap-viagra.com IN SOA
server: ns1.megabytehosting.com
email: megabytehosting@gmail.com
serial: 2012080703
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
f8cheap-viagra.com IN NS ns1.megabytehosting.com 86400s (1.00:00:00)
f8cheap-viagra.com IN NS ns2.megabytehosting.com 86400s (1.00:00:00)
f8cheap-viagra.com IN A 70.38.11.59 14400s (04:00:00)
59.11.38.70.in-addr.arpa IN PTR not-assigned.privatedns.com 43200s (12:00:00)
11.38.70.in-addr.arpa IN SOA
server: ns1.iweb-hosting.com
email: hostmaster@iweb-hosting.com
serial: 2012081415
refresh: 3600
retry: 3600
expire: 604800
minimum ttl: 3600
43200s (12:00:00)
11.38.70.in-addr.arpa IN NS ns1.iweb-hosting.com 43200s (12:00:00)
11.38.70.in-addr.arpa IN NS ns2.iweb-hosting.com 43200s (12:00:00)

— end —

YOUR-GENERIC.COM

August 14, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.

Address lookup
canonical name your-generic.com
aliases
addresses 159.148.27.2
Domain Whois record

Queried whois.internic.net with “dom your-generic.com”…

Domain Name: YOUR-GENERIC.COM
Registrar: ASCIO TECHNOLOGIES, INC.
Whois Server: whois.ascio.com
Referral URL: http://www.ascio.com
Name Server: NS1.ALPHAHOST.LV
Name Server: NS2.ALPHAHOST.LV
Status: ok
Updated Date: 14-jul-2012
Creation Date: 09-dec-2011
Expiration Date: 09-dec-2012

Last update of whois database: Tue, 14 Aug 2012 18:12:03 UTC <
Queried whois.ascio.com with “your-generic.com”…

Registrant:
Oleg Gudzevatyj (1472282)
Avramenka 32, 5

Zaporizhzhya, , 0000
UA

Domain name: your-generic.com

Technical contact:
Tolvaisa, Viktoras (VT1472284)
OWEXX
Schlieper Str. 16

Berlin, Germany, 13507
DE
reg@hosting4web.eu
+370.65019120 Fax: +370.41550595

Administrative contact:
Tolvaisa, Viktoras (VT1472283)
OWEXX
Schlieper Str. 16

Berlin, Germany, 13507
DE
reg@hosting4web.eu
+370.65019120 Fax: +370.41550595

Record created: 2011-12-09 07:37:48
Record last updated: 2012-07-14 06:48:55
Record expires: 2012-12-09 07:37:00

Domain servers in listed order:
ns1.alphahost.lv (NS1ALPHA19612)
ns2.alphahost.lv (NS2ALPHA10480)

Network Whois record

Queried whois.ripe.net with “-B 159.148.27.2″…
Information related to ‘159.148.27.0 – 159.148.27.63’

inetnum: 159.148.27.0 – 159.148.27.63
netname: ATTISTIBASKOMPL
descr: Attistibas komplekss – ATTEKO SIA
country: LV
org: ORG-LA12-RIPE
admin-c: LN645-RIPE
tech-c: LN645-RIPE
status: ASSIGNED PA
mnt-by: LATNET-MNT
changed: hostmaster@latnet.lv 20070619
source: RIPE

organisation: ORG-LA12-RIPE
org-name: LATNET SERVISS Ltd.
org-type: LIR
descr: SIA Latnet Serviss
address: LATNET SERVISS SIA
Maskavas iela 240
LV1063 Riga
Latvia
phone: +37167186970
fax-no: +37167186969
e-mail: latnet@latnet.lv
abuse-mailbox: abuse@latnet.lv
admin-c: RB2548-RIPE
admin-c: UH246-RIPE
admin-c: UH246-RIPE
mnt-ref: AS2588-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: latnet-mnt
mnt-by: RIPE-NCC-HM-MNT

role: Latnet HostMaster
address: Latnet ISP
address: Latvia
phone: +371 67186970
fax-no: +371 67186968
e-mail: ripe@latnet.lv
remarks: trouble: Information: http://www.ls.lv
remarks: trouble: Questions — mailto:iproute@latnet.lv
remarks: trouble: Abuse reports — mailto:abuse@latnet.lv
org: ORG-LA12-RIPE
admin-c: UH246-RIPE
tech-c: RB2548-RIPE
nic-hdl: LN645-RIPE
abuse-mailbox: abuse@latnet.lv
notify: hostmaster@latnet.lv
mnt-by: AS2588-MNT
mnt-by: gclv-mnt
changed: hamins@latnet.lv 20041027
changed: kristine@latnet.lv 20051004
changed: hamins@latnet.lv 20070125
changed: hamins@latnet.lv 20070928
changed: hamins@latnet.lv 20080718
changed: uldis@latnetdc.lv 20120109
source: RIPE

% Information related to ‘159.148.0.0/16AS2588’

route: 159.148.0.0/16
descr: LATNET
origin: AS2588
notify: hostmaster@latnet.lv
mnt-by: AS2588-MNT
changed: janis@latnet.lv 19990315
changed: baiba@latnet.lv 20011029
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS2)

DNS records
name class type data time to live
your-generic.com IN SOA
server: ns1.alphahost.lv
email: webmaster@alphahost.lv
serial: 2012071701
refresh: 7200
retry: 3600
expire: 604800
minimum ttl: 86400
7200s (02:00:00)
your-generic.com IN NS ns2.alphahost.lv 7200s (02:00:00)
your-generic.com IN NS ns1.alphahost.lv 7200s (02:00:00)
your-generic.com IN MX
preference: 10
exchange: mx2.alphahost.lv
7200s (02:00:00)
your-generic.com IN MX
preference: 5
exchange: mx.alphahost.lv
7200s (02:00:00)
your-generic.com IN TXT v=spf1 a mx ~all 7200s (02:00:00)
your-generic.com IN TXT 7200s (02:00:00)
your-generic.com IN A 159.148.27.2 7200s (02:00:00)
2.27.148.159.in-addr.arpa IN PTR mx.alphahost.lv 7200s (02:00:00)
27.148.159.in-addr.arpa IN SOA
server: ns1.alphahost.lv
email: webmaster@alphahost.lv
serial: 2007040301
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 10800
7200s (02:00:00)
27.148.159.in-addr.arpa IN NS ns1.alphahost.lv 7200s (02:00:00)
27.148.159.in-addr.arpa IN NS ns2.alphahost.lv 7200s (02:00:00)

— end —

Name server: 173.192.194.78

Displaying items 1 to 100, out of a total of 146

Pharmacy Express – tpyvgnsioyn.naldmedic.ru

August 11, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Email Header Analysis

IP Address: 189.197.191.214 (customer-GDL-191-214.megared.net.mx)
IP Address Country: Mexico
IP Continent: North America
IP Address City Location: Durango
IP Address Region: Durango
IP Address Latitude: 24.0333,
IP Address Longtitude: -104.6667
Organization: Mega Cable, S.A. de C.V.

Address lookup
canonical name tpyvgnsioyn.naldmedic.ru
aliases
addresses 116.255.233.200
Domain Whois record

Queried whois.ripn.net with “naldmedic.ru”…

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain: NALDMEDIC.RU
nserver: ns1.dnssepar.com.
nserver: ns2.dnsdeadl.su.
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: REGRU-REG-RIPN
admin-contact: http://www.reg.ru/whois/admin_contact
created: 2012.08.02
paid-till: 2013.08.02
free-date: 2013.09.02
source: TCI

Last updated on 2012.08.11 21:50:46 MSK

Network Whois record

Queried whois.apnic.net with “116.255.233.200”…

inetnum: 116.255.128.0 – 116.255.255.255
netname: GIANT
descr: ZhengZhou GIANT Computer Network Technology Co., Ltd
descr: Room 701 Information Building NO.144 Garden Road, Zhenzhou
descr: Henan, P.R.China
country: CN
admin-c: XY506-AP
tech-c: XZ596-AP
status: ALLOCATED PORTABLE
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CN-GIANT
changed: ipas@cnnic.net.cn 20080611
source: APNIC

route: 116.255.128.0/17
descr: CNC Group CHINA169 Henan Province Network
descr: Addresses from CNNIC(GIANT)
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20070605
source: APNIC

person: Xiaolong Yang
nic-hdl: XY506-AP
e-mail: heibaizhuli@yahoo.com.cn
address: Room 701 Information Building NO.34 Garden Road, Zhenzhou
address: Henan, P.R.China 450000
phone: +86-0-13323839639
fax-no: +86-0371-63630797-85
country: CN
changed: ipas@cnnic.net.cn 20060117
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Xuyan Zhang
nic-hdl: XZ596-AP
e-mail: heibaizhuli@yahoo.com.cn
address: Room 701 Information Building NO.34 Garden Road, Zhenzhou
address: Henan, P.R.China 450000
phone: +86-0-13512750502
fax-no: +86-0371-63630797-85
country: CN
changed: ipas@cnnic.net.cn 20060117
mnt-by: MAINT-CNNIC-AP
source: APNIC

DNS records

DNS query for 200.233.255.116.in-addr.arpa returned an error from the server: NameError
name class type data time to live
tpyvgnsioyn.naldmedic.ru IN A 116.255.233.200 300s (00:05:00)
naldmedic.ru IN A 116.255.233.200 300s (00:05:00)
naldmedic.ru IN NS ns1.dnssepar.com 248627s (2.21:03:47)
naldmedic.ru IN NS ns2.dnsdeadl.su 248627s (2.21:03:47)

— end —

The following A records are set to 116.255.233.200:

dnscaptai.com
dnscertif.com
dnsdebtor.com
dnsgoelw.com
dnshospit.com
dnslatex.com
dnsmandol.com
dnsmegashop.com
dnssepar.com
dnsshadow.com
dnstemple.com
dnstextb.com
dnsvase.com
dnswebshosts.com
ebillonlineform.com
ebillwebform.com
efastbill.com
eglobalbilling.com
epayviaweb.com
fastxhoster.com
hostmara.com
hostrake.com
hostwebxca.com
igeondns.com
medicsing.com
ns1.dnscaptai.com
ns1.dnscertif.com
ns1.dnsdebtor.com
ns1.dnsgoelw.com
ns1.dnshospit.com
ns1.dnslatex.com
ns1.dnsmandol.com
ns1.dnsmegashop.com
ns1.dnssepar.com
ns1.dnsshadow.com
ns1.dnstemple.com
ns1.dnstextb.com
ns1.dnsvase.com
ns1.dnswebshosts.com
ns1.fastxhoster.com
ns1.hostmara.com
ns1.hostrake.com
ns1.hostwebxca.com
ns1.worldshosts.com
worldshosts.com

WhoIs www.dutypharmacy.com

August 7, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name dutypharmacy.com.
aliases
addresses 64.15.75.80
Domain Whois record

Queried whois.internic.net with “dom dutypharmacy.com”…

Domain Name: DUTYPHARMACY.COM
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DUTYPHARMACY.COM
Name Server: NS2.DUTYPHARMACY.COM
Status: clientTransferProhibited
Updated Date: 01-jul-2011
Creation Date: 16-may-2008
Expiration Date: 16-may-2013

Last update of whois database: Tue, 07 Aug 2012 16:40:52 UTC
Queried whois.joker.com with “dutypharmacy.com

domain: http://www.dutypharmacy.com
owner: – –
organization: Anatolii Larionov
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +49.11111111
admin-c: CCOM-1543215 mydomains@list.ru
tech-c: CCOM-1543218 mydomains@list.ru
billing-c: CCOM-1543218 mydomains@list.ru
nserver: ns1.dutypharmacy.com 64.15.75.80
nserver: ns2.dutypharmacy.com 64.15.75.80
status: lock
created: 2008-05-16 10:07:12 UTC
modified: 2011-07-01 09:44:06 UTC
expires: 2013-05-16 10:07:12 UTC
query-source: 209.200.73.210

contact-hdl: CCOM-1543215
person: – –
organization: Larionov, Anatolii
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +895.945535

contact-hdl: CCOM-1543218
person: – –
organization: Larionov, Anatolii
email: mydomains@list.ru
address: 12 Krasnoarmeiskay 2, Lit. A, of 2-H
city: St. Petersburg
state: —
postal-code: 190005
country: RU
phone: +895.945535

source: joker.com live whois service
query-time: 0.00795
db-updated: 2012-08-07 16:41:13
NOTE: By submitting a WHOIS query, you agree to abide by the

Network Whois record
Queried rwhois.netelligent.ca with “64.15.75.80”…

rwhois V-1.5:003eff:00 rwhois.netelligent.ca (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETEL-64.15.75.64-127
network:Auth-Area:64.15.75.0/26
network:Network-Name:NETELLIGENT-64.15.75.64-127
network:IP-Network:64.15.75.64/26
network:IP-Network-Block:64.15.75.64-127
network:Org-Name;I:Inferno Solutions
network:City:Minsk
network:Postal-Code:220000
network:Country-Code:BY
network:Tech-Contact;I:support@netelligent.ca
network:Admin-Contact;I:admin@netelligent.ca
network:Updated-By:admin@netelligent.ca

referral rwhois://root.rwhois.net:4321/auth-area=.
ok
Queried whois.arin.net with “n 64.15.75.80

NetRange: 64.15.64.0 – 64.15.79.255
CIDR: 64.15.64.0/20
OriginAS: AS10929
NetName: NETEL-ARIN-BLK01
NetHandle: NET-64-15-64-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
RegDate: 2005-11-18
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-15-64-0-1

OrgName: Netelligent Hosting Services Inc.
OrgId: NHS-31
Address: 1396 Franklin Drive
City: Laval
StateProv: QC
PostalCode: H7W-1K6
Country: CA
RegDate: 2005-03-09
Updated: 2012-03-01
Ref: http://whois.arin.net/rest/org/NHS-31

ReferralServer: rwhois://rwhois.netelligent.ca:4321

OrgAbuseHandle: NETEL2-ARIN
OrgAbuseName: Netelligent Abuse
OrgAbusePhone: +1-514-369-2209
OrgAbuseEmail: abuse@netelligent.ca
OrgAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

OrgTechHandle: NETEL1-ARIN
OrgTechName: Netelligent Ops
OrgTechPhone: +1-514-369-2209
OrgTechEmail: ops@netelligent.ca
OrgTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RNOCHandle: NETEL-ARIN
RNOCName: Netelligent Admin
RNOCPhone: +1-514-369-2209
RNOCEmail: admin@netelligent.ca
RNOCRef: http://whois.arin.net/rest/poc/NETEL-ARIN

RTechHandle: NETEL1-ARIN
RTechName: Netelligent Ops
RTechPhone: +1-514-369-2209
RTechEmail: ops@netelligent.ca
RTechRef: http://whois.arin.net/rest/poc/NETEL1-ARIN

RAbuseHandle: NETEL2-ARIN
RAbuseName: Netelligent Abuse
RAbusePhone: +1-514-369-2209
RAbuseEmail: abuse@netelligent.ca
RAbuseRef: http://whois.arin.net/rest/poc/NETEL2-ARIN

DNS records
name class type data time to live
dutypharmacy.com IN TXT v=spf1 ip4:178.170.250.20 ip4:64.15.75.80 a mx ~all 3600s (01:00:00)
dutypharmacy.com IN SOA
server: ns1.dutypharmacy.com
email: root@dutypharmacy.com
serial: 2011062026
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
dutypharmacy.com IN NS ns1.dutypharmacy.com 3600s (01:00:00)
dutypharmacy.com IN NS ns2.dutypharmacy.com 3600s (01:00:00)
dutypharmacy.com IN MX
preference: 10
exchange: mail.dutypharmacy.com
3600s (01:00:00)
dutypharmacy.com IN MX
preference: 20
exchange: mail.dutypharmacy.com
3600s (01:00:00)
dutypharmacy.com IN A 64.15.75.80 3600s (01:00:00)
80.75.15.64.in-addr.arpa IN PTR dutypharmacy.com 3600s (01:00:00)
75.15.64.in-addr.arpa IN SOA
server: dns02.netel.ca
email: hostmaster@netelligent.ca
serial: 2012012500
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
14400s (04:00:00)
75.15.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-08-17 12:02:03Z
signature inception: 2012-08-07 12:02:03Z
key tag: 5015
signer’s name: 64.in-addr.arpa
signature:
(1024 bits)

10800s (03:00:00)
75.15.64.in-addr.arpa IN NSEC
next domain name: 76.15.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
75.15.64.in-addr.arpa IN NS dns12.netelligent.ca 86400s (1.00:00:00)
75.15.64.in-addr.arpa IN NS dns11.netelligent.ca 86400s (1.00:00:00)

— end —

WhoIs cheaprxmedications.com

August 7, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Domain Dossier will continue with cheaprxmedications.com
Address lookup
canonical name cheaprxmedications.com
aliases
addresses 199.59.241.188
Domain Whois record

Queried whois.internic.net with “dom cheaprxmedications.com”…

Domain Name: CHEAPRXMEDICATIONS.COM
Registrar: DOMAINOS.CA INC.
Whois Server: whois.intrustdomains.com
Referral URL: http://www.domainos.ca
Name Server: NS1.BODIS.COM
Name Server: NS2.BODIS.COM
Status: ok
Updated Date: 05-dec-2011
Creation Date: 28-oct-2011
Expiration Date: 28-oct-2012

>>> Last update of whois database: Tue, 07 Aug 2012 16:36:03 UTC <<<

Queried whois.intrustdomains.com with "cheaprxmedications.com"…

All registrar data, including registrant WHOIS data, is provided for public, non-commerical use only. Any information made available by InTrust Domains and its affiliate registrars shall not be collected, distributed or used for any commercial activity. Third parties to agree not to use the data to allow, enable, or otherwise support any marketing activities, regardless of the medium used. Such media include but are not limited to e-mail, telephone, facsimile, postal mail, SMS, and wireless alerts.
Domain Name: CHEAPRXMEDICATIONS.COM
Created On: 28-OCT-2011
Last Updated On: 05-DEC-2011
Expiration Date: 28-OCT-2012
Sponsoring Registrar: DOMAINOS.CA INC.
Status: ok
Registrant Name: Intersolved Domains
Registrant Organization: Intersolved Domains
Registrant Street1: 11605 Meridian Market View Unit 124-134
Registrant Street2:
Registrant Street3:
Registrant City: Falcon
Registrant State/Province: Colorado
Registrant Postal Code: 80831
Registrant Country: US
Registrant Phone: ()719-377-2533
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: accounts@intersolved.com
Admin Name: Intersolved Domains
Admin Organization: Intersolved Domains
Admin Street1: 11605 Meridian Market View Unit 124-134
Admin Street2:
Admin Street3:
Admin City: Falcon
Admin State/Province: Colorado
Admin Postal Code: 80831
Admin Country: US
Admin Phone: ()719-377-2533
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: accounts@intersolved.com
Billing Name: Intersolved Domains
Billing Organization: Intersolved Domains
Billing Street1: 11605 Meridian Market View Unit 124-134
Billing Street2:
Billing Street3:
Billing City: Falcon
Billing State/Province: Colorado
Billing Postal Code: 80831
Billing Country: US
Billing Phone: ()719-377-2533
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: accounts@intersolved.com
Tech Name: Intersolved Domains
Tech Organization: Intersolved Domains
Tech Street1: 11605 Meridian Market View Unit 124-134
Tech Street2:
Tech Street3:
Tech City: Falcon
Tech State/Province: Colorado
Tech Postal Code: 80831
Tech Country: US
Tech Phone: ()719-377-2533
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: accounts@intersolved.com
Name Server: NS1.BODIS.COM
Name Server: NS2.BODIS.COM

Network Whois record

Queried whois.arin.net with "n 199.59.241.188"…

NetRange: 199.59.240.0 – 199.59.243.255
CIDR: 199.59.240.0/22
OriginAS: AS53665
NetName: BODIS-COM
NetHandle: NET-199-59-240-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-12-09
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-59-240-0-1

OrgName: Bodis, LLC
OrgId: BODIS-1
Address: Suite 502A-18825, Block A
Address: Shekou Technology Building 2
City: Shenzhen
StateProv: Nanshan District
PostalCode: 518067
Country: CN
RegDate: 2010-09-27
Updated: 2011-06-12
Ref: http://whois.arin.net/rest/org/BODIS-1

OrgAbuseHandle: BODIS2-ARIN
OrgAbuseName: Bodis Abuse
OrgAbusePhone: +86.76983060091
OrgAbuseEmail: abuse@bodis.com
OrgAbuseRef: http://whois.arin.net/rest/poc/BODIS2-ARIN

OrgNOCHandle: BODIS3-ARIN
OrgNOCName: Bodis Administrator
OrgNOCPhone: +86.76983060091
OrgNOCEmail: dnsadmin@bodis.com
OrgNOCRef: http://whois.arin.net/rest/poc/BODIS3-ARIN

OrgTechHandle: BODIS3-ARIN
OrgTechName: Bodis Administrator
OrgTechPhone: +86.76983060091
OrgTechEmail: dnsadmin@bodis.com
OrgTechRef: http://whois.arin.net/rest/poc/BODIS3-ARIN

RNOCHandle: BODIS3-ARIN
RNOCName: Bodis Administrator
RNOCPhone: +86.76983060091
RNOCEmail: dnsadmin@bodis.com
RNOCRef: http://whois.arin.net/rest/poc/BODIS3-ARIN

RTechHandle: BODIS3-ARIN
RTechName: Bodis Administrator
RTechPhone: +86.76983060091
RTechEmail: dnsadmin@bodis.com
RTechRef: http://whois.arin.net/rest/poc/BODIS3-ARIN

RAbuseHandle: BODIS2-ARIN
RAbuseName: Bodis Abuse
RAbusePhone: +86.76983060091
RAbuseEmail: abuse@bodis.com
RAbuseRef: http://whois.arin.net/rest/poc/BODIS2-ARIN

DNS records

DNS query for 188.241.59.199.in-addr.arpa returned an error from the server: ServerFailure
name class type data time to live
cheaprxmedications.com IN SOA
server: ns1.bodis.com
email: dnsadmin@bodis.com
serial: 2012072704
refresh: 10800
retry: 3600
expire: 777600
minimum ttl: 3600
10800s (03:00:00)
cheaprxmedications.com IN A 199.59.241.188 10800s (03:00:00)
cheaprxmedications.com IN NS ns2.bodis.com 10800s (03:00:00)
cheaprxmedications.com IN NS ns1.bodis.com 10800s (03:00:00)

— end —
URL for this output | return to CentralOps.net, a service of Hexillion

WhoIs mymedsdiet.com a/k/a Canadian Health & Care Mall

July 29, 20121 Comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name mymedsdiet.com
aliases
addresses 176.67.172.232
Domain Whois record

Queried whois.internic.net with “dom mymedsdiet.com

Domain Name: MYMEDSDIET.COM
Registrar: PSI-USA, INC. DBA DOMAIN ROBOT
Whois Server: whois.psi-usa.info
Referral URL: http://www.psi-usa.info
Name Server: NS1.MYMEDSDIET.COM
Name Server: NS2.MYMEDSDIET.COM
Status: clientTransferProhibited
Updated Date: 28-jul-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

Last update of whois database: Sun, 29 Jul 2012 18:52:12 UTC
Queried whois.psi-usa.info with “mymedsdiet.com”…

=============
PSI-USA, Inc.
=============
This is the PSI-USA, Inc. WHOIS server.
All requests are logged.

Requesting IP: 63.134.201.88
Requesting URL: http://whois.psi-usa.info
Requesting Object: domain mymedsdiet.com
Timestamp: 2012-07-29 20:52:45

domain: mymedsdiet.com
status: LOCK,TRANSFER-LOCK-60
owner-c: LULU-11609453
admin-c: LULU-11609453
tech-c: LULU-11609453
zone-c: LULU-11609453
nserver: ns1.mymedsdiet.com
nserver: ns2.mymedsdiet.com
created: 2012-07-09 21:36:29
expire: 2013-07-09 21:36:29 (registry time)
changed: 2012-07-28 22:05:16

[owner-c] handle: 11609453
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Elias
[owner-c] lname: Haapasalo
[owner-c] org:
[owner-c] address: Ulimarinpolku 61
[owner-c] city: Porsanmaki
[owner-c] pcode: 74550
[owner-c] country: FI
[owner-c] state: Porsanmaki
[owner-c] phone: +358-04188-02728
[owner-c] fax: +358-04188-02728
[owner-c] email: badajsky@evermail.org
[owner-c] protection: B
[owner-c] updated: 2012-07-09 21:36:19

[admin-c] handle: 11609453
[admin-c] type: PERSON
[admin-c] title:
[admin-c] fname: Elias
[admin-c] lname: Haapasalo
[admin-c] org:
[admin-c] address: Ulimarinpolku 61
[admin-c] city: Porsanmaki
[admin-c] pcode: 74550
[admin-c] country: FI
[admin-c] state: Porsanmaki
[admin-c] phone: +358-04188-02728
[admin-c] fax: +358-04188-02728
[admin-c] email: badajsky@evermail.org
[admin-c] protection: B
[admin-c] updated: 2012-07-09 21:36:19

[tech-c] handle: 11609453
[tech-c] type: PERSON
[tech-c] title:
[tech-c] fname: Elias
[tech-c] lname: Haapasalo
[tech-c] org:
[tech-c] address: Ulimarinpolku 61
[tech-c] city: Porsanmaki
[tech-c] pcode: 74550
[tech-c] country: FI
[tech-c] state: Porsanmaki
[tech-c] phone: +358-04188-02728
[tech-c] fax: +358-04188-02728
[tech-c] email: badajsky@evermail.org
[tech-c] protection: B
[tech-c] updated: 2012-07-09 21:36:19

[zone-c] handle: 11609453
[zone-c] type: PERSON
[zone-c] title:
[zone-c] fname: Elias
[zone-c] lname: Haapasalo
[zone-c] org:
[zone-c] address: Ulimarinpolku 61
[zone-c] city: Porsanmaki
[zone-c] pcode: 74550
[zone-c] country: FI
[zone-c] state: Porsanmaki
[zone-c] phone: +358-04188-02728
[zone-c] fax: +358-04188-02728
[zone-c] email: badajsky@evermail.org
[zone-c] protection: B
[zone-c] updated: 2012-07-09 21:36:19

Network Whois record
Queried whois.ripe.net with “-B 176.67.172.232
Information related to ‘176.67.172.0 – 176.67.172.255’

inetnum: 176.67.172.0 – 176.67.172.255
netname: UK2-INFRA-VPS-DOT-NET-FRANCE
descr: UK2 Infrastructure
country: GB
admin-c: BB963-RIPE
tech-c: BB963-RIPE
status: ASSIGNED PA
remarks: Abuse matters to: abuse@vps.net
remarks: Abuse mail to any other address may be ignored
mnt-by: AS13213-MNT
notify: hostmaster@uk2.net
changed: paul.death@uk2.net 20120416
source: RIPE

person: Bo Bendtsen
address: UK2.NET
address: One Canada Square, Canary Wharf
address: London
address: UK
phone: +44 20 7987 1200
fax-no: +44 20 7987 0449
e-mail: ripe@uk2.net
nic-hdl: BB963-RIPE
mnt-by: AS13213-MNT
changed: this@is.not.an.email.address 19991029
changed: this@is.not.an.email.address 20000510
changed: this@is.not.an.email.address 20000529
source: RIPE

Information related to ‘176.67.160.0/20AS13213
route: 176.67.160.0/20
descr: UK2.NET announcement
origin: AS13213
mnt-by: AS13213-MNT
changed: ripe@netsumo.com 20110614
source: RIPE

This query was served by the RIPE Database Query Service version 1.19 (WHOIS3)
DNS records
DNS query for 232.172.67.176.in-addr.arpa returned an error from the server: NameError
name class type data time to live
mymedsdiet.com IN SOA
server: ns1.mymedsdiet.com
email: admin@mymedsdiet.com
serial: 2009000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
mymedsdiet.com IN NS ns1.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN NS ns2.mymedsdiet.com 600s (00:10:00)
mymedsdiet.com IN MX
preference: 10
exchange: mail.mymedsdiet.com
600s (00:10:00)
mymedsdiet.com IN A 176.67.172.232 600s (00:10:00)

— end —

The following A records are set to 176.67.172.232:

acequrke.com
aircanadatablet.com
canadamedsgroup.com
caretabletgroup.com
childcaremeds.com
contabdrugstore.com
dietpillsale.com
drugstoreherbal.net
drugstorepillsgroup.com
dyecajor.com
familymedicineprescription.com
getusedsoft.com
healthcarejobstablet.net
healthcarerxhealth.com
healthrxhealthcare.com
hospitalcaretab.com
hospitalpills.com
levitrameds.com
medicalphpatients.com
medicaresrx.net
medsdietobesity.com
mymedsdiet.com
mymedtablet.com
mypharmacymed.com
mypharmacymedical.com

Edhelp.biz Whois Record

July 23, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name edhelp.biz.
aliases
addresses 85.95.236.136
Domain Whois record

Queried whois.biz with edhelp.biz

Domain Name: EDHELP.BIZ
Domain ID: D25749555-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Sponsoring Registrar IANA ID: 113
Registrar URL (registration services): whois.joker.com
Domain Status: clientTransferProhibited

Registrant ID: CNEU-173350
Registrant Name: Jessica Eagloff
Registrant Organization: RX Partners
Registrant Address1: 145-157 St John Street
Registrant Address2: 2nd Floor
Registrant City: London
Registrant State/Province: —
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: CNEU-184472
Administrative Contact Name: Jessica Eagloff
Administrative Contact Organization: RX Partners
Administrative Contact Address1: 145-157 St John Street
Administrative Contact Address2: 2nd Floor
Administrative Contact City: London
Administrative Contact State/Province: —
Administrative Contact Postal Code: EC1V 4PY
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.7005968172
Administrative Contact Facsimile Number: +44.441212888651
Administrative Contact Email: jessicaeagloff@yahoo.co.uk

Billing Contact ID: CNEU-174077
Billing Contact Name: Jessica Eagloff
Billing Contact Organization: RX Partners
Billing Contact Address1: 145-157 St John Street
Billing Contact Address2: 2nd Floor
Billing Contact City: London
Billing Contact State/Province: —
Billing Contact Postal Code: EC1V 4PY
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.7005968172
Billing Contact Email: jessicaeagloff@yahoo.co.uk

Technical Contact ID: CNEU-184474
Technical Contact Name: Jessica Eagloff
Technical Contact Organization: RX Partners
Technical Contact Address1: 145-157 St John Street
Technical Contact Address2: 2nd Floor
Technical Contact City: London
Technical Contact State/Province: —
Technical Contact Postal Code: EC1V 4PY
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.7005968172
Technical Contact Facsimile Number: +44.441212888651
Technical Contact Email: jessicaeagloff@yahoo.co.uk

Name Server: NS1.EVERY-GOOD.COM
Name Server: NS2.EVERY-GOOD.COM
Created by Registrar: ESTDOMAINS INC
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)

Whois database was last updated on: Mon Jul 23 16:45:05 GMT 2012
Network Whois record
Queried whois.ripe.net with “-B 85.95.236.136″…
Information related to ‘85.95.236.0 – 85.95.236.255’

inetnum: 85.95.236.0 – 85.95.236.255
netname: INETMAR
descr: inetmar internet Hizmetleri -izmir
remarks: *********************************************
remarks: *** Abuse Reports to: abuse@inetmar.com ***
remarks: *** This IP block is used for web hosting,***
remarks: *** dedicated and co-located servers. In ***
remarks: *** case of spam, please only deal with ***
remarks: *** originator IP only. ***
remarks: *** DO NOT DEAL WITH THE WHOLE IP BLOCK ***
remarks: *********************************************
country: TR
admin-c: DT2482-RIPE
tech-c: DT2482-RIPE
status: ASSIGNED PA
notify: abuse@inetmar.com
mnt-by: INETMAR-MNT
changed: deniz@inetmar.com 20100330
source: RIPE

person: Deniz Tosun
org: ORG-IiHS1-RIPE
address: 1370 sok. NO:42 Yalay Is Merkezi Kat:4/406
address: Montro/Konak/IZMIR
mnt-by: INETMAR-MNT
e-mail: deniz@inetmar.com
phone: +902324462396
fax-no: +902324462368
nic-hdl: DT2482-RIPE
changed: deniz.tosun@inetmar.com 20071218
source: RIPE

% Information related to ‘85.95.236.0/24AS49467’

route: 85.95.236.0/24
descr: INETMAR-IZMIR
origin: AS49467
mnt-by: INETMAR-MNT
changed: deniz@inetmar.com 20110118
source: RIPE

This query was served by the RIPE Database Query Service version 1.19 (WHOIS2)

DNS records

DNS query for 136.236.95.85.in-addr.arpa returned an error from the server: NameError
name class type data time to live
edhelp.biz IN A 85.95.236.136 1200s (00:20:00)
edhelp.biz IN SOA
server: ns1.every-good.com
email: root@every-good.com
serial: 2015526759
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
edhelp.biz IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-256 (8)
labels: 2
original ttl: 86400 (1.00:00:00)
signature expiration: 2012-08-21 04:54:41Z
signature inception: 2012-07-22 04:04:06Z
key tag: 23079
signer’s name: biz
signature:
(1024 bits)
86398s (23:59:58)
edhelp.biz IN NSEC
next domain name: edhelper.biz
record types: NS RRSIG NSEC
86398s (23:59:58)
edhelp.biz IN NS ns1.every-good.com 1200s (00:20:00)
edhelp.biz IN NS ns2.every-good.com 1200s (00:20:00)

— end —

Displaying items 1 to 15, out of a total of 15

http://caremedication.com/
http://cheap.rxfeel.com/
http://edhelp.biz/
http://enjoymeds.com/
http://europeaned.rxfeel.com/
http://hghgreen.com/
http://medsjoy.com/
http://pharmacy-pills-delivery.com/
http://pillsfm.biz/
http://rxfeel.com/
http://www.caremedication.com/
http://www.edhelp.biz/
http://www.herbs-for-potency.com/
http://www.pharmacy-pills-delivery.com/
http://www.trusted-tabs.com/

Name server: ns1.every-good.com

Displaying items 1 to 100, out of a total of 288

canadianviagrabuy.com

July 22, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name canadianviagrabuy.com
aliases
addresses 74.52.88.142
Domain Whois record

Queried whois.internic.net with “dom canadianviagrabuy.com”…

Domain Name: CANADIANVIAGRABUY.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.ZEOHOST.COM
Name Server: NS2.ZEOHOST.COM
Status: clientTransferProhibited
Updated Date: 07-jul-2012
Creation Date: 07-jul-2012
Expiration Date: 07-jul-2013

Last update of whois database: Sun, 22 Jul 2012 19:35:01 UTC
Queried whois.todaynic.com with “canadianviagrabuy.com”

Domain name: canadianviagrabuy.com
Status: Active

Protection Status: public

Registrant:
Name: James L. Ocallaghan
Organization: James L. Ocallaghan
Address: 558 Burnside Avenue
City: Salt Lake City
Province/state: YT
Country: US
Postal Code: 84104
Email: support@getviagraonline.net

Administrative Contact:
Name: James L. Ocallaghan
Organization: James L. Ocallaghan
Address: 558 Burnside Avenue
City: Salt Lake City
Province/state: YT
Country: US
Postal Code: 84104
Phone: +1.4357032191
Fax: +1.4357032191
Email: support@getviagraonline.net

Technical Contact:
Name: James L. Ocallaghan
Organization: James L. Ocallaghan
Address: 558 Burnside Avenue
City: Salt Lake City
Province/state: YT
Country: US
Postal Code: 84104

Nameserver Information:
ns1.zeohost.com
ns2.zeohost.com

Create: 2012-07-08 02:15:24
Update: 2012-07-08
Expired: 2013-07-08
QueryTimes: 18

Network Whois record
Queried rwhois.theplanet.com with 74.52.88.142

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-14
network:Auth-Area:74.52.0.0/14
network:Network-Name:TPIS-BLK-74-52-88-0
network:IP-Network:74.52.88.136/29
network:IP-Network-Block:74.52.88.136 – 74.52.88.143
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20070319
network:Updated:20100816

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 74.52.88.142″…

NetRange: 74.52.0.0 – 74.55.255.255
CIDR: 74.52.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-14
NetHandle: NET-74-52-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-02-17
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-74-52-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-822-4204
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-822-4204
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

DNS records
name class type data time to live
canadianviagrabuy.com IN TXT v=spf1 a mx include:websitewelcome.com ~all 14400s (04:00:00)
canadianviagrabuy.com IN MX
preference: 0
exchange: canadianviagrabuy.com
14400s (04:00:00)
canadianviagrabuy.com IN SOA
server: ns1.zeohost.com
email: root@chevette.websitewelcome.com
serial: 2012070901
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
canadianviagrabuy.com IN NS ns2.zeohost.com 86400s (1.00:00:00)
canadianviagrabuy.com IN NS ns1.zeohost.com 86400s (1.00:00:00)
canadianviagrabuy.com IN A 74.52.88.142 14400s (04:00:00)
142.88.52.74.in-addr.arpa IN PTR 8e.58.344a.static.theplanet.com 86400s (1.00:00:00)
88.52.74.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2012021900
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
88.52.74.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)
88.52.74.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)

— end —

viagraportalmedickrx.com

July 22, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name viagraportalmedickrx.com.
aliases
addresses 204.145.80.178
Domain Whois record

Queried whois.internic.net with “dom viagraportalmedickrx.com”…

Domain Name: VIAGRAPORTALMEDICKRX.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: NS1.FDWHOSTINGCO.COM
Name Server: NS2.FDWHOSTINGCO.COM
Status: clientTransferProhibited
Updated Date: 13-jul-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

>>> Last update of whois database: Sun, 22 Jul 2012 19:19:21 UTC <<<

Queried whois.internet.bs with “viagraportalmedickrx.com”…

Domain viagraportalmedickrx.com

Date Registered: 2012-7-9
Date Modified: 2012-7-13
Expiry Date: 2013-7-9

DNS1: ns1.fdwhostingco.com
DNS2: ns2.fdwhostingco.com

Registrant
Fundacion Private Whois
Domain Administrator
Email:4ffac804qrz7h71f@t02cduv4f7f99a255f64.privatewhois.net
Attn: viagraportalmedickrx.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Administrative Contact
Fundacion Private Whois
Domain Administrator
Email:4ffac804a9ez1rx2@t02cduv4f7f99a255f64.privatewhois.net
Attn: viagraportalmedickrx.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Technical Contact
Fundacion Private Whois
Domain Administrator
Email:4ffac8043cjmra8r@t02cduv4f7f99a255f64.privatewhois.net
Attn: viagraportalmedickrx.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/

Network Whois record

Queried whois.arin.net with “n ! NET-204-145-80-0-1″…

NetRange: 204.145.80.0 – 204.145.81.255
CIDR: 204.145.80.0/23
OriginAS: AS29838
NetName: AMC-WELINK-LGA4-1
NetHandle: NET-204-145-80-0-1
Parent: NET-204-145-64-0-1
NetType: Reassigned
RegDate: 2011-03-03
Updated: 2011-03-03
Ref: http://whois.arin.net/rest/net/NET-204-145-80-0-1

OrgName: We Link Networks LLC
OrgId: WLNL-1
Address: 349 5th Avenue
City: New York
StateProv: NY
PostalCode: 10016
Country: US
RegDate: 2010-12-21
Updated: 2011-11-30
Ref: http://whois.arin.net/rest/org/WLNL-1

OrgAbuseHandle: NETWO4098-ARIN
OrgAbuseName: Network Operations
OrgAbusePhone: +1-917-545-8194
OrgAbuseEmail: operations@welinknyc.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NETWO4098-ARIN

OrgNOCHandle: NETWO4098-ARIN
OrgNOCName: Network Operations
OrgNOCPhone: +1-917-545-8194
OrgNOCEmail: operations@welinknyc.com
OrgNOCRef: http://whois.arin.net/rest/poc/NETWO4098-ARIN

OrgTechHandle: NETWO4098-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-917-545-8194
OrgTechEmail: operations@welinknyc.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO4098-ARIN

DNS records
name class type data time to live
viagraportalmedickrx.com IN MX
preference: 0
exchange: viagraportalmedickrx.com
14400s (04:00:00)
viagraportalmedickrx.com IN SOA
server: ns1.fdwhostingco.com
email: root@server1.fdwhostingco.com
serial: 2012071301
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
viagraportalmedickrx.com IN NS ns2.fdwhostingco.com 86400s (1.00:00:00)
viagraportalmedickrx.com IN NS ns1.fdwhostingco.com 86400s (1.00:00:00)
viagraportalmedickrx.com IN A 204.145.80.178 14400s (04:00:00)
178.80.145.204.in-addr.arpa IN PTR welinknyc.dmarc.lga4.atlanticmetro.net 86400s (1.00:00:00)
80.145.204.in-addr.arpa IN SOA
server: dns1.nyc.dns-roots.net
email: hostmaster@atlanticmetro.net
serial: 2012070301
refresh: 3600
retry: 600
expire: 2419200
minimum ttl: 300
86400s (1.00:00:00)
80.145.204.in-addr.arpa IN NS dns1.lax0.dns-roots.net 86400s (1.00:00:00)
80.145.204.in-addr.arpa IN NS dns1.lga1.dns-roots.net 86400s (1.00:00:00)
80.145.204.in-addr.arpa IN NS dns1.ord0.dns-roots.net 86400s (1.00:00:00)
80.145.204.in-addr.arpa IN NS dns1.nj3.dns-roots.net 86400s (1.00:00:00)
80.145.204.in-addr.arpa IN NS dns1.nyc.dns-roots.net 86400s (1.00:00:00)

— end —

Name server: ns1.fdwhostingco.com

Displaying items 1 to 100, out of a total of 143

EVA Pharmacy

July 22, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

EVA Pharmacy & FIDELITY-NET.COM / Tripac International Ltd.

Spam for:
http://gacdehmfl.yourpils24.info/?bijkflxwwvygzctacdehm

Yet another EVA Pharmacy spam. The image at the bottom of the page say:
“Copyright EVA Pharmacy, 2000 – 2004, all rights reserved.”

Searching for unique text strings within the page yields the following:

==========

“I am truly enjoying my sexual rebirth. No more excuses, no more
frustration”

viagrastories.com/personal.shtml
setco.com/Viagra-for-low-sex-life.htm
fljkabh.pilsforhealth.info/ct/ index.php?page=testimonials&pid=_668
viagra-cialis-online.co.uk/ivf_viagra.html
orderviagra.biz/viagra/ english/wielangehltviagra.html
ineedpills.com/viagra-stories.htm

—–

“Cialis Soft Tabs enables you to respond spontaneously due to its longer
lasting effect up to 36 hours”

m-pharmacy.net/cialis-soft-tabs.htm
fljkabh.pilsforhealth.info/ ct/index.php?page=questions&pid=_668

—–

“Any our affiliate who SPAMS will have their account immediately
terminated and all monies earned will be suspended.”

efgmjacdhk.greatsekshealth.info/ hg/index.php?page=antispam&pid=_345
bfgikdhlm.pils4everyday.info/ vp/index.php?page=antispan&pid=_386
sexforlust.com/?page=antispam&pid=eph7382
fidelity-net.com/spam.htm
evameds.com/sm/index.php?page=antispan&pid=eph8620
masterjoy.biz/pp/index. php?page=antispam&pid=eph5653
evameds.biz/supergv/index. php?page=antispam&pid=eph3890
shop.evapharmacy.com/sm/?page=antispan&pid=
drbest.info/ct/index.php?page=antispan&pid=eph5616
dr-info.info/mm/index.php?page=antispan&pid=eph5653
powergra.com/antispampolicy.html

Note the weird phrasing “Any our affiliate who”… it comes up again later
in this post.

==========

dns yourpils24.info
Canonical name: yourpils24.info
Addresses:
222.47.183.120

==========

whois -h whois.completewhois.com yourpils24.info …
[DOMAIN whois information for YOURPILS24.INFO ]

Domain Name: YOURPILS24.INFO
Namespace: ICANN Unsponsored Generic TLD – http://www.icann.org
TLD Info: See IANA Whois – http://www.iana.org/root-whois/info.htm
Registry: Afilias LLC – http://www.afilias.info
Registrar: Tucows Inc. – http://domainhelp.tucows.com
Whois Server: whois.afilias.info
Name Server[from whois+dns, whois ip]: NS1.YOURPILS24.INFO
69.228.160.52
Name Server[from whois+dns, dns ip]: NS1.YOURPILS24.INFO 222.47.183.120
Name Server[whois+dns with ip] NS2.YOURPILS24.INFO 222.47.183.120
Status: ACTIVE
Status: OK
Creation Date: 28-Apr-2005 16:35:51 UTC
Updated Date: 18-May-2005 14:38:24 UTC
Expiration Date: 28-Apr-2006 16:35:51 UTC

[whois.afilias.info]
Domain ID: D10119209-LRMS
Domain Name: YOURPILS24.INFO
Created On: 28-Apr-2005 16:35:51 UTC
Last Updated On: 18-May-2005 14:38:24 UTC
Expiration Date: 28-Apr-2006 16:35:51 UTC
Sponsoring Registrar: R139-LRMS
Status: ACTIVE
Status: OK

Registrant ID: C9773590-LRMS
Registrant Name: Anna Nowicka
Registrant Organization: private
Registrant Street1: ul.Warszawska 2
Registrant City: Stare Babice
Registrant State/Province: na
Registrant Postal Code: 05082
Registrant Country: PL
Registrant Phone: +4.8227220622
Registrant Email: donstern47@yahoo.com

==========

IP Addresses:

222.47.183.120 (YOURPILS24.INFO, NS1.YOURPILS24.INFO)
http://www.spews.org/ask.cgi?x=222.47.183.120
http://www.spews.org/html/S1422.html

http://www.spamhaus.org/query/bl?ip=222.47.183.120
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL21980
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL24912
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL25609

—–

69.228.160.52 (NS1.YOURPILS24.INFO)
Not listed in SPEWS.

http://www.spamhaus.org/query/bl?ip=69.228.160.52
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL24129
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL25911

SBL24129:
“69.228.160.0/20 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Michael Lindsay /
iMedia Networks.”

SBL25911:
“69.228.160.52/32 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Michael Lindsay /
iMedia Networks.”

==========

QUESTIONS:
1) Who is FIDELITY-NET.COM?

From their website (http://www.fidelity-net.com/):
“Fidelity is an Internet Retailer for tangible and digital products and
services. Web businesses (suppliers/vendors) agree to sell their goods and
services to Fidelity for immediate resale to online customers. Fidelity
collects the proceeds from the sale, delivers the product and provides
online support to the customer.”

Also, from their website (http://www.fidelity-net.com/aboutus.htm):
“Suppliers continue to market and supply their products and content as
before. Fidelity uses its relationships with a number of financial
Institutions to provide a long term solution for suppliers who provide
adult entertainment, and distribute software, and other products through
the Internet.”

2) Why does FIDELITY-NET.COM have the exact same wording on their
anti-spam page as the Cialis spammer?

From http://www.fidelity-net.com/spam.htm:

==========

Got SPAM?
Report here

What is SPAM?
Any form of unsolicited advertising through email, newsgroups, IRC posts,
and/or instant messaging clients. Any SPAM complaint regarding a our
Affiliate is cause for immediate termination. This is a very serious
matter. DO NOT send email to anyone who has not made a specific request
for information.

What types of advertising are considered SPAM?
Bulk emailing (sending an email advertisement to persons listed on an
email address lead list). Advertising with bulk email services (companies
who will send an email advertisement to persons listed on an email address
lead list for you) will be grounds for immediate account termination.

Newsgroup Posting. Posting commercial messages is spam and any complaints
from newsgroup moderators about an affiliate will be grounds for immediate
account termination.

IRC/IM Clients Unsolicited messages through any media, including chat
rooms and instant messages is considered SPAM and will be grounds for
immediate account termination.

FAQ
Can I use a bulk email list from a company that sells the email addresses
of people who have previously agreed to join a mailing list?

No. The people on these lists may have forgotten that they joined, or
didn’t know what type of content that they were requesting when they
submitted their email address.

Can I avoid bulk emailing by sending my advertisements one at a time?

No, it’s not “bulk emailing,” but it will be received by people who have
not asked you for it, and that is considered SPAM.

What forms of advertising can your webmasters use?

Any form of advertising which targets legal sources of traffic are more
than welcome so long as they are not done via unsolicited means.

Are sales from Opt-in and/or Double Opt-in mailing lists acceptable?

Sales generated through the traffic sent from both single and double
opt-in mailing lists are UNacceptable.

Single Opt-in – With a single opt-in mailing list, an address is
automatically added to an email distribution list as soon as it’s
submitted.

Double Opt-in – With double opt-in, the submitted address is not
immediately added to this list. Instead, an email is first sent to the
address, requesting confirmation that this address should indeed be added
to the list.

What happens to your affiliates who choose to SPAM?
Any our affiliate who SPAMS will have their account immediately terminated
and all monies earned will be suspended.

==========

From http://gacdehmfl.yourpils24.info/ct/index.php?page=antispan&pid=:

==========

Got SPAM?
Report here

What types of advertising are considered SPAM?

* Bulk emailing (sending an email advertisement to persons listed on
an email address lead list). Advertising with bulk email services
(companies who will send an email advertisement to persons listed on an
email address lead list for you) will be grounds for immediate account
termination.

* Newsgroup Posting. Posting commercial messages is spam and any
complaints from newsgroup moderators about an affiliate will be grounds
for immediate account termination.

* IRC/IM Clients Unsolicited messages through any media, including
chat rooms and instant messages is considered SPAM and will be grounds for
immediate account termination.

FAQ
Can I use a bulk email list from a company that sells the email addresses
of people who have previously agreed to join a mailing list?
No. The people on these lists may have forgotten that they joined, or
didn’t know what type of content that they were requesting when they
submitted their email address.

Can I avoid bulk emailing by sending my advertisements one at a time?
No, it’s not “bulk emailing,” but it will be received by people who have
not asked you for it, and that is considered SPAM.

What forms of advertising can your webmasters use?
Any form of advertising which targets legal sources of traffic are more
than welcome so long as they are not done via unsolicited means.

Are sales from Opt-in and/or Double Opt-in mailing lists acceptable?
Sales generated through the traffic sent from both single and double
opt-in mailing lists are UNacceptable.

Single Opt-in – With a single opt-in mailing list, an address is
automatically added to an email distribution list as soon as it’s
submitted.

What happens to your affiliates who choose to SPAM?
Any our affiliate who SPAMS will have their account immediately terminated
and all monies earned will be suspended.

==========

dns FIDELITY-NET.COM
Mail for FIDELITY-NET.COM is handled by mx.fidelity-net.com
Canonical name: fidelity-net.com
Addresses:
205.214.216.110

whois -h whois.completewhois.com fidelity-net.com …
[DOMAIN whois information for FIDELITY-NET.COM ]

Domain Name: FIDELITY-NET.COM
Namespace: ICANN Unsponsored Generic TLD – http://www.icann.org
TLD Info: See IANA Whois – http://www.iana.org/root-whois/com.htm
Registry: VeriSign, Inc. – http://www.verisign-grs.com
Registrar: TUCOWS INC. – http://domainhelp.tucows.com
Whois Server: whois.opensrs.net
Name Server[whois+dns with ip] NS1.FIDELITY-NET.COM 205.214.216.110
Name Server[whois+dns with ip] NS2.FIDELITY-NET.COM 205.214.216.110
Status: ACTIVE
Updated Date: 30-jan-2005
Creation Date: 15-mar-2004
Expiration Date: 15-mar-2006

[whois.opensrs.net]
Registrant:
dns services
32 Altona Cr
Hornsby
Sydney, Nsw 2000
AU

Domain name: FIDELITY-NET.COM
Administrative Contact:
frankston, sam humpyhumpy@hotmail.com
32 Altona Cr
Hornsby
Sydney, Nsw 2000
AU
617363876389

==========

IP addresses:

205.214.216.110 (FIDELITY-NET.COM, NS1.FIDELITY-NET.COM,
NS2.FIDELITY-NET.COM)
Not listed in SPEWS.

http://www.spamhaus.org/query/bl?ip=205.214.216.110
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL19959

SBL19959:
“205.214.216.110/32 is listed on the Register Of Known Spam Operations
(ROKSO) database as being assigned to, under the control of, or providing
service to a known professional spam operation run by Tripac International
Limited.”

==========

—
When will the stalker kook SuN Tsu / BananaNanae / theBanana(tm) apologize
for his false accusations and spam-friendly behavior?
http://www.hillscapital.com/StalkerKookSuNTsu/
NANAE newbies: For your own protection you should kill-file Sun Tsu.

If you want to get the pages more quickly, you might guess that
the home base is at the IP address of the other nameserver. After
all of the spammer is using one nameserver as webhost, he may well
be doing the same for the other … so, let’s check.

Either add an entry to one’s hosts file forcing gacdehmfl.yourpils24.info
to resolve to IP address 69.228.160.52 or use a programme like curl
which permits one to specifiy the “Host:” header (hostname) and
go to a particular address or use telnet and do things manually or …
(e.g. curl -H “Host: gacdehmfl.yourpils24.info” “http://69.228.160.52/?bijkflxwwvygzctacdehm”)

* Connected to 69.228.160.52
Host: gacdehmfl.yourpils24.info

and one finds the site up there (it redirects to
“ct/index.php?pid=_110 so one can get to the
content page directly using
curl -H “Host: gacdehmfl.yourpils24.info” “http://69.228.160.52/ct/index.php?pid=_110”
for example)

OrgName: Pac Bell Internet Services
OrgID: PACB
CIDR: 69.224.0.0/12
CustName: Mini VOIP Systems
CIDR: 69.228.160.0/20
69.228.160.52 is found in sbl.spamhaus.org
Lists “known spammers, spam gangs or spam support services.”
Ref: SBL25911

69.228.160.52/32 is listed on the Register Of Known Spam Operations (ROKSO)
database as being assigned to, under the control of, or providing service to a
known professional spam operation run by Michael Lindsay / iMedia Networks.

It has been here for awhile (at one time, he lost his China hosted
web site and had the nameserver resolve his spamvertized sites
actually to IP address 69.228.160.52 if I recall correctly).
The Spamvertized URL has varied in location, different china sites,
e.g. 202.99.172.156, 210.51.2.148 and others, but the “home base” seems
“protected” on Pac Bell.

pharcharmy.us

July 22, 20121 Comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name pharcharmy.us
aliases
addresses 95.211.161.198
Domain Whois record

Queried whois.nic.us with “pharcharmy.us

Domain Name: PHARCHARMY.US
Domain ID: D27689718-US
Sponsoring Registrar: ENOM, INC.
Registrar URL (registration services): whois.enom.com
Domain Status: ok
Registrant ID: 5B971C12D890F923
Registrant Name: Richard Manchal
Registrant Organization: –
Registrant Address1: 112 W. 32th Street, 24 floor
Registrant City: New York
Registrant State/Province: NY
Registrant Postal Code: 10019
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.5305771935
Registrant Email: mynewsmail@yahoo.com
Registrant Application Purpose: P3
Registrant Nexus Category: C11

Administrative Contact ID: D1787B2E998AA1E5
Administrative Contact Name: Sergey Ryabov
Administrative Contact Organization: Ruler-Domains
Administrative Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Administrative Contact City: Saint-Petersburg
Administrative Contact State/Province: RU
Administrative Contact Postal Code: 197375
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +7.9219270961
Administrative Contact Email: support@ruler-domains.com
Administrative Application Purpose: P3
Administrative Nexus Category: C11

Billing Contact ID: D1787B2E998AA1E5
Billing Contact Name: Sergey Ryabov
Billing Contact Organization: Ruler-Domains
Billing Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Billing Contact City: Saint-Petersburg
Billing Contact State/Province: RU
Billing Contact Postal Code: 197375
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +7.9219270961
Billing Contact Email: support@ruler-domains.com
Billing Application Purpose: P3
Billing Nexus Category: C11

Technical Contact ID: D1787B2E998AA1E5
Technical Contact Name: Sergey Ryabov
Technical Contact Organization: Ruler-Domains
Technical Contact Address1: 197375, Scherbakova st. 6-38, Saint-Petersburg, Russia
Technical Contact City: Saint-Petersburg
Technical Contact State/Province: RU
Technical Contact Postal Code: 197375
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +7.9219270961
Technical Contact Email: support@ruler-domains.com
Technical Application Purpose: P3
Technical Nexus Category: C11

Name Server: NS1.DNS-SERVICE.BIZ
Name Server: NS2.DNS-SERVICE.BIZ
Name Server: NS3.NS-HOSTING.ORG
Name Server: NS4.NS-HOSTING.ORG

Created by Registrar: ENOM, INC.
Last Updated by Registrar: ENOM, INC.
Domain Registration Date: Sat Jun 12 12:22:21 GMT 2010
Domain Expiration Date: Tue Jun 11 23:59:59 GMT 2013
Domain Last Updated Date: Mon Jul 09 09:46:09 GMT 2012

Whois database was last updated on: Sun Jul 22 18:12:36 GMT 2012
Network Whois record

Queried whois.ripe.net with “-B 95.211.161.198″…
Information related to ‘95.211.161.0 – 95.211.161.255’

inetnum: 95.211.161.0 – 95.211.161.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20090201
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

Information related to ‘95.211.0.0/16AS16265’

route: 95.211.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20090205
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19 (WHOIS4)

DNS records
name class type data time to live
pharcharmy.us IN A 95.211.161.198 60s (00:01:00)
pharcharmy.us IN SOA
server: pharcharmy.us
email: root@pharcharmy.us
serial: 1342171080
refresh: 10800
retry: 3600
expire: 3600000
minimum ttl: 86400
60s (00:01:00)
pharcharmy.us IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 2
original ttl: 86400 (1.00:00:00)
signature expiration: 2012-08-14 16:25:07Z
signature inception: 2012-07-15 16:21:18Z
key tag: 48615
signer’s name: us
signature:
(1024 bits)

86400s (1.00:00:00)
pharcharmy.us IN NSEC
next domain name: phardy.us
record types: NS RRSIG NSEC
86400s (1.00:00:00)
pharcharmy.us IN NS 173.192.194.78 60s (00:01:00)
pharcharmy.us IN NS 94.102.55.100 60s (00:01:00)
198.161.211.95.in-addr.arpa IN PTR hosted-by.leaseweb.com 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.com
serial: 2012061105
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
161.211.95.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-08-21 10:01:58Z
signature inception: 2012-07-22 09:01:58Z
key tag: 8236
signer’s name: 95.in-addr.arpa
signature:
(1024 bits)

7200s (02:00:00)
161.211.95.in-addr.arpa IN NSEC
next domain name: 162.211.95.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
161.211.95.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
161.211.95.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)

— end —

http://akaltd.com/
http://alfageneric.com/
http://canadianmedicalgroup.com/
http://cheappills.biz/
http://do-not-get-sick.com/
http://drug–shop.com/
http://drug-broker.com/
http://drugspick.com/
http://drugstax.com/
http://drugstore-rx.com/
http://fastpillstore.com/
http://grand-pills.com/
http://grandmedshop.com/
http://grandpills.com/
http://healthheadlines.biz/
http://humanhealth.biz/
http://imed-s.com/
http://ipharmacystore.com/
http://md-pill.com/
http://med–shop.com/
http://med24store.com/
http://medsglobalrx.com/
http://medshop-pro.com/
http://neweffectpill.com/
http://online–rx.com/
http://online-prescription-pharmacy.com/
http://onlinepharmacyforall.com/
http://ordergenericcialis.org/
http://oxmeds.com/
http://ph-rx.com/
http://ph4md.com/
http://pharca.com/
http://pharcharmy.us/
http://pharmacy–store.com/
http://pharmacypillsx.com/
http://pharmacyreal.net/
http://rx-mix.com/
http://rx-q.com/
http://rxrvu.com/
http://secondaid.net/
http://support-rx.com/
http://trustonlinemeds.com/
http://vmedall.com/
http://we-will-help-you.com/
http://westdrugstore.com/
http://www.alfageneric.com/
http://www.americanpillsonline.com/
http://www.azepilloq.com/
http://www.best-5-htp.com/
http://www.canada-pharmacy-24h.com/
http://www.canadianmedicalgroup.com/
http://www.canadianpharcharmy.com/
http://www.cheappills.biz/
http://www.do-not-get-sick.com/
http://www.drug–shop.com/
http://www.drugs-prescription-online.com/
http://www.drugspick.com/
http://www.drugstax.com/
http://www.drugstore-rx.com/
http://www.efficultyr.com/
http://www.farmaword2012.com/
http://www.fastpillstore.com/
http://www.grand-pills.com/
http://www.grandmedshop.com/
http://www.grandpills.com/
http://www.healthheadlines.biz/
http://www.humanhealth.biz/
http://www.imed-s.com/
http://www.ipharmacystore.com/
http://www.md-pill.com/
http://www.med–shop.com/
http://www.medshop-pro.com/
http://www.nearestdrugstore.com/
http://www.online–rx.com/
http://www.online-prescription-pharmacy.com/
http://www.onlinepharmacyforall.com/
http://www.ordergenericcialis.org/
http://www.oxmeds.com/
http://www.ph-rx.com/
http://www.pharca.com/
http://www.pharcharmy.us/
http://www.pharmacy–store.com/
http://www.pilltobereal.com/
http://www.rx-mix.com/
http://www.rxrvu.com/
http://www.secondaid.net/
http://www.trustonlinemeds.com/
http://www.we-will-help-you.com/
http://www.westdrugstore.com/
http://www.your-generic.com/
http://your-generic.com/

Yambo Financials – yambobank.com/www.yambo.biz

July 22, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Yambo Financials Ltd (United Kingdom)

http://www.google.com/groups?selm=9ryEa.59163%24da1.8653%40nwrddc03.gnilink.net
http://www.google.com/groups?&num=100&as_q=Yambo+Financials
http://www.google.com/groups?num=100&q=yambocards.com&btnG=Google+Search

And the tread starting with:
http://www.google.com/groups?selm=3f00d69b%240%24206%2475868355%40news.frii.net

Also:
http://forum.yambo.biz

http://www.spews.org/html/S1514.html
2, 65.61.128.0 – 65.61.190.255, Rackspace (skylist.net)

http://www.spews.org/html/S2547.html
1, 216.180.242.250, e-bulk.net (caleb.host2010.com) (dead?)
2, 216.180.242.0/25, e-bulk.net (dv2.net)

http://www.spews.org/html/S2591.html

1, 69.65.0.0 – 69.65.63.255, foonet.net / CREATIVE INTERNET TECHNIQUES
(ASN’d)

Domain Name: YAMBO.BIZ
Domain ID: D2914606-BIZ
Sponsoring Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Domain Status: ok
Registrant ID: IMG-495311
Registrant Name: Customer Support
Registrant Organization: Yambo Financials Ltd.
Registrant Address1: 14 Hook Road
Registrant City: Epsom
Registrant State/Province: Not Applicable
Registrant Postal Code: 19KT 8TH
Registrant Country: Great Britain (UK)
Registrant Country Code: GB
Registrant Phone Number: +44.8719008667
Registrant Facsimile Number: +44.8719008668
Registrant Email: support@yambo.biz
Administrative Contact ID: IMG-495311
Administrative Contact Name: Customer Support
Administrative Contact Organization: Yambo Financials Ltd.
Administrative Contact Address1: 14 Hook Road
Administrative Contact City: Epsom
Administrative Contact State/Province: Not Applicable
Administrative Contact Postal Code: 19KT 8TH
Administrative Contact Country: Great Britain (UK)
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.8719008667
Administrative Contact Facsimile Number: +44.8719008668
Administrative Contact Email: support@yambo.biz
Billing Contact ID: IMG-495311
Billing Contact Name: Customer Support
Billing Contact Organization: Yambo Financials Ltd.
Billing Contact Address1: 14 Hook Road
Billing Contact City: Epsom
Billing Contact State/Province: Not Applicable
Billing Contact Postal Code: 19KT 8TH
Billing Contact Country: Great Britain (UK)
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.8719008667
Billing Contact Facsimile Number: +44.8719008668
Billing Contact Email: support@yambo.biz
Technical Contact ID: IMG-495311
Technical Contact Name: Customer Support
Technical Contact Organization: Yambo Financials Ltd.
Technical Contact Address1: 14 Hook Road
Technical Contact City: Epsom
Technical Contact State/Province: Not Applicable
Technical Contact Postal Code: 19KT 8TH
Technical Contact Country: Great Britain (UK)
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.8719008667
Technical Contact Facsimile Number: +44.8719008668
Technical Contact Email: support@yambo.biz
Name Server: UDNS1.ULTRADNS.NET
Name Server: UDNS2.ULTRADNS.NET
Name Server: NS0.XNAME.ORG
Name Server: NS2.YAMBO.BIZ
Name Server: NS1.YAMBO.BIZ
Name Server: NS1.XNAME.ORG
Created by Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Last Updated by Registrar: INTERCOSMOS MEDIA GROUP,
INC. D.B.A. DIRECTNIC.COM
Domain Registration Date: Thu Apr 11 12:35:11 GMT 2002
Domain Expiration Date: Sat Apr 10 23:59:59 GMT 2004
Domain Last Updated Date: Sun Nov 16 09:40:14 GMT 2003

> whois -h whois.directnic.com yambocs.com
Domain Name: YAMBOCS.COM

Registrant:
Yambo Financials Ltd.
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Administrative Contact:
Technical Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Record last updated 06-25-2003 03:49:22 AM
Record expires on 10-03-2008
Record created on 10-03-2002

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 64.191.95.60
NS0.XNAME.ORG 195.20.105.149
NS1.XNAME.ORG 213.133.115.5
UDNS1.ULTRADNS.NET 204.69.234.1
UDNS2.ULTRADNS.NET 204.74.101.1

> whois -h whois.directi.com name15.com

Domain Name: NAME15.COM

Registrant:
Administrative Contact:
Technical Contact:
Billing Contact:

Yambo Financials Inc. (DE)
Anton Denysenko (ad@host2010.com)
1001 SW 16th Avenue, #103,
Gainesville
null,32601
US
Tel. +135.23789943

Creation Date: 16-May-2003
Expiration Date: 16-May-2004

Domain servers in listed order:
ns.host2010.com
ns2.host2010.com

whois -h whois.stargateinc.com ssl4all.com
Domain Name: ssl4all.com

Name Servers
ns.host2010.com 216.180.242.250
ns2.host2010.com 216.180.242.252

Domain Created: 2/26/2003
Domain Expires: 2/25/2005

Registrant
Administrative
Technical
Billing
Yambo Financials Inc. (DE)
1001 SW 16th Avenue, 103,
Gainesville, FL 32601
United States — US
email: ssl@host2010.com
phone: 8778542861
fax: 8778542861

whois -h whois.networksolutions.com yambocards.com

Registrant:
Yambo Financials Ltd (FJWNQVESWD)
14 Hook Road, Epsom, Surrey
KT19 8TH, United Kingdom
Surrey, UK KT19 8TH
UK

Domain Name: YAMBOCARDS.COM

Administrative Contact:
Yambo Financials Ltd (YKGPBXLJNO) yambocards@hotmail.com
14 Hook Road, Epsom, Surrey
KT19 8TH, United Kingdom
Surrey, UK KT19 8TH
UK
+1-866-YAMBOCS
Technical Contact:
Network Solutions, Inc. (HOST-ORG)
customerservice@networksolutions.com
21355 Ridgetop Circle
Dulles, VA 20166
US
1-888-642-9675 fax: 571-434-4620

Record expires on 04-Apr-2004.
Record created on 04-Apr-2003.
Database last updated on 16-Nov-2003 13:16:10 EST.

Domain servers in listed order:

NS1.SMARTDNS.ORG 64.49.244.204
NS2.SMARTDNS.ORG 209.51.142.198
NS1.SMARTNIC.ORG 207.44.143.227
NS2.SMARTNIC.ORG 66.111.52.49

> whois -h whois.directnic.com yambobank.com

Domain Name: YAMBOBANK.COM

Registrant:
Administrative Contact:
Technical Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Record last updated 07-31-2003 05:14:57 AM
Record expires on 07-07-2005
Record created on 07-07-2003

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 64.191.95.60

$ dig +norecurse +aa @66.111.36.80 yambo.biz

;; ANSWER SECTION (11 records)
yambo.biz. 600 IN A 69.65.31.11
yambo.biz. 600 IN MX 10 million.dp.ua.
yambo.biz. 600 IN MX 20 rara.yambo.biz.
yambo.biz. 600 IN MX 30 gecko.yambo.biz.
yambo.biz. 600 IN NS ns1.yambo.biz.
yambo.biz. 600 IN NS ns2.yambo.biz.
yambo.biz. 600 IN NS ns0.xname.org.
yambo.biz. 600 IN NS ns1.xname.org.
yambo.biz. 600 IN NS UDNS1.ULTRADNS.NET.
yambo.biz. 600 IN NS UDNS2.ULTRADNS.NET.
yambo.biz. 600 IN SOA yambo.biz.yambo.biz.

;; AUTHORITY SECTION (6 records)
yambo.biz. 600 IN NS ns1.yambo.biz.
yambo.biz. 600 IN NS ns2.yambo.biz.
yambo.biz. 600 IN NS ns0.xname.org.
yambo.biz. 600 IN NS ns1.xname.org.
yambo.biz. 600 IN NS UDNS1.ULTRADNS.NET.
yambo.biz. 600 IN NS UDNS2.ULTRADNS.NET.

;; ADDITIONAL SECTION (8 records)
million.dp.ua. 15213 IN A 195.248.185.130
million.dp.ua. 15213 IN A 195.248.163.58
rara.yambo.biz. 600 IN A 66.111.36.80
gecko.yambo.biz. 600 IN A 64.191.95.60
ns1.yambo.biz. 600 IN A 66.111.36.80
ns2.yambo.biz. 600 IN A 64.191.95.60
ns0.xname.org. 21154 IN A 195.20.105.149
ns1.xname.org. 106947 IN A 213.133.115.5

$ dig +norecurse +aa @64.191.95.60 yambobank.com

;; ANSWER SECTION (9 records)
yambobank.com. 600 IN A 69.65.31.18
yambobank.com. 600 IN MX 10 million.dp.ua.
yambobank.com. 600 IN NS ns1.yambo.biz.
yambobank.com. 600 IN NS ns2.yambo.biz.
yambobank.com. 600 IN NS ns1.granitecanyon.com.
yambobank.com. 600 IN NS ns2.granitecanyon.com.
yambobank.com. 600 IN NS ns0.xname.org.
yambobank.com. 600 IN NS ns1.xname.org.
yambobank.com. 600 IN SOA yambo.biz.yambobank.com. admin.yambo.biz.

;; AUTHORITY SECTION (6 records)
yambobank.com. 600 IN NS ns1.yambo.biz.
yambobank.com. 600 IN NS ns2.yambo.biz.
yambobank.com. 600 IN NS ns1.granitecanyon.com.
yambobank.com. 600 IN NS ns2.granitecanyon.com.
yambobank.com. 600 IN NS ns0.xname.org.
yambobank.com. 600 IN NS ns1.xname.org.

;; ADDITIONAL SECTION (8 records)
million.dp.ua. 33422 IN A 195.248.185.130
million.dp.ua. 33422 IN A 195.248.163.58
ns1.yambo.biz. 600 IN A 66.111.36.80
ns2.yambo.biz. 600 IN A 64.191.95.60
ns1.granitecanyon.com. 40707 IN A 205.166.226.38
ns2.granitecanyon.com. 40707 IN A 65.102.83.43
ns0.xname.org. 40823 IN A 195.20.105.149
ns1.xname.org. 40220 IN A 213.133.115.5

$ dig +norecurse +aa @216.180.242.250 name15.com

name15.com. 14400 IN A 65.61.159.156
ns.host2010.com. 14400 IN A 216.180.242.250
ns2.host2010.com. 14400 IN A 216.180.242.252

$ dig +norecurse +aa @216.180.242.250 ssl4all.com

ssl4all.com. 14400 IN A 216.180.242.250
ns.host2010.com. 14400 IN A 216.180.242.250
ns2.host2010.com. 14400 IN A 216.180.242.252

$ dig +norecurse +aa @64.191.95.60 yambocs.com

;; ANSWER SECTION (11 records)
yambocs.com. 600 IN MX 10 million.dp.ua.
yambocs.com. 600 IN A 69.65.31.14
yambocs.com. 600 IN NS ns1.yambo.biz.
yambocs.com. 600 IN NS ns2.yambo.biz.
yambocs.com. 600 IN NS ns1.granitecanyon.com.
yambocs.com. 600 IN NS ns2.granitecanyon.com.
yambocs.com. 600 IN NS ns0.xname.org.
yambocs.com. 600 IN NS ns1.xname.org.
yambocs.com. 600 IN NS UDNS1.ULTRADNS.NET.
yambocs.com. 600 IN NS UDNS2.ULTRADNS.NET.
yambocs.com. 600 IN SOA yambo.biz.yambocs.com.

;; AUTHORITY SECTION (8 records)
yambocs.com. 600 IN NS ns1.yambo.biz.
yambocs.com. 600 IN NS ns2.yambo.biz.
yambocs.com. 600 IN NS ns1.granitecanyon.com.
yambocs.com. 600 IN NS ns2.granitecanyon.com.
yambocs.com. 600 IN NS ns0.xname.org.
yambocs.com. 600 IN NS ns1.xname.org.
yambocs.com. 600 IN NS UDNS1.ULTRADNS.NET.
yambocs.com. 600 IN NS UDNS2.ULTRADNS.NET.

;; ADDITIONAL SECTION (5 records)
million.dp.ua. 30855 IN A 195.248.185.130
million.dp.ua. 30855 IN A 195.248.163.58
ns1.yambo.biz. 600 IN A 66.111.36.80
ns2.yambo.biz. 600 IN A 64.191.95.60
ns1.granitecanyon.com. 38140 IN A 205.166.226.38
—
Message-ID: <2003083172314.07346.00000168@mb-m26.aol.com>
If Sobig is really a spamming virus, we really don’t need to know
who wrote it, we just need to know who is spamming with it.
(I’m sure they will be happy tell who wrote it during the ‘interview’
phase…)

In message <bp8lu4$1llavj$1@ID-115151.news.uni-berlin.de>, Anri Erinin
<spammers_lie@rambler.ru> writes

>Domain Name: YAMBOBANK.COM
>
>Registrant:
>Administrative Contact:
>Technical Contact:
> Support, Customer support@yambo.biz
> 14 Hook Road
> Epsom, Not Applicable 19KT 8TH
> GB
> +44.8719008667
>Fax:+44.8719008668

Well, that version of the postcode is invalid … none start with digits

The telephone is, I think a non-geographic number

For “not applicable” … read “Surrey”
—
Rex M F Smith

Sun-Tsu
Post reply
More message actions
11/16/03
In message <bp8lu4$1llavj$1@ID-115151.news.uni-berlin.de>, Anri Erinin
<spammers_lie@rambler.ru> writes

>Domain Name: YAMBOBANK.COM

The below was created whilst tracking the “isoles” of SPEWS S1728 / S1620 some
five months ago. The name Yambo came up many times tracking bad boy spammers
from Florida who were particularly annoying.

Porn feed suppliers and porn billing sites are much more lucrative than just a
porn site, therefore have more to lose due to blocks on the Internet.

Yambo was registered at the end of last year. It claims to be a UK company,
but it appears to be run from Florida. It states that it has a toll free
number in the US and CA. many of the harassing porn spam email contain
references to both the UK and CA, just as yambo does. there are five names
registered for yambo. Is five-elements somehow relation to yambo?

this group is implicated in the acquisition of *stolen* AOL/(instakiss
phishers) accounts to spam for their porn sites, and with the one on
mefels@aol.com

—

DEGLER, RANDY W
3540 NW 99TH AVE
CORAL SPRINGS FL

Florida Profit

YAMBO TOURS AND TRAVEL, INC.

PRINCIPAL ADDRESS

125 N MIAMI AVE

MIAMI FL 33128

MAILING ADDRESS

125 N MIAMI AVE

MIAMI FL 33128

—-

EMILIO C PASTOR, P.A.
155 S MIAMI AVE PH-I
MIAMI FL

SANTANA, HUMBERTO A
1000 W AVE PAT 1621
MIAMI BEACH FL 33139
—-

ROULSTONE, DONALD B
4721 WEST VASCONIA STREET
TAMPA FL 33629 D

MITCHELL, BRETT
8421 ANGLESS PT DR
TEMPLE TERRACE FL 33637 VP

KERCE, WALTER
4446 WINDING RIVER DR
VALRICO FL 33594 VP

STEWART, JOSHUA D
5821 LEGACY CRESENT PL # 303
RIVERVIEW FL 33567 VP

HANSEN, MARK A JR
8121 ISLAND BREEZE LN
TAMPA FL 33637
—-

MANGONE, BARBARA
9091 N. MILITARY TRAIL
PALM BEACH GARDENS FL 33410 P

JOHNSON, JOHN M
19900 MONA ROAD
TEQUESTA FL 33469

—
from their website:

“If upon review of your credit card statement, you notice two charges from
Yambo.biz, please review previous credit card statements. It is possible that
there was a month you did not receive a charge from Yambo.biz. A possible
reason for this could be the credit card had been declined”

Site operated by yambo financials ltd. (uk)
| Billing Policy | Refund Policy | Privacy Statement |

“Information subject to change without notice. Yambo Financials LTD, Yambo
Financials Inc, Yambo.biz, YamboCS.com
and the Yambo.biz Logo are trademarks of Yambo Financials Ltd (United Kingdom).
All rights reserved.
(c) 2002-2003 Yambo Financials Ltd.”

from website:

Yambo Financials Ltd.
14 Hook Road, Epsom, Surrey,
KT19 8TH, United Kingdom
1.866.YAMBOCS
(US and Canada)
+1.212.301.7424

Billing Policy
“edition 17 November 2002 ‘Yambo Financials Ltd.’, hereinafter ‘Yambo.biz,’ in
the name of its Director, acting on the basis of the company’s Bylaws,
considers itself to be bound by this ‘Billing Policy’ if it sold some service
or good to a physical person or a legal entity by means of credit card online
transaction; hereinafter ‘Buyer.’ ”

claims to be run by a UK firm, but appears to be controlled by spammers in
florida

Yambo Financials Inc.
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Domain Name: YAMBOCS.COM

Administrative Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Technical Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Record last updated 04-15-2003 09:20:58 AM
Record expires on 10-03-2003
Record created on 10-03-2002

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 66.111.36.88

– yambo.biz was registered in the last quarter of 2002, about the same time
that 69casch.com, pus.bz, sic.bz, dirtydildo.com, smutposts.com and others
found in SPEWS S1620 and S1758 were registered, perhaps by the some of the same
spammers.

Yambo Financials Inc.
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Domain Name: YAMBOCS.COM

Administrative Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Technical Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

Record last updated 04-15-2003 09:20:58 AM
Record expires on 10-03-2003
Record created on 10-03-2002

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 66.111.36.88

—

OrgName: United Colocation Group, Inc.
OrgID: UCG-14
Address: 200 Paul Ave., Suite 500
City: San Francisco
StateProv: CA
PostalCode: 94124
Country: US

NetRange: 66.111.32.0 – 66.111.63.255
CIDR: 66.111.32.0/19
NetName: ASN-UNCGI-EXC-01
NetHandle: NET-66-111-32-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.UNITEDCOLO.NET
NameServer: NS2.UNITEDCOLO.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-08-06
Updated: 2003-03-24

AbuseHandle: ABUSE185-ARIN
AbuseName: Abuse
AbusePhone: +1-888-993-9339
AbuseEmail: abuse@unitedcolo.com

NOCHandle: INFO-ARIN
NOCName: Info
NOCPhone: +1-888-993-9339
NOCEmail: info@unitedcolo.com

TechHandle: SYSAD4-ARIN
TechName: Sysadmin-UCG
TechPhone: +1-888-993-9339
TechEmail: sysadmin@unitedcolo.com

OrgTechHandle: SYSAD4-ARIN
OrgTechName: Sysadmin-UCG
OrgTechPhone: +1-888-993-9339
OrgTechEmail: sysadmin@unitedcolo.com

# ARIN WHOIS database, last updated 2003-04-19 20:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

http://www.spews.org/html/S834.html massmail.ru

Google Search: S834

http://groups.google.com/groups?q=S834&hl=en&lr=&ie=UTF-8&oe=ISO-8859-1&ne
wwindow=1&safe=off&scoring=d

If you have to ‘phone’ in your PPV Order, this will NOT work for you

– hum russia, florida, spam, payment for porn?

“If users have questions or concerns regarding this statement, you should first
contact Anton Denysenko by email: anton@yambo.biz, by mail: 1001 SW 16th
Avenue, #103, Gainesville, FL 32601, USA, or by phone: 352-378-9943. If you do
not receive acknowledgment of your inquiry or it is not satisfactorily
addressed, you should then contact TRUSTe through the TRUSTe Watchdog Dispute
Resolution Process (http://www.truste.org/users/users_watchdog.php). TRUSTe
will serve as a liaison with the Web site to resolve users concerns. However,
please understand the TRUSTe program covers only information that is collected
through this Web site, and does not cover information that may be collected
through software downloaded from the site.

http://groups.google.com/groups?hl=en&lr=&ie=ISO-8859-1&oe=ISO-8859-1&neww
indow=1&safe=off&q=1001+SW+16th+Avenue+group%3Anews.admin.net-abuse.*&meta=

Google Search: 1001 SW 16th Avenue group:news.admin.net-abuse.*

– this is also hilarious, the company office in florida is a maildrop box,
right next door to a con artist of some years back

Google Groups: View Thread “[usenet] (MMF) Money! Money!
MONEY!”http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=ISO-8859-1&ne
wwindow=1&safe=off&threadm=63bg3s%24hsp%40bgtnsc02.worldnet.att.net&rnum=2
&prev=/groups%3Fhl%3Den%26lr%3D%26ie%3DISO-8859-1%26oe%3DISO-8859-1%26neww
indow%3D1%26safe%3Doff%26q%3D1001%2BSW%2B16th%2BAvenue%2Bgroup%253Anews.ad
min.net-abuse.*%26meta%3D

Bernard A. Sykes

1001 SW 16th Avenue, #51

Gainesville, FL 32601-8451

Yambo Financials, Inc

Certain American spammers seem to have allied themselves with a UK partner
recently. Yambo is on both sides of the ocean as well.

SuN

—
” ‘When I was coming up, it was a dangerous world, and you knew exactly who
they were.’ he said. “It was us (TINU) verses them, and it was clear who them
was. Today, we are not so sure who they are, but we know they’re there.’ ”
– George W Bush, 21 JAN 2000

From my previous digging into Yambo.biz

Yambo = Yegor And Max Bugaenko’s Organization(?).

Ukrainian brothers, Yegor is quoted here (http://www.comperia.com/) as
VP of Yambo.

Max is active on various porn-host BBS’s as either Yambo or Max.Yambo

HTH,

Rex M F Smith wrote:

Domain Name: YAMBOBANK.COM

Registrant:Administrative Contact:
Technical Contact:>> Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Yambo Financials Ltd.
14 Hook Road, Epsom, Surrey,
KT19 8TH, United Kingdom
1.866.YAMBOCS
(US and Canada)
+1.212.301.7424

Companies House Britain

Name & Registered Office: EVA PAYMENTS LIMITED
20 MAIDSTONE ROAD <— linkbill.com old address
BOROUGH GREEN
SEVENOAKS, KENT TN15 8BD
Status: Active
Company Type: Private Limited Company
Nature Of Business: None registered
Company No.: 04594965
Date of Incorporation: 19/11/2002
Country of Origin: United Kingdom
————–

Subject: LinkBill
Newsgroups: news.admin.net-abuse.email
Date: 2002-03-02 21:13:36 PST
http://groups.google.ca/groups?selm=3C81AFBD.F1D23AE4%40rogers.com
Using the company name GLOBETIME LTD.
They now have an address of:
788-790 Finchley Road
London, UK NW11 7TJ, GB
————–

domain: vegasworld.net
status: production
organization: Eva Payments Limited
email: evapayments@hotmail.com Billing Policy
> “edition 17 November 2002 ‘Yambo Financials Ltd.’, hereinafter ‘Yambo.biz,’ in
> the name of its Director, acting on the basis of the company’s Bylaws,
> considers itself to be bound by this ‘Billing Policy’ if it sold some service
> or good to a physical person or a legal entity by means of credit card online
> transaction; hereinafter ‘Buyer.’ ”
>
>
> claims to be run by a UK firm, but appears to be controlled by spammers in
> florida

There is indeed a Yambo Financials registered in the UK

Companies House Britain

Name & Registered Office: YAMBO FINANCIALS LIMITED
OCTAGON HOUSE, FIR ROAD
BRAMHALL, STOCKPORT
CHESHIRE SK7 2NP
Status: Active
Company No.: 04441960
Date of Incorporation: 20/05/2002
Country of Origin: United Kingdom
Company Type: Private Limited Company
Nature Of Business: 7484 – other business activities
Last Members List: 20/05/2003

There are a number of companies registered using that address.
It appears to be the office of Davenport Company Services.

> Yambo Financials Inc.
> 1001 SW 16th Avenue, #103
> Gainesville, FL 32601
> US
> 1.212.301.7424
>
> Domain Name: YAMBOCS.COM
>
> Administrative Contact:
> Service, Customer customerservice@yambo.biz
> 1001 SW 16th Avenue, #103
> Gainesville, FL 32601
> US
> 1.212.301.7424
>
> Technical Contact:
> Service, Customer customerservice@yambo.biz
> 1001 SW 16th Avenue, #103
> Gainesville, FL 32601
> US
> 1.212.301.7424
>
> Record last updated 04-15-2003 09:20:58 AM
> Record expires on 10-03-2003
> Record created on 10-03-2002
>
> Domain servers in listed order:
> NS1.YAMBO.BIZ 66.111.36.80
> NS2.YAMBO.BIZ 66.111.36.88

Note: 1001 SW 16th Avenue, Gainesville is an apartment building called
French Quarter & Village Park Apts. It specializes in rental to
students at the local University.
http://www.fqvp.com/

Whois: BUY-EGOLD.COM [website does not resolve]

Registrant/Owner: 000-TB16513
Thomas Beacham
259 w 12th ave
Oshkosh WI, 54902, US
Administrative and Technical Contact: 000-GR00622
Giancarlo Russo
Via Caserta, 3
San Nicola La Strada CE, 81020, IT
+39.0823454016
domainmanager@interferenza.com
Created on 2003-02-18
Updated on 2003-02-18
Expires on 2004-02-18
Nameservers:
NS1.INTERFERENZA.NET NS2.INTERFERENZA.NET
========================

Reverse Search gives:
Beacham, Tom
259 W 12th Ave
Oshkosh, WI 54902
920-233-8819

www.store-drugs.com

July 22, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Displaying items 1 to 100, out of a total of 212

www.best-usa-rx.com aka netmeorders.com

July 22, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Address lookup
lookup failed http://www.best-usa-rx.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom best-usa-rx.com”…

Domain Name: BEST-USA-RX.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.BEST-USA-RX.COM
Name Server: NS2.BEST-USA-RX.COM
Status: ok
Updated Date: 27-apr-2012
Creation Date: 26-apr-2008
Expiration Date: 26-apr-2013

Last update of whois database: Sun, 22 Jul 2012 16:16:01 UTC
Queried whois.yournamemonkey.com with “best-usa-rx.com

Query error: CouldNotResolveServerName
Network Whois record

Don’t have an IP address for which to get a record
DNS records

Displaying items 1 to 87, out of a total of 87
Displaying items 1 to 3, out of a total of 3

http://best-usa-rx.com/
http://ns1.best-usa-rx.com/
http://www.best-usa-rx.com/
24hpills.com
24sevenmeds.com
affordable-meds-online.com
allbestmeds.com
allpharmmeds.com
allthebestmeds.com
american-best-rx.com
american-rx-now.com
ameripills.net
anytime-meds.com
anytime-rx.com
approved-meds.com
best-care-pharmacy.com
best-edrugstore.com
best-epharmacy.com
best-mailorder-meds.com
best-medications.com
best-netmeds.com
best-online-usa.com
best-pharma.net
best-pill-price.com
best-price-meds.com
best-rapid-drugs.com
best-rx-place.com
buy-oneline-rx.com
buyamericanmeds.com
buybestmeds.com
buybrandmeds.com
buycapsonline.com
buycybermeds.com
buymedsanywhere.com
buyrx24-7.com
caring-pharma.com
cheap-rx-store.com
cheapest-pills.net
cheaprxmeds.net
choice-rx.net
fast-best-online-store.com
fillyourscript.com
getonlinemeds.com
highland-park-pharma.com
mail-order-rx.com
mybestmed.com
nations-best-shop.com
online-estore.net
pharmanextday.com
rapid-drug-store.com
speedyrxstore.com
superfast-meds.com
superfastmed.com
superspeedy-meds.com
http://www.24hpills.com
http://www.24sevenmeds.com
http://www.affordable-meds-online.com
http://www.allbestmeds.com
http://www.american-best-rx.com
http://www.american-rx-now.com
http://www.ameripills.net
http://www.anytime-meds.com
http://www.anytime-rx.com
http://www.approved-meds.com
http://www.be-well-pharmacy.com
http://www.best-care-pharmacy.com
http://www.best-mailorder-meds.com
http://www.best-medications.com
http://www.best-pharma.net
http://www.best-prestige-drugs.com
http://www.best-price-meds.com
http://www.best-rx-place.com
http://www.best-usa-rx.com
http://www.buybestmeds.com
http://www.buycapsonline.com
http://www.buymedsanywhere.com
http://www.buyrx24-7.com
http://www.caring-pharma.com
http://www.cheap-rx-store.com
http://www.cheapest-online-pills.com
http://www.cheapest-pills.net
http://www.cheaprxmeds.net
http://www.choice-rx.net
http://www.fillyourscript.com
http://www.highland-park-pharma.com
http://www.mybestmed.com
http://www.nations-best-shop.com
http://www.online-estore.net
http://www.rapid-drug-store.com
http://www.speedyrxstore.com
http://www.superfastmed.com

Domain Name: AMERICAN-RX-NOW.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.AMERICAN-RX-NOW.COM
Name Server: NS2.AMERICAN-RX-NOW.COM
Status: ok
Updated Date: 29-mar-2012
Creation Date: 28-mar-2005
Expiration Date: 28-mar-2013

Last update of whois database: Sun, 22 Jul 2012 16:21:09 UTC <<<
Registrars.Domain name: american-rx-now.com

Registrant Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Administrative Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Billing Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Technical Contact:
Kristen Kramer c/o YourNameMonkey.com
Private WHOIS, icann@yournamemonkey.com
MCPO Box 2489
Makati City 1264
PH
+1.6462224127

Status:
Active

Name Servers:
NS1.AMERICAN-RX-NOW.COM
NS2.AMERICAN-RX-NOW.COM

Creation date: 28 Mar 2005 09:01:18
Expiration date: 28 Mar 2013 09:01:18

Canadian Pharmacy Spam – dnpueo.doctorfog.ru

July 21, 2012Leave a comment

Email Header Analysis

IP Address: 92.85.170.215 (92.85.170.215)
IP Address Country: Romania
IP Continent: Europe
IP Address City Location: Peciu Nou
IP Address Region: Timis
IP Address Latitude: 45.6064,
IP Address Longtitude: 21.0578
Organization: small customers

Delivered-To: scamfraudalert@gmail.com
Received: by 10.182.12.97 with SMTP id x1csp72067obb;
Sat, 21 Jul 2012 05:55:12 -0700 (PDT)
Received: by 10.152.144.168 with SMTP id sn8mr9999189lab.1.1342875312384;
Sat, 21 Jul 2012 05:55:12 -0700 (PDT)
Return-Path: <qnexwbqj@evc.net>
Received: from [92.85.170.215] ([92.85.170.215])
by mx.google.com with ESMTP id b9si10054487lbg.7.2012.07.21.05.55.08;
Sat, 21 Jul 2012 05:55:12 -0700 (PDT)
Received-SPF: neutral (google.com: 92.85.170.215 is neither permitted nor denied by best guess record for domain of qnexwbqj@evc.net) client-ip=92.85.170.215;
Authentication-Results: mx.google.com; spf=neutral (google.com: 92.85.170.215 is neither permitted nor denied by best guess record for domain of qnexwbqj@evc.net) smtp.mail=qnexwbqj@evc.net
To: <scamfraudalert@gmail.com>
Subject: Cheap Cilais & Vigara Now -53% Off!!! One day shipping! – SALE!
From: “Purchase-Vigara Now” <qnexwbqj@evc.net>
Date: Sat, 21 Jul 2012 05:53:59 -0800
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: IPS PHP Mailer
MIME-Version: 1.0
Content-type: text/plain; charset=”iso-8859-1″
Content-Transfer-Encoding: 8bit
Message-ID: <20120721125511.92940086q124@qiuhxuhkhdgic>

http://dnpueo.doctorfog.ru
dnpueo.doctorfog.ru

33drugstore.com

July 21, 2012Leave a comment

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

DEA Warning–Buying drugs online may be illegal and dangerous!

Address lookup
canonical name edcustomer.com
aliases
addresses 91.199.112.8
Domain Whois record

Queried whois.internic.net with “dom edcustomer.com”…

Domain Name: WWW.EDCUSTOMER.COM
Registrar: REALTIME REGISTER BV
Whois Server: whois.yoursrs.com
Referral URL: http://www.realtimeregister.com
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Status: clientTransferProhibited
Updated Date: 30-apr-2010
Creation Date: 26-jan-2006
Expiration Date: 26-jan-2012

Last update of whois database: Wed, 06 Oct 2010 11:59:01 UTC
Queried whois.yoursrs.com with “edcustomer.com”…

Domain Name:edcustomer.com
Name Server:ns0.partners-dns.com
Name Server:ns1.partners-dns.com
Created On:2010-05-01
Last Updated On:2010-05-01
Expiration Date:2012-01-26
Dealer:stimul
Registrant ID:rxp
Registrant Name:Jessica Eagloff
Registrant Organization:
Registrant Street1:145-157 St John Street 2nd Floor
Registrant City:London
Registrant State/Province:
Registrant Postal Code:EC1V 4PY
Registrant Country:GB
Registrant Phone:+44.7005968172
Registrant Email:jessicaeagloff@yahoo.co.uk

Admin ID:rxp
Admin Name:Jessica Eagloff
Admin Organization:
Admin Street1:145-157 St John Street 2nd Floor
Admin City:London
Admin State/Province:
Admin Postal Code:EC1V 4PY
Admin Country:GB
Admin Phone:+44.7005968172
Admin Email:jessicaeagloff@yahoo.co.uk

Billing ID:rxp
Billing Name:Jessica Eagloff
Billing Organization:
Billing Street1:145-157 St John Street 2nd Floor
Billing City:London
Billing State/Province:
Billing Postal Code:EC1V 4PY
Billing Country:GB
Billing Phone:+44.7005968172
Billing Fax:
Billing Email:jessicaeagloff@yahoo.co.uk

Tech ID:rxp
Tech Name:Jessica Eagloff
Tech Organization:
Tech Street1:145-157 St John Street 2nd Floor
Tech City:London
Tech State/Province:
Tech Postal Code:EC1V 4PY
Tech Country:GB
Tech Phone:+44.7005968172
Tech Email:jessicaeagloff@yahoo.co.uk
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8″…

Information related to ’91.199.112.0 – 91.199.112.255′

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

Information related to ’91.199.112.0/24AS43816′

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
edcustomer.com IN TXT v=spf1 +ip4:91.199.112.0/24
edcustomer.com IN MX
preference: 10
exchange: mailmx.edcustomer.com
1200s (00:20:00)
edcustomer.com IN A 91.199.112.8 1200s (00:20:00)
edcustomer.com IN SOA
server: ns0.rxp-hosting.com
email: root.rxp-hosting.com
serial: 2010791354
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
edcustomer.com IN NS ns1.rxp-hosting.com 1200s (00:20:00)
edcustomer.com IN NS ns0.rxp-hosting.com 1200s (00:20:00)
Traceroute

Tracing route to edcustomer.com [91.199.112.8]…

hop rtt rtt rtt ip address fully qualified domain name
1 1 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 0 0 64.208.170.197 gigabitethernet7-3.ar2.dal2.gblx.net
6 142 143 142 64.208.222.202 edn-sovintel-llc.tengigabitethernet7-4.ar1.fra4.gblx.net
7 158 157 157 194.186.157.46 cat09.moscow.gldn.net
8 157 157 158 195.239.10.202 te1-1.maxwell.msk.wahome.ru
9 209 159 160 77.91.225.76 vl-500.ampere.msk.wahome.ru
10 161 158 158 92.241.162.66
Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.7.67
Date: Wed, 06 Oct 2010 11:06:20 GMT
Content-Type: text/html;charset=iso-8859-1
Connection: close
X-Powered-By: PHP/5.2.14
Set-Cookie: PHPSESSID=1fd9ba81b02836acbbd77d83b308d657; expires=Fri, 05-Nov-2010 11:06:20 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut
– end –
Address lookup

canonical name http://www.33drugstore.com
aliases
addresses 212.113.32.66
Domain Whois record

Queried whois.internic.net with “dom 33drugstore.com”…

Domain Name: WWW.33DRUGSTORE.COM
Registrar: REGTIME LTD.
Whois Server: whois.regtime.net
Referral URL: http://www.webnames.ru
Name Server: NS1.UKRNAMES.COM
Name Server: NS2.UKRNAMES.COM
Name Server: NS4.SERVAGE.NET
Status: ok
Updated Date: 13-mar-2010
Creation Date: 01-nov-2008
Expiration Date: 01-nov-2011

Last update of whois database: Wed, 06 Oct 2010 12:04:06 UTC
Queried whois.regtime.net with “33drugstore.com”…

Regtime Ltd. WHOIS server

Domain name: 33drugstore.com

Name servers:
ns1.ukrnames.com
ns2.ukrnames.com
ns4.servage.net

Registrar: Regtime Ltd.
Creation date: 2009-02-25
Expiration date: 2011-11-01
Status: active

Registrant:
Andrew Tsyplakov
33DRUGS LTD

For complete domain details go to:
http://www.webnames.ru/scripts/who.pl?domain=33drugstore.com

Network Whois record
Queried whois.ripe.net with “-B 212.113.32.66″…
Information related to ’212.113.32.0 – 212.113.36.255′

inetnum: 212.113.32.0 – 212.113.36.255
netname: UKRTELECOM-DC-32-36
descr: Colocation services
country: UA
admin-c: UNOC-RIPE
tech-c: UNOC-RIPE
status: ASSIGNED PA
mnt-by: AS6877-MNT
remarks: INFRA-AW
source: RIPE
changed: vsmirnov@utel.net.ua 20081111
changed: oserdyukov@ukrtelecom.ua 20090114
changed: ikurpas@utel.ua 20090216

role: Utel NOC
address: 59, Turgenivska str.
address: 04050 Kyiv, Ukraine
phone: +380 44 2359001
phone: +38 800 5050500
fax-no: +380 44 2880278
remarks: —————————————————————–
remarks: Ukrtelecom DataCenter is available 365 x 24 x 7
remarks: —————————————————————–
remarks: Contact information for Ukrtelecom DataCenter
remarks: —————————————————————–
remarks: Network routing & peering issues: noc at dc.ukrtelecom.ua
remarks: SPAM and Network security issues: abuse at dc.ukrtelecom.ua
remarks: E-Mail issues: postmaster at dc.ukrtelecom.ua
remarks: Domain management: hostmaster at dc.ukrtelecom.ua
remarks: Customer support: support at dc.ukrtelecom.ua
remarks: General information: info at dc.ukrtelecom.ua
remarks: Customer contracts issues: sales at dc.ukrtelecom.ua
remarks: —————————————————————–
e-mail: noc@utel.net.ua
admin-c: JIM-RIPE
tech-c: OLE-RIPE
tech-c: JIM-RIPE
tech-c: UHM-RIPE
nic-hdl: UNOC-RIPE
mnt-by: AS6877-MNT
source: RIPE
changed: ole@utel.net.ua 20061020
changed: vsmirnov@utel.net.ua 20071206
changed: vsmirnov@utel.net.ua 20080327
changed: vsmirnov@utel.net.ua 20081107
changed: vsmirnov@utel.net.ua 20090902

Information related to ’212.113.32.0/20AS16124′

route: 212.113.32.0/20
descr: Ukrtelecom-DC
origin: AS16124
mnt-by: AS6877-MNT
mnt-by: AS6849-MNT
changed: vsmirnov@utel.net.ua 20080215
source: RIPE

Information related to ’212.113.32.0/19AS6849′

route: 212.113.32.0/19
descr: AGGREGATE BLOCK FOR UKRTELECOM
origin: AS6849
mnt-by: AS6849-MNT
changed: aremiga@ukrtel.net 20081222
source: RIPE

Information related to ’212.113.32.0/21AS6849′

route: 212.113.32.0/21
descr: JSC Ukrtelecom Data Center hosting
origin: AS6849
mnt-by: AS6849-MNT
mnt-routes: AS6849-MNT
changed: aremiga@ukrtel.net 20091210
source: RIPE
DNS records

name class type data time to live
http://www.33drugstore.com IN A 212.113.32.66 0s (00:00:00)
33drugstore.com IN SOA
server: ns1.ukrnames.com
email: info.ukrnames.com
serial: 2010031320
refresh: 14400
retry: 600
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)

exchange: 33drugstore.com
10s (00:00:10)
33drugstore.com IN A 212.113.32.66 0s (00:00:00)
66.32.113.212.in-addr.arpa IN PTR 212.113.32.66.dc.ukrtelecom.ua 3600s (01:00:00)
Traceroute

Tracing route to http://www.33drugstore.com [212.113.32.66]…

Service scan
FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: ConnectionRefused
HTTP – 80 Error: TimedOut
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused
– end –

http://1sw.info/
http://33-drug.com/
http://33drugstore.com/
http://33drugstore.net/
http://albuterol.cn/
http://cialis.1sw.info/
http://freetemplates2wordpress.org/
http://googleads-g-doubleclick.net/
http://l9g.net/
http://promopharmacy.com/
http://ruagra.org/
http://www.1sw.info/
http://www.33-drug.com/
http://www.33drugstore.com/
http://www.33drugstore.net/
http://www.freetemplates2wordpress.org/
http://www.googleads-g-doubleclick.net/
http://www.l9g.net/
http://www.promopharmacy.com/
http://www.ruagra.org/
http://4drugs.com/
http://armadareviews.com/
http://charge4meds.com/
http://charge4pill.com/
http://charge4pills.com/
http://cheap-viagra-24.com/
http://drugsshipping.com/
http://ed-solution.com/
http://ed-sup.com/
http://edcustomer.com/
http://edhelp.biz/
http://edselection.com/
http://forum.edselection.com
http://forum.rx-partners.biz
http://himos.edselection.com
http://manfriendly.com/
http://paid4meds.biz/
http://paid4meds.com/
http://pay4med.biz/
http://pay4medc.biz
http://pay4meds.biz
http://pay4medz.biz
http://pay4pill.biz
http://pay4pillz.biz
http://pay4tabs.biz
http://pay4tabz.biz
http://perfectgenerics.com
http://pillzcash.biz
http://pillzcheck.biz/
http://pillzmeds.biz/
http://propeciahair.com/
http://rxhelp.biz/
http://rxtrusted.com/
http://somaextreme.com/
http://tabpaid.biz/
http://trustedtablets.com/
http://trustedtabs.com/
http://viagra-generic.biz/
http://viagracomparison.com/
http://www.4drugs.com/
http://www.armadareviews.com/
http://www.charge4meds.com/
http://www.charge4pill.com
http://www.charge4pills.com
http://www.drugsshipping.com
http://www.ed-solution.com
http://www.ed-sup.com
http://www.edcustomer.com
http://www.edhelp.biz
http://www.edselection.com
http://www.manfriendly.com
http://www.paid4meds.biz
http://www.paid4meds.com
http://www.pay4med.biz
http://www.pay4medc.biz
http://www.pay4meds.biz
http://www.pay4medz.biz
http://www.pay4pill.biz
http://www.pay4pillz.biz
http://www.pay4tabs.biz
http://www.pay4tabz.biz
http://www.perfectgenerics.com
http://www.pillzcash.biz
http://www.pillzcheck.biz
http://www.pillzmeds.biz
http://www.rxhelp.biz
http://www.rxtrusted.com
http://www.somaextreme.com
http://www.tabpaid.biz
http://www.trustedtablets.com
http://www.trustedtabs.com
http://www.viagracomparison.com
canadian-online-pharmacy.org
genericonlinepharmacy.org
mexicanpharmaciesonline.org
us-online-pharmacy.org
clothingonsale.org
fashiononsale.org
onsaleshop.org
men-fashion.org
shoesandfashion.org
indian-onlinepharmacy.org
indianonline-pharmacy.org
indianpharmacy-online.org
buypharmacy.org
canadadiscountpharmacy.org
canadarxpharmacy.org
canadiandiscountpharmacy.org
canadianpharmacydiscount.org
indiapharmacies.org
the-pharmacy.org
canadianpharmacyltd.org
pharmacyltd.org
canadianpharmacydrugstore.net
cvspharmacys.net
canadianpharmacyi.net
bestcanadadrugs.net
pharmacyhere.net
trustedpharmacy.net
californiapharmacy.net
philadelphiapharmacy.net
indiapharmacyrx.net
illinoispharmacy.net
indiapharmacies.net
texas-pharmacy.net
newyork-pharmacy.net
pharmacyusa.net
onsaleshop.net
clothingonsale.net
canadapharmacymedicine.net
pharmacygeneric.net
pharmacyca.net
canadiandiscountpharmacies.net
canadianpharmaciesdiscount.net
canadapharmacyrx.net
canadapharmaciesdiscount.net
canadianpharmacydiscount.net
mexicanpharmacyrx.net
discountgenericpharmacy.net
buy-cheap-tramadol.net
buy-online-viagra.net
canadianpharmacyltd.net
pharmacyltd.net
indianpharmaciesonline.net
india-pharmacy-online.net
canadapharmacyviagra.info
sipharm.com
cod-pharmacy.com
european-online-pharmacy.com
canadianpharmacycheap.com
online-mexicanpharmacy.com
onlinepharmacynet.com
generic-pharmacy-online.com
mexicoonlinepharmacy.com
pharmacy-drugs-generic.com
generic-drugs-pharmacy.com
canadapharmacyinc.com
drugs-pharmacy-online.com
canadapharmacypro.com
americaonlinediscountpharmacy.com
ipharmacy24.com
generic-pills-pharmacy.com
phentermine-online-pharmacy-123.com
pharmacy0nline.com
noprescription-pharmacy.com
onlinecanadianpharmacystore.com
online-pharmacy-meds.com
netpharmacyonline.com
onlinepharmacysource.com
trustednetpharmacy.com
canadapharmacymedicine.com
indianpharmacy-online.com
indianonline-pharmacy.com
indian-onlinepharmacy.com
rx-pharmacynationwide.com
mexicanrxpharmacy.com
canadapharmaciesdiscount.com
mexicopharmacyrx.com
canadapharmacydiscount.com
canadianpharmaciesdiscount.com
mexico-online-pharmacy.com
indiarxpharmacy.com
canadaonlinepharmacyviagra.com
discountgenericpharmacy.com
edrxpill.com
europeanpharmacystore.com
levitrapharmacy.com
discountcanadianpharmacystore.com
indiaprescriptionpharmacy.com
online-indian-pharmacy.com
rx-online-pharmacy.com
pharmacybuys.com
indianpharmaciesonline.com
pharmacy-generic.com
canadapharmacyltd.biz
cheap-pharmacy.biz
men-clothing.biz
mexican-pharmacies-online.biz
women-fashion.biz
1001medicines.com
Acomplia-pills.info
Acompliaweb.com
Adipexbuy.com
Alldietdrugs.com
Allrxmeds.eu
Bestmedicineonline.net
Buy-adipex.net
Buypharma.nets
Buywmz.com
Codeinebuy.com
Diet-pharm.net
Dietdeals.net
Dietreview.biz
Diettablets.net
Drugslive.com
Ecigs.org
Familypharma.net
Germanycars-direct.com
Gmgint.net
Hotdrugs.net
Hotpharma.net
Hotphentermine.com
Legalrxdrugs.com
Masterfibre.net
Medicinestores.net
Meds-easy.com
Meds-trade.com
Meds24.net
Medups.com
Monaslim.com
Mypaindrugs.com
Myphentermine.net
Orderdiet.net
Ozernoe.com
Painmedicinestore.com
Paintabs.net
Phenterminestore.net
Phoneporn.org
Porno-home.com
Replok.com
Rxpartner.net
Searchadmin.net
Sleeptabs.net
Specialhosting.info
Trustpharm.com
Ukrainetouring.com
Unfairclients.com
Web-las-vegas.com
Weighteditorial.com
Weightorganizer.
Xanax2mg.net
Xxxstock.net
Mobitube.org
Meds-order.com
charge4pill.com
tr-tabs.com
rx-partners.biz
rxpbill.biz
rxpcash.biz
rxpcheck.biz
rxppay.biz
tabzcash.biz
pillzcash.biz
pillzcheck.biz
pillzmeds.biz
tabpaid.biz
pay4meds.biz
pay4medz.biz
pay4pill.biz
pay4tabs.biz
pay4tabz.biz
pay4med.biz
pay4medc.biz
pay4pillz.biz
paid4meds.biz
rxhelp.biz
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com
ed-sellout.com
edcustomer.com
medic-checkout.com
billingmeds.com
billing4meds.com
prescriptionspoint.com
charge4pills.com
charge4meds.com
charge4med.com
charge4pill.com
tr-tabs.com
rx-partners.biz
rxpbill.biz
rxpcash.biz
rxpcheck.biz
rxppay.biz
tabzcash.biz
pillzcash.biz
pillzcheck.biz
pillzmeds.biz
tabpaid.biz
pay4meds.biz
pay4medz.biz
pay4pill.biz
pay4tabs.biz
pay4tabz.biz
pay4med.biz

www.NorthWestPharmacy.com

July 21, 20121 Comment

TO: CustomerService@NorthWestPharmacy.com
FROM: United States Food and Drug Administration
Center for Drug Evaluation and Research
Office of Compliance
Office of Drug Security, Integrity and Recalls
Division of Supply Chain Integrity
RE: Internet Marketing of an Unapproved and Misbranded Drug
DATE: May 24, 2012

WARNING LETTER

The United States Food and Drug Administration (FDA) reviewed your website, www.NorthWestPharmacy.com, on January 4, 2012 and has determined that your website offers products for sale in violation of the Federal Food, Drug, and Cosmetic Act (FD&C Act). More specifically, the website offers an unapproved and misbranded new drug for sale in violation of sections 502(f) and 505(a) of the FD&C Act [21 U.S.C. §§ 352(f) and 355(a)], which are prohibited acts under sections 301(a) and 301(d) of the FD&C Act [21 U.S.C. §§ 331(a) and 331(d)], respectively. We request that you immediately cease marketing violative drug products to United States consumers.

Unapproved New Drug

Alitretinoin, trade name, Toctino, is offered for sale on your website “to treat severe long-term eczema that affects the hands … for patients who have not found success using other corticosteroid treatments.” Based on this claim, Toctino appears to be a drug within the meaning of section 201(g) of the FD&C Act [21 U.S.C. §321(g)] because it is intended for use in the diagnosis, cure, mitigation, treatment, or prevention of disease and/or it is intended to affect the structure or function of the body. Moreover, Toctino appears to be a new drug within the meaning of section 201 (p) of the FD&C Act [21 U.S.C. §321(p)] because it is not generally recognized as safe and effective for its labeled use. Although Toctino is approved in Canada, no approved application pursuant to section 505 of the FD&C Act [21 U.S.C. §355] is in effect for this product. Accordingly, its introduction or delivery for introduction into interstate commerce violates section 505(a) of the FD&C Act [21 U.S.C. §355(a)] and is prohibited under section 301(d) of the FD&C Act [21 U.S.C. §331(d)].

Misbranded Drug

Alitretinoin is a retinoid that is potentially dangerous when orally administered due to its teratogenicity. Because of this potential toxicity, its Canadian labeling states that it should be prescribed only by physicians knowledgeable in the use of systemic retinoids and who understand the risks of teratogenicity in females of childbearing potential. In addition, these females are required to have pregnancy tests before, at regular intervals during, and after discontinuation of alitretinoin therapy to exclude pregnancy. Because Toctino is unapproved in the United States, these safety controls are bypassed when alitretinoin is purchased over the Internet by customers in the United States without consultation with and a valid prescription from a physician. This places American patients who use the drug at risk for adverse effects. Thus, Toctino offered for sale on your website is misbranded within the meaning of section 502(f)(1) of the FD&C Act [21 U.S.C. §321(f)(1)] in that the labeling for Toctino fails to bear adequate directions for use. The introduction or delivery for introduction into interstate commerce of a misbranded drug product is a prohibited act under section 301(a) of the FD&C Act [21 U.S.C. §331(a)].

FDA is taking action against your firm because of the inherent risk in buying unapproved and misbranded new drugs. Unapproved new drugs may not have the same assurance of safety, efficacy, and quality as drugs subject to FDA oversight, and such drugs have been found to be contaminated, counterfeit, contain varying amounts of active ingredients, or contain different ingredients altogether.

FDA- regulated drugs offer protections that include rigorous scientific standards for new drug approval, labeling review for accuracy and completeness, and manufacturing procedures and testing performed under closely controlled conditions at FDA-registered and inspected facilities.

In addition, pharmacies and wholesalers who sell or distribute prescription drugs in the U.S. are licensed by the states. Unapproved new drugs delivered to the American public may not be safe and effective.

This letter is not intended to identify all of the ways in which your activities might be in violation of law. It is your responsibility to ensure that all products marketed by your firm are in compliance with FD&C Act and its implementing regulations. You should take prompt action to correct the violations noted above. Failure to correct these violations promptly may result in FDA regulatory action, including but not limited to, seizure or injunction, without further notice.

Please notify this office in writing within 15 working days of receipt of this letter of any steps you have taken or will take to correct the noted violations and to prevent their recurrence. If the corrective action(s) cannot be completed within 15 working days, state the reason for the delay and the time within which the correction(s) will be completed. Your response should be sent to DrugSupplyChainintegrity@fda.hhs.gov.

Please direct any inquiries concerning this letter to Leigh Verbois, Acting Deputy Director for the Division of Supply Chain Integrity at the above address.

Sincerely,

/s/

Thomas Christl, Office Director (Acting)
Office of Drug Security, Integrity and Recalls
Office of Compliance

4Rx .com ~ 4Rx.net

July 20, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

4rx.com4rx.com fraudulent website Internet

4rx.com
Phone:
secure.4rx.com/index.html
Internet,
India

RX is selling ed drugs with a cut down amount of the actual advertised ingredients.They advertise sidenafil citrate 100mg pills however they supply about 5mg.

I believe they buy name brand sidenafil citrate 100mg and cut it down and make their own pills in India and ship from Hong Kong. They also do this with Tadalafil and Vardenafil HCL.

The reason I know this is I have a true ED and have tried the name brand drugs at different doses and can gage through experience.

These fraudulent pills do not do the trick….. speaking from experience.

Just would like to warn others.

a short cut to the website http://secure.4rx.com/index.html

Kind Regards,
Ric
city
Australia

Source: Ripoffreport

Related Domains

4Rx.com http://piils.com
4Rx.com http://4rxpharm.com
4Rx.com http://www.4rx.name
4Rx.com www-4rx.com
4Rx.com http://buysildenafilcitrate.info
4Rx.com http://viagrasexdrug.com
4Rx.com http://www.worldexpressrx.com
4Rx.com http://www.4rx.com
4Rx.net http://www.4rx.net

Address lookup

canonical name	www.4rx.com.
aliases
addresses	174.142.47.58

Domain Whois record

Queried whois.internic.net with “dom 4rx.com“…

   Domain Name: 4RX.COM
   Registrar: NAMESCOUT CORP
   Whois Server: whois.namescout.com
   Referral URL: http://www.namescout.com
   Name Server: NS2.BLOCKDOS.NET
   Name Server: NS3.BLOCKDOS.NET
   Name Server: NS5.BLOCKDOS.NET
   Status: ok
   Updated Date: 28-oct-2008
   Creation Date: 25-nov-2003
   Expiration Date: 25-nov-2009

>>> Last update of whois database: Mon, 22 Jun 2009 09:46:16 UTC <<<

Queried whois.namescout.com with “4rx.com“…

The results below are provided by Namescout.com.
(whois.Namescout.com)

Domain: 4rx.com

  Date Registered: 10/28/08
    Date Modified: 10/29/08
      Expiry Date: 11/25/09
      	     DNS1: NS2.BLOCKDOS.NET
      	     DNS2: NS3.BLOCKDOS.NET

  Registrant

                   4RX
                   Victor Gonzalez
                   451 Calle Herrera Toro. Qta. Bubu
                   Caracas, -- (BS)
                   00000

  Administrative Contact

                   4RX
                   Victor Gonzalez
                   451 Calle Herrera Toro. Qta. Bubu
                   Caracas,  (VE)
                   00000
                   webmaster@4rx.com
                   (877)728-9479

  Technical Contact

                   4RX
                   Victor Gonzalez
                   451 Calle Herrera Toro. Qta. Bubu
                   Caracas,  (VE)
                   00000
                   webmaster@4rx.com
                   (877)728-9479

        Registrar: Namescout.com

Register your domain now at www.Namescout.com

Network Whois record

Queried whois.arin.net with “174.142.47.58“…

OrgName:    iWeb Technologies Inc.
OrgID:      GIT-20
Address:    20, place du Commerce
City:       Montreal
StateProv:  QC
PostalCode: H3E-1Z6
Country:    CA

NetRange:   174.142.0.0 - 174.142.255.255
CIDR:       174.142.0.0/16
OriginAS:   AS32613
NetName:    IWEB-BLK-06
NetHandle:  NET-174-142-0-0-1
Parent:     NET-174-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.IWEB-HOSTING.COM
NameServer: NS2.IWEB-HOSTING.COM
Comment:
RegDate:    2008-12-19
Updated:    2008-12-19

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName:   Abuse Coordinator
OrgAbusePhone:  +1-514-286-4242
OrgAbuseEmail:  abuse@noc.privatedns.com

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName:   Network Administrator
OrgNOCPhone:  +1-514-286-4242
OrgNOCEmail:  net-admin@noc.privatedns.com

OrgTechHandle: NETWO2356-ARIN
OrgTechName:   Network Administrator
OrgTechPhone:  +1-514-286-4242
OrgTechEmail:  net-admin@noc.privatedns.com

# ARIN WHOIS database, last updated 2009-06-21 20:00

DNS records

name

class

type

data

time to live

http://www.4rx.com

174.142.47.58

120s

(00:02:00)

4rx.com

SOA

server:	ns2.blockdos.net
email:	support.server4sale.com
serial:	2008100601
refresh:	86400
retry:	7200
expire:	3600000
minimum ttl:	86400

86400s

(1.00:00:00)

4rx.com

ns2.blockdos.net

86400s

(1.00:00:00)

4rx.com

ns3.blockdos.net

86400s

(1.00:00:00)

4rx.com

ns5.blockdos.net

86400s

(1.00:00:00)

4rx.com

preference:	5
exchange:	mail.4rx.com

120s

(00:02:00)

4rx.com

preference:	10
exchange:	4rx.com

120s

(00:02:00)

4rx.com

174.142.47.58

120s

(00:02:00)

58.47.142.174.in-addr.arpa

PTR

ip-174-142-47-58.static.privatedns.com

3600s

(01:00:00)

— end —

LegitScript Top 10 Rogue Pharmacies Network

July 15, 2012Leave a comment

Top 10 Rogue Pharmacies
Network Affiliation Programs

Name	Network
101generic.com	RxCash.biz
topills.com	MyRxCash.com
xlpharmacy.com	XLPharmacy
canadianhealthcaremall.net	evapharmacy.ru
trustedmedsonline.org	Rx-Partners
v-medical.com	MyRxCash.com
bmpharmacy.com	Sey Pharma
half-price-pharmacy.com	Cash.md
rx-acs24.com	Pharmcash
SuperSaverMeds.com	BestLifeRx
pharmacyrxone.com	MyRxAffiliateProgram
shopeastwest.com	ShopEastWest
4rx.com	4Rx.com

Stimul Media and Rx Partners Review

July 15, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Today I signed up for two pharmacy affiliate programs: Rx Partners and Stimul Cash (former known as Stimul Media). As you know, signing up for these two is quite hard these days and you are required to have invitation code plus webmaster approval to start making money with them. Here is a conversation with the approval guy (Mark from Rx-Partners):

14:58:58 Me: Hello! I want to sign-up with stimul-media but the signup form does not appear. https://www.stimul-media.com/signup.html Please leave offline message if it’s the case.
11:32:00 stimul-media: please register here http://www2.stimul-cash.com/signup.html
13:18:31 Me: Hello! How can I sign-up on stimul-cash.com and give credit to a friend that reffered me? Is http://www2.stimul-cash.com/?partner=2331 going to work?
13:19:22 stimul-media: yes, it will work.
13:19:34 : ok, thanks
13:22:22 stimul-media: are you signing up in Rx-parterns as well?
13:22:38 Me: yes
13:22:51 Me: how did you know?
13:23:20 430886685: we run both programs
13:23:34 Me: I understand
13:23:42 430886685: can yo uplease tellme how exactly are you planning to advertisie our sites?
I will advertise on http://www.canadianmedsworld.org/ and http://www.thecanadianmedz.org/ , search engine traffic.
13:25:15 430886685: I have apporved your account
13:25:23 Me: ok
13:25:31 Me: thank you

That’s a lot of money these dudes are making. Two of the top affiliate programs. Hope this shit will work for me. If you want to sign up with Rx Partners and need an invitation code please leave a comment, I will respond in less than an hour. Also if you need affiliate coaching don’t hesitate to bother me.
Later!

Domain	Criminal Network
247onlinemeds.co.uk	No network classification
24hbuyviagraonline.com	Rx-Partners
4med.co.uk	Pharmcash
55reviagra-dosage.com	Rx-Partners
76reviagra-dosage.com	Rx-Partners
777generic-viagra.co.uk	RxProfits
acai-sales.co.uk	No network classification
achat-tadalafil.com	Pharmcash
all-pharma.com	RxProfits
allaboutdiazepam.com	Multinetwork
alltabs4you.com	Pharmcash
apcalis-kamagra.co.uk	No network classification
aurogra.co.uk	No network classification
bajarxmeds.com	Medicina Mexico
bestpricelipitor.com	RxProfits
buy-online-com.ru	Rx-Partners
buy-tramadols-usa.us	Pill Program
buy-viagra-online-24h.com	Rx-Partners
buybluepower.com	No network classification
buyblues.co.uk	No network classification
buycheapgenericviagra.co.uk	No network classification
buycheaplevitraonline.co.uk	No network classification
buycheapritalin.com	Pharmcash
buycialisonlineinuk.co.uk	Rx-Partners
buyonlinewithoutaprescription.com	evapharmacy.ru
buypeptidesonline.com	No network classification
buysildenafilau.com	MyRxAffiliateProgram
buysynthroid.co.uk	Rx-Partners
buytadalafilau.com	MyRxAffiliateProgram
buyviagrainengland.co.uk	No network classification
buyviagraonlineone.co.uk	No network classification
checksafe.biz	MedsPartners
cialis-comprar.net	Rx-Partners
cialis-forsale.com	Rx-Partners
cialis1.ru	No network classification
cialis40mg.us	Rx-Partners
citalopram.co.uk	Rx-Partners
clerkmedic.ru	PharmacyExpress
comprahghonline.com	No network classification
comprar-tadalafil.net	Rx-Partners
comprarkamagraespana.com	Rx-Partners
comprarlevitraespana.com	Rx-Partners
comprarviagra-es.net	Pharmcash
discountvardenafil.com	RxProfits
discountviagrauk.co.uk	Rx-Partners
dropshipper.org.uk	No network classification
dwdoctor.ru	PharmacyExpress
each99.ru	No network classification
ed-sale.com	MyRxAffiliateProgram
edpillsonline.co.uk	Rx-Partners
ellenmeds.org	No network classification
espanacialis.com	Rx-Partners
espanakamagra.com	Rx-Partners
espanalevitra.com	Rx-Partners
espanapropecia.com	Rx-Partners
espanaviagra.com	Rx-Partners
eumedicstore.com	Pillchecks
expresshealthshoprx.com	RxProfits
fitgenerics.com	Pharmatheke
ftdeals.com	evapharmacy.ru
galaxytabcanada.at	evapharmacy.ru
gearedupshop.com	No network classification
generic-hgh.com	No network classification
genericmeds4less.com	RxProfits
genericosildenafil.com	Rx-Partners
genericotadalafil.com	Rx-Partners
globalcareshop.com	MyRxPartner
godsglorychurch.org	evapharmacy.ru
healthmd.biz	RxProfits
hmslim.com	No network classification
iron-juice.com	No network classification
kamagrabirmingham.com	No network classification
kamagraworld.net	No network classification
lbrmedic.ru	PharmacyExpress
levitra-generico.com	Rx-Partners
levitra1.ru	No network classification
levitrai.com	No network classification
lowcostlipitor.com	RxProfits
medforhealth.net	MyRxPartner
medicchick.ru	PharmacyExpress
medicedih.ru	PharmacyExpress
mediconds.ru	PharmacyExpress
medicpol.ru	PharmacyExpress
medicvi6.ru	PharmacyExpress
medicworks.ru	PharmacyExpress
meds-quick.com	No network classification
medshop-trust.net	Pharmcash
medsrxlist.org	Pharmacy-oNet
mega-meds.com	RxProfits
meridiadietabs.com	RxCash.biz
myhealthyerection.com	PharmacyExpress
mysecurepay.biz	MedsPartner
ndixmedic.ru	evapharmacy.ru
norx-de.net	evapharmacy.ru
oepills.ru	PharmacyExpress
online-health-shop.com	MyRxPartner
online-needs.com	No network classification
onlinepillmarket.com	Pharmcash
ordercheapbuyonline.com	evapharmacy.ru
ordermedsstore.com	RxProfits
patchspharm.com	RxProfits
pharmacie-dupin-bormes.com	Everest Network
pharmaonlinesales.com	RxProfits
phenterminelowcost.com	RxCash.biz
pillsformen.nl	No network classification
r5viagra-cost.org	Rx-Partners
reviagra-dosage.com	Rx-Partners
rightpurchase.biz	MedsPartners
rxpil.com	Pharmcash
safe-pay.biz	PharmacyExpress
safepayform.com	Pharmcash
savepillvip-rx.ru	PharmacyExpress
silagrahelp.com	Rx-Partners
sildenafilcomprar.net	Rx-Partners
sildenafiles.com	MyRxAffiliateProgram
steroidsftw.net	No network classification
superstar24.com	Rx-Partners
tadalafil40mg.us	Rx-Partners
tadalafil5mg.us	Rx-Partners
tadalafiles.com	MyRxAffiliateProgram/td>
top4pharmacy.com	RxProfits
topgenericos.com	Everest Network
trustedpaymentsystem.com	evapharmacy.ru
ultra-pharma.com	RxProfits
viagraburada.com	No network classification
vigourdrugstore.com	No network classification
wakefulnesstabs.com	RxCash.biz
wayshealth.net	MyRxPartner
web-pay-safe.com	Pharmcash
withoutaprescription.net	evapharmacy.ru
worldwide-generics.com	RxProfits
xanaxtabsnorx.com	RxCash.biz

Displaying items 1 to 74, out of a total of 74

Email Header Analysis

EVA Pharmacy & FIDELITY-NET.COM / Tripac International Ltd.

Yambo Financials Ltd (United Kingdom)

Email Header Analysis

WARNING LETTER

4rx.com4rx.com fraudulent website Internet

Address lookup

Domain Whois record

Network Whois record

DNS records

Top 10 Rogue Pharmacies Network Affiliation Programs

Top 10 Rogue Pharmacies
Network Affiliation Programs