Canadian Pharmacy – cheaprxpharmstore.com

August 3, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!
Browse Our Selection Today! –> http://cheaprxpharmstore.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
70.45.198.3	Puerto Rico (San Juan)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.164	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Phoebe Roy Mon Aug 3 18:13:20 2009

Return-Path:
Authentication-Results: mta112.sbc.mail.re3.yahoo.com from=gdm.es; domainkeys=neutral (no sig); from=gdm.es; dkim=neutral (no sig)
Received: from 70.45.198.3 (EHLO nlpi150.prodigy.net) (207.115.36.164)
by mta112.sbc.mail.re3.yahoo.com with SMTP; Mon, 03 Aug 2009 18:17:53 -0700
Received: from t79drp1 (host-70-45-198-3.onelinkpr.net [70.45.198.3])
by nlpi150.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n741Hgcp019715;
Mon, 3 Aug 2009 20:17:51 -0500
Message-ID: <000701ca14a0$c17f9fd0$d828ea62@gdm.es>
Reply-To: “Phoebe Roy” <p.royha@gdm.es>
From: “Phoebe Roy” <p.royha@gdm.es>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Mon, 03 Aug 2009 20:13:20 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 173

Address lookup

canonical name	cheaprxpharmstore.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmstore.com“…

   Domain Name: CHEAPRXPHARMSTORE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.VR4NS.COM
   Name Server: NS2.MQ2NS.MOBI
   Name Server: NS3.JY7NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 03-aug-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

>>> Last update of whois database: Tue, 04 Aug 2009 04:23:18 UTC <<<

Queried whois.ename.com with “cheaprxpharmstore.com“…

Domain Name : cheaprxpharmstore.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.vr4ns.com
ns2.mq2ns.mobi
ns3.jy7ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

cheaprxpharmstore.com

SOA

server:	ns1.domain.com
email:	admin.domain.com
serial:	1
refresh:	300
retry:	300
expire:	300
minimum ttl:	86400

86400s

(1.00:00:00)

cheaprxpharmstore.com

ns3.cheaprxpharmstore.com

86400s

(1.00:00:00)

cheaprxpharmstore.com

ns2.cheaprxpharmstore.com

86400s

(1.00:00:00)

cheaprxpharmstore.com

ns1.cheaprxpharmstore.com

86400s

(1.00:00:00)

cheaprxpharmstore.com

60.12.166.154

86400s

(1.00:00:00)

cheaprxpharmstore.com

ns4.cheaprxpharmstore.com

86400s

(1.00:00:00)

— end —

Canadian Pharmacy – online-tabs.net

August 2, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

Address lookup

canonical name	online-tabs.net.
aliases
addresses	195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

online-tabs.net

SOA

server:	ns1.nscontrol.com
email:	root.online-tabs.net
serial:	2007100801
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	30

60s

(00:01:00)

online-tabs.net

195.95.155.3

60s

(00:01:00)

online-tabs.net

ns2.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns3.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns5.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns4.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns1.nscontrol.com

60s

(00:01:00)

— end —

Canadian Pharmacy – CANADIAN-DRUG-SHOP.COM

August 2, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Address lookup

canonical name	canadian-drug-shop.com.
aliases
addresses	69.46.228.186

Domain Whois record

Queried whois.internic.net with “dom canadian-drug-shop.com“…

   Domain Name: CANADIAN-DRUG-SHOP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.PARKED.COM
   Name Server: NS2.PARKED.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 25-jun-2008
   Creation Date: 29-jul-2002
   Expiration Date: 29-jul-2011

Last update of whois database: Sun, 02 Aug 2009 16:49:35 UTC <<<

Queried whois.godaddy.com with “canadian-drug-shop.com“…

Registrant:
   RUMIT SAHNI

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: CANADIAN-DRUG-SHOP.COM

   Domain servers in listed order:
      NS1.PARKED.COM
      NS2.PARKED.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-69-46-226-0-1“…

OrgName:    Parked.com, LLC
OrgID:      PARKE-19
Address:    5505 West Gray Street
City:       Tampa
StateProv:  FL
PostalCode: 33609
Country:    US

NetRange:   69.46.226.0 - 69.46.228.255
CIDR:       69.46.226.0/23, 69.46.228.0/24
OriginAS:   AS11575
NetName:    PARKED1
NetHandle:  NET-69-46-226-0-1
Parent:     NET-69-46-224-0-1
NetType:    Reallocated
NameServer: NS0.ZIPA.COM
NameServer: NS1.ZIPA.COM
Comment:
RegDate:    2007-10-23
Updated:    2007-10-23

RNOCHandle: NETWO2072-ARIN
RNOCName:   Network Administrator
RNOCPhone:  +1-813-386-2801
RNOCEmail:  netadmin@parked.com 

OrgTechHandle: DOMAI142-ARIN
OrgTechName:   Domain Administrator
OrgTechPhone:  +1-813-386-2801
OrgTechEmail:  admin@parked.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name

class

type

data

time to live

canadian-drug-shop.com

SOA

server:	ns1.parked.com
email:	admin.parked.com
serial:	2008062520
refresh:	28800
retry:	7200
expire:	1209600
minimum ttl:	86400

86400s

(1.00:00:00)

canadian-drug-shop.com

69.46.228.186

86400s

(1.00:00:00)

canadian-drug-shop.com

ns1.parked.com

86400s

(1.00:00:00)

canadian-drug-shop.com

ns2.parked.com

86400s

(1.00:00:00)

186.228.46.69.in-addr.arpa

PTR

69-46-228-186.parked.com

86400s

(1.00:00:00)

— end —

CANADIAN-DRUG-SHOP.COM is involved in a MASSIVE SPAM operation and is a menace to the internet.

Canadian Pharmacy Spam Servers – rx-partners. biz

August 2, 2009Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

SmartFilter Category:	Not Categorized Make Category Suggestions
Namerservers on IP:	dns2.onlinemedson.net ns0.rx-sharedhost.com ns0.rxp-hosting.com ns1.edportu.com ns1.partners-dns.com ns1.viagravendita.com ns2.bestpharm.org ns2.drugs-on.net ns2.edportu.com ns2.esfarmaciaonline.com ns2.genericdrugson.net ns2.healthproductson.net ns2.medications-on.net ns2.medsshop.org ns3.cesaonline.net whatever.rxp-alive.com

Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com

buyusarx.com

edcustomer.com

enjoymeds.com

hoodiaweightlosstablets.com

Domain

ultimatepillstore.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy- cheapest-drug.org – rx-partners.biz

August 2, 20091 Comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Submitted by Rune on May 18, 2008 – 16:05

I don’t ever bother to mention the problematic “affiliate did it” argument.

This guy is not directly spamming the domain in question, cheapest-drug.org.
He has instead registered as a user on several forums/communities, giving a link to a domain (or several) in his userprofile and spamvertizes his userprofile via comments.

The latest from today came in via 207.38.4.12 which appears to be a free open proxy on “M9 Systems” in Canada. Tries to leave a comment on the posting about can-spam mailers.

“User”: Paeal (including a link to a wikidot.com site, I reckon they will nuke it).
Subject: “Your site has very much liked me.” (That seems to be a favourite among commentspammers).
The links in the commentspam:
http://forums.ugo.com/member.php?u=46618 “>Buy Viagra
http://www.mixx.com/users/viagrapill “>buy viagra online<
http://ubuntuforums.org/member.php?u=580712 “>buy cialis online
http://www.flixster.com/user/levitraa “>buy levitra

For examples of this comment- (and guestbook-) spammer, see this search result (Google):
“u=46618” +ugo

The links in the userprofiles at the forums/communities above all goes to various pages at cheapest-drug.org.
cheapest-drug.org is hosted at 91.199.112.8, which is rx-partners.biz who has their own listing in Spamhaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64756

rx-partners.biz are sneaky. This probably does not violate their policies and their “affiliates” can happily continue with their comment spam. Or what, Jessica? (rx-partners won’t listen, jessicaeagloff@yahoo.co.uk comes back to me and their form submission does not work/or I can’t read their captcha. Not my problem)

Screenshot from cheapest-drug.org (click on it for a larger one):

Address lookup

canonical name	cheapest-drug.org.
aliases
addresses	91.199.112.104

Domain Whois record

Queried whois.publicinterestregistry.net with “cheapest-drug.org“…

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:01-Jan-2009 00:28:52 UTC
Expiration Date:15-Nov-2009 17:56:41 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:OK

Registrant ID:ec82bbcdbb3
Registrant Name:WhoisGuard  Protected
Registrant Organization:WhoisGuard
Registrant Street1:8939 S. Sepulveda Blvd. #110 -
Registrant City:Westchester
Registrant State/Province:CA
Registrant Postal Code:90045
Registrant Country:US
Registrant Phone:+1.6613102107
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com

Admin ID:ec82bbcdbb3
Admin Name:WhoisGuard  Protected
Admin Organization:WhoisGuard
Admin Street1:8939 S. Sepulveda Blvd. #110 -
Admin City:Westchester
Admin State/Province:CA
Admin Postal Code:90045
Admin Country:US
Admin Phone:+1.6613102107
Admin Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com

Tech ID:ec82bbcdbb3
Tech Name:WhoisGuard  Protected
Tech Organization:WhoisGuard
Tech Street1:8939 S. Sepulveda Blvd. #110 -
Tech City:Westchester
Tech State/Province:CA
Tech Postal Code:90045
Tech Country:US
Tech Phone:+1.6613102107
Tech Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com

Name Server:ELD.STEELURK.COM
Name Server:ISA.STEELURK.COM

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.104“…

Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 104.112.199.91.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

cheapest-drug.org

SOA

server:	eld.steelurk.com
email:	root.steelurk.com
serial:	2006669692
refresh:	3600
retry:	900
expire:	604800
minimum ttl:	1200

1200s

(00:20:00)

cheapest-drug.org

eld.steelurk.com

1200s

(00:20:00)

cheapest-drug.org

isa.steelurk.com

1200s

(00:20:00)

cheapest-drug.org

91.199.112.104

1200s

(00:20:00)

— end —

cheapest-drug.org

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:22-Jan-2008 13:37:03 UTC
Expiration Date:15-Nov-2008 17:56:41 UTC
Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd.
					d/b/a PublicDomainRegistry.com (R27-LROR)
Status:OK
Registrant ID:DI_7040912
Registrant Name:saniok
Registrant Organization:RX-partner
Registrant Street1:Alexandr cel bun 94/53
Registrant City:Hincesti
Registrant State/Province:0
Registrant Postal Code:3401
Registrant Country:MD
Registrant Phone:+373.079777957
Registrant Phone Ext.:
Registrant Email:saniok44@gmail.com

Admin ID:DI_7040912
Admin Name:saniok
Admin Organization:RX-partner
Admin Street1:Alexandr cel bun 94/53
Admin City:Hincesti
Admin State/Province:0
Admin Postal Code:3401
Admin Country:MD
Admin Phone:+373.079777957
Admin Email:saniok44@gmail.com

Tech ID:DI_7040912
Tech Name:saniok
Tech Organization:RX-partner
Tech Street1:Alexandr cel bun 94/53
Tech City:Hincesti
Tech State/Province:0
Tech Postal Code:3401
Tech Country:MD
Tech Phone:+373.079777957
Tech Phone Ext.:

Tech Email:saniok44@gmail.com
Name Server:ONLINE.RXP-FOREVER.COM
Name Server:LIVE.RXP-FOREVER.COM

; <<>> DiG 9.3.4-P1 <<>> cheapest-drug.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59717
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;cheapest-drug.org.             IN      A

;; ANSWER SECTION:
cheapest-drug.org.      1200    IN      A       91.199.112.8

;; AUTHORITY SECTION:
cheapest-drug.org.      1200    IN      NS      online.rxp-forever.com.
cheapest-drug.org.      1200    IN      NS      live.rxp-forever.com.

;; ADDITIONAL SECTION:
live.rxp-forever.com.   52213   IN      A       91.199.112.8
online.rxp-forever.com. 52213   IN      A       91.199.112.7

;; Query time: 201 msec
;; SERVER: 217.13.7.140#53(217.13.7.140)
;; WHEN: Sun May 18 14:58:55 2008
;; MSG SIZE  rcvd: 138

91.199.112.8

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
source:         RIPE # Filtered

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
source:         RIPE # Filtered

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

“jessica Eagloff”. That is rx-partners.biz.
See this SBL-listing:

Canadian Pharmacy – Botnet Hosting – 1-888-298-7454

August 1, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Here is the url:

http://www.foresight.org/briefing/?buy-levitra-online-sildenafil-citrate&briefing=395

www.viagrasupply.com – Viagra Supply

Address lookup

canonical name	www.foresight.org.
aliases
addresses	66.201.49.40

Domain Whois record

Queried whois.publicinterestregistry.net with “foresight.org“…

Domain ID:D825803-LROR
Domain Name:FORESIGHT.ORG
Created On:18-Feb-1994 05:00:00 UTC
Last Updated On:13-Feb-2009 20:49:17 UTC
Expiration Date:19-Feb-2010 05:00:00 UTC
Sponsoring Registrar:Dotster, Inc. (R34-LROR)
Status:OK

Registrant ID:DOT-Y3GBIH2PZG0C
Registrant Name:Foresight Institute
Registrant Organization:Foresight Institute
Registrant Street1:PO Box 61058
Registrant City:Palo Alto
Registrant State/Province:CA
Registrant Postal Code:94306
Registrant Country:US
Registrant Phone:+1.6502890860
Registrant Email:domaininfo@foresight.org

Admin ID:DOT-3HF0UXIJAJJF
Admin Name:Foresight Institute
Admin Organization:Foresight Institute
Admin Street1:PO Box 61058
Admin City:Palo Alto
Admin State/Province:CA
Admin Postal Code:94306
Admin Country:US
Admin Phone:+1.6502890860
Admin Email:domaininfo@foresight.org

Tech ID:DOT-UKF3EN547CDK
Tech Name:Foresight Institute
Tech Organization:Foresight Institute
Tech Street1:PO Box 61058
Tech City:Palo Alto
Tech State/Province:CA
Tech Postal Code:94306
Tech Country:US
Tech Phone:+1.6502890860
Tech Email:domaininfo@foresight.org

Name Server:NS1.NAMERESOLVE.COM
Name Server:NS2.NAMERESOLVE.COM
Name Server:NS3.NAMERESOLVE.COM
Name Server:NS4.NAMERESOLVE.COM

Network Whois record

Queried whois.arin.net with “!NET-66-201-49-0-1“…

CustName:   Tarlton Properties
Address:    1455 Adams Drive
City:       Menlo Park
StateProv:  CA
PostalCode: 94025
Country:    US
RegDate:    2008-06-18
Updated:    2008-06-18

NetRange:   66.201.49.0 - 66.201.49.127
CIDR:       66.201.49.0/25
OriginAS:   AS26803
NetName:    TARLTONPROPERTIESMBP
NetHandle:  NET-66-201-49-0-1
Parent:     NET-66-201-32-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-06-18
Updated:    2008-06-18

RTechHandle: BEV-ARIN
RTechName:   Evans, Bob
RTechPhone:  +1-650-330-0428
RTechEmail:  bob@fiberinternetcenter.com 

OrgNOCHandle: FIBER-ARIN
OrgNOCName:   FiberNOC
OrgNOCPhone:  +1-650-330-0428
OrgNOCEmail:  info@fiberinternetcenter.com

OrgTechHandle: BEV-ARIN
OrgTechName:   Evans, Bob
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  bob@fiberinternetcenter.com

OrgTechHandle: SWIPI-ARIN
OrgTechName:   Swip Information
OrgTechPhone:  +1-650-330-0428
OrgTechEmail:  swip@fiberinternetcenter.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name

class

type

data

time to live

http://www.foresight.org

66.201.49.40

3600s

(01:00:00)

foresight.org

SOA

server:	ns1.nameresolve.com
email:	hostmaster.foresight.org
serial:	2009080112
refresh:	16384
retry:	2048
expire:	1048576
minimum ttl:	2560

86400s

(1.00:00:00)

foresight.org

ns1.nameresolve.com

86400s

(1.00:00:00)

foresight.org

ns2.nameresolve.com

86400s

(1.00:00:00)

foresight.org

ns3.nameresolve.com

86400s

(1.00:00:00)

foresight.org

ns4.nameresolve.com

86400s

(1.00:00:00)

foresight.org

preference:	20
exchange:	snow.he.net

3600s

(01:00:00)

foresight.org

TXT

“v=spf1″v=spf1 a mx a:thorin.netconcepts.com ~all”

86400s

(1.00:00:00)

foresight.org

preference:	1
exchange:	aspmx.l.google.com

3600s

(01:00:00)

foresight.org

preference:	5
exchange:	alt1.aspmx.l.google.com

3600s

(01:00:00)

foresight.org

preference:	10
exchange:	aspmx5.googlemail.com

3600s

(01:00:00)

foresight.org

preference:	5
exchange:	alt2.aspmx.l.google.com

3600s

(01:00:00)

foresight.org

preference:	10
exchange:	aspmx4.googlemail.com

3600s

(01:00:00)

foresight.org

preference:	10
exchange:	aspmx3.googlemail.com

3600s

(01:00:00)

foresight.org

preference:	10
exchange:	aspmx2.googlemail.com

3600s

(01:00:00)

foresight.org

66.201.49.40

3600s

(01:00:00)

40.49.201.66.in-addr.arpa

PTR

foresight.org

1200s

(00:20:00)

— end —

Address lookup

canonical name	www.viagrasupply.com.
aliases
addresses	74.52.66.139

Domain Whois record

Queried whois.internic.net with “dom viagrasupply.com“…

   Domain Name: VIAGRASUPPLY.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: DNS1.ANSWERABLE.COM
   Name Server: DNS2.ANSWERABLE.COM
   Status: ok
   Updated Date: 11-dec-2008
   Creation Date: 07-aug-2008
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Sat, 01 Aug 2009 22:52:14 UTC <<<

Queried whois.onlinenic.com with “viagrasupply.com“…

Query error: TimedOut

Network Whois record

Queried whois.arin.net with “74.52.66.139“…

OrgName:    ThePlanet.com Internet Services, Inc.
OrgID:      TPCM
Address:    315 Capitol
Address:    Suite 205
City:       Houston
StateProv:  TX
PostalCode: 77002
Country:    US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange:   74.52.0.0 - 74.55.255.255
CIDR:       74.52.0.0/14
OriginAS:   AS13749,  AS21844,  AS30315,  AS36420
NetName:    NETBLK-THEPLANET-BLK-14
NetHandle:  NET-74-52-0-0-1
Parent:     NET-74-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate:    2006-02-17
Updated:    2009-02-24

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560
RAbuseEmail:  abuse@theplanet.com 

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3555
RNOCEmail:  noc@theplanet.com 

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-214-782-7800
RTechEmail:  admins@theplanet.com 

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560
OrgAbuseEmail:  abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3555
OrgNOCEmail:  noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-214-782-7800
OrgTechEmail:  admins@theplanet.com

# ARIN WHOIS database, last updated 2009-07-31 21:13

DNS records

name

class

type

data

time to live

http://www.viagrasupply.com

74.52.66.139

38380s

(10:39:40)

viagrasupply.com

74.52.66.139

38400s

(10:40:00)

viagrasupply.com

dns2.answerable.com

38400s

(10:40:00)

viagrasupply.com

SOA

server:	dns1.answerable.com
email:	claytonrand.hotmail.com
serial:	2008100502
refresh:	7200
retry:	7200
expire:	2419200
minimum ttl:	38400

86400s

(1.00:00:00)

viagrasupply.com

dns4.answerable.com

38400s

(10:40:00)

viagrasupply.com

dns3.answerable.com

38400s

(10:40:00)

viagrasupply.com

dns1.answerable.com

38400s

(10:40:00)

139.66.52.74.in-addr.arpa

PTR

8b.42.344a.static.theplanet.com

86400s

(1.00:00:00)

— end —

Canadian Pharmacy Spam – bestcheaprxpharm.com

July 31, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
151.11.178.165	Italy (Milan)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.139	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Vicodin`ES, Phentermin, XanaxAmbien, and others are here at your fingertips!
N0_Doctor_or_Prescription_Needed! Brand & Generic Names Available!
Fast_Trackable USPS_Shipping!
Browse_Our_Site_Today –> http://bestcheaprxpharm.com

From Joesph Holden Thu Jul 30 21:46:04 2009
Return-Path:
Authentication-Results: mta137.sbc.mail.re3.yahoo.com from=f2s.de; domainkeys=neutral (no sig); from=f2s.de; dkim=neutral (no sig)
Received: from 151.11.178.165 (EHLO nlpi125.prodigy.net) (207.115.36.139)
by mta137.sbc.mail.re3.yahoo.com with SMTP; Thu, 30 Jul 2009 22:49:25 -0700
Received: from iffjn11 ([151.11.178.165])
by nlpi125.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6V5n1ng031842;
Fri, 31 Jul 2009 00:49:23 -0500
Message-ID: <000701ca1199$cf606530$627e2c7a@f2s.de>
Reply-To: “Joesph Holden” jholdenie@f2s.de
From: “Joesph Holden” jholdenie@f2s.de
To: , ,
Subject: Phentermin helps get off the weight!
Date: Fri, 31 Jul 2009 00:46:04 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 235

SmartFilter Category: Not Categorized
Make Category Suggestions

IP: 218.61.126.24

Nameservers: ns1.bestcheaprxpharm.com

ns2.bestcheaprxpharm.com

ns3.bestcheaprxpharm.com

ns4.bestcheaprxpharm.com

Address lookup

canonical name	bestcheaprxpharm.com.
aliases
addresses	218.61.126.24

Domain Whois record

Queried whois.internic.net with “dom bestcheaprxpharm.com“…

   Domain Name: BESTCHEAPRXPHARM.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.BD4NS.COM
   Name Server: NS2.EF2NS.COM
   Name Server: NS3.BR4NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-jul-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

>>> Last update of whois database: Fri, 31 Jul 2009 15:02:39 UTC <<<

Queried whois.ename.com with “bestcheaprxpharm.com“…

Domain Name : bestcheaprxpharm.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.bd4ns.com
ns2.ef2ns.com
ns3.br4ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “218.61.126.24“…

inetnum:      218.60.0.0 - 218.61.255.255
netname:      UNICOM-LN
country:      CN
descr:        China Unicom Liaoning province network
descr:        China Unicom
admin-c:      CH1302-AP
tech-c:       GZ84-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-LN
mnt-routes:   MAINT-CNCGROUP-RR
changed:      hm-changed@apnic.net 20040405
changed:      hm-changed@apnic.net 20040927
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20080415
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        218.60.0.0/15
descr:        CNC Group CHINA169 Liaoning Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Guangyu Zhan
nic-hdl:      GZ84-AP
e-mail:       abuse@online.ln.cn
address:      DATA Communication Bureau of Liaoning Province,China
address:      38 Lianhe Road,Dadong District Shenyang 110044,China
phone:        +86-24-22800096
fax-no:       +86-24-22800368
country:      CN
changed:      zhangy@lntelecom.com 20030122
mnt-by:       MAINT-CNCGROUP-LN
source:       APNIC

DNS records

DNS query for 24.126.61.218.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

bestcheaprxpharm.com

SOA

server:	ns1.domain.com
email:	admin.domain.com
serial:	1
refresh:	300
retry:	300
expire:	300
minimum ttl:	86400

86400s

(1.00:00:00)

bestcheaprxpharm.com

ns3.bestcheaprxpharm.com

86400s

(1.00:00:00)

bestcheaprxpharm.com

ns2.bestcheaprxpharm.com

86400s

(1.00:00:00)

bestcheaprxpharm.com

ns1.bestcheaprxpharm.com

86400s

(1.00:00:00)

bestcheaprxpharm.com

218.61.126.24

86400s

(1.00:00:00)

bestcheaprxpharm.com

ns4.bestcheaprxpharm.com

86400s

(1.00:00:00)

— end —

Information for ‘218.61.126.24’

SmartFilter Category:

Gambling
Make Category Suggestions

Namerservers on IP:

ns1.bc3ns.com
ns1.casinoopenlive.com
ns1.drovosekdns.com
ns1.easystuff2009.com
ns1.fa6ns.com
ns1.hoo5ns.com
ns1.interestsdns.com
ns1.magnifydns.com
ns1.mc3ns.com
ns1.myns.asia
ns1.myns.in
ns1.quickns.asia
ns1.streetdns.com
ns1.thebestusrx.com
ns1.usacheapmeds.com
ns1.vb7ns.com
ns1.ye7ns.com
ns1.zooparkdns.com
ns2.casinoopenlive.com
ns2.directordns.com
ns2.drovosekdns.com
ns2.ef2ns.com
ns2.excessdns.com
ns2.ga2ns.com
ns2.getin485.net
ns2.gromdns.com
ns2.gt6ns.com
ns2.gutgal.com
ns2.hockeydns.com
ns2.ke2ns.net
ns2.le8ns.net
ns2.lo8ns.com
ns2.magnifydns.com
ns2.myeasystuff2009.com
ns2.na7ns.com
ns2.ng3ns.com
ns2.nosorogdns.com
ns2.rot5ns.com
ns2.southeparkdns.com
ns2.streetdns.com
ns2.tc7ns.com
ns2.thebestusrx.com
ns2.thebestusrxnow.com
ns2.zooparkdns.com
ns3.bigtestidns.com
ns3.bmw5seriesdns.com
ns3.casinoopenlive.com
ns3.drovosekdns.com
ns3.euromarketsoft.com
ns3.gipermegadns.com
ns3.hannowerass.com
ns3.j8wns.net
ns3.ke2ns.net
ns3.movepors.com
ns3.nosorogdns.com
ns3.r4ins.com
ns3.southeparkdns.com
ns3.tc7ns.com
ns3.tep1nss.com
ns3.tertorests.com
ns3.top1ns.com
ns3.xionadopa.com
ns3.zooparkdns.com
ns4.bmw5seriesdns.com
ns4.casinoopenlive.com
ns4.excessdns.com
ns4.gipermegadns.com
ns4.gromdns.com
ns4.lo8ns.com
ns4.magnifydns.com
ns4.southeparkdns.com
ns4.tc7ns.com
ns4.ye7ns.com

Canadian Pharmacy – usonlinepharm.com

July 31, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

usonlinepharm

Address lookup

canonical name	usonlinepharm.com.
aliases
addresses	92.48.96.141

Domain Whois record

Queried whois.internic.net with “dom usonlinepharm.com“…

   Domain Name: USONLINEPHARM.COM
   Registrar: SPOT DOMAIN LLC DBA DOMAINSITE.COM
   Whois Server: whois.domainsite.com
   Referral URL: http://www.domainsite.com
   Name Server: NS2.ZONEEDIT.COM
   Name Server: NS4.ZONEEDIT.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 16-nov-2008
   Creation Date: 22-oct-2008
   Expiration Date: 22-oct-2009

>>> Last update of whois database: Fri, 31 Jul 2009 14:31:56 UTC <<<

Queried whois.domainsite.com with “usonlinepharm.com“…

Visit AboutUs.org for more information about usonlinepharm.com
<a href="http://www.aboutus.org/usonlinepharm.com">AboutUs: usonlinepharm.com</a>

Domain Name:     usonlinepharm.com
Registrar:       Spot Domain LLC

Protected Domain Services Customer ID: DSR-860526

Expiration Date: 2009-10-22 21:14:17
Creation Date:   2008-10-22 15:14:17

Name Servers:
	ns2.zoneedit.com
	ns4.zoneedit.com

REGISTRANT CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

ADMINISTRATIVE CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

TECHNICAL CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

BILLING CONTACT INFO
Protected Domain Services - Customer ID: DSR-860526
125 Rampart Way
Suite 300
Denver
CO
80230
US
Phone:         +1.3034596012 
Email Address: usonlinepharm.com@protecteddomainservices.com

1249050755.9468

The Data in the Spot Domain LLC WHOIS database is provided by Spot Domain LLC for information purposes, and to assist persons in obtaining information about or related to a domain name registration record.  Spot Domain LLC does not guarantee its accuracy.  By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to:  (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Spot Domain LLC (or its systems). Spot Domain LLC reserves the right to modify these terms at any time.  By submitting this query, you agree to abide by this policy.

Network Whois record

Queried whois.ripe.net with “-B 92.48.96.141“…

% Information related to '92.48.96.136 - 92.48.96.143'

inetnum:        92.48.96.136 - 92.48.96.143
netname:        BlueConnex-44757
descr:          BlueConnex transit customer
remarks: ##############################################################
remarks:        Please report abuse incidents to abuse@blueconnex.net
remarks:        Messages sent to other contact addresses may not be acted upon.
remarks: ##############################################################
country:        GB
admin-c:        BLO2-RIPE
tech-c:         BLO2-RIPE
status:         ASSIGNED PA
mnt-by:         blueconnex-mnt
mnt-routes:     blueconnex-mnt
source:         RIPE
changed:        pete.bristow@bluesquaredata.com 20090325

role:           BlueConnex Ltd Operators
address:        BlueConnex Ltd
address:        BlueSquare House
address:        Priors Way
address:        Maidenhead
address:        Berkshire
address:        SL62HP
remarks:        For abuse please contact abuse@blueconnex.net
phone:          +44 (0)1628 673131
admin-c:        PETE3-RIPE
admin-c:        MM5420-RIPE
admin-c:        ROB153-RIPE
tech-c:         MM5420-RIPE
tech-c:         ROB153-RIPE
mnt-by:         blueconnex-mnt
tech-c:         PETE3-RIPE
nic-hdl:        BLO2-RIPE
changed:        support@pcs-net.com 20081012
source:         RIPE
e-mail:         abuse@blueconnex.net

% Information related to '92.48.64.0/18AS29550'

route:          92.48.64.0/18
descr:          Blueconnex Networks Ltd
origin:         AS29550
remarks:        ***********************************
remarks:        *                                 *
remarks:        * Abuse: abuse@blueconnex.net     *
remarks:        *                                 *
remarks:        * Peering: peering@blueconnex.net *
remarks:        *                                 *
remarks:        ***********************************
mnt-by:         blueconnex-mnt
source:         RIPE
changed:        brian.ross@netsumo.com 20080718

DNS records

name

class

type

data

time to live

usonlinepharm.com

92.48.96.141

7200s

(02:00:00)

usonlinepharm.com

ns2.zoneedit.com

7200s

(02:00:00)

usonlinepharm.com

ns4.zoneedit.com

7200s

(02:00:00)

usonlinepharm.com

SOA

server:	ns2.zoneedit.com
email:	soacontact.zoneedit.com
serial:	1226850235
refresh:	14400
retry:	7200
expire:	950400
minimum ttl:	7200

7200s

(02:00:00)

usonlinepharm.com

preference:	0
exchange:	mail.usonlinepharm.com

7200s

(02:00:00)

141.96.48.92.in-addr.arpa

PTR

92-48-96-141.static.as29550.net

86400s

(1.00:00:00)

— end —

Canadian Pharmacy Spam – bestuspharm.com

July 31, 20092 Comments

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Address lookup

canonical name	.bestuspharm.com.
aliases
addresses	92.48.96.138

Domain Whois record

Queried whois.internic.net with “dom bestuspharm.com“…

Domain Name: BESTUSPHARM.COM
Registrar: SPOT DOMAIN LLC DBA DOMAINSITE.COM
Whois Server: whois.domainsite.com
Referral URL: http://www.domainsite.com
Name Server: NS2.ZONEEDIT.COM
Name Server: NS4.ZONEEDIT.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 21-aug-2008
Creation Date: 21-aug-2008
Expiration Date: 21-aug-2009

Last update of whois database: Fri, 31 Jul 2009 14:21:27 UTC
Queried whois.domainsite.com with “bestuspharm.com“…

Registrar: Spot Domain LLC
Domain Name: bestuspharm.com

Protected Domain Services Customer ID: DSR-834978

Expiration Date: 2009-08-21 17:11:19
Creation Date: 2008-08-21 11:11:20

Name Servers:
ns2.zoneedit.com
ns4.zoneedit.com

REGISTRANT CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way
Suite 300
Denver
CO 80230
US

Phone: +1.3034596012

Email Address: bestuspharm.com@protecteddomainservices.com
ADMINISTRATIVE CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way Suite 300
Denver CO 80230
US

Phone: +1.3034596012

Email Address: bestuspharm.com@protecteddomainservices.com
TECHNICAL CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way Suite 300
Denver CO
80230
US
Phone: +1.303-459-6012

Email Address: bestuspharm.com@protecteddomainservices.com
BILLING CONTACT INFO
Protected Domain Services – Customer ID: DSR-834978
125 Rampart Way
Suite 300
Denver CO 80230
US

Phone: +1.3034596012
Email Address: bestuspharm.com@protecteddomainservices.com
1249050126.3771

Network Whois record

Queried whois.ripe.net with “-B 92.48.96.138

Information related to ‘92.48.96.136 – 92.48.96.143

inetnum: 92.48.96.136 – 92.48.96.143
netname: BlueConnex-44757
descr: BlueConnex transit customer

remarks: #############################################

remarks: Please report abuse incidents to abuse@blueconnex.net
remarks: Messages sent to other contact addresses may not be acted upon.

remarks: ############################################

country: GB
admin-c: BLO2-RIPE
tech-c: BLO2-RIPE
status: ASSIGNED PA
mnt-by: blueconnex-mnt
mnt-routes: blueconnex-mnt
source: RIPE
changed: pete.bristow@bluesquaredata.com 20090325
role: BlueConnex Ltd Operators
address: BlueConnex Ltd
address: BlueSquare House
address: Priors Way
address: Maidenhead
address: Berkshire
address: SL62HP

remarks: For abuse please contact abuse@blueconnex.net

phone: +44 (0)1628 673131
admin-c: PETE3-RIPE
admin-c: MM5420-RIPE
admin-c: ROB153-RIPE
tech-c: MM5420-RIPE
tech-c: ROB153-RIPE
mnt-by: blueconnex-mnt
tech-c: PETE3-RIPE
nic-hdl: BLO2-RIPE
changed: support@pcs-net.com 20081012
source: RIPE
e-mail: abuse@blueconnex.net
Information related to ‘92.48.64.0/18AS29550’

route: 92.48.64.0/18
descr: Blueconnex Networks Ltd
origin: AS29550
remarks: ***********************************
remarks: * *
remarks: * Abuse: abuse@blueconnex.net *
remarks: * *
remarks: * Peering: peering@blueconnex.net *
remarks: * *
remarks: ***********************************
mnt-by: blueconnex-mnt
source: RIPE
changed: brian.ross@netsumo.com 20080718

DNS records

name

class

type

data

time to live

http://www.bestuspharm.com

92.48.96.138

7200s

(02:00:00)

bestuspharm.com

92.48.96.138

7200s

(02:00:00)

bestuspharm.com

ns2.zoneedit.com

7200s

(02:00:00)

bestuspharm.com

ns4.zoneedit.com

7200s

(02:00:00)

bestuspharm.com

SOA

server:	ns2.zoneedit.com
email:	soacontact.zoneedit.com
serial:	1219340336
refresh:	14400
retry:	7200
expire:	950400
minimum ttl:	7200

7200s

(02:00:00)

bestuspharm.com

preference:	0
exchange:	bestuspharm.com

7200s

(02:00:00)

bestuspharm.com

preference:	5
exchange:	mail.bestuspharm.com

7200s

(02:00:00)

138.96.48.92.in-addr.arpa

PTR

mail.bestuspharm.com

86400s

(1.00:00:00)

— end —

Report: BestRXPharm
Category: Pharmacies
BestRXPharm – Trust-net Complete scam! bestrxpharm.com Internet

BestRXPharm
Phone: 212-461-1188
Fax: 212-4611188
www.bestrxpharm.com
Internet
U.S.A.

I have ordered from them, the shipment has never arrived. I have contact Bestrxpharm and Trust-net (the payment provider). They both failed to reply my email. It has now been more than two months since the transaction.

Please don’t order from them! Complete scam!

Joey

ShumShuiPo

Hong Kong

Canadian Pharmacy Spam – cheaprxpharmonline.com

July 30, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
122.56.218.44	New Zealand (Auckland)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.183	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Harold Messer Wed Jul 29 18:44:25 2009
Return-Path:
Authentication-Results: mta153.sbc.mail.mud.yahoo.com from=sm.luth.se; domainkeys=neutral (no sig); from=sm.luth.se; dkim=neutral (no sig)
Received: from 122.56.218.44 (EHLO flpi181.prodigy.net) (207.115.20.183)
by mta153.sbc.mail.mud.yahoo.com with SMTP; Wed, 29 Jul 2009 18:44:40 -0700
Received: from 7n8k622 (122-56-218-44.mobile.telecom.co.nz [122.56.218.44] (may be forged))
by flpi181.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6U1hWEk003354;
Wed, 29 Jul 2009 18:44:37 -0700
Message-ID: <000701ca10b7$44cbffc0$627e0202@sm.luth.se>
Reply-To: “Harold Messer” <haroldmesser_zw@sm.luth.se
From: “Harold Messer” <haroldmesser_zw@sm.luth.se
To: , ,
Subject: Need some help focusing?.. get Ritalin!
Date: Wed, 29 Jul 2009 18:44:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 219

VicodinES, XanaxAmbien, Codeine, Phentermin and many more!
No Doctor or Prescription Needed! Brand & Generic Names Available!
Fast Trackable USPS Shipping!
Browse Our Site Today –> http://cheaprxpharmonline.com

SmartFilter Category: Not Categorized
Make Category Suggestions

IP: 60.12.166.154

Nameservers: ns1.cheaprxpharmonline.com ns2.cheaprxpharmonline.com

ns3.cheaprxpharmonline.com

ns4.cheaprxpharmonline.com

nameservers missing in zone

hot1gaming.com X X

ns1.bd4ns.com X X

ns1.cheaprxpharmonline.com

X X

ns2.cheaprxpharmonline.com

X X

ns2.ef2ns.com X X

ns3.br4ns.com X X

ns3.cheaprxpharmonline.com

X X

ns4.cheaprxpharmonline.com

X X

sdavaiteres.com

hostnames sharing ip with a-records

*.sdavaiteres.com

hot1gaming.com

ns1.listendns.com

ns1.sdavaiteres.com

ns2.sdavaiteres.com

ns3.fa6ns.com

ns3.sdavaiteres.com

ns4.sdavaiteres.com

sdavaiteres.com

www.softokors.com

Address lookup

canonical name	cheaprxpharmonline.com.
aliases
addresses	60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom cheaprxpharmonline.com“…

   Domain Name: CHEAPRXPHARMONLINE.COM
   Registrar: XIAMEN ENAME NETWORK TECHNOLOGY CORPORATION LIMITED DBA ENAME CORP
   Whois Server: whois.ename.com
   Referral URL: http://www.ename.com
   Name Server: NS1.BD4NS.COM
   Name Server: NS2.EF2NS.COM
   Name Server: NS3.BR4NS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-jul-2009
   Creation Date: 03-apr-2009
   Expiration Date: 03-apr-2010

 Last update of whois database: Thu, 30 Jul 2009 15:12:12 UTC <<<

Queried whois.ename.com with “cheaprxpharmonline.com“…

Domain Name : cheaprxpharmonline.com

Registrant Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Administrative Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Technical Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Billing Contact Information :
XINGYUNRI
XINGYUNRI
baobao7802@hotmail.com
TONGLUOWAN15, 026974
tel: +86 086482179624
fax: +86 086482179624 

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.bd4ns.com
ns2.ef2ns.com
ns3.br4ns.com

Registration Date :2009-4-3
Expiration Date : 2010-4-3

For more information, please go to http://whois.ename.com.

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

cheaprxpharmonline.com

SOA

server:	ns1.domain.com
email:	admin.domain.com
serial:	1
refresh:	300
retry:	300
expire:	300
minimum ttl:	86400

86400s

(1.00:00:00)

cheaprxpharmonline.com

ns3.cheaprxpharmonline.com

86400s

(1.00:00:00)

cheaprxpharmonline.com

ns2.cheaprxpharmonline.com

86400s

(1.00:00:00)

cheaprxpharmonline.com

ns1.cheaprxpharmonline.com

86400s

(1.00:00:00)

cheaprxpharmonline.com

60.12.166.154

86400s

(1.00:00:00)

cheaprxpharmonline.com

ns4.cheaprxpharmonline.com

86400s

(1.00:00:00)

Service scan

FTP – 21 Error: ConnectionRefused

SMTP – 25 Error: ConnectionRefused

HTTP – 80

POP3 – 110 Error: ConnectionRefused

IMAP – 143 Error: ConnectionRefused

— end —

Canadian Pharmacy – winpolls.com

July 28, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

winpolls

Address lookup

canonical name	winpolls.com.
aliases
addresses	64.120.173.118

Domain Whois record

Queried whois.internic.net with “dom winpolls.com“…

In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. As a librarian, Iâ€™m particularly concerned that grand visions of digital libraries may entail trade-offs whose full implications are not being attended to.Â One immediate thought:. In the two lawsuits Pfizer filed, the drug company accuses CanadianPharmacy and E-Pharmacy Direct with promoting and selling Viagra knock-offs that are unapproved by the U.S. Natural Substance Knock Offs in the FDA Pipeline Could be Dangerous; By American Association for Health Freedom

   Domain Name: WINPOLLS.COM
   Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
   Whois Server: whois.PublicDomainRegistry.com
   Referral URL: http://www.PublicDomainRegistry.com
   Name Server: D1.REGNAME.BIZ
   Name Server: D2.REGNAME.BIZ
   Name Server: D3.REGNAME.BIZ
   Name Server: D4.REGNAME.BIZ
   Status: ok
   Updated Date: 05-jun-2009
   Creation Date: 19-aug-2008
   Expiration Date: 19-aug-2009

>>> Last update of whois database: Tue, 28 Jul 2009 07:15:27 UTC <<<

Queried whois.publicdomainregistry.com with “winpolls.com“…

Registration Service Provided By: REGNAME.BIZ
Contact: +1.2014674681
Website: http://www.regname.biz

Domain Name: WINPOLLS.COM 

Registrant:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Creation Date: 19-Aug-2008
Expiration Date: 19-Aug-2009

Domain servers in listed order:
    d4.regname.biz
    d3.regname.biz
    d2.regname.biz
    d1.regname.biz

Administrative Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Technical Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Billing Contact:
    HSH
    Alexander        accform@gmail.com
    Dnepr
    Dnepr
    Dnipropetrovsk Oblast,49000
    UA
    Tel. +001.415123456

Status:ACTIVE

Network Whois record

Queried whois.arin.net with “64.120.173.118“…

OrgName:    Network Operations Center Inc.
OrgID:      NOC
Address:    PO Box 591
City:       Scranton
StateProv:  PA
PostalCode: 18501-0591
Country:    US

ReferralServer: rwhois://rwhois.hostnoc.net:4321/

NetRange:   64.120.128.0 - 64.120.191.255
CIDR:       64.120.128.0/18
OriginAS:   AS21788
NetName:    HOSTNOC-5BLK
NetHandle:  NET-64-120-128-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.HOSTNOC.NET
NameServer: NS2.HOSTNOC.NET
Comment:
RegDate:    2009-04-27
Updated:    2009-04-27

RAbuseHandle: SMA4-ARIN
RAbuseName:   Arcus, S. Matthew
RAbusePhone:  +1-570-343-8551
RAbuseEmail:  nic@hostnoc.net 

RNOCHandle: SMA4-ARIN
RNOCName:   Arcus, S. Matthew
RNOCPhone:  +1-570-343-8551
RNOCEmail:  nic@hostnoc.net 

RTechHandle: SMA4-ARIN
RTechName:   Arcus, S. Matthew
RTechPhone:  +1-570-343-8551
RTechEmail:  nic@hostnoc.net 

OrgTechHandle: SMA4-ARIN
OrgTechName:   Arcus, S. Matthew
OrgTechPhone:  +1-570-343-8551
OrgTechEmail:  nic@hostnoc.net

# ARIN WHOIS database, last updated 2009-07-27 20:00

DNS records

name

class

type

data

time to live

winpolls.com

SOA

server:	d4.regname.biz
email:	a.kosterin.yahoo.com
serial:	2009060503
refresh:	7200
retry:	7200
expire:	7200
minimum ttl:	7200

38400s

(10:40:00)

winpolls.com

d4.regname.biz

38400s

(10:40:00)

winpolls.com

d2.regname.biz

38400s

(10:40:00)

winpolls.com

d1.regname.biz

38400s

(10:40:00)

winpolls.com

64.120.173.118

28800s

(08:00:00)

winpolls.com

d3.regname.biz

38400s

(10:40:00)

118.173.120.64.in-addr.arpa

PTR

64-120-173-118.hostnoc.net

86400s

(1.00:00:00)

— end —

Who Are Pharma Dropshipper – pharmadropship.com

July 26, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Address lookup

canonical name	pharmadropship.com.
aliases
addresses	174.143.0.178

Domain Whois record

Queried whois.internic.net with “dom pharmadropship.com“…

   Domain Name: PHARMADROPSHIP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS0.DNSMADEEASY.COM
   Name Server: NS1.DNSMADEEASY.COM
   Name Server: NS2.DNSMADEEASY.COM
   Name Server: NS3.DNSMADEEASY.COM
   Name Server: NS4.DNSMADEEASY.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 19-oct-2008
   Creation Date: 24-nov-2007
   Expiration Date: 24-nov-2009

>>> Last update of whois database: Sun, 26 Jul 2009 16:31:48 UTC <<<

Queried whois.godaddy.com with “pharmadropship.com“…

Registrant:
   pronet ltd

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: PHARMADROPSHIP.COM

   Domain servers in listed order:
      NS0.DNSMADEEASY.COM
      NS1.DNSMADEEASY.COM
      NS2.DNSMADEEASY.COM
      NS3.DNSMADEEASY.COM
      NS4.DNSMADEEASY.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-174-143-0-176-1“…

CustName:   ProNet
Address:    9725 Datapoint
City:       San Antonio
StateProv:  TX
PostalCode: 78225
Country:    US
RegDate:    2009-02-13
Updated:    2009-02-13

NetRange:   174.143.0.176 - 174.143.0.183 
CIDR:       174.143.0.176/29 
NetName:    RSPC-1234538289621055
NetHandle:  NET-174-143-0-176-1
Parent:     NET-174-143-0-0-1
NetType:    Reassigned
Comment:    
RegDate:    2009-02-13
Updated:    2009-02-13

RAbuseHandle: ABUSE45-ARIN
RAbuseName:   Abuse Desk 
RAbusePhone:  +1-210-892-4000
RAbuseEmail:  abuse@rackspace.com 

RTechHandle: IPADM17-ARIN
RTechName:   IPADMIN 
RTechPhone:  +1-210-892-4000
RTechEmail:  ipadmin@rackspace.com 

OrgAbuseHandle: ABUSE45-ARIN
OrgAbuseName:   Abuse Desk 
OrgAbusePhone:  +1-210-892-4000
OrgAbuseEmail:  abuse@rackspace.com

OrgTechHandle: IPADM17-ARIN
OrgTechName:   IPADMIN 
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  ipadmin@rackspace.com

OrgTechHandle: ZR9-ARIN
OrgTechName:   Rackspace, com 
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  hostmaster@rackspace.com

# ARIN WHOIS database, last updated 2009-07-25 20:00

DNS records

DNS query for 178.0.143.174.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

pharmadropship.com

174.143.0.178

1800s

(00:30:00)

pharmadropship.com

SOA

server:	ns0.dnsmadeeasy.com
email:	dns.dnsmadeeasy.com
serial:	2008010112
refresh:	43200
retry:	3600
expire:	1209600
minimum ttl:	180

86400s

(1.00:00:00)

pharmadropship.com

preference:	10
exchange:	mx1.emailsrvr.com

1800s

(00:30:00)

pharmadropship.com

preference:	20
exchange:	mx2.emailsrvr.com

1800s

(00:30:00)

pharmadropship.com

ns1.dnsmadeeasy.com

86400s

(1.00:00:00)

pharmadropship.com

ns0.dnsmadeeasy.com

86400s

(1.00:00:00)

pharmadropship.com

ns4.dnsmadeeasy.com

86400s

(1.00:00:00)

pharmadropship.com

ns3.dnsmadeeasy.com

86400s

(1.00:00:00)

pharmadropship.com

ns2.dnsmadeeasy.com

86400s

(1.00:00:00)

— end —

Canadian Pharmacy – Trusted Tabs – www.rxtrusted.com

July 25, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Address lookup

canonical name	www.rxtrusted.com.
aliases
addresses	91.199.112.8

Domain Whois record

Queried whois.internic.net with “dom rxtrusted.com“…

   Domain Name: RXTRUSTED.COM
   Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
   Whois Server: whois.directnic.com
   Referral URL: http://www.directnic.com
   Name Server: NS0.PARTNERS-DNS.COM
   Name Server: NS1.PARTNERS-DNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 11-jul-2009
   Creation Date: 24-oct-2006
   Expiration Date: 24-oct-2009

>>> Last update of whois database: Sat, 25 Jul 2009 15:47:58 UTC <<<

Queried whois.directnic.com with “rxtrusted.com“…

Registrant:
 RX Partners
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Domain Name: RXTRUSTED.COM

Administrative Contact:
 Eagloff, Jessica jessicaeagloff@yahoo.co.uk
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Technical Contact:
 Eagloff, Jessica jessicaeagloff@yahoo.co.uk
 145-157 St John Street
 2nd Floor
 London, GB EC1V 4PY
 GB
 +44.7005968172 

Record last updated 01-16-2009 11:08:29 AM
Record expires on 10-24-2009
Record created on 10-24-2006

Domain servers in listed order:
	NS0.PARTNERS-DNS.COM	83.149.85.32
	NS1.PARTNERS-DNS.COM	91.199.112.8
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8“…

% Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

http://www.rxtrusted.com

91.199.112.8

1200s

(00:20:00)

rxtrusted.com

SOA

server:	ns1.partners-dns.com
email:	root.partners-dns.com
serial:	2006665120
refresh:	3600
retry:	900
expire:	604800
minimum ttl:	1200

1200s

(00:20:00)

rxtrusted.com

ns1.partners-dns.com

1200s

(00:20:00)

rxtrusted.com

ns0.partners-dns.com

1200s

(00:20:00)

rxtrusted.com

vip2.partners-dns.com

1200s

(00:20:00)

rxtrusted.com

vip3.partners-dns.com

1200s

(00:20:00)

rxtrusted.com

vip1.partners-dns.com

1200s

(00:20:00)

rxtrusted.com

91.199.112.8

1200s

(00:20:00)

Traceroute

Tracing route to http://www.rxtrusted.com [91.199.112.8]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.1

po101.dsr01.dllstx5.theplanet.com

207

70.85.127.105

po51.dsr01.dllstx3.theplanet.com

70.87.253.5

et5-1.ibr03.dllstx3.theplanet.com

191

157.238.225.5

xe-2-4.r01.dllstx09.us.bb.gin.ntt.net

144.232.24.69

144.232.19.177

sl-crs1-fw-0-6-3-0.sprintlink.net

144.232.19.101

sl-crs1-dc-0-8-5-0.sprintlink.net

118

144.232.19.147

sl-bb20-par-1-0-0.sprintlink.net

128

213.206.129.66

sl-bb21-fra-13-0-0.sprintlink.net

128

217.147.96.42

sl-gw10-fra-15-0-0.sprintlink.net

127

217.147.109.22

165

194.186.157.137

cat07.moscow.gldn.net

165

195.239.10.202

te1-1.maxwell.msk.wahome.ru

165

217

167

77.91.225.76

vl-500.ampere.msk.wahome.ru

166

92.241.162.66

Trace aborted

Service scan

FTP – 21 Error: TimedOut

SMTP – 25 Error: TimedOut

HTTP – 80 HTTP/1.1 200 OK Date: Sat, 25 Jul 2009 14:53:23 GMT Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e X-Powered-By: PHP/5.2.9 Set-Cookie: PHPSESSID=2469e36917484c7ab188ed7f7a4c7259; expires=Mon, 24-Aug-2009 14:53:23 GMT; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html

POP3 – 110 Error: TimedOut

IMAP – 143 Error: TimedOut

Canadian Pharmacy – DirectParma – www.directpharma.net

July 25, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Here, in DirectPharma.net we are committed to bringing you the best meds for the lowest prices. Please check out our catalog with confidence that each one the listed items was tested for both Quality and Affectivity. We are connected to the most reputable suppliers, to bring you the best quality products. Because your health is at the center of our attention

Address lookup

canonical name	directpharma.net.
aliases	http://www.directpharma.net
addresses	67.192.134.225

Domain Whois record

Queried whois.internic.net with “dom directpharma.net“…

   Domain Name: DIRECTPHARMA.NET
   Registrar: DYNADOT, LLC
   Whois Server: whois.dynadot.com
   Referral URL: http://www.dynadot.com
   Name Server: NS0.DNSMADEEASY.COM
   Name Server: NS1.DNSMADEEASY.COM
   Name Server: NS2.DNSMADEEASY.COM
   Name Server: NS3.DNSMADEEASY.COM
   Name Server: NS4.DNSMADEEASY.COM
   Status: clientTransferProhibited
   Updated Date: 14-jun-2009
   Creation Date: 07-jun-2005
   Expiration Date: 07-jun-2011

>>> Last update of whois database: Sat, 25 Jul 2009 15:39:47 UTC <<<

Queried whois.dynadot.com with “directpharma.net“…

Domain Name: directpharma.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2011/06/07 UTC
Record created on 2005/06/07 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/25 08:35:39 PST <<<

Network Whois record

Queried whois.arin.net with “!NET-67-192-134-224-1“…

CustName:   ProNet
Address:    9725 Datapoint
City:       San Antonio
StateProv:  TX
PostalCode: 78225
Country:    US
RegDate:    2008-04-14
Updated:    2008-04-14

NetRange:   67.192.134.224 - 67.192.134.231
CIDR:       67.192.134.224/29
NetName:    RSPC-1208189406980389
NetHandle:  NET-67-192-134-224-1
Parent:     NET-67-192-0-0-1
NetType:    Reassigned
Comment:
RegDate:    2008-04-14
Updated:    2008-04-14

RAbuseHandle: ABUSE45-ARIN
RAbuseName:   Abuse Desk
RAbusePhone:  +1-210-892-4000
RAbuseEmail:  abuse@rackspace.com 

RTechHandle: IPADM17-ARIN
RTechName:   IPADMIN
RTechPhone:  +1-210-892-4000
RTechEmail:  ipadmin@rackspace.com 

OrgAbuseHandle: ABUSE45-ARIN
OrgAbuseName:   Abuse Desk
OrgAbusePhone:  +1-210-892-4000
OrgAbuseEmail:  abuse@rackspace.com

OrgTechHandle: IPADM17-ARIN
OrgTechName:   IPADMIN
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  ipadmin@rackspace.com

OrgTechHandle: ZR9-ARIN
OrgTechName:   Rackspace, com
OrgTechPhone:  +1-210-892-4000
OrgTechEmail:  hostmaster@rackspace.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

DNS query for 225.134.192.67.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

http://www.directpharma.net

CNAME

directpharma.net

1741s

(00:29:01)

directpharma.net

preference:	10
exchange:	mail.directpharma.net

1800s

(00:30:00)

directpharma.net

67.192.134.225

1800s

(00:30:00)

directpharma.net

ns0.dnsmadeeasy.com

86400s

(1.00:00:00)

directpharma.net

ns2.dnsmadeeasy.com

86400s

(1.00:00:00)

directpharma.net

ns3.dnsmadeeasy.com

86400s

(1.00:00:00)

directpharma.net

ns1.dnsmadeeasy.com

86400s

(1.00:00:00)

directpharma.net

ns4.dnsmadeeasy.com

86400s

(1.00:00:00)

directpharma.net

SOA

server:	ns0.dnsmadeeasy.com
email:	dns.dnsmadeeasy.com
serial:	2006010159
refresh:	43200
retry:	3600
expire:	1209600
minimum ttl:	180

86400s

(1.00:00:00)

Traceroute

Tracing route to http://www.directpharma.net [67.192.134.225]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.1

po101.dsr01.dllstx5.theplanet.com

70.85.127.105

po51.dsr01.dllstx3.theplanet.com

70.87.253.9

et3-1.ibr04.dllstx3.theplanet.com

206.223.118.7

eq-dfw.rackspace.net

72.3.128.250

edge3-backbone1.dfw1.rackspace.net

67.192.56.229

vlan905.core5.dfw1.rackspace.com

67.192.56.15

67.192.134.225

Trace complete

Service scan

FTP – 21 Error: TimedOut

SMTP – 25 Error: TimedOut

HTTP – 80 HTTP/1.1 301 Moved Permanently Date: Sat, 25 Jul 2009 15:41:27 GMT Server: Apache/2.0.52 (Red Hat) X-Powered-By: PHP/5.2.10 Location: /en/ Set-Cookie: PHPSESSID=s7c0u3b9lb9garb3s9gq66o290; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: text/html

POP3 – 110 Error: TimedOut

IMAP – 143

Error: TimedOut

Generic-Pharmacy – generic-pharmacy.net

July 25, 2009Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medicines Over the Internet

FDA – Consumer Safety Guide

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

For a prescription to be valid under federal and state law, there must be a bona fide doctor patient relationship, which is defined by most state laws to require a physical examination. “Completing a questionnaire that is then reviewed by a doctor hired by the internet pharmacy could not be considered the basis for a doctor/patient relationship.” Vol. 66 Federal Register 82, PP 21181-21184 (April 27, 2001)

Moreover, if the prescription drug is a controlled substance and the drug is being imported into the U.S. from a foreign country and being shipped to anyone other than a DEA-registered importer, such transaction is a felony in violation of Sections 957 and 960 of Title 21, United States Code.

eneric-Pharmacy.net: Superior quality at unbeatable prices!
We are proud up to offer up to 80% off on safe and approved pharmaceutical products that meet the highest WHO (World Health Organization) standards. Since 2002, we have been dedicated to providing our customers with the highest quality products offered in an affordable and easy-to-use service. Over 250,000 satisfied customers globally have benefited from our broad array of generic medications; we invite you to become a satisfied customer as well! Special offer for returning customers…

Using 17 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

Domain Name: generic-pharmacy.net
Registered at http://www.dynadot.com

Registrant:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States

Administrative Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Technical Contact:
Amit Amos Bouchnik c/o Dynadot Privacy
PO Box 701
San Mateo, CA 94401
United States
privacy@dynadot.com
1-650-585-1961

Record expires on 2017/07/17 UTC
Record created on 2003/07/17 UTC

Domain servers in listed order:
ns0.dnsmadeeasy.com
ns1.dnsmadeeasy.com
ns2.dnsmadeeasy.com
ns3.dnsmadeeasy.com
ns4.dnsmadeeasy.com

>>> Last update of whois database: 2009/07/07 13:43:45 PST <<<

Network Whois record
Queried whois.arin.net with "72.52.5.6"...

OrgName:    Prolexic Technologies, Inc.
OrgID:      PROLE
Address:    Prolexic Technologies
Address:    1930 Harrison Street
City:       Hollywood
StateProv:  FL
PostalCode: 33020
Country:    US

NetRange:   72.52.0.0 - 72.52.63.255
CIDR:       72.52.0.0/18
NetName:    PROLEXIC
NetHandle:  NET-72-52-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.PROLEXIC.NET
NameServer: NS2.PROLEXIC.NET
Comment:    http://www.prolexic.com / NOC hours are 24/7
RegDate:    2005-07-11
Updated:    2007-06-27

RTechHandle: HOSTM528-ARIN
RTechName:   Hostmaster
RTechPhone:  +1-866-800-0366
RTechEmail:  hostmaster@prolexic.com 

OrgTechHandle: HOSTM528-ARIN
OrgTechName:   Hostmaster
OrgTechPhone:  +1-866-800-0366
OrgTechEmail:  hostmaster@prolexic.com

# ARIN WHOIS database, last updated 2009-07-24 20:00

DNS records

name

class

type

data

time to live

generic-pharmacy.net

72.52.5.6

1800s

(00:30:00)

generic-pharmacy.net

preference:	20
exchange:	mx2.emailsrvr.com

1800s

(00:30:00)

generic-pharmacy.net

preference:	10
exchange:	mx1.emailsrvr.com

1800s

(00:30:00)

generic-pharmacy.net

ns0.dnsmadeeasy.com

86400s

(1.00:00:00)

generic-pharmacy.net

ns2.dnsmadeeasy.com

86400s

(1.00:00:00)

generic-pharmacy.net

ns4.dnsmadeeasy.com

86400s

(1.00:00:00)

generic-pharmacy.net

ns1.dnsmadeeasy.com

86400s

(1.00:00:00)

generic-pharmacy.net

ns3.dnsmadeeasy.com

86400s

(1.00:00:00)

generic-pharmacy.net

SOA

server:	ns0.dnsmadeeasy.com
email:	dns.dnsmadeeasy.com
serial:	2006010220
refresh:	43200
retry:	3600
expire:	1209600
minimum ttl:	180

86400s

(1.00:00:00)

6.5.52.72.in-addr.arpa

PTR

unknown.prolexic.com

85680s

(23:48:00)

Traceroute

Tracing route to generic-pharmacy.net [72.52.5.6]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.5

po101.dsr02.dllstx5.theplanet.com

70.85.127.109

po52.dsr02.dllstx3.theplanet.com

70.87.253.25

et3-2.ibr04.dllstx3.theplanet.com

64.208.170.197

gigabitethernet7-3.ar2.dal2.gblx.net

207.138.122.214

wbs-connect-miami.tengigabitethernet2-4.1121.ar1.mia2.gblx.net

209.200.132.34

blackhole.prolexic.com

72.52.5.6

unknown.prolexic.com

Elite D Service – elitedservice.com

July 24, 2009Leave a comment

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

Our company is the leader in wholesale produce distribution is seeking a dynamic individual to be responsible for the areas of:
Shipping manager.

You must enjoy working in a fast-paced, hands-on environment and
have strong multi-tasking abilities and interpersonal skills.
This job requires punctuality, good organizational skills and proficiency with Microsoft office programs to maintain inventory and fill in necessary forms.

You will receive packages with electronics from our suppliers and then forward it to our further world wide clients via major shipping
companies: Fedex, DHL, UPS, USPS.
You will generally receive high Tech. Equipment – computer hardware, audio systems, electronics etc.
You will handle all aspects of warehouse activities including shipping, receiving, and inventory.
Experience in freight and custom clearance is key to hire. Top compensation and a rewarding work environment that offers room for growth.
All candidates must be reliable. Previous warehouse experience and experience in a pick/pack environment preferred.
You should effectively communicate with the clients, located in another city while maintaining frequent calls with questions and/or special requests.

To qualify, you MUST:

1. Be at least 18
2. Be able to repeatedly lift 5-20 pound boxes.
3. Check your email several times a day (each hour is welcomed)
4. You need to respond immediately to emails.
5. Be responsible, hard working and communicable.
6. Be able to answer phone calls.

We offer competitive compensation, including base salary, commission, and expense reimbursement
Approximate quantity of packages/letters per week depends ONLY on your skills.

Employment

After you are accepted for employment, you will be assigned to our manager. The manager will inform you by E-mail about the time and nature of the first package.
Our company assumes full responsibility for insurance, customs and tax registration of packages. You will not have to fill out any documents or pay customs duties! For the initial period you will be offered a part-time employment, later depending on your activity results you can turn to the full-time employment.

If you would like to join our team please contact Greg Veach or Shanty Dershem.

Elite Delivery Service
Staffing/Management Group

Address lookup

canonical name	elitedservice.com.
aliases
addresses	70.35.16.77

Domain Whois record

Queried whois.internic.net with “dom elitedservice.com“…

   Domain Name: ELITEDSERVICE.COM
   Registrar: NETFIRMS, INC.
   Whois Server: whois.netfirms.com
   Referral URL: http://www.netfirms.com
   Name Server: NS1.NETFIRMS.COM
   Name Server: NS2.NETFIRMS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 10-jul-2009
   Creation Date: 10-jul-2009
   Expiration Date: 10-jul-2010

>>> Last update of whois database: Fri, 24 Jul 2009 12:00:56 UTC <<<

Queried whois.netfirms.com with “elitedservice.com“…

Registrant:
  Reflections Hair Salon
  Lansing, Gary
  1778 sand rd
  Ossian, IA 52161
  US

  Domain name: elitedservice.com

  Administrative Contact:
    Reflections Hair Salon          gylansing0@gmail.com
    Lansing, Gary
    1778 sand rd
    Ossian, IA 52161
    US
    563-532-8936  Fax: 

  Technical Contact:
              support@netfirms.com
    Manager, Domains
    7030 Woodbine Ave. Suite 800
    Markham, ON L3R 6G2
    CA
    +1.4166612100  Fax: +14166610700

  Registrar of Record: Netfirms Inc.
  Record expires on 2010-07-10.
  Record created on 2009-07-10.
  Database last updated on 2009-07-24 06:51:35.

Network Whois record

Queried whois.arin.net with “70.35.16.77“…

OrgName:    Netfirms Inc 
OrgID:      NETFI
Address:    7030 Woodbine Ave.
Address:    Suite 800
City:       Markham
StateProv:  ON
PostalCode: L3R-6G2
Country:    CA

NetRange:   70.35.16.0 - 70.35.31.255 
CIDR:       70.35.16.0/20 
OriginAS:   AS12053
NetName:    NET-NF-00
NetHandle:  NET-70-35-16-0-1
Parent:     NET-70-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.NETFIRMS.COM
NameServer: NS2.NETFIRMS.COM
Comment:    
RegDate:    2009-02-09
Updated:    2009-05-21

RAbuseHandle: ABUSE2258-ARIN
RAbuseName:   Abuse Contact 
RAbusePhone:  +1-416-661-2100
RAbuseEmail:  abuse@netfirms.com 

RNOCHandle: NOC3593-ARIN
RNOCName:   Network Operations Centre 
RNOCPhone:  +1-416-661-2100
RNOCEmail:  noc@netfirms.com 

RTechHandle: HOSTM1367-ARIN
RTechName:   HOSTMASTER 
RTechPhone:  +1-416-661-2100
RTechEmail:  hostmaster@netfirms.com 

OrgAbuseHandle: ABUSE2258-ARIN
OrgAbuseName:   Abuse Contact 
OrgAbusePhone:  +1-416-661-2100
OrgAbuseEmail:  abuse@netfirms.com

OrgNOCHandle: NOC3593-ARIN
OrgNOCName:   Network Operations Centre 
OrgNOCPhone:  +1-416-661-2100
OrgNOCEmail:  noc@netfirms.com

OrgTechHandle: HOSTM1367-ARIN
OrgTechName:   HOSTMASTER 
OrgTechPhone:  +1-416-661-2100
OrgTechEmail:  hostmaster@netfirms.com

# ARIN WHOIS database, last updated 2009-07-23 20:00

DNS records

name

class

type

data

time to live

elitedservice.com

preference:	10
exchange:	q0.netfirms.com

900s

(00:15:00)

elitedservice.com

preference:	10
exchange:	q1.netfirms.com

900s

(00:15:00)

elitedservice.com

SOA

server:	ns1.netfirms.com
email:	hostmaster.elitedservice.com
serial:	1248433200
refresh:	16384
retry:	2048
expire:	1048576
minimum ttl:	2560

2560s

(00:42:40)

elitedservice.com

ns1.netfirms.com

1000s

(00:16:40)

elitedservice.com

ns2.netfirms.com

1000s

(00:16:40)

elitedservice.com

70.35.16.77

900s

(00:15:00)

77.16.35.70.in-addr.arpa

PTR

70.35.16.77-static-host.netfirms.com

3600s

(01:00:00)

— end —

Canadian Pharmacy – www.bestliferx.com

July 24, 2009Leave a comment

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act

pharmrxdirect.com
pharmarxdirect.com
JumpRx.com
bestbillprice.com
globalmeds24.com

877-334-5579

Address lookup

canonical name	bestliferx.com.
aliases
addresses	74.213.177.13

Domain Whois record

Queried whois.internic.net with “dom bestliferx.com“…

Domain Name: BESTLIFERX.COM
Registrar: EASYDNS TECHNOLOGIES, INC.
Whois Server: whois.easydns.com
Referral URL: http://www.easydns.com
Name Server: NS1.HUSHTECH.NET
Name Server: NS2.HUSHTECH.NET
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 18-jul-2009
Creation Date: 13-apr-2006
Expiration Date: 13-apr-2012

Last update of whois database: Fri, 24 Jul 2009 11:44:18 UTC

Queried whois.easydns.com with “bestliferx.com“…

Registrant:
BestLifeRx.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU

Domain name: BESTLIFERX.COM

Administrative Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Technical Contact:
webadminrx@gmail.com
9 Tanbark Circuit
Werrington Downs, NSW 2747
AU
+1.4403486369 Fax: +1.4403486369

Registrar of Record: easyDNS Technologies, Inc.
Record last updated on 18-Jul-2009.
Record expires on 13-Apr-2012.
Record created on 13-Apr-2006.

Domain servers in listed order:
NS2.HUSHTECH.NET
NS1.HUSHTECH.NET

Domain status: clientTransferProhibited
clientUpdateProhibited

This domain is being managed via EASYDNS
The DNS Hosting specialists since 1998
DNS Hosting / Dynamic DNS / Failover DNS / DNS Anycast
Unconditional Guarantee, No tricks, No gimmicks: http://easyDNS.com
System Status Updates: http://easyurl.net/easystatus
( Or Follow us on Twitter http://twitter.com/easydns )

You have 4 lookups left today

Network Whois record

Queried whois.arin.net with “!NET-74-213-176-0-1“…

CustName: Momentum Advanced Solution
Address: 155 Commerce Valley Drive East
City: Thornhill
StateProv: ON
PostalCode: L3T-7T2
Country: CA
RegDate: 2009-01-13
Updated: 2009-01-13

NetRange: 74.213.176.0 – 74.213.177.255
CIDR: 74.213.176.0/23
OriginAS: AS23498
NetName: CDSI-MOMENTUMADVANCEDSOLUTION
NetHandle: NET-74-213-176-0-1
Parent: NET-74-213-160-0-1
NetType: Reassigned
Comment:
RegDate: 2009-01-13
Updated: 2009-01-13

OrgAbuseHandle: ATP1-ARIN
OrgAbuseName: ARIN Tech POC
OrgAbusePhone: +1-416-840-5978
OrgAbuseEmail: arintech@cogecodata.com

OrgNOCHandle: CDSIN-ARIN
OrgNOCName: CDSI NOC
OrgNOCPhone: +1-416-542-2525
OrgNOCEmail: arintech@cogecodata.com

OrgTechHandle: ATP1-ARIN
OrgTechName: ARIN Tech POC
OrgTechPhone: +1-416-840-5978
OrgTechEmail: arintech@cogecodata.com

# ARIN WHOIS database, last updated 2009-07-23 20:00

DNS records

name

class

type

data

time to live

bestliferx.com

preference:	0
exchange:	server305.hushtech.net

3600s

(01:00:00)

bestliferx.com

SOA

server:	ns1.hushtech.net
email:	webadminrx.gmail.com
serial:	2009061907
refresh:	86400
retry:	7200
expire:	3600000
minimum ttl:	86400

86400s

(1.00:00:00)

bestliferx.com

ns2.hushtech.net

86400s

(1.00:00:00)

bestliferx.com

ns1.hushtech.net

86400s

(1.00:00:00)

bestliferx.com

74.213.177.13

3600s

(01:00:00)

13.177.213.74.in-addr.arpa

CNAME

13.0-24.177.213.74.in-addr.arpa

86400s

(1.00:00:00)

13.0-24.177.213.74.in-addr.arpa

PTR

74-213-177-13.ultrahosting.com

3600s

(01:00:00)

— end —

Canadian Pharmacy Spam KING

July 22, 20091 Comment

The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal your money.

The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.

http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

Jonathan Owens

jowens@unifiedmarkets.com (current)
jowens@unifiedmarket.com (previous)
www.unifiedmarkets.com (current)
www.unifiedmarket.com (previous)
640 Grand Ave.
Carlsbad, North San Diego County
CA 92008-2365
+1 (760) 730-9864

You can find his foot prints by searching the following keywords;

210-888-9089 – Canadian Pharmacy
210-888-9089 – US Drugstore
+ 020 3239 7731 – (new number) Canadian Pharmacy
210 787 1711 – Bogus Marcus Med
845-709-8044 – Bogus university degree
718-524-2096 – Bogus OEM software
888-245-4117 – Bogus collection agency
support@canadianpharmsupport.com
210 East 59st Street New York, NY 10021

The good news is that this scammer has extreme hatered against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency that if you send a lot of spams to him, he will remove you from his spam databases. THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!
You will get far less spams!

jowens@unifiedmarkets.com
owensw@unifiedmarkets.com
dmoonfire@unifiedmarkets.com
uminfo@unifiedmarkets.com
dholden@unifiedmarkets.com

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

July 22, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
114.92.205.227	China*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.18	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name

flowersuffix.com.

aliases

addresses

203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category:

Malicious Sites
Make Category Suggestions

Namerservers on IP:

dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com

Canadian Pharmacy Spam – Online Pharmacy Scam

July 22, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
97.80.187.119	United States (Lawrenceville)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.141	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lupe Knox Tue Jul 21 21:49:15 2009
Return-Path:
Authentication-Results: mta101.sbc.mail.mud.yahoo.com from=abnet.ca; domainkeys=neutral (no sig); from=abnet.ca; dkim=neutral (no sig)
Received: from 97.80.187.119 (EHLO nlpi127.prodigy.net) (207.115.36.141)
by mta101.sbc.mail.mud.yahoo.com with SMTP; Tue, 21 Jul 2009 21:52:53 -0700
Received: from p63upe2 (static.unknown.charter.com [97.80.187.119] (may be forged))
by nlpi127.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M4qSn7030845;
Tue, 21 Jul 2009 23:52:51 -0500
Message-ID: <000701ca0a87$c3c94250$d828ea62@abnet.ca>
Reply-To: “Lupe Knox” lupe_knoxic @abnet.ca
From: “Lupe Knox” lupe_knoxic @abnet.ca
To: ,
Subject: Much bigger, than you used to have it!
Date: Tue, 21 Jul 2009 23:49:15 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

SmartFilter Category:

Malicious Sites
Make Category Suggestions

Namerservers on IP:

dns2.wishlate.com
dns3.nightmodest.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.cameegg.com
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com
ns1.flattry.com
ns1.flypair.com
ns1.fromview.com
ns1.galoresize.com
ns1.gonemade.com
ns1.growten.com
ns1.hadagree.ru
ns1.hadwalk.com
ns1.ku17.net
ns1.letterwant.com
ns1.listwere.com
ns1.mainhumble.com
ns1.me15.net
ns1.nu23.com
ns1.okhalf.com
ns1.ownlate.com
ns1.peakswell.com
ns1.pickcool.in
ns1.pill35.net
ns1.re25.org
ns1.relaxtoward.com
ns1.rockflair.com
ns1.sawplump.com
ns1.skinglad.com
ns1.teethoxygen.com
ns1.towardlegend.in
ns1.tubeold.com
ns1.typetruck.com
ns1.watchnorth.com
ns1.yardaware.com
ns2.112911.org
ns2.ablenumber.com
ns2.againseat.com
ns2.aglowpaint.com
ns2.alertspring.com
ns2.beautybounce.com
ns2.beforebegin.com
ns2.boughtdeluxe.com
ns2.boughtpose.com
ns2.coateach.com
ns2.cutfigure.com
ns2.deluxecrop.com
ns2.directlisten.com
ns2.doctorstill.com
ns2.dounder.com
ns2.eitherbounce.com
ns2.famousloyal.com
ns2.flattry.com
ns2.flypair.com
ns2.grewcall.com
ns2.growfour.com
ns2.growten.com
ns2.hadagree.ru
ns2.letterwant.com
ns2.listwere.com
ns2.mainhumble.com
ns2.med22.org
ns2.med95.net
ns2.pridebought.com
ns2.primehurry.com
ns2.re25.org
ns2.regionearly.com
ns2.roomrow.com
ns2.sawplump.com
ns2.seedequate.com
ns2.skinglad.com
ns2.streetgreat.com
ns2.te26.com
ns2.thosekept.com
ns2.towardlegend.in
ns2.tubeold.com
ns2.typetruck.com
ns2.via99.org
ns2.watchnorth.com
ns2.yearbusy.com

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

From Phoebe Roy Mon Aug 3 18:13:20 2009

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Address lookup

Domain Whois record

Network Whois record

DNS records

cheapest-drug.org

91.199.112.8

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Here is the url:

Address lookup

Domain Whois record

Network Whois record

DNS records

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

SmartFilter Category: Not Categorized Make Category Suggestions IP: 218.61.126.24 Nameservers: ns1.bestcheaprxpharm.com ns2.bestcheaprxpharm.com ns3.bestcheaprxpharm.com ns4.bestcheaprxpharm.com

Address lookup

Domain Whois record

Network Whois record

DNS records

Information for ‘218.61.126.24’

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Domain Whois record

Network Whois record

DNS records

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

SmartFilter Category: Not Categorized Make Category Suggestions IP: 60.12.166.154 Nameservers: ns1.cheaprxpharmonline.comns2.cheaprxpharmonline.com ns3.cheaprxpharmonline.com ns4.cheaprxpharmonline.com

nameservers missing in zone hot1gaming.com X X ns1.bd4ns.com X X ns1.cheaprxpharmonline.com X X ns2.cheaprxpharmonline.com X X ns2.ef2ns.com X X ns3.br4ns.com X X ns3.cheaprxpharmonline.com X X ns4.cheaprxpharmonline.com X X sdavaiteres.com

hostnames sharing ip with a-records *.sdavaiteres.com hot1gaming.com ns1.listendns.com ns1.sdavaiteres.com ns2.sdavaiteres.com ns3.fa6ns.com ns3.sdavaiteres.com ns4.sdavaiteres.com sdavaiteres.com www.softokors.com

Address lookup

Domain Whois record

Network Whois record

DNS records

Service scan

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

SmartFilter Category: Not Categorized
Make Category Suggestions

IP: 218.61.126.24

Nameservers: ns1.bestcheaprxpharm.com

ns2.bestcheaprxpharm.com

ns3.bestcheaprxpharm.com

ns4.bestcheaprxpharm.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

SmartFilter Category: Not Categorized
Make Category Suggestions

IP: 60.12.166.154

Nameservers: ns1.cheaprxpharmonline.com ns2.cheaprxpharmonline.com

ns3.cheaprxpharmonline.com

ns4.cheaprxpharmonline.com

nameservers missing in zone

hot1gaming.com X X

ns1.bd4ns.com X X

ns1.cheaprxpharmonline.com

X X

ns2.cheaprxpharmonline.com

X X

ns2.ef2ns.com X X

ns3.br4ns.com X X

ns3.cheaprxpharmonline.com

X X

ns4.cheaprxpharmonline.com

X X

sdavaiteres.com

hostnames sharing ip with a-records

*.sdavaiteres.com

hot1gaming.com

ns1.listendns.com

ns1.sdavaiteres.com

ns2.sdavaiteres.com

ns3.fa6ns.com

ns3.sdavaiteres.com

ns4.sdavaiteres.com

sdavaiteres.com

www.softokors.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Prescription Drugs Online
May Be Dangerous
Says Drug Enforcement Administration