Canadian Pharmacy – easyonlinerxmedznow.com

Buying Precription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________

Purchase Rx~Medicationz Online!.. NO_Prescription_Required!
Browse Our Website Today! -> http://easyonlinerxmedznow.com

Address lookup

canonical name easyonlinerxmedznow.com.
aliases
addresses 222.170.127.122

Domain Whois record

Queried whois.internic.net with “dom easyonlinerxmedznow.com”…

   Domain Name: EASYONLINERXMEDZNOW.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.91UKRAINE.COM
   Name Server: NS2.91UKRAINE.COM
   Name Server: NS3.LIKENS45.COM
   Name Server: NS4.LIKENS45.COM
   Name Server: NS5.ANTRASCRNS.COM
   Name Server: NS6.ANTRASCRNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 28-oct-2009
   Creation Date: 30-sep-2009
   Expiration Date: 30-sep-2010
 Last update of whois database: Thu, 05 Nov 2009 17:16:18 UTC <<<

Queried whois.namerich.cn with “easyonlinerxmedznow.com”…

 DomainName : easyonlinerxmedznow.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.91UKRAINE.COM
Name Server......................NS4.LIKENS45.COM
Name Server......................NS5.ANTRASCRNS.COM
Name Server......................NS1.91UKRAINE.COM
Name Server......................NS6.ANTRASCRNS.COM
Name Server......................NS3.LIKENS45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-10-01
Expiration Date .................2010-10-01
Last Update  Date ...............2009-10-29

Registrant ID ...................V-X-63774-22022
Registrant Name .................LIN YIXIA
Registrant Organization .........LINYIXIA
Registrant Address ..............chongjiangxilu42
Registrant City..................JN
Registrant Province/State .......ShanDong
Registrant Country Code .........CN
Registrant Postal Code ..........250069
Registrant Phone Number .........+86.053181416841
Registrant Fax ..................+86.053181416841
Registrant Email ................kuledeliu@126.com

Administrative ID ...............V-X-63774-22022
Administrative Name .............LIN YIXIA
Administrative Organization .....LINYIXIA
Administrative Address ..........chongjiangxilu42
Administrative City..............JN
Administrative Province/State ...ShanDong
Administrative Country Code .....CN
Administrative Postal Code ......250069
Administrative Phone Number .....+86.053181416841
Administrative Fax ..............+86.053181416841
Administrative Email ............kuledeliu@126.com

Billing ID ......................V-X-63774-22022
Billing Name ....................LIN YIXIA
Billing Organization ............LINYIXIA
Billing Address .................chongjiangxilu42
Billing City.....................JN
Billing Province/State ..........ShanDong
Billing Country Code ............CN
Billing Postal Code .............250069
Billing Phone Number ............+86.053181416841
Billing Fax .....................+86.053181416841
Billing Email ...................kuledeliu@126.com

Technical ID ....................V-X-63774-22022
Technical Name ..................LIN YIXIA
Technical Organization...........LINYIXIA
Technical Address ...............chongjiangxilu42
Technical City...................JN
Technical Province/State.........ShanDong
Technical Country Code ..........CN
Technical Postal Code ...........250069
Technical Phone Number ..........+86.053181416841
Technical Fax ...................+86.053181416841
Technical Email .................kuledeliu@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “222.170.127.122”…

inetnum:      222.170.0.0 - 222.172.127.255
netname:      CHINANET-HL
descr:        CHINANET HEILONGJIANG PROVINCE NETWORK
descr:        Heilongjiang Telecom Corporation
descr:        NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country:      CN
admin-c:      LZ298-AP
tech-c:       CH93-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CHINANET-HL
mnt-routes:   MAINT-CHINANET-HL
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040305
changed:      hm-changed@apnic.net 20060605
source:       APNIC

person:       LIJUAN ZHENG
nic-hdl:      LZ298-AP
e-mail:       network@hljtele.com
address:      Communication Corporation Internet Enterprise Division of HLJ
phone:        +86-451-53902002
fax-no:       +86-451-53900012
country:      CN
changed:      jxwx1234@163.com 20061229
mnt-by:       MAINT-CHINANET-HLJTELE
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for easyonlinerxmedznow.com returned an error from the server: ServerFailure

DNS query for 122.127.170.222.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Below you will find the domains which are blacklisted by URIBL, or you can subscribe to this feed via RSS here.

// <![CDATA[//
// <![CDATA[//
# Domain Date/Time Added
#1 logproud.com Thu, 05 Nov 2009 17:01:51 +0000
#2 onlineryon99.net Thu, 05 Nov 2009 17:00:11 +0000
#3 thickstood.com Thu, 05 Nov 2009 16:53:17 +0000
#4 medgalven25.net Thu, 05 Nov 2009 16:51:55 +0000
#5 vombustors.net Thu, 05 Nov 2009 16:44:01 +0000
#6 pushblue.com Thu, 05 Nov 2009 16:43:57 +0000
#7 edgesame.com Thu, 05 Nov 2009 16:37:03 +0000
#8 porunteross.net Thu, 05 Nov 2009 16:31:47 +0000
#9 valleydear.com Thu, 05 Nov 2009 16:29:36 +0000
#10 placeiron.com Thu, 05 Nov 2009 16:27:26 +0000
#11 super-blackjack.net Thu, 05 Nov 2009 16:25:49 +0000
#12 sixdimple.com Thu, 05 Nov 2009 16:21:40 +0000
#13 eastfamous.com Thu, 05 Nov 2009 16:15:20 +0000
#14 onlinenils53.net Thu, 05 Nov 2009 16:14:54 +0000
#15 supplyideal.com Thu, 05 Nov 2009 16:10:33 +0000
#16 mederwin47.net Thu, 05 Nov 2009 15:58:06 +0000
#17 gonepamper.com Thu, 05 Nov 2009 15:55:26 +0000
#18 negruentoss.net Thu, 05 Nov 2009 15:45:58 +0000
#19 onlinegriswold5.net Thu, 05 Nov 2009 15:30:57 +0000
#20 coldproper.com Thu, 05 Nov 2009 15:23:15 +0000
#21 easyonlinerxmedznow.com Thu, 05 Nov 2009 15:18:43 +0000
#22 vegassuccesspalace.net Thu, 05 Nov 2009 15:02:25 +0000
#23 vegaspalacesuccess.net Thu, 05 Nov 2009 15:02:12 +0000
#24 palacevegassuccess.net Thu, 05 Nov 2009 15:01:58 +0000
#25 sawfill.com Thu, 05 Nov 2009 14:59:37 +0000
#26 rondastors.net Thu, 05 Nov 2009 14:07:20 +0000
#27 storycrowd.com Thu, 05 Nov 2009 13:15:11 +0000
#28 hourmature.com Thu, 05 Nov 2009 12:24:46 +0000
#29 joyslick.com Thu, 05 Nov 2009 12:20:17 +0000
#30 butplural.com Thu, 05 Nov 2009 12:19:33 +0000
#31 shalltook.com Thu, 05 Nov 2009 12:00:39 +0000
#32 kaspertons.net Thu, 05 Nov 2009 11:19:59 +0000
#33 super-majic.net Thu, 05 Nov 2009 10:08:58 +0000
#34 starscasinopalace.net Thu, 05 Nov 2009 10:06:10 +0000
#35 starspalacecasino.net Thu, 05 Nov 2009 10:06:01 +0000
#36 awakehim.com Thu, 05 Nov 2009 08:36:42 +0000
#37 royalsuccesspalace.net Thu, 05 Nov 2009 08:33:07 +0000
#38 royalpalacesuccess.net Thu, 05 Nov 2009 08:30:19 +0000
#39 palaceroyalsuccess.net Thu, 05 Nov 2009 08:27:38 +0000
#40 ciokrassos.net Thu, 05 Nov 2009 08:09:34 +0000
#41 ifleads.com Thu, 05 Nov 2009 08:05:40 +0000
#42 elite4vips.net Thu, 05 Nov 2009 07:58:52 +0000
#43 serenedo.com Thu, 05 Nov 2009 07:57:04 +0000
#44 trustedrefillstorenow.com Thu, 05 Nov 2009 07:01:13 +0000
#45 doneswim.com Thu, 05 Nov 2009 06:44:21 +0000
#46 77-55.com Thu, 05 Nov 2009 06:11:28 +0000
#47 beforevary.com Thu, 05 Nov 2009 05:15:10 +0000
#48 hurryjump.com Thu, 05 Nov 2009 05:08:30 +0000
#49 sightexact.com Thu, 05 Nov 2009 04:59:22 +0000
#50 dargevoblas.net Thu, 05 Nov 2009 04:10:53 +0000
#51 greatrxbenefitz.net Thu, 05 Nov 2009 03:57:10 +0000
#52 excelmonitor.com Thu, 05 Nov 2009 03:45:58 +0000
#53 vegassuccess.net Thu, 05 Nov 2009 03:27:47 +0000
#54 yourlowpricerx.com Thu, 05 Nov 2009 03:04:55 +0000
#55 lowmonth.com Thu, 05 Nov 2009 03:04:18 +0000
#56 reasontrendy.com Thu, 05 Nov 2009 02:58:01 +0000
#57 topkrestos.net Thu, 05 Nov 2009 02:55:25 +0000
#58 padrecovers.net Thu, 05 Nov 2009 02:41:15 +0000
#59 nuddergasos.net Thu, 05 Nov 2009 02:39:26 +0000
#60 greatvicodin.com Thu, 05 Nov 2009 01:56:29 +0000
#61 mondargoses.net Thu, 05 Nov 2009 01:46:51 +0000
#62 fellwind.com Thu, 05 Nov 2009 01:32:53 +0000
#63 properbeats.com Thu, 05 Nov 2009 00:21:04 +0000
#64 palacegoldroyal.net Wed, 04 Nov 2009 22:42:37 +0000
#65 magneteat.com Wed, 04 Nov 2009 21:56:26 +0000
#66 fishphrase.com Wed, 04 Nov 2009 21:50:30 +0000
#67 planeequate.com Wed, 04 Nov 2009 21:28:28 +0000
#68 unitslave.com Wed, 04 Nov 2009 21:02:32 +0000
#69 nineclaim.com Wed, 04 Nov 2009 21:00:29 +0000
#70 anshape.com Wed, 04 Nov 2009 20:26:16 +0000
#71 legacyback.com Wed, 04 Nov 2009 19:25:55 +0000
#72 danceraise.com Wed, 04 Nov 2009 19:04:12 +0000
#73 florustas.net Wed, 04 Nov 2009 18:05:35 +0000
#74 lierkasers.net Wed, 04 Nov 2009 17:43:41 +0000
#75 swimwee.com Wed, 04 Nov 2009 16:54:27 +0000
#76 weightvery.com Wed, 04 Nov 2009 16:36:46 +0000
#77 areaaward.com Wed, 04 Nov 2009 16:33:53 +0000
#78 legendbig.com Wed, 04 Nov 2009 16:27:30 +0000
#79 inchground.com Wed, 04 Nov 2009 16:23:05 +0000
#80 designmeat.com Wed, 04 Nov 2009 15:19:08 +0000
#81 moneylow.com Wed, 04 Nov 2009 12:39:11 +0000
#82 ravorgasets.net Wed, 04 Nov 2009 12:30:09 +0000
#83 nuterrodas.net Wed, 04 Nov 2009 12:20:09 +0000
#84 hairvictor.com Wed, 04 Nov 2009 12:07:22 +0000
#85 blackwent.com Wed, 04 Nov 2009 12:01:13 +0000
#86 eithermeet.com Wed, 04 Nov 2009 11:20:52 +0000
#87 stardiceeuro.net Wed, 04 Nov 2009 10:50:07 +0000
#88 diceeurostar.net Wed, 04 Nov 2009 10:38:02 +0000
#89 dicestareuro.net Wed, 04 Nov 2009 10:34:53 +0000
#90 eurostardice.net Wed, 04 Nov 2009 10:21:54 +0000
#91 eurodicestar.net Wed, 04 Nov 2009 10:21:19 +0000
#92 vanishsolar.com Wed, 04 Nov 2009 10:02:47 +0000
#93 jackpotdajia.net Wed, 04 Nov 2009 09:57:32 +0000
#94 starspalacegame.net Wed, 04 Nov 2009 09:50:37 +0000
#95 starsgamepalace.net Wed, 04 Nov 2009 09:43:43 +0000
#96 kopregusots.net Wed, 04 Nov 2009 08:53:19 +0000
#97 thoughdreamy.com Wed, 04 Nov 2009 08:34:43 +0000
#98 rumbosergos.net Wed, 04 Nov 2009 06:04:17 +0000
#99 largeexcite.com Wed, 04 Nov 2009 05:49:35 +0000
#100 flipfeet.com Wed, 04 Nov 2009 04:58:38 +0000
#101 pearldevout.com Wed, 04 Nov 2009 03:42:11 +0000
#102 crowduntil.com Wed, 04 Nov 2009 03:24:37 +0000
#103 stoodwire.com Wed, 04 Nov 2009 02:56:02 +0000
#104 netrx4u.net Wed, 04 Nov 2009 02:26:57 +0000
#105 dewewercarryfish.com Wed, 04 Nov 2009 02:16:46 +0000
#106 wdewewercarryfish.com Wed, 04 Nov 2009 02:12:11 +0000
#107 ewercarryfish.com Wed, 04 Nov 2009 02:06:15 +0000
#108 wercarryfish.com Wed, 04 Nov 2009 02:00:54 +0000
#109 urgonovies.net Tue, 03 Nov 2009 23:37:11 +0000
#110 staysilver.com Tue, 03 Nov 2009 21:54:45 +0000
#111 ensurelook.com Tue, 03 Nov 2009 21:04:10 +0000
#112 noblechoose.com Tue, 03 Nov 2009 21:00:55 +0000
#113 fingergentle.com Tue, 03 Nov 2009 20:59:04 +0000
#114 acdorviers.net Tue, 03 Nov 2009 20:48:16 +0000
#115 spicesend.com Tue, 03 Nov 2009 20:32:26 +0000
#116 crowdbroad.com Tue, 03 Nov 2009 19:05:35 +0000
#117 soilnoun.com Tue, 03 Nov 2009 18:09:05 +0000
#118 yuledoes.com Tue, 03 Nov 2009 18:04:20 +0000
#119 huprendovs.net Tue, 03 Nov 2009 16:43:01 +0000
#120 oprasmondes.net Tue, 03 Nov 2009 14:27:38 +0000
#121 werkopientas.net Tue, 03 Nov 2009 14:08:34 +0000
#122 fastdeliver-rx.com Tue, 03 Nov 2009 10:40:42 +0000
#123 spicyknew.com Tue, 03 Nov 2009 10:13:40 +0000
#124 palaceplaystars.net Tue, 03 Nov 2009 09:34:55 +0000
#125 karbonieres.net Tue, 03 Nov 2009 09:19:02 +0000
#126 joinfergoss.net Tue, 03 Nov 2009 09:13:59 +0000
#127 vibormondas.net Tue, 03 Nov 2009 09:12:35 +0000
#128 seemlystreet.com Tue, 03 Nov 2009 09:10:35 +0000
#129 palacevegasgold.net Tue, 03 Nov 2009 09:08:41 +0000
#130 specilisthere.com Tue, 03 Nov 2009 08:55:49 +0000
#131 eurogamingstar.net Tue, 03 Nov 2009 08:43:44 +0000
#132 behalfbigg.com Tue, 03 Nov 2009 08:34:26 +0000
#133 dicestarseuro.net Tue, 03 Nov 2009 08:24:30 +0000
#134 palacestarsplay.net Tue, 03 Nov 2009 08:11:12 +0000
#135 starspalaceplay.net Tue, 03 Nov 2009 08:09:07 +0000
#136 goldeuropalace.net Tue, 03 Nov 2009 08:01:52 +0000
#137 growsobig.com Tue, 03 Nov 2009 08:00:02 +0000
#138 starsplaypalace.net Tue, 03 Nov 2009 07:54:03 +0000
#139 dneviorehors.net Tue, 03 Nov 2009 07:11:03 +0000
#140 arfolionares.net Tue, 03 Nov 2009 06:23:33 +0000
#141 aingroww.com Tue, 03 Nov 2009 06:20:35 +0000
#142 hurry-dontmiss.com Tue, 03 Nov 2009 06:10:20 +0000
#143 grassgold.com Tue, 03 Nov 2009 05:39:31 +0000
#144 frestomonads.net Tue, 03 Nov 2009 05:07:52 +0000
#145 crispfour.com Tue, 03 Nov 2009 04:46:46 +0000
#146 sergiondas.net Tue, 03 Nov 2009 04:11:38 +0000
#147 youleast.com Tue, 03 Nov 2009 03:53:47 +0000
#148 desertnoble.com Tue, 03 Nov 2009 03:35:29 +0000
#149 coatprime.com Tue, 03 Nov 2009 02:29:46 +0000
#150 porchoganos.net Tue, 03 Nov 2009 01:50:46 +0000
#151 refillrx-depot.com Tue, 03 Nov 2009 01:41:35 +0000
#152 pricethe.net Tue, 03 Nov 2009 01:33:26 +0000
#153 alwaysbetterrx.com Tue, 03 Nov 2009 01:28:51 +0000
#154 jackpotyou.net Tue, 03 Nov 2009 00:59:25 +0000
#155 popularioness.net Mon, 02 Nov 2009 23:21:46 +0000
#156 carryfish.com Mon, 02 Nov 2009 21:46:11 +0000
#157 leasthalf.com Mon, 02 Nov 2009 21:14:45 +0000
#158 eitherease.com Mon, 02 Nov 2009 18:55:41 +0000
#159 munchyplum.com Mon, 02 Nov 2009 18:20:52 +0000
#160 kilomardonas.net Mon, 02 Nov 2009 17:31:25 +0000
#161 aglowteeth.com Mon, 02 Nov 2009 17:26:16 +0000
#162 valuehe.com Mon, 02 Nov 2009 17:15:58 +0000
#163 funlisten.com Mon, 02 Nov 2009 17:13:42 +0000
#164 thesejoyful.com Mon, 02 Nov 2009 17:04:09 +0000
#165 followplum.com Mon, 02 Nov 2009 16:55:24 +0000
#166 chargonestos.net Mon, 02 Nov 2009 15:06:07 +0000
#167 cuddlypolite.com Mon, 02 Nov 2009 15:01:02 +0000
#168 fieldaroma.com Mon, 02 Nov 2009 14:22:47 +0000
#169 sentzap.com Mon, 02 Nov 2009 13:07:28 +0000
#170 negrasionas.net Mon, 02 Nov 2009 10:34:37 +0000
#171 andstick.com Mon, 02 Nov 2009 10:02:48 +0000
#172 greattall.com Mon, 02 Nov 2009 10:00:38 +0000
#173 successstarspalace.net Mon, 02 Nov 2009 09:51:42 +0000
#174 casinoclubroyal.net Mon, 02 Nov 2009 09:51:13 +0000
#175 irgahormentos.net Mon, 02 Nov 2009 09:49:24 +0000
#176 thencard.com Mon, 02 Nov 2009 09:44:50 +0000
#177 clubcasinoroyal.net Mon, 02 Nov 2009 09:36:53 +0000
#178 royalcasinoclub.net Mon, 02 Nov 2009 09:36:24 +0000
#179 starssuccesspalace.net Mon, 02 Nov 2009 09:32:14 +0000
#180 krondieross.net Mon, 02 Nov 2009 09:31:30 +0000
#181 starsdiceeuro.net Mon, 02 Nov 2009 09:24:16 +0000
#182 palacestarssuccess.net Mon, 02 Nov 2009 09:18:43 +0000
#183 starspalacesuccess.net Mon, 02 Nov 2009 09:18:09 +0000
#184 beginregion.com Mon, 02 Nov 2009 09:13:47 +0000
#185 monthmost.com Mon, 02 Nov 2009 09:07:36 +0000
#186 clothebox.com Mon, 02 Nov 2009 08:12:24 +0000
#187 whereorgan.com Mon, 02 Nov 2009 06:28:05 +0000
#188 placesight.com Mon, 02 Nov 2009 06:08:03 +0000
#189 joyreason.com Mon, 02 Nov 2009 05:57:40 +0000
#190 refillworldrxnow.com Mon, 02 Nov 2009 05:09:05 +0000
#191 crentasios.net Mon, 02 Nov 2009 05:00:09 +0000
#192 throwask.com Mon, 02 Nov 2009 04:58:29 +0000
#193 poseam.com Mon, 02 Nov 2009 04:36:33 +0000
#194 brasionegrass.net Mon, 02 Nov 2009 04:15:15 +0000
#195 apriograsers.net Mon, 02 Nov 2009 03:36:30 +0000
#196 variedverb.com Mon, 02 Nov 2009 03:25:09 +0000
#197 elite24casino.net Mon, 02 Nov 2009 02:48:52 +0000
#198 meanclimb.com Mon, 02 Nov 2009 01:43:50 +0000
#199 landallow.com Mon, 02 Nov 2009 01:38:12 +0000
#200 quickrxrefillsnow.com Mon, 02 Nov 2009 01:36:45 +0000
#201 korganisations.net Mon, 02 Nov 2009 01:10:03 +0000
#202 frouperdos.net Mon, 02 Nov 2009 01:03:27 +0000
#203 groundtold.com Mon, 02 Nov 2009 00:48:24 +0000
#204 goneare.com Mon, 02 Nov 2009 00:13:40 +0000
#205 pairbought.com Mon, 02 Nov 2009 00:04:41 +0000
#206 letbusy.com Sun, 01 Nov 2009 23:45:26 +0000
#207 nergossentos.net Sun, 01 Nov 2009 21:03:02 +0000
#208 brightrelax.com Sun, 01 Nov 2009 20:39:31 +0000
#209 brightpamper.com Sun, 01 Nov 2009 19:12:16 +0000
#210 poemit.com Sun, 01 Nov 2009 17:45:38 +0000
#211 plaincost.com Sun, 01 Nov 2009 17:24:53 +0000
#212 rxthatbeatsallothers.com Sun, 01 Nov 2009 17:24:44 +0000
#213 neverwaitrx.com Sun, 01 Nov 2009 16:24:48 +0000
#214 settleis.com Sun, 01 Nov 2009 13:22:47 +0000
#215 askvital.com Sun, 01 Nov 2009 13:17:27 +0000
#216 aboveroll.com Sun, 01 Nov 2009 13:11:58 +0000
#217 dressyule.com Sun, 01 Nov 2009 13:00:34 +0000
#218 grandstarscasino.net Sun, 01 Nov 2009 12:54:03 +0000
#219 crepamaloss.net Sun, 01 Nov 2009 12:53:19 +0000
#220 vioredastos.net Sun, 01 Nov 2009 11:50:47 +0000
#221 organiderops.net Sun, 01 Nov 2009 11:48:56 +0000
#222 casino888stars.net Sun, 01 Nov 2009 10:58:47 +0000
#223 teamweight.com Sun, 01 Nov 2009 10:51:28 +0000
#224 vegascasinovirtual.net Sun, 01 Nov 2009 10:47:53 +0000
#225 desertspell.com Sun, 01 Nov 2009 10:29:26 +0000
#226 appearsupply.com Sun, 01 Nov 2009 10:01:28 +0000
#227 srgiontans.net Sun, 01 Nov 2009 09:38:45 +0000
#228 palacegoldstars.net Sun, 01 Nov 2009 09:38:16 +0000
#229 re-order-your-rx.com Sun, 01 Nov 2009 09:17:50 +0000
#230 rx-refills-online.com Sun, 01 Nov 2009 07:02:20 +0000
#231 krepostandos.net Sun, 01 Nov 2009 05:58:34 +0000
#232 pluseurodice.net Sun, 01 Nov 2009 05:20:38 +0000
#233 virtualroyalcasino.net Sun, 01 Nov 2009 04:57:44 +0000
#234 trainfact.com Sun, 01 Nov 2009 03:24:12 +0000
#235 dragobargos.net Sun, 01 Nov 2009 02:30:00 +0000
#236 shenoon.com Sun, 01 Nov 2009 01:38:53 +0000
#237 speakdaring.com Sat, 31 Oct 2009 22:55:45 +0000
#238 starscasino777.net Sat, 31 Oct 2009 20:38:40 +0000
#239 meanaware.com Sat, 31 Oct 2009 20:30:50 +0000
#240 ouraroma.com Sat, 31 Oct 2009 20:08:34 +0000
#241 enoughget.com Sat, 31 Oct 2009 19:52:50 +0000
#242 greatstarscasino.net Sat, 31 Oct 2009 18:22:17 +0000
#243 partgrew.com Sat, 31 Oct 2009 17:37:53 +0000
#244 seemsister.com Sat, 31 Oct 2009 17:30:17 +0000

Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:24:26 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

Traceroute

Tracing route to rxkingsatyourservice.com [211.95.78.2]

hop rtt rtt rtt ip address fully qualified domain name
1 4 4 3 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 2 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 1 1 7 4.69.145.204 ae-4-90.edge2.dallas3.level3.net
7 1 1 1 4.68.111.122 tiscali-level3-te.paris1.level3.net
8 1 1 1 152.63.96.46 0.ge-1-1-0.xl3.dfw7.alter.net
9 36 36 36 152.63.116.249 0.so-7-0-0.xt1.lax7.alter.net
10 36 36 37 152.63.118.33 gigabitethernet6-0-0.ig2.lax7.alter.net
11 205 205 205 63.65.154.222 chinaunicom-gw.customer.alter.net
12 205 206 206 211.94.39.97
13 206 205 206 211.94.44.14
14 206 206 206 211.95.88.25
15 206 205 206 211.95.74.17
16 206 206 206 211.95.78.2

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Mon, 10 Aug 2009 15:25:16 GMT
Server: Apache/2.2.11 (Fedora)
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=oghjitc99kb4rbu933bi3mhj00; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: dt=2009-08-10+15%3A25%3A16; expires=Mon, 10-Aug-2009 16:25:16 GMT
Connection: close
Content-Type: text/html; charset=UTF-8
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —


WhoIs GlavMed.com aka Canadian Pharmacy

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Glavmed is the public-facing affiliate program which sponsors spammers to promote what are generally known to be illegal pharmacy websites. It appears to be a cover for the real sponsor organization behind all of these sites: Spamit. These include [Canadian Pharmacy], one of the most-spammed properties during 2006-2008. Glavmed is alternately known in the spammer community as the “Spamit” program, making it clear that this operation endorses and condones illegal spamming in the promotion of their properties.

This was learned from postings on bulkerforum.biz by username “kref”, who would invite users to promote for their properties. kref is also known as “fakir f” (his Skype username.)

Glavmed (Spamit) is believed to be based out of Moscow, and thought to be very closely related to the “Russian Business Network”, or “RBN.


Spamtracker.eu


GlavMed2

Address lookup

canonical name www.glavmed.com.
aliases
addresses 74.86.34.144

Domain Whois record

Queried whois.internic.net with “dom glavmed.com“…

   Domain Name: GLAVMED.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.GLAVMED.COM
   Name Server: NS2.GLAVMED.COM
   Status: ok
   Updated Date: 23-jan-2009
   Creation Date: 14-mar-2006
   Expiration Date: 14-mar-2013

>>> Last update of whois database: Sat, 27 Jun 2009 02:40:08 UTC <<<

Queried whois.regtime.net with “glavmed.com“…

% Regtime Ltd. WHOIS server

Domain name: glavmed.com

Name servers:
    ns1.glavmed.com
    ns2.glavmed.com

Registrar: Regtime Ltd.
Creation date: 2009-01-15
Expiration date: 2013-03-14
Status: active

Registrant:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Administrative Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Technical Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Billing Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747

Network Whois record

Queried whois.arin.net with “!NET-74-86-34-144-1“…

CustName:   Dmitry Fedorov
Address:    Ivanov st 31
City:       Moscow
StateProv:
PostalCode: 125725
Country:    RU
RegDate:    2009-03-19
Updated:    2009-03-19

NetRange:   74.86.34.144 - 74.86.34.151
CIDR:       74.86.34.144/29
NetName:    NET-74-86-34-144
NetHandle:  NET-74-86-34-144-1
Parent:     NET-74-86-0-0-1
NetType:    Reassigned
Comment:    Send abuse issues to abuse@softlayer.com
RegDate:    2009-03-19
Updated:    2009-03-19

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  abuse@softlayer.com 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin
RNOCPhone:  +1-214-442-0600
RNOCEmail:  ipadmin@softlayer.com 

RTechHandle: IPADM258-ARIN
RTechName:   IP Admin
RTechPhone:  +1-214-442-0600
RTechEmail:  ipadmin@softlayer.com 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  abuse@softlayer.com

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  ipadmin@softlayer.com

# ARIN WHOIS database, last updated 2009-06-26 19:10

DNS records

name class type data time to live
http://www.glavmed.com IN A 74.86.34.144 60s (00:01:00)
glavmed.com IN SOA
server: ns1.glavmed.com
email: root.glavmed.com
serial: 2009041832
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
glavmed.com IN NS ns1.glavmed.com 60s (00:01:00)
glavmed.com IN NS ns2.glavmed.com 60s (00:01:00)
glavmed.com IN MX
preference: 10
exchange: mail.glavmed.com
60s (00:01:00)
glavmed.com IN A 74.86.34.144 60s (00:01:00)
144.34.86.74.in-addr.arpa IN PTR 74.86.34.144-static.reverse.softlayer.com 3600s (01:00:00)

— end —

Canadian Pharmacy – sayfinish.com (Spam)

An Amazing Canadian Pharmacy is available_at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sayfinish.com

“Canadian Pharmacy” is property of some of the worst criminals on the Internet. Don’t let them fool you, as they lie just about everything. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by eating those drugs.

It’s your personal and credit card information they are after, and they’d do anything to get their filthy hands on that information. Their greed knows no measure, and they would probably sell their own mother for a quick buck. Of course they don’t have one, as this kind of filth breeds in drains.

Read more about this unrivaled fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
74.42.73.118 United States (Thorntown)* Whois Google DNSStuff Urgentmessage.org
207.115.36.102 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Randal Ford Wed Jun 10 15:40:56 2009
Return-Path:

Authentication-Results: mta141.sbc.mail.mud.yahoo.com from=datasul.com.br; domainkeys=neutral (no sig); from=datasul.com.br; dkim=neutral (no sig)
Received: from 74.42.73.118 (EHLO nlpi086.prodigy.net) (207.115.36.102)
by mta141.sbc.mail.mud.yahoo.com with SMTP; Wed, 10 Jun 2009 15:40:55 -0700
Received: from fa87sf1 (static-74-42-73-118.dr01.shlw.az.frontiernet.net [74.42.73.118])
by nlpi086.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5AMeNjN013251;
Wed, 10 Jun 2009 17:40:53 -0500
Message-ID: <000701c9ea1c$851353b0$4a37416a@datasul.com.br>
Reply-To: “Randal Ford” <ford_rr@datasul.com.br>
From: “Randal Ford” <ford_rr@datasul.com.br>
To: ScamFraudAlert
Subject: We have anti anxiety medications!!
Date: Wed, 10 Jun 2009 17:40:56 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 134

Address lookup

canonical name sayfinish.com.
aliases
addresses 203.93.208.86
58.17.3.41

Domain Whois record

Queried whois.internic.net with “dom sayfinish.com“…

   Domain Name: SAYFINISH.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.WITHPIOUS.COM
   Name Server: NS2.WITHPIOUS.COM
   Name Server: NS3.DADOBJECT.COM
   Name Server: NS4.DADOBJECT.COM
   Name Server: NS5.CENTAROMA.IM
   Name Server: NS6.CENTAROMA.IM
   Status: ok
   Updated Date: 08-jun-2009
   Creation Date: 06-jun-2009
   Expiration Date: 06-jun-2010

>>> Last update of whois database: Thu, 11 Jun 2009 04:54:59 UTC <<<

Queried whois.paycenter.com.cn with “sayfinish.com“…

Domain Name      : sayfinish.com
PunnyCode        : sayfinish.com

Registrant:
  Organization   : CAO XINXIN
  Name           : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269

Administrative Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Technical Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Billing Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Canadian Pharmacy – rosefight.com – causebreezy.com

An Incredible Canadian~Pharmacy is available at your Fingertips!
NO_Doctor_Needed! Click Here => http://rosefight.com

 

An Incredible Canadian~Pharmacy is available at your_Fingertips!
NO_Doctor_Needed! Click Here => http://causebreezy.com

 

An Incredible CanadianPharmacy is available at your Fingertips!
NO Doctor Needed! Click Here -> http://zealstay.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
60.198.140.245 Taiwan (Taipei)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:


From Amanda King Wed Jun 3 19:08:30 2009 
Return-Path: 
Authentication-Results: mta124.sbc.mail.mud.yahoo.com from=anglianet.co.uk; domainkeys=neutral (no sig); from=anglianet.co.uk; dkim=neutral (no sig) 
Received: from 60.198.140.245 (EHLO flpi193.prodigy.net) (207.115.20.195
by mta124.sbc.mail.mud.yahoo.com with SMTP; Wed, 03 Jun 2009 19:08:30 -0700 
Received: from wd4l8b2 (60-198-140-245.dynamic.tfn.ent.tw [60.198.140.245] (may be forged)) 
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5427Wlt003373; 
Wed, 3 Jun 2009 19:08:27 -0700 
Message-ID: <000701c9e4b9$5af491b0$4a37416a@anglianet.co.uk> 
Reply-To: “Amanda King”  <a_kingjf@anglianet.co.uk>
From: “Amanda King”    <a_kingjf@anglianet.co.uk>
To: ScamFraudAlert
Subject: We have all the best Rxmed Out! 
Date: Wed, 03 Jun 2009 21:08:30 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 124 

 

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
194.254.168.135 France (Sannois)* Whois Google DNSStuff Urgentmessage.org
207.115.36.113 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

 

From Louie Hicks Fri Jun 5 02:48:58 2009 
Return-Path: 
Authentication-Results: mta138.sbc.mail.re3.yahoo.com from=sparebank1.no; domainkeys=neutral (no sig); from=sparebank1.no; dkim=neutral (no sig) 
Received: from 194.254.168.135 (EHLO nlpi097.prodigy.net) (207.115.36.113
by mta138.sbc.mail.re3.yahoo.com with SMTP; Fri, 05 Jun 2009 02:48:58 -0700 
Received: from 9brjah2 ([194.254.168.135]) 
by nlpi097.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n559mm9j001639; 
Fri, 5 Jun 2009 04:48:57 -0500 
Message-ID: <000701c9e5c2$d939a6a0$4a37416a@sparebank1.no> 
Reply-To: “Louie Hicks”  louiehicks_ig@sparebank1.no
From: “Louie Hicks”  louiehicks_ig@sparebank1.no
To: , , 
Subject: Have long strong night in BED! 
Date: Fri, 05 Jun 2009 04:48:58 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 128

 

 

 

 

Address lookup

canonical name rosefight.com.
aliases  
addresses 203.93.208.86
58.17.3.41
60.191.239.181

Domain Whois record

Queried whois.internic.net with “dom rosefight.com“…

   Domain Name: ROSEFIGHT.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.FELTTWENTY.COM
   Name Server: NS2.FELTTWENTY.COM
   Name Server: SP151.DELETEDNS.COM
   Name Server: SP152.DELETEDNS.COM
   Name Server: SP153.DELETEDNS.COM
   Name Server: SP154.DELETEDNS.COM
   Status: ok
   Updated Date: 04-jun-2009
   Creation Date: 03-jun-2009
   Expiration Date: 03-jun-2010

>>> Last update of whois database: Sat, 06 Jun 2009 22:46:50 UTC <<<

Queried whois.paycenter.com.cn with “rosefight.com“…

Domain Name      : rosefight.com
PunnyCode        : rosefight.com

Registrant:
  Organization   : TIANCHUNLIN
  Name           : TIANCHUNLING
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039

Administrative Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Technical Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Billing Contact:
  Name           : TIANCHUNLING
  Organization   : TIANCHUNLIN
  Address        : daxuenanlu29
  City           : xinxiangshi
  Province/State : henansheng
  Country        : china
  Postal Code    : 453039
  Phone Number   : 86-0373-61255412
  Fax            : 86-0373-61255412
  Email          : TIANCHUNLIN@139.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rosefight.com IN A 60.191.239.181 3600s (01:00:00)
rosefight.com IN A 58.17.3.41 3600s (01:00:00)
rosefight.com IN A 203.93.208.86 3600s (01:00:00)


 


PharmacyUSA!- Canadian Pharmacy – droolplanet.com

PharmacyUSA!

  from support@droolplanet.com
to  
date Mon, May 25, 2009 at 3:17 PM
subject PharmacyUSA!
 

 

AS9929

Address lookup

canonical name droolplanet.com.
aliases  
addresses 60.191.239.189
203.93.208.86
58.17.3.44

Domain Whois record

Queried whois.internic.net with “dom droolplanet.com“…

   Domain Name: DROOLPLANET.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.DROOLPLANET.COM
   Name Server: NS2.DROOLPLANET.COM
   Name Server: NS3.DROOLPLANET.COM
   Name Server: NS4.DROOLPLANET.COM
   Status: ok
   Updated Date: 25-may-2009
   Creation Date: 24-may-2009
   Expiration Date: 24-may-2010

>>> Last update of whois database: Mon, 25 May 2009 23:26:34 UTC <<<

Queried whois.paycenter.com.cn with “droolplanet.com“…

Query error: TimedOut

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
droolplanet.com IN A 60.191.239.189 600s (00:10:00)

WhoIs Stimul-media? Rx-partners.com/Rx-partner.biz

WhoIs Stimul-media??? Rx-Partners ???

Fast-online-refills.com is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.

Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.

Rogue Internet pharmacy (definition):

A pharmacy website that intentionally or knowingly:

  1. violates, appears to violate, or encourages violation of Federal or state law or regulation;
  2. does not adhere to accepted standards of medicine and/or pharmacy practice, including standards of safety; and/or
  3. engages in fraudulent or deceptive business practices.

Website Summary

URL: http://www.fast-online-refills.com
Registrar: Key-Systems
Approval Status: rogue rogue (since 07/31/2009)
Online Status: online online

Network

This site seems to be part of the Stimul-Cash network.

Stimul-Cash is a rogue Internet pharmacy affiliate program. Websites affiliated with this network admit offering prescription drugs from overseas without a valid prescription (which violates multiple US laws). Stimul-Cash’s website claims that the drugs come from India. However, India is known to be a source of illicit, sometimes counterfeit or adulterated, medicines.

Stimul-Cash’s forums are in Russian, which suggests that the operation is not actually run by Indians, but that the network may be linked to an organization in Russia. Additionally, Stimul-Cash appears to be linked to Rx-Partners.biz, another rogue online pharmacy network.

Pharma Fraud Escalates Dramatically

eSoft provided me with data on seven different templates they have discovered. The quantity is amazing. In four days last week they detected:

1,104 canadian_pharm_light_blue
993 canadian_pharm_blue
27 top_pharmacy
23 canadian_pharm_white
18 health_sol
6 canadian_pharm_blue2
1 canadian_pharm_p_images

That is 543 of these sites per day over four days — and only for these seven templates.

“The canadian_* templates are clearly the most prevalent and we have traced these back to “GlavMed”, which we believe operates out of the Russian Business Network and is likely tied to the Russian mafia. The GlavMed hosts tend to stay online for no more than a couple of weeks.”

The other major outfit is Rx Partners/Rx-Commission Networks/ Stimul Cash and they have websites:

http://www.rx-partners.biz
http://www.stimul-cash.com/sites.html

Here are some recent (last 4 days) examples of these sites

www.stimul-cash.com stimul-media.com Centralux Limited

13/02/2009

www.stimul-cash.com stimul-media.com Centralux Limited

Affiliation system for the sale of drugs
many spams Viagra type appear to be linked to these sites

www.stimul-cash.com 91.199.112.5

Stimuli-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, 16 appt. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: Inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Address lookup

canonical name stimul-media.com.
aliases
addresses 88.85.65.160

Domain Whois record

Queried whois.internic.net with “dom stimul-media.com“…stimul-cash - online store

Domain Name: STIMUL-MEDIA.COM
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Name Server: NS1.STIMUL-MEDIA.COM
Name Server: NS2.STIMUL-MEDIA.COM
Status: clientTransferProhibited
Updated Date: 13-apr-2009
Creation Date: 18-apr-2006
Expiration Date: 18-apr-2011

>>> Last update of whois database: Sun,
24 May 2009 19:28:00 UTC

Queried whois.rrpproxy.net with “stimul-media.com“…

DOMAIN: STIMUL-MEDIA.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-AMM1304
owner-organization: STIMUL-MEDIA.COM
owner-fname: Asiyat
owner-lname: Marysheva
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: marysheva@yahoo.com

admin-contact: P-AMM1304stimul-cash - online store2
admin-organization: STIMUL-MEDIA.COM
admin-fname: Asiyat
admin-lname: Marysheva
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: marysheva@yahoo.com

tech-contact: P-AMM1304
tech-organization: STIMUL-MEDIA.COM
tech-fname: Asiyat
tech-lname: Marysheva
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: marysheva@yahoo.com

billing-contact: P-AMM1304
billing-organization: STIMUL-MEDIA.COM
billing-fname: Asiyat
billing-lname: Marysheva
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: marysheva@yahoo.com

nameserver: ns1.stimul-media.com 88.85.65.160
nameserver: ns2.stimul-media.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.160“…

Information related to ‘88.85.64.0 – 88.85.71.255’

inetnum: 88.85.64.0 – 88.85.71.255
netname: WEBAZILLA
descr: WebaZilla
country: NL
admin-c: WZNL1-RIPE
tech-c: WZNL1-RIPE
status: ASSIGNED PA
mnt-by: WZNET-MNT
mnt-routes: WZNET-MNT
changed: bk@webazilla.com 20070209
source: RIPE

role: WebaZilla RIPE Manager
address: WebaZilla B.V.
address: Postbus 19115
address: 3501DC Utrecht
address: Netherlands
phone: +31612253464
fax-no: +31303100299
e-mail: noc@webazilla.com
mnt-by: WZNET-MNT
admin-c: BK5536-RIPE
tech-c: BK5536-RIPE
tech-c: KV1670-RIPE
nic-hdl: WZNL1-RIPE
changed: bk@webazilla.com 20070718
source: RIPE

% Information related to ‘88.85.64.0/19AS35415’

route: 88.85.64.0/19
descr: WEBAZILLA
origin: AS35415
mnt-by: WZNET-MNT
changed: bk@webazilla.com 20060728
source: RIPE

DNS records

DNS query for 160.65.85.88.in-addr.arpa returned an error from the server: NameError

name class type data time to live
stimul-media.com IN MX
preference: 1
exchange: mail.stimul-media.com
3600s (01:00:00)
stimul-media.com IN SOA
server: stimul-media.com
email: root.stimul-media.com
serial: 2009021601
refresh: 1200
retry: 240
expire: 43200
minimum ttl: 3600
3600s (01:00:00)
stimul-media.com IN NS ns2.stimul-media.com 3600s (01:00:00)
stimul-media.com IN NS ns1.stimul-media.com 3600s (01:00:00)
stimul-media.com IN A 88.85.65.160>

Domains Listings

  1. stimulmedia.us
  2. stimul-media.org
  3. stimulmedia.org
  4. x-traffic.org
  5. indianmeds.org
  6. stimul-media.net
  7. stimulmedia.net
  8. indianrx.net
  9. pharmaceutical-news.net
  10. stimulmedia.info
  11. anti-fungal-meds.com
  12. anti-headache-meds.com
  13. bp-meds.com
  14. cheap-anti-depressants.com
  15. cheap-ed-drugs.com
  16. cheap-ed-meds.com
  17. cheap-ed-pills.com
  18. cheap-pain-meds.com
  19. discount-ed-meds.com
  20. discount-ed-pills.com
  21. extracheapdrugs.com
  22. fullpocket.com
  23. gastrointestinal-meds.com
  24. get-your-movie.com
  25. gpills.com
  26. help-me-please.com
  27. mens-best-friends.com
  28. order-cheap-antibiotics.com
  29. order-cheap-cialis.com
  30. order-cheap-levitra.com
  31. pills4boys.com
  32. pr-drugs.com
  33. reels777.com
  34. stimulmedia.com
  35. stimul-media.com
  36. thyroid-meds.com
  37. womens-health-meds.com
  38. deli-drugs.com
  39. delirx.com
  40. delidrugs.com
  41. delhi-drugs.com
  42. delhidrugs.com
  43. delhirx.com
  44. perfect-ed-store.com
  45. top-viagra-store.com
  46. worlds-best-pharmacy.com
  47. worldbestpharmacy.com
  48. ordercheappills.com
  49. bestdealviagra.com
  50. yourpillshere.com
  51. genericsfromindia.com
  52. indian-generics.com
  53. secure-my-card.com
  54. mumbaidrugs.com
  55. my-secure-billing.com
  56. best-cialis-store.com
  57. friendly-ed-pharmacy.com
  58. popular-ed-products.com
  59. best-levitra-store.com
  60. rxpforum.com
  61. rxpblog.com
  62. rxpwiki.com
  63. smok-ox.com
  64. smokox.com
  65. easy-export.biz
  66. stimul-media.biz
  67. farmaforum.biz
  68. pharmforum.biz

CaCeWeb.com

stimulmedia.us
stimul-media.org
stimulmedia.org
x-traffic.org
indianmeds.org
stimul-media.net
stimulmedia.net
indianrx.net
pharmaceutical-news.net
stimulmedia.info
anti-fungal-meds.com
anti-headache-meds.com
bp-meds.com
cheap-anti-depressants.com
cheap-ed-drugs.com
cheap-ed-meds.com
cheap-ed-pills.com
cheap-pain-meds.com
discount-ed-meds.com
discount-ed-pills.com
extracheapdrugs.com
fullpocket.com
gastrointestinal-meds.com
get-your-movie.com
gpills.com
help-me-please.com
mens-best-friends.com
order-cheap-antibiotics.com
order-cheap-cialis.com
order-cheap-levitra.com
pills4boys.com
pr-drugs.com
reels777.com
stimulmedia.com
stimul-media.com
thyroid-meds.com
womens-health-meds.com
deli-drugs.com
delirx.com
delidrugs.com
delhi-drugs.com
delhidrugs.com
delhirx.com
perfect-ed-store.com
top-viagra-store.com
worlds-best-pharmacy.com
worldbestpharmacy.com
ordercheappills.com
bestdealviagra.com
yourpillshere.com
genericsfromindia.com
indian-generics.com
secure-my-card.com
mumbaidrugs.com
my-secure-billing.com
best-cialis-store.com
friendly-ed-pharmacy.com
popular-ed-products.com
best-levitra-store.com
rxpforum.com
rxpblog.com
rxpwiki.com
smok-ox.com
smokox.com
easy-export.biz
stimul-media.biz
farmaforum.biz
pharmforum.biz

WhoIs viagrasuperstore.net (Rx-Partners)

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Address lookup 1-800-532-4808

canonical name viagrasuperstore.net
aliases
addresses 91.199.112.168

viagrasuperstore

edtrusted

Domain ueried whois.internic.net with “dom viagrasuperstore.net“…

Domain Name: VIAGRASUPERSTORE.NET
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: ELD.STEELURK.COM
Name Server: ISA.STEELURK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 13-mar-2009
Creation Date: 03-may-2007
Expiration Date: 03-may-2010

Last update of whois database: Sun, 24 May 2009 10:22:42 UTC

Queried whois.directnic.com with “viagrasuperstore.net“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: VIAGRASUPERSTORE.NET

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:15:24 AM
Record expires on 05-03-2010
Record created on 05-03-2007

Domain servers in listed order:
ELD.STEELURK.COM 91.199.112.7
ISA.STEELURK.COM 91.199.112.8

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.168“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 168.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
viagrasuperstore.net IN A 91.199.112.168 1200s (00:20:00)
viagrasuperstore.net IN SOA
server: eld.steelurk.com
email: root.steelurk.com
serial: 2006629636
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
viagrasuperstore.net IN NS eld.steelurk.com 1200s (00:20:00)
viagrasuperstore.net IN NS isa.steelurk.com 1200s (00:20:00)

Domains

  1. lovepills.us
  2. ed-drugs.us
  3. bluepillsonline.org
  4. caverta.org
  5. cheapest-drug.org
  6. edfriends.org
  7. menssexpills.org
  8. tableta.org
  9. zenegra.org
  10. pills-for-you.org
  11. rxbuy.org
  12. ukgenerics.net
  13. achetercialis.net
  14. bluepillsonline.net
  15. aviagra.net
  16. ezmedz.net
  17. colmed.net
  18. meds4all.net
  19. genericsaver.net
  20. pillsamples.net
  21. viagrasuperstore.net
  22. acquistoviagra.net
  23. ezgenerics.net
  24. rxdeal.net
  25. edselected.net
  26. cialis-generic.net
  27. mens-pharmacy.net
  28. uk-pharmacy.net
  29. offshore-pharmacy.net
  30. viagra-sample.net
  31. pillskingdom.net
  32. pills-kingdom.net
  33. easy-pharmacy.net
  34. comprarviagra.net
  35. comprarcialis.net
  36. indianpharmacyltd.net
  37. pharmaciegenerique.net
  38. trusted-tabs.net
  39. farmaciagenerica.net
  40. viagra-compare.net
  41. cialiskaufen.net
  42. bluepillsonline.info
  43. cheap-generic.info
  44. cheapestgeneric.info
  45. cialis-bestellen.info
  46. cialis-kaufen.info
  47. discountgeneric.info
  48. edfriends.info
  49. generic-cialiss.info
  50. generic-viagras.info
  51. genericcialisuk.info
  52. genericoviagra.info
  53. genericviagras.info
  54. order-generic.info
  55. pharmacywholesale.info
  56. quality-generic-cialis.info
  57. qualitygeneric.info
  58. tabs-pack.info
  59. ukgeneric.info
  60. viagra-bestellen.info
  61. viagra-generic-cialis.info
  62. viagra-generic-pharmacy.info
  63. viagra-kaufen.info
  64. viagra-pharmacy-online.info
  65. viagra-samples.info
  66. viagra100mg.info
  67. viagraon-line.info
  68. pillgen.info
  69. onlinepharmacystore.com
  70. cheapedpills.com
  71. pharmacy-style.com
  72. comprar-levitra.com
  73. get-cheap-pills.com
  74. genericsaver.com
  75. cheap-viagra-pills.com
  76. viagraon-line.com
  77. viagra-gratis.com
  78. 247rxpharmacy.com
  79. farmaciaazzurra.com
  80. ed-generic.com
  81. fcpconline.com
  82. sildegen.com
  83. bettergenerics.com
  84. onlinedrugscatalogue.com
  85. drugstoretrust.com
  86. ordercheapdrugs.com
  87. japanexpressgeneric.com
  88. medicanasfiables.com
  89. edgenerics.com
  90. steelurk.com
  91. ed-selection.com
  92. pillsample1.com
  93. genericsforlove.com
  94. drugsshipping.com
  95. erbaslim.com
  96. menspillstore.com
  97. pillsu.com
  98. cheap-viagra-24.com
  99. pillschoice.com
  100. ed-meds-online.com
  101. bestmedchoice.com
  102. bestbluepills.com
  103. global-online-pharmacy.com
  104. enefibio.com
  105. rx-trusted.com
  106. usapharmacyvip.com
  107. eddiscounts.com
  108. buyacyclovirweb.com
  109. bluepillsonline.com
  110. edtrusted.com
  111. perfectmenspill.com
  112. viagratis.com
  113. viagracomprare.com
  114. pharma-top.com
  115. edmedsidea.com
  116. skyrxshop.com
  117. drgreenpharmacy.com
  118. worldexpressgeneric.com
  119. getupsf.com
  120. rxgenericexpress.com
  121. trusted-tabs.com
  122. rxedtabs.com
  123. cialischoice.com
  124. discountcaregivers.com
  125. shreya-life.com
  126. generic-viagra-shop.com
  127. cheap-pills-store.com
  128. yourpharmacyrx.com
  129. bestpricelovetabs.com
  130. erectile-pills.com
  131. farmacialusa.com
  132. farmaciaazul.com
  133. kuzishop.com
  134. generic-online-store.com
  135. rx-pharmacy-worldwide.com
  136. kamagra-generic-viagra.com
  137. health-for-men.com
  138. pills-now.com
  139. generic-pills-online.com
  140. generics-drugs.com
  141. famouspills.com
  142. ezgenerics.com
  143. ukgenerics.com
  144. generics-supplier.com
  145. telepharmasite.com
  146. genericonlinestore.com
  147. buyedpills.com
  148. ed-choice.com
  149. comprarviagra24h.com
  150. comprarviagrawww.com
  151. edgrouppills.com
  152. rxdstore.com
  153. viagra-24.com
  154. genericbuyer.com
  155. genericviagrauk.com
  156. canadagenericviagra.com
  157. onlinepills4all.com
  158. trustedtabletsonline.com
  159. payformeds.com
  160. cialison-line.com
  161. lafarmaciaenlinea.com
  162. pharmakings.com
  163. bluemagicpill.com
  164. pills-kingdom.com
  165. drugskingdom.com
  166. edportugal.com
  167. vijapan.com
  168. italiaed.com
  169. tabletslist.com
  170. qualitytablets.com
  171. viopage.com
  172. telegenericos.com
  173. ukgenericviagra.com
  174. telemedicamentos.com
  175. pillskingdom.com
  176. menhealth-pharmacy.com
  177. the-med-store.com
  178. safe-drugstore.com
  179. trusty-pharmacy.com
  180. edpillseu.com
  181. farmaciaiberica.com
  182. discount-levitra.com
  183. findgenericviagra.com
  184. cialis-sample.com
  185. drug-buy.com
  186. rxpstore.com
  187. onlinepharms.com
  188. edspain.com
  189. vifrance.com
  190. trustedgenericdrugs.com
  191. trustedkamagra.com
  192. edcurepills.com
  193. ivlon.com
  194. cheap-supplier.com
  195. 1stgenerics.com
  196. edstorerx.com
  197. genericorders.com
  198. rxheal.com
  199. rxcare-global.com
  200. rxalfa.com
  201. drugslines.com
  202. caremedication.com
  203. eu-pills.com
  204. cheap-genericviagra.com
  205. vigrox.com
  206. softvigrax.com
  207. best-quality-pills.com
  208. you-cheap-drugstore.com
  209. medicine-catalog.com
  210. abc-pharmacy.com
  211. viagraenligne.com
  212. bestseller-tablets.com
  213. hushpills.com
  214. pillsamples.com
  215. prescriptionsgiant.com
  216. levitra-compare.com
  217. viagramedic.com
  218. edmedsworld.com
  219. ed-guru.com
  220. cialistore.com
  221. acheterviagra.biz
  222. ed-solution.biz
  223. generic-levitra.biz
  224. rxdrugstore.biz
  225. securepharmacy.biz
  226. steroids-online.biz
  227. trusted-tabs.biz
  228. trustedtablets.biz
  229. viagra-generic.biz
  230. edselected.biz
  231. medical-pill.biz
  232. viagra-ed.biz
  233. pharma-market.biz

Canadian Pharmacy Spam – Vitalideal.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal . com 

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal.com

WhoIs Lookup

Address lookup

canonical name vitalideal.com
aliases  
addresses 60.191.239.189

Domain Whois record

Queried whois.internic.net with “dom vitalideal.com“…

   Domain Name: VITALIDEAL.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PRIDEEASY.COM
   Name Server: NS2.PRIDEEASY.COM
   Name Server: NS3.GRATEFULFACT.COM
   Name Server: NS4.GRATEFULFACT.COM
   Status: ok
   Updated Date: 22-may-2009
   Creation Date: 20-may-2009
   Expiration Date: 20-may-2010

>>> Last update of whois database: Sun, 24 May 2009 09:48:41 UTC <<<

Queried whois.paycenter.com.cn with “vitalideal.com“…

Domain Name      : vitalideal.com
PunnyCode        : vitalideal.com

Registrant:
  Organization   : BAI ZIRONG
  Name           : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106

Administrative Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Technical Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Billing Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

190.218.142.211From Stanley Garza Sat May 23 18:12:49 2009 
Return-Path: 
Authentication-Results: mta168.sbc.mail.mud.yahoo.com from=st-and.ac.uk; domainkeys=neutral (no sig); from=st-and.ac.uk; dkim=neutral (no sig) 
Received: from 190.218.142.211 (EHLO nlpi048.prodigy.net) (207.115.36.77
by mta168.sbc.mail.mud.yahoo.com with SMTP; Sat, 23 May 2009 20:26:05 -0700 
Received: from 42wac22 ([190.218.142.211]) 
by nlpi048.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4O3Pmlf017046; 
Sat, 23 May 2009 22:26:01 -0500 
Message-ID: <000701c9dc0c$c15f3410$627e269a@st-and.ac.uk> 
Reply-To: “Stanley Garza” 
From: “Stanley Garza” 
To: , , 
Subject: Get all the medications you want online! 
Date: Sun, 24 May 2009 09:12:49 +0800 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 163

Canadian Pharmacy – pharmaceuticsupport.com

I had trouble with these guys and they have put me on a spam network. I ordered Viagra from a Canadian site, the name was   canadashealthcarestore.com      , a slightly different address than what you list, but still the same Russian site. They never sent the product, and have a  Pharm Support Group   at       support@pharmaceuticsupport.com   .
All attempts to contact them result in error61 connection refused. I contacted my credit card company to get a refund, as I did not get any product, and I received a nasty E-mail saying I will be reported for fraud to the FBI and all credit reference agencies. I’d love to tell the FBI and all credit agencies about this nasty site. Now I get porn spam with really bad spelling, and spam selling meds.
     I am happily married, but over 50, and could use some Viagra, but not from these crooks. They increased the credit card amount that I charged on their site to a larger amount, and it was paid to an agency in Latvia, Soviet Union. So now I get E-mail from a list with many different names, up to 6 a day. These guys have all my info, credit card numbers etc. I hope you can spread the word and try to stop them.

Thanks

Steve

 

Address lookup

canonical name pharmaceuticsupport.com.
aliases  
addresses 216.188.26.162
216.188.26.161

Domain Whois record

Queried whois.internic.net with “dom pharmaceuticsupport.com“…

   Domain Name: PHARMACEUTICSUPPORT.COM
   Registrar: ABOVE, INC.
   Whois Server: whois.above.com
   Referral URL: http://www.above.com
   Name Server: PNS1.TRELLIAN.COM
   Name Server: PNS2.TRELLIAN.COM
   Status: ok
   Updated Date: 29-mar-2009
   Creation Date: 29-mar-2009
   Expiration Date: 29-mar-2010

>>> Last update of whois database: Wed, 20 May 2009 04:08:02 UTC <<<

Queried whois.above.com with “pharmaceuticsupport.com“…

Registration Service Provided By: ABOVE.COM, INC.
Contact: +613.95897946

    Domain Name: PHARMACEUTICSUPPORT.COM

    Registrant:
          Above.com Domain Privacy
          Host Master        (hostmaster@above.com)
          8 East Concourse
          Beaumaris 
          VIC 3193
          AUSTRALIA
          Tel. +613.95897946

    Creation Date: 29-Mar-2009
    Expiration Date: 29-Mar-2010

    Domain servers in listed order:
          pns2.trellian.com
          pns1.trellian.com

    Administrative Contact:
          Above.com Domain Privacy
          Host Master        (hostmaster@above.com)
          8 East Concourse
          Beaumaris
          VIC 3193
          AUSTRALIA
          Tel. +613.95897946

    Technical Contact:
          Above.com Domain Privacy
          Host Master        (hostmaster@above.com)
          8 East Concourse
          Beaumaris
          VIC 3193
          AUSTRALIA
          Tel. +613.95897946

    Billing Contact:
          Above.com Domain Privacy
          Host Master        (hostmaster@above.com)
          8 East Concourse
          Beaumaris
          VIC 3193
          AUSTRALIA
          Tel. +613.95897946

Status:ACTIVE

The data in this whois database is provided to you for information purposes only, that is, to assist you in obtaining information about or related to a domain name registration record. We make this information available "as is", and do not guarantee its accuracy. By submitting a whois query, you agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to:(1) enable high volume, automated, electronic processes that stress or load this whois database system providing you this information; or(2) allow,  enable, or otherwise support the transmission of mass unsolicited,  commercial advertising or solicitations via direct mail,electronic mail, or by telephone. The compilation, repackaging, dissemination or other use of this data is expressly prohibited without prior written consent from us.  The registrar of record is Above.com, Inc. We reserve the right to modify these terms at any time. By submitting this query, you agree to abide by these terms.

Network Whois record

Queried whois.arin.net with “!NET-216-188-26-0-1“…

OrgName:    Trellian Limited 
OrgID:      TRELL-3
Address:    8 East Concourse
City:       Beaumaris
StateProv:  VIC
PostalCode: 3193
Country:    AU

NetRange:   216.188.26.0 - 216.188.26.255 
CIDR:       216.188.26.0/24 
OriginAS:   AS10487
NetName:    TRELLIAN-NET-1
NetHandle:  NET-216-188-26-0-1
Parent:     NET-216-188-24-0-1
NetType:    Reassigned
NameServer: NS1.TRELLIAN.COM
NameServer: NS2.TRELLIAN.COM
Comment:    
RegDate:    2009-03-03
Updated:    2009-03-03

RNOCHandle: FH6-ARIN
RNOCName:   Hopperton, Frank 
RNOCPhone:  +1-619-243-3245
RNOCEmail:  frank@simplenet.com 

OrgTechHandle: CRA76-ARIN
OrgTechName:   Ralph, Corey 
OrgTechPhone:  +61 395-897-946
OrgTechEmail:  corey@trellian.com

# ARIN WHOIS database, last updated 2009-05-19 19:10

DNS records

name class type data time to live
pharmaceuticsupport.com IN A 216.188.26.162 3600s (01:00:00)
pharmaceuticsupport.com IN TXT v=spf1 -all 3600s (01:00:00)
pharmaceuticsupport.com IN NS pns2.trellian.com 86400s (1.00:00:00)
pharmaceuticsupport.com IN A 216.188.26.161 3600s (01:00:00)
pharmaceuticsupport.com IN SOA
server: pns1.trellian.com
email: hostmaster.trellian.com
serial: 2009052001
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
60s (00:01:00)
pharmaceuticsupport.com IN NS pns1.trellian.com 86400s (1.00:00:00)
162.26.188.216.in-addr.arpa IN PTR pm02-san.trellian.com 65830s (18:17:10)

Traceroute

Tracing route to pharmaceuticsupport.com [216.188.26.162]

hop rtt rtt rtt   ip address fully qualified domain name
1 8 2 1   70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0   70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0   70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0   70.87.253.25 et3-2.ibr04.dllstx3.theplanet.com
5 0 0 0   4.71.122.1 te-3-4.car4.dallas1.level3.net
6 1 1 1   4.68.19.65 ge-1-3-0-79.bbr1.dallas1.level3.net
7 29 29 29   64.159.1.137 as-2-0.mp1.sandiego1.level3.net
8 29 29 29   4.68.113.38 so-10-0.hsa1.sandiego1.level3.net
9 30 30 35   209.245.56.18 simplenet-i.hsa1.level3.net
10 30 32 30   209.132.3.3 ac-cr2-fa1-0-0.accentric.net
11 31 30 31   209.132.8.6 simplenet-gw.accentric.net
12 33 31 31   216.188.26.162 pm02-san.trellian.com

Trace complete

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Date: Wed, 20 May 2009 04:08:36 GMT
Server: Apache
X-Powered-By: PHP/5.2.0-8+etch13
Connection: close
Content-Type: text/html; charset=UTF-8
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused