WhoIs check-order-status.com

Buying Precription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________

genericsmed.org
viagra-discount.net
viagraforfree.net
topcanadianpharmacy.com
pharmamexshop.com
viagraforlife.com
medications-low-price.com

Address lookup

canonical name check-order-status.com.
aliases
addresses 91.208.162.30

Domain Whois record

Queried whois.internic.net with “dom check-order-status.com“…

   Domain Name: CHECK-ORDER-STATUS.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.CHECK-ORDER-STATUS.COM
   Name Server: NS2.CHECK-ORDER-STATUS.COM
   Name Server: NS3.CHECK-ORDER-STATUS.COM
   Name Server: NS4.CHECK-ORDER-STATUS.COM
   Status: ok
   Updated Date: 05-aug-2009
   Creation Date: 06-aug-2008
   Expiration Date: 06-aug-2011

Last update of whois database: Fri, 07 Aug 2009 06:58:50 UTC <<<

Queried whois.regtime.net with “check-order-status.com“…

% Regtime Ltd. WHOIS server

Domain name: check-order-status.com

Name servers:

Registrar: Regtime Ltd.
Creation date: 2009-02-10
Expiration date: 2011-08-06
Status: active

Registrant:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Administrative Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Technical Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078
Billing Contact:
    Andrej Smirnov
    Email: phenomenal.here@gmail.com
    Organization: Private person
    Address: Ul. Petrova 21 10
    City: Moskva
    State: Moskovskaya oblast
    ZIP: 121552
    Country: RU
    Phone: +44.2075588078

Network Whois record

Queried whois.ripe.net with “-B 91.208.162.30“…

% Information related to '91.208.162.0 - 91.208.162.255'

inetnum:        91.208.162.0 - 91.208.162.255
netname:        RUSDESIGN-NET
descr:          RusDesign Ltd
country:        RU
org:            ORG-RL57-RIPE
admin-c:        AS13070-RIPE
tech-c:         AS13070-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         RUSDESIGN-MNT
mnt-routes:     RUSDESIGN-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    RUSDESIGN-MNT
changed:        asmirnoff73@gmail.com 20080904
source:         RIPE

organisation:   ORG-RL57-RIPE
org-name:       RusDesign Ltd
org-type:       OTHER
address:        Krasina 5-15
address:        Moscow, Russia
e-mail:         asmirnoff73@gmail.com
mnt-ref:        RUSDESIGN-MNT
mnt-by:         RUSDESIGN-MNT
changed:        tomassmolar@seznam.cz 20080828
source:         RIPE

person:         Andrey Smirnov
address:        Krasina 5-15
address:        Moscow, Russia
phone:          +7 916 9894767
nic-hdl:        AS13070-RIPE
mnt-by:         RUSDESIGN-MNT
changed:        tomassmolar@seznam.cz 20080828
source:         RIPE

% Information related to '91.208.162.0/24AS2118'

route:          91.208.162.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20080904
source:         RIPE

DNS records

DNS query for 30.162.208.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
check-order-status.com IN SOA
server: ns1.adverdomain.com
email: root.check-order-status.com
serial: 2009030837
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
check-order-status.com IN NS ns1.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns2.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns4.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns3.adverdomain.com 60s (00:01:00)
check-order-status.com IN NS ns5.adverdomain.com 60s (00:01:00)
check-order-status.com IN A 91.208.162.30 60s (00:01:00)

— end —

Address lookup

lookup failed canadianmedicinenow.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom canadianmedicinenow.com”…

   Domain Name: CANADIANMEDICINENOW.COM
   Registrar: DIRECTNIC, LTD
   Whois Server: whois.directnic.com
   Referral URL: http://www.directnic.com
   Name Server: NS0.DIRECTNIC.COM
   Name Server: NS1.DIRECTNIC.COM
   Status: ok
   Updated Date: 14-jul-2009
   Creation Date: 08-jul-2008
   Expiration Date: 08-jul-2010

>>> Last update of whois database: Thu, 05 Nov 2009 10:06:20 UTC <<<

Queried whois.directnic.com with “canadianmedicinenow.com”…

Registrant:
 PSTA Pharmacy Support Team Acc
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Domain Name: CANADIANMEDICINENOW.COM

Administrative Contact:
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Technical Contact:
 Shultz, Max extorminus@gmail.com
 17A, Kings Gates rd.
 London, London W1G 7HP
 GB
 +44.41225330843 

Record last updated 07-14-2009 06:38:04 AM
Record expires on 07-08-2010
Record created on 07-08-2008

Domain servers in listed order:
	NS0.DIRECTNIC.COM	74.117.217.20
	NS1.DIRECTNIC.COM	69.46.234.245

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
canadianmedicinenow.com IN SOA
server: ns0.directnic.com
email: hostmaster.directnic.com
serial: 1219345229
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
canadianmedicinenow.com IN NS ns1.directnic.com 3600s (01:00:00)
canadianmedicinenow.com IN NS ns0.directnic.com 7200s (02:00:00)
canadianmedicinenow.com IN MX
preference: 5
exchange: mail.canadianmedicinenow.com
7200s (02:00:00)

— end —

Canadian Pharmacy Spam KING

The guy is not just a spammer. He’s actually a criminal phisher. He sends spams to collect credit card numbers to steal your money.

The guy is well documented in the following urls. He’s the kingkong of all spams according to the spamhause: “Canadian Pharmacy”.

http://www.spamhaus.org/statistics/spammers.lasso
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy

He’s known as;

Jonathan Owens

jowens@unifiedmarkets.com (current)
jowens@unifiedmarket.com (previous)
www.unifiedmarkets.com (current)
www.unifiedmarket.com (previous)
640 Grand Ave.
Carlsbad, North San Diego County
CA 92008-2365
+1 (760) 730-9864

You can find his foot prints by searching the following keywords;

210-888-9089 – Canadian Pharmacy
210-888-9089 – US Drugstore
+ 020 3239 7731 – (new number) Canadian Pharmacy
210 787 1711 – Bogus Marcus Med
845-709-8044 – Bogus university degree
718-524-2096 – Bogus OEM software
888-245-4117 – Bogus collection agency
support@canadianpharmsupport.com
210 East 59st Street New York, NY 10021

The good news is that this scammer has extreme hatered against receiving spams. It’s rather irony, isn’t it? So forward all the spams to the following email addresses. Send them using different email addresses as many as possible, so that he won’t be able to block your email addresses. He has the tendency that if you send a lot of spams to him, he will remove you from his spam databases. THIS IS THE ONLY WAY YOU CAN REMOVE FROM HIS SPAMBASE! You can also automate your email system to redirect to him. Then congratulations!
You will get far less spams!

jowens@unifiedmarkets.com
owensw@unifiedmarkets.com
dmoonfire@unifiedmarkets.com
uminfo@unifiedmarkets.com
dholden@unifiedmarkets.com

Canadian Pharmacy Spam – cheaprx02.com (217.150.55.94)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
217.150.55.94 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
207.115.36.108 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Antone George Fri Jul 17 22:31:35 2009
Return-Path:
Authentication-Results: mta135.sbc.mail.mud.yahoo.com from=hkusua.hku.hk; domainkeys=neutral (no sig); from=hkusua.hku.hk; dkim=neutral (no sig)
Received: from 217.150.55.94 (EHLO nlpi092.prodigy.net) (207.115.36.108)
by mta135.sbc.mail.mud.yahoo.com with SMTP; Fri, 17 Jul 2009 22:29:31 -0700
Received: from efswfco (NefteGazKomplektService-gw.transtelecom.net [217.150.55.94] (may be forged))
by nlpi092.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6I5TC0k015825;
Sat, 18 Jul 2009 00:29:30 -0500
Message-ID: <000701ca0769$03fbbaf0$431333e2@hkusua.hku.hk>
Reply-To: “Antone George” <antonegeorgeny@hkusua.hku.hk
From: “Antone George”  <antonegeorgeny@hkusua.hku.hk
To: ScamFraudAlert.com
Subject: buy Ritalin online NoPRESCRIPTION!
Date: Sat, 18 Jul 2009 00:31:35 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Canadian Pharmacy Spam – http://cheaprx02.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
78.251.40.213 France* Whois Google DNSStuff Urgentmessage.org
207.115.20.133 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Clarence Overton Sat Jul 18 05:37:31 2009
Return-Path:
Authentication-Results: mta131.sbc.mail.re2.yahoo.com from=addenbrookes.nhs.uk; domainkeys=neutral (no sig); from=addenbrookes.nhs.uk; dkim=neutral (no sig)
Received: from 78.251.40.213 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta131.sbc.mail.re2.yahoo.com with SMTP; Sat, 18 Jul 2009 06:41:41 -0700
Received: from x5lwy53 ([78.251.40.213])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6IDfOH8020044;
Sat, 18 Jul 2009 06:41:39 -0700
Message-ID: <000701ca07a4$84a00130$627e2c7a@addenbrookes.nhs.uk>
Reply-To: “Clarence Overton”  clarenceovertonqc@addenbrookes.nhs.uk
From: “Clarence Overton”  <clarenceovertonqc@addenbrookes.nhs.uk>
To: ScamBuster aka ScamFraudAlert.com
Subject: great deals goin on
Date: Sat, 18 Jul 2009 08:37:31 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 223

Vicodin_ES, ViagraXanax, Codeine, Phentermin, Ritalin and many more!
Brand Named & Generic Medications! No Doctor or Prescription Needed! Fast Trackable USPS Shipping! Browse Our Site Today –> http://cheaprx02.com

Address lookup

lookup failed cheaprx02.com
Could not find an IP address for this domain name.

Domain Whois record

Queried whois.internic.net with “dom cheaprx02.com“…

   Domain Name: CHEAPRX02.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.FE5NS.COM
   Name Server: SP536.DELETEDNS.COM
   Status: clientHold
   Status: clientTransferProhibited
   Updated Date: 19-jul-2009
   Creation Date: 27-jun-2009
   Expiration Date: 27-jun-2010

Last update of whois database: Mon, 20 Jul 2009 05:34:57 UTC

Queried whois.onlinenic.com with “cheaprx02.com“…

Registrant:
	 Serpino Berbeto ad6@safe-mail.net +1.2128848801
	 Serpino Berbeto
	 403 po box
	 New York,NY,US 10037

Domain Name:cheaprx02.com
Record last updated at 2009-07-16 19:25:01
Record created on 2009/6/27
Record expired on 2010/6/27

Domain servers in listed order:
	 ns1.fe5ns.com 	 ns2.re3ns.com 

Administrator:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Technical Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Billing Contactor:
	 name: Serpino Berbeto
	Email: ad6@safe-mail.net tel-- +1.2128848801
	 Serpino Berbeto
	 403 po box
r
t New York
NY,
US

 zipcode:10037

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
cheaprx02.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
cheaprx02.com IN A 220.248.172.39 86400s (1.00:00:00)
cheaprx02.com IN NS ns1.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns2.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns3.cheaprx02.com 86400s (1.00:00:00)
cheaprx02.com IN NS ns4.cheaprx02.com 86400s (1.00:00:00)

— end —

SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: ns1.99999ns.com
ns1.thebestusrx.com
ns1.thebestusrxnow.com
ns1.usacheapmeds.com
ns2.hotrxlive.com
ns2.thebestusrx.com
ns4.tertorests.com
acounterstas.com
afropeloses.com
awepolikars.com
dertorests.com
tertorests.com
yertorests.com
sertorests.com
sategonovas.com
aredouters.com
aertorests.com
pertorests.com
uertorests.com
fertorests.com
iertorests.com
oertorests.com
gemenysofts.com
friokeares.com
wallouters.com
qertorests.com
softenouss.com
rertorests.com
bartolosofts.com
verobounss.com
adremacolares.com
grefoulsofs.com
wertorests.com
hropokons.com
jimenesouns.com
grestosofts.com

Canadian Pharmacy – circleso.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

An Incredible CanadianPharmacy is available at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://circleso.com

Address lookup

canonical name circleso.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

Domain Whois record

Queried whois.internic.net with “dom circleso.com“…

   Domain Name: CIRCLESO.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BITSSHAPE.COM
   Name Server: NS2.BITSSHAPE.COM
   Name Server: NS3.MOTHERWIT.RU
   Name Server: NS4.MOTHERWIT.RU
   Name Server: NS5.YOURHELD.COM
   Name Server: NS6.YOURHELD.COM
   Status: ok
   Updated Date: 08-jul-2009
   Creation Date: 08-jul-2009
   Expiration Date: 08-jul-2010

Last update of whois database: Sun, 12 Jul 2009 18:35:23 UTC <<<

Queried whois.namerich.cn with “circleso.com“…

 DomainName : circleso.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.BITSSHAPE.COM
Name Server......................NS5.YOURHELD.COM
Name Server......................NS4.MOTHERWIT.RU
Name Server......................NS3.MOTHERWIT.RU
Name Server......................NS6.YOURHELD.COM
Name Server......................NS1.BITSSHAPE.COM
Status...........................ok
Creation  Date ..................2009-07-08
Expiration Date .................2010-07-08
Last Update  Date ...............2009-07-08

Registrant ID ...................V-X-59013-15146
Registrant Name .................GAO HAIFENG
Registrant Organization .........GAO HAIFENG
Registrant Address ..............XINGUANGNANLU61
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........310019
Registrant Phone Number .........+86.057182421519
Registrant Fax ..................+86.057182421519
Registrant Email ................diaineg@126.com

Administrative ID ...............V-X-59013-15146
Administrative Name .............GAO HAIFENG
Administrative Organization .....GAO HAIFENG
Administrative Address ..........XINGUANGNANLU61
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......310019
Administrative Phone Number .....+86.057182421519
Administrative Fax ..............+86.057182421519
Administrative Email ............diaineg@126.com

Billing ID ......................V-X-59013-15146
Billing Name ....................GAO HAIFENG
Billing Organization ............GAO HAIFENG
Billing Address .................XINGUANGNANLU61
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............310019
Billing Phone Number ............+86.057182421519
Billing Fax .....................+86.057182421519
Billing Email ...................diaineg@126.com

Technical ID ....................V-X-59013-15146
Technical Name ..................GAO HAIFENG
Technical Organization...........GAO HAIFENG
Technical Address ...............XINGUANGNANLU61
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........310019
Technical Phone Number ..........+86.057182421519
Technical Fax ...................+86.057182421519
Technical Email .................diaineg@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
circleso.com IN A 218.75.144.6 10800s (03:00:00)
circleso.com IN A 60.191.239.150 10800s (03:00:00)
circleso.com IN A 203.93.208.86 10800s (03:00:00)

— end —

Canadian Pharmacy Spam – bluepillusa.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

BluePillusa

Address lookup

canonical name bluepillusa.com.
aliases
addresses 78.159.118.218

Domain Whois record

Queried whois.internic.net with “dom bluepillusa.com“…

   Domain Name: BLUEPILLUSA.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: NS3.01ISP.COM
   Name Server: NS4.01ISP.NET
   Status: clientTransferProhibited
   Updated Date: 21-oct-2008
   Creation Date: 21-oct-2008
   Expiration Date: 21-oct-2009

>>> Last update of whois database: Mon, 06 Jul 2009 03:04:10 UTC <<<

Queried whois.todaynic.com with “bluepillusa.com“…

Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: bluepillusa.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Alexey M. Arkhipov
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Administrative Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500
Phone: +7.9611327925
Fax: +7.9611327925
Email: arkipal@gmail.com

Technical Contact:
Name: Alexey M. Arkhipov
Organization: Shiloff
Address: ul. Bazhenova, 26 kv 78
City: Shilovo
Province/state: RJAZANSKAYA OBLAST
Country: RU
Postal Code: 391500

Nameserver Information:
    ns3.01isp.com
    ns4.01isp.net

Create: 2008-10-22 00:20:06
Update: 2008-10-22
Expired: 2009-10-22
QueryTimes: 80

If any of the information above is inaccurate, you must correct it by visiting our website or contact us.
(If your review indicates that all of the information above is accurate, you do not need to take any action.)
Please remember that under the terms of your registration agreement, the provision of false Whois information
can be grounds for cancellation of your domain name registration.
Todaynic.com,Inc. reserves the right to modify these terms at any time.

Network Whois record

Queried whois.ripe.net with “-B 78.159.118.218“…

% Information related to '78.159.118.0 - 78.159.121.255'

inetnum:        78.159.118.0 - 78.159.121.255
netname:        NETDIRECT-NET
descr:          netdirekt e.K.
remarks:        INFRA-AW
country:        DE
admin-c:        WW200-RIPE
tech-c:         SR614-RIPE
status:         ASSIGNED PA
mnt-by:         NETDIRECT-MNT
mnt-lower:      NETDIRECT-MNT
mnt-routes:     NETDIRECT-MNT
changed:        technik@netdirekt.de 20080311
source:         RIPE

person:       Wiethold Wagner
address:      netdirekt e. K.
address:      Kleyer Strasse 79 / Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       info@netdirekt.de
nic-hdl:      WW200-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

person:       Simon Roehl
address:      netdirekt e. K.
address:      Kleyer Strasse 79 /Tor 14
address:      60326 Frankfurt
address:      DE
phone:        +49 69 90556880
fax-no:       +49 69 905568822
e-mail:       technik@netdirekt.de
nic-hdl:      SR614-RIPE
mnt-by:       NETDIRECT-MNT
changed:      technik@netdirekt.de 20040224
source:       RIPE

% Information related to '78.159.96.0/19AS28753'

route:	        78.159.96.0/19
descr:	        ORG-nA8-RIPE
origin:	        AS28753
org:	        ORG-nA8-RIPE
mnt-lower:	NETDIRECT-MNT
mnt-routes:	NETDIRECT-MNT
mnt-by:	        NETDIRECT-MNT
changed:	technik@netdirekt.de	20071011
source:	        RIPE

organisation:   ORG-nA8-RIPE
org-name:       netdirect
org-type:       LIR
address:        netdirekt e. K.
                Kleyer Strasse 79 / Tor 14
                60326 Frankfurt
                Germany
phone:          +49 69 90556880
fax-no:         +49 69 905568822
e-mail:         ripe@netdirekt.de
admin-c:        SR614-RIPE
admin-c:        WW200-RIPE
mnt-ref:        NETDIRECT-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
changed:        hostmaster@ripe.net 20040415
changed:        bitbucket@ripe.net 20050329
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060223
changed:        bitbucket@ripe.net 20060815
changed:        bitbucket@ripe.net 20070108
changed:        bitbucket@ripe.net 20070509
changed:        bitbucket@ripe.net 20070813
changed:        bitbucket@ripe.net 20080516
changed:        bitbucket@ripe.net 20080527
changed:        bitbucket@ripe.net 20081014
changed:        bitbucket@ripe.net 20090102
changed:        bitbucket@ripe.net 20090227
source:         RIPE

DNS records

name class type data time to live
bluepillusa.com IN SOA
server: ns3.01isp.com
email: webmaster.now.net.cn
serial: 2008102210
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 7200
7200s (02:00:00)
bluepillusa.com IN NS ns3.01isp.com 43200s (12:00:00)
bluepillusa.com IN NS ns4.01isp.net 43200s (12:00:00)
bluepillusa.com IN A 78.159.118.218 7200s (02:00:00)
218.118.159.78.in-addr.arpa IN SOA
server: ns9.dnspro.de
email: ns.netdirekt.de
serial: 12345
refresh: 10800
retry: 3600
expire: 1209700
minimum ttl: 100000
100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS tert.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns10.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS ns9.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN NS quart.dnspro.de 100000s (1.03:46:40)
218.118.159.78.in-addr.arpa IN PTR 78-159-118-218.internetserviceteam.com 100000s (1.03:46:40)

— end —

AUTH WHOiS]
[Querying whois.verisign-grs.comhttp://whois.verisign-grs.com]
[whois.verisign-grs.comhttp://whois.verisign-grs.com]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.nethttp://www.internic.net
for detailed information.

Domain Name: RXMEDS4ALL.COMhttp://RXMEDS4ALL.COM
Registrar: TODAYNIC.COMhttp://TODAYNIC.COM, INC.
Whois Server: whois.todaynic.comhttp://whois.todaynic.com
Referral URL: http://www.NOW.CNhttp://www.NOW.CN
Name Server: NS1.FREEDNS.WShttp://NS1.FREEDNS.WS
Name Server: NS2.FREEDNS.WShttp://NS2.FREEDNS.WS
Status: clientTransferProhibited
Updated Date: 26-nov-2008
Creation Date: 13-feb-2008
Expiration Date: 13-feb-2010

>>> Last update of whois database: Sat, 07 Feb 2009 09:50:51 EST

Stolen Identity Canadian Pharmacy – pfizer-incorporated.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

pfizer-incorporated

Address lookup

canonical name pfizer-incorporated.com.
aliases
addresses 91.207.4.202

Domain Whois record

Queried whois.internic.net with “dom pfizer-incorporated.com“…

   Domain Name: PFIZER-INCORPORATED.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.PFIZER-INCORPORATED.COM
   Name Server: NS2.PFIZER-INCORPORATED.COM
   Name Server: NS3.PFIZER-INCORPORATED.COM
   Name Server: NS4.PFIZER-INCORPORATED.COM
   Status: clientTransferProhibited
   Updated Date: 02-jul-2009
   Creation Date: 02-jul-2009
   Expiration Date: 02-jul-2010

>>> Last update of whois database: Sat, 04 Jul 2009 11:41:46 UTC <<<

Queried whois.onlinenic.com with “pfizer-incorporated.com“…

Registrant:
	 Deloris P Perticone fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by +7.4294967295
	 N/A
	 ul. Tsentral'naya, d. 18, kv. 11
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:pfizer-incorporated.com 
Record last updated at 2009-07-02 10:19:48
Record created on 2009/7/2
Record expired on 2010/7/2

Domain servers in listed order:
	 ns1.pfizer-incorporated.com 	 ns2.pfizer-incorporated.com 

Administrator:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Deloris P Perticone
 mail: fake_4b72bf7b5551be0072b6f3e6d6925864@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Tsentral'naya, d. 18, kv. 11
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto 
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.ripe.net with “-B 91.207.4.202“…

% Information related to '91.207.4.0 - 91.207.9.255'

inetnum:        91.207.4.0 - 91.207.9.255
netname:        SteepHost-DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-63-618-45-00
descr:          +380-67-375-27-03
remarks:        Please send all spam/scam/fraud abuse to abuse@steephost.com
country:        UA
org:            ORG-SH7-RIPE
admin-c:        SH3855-RIPE
tech-c:         SH3855-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         SH3855-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     SH3855-MNT
mnt-domains:    SH3855-MNT
changed:        hostmaster@ripe.net 20080911
source:         RIPE

organisation:   ORG-SH7-RIPE
org-name:       SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
org-type:       OTHER
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
mnt-ref:        SH3855-MNT
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
changed:        hostmaster@ripe.net 20080911
source:         RIPE

role:           SteepHost DC-UA
address:        Kosmicheskaya 21 of.310
address:        61072, Kharkiv, Ukraine
phone:          +380-63-618-45-00
phone:          +380-67-375-27-03
e-mail:         noc@steephost.com
abuse-mailbox:  abuse@steephost.com
admin-c:        AK5709-RIPE
tech-c:         AK5709-RIPE
nic-hdl:        SH3855-RIPE
mnt-by:         SH3855-MNT
changed:        vvs@teleportsv.net 20080421
source:         RIPE

% Information related to '91.207.4.0/22AS47142'

route:          91.207.4.0/22
descr:          SteepHost DC-UA
descr:          SteepHost.COM Datacentre Allocation
descr:          +380-67-375-27-03
descr:          +380-63-618-45-00
descr:          Please send all spam/scam/fraud abuse to abuse@steephost.com
origin:         AS47142
mnt-by:         SH3855-MNT
changed:        noc@steephost.com 20080911
source:         RIPE

DNS records

DNS query for 202.4.207.91.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
pfizer-incorporated.com IN A 91.207.4.202 3600s (01:00:00)

— end —

MyNewCanadianPharmacy – www.bulnalei.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

MyNewCanadianPharmacy

Address lookup

canonical name bulnalei.net.
aliases
addresses 212.174.200.111

Domain Whois record

Queried whois.internic.net with “dom bulnalei.net“…

   Domain Name: BULNALEI.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NS1.BV9.RU
   Name Server: NS2.THEPILLRX.COM
   Status: clientTransferProhibited
   Updated Date: 19-jun-2009
   Creation Date: 15-jun-2009
   Expiration Date: 15-jun-2010

Last update of whois database: Sat, 04 Jul 2009 17:16:43 UTC <<<

Queried whois.bookmyname.com with “bulnalei.net“…

Date: 2009/07/04 19:17:10

Domain Name:bulnalei.net
Domain registrar_creation:2009-06-15 21:49:02
Domain registrar_expiration:2010-06-15 21:49:02
Domain registry_creation:2009-06-15 21:49:02
Domain registry_expiration:2010-06-15 21:49:02
Domain lastupdate:2009-06-19 21:03:58
Name Server:ns1.bv9.ru
Name Server:ns2.thepillrx.com

Owner ID: FREE-ORG-258998
Owner Name: Suzanne STRINGER
Owner Street1: 2502 Nettlow Ln
Owner City: WIMAUMA
Owner Postal Code: 33598
Owner Country: UNITED STATES OF AMERICA
Owner Phone: +1.8136330406
Owner Email: 58ae9edc.258998@contacts.nospam.free.org
Owner lastupdate: 2009-06-15 21:48:28

Admin ID: FREE-ORG-258998
Admin Name: Suzanne STRINGER
Admin Street1: 2502 Nettlow Ln
Admin City: WIMAUMA
Admin Postal Code: 33598
Admin Country: UNITED STATES OF AMERICA
Admin Phone: +1.8136330406
Admin Email: 58ae9edc.258998@contacts.nospam.free.org
Admin lastupdate: 2009-06-15 21:48:28

Tech ID: FREE-ORG-258998
Tech Name: Suzanne STRINGER
Tech Street1: 2502 Nettlow Ln
Tech City: WIMAUMA
Tech Postal Code: 33598
Tech Country: UNITED STATES OF AMERICA
Tech Phone: +1.8136330406
Tech Email: 58ae9edc.258998@contacts.nospam.free.org
Tech lastupdate: 2009-06-15 21:48:28

Bill ID: FREE-ORG-258998
Bill Name: Suzanne STRINGER
Bill Street1: 2502 Nettlow Ln
Bill City: WIMAUMA
Bill Postal Code: 33598
Bill Country: UNITED STATES OF AMERICA
Bill Phone: +1.8136330406
Bill Email: 58ae9edc.258998@contacts.nospam.free.org
Bill lastupdate: 2009-06-15 21:48:28

For support or more information about this domain name please contact
<a href="http://www.bookmyname.com/">http://www.bookmyname.com/</a>

Network Whois record

Queried whois.ripe.net with “-B 212.174.200.111“…

% Information related to '212.174.200.96 - 212.174.200.127'

inetnum:        212.174.200.96 - 212.174.200.127
netname:        StarBilisim
descr:          Tunali Hilmi Caddesi. No:8/C ANKARA
country:        TR
admin-c:        MA9158-RIPE
tech-c:         MA9158-RIPE
status:         ASSIGNED PA
mnt-by:         AS9121-MNT
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

person:         Mustafa Aktul
remarks:        StarBilisim
address:        Tunali Hilmi Caddesi. No:8/C ANKARA
e-mail:         ip@starbilisim.org
phone:          +903124439388
nic-hdl:        MA9158-RIPE
changed:        ipg@turktelekom.com.tr 20090420
source:         RIPE

% Information related to '212.174.0.0/16AS9121'

route:        212.174.0.0/16
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      dnsadmin@turnet.net.tr 19990803
source:       RIPE

% Information related to '212.174.128.0/17AS9121'

route:        212.174.128.0/17
descr:        TurkTelecom
origin:       AS9121
mnt-by:       AS9121-MNT
changed:      ipg@turktelekom.com.tr 20041214
source:       RIPE

DNS records

DNS query for 111.200.174.212.in-addr.arpa returned an error from the server: NameError

name class type data time to live
bulnalei.net IN SOA
server: ns1.bulnalei.net
email: admin.bulnalei.net
serial: 2005000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
bulnalei.net IN NS ns1.bulnalei.net 600s (00:10:00)
bulnalei.net IN NS ns2.bulnalei.net 600s (00:10:00)
bulnalei.net IN MX
preference: 10
exchange: mail.bulnalei.net
600s (00:10:00)
bulnalei.net IN A 212.174.200.111 600s (00:10:00)

— end —

WhoIs 89.189.191.95 – warez-free-all


Consumer & Business Alert – Stolen Identity!!!! fraudalert
This Is A Fraudulent Website
Phishing or Identity Theft
Do Not Conduct or Transact Business With Them

89.189.191.95

Address lookup

canonical name gw-95.211.ru.
aliases
addresses 89.189.191.95

Domain Whois record

Queried whois.ripn.net with “211.ru“…

warez-free-all.blogspot.com/
Author : Virtualia (IP: 89.189.191.95 , gw-95.211.ru)
E-mail : virt@gmail.com

% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:     211.RU
type:       CORPORATE
nserver:    ns.211.ru. 193.238.131.195
nserver:    ns2.211.ru. 89.189.191.224
state:      REGISTERED, DELEGATED
org:        Ltd. "Siberian Networks"
phone:      +7 383 2209211
phone:      +7 383 2209280
fax-no:     +7 383 2209211
e-mail:     noc@211.ru
registrar:  RUCENTER-REG-RIPN
created:    2004.06.16
paid-till:  2010.06.16
source:     TC-RIPN

Last updated on 2009.07.04 04:54:11 MSK/MSD

Network Whois record

Queried whois.ripe.net with “-B 89.189.191.95“…

% Information related to '89.189.184.0 - 89.189.191.255'

inetnum:        89.189.184.0 - 89.189.191.255
netname:        RU-ISP-SIBNET-NSK-2
descr:          Siberian Networks
country:        RU
admin-c:        SAS-RIPE
tech-c:         SAS-RIPE
status:         ASSIGNED PA
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070301
source:         RIPE

person:         Stanislav A. Svirid
address:        Siberian Networks
address:        21/1, Dachnaya Street
address:        630082, Novosibirsk
address:        Russia
phone:          +7 383 2209280
fax-no:         +7 383 2209211
nic-hdl:        SAS-RIPE
e-mail:         count@211.ru
notify:         count@211.ru
notify:         noc@211.ru
mnt-by:         SIBNET-NSK-MNT
changed:        sva@riss-telecom.ru 20001102
changed:        frolov@riss-telecom.ru 20021218
changed:        count@211.ru 20070322
source:         RIPE

% Information related to '89.189.184.0/21AS34757'

route:          89.189.184.0/21
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20070322
source:         RIPE

% Information related to '89.189.176.0/20AS34757'

route:          89.189.176.0/20
descr:          Siberian Networks ltd Autonomous System
origin:         AS34757
mnt-by:         CityNetLtd-MNT
changed:        rage@kuz.ru 20080328
source:         RIPE

DNS records

name class type data time to live
gw-95.211.ru IN A 89.189.191.95 43200s (12:00:00)
211.ru IN SOA
server: ns2.211.ru
email: noc.211.ru
serial: 2009063002
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 86400
43200s (12:00:00)
211.ru IN TXT v=spf1 ip4:193.238.128.0/22 ip4:89.189.176.0/20 ip4:80.64.168.0/21 ip4:217.106.28.136/30 mx ptr mx:193.238.131.194 ~all 43200s (12:00:00)
211.ru IN A 193.238.131.200 43200s (12:00:00)
211.ru IN MX
preference: 0
exchange: mx.211.ru
43200s (12:00:00)
211.ru IN NS ns.211.ru 43200s (12:00:00)
211.ru IN NS ns2.211.ru 43200s (12:00:00)
95.191.189.89.in-addr.arpa IN PTR gw-95.211.ru

Canadian Pharmacy Spam – www.shop29.net aka www.shop75.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

shop75dotnet

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation.  Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by taking those counterfeit drugs.

  1. Bestdrugs.net.cn
  2. Cheap-meds.cn
  3. Cheap-pill.cn
  4. Cheapdrugs.com.cn
  5. Coolagree.cn
  6. Discountpills.cn
  7. Drugsdirectmoral.com
  8. Lovecanadianpower.com
  9. Lowpricepills.cn
  10. Medsbestone.com.cn
  11. Medstoresome.com.cn
  12. Newmedslofty.com
  13. Newpharmthe.com.cn
  14. Pharmacyonlinefound.com
  15. Pharmssitefarm.com.cn
  16. Pillsiteadd.com.cn
  17. Placepharmacygentle.com
  18. Ridestone.com
  19. Siterxmoral.com
  20. Smartdrugtell.com.cn
  21. Storemedburn.com.cn
  22. Thosefuns.com
  23. Topdrugalive.com
  24. Topmedsraise.com
  25. Toppharmlike.com.cn
  26. Toppilldrink.com.cn
  27. Wholesaledrugsand.com.cn
  28. Wholesalepharmsfirst.com
SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.angerboat.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com

Address lookup

canonical name www.shop29.net.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom shop29.net“…

   Domain Name: SHOP29.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:16:16 UTC <<<

Queried whois.onlinenic.com with “shop29.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop29.net
Record last updated at 2009-06-22 10:50:33
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Technical Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Billing Contactor:
	 name:(Shad P Calnan)
	Email:(fake_84262a12be10a771387c9fa12be66eda@smartdesign.by) tel-- +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
r
t Moskva
Moskovskaya obl.,
RUSSIAN FEDERATION

 zipcode:101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for shop29.net failed: WouldBlock

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop29.net IN A 61.191.191.241 10799s (02:59:59)
http://www.shop29.net IN A 119.39.238.2 10799s (02:59:59)
http://www.shop29.net IN A 203.93.208.86 10799s (02:59:59)
http://www.shop29.net IN A 218.75.144.6 10799s (02:59:59)
http://www.shop29.net IN A 60.191.221.117 10799s (02:59:59)
http://www.shop29.net IN A 60.191.239.153 10799s (02:59:59)
shop29.net IN NS ns6.creaseon.pl 172800s (2.00:00:00)
shop29.net IN NS ns4.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns3.bothstart.ru 172800s (2.00:00:00)
shop29.net IN NS ns5.creaseon.pl 172800s (2.00:00:00)

— end —

Address lookup

canonical name www.shop75.net.
aliases
addresses 61.191.191.241
119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153

Domain Whois record

Queried whois.internic.net with “dom shop75.net“…

   Domain Name: SHOP75.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.onlinenic.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS3.BOTHSTART.RU
   Name Server: NS4.BOTHSTART.RU
   Name Server: NS5.CREASEON.PL
   Name Server: NS6.CREASEON.PL
   Status: clientTransferProhibited
   Updated Date: 22-jun-2009
   Creation Date: 20-jun-2009
   Expiration Date: 20-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 13:18:49 UTC <<<

Queried whois.onlinenic.com with “shop75.net“…

Registrant:
	 Shad P Calnan fake_84262a12be10a771387c9fa12be66eda@smartdesign.by +7.4294967295
	 N/A
	 ul. Lenina, d. 18, kv. 6
	 Moskva,Moskovskaya obl.,RUSSIAN FEDERATION 101000

Domain Name:shop75.net
Record last updated at 2009-06-22 10:50:38
Record created on 2009/6/20
Record expired on 2010/6/20

Domain servers in listed order:
	 ns3.bothstart.ru 	 ns4.bothstart.ru 

Administrator:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Technical Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Billing Contactor:
	 name: Shad P Calnan
 mail: fake_84262a12be10a771387c9fa12be66eda@smartdesign.by tel: +7.4294967295
	 org: N/A

address: ul. Lenina, d. 18, kv. 6
	 city: Moskva
,province: Moskovskaya obl.
,country: RUSSIAN FEDERATION
 postcode: 101000

Registration Service Provider:
	name: Serpino Berbeto
	tel: +1.2128848801
 	fax: +1.2128848801
 	web:

Network Whois record

Queried whois.apnic.net with “61.191.191.241“…

inetnum:      61.191.0.0 - 61.191.255.255
netname:      CHINANET-AH
descr:        CHINANET Anhui province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       AT318-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-AH
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20060314
source:       APNIC

role:         ANHUI TELECOM
address:      305 Changjiang West Road
address:      Hefei Anhui China
country:      CN
phone:        +86 0551 5185089
fax-no:       +86 0551 5185500
e-mail:       wanglinlin2@anhuitelecom.com
trouble:      send spam reports to abuse@ah163.com
trouble:      and abuse reports to abuse@ah163.com
trouble:      Please include detailed information and
trouble:      times in GMT+8:00
admin-c:      LW604-AP
tech-c:       LW604-AP
nic-hdl:      AT318-AP
remarks:      http://www.ah163.net
notify:       wanglinlin2@anhuitelecom.com
mnt-by:       MAINT-CHINANET-AH
changed:      wanglinlin2@anhuitelecom.com 20060323
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

DNS records

DNS query for 241.191.191.61.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.shop75.net IN A 60.191.239.153 10800s (03:00:00)
http://www.shop75.net IN A 61.191.191.241 10800s (03:00:00)
http://www.shop75.net IN A 119.39.238.2 10800s (03:00:00)
http://www.shop75.net IN A 203.93.208.86 10800s (03:00:00)
http://www.shop75.net IN A 218.75.144.6 10800s (03:00:00)
http://www.shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 61.191.191.241 10800s (03:00:00)
shop75.net IN A 218.75.144.6 10800s (03:00:00)
shop75.net IN A 119.39.238.2 10800s (03:00:00)
shop75.net IN A 203.93.208.86 10800s (03:00:00)
shop75.net IN A 60.191.221.117 10800s (03:00:00)
shop75.net IN A 60.191.239.153 10800s (03:00:00)

WhoIs GlavMed.com aka Canadian Pharmacy

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Glavmed is the public-facing affiliate program which sponsors spammers to promote what are generally known to be illegal pharmacy websites. It appears to be a cover for the real sponsor organization behind all of these sites: Spamit. These include [Canadian Pharmacy], one of the most-spammed properties during 2006-2008. Glavmed is alternately known in the spammer community as the “Spamit” program, making it clear that this operation endorses and condones illegal spamming in the promotion of their properties.

This was learned from postings on bulkerforum.biz by username “kref”, who would invite users to promote for their properties. kref is also known as “fakir f” (his Skype username.)

Glavmed (Spamit) is believed to be based out of Moscow, and thought to be very closely related to the “Russian Business Network”, or “RBN.


Spamtracker.eu


GlavMed2

Address lookup

canonical name www.glavmed.com.
aliases
addresses 74.86.34.144

Domain Whois record

Queried whois.internic.net with “dom glavmed.com“…

   Domain Name: GLAVMED.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.GLAVMED.COM
   Name Server: NS2.GLAVMED.COM
   Status: ok
   Updated Date: 23-jan-2009
   Creation Date: 14-mar-2006
   Expiration Date: 14-mar-2013

>>> Last update of whois database: Sat, 27 Jun 2009 02:40:08 UTC <<<

Queried whois.regtime.net with “glavmed.com“…

% Regtime Ltd. WHOIS server

Domain name: glavmed.com

Name servers:
    ns1.glavmed.com
    ns2.glavmed.com

Registrar: Regtime Ltd.
Creation date: 2009-01-15
Expiration date: 2013-03-14
Status: active

Registrant:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Administrative Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Technical Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Billing Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747

Network Whois record

Queried whois.arin.net with “!NET-74-86-34-144-1“…

CustName:   Dmitry Fedorov
Address:    Ivanov st 31
City:       Moscow
StateProv:
PostalCode: 125725
Country:    RU
RegDate:    2009-03-19
Updated:    2009-03-19

NetRange:   74.86.34.144 - 74.86.34.151
CIDR:       74.86.34.144/29
NetName:    NET-74-86-34-144
NetHandle:  NET-74-86-34-144-1
Parent:     NET-74-86-0-0-1
NetType:    Reassigned
Comment:    Send abuse issues to abuse@softlayer.com
RegDate:    2009-03-19
Updated:    2009-03-19

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  abuse@softlayer.com 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin
RNOCPhone:  +1-214-442-0600
RNOCEmail:  ipadmin@softlayer.com 

RTechHandle: IPADM258-ARIN
RTechName:   IP Admin
RTechPhone:  +1-214-442-0600
RTechEmail:  ipadmin@softlayer.com 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  abuse@softlayer.com

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  ipadmin@softlayer.com

# ARIN WHOIS database, last updated 2009-06-26 19:10

DNS records

name class type data time to live
http://www.glavmed.com IN A 74.86.34.144 60s (00:01:00)
glavmed.com IN SOA
server: ns1.glavmed.com
email: root.glavmed.com
serial: 2009041832
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
glavmed.com IN NS ns1.glavmed.com 60s (00:01:00)
glavmed.com IN NS ns2.glavmed.com 60s (00:01:00)
glavmed.com IN MX
preference: 10
exchange: mail.glavmed.com
60s (00:01:00)
glavmed.com IN A 74.86.34.144 60s (00:01:00)
144.34.86.74.in-addr.arpa IN PTR 74.86.34.144-static.reverse.softlayer.com 3600s (01:00:00)

— end —

Canadian Pharmacy – www.firmvictor.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
151.95.186.133 Italy (Pignone)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Lorena N. Livingston Mon Jun 22 17:26:07 2009
Return-Path: <llivingston_wt@avantgarde.de>
Authentication-Results: mta112.sbc.mail.gq1.yahoo.com from=avantgarde.de; domainkeys=neutral (no sig); from=avantgarde.de; dkim=neutral (no sig)
Received: from 151.95.186.133 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta112.sbc.mail.gq1.yahoo.com with SMTP; Tue, 23 Jun 2009 04:14:27 -0700
Received: from lqdbnh2 ([151.95.186.133])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5NBDbs2029631;
Tue, 23 Jun 2009 04:14:25 -0700
Message-ID: <000701c9f399$334e5fd0$627e2c7a@avantgarde.de>
Reply-To: “Lorena N. Livingston”
From: “Lorena N. Livingston” <llivingston_wt@avantgarde.de>
To: ScamFraudAlert
Subject: Stay Hard and Last Longer in Bed!
Date: Mon, 22 Jun 2009 17:26:07 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 126

From: Lorena N. Livingston <llivingston_wt@avantgarde.de>
To: ScamFraudAlert.com
Sent: Monday, June 22, 2009 5:26:07 PM
Subject: Stay Hard and Last Longer in Bed!

An Incredible Canadian Pharmacy is available at your Fingertips!
No_Doctor_Needed! Click Here -> http://firmvictor.com

This spam brand has the dubious distinction of being the most heavily spammed domain our staff receives.

The “Canadian Pharmacy” titled sites are the most common. They may also be labeled “European Pharmacy” for visitors from IP addresses located outside North America.

Other sites include “PharmSite” and “best online PHARMACY.” They are riddled with identical fraudulent claims.

For simplicity, this entry refers by default to Canadian Pharmacy, but the false claims apply equally to all of these.

The copyright statement in the trailers for “PharmSite” and “best online PHARMACY” actually contains the words Copyright Canadian Pharmacy.

Visitors to these sites are cautioned against placing an unsecure order for any of the products advertised. With so much obvious fraud in the set up of the web site, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant criminals.

See Spamtracker.eu – Canadian Pharmacy

firmvictor

Address lookup

canonical name firmvictor.com.
aliases
addresses 119.39.238.2
203.93.208.86
218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241

Domain Whois record

Queried whois.internic.net with “dom firmvictor.com“…

   Domain Name: FIRMVICTOR.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.SOUNDPRIZE.IN
   Name Server: NS2.SOUNDPRIZE.IN
   Name Server: NS3.GROUNDBED.COM
   Name Server: NS4.GROUNDBED.COM
   Name Server: NS5.CHANGESTORY.PL
   Name Server: NS6.CHANGESTORY.PL
   Status: ok
   Updated Date: 18-jun-2009
   Creation Date: 18-jun-2009
   Expiration Date: 18-jun-2010

>>> Last update of whois database: Thu, 25 Jun 2009 07:36:37 UTC <<<

Queried whois.namerich.cn with “firmvictor.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : firmvictor.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.SOUNDPRIZE.IN
Name Server......................NS6.CHANGESTORY.PL
Name Server......................NS4.GROUNDBED.COM
Name Server......................NS5.CHANGESTORY.PL
Name Server......................NS1.SOUNDPRIZE.IN
Name Server......................NS3.GROUNDBED.COM
Status...........................ok
Creation  Date ..................2009-06-18
Expiration Date .................2010-06-18
Last Update  Date ...............2009-06-18

Registrant ID ...................V-X-57697-13132
Registrant Name .................GU FEI
Registrant Organization .........GU FEI
Registrant Address ..............FUZHOUGUANGCHANG29
Registrant City..................FZ
Registrant Province/State .......FJ
Registrant Country Code .........CN
Registrant Postal Code ..........350019
Registrant Phone Number .........+86.059175695124
Registrant Fax ..................+86.059175695124
Registrant Email ................baijakdfe@yeah.net

Administrative ID ...............V-X-57697-13132
Administrative Name .............GU FEI
Administrative Organization .....GU FEI
Administrative Address ..........FUZHOUGUANGCHANG29
Administrative City..............FZ
Administrative Province/State ...FJ
Administrative Country Code .....CN
Administrative Postal Code ......350019
Administrative Phone Number .....+86.059175695124
Administrative Fax ..............+86.059175695124
Administrative Email ............baijakdfe@yeah.net

Billing ID ......................V-X-57697-13132
Billing Name ....................GU FEI
Billing Organization ............GU FEI
Billing Address .................FUZHOUGUANGCHANG29
Billing City.....................FZ
Billing Province/State ..........FJ
Billing Country Code ............CN
Billing Postal Code .............350019
Billing Phone Number ............+86.059175695124
Billing Fax .....................+86.059175695124
Billing Email ...................baijakdfe@yeah.net

Technical ID ....................V-X-57697-13132
Technical Name ..................GU FEI
Technical Organization...........GU FEI
Technical Address ...............FUZHOUGUANGCHANG29
Technical City...................FZ
Technical Province/State.........FJ
Technical Country Code ..........CN
Technical Postal Code ...........350019
Technical Phone Number ..........+86.059175695124
Technical Fax ...................+86.059175695124
Technical Email .................baijakdfe@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “119.39.238.2“…

inetnum:      119.39.232.0 - 119.39.239.255
netname:      yueyang
country:      CN
descr:        CNC Group HuNan YueYang network
descr:        SanHui building ,WuLiPai Street,
descr:        YueYang 411104
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      zoulei@chinaunicom.cn 20081215
mnt-by:       MAINT-CNCGROUP-HN
source:       APNIC

route:        119.39.0.0/16
descr:        CNC Group CHINA169 Hunan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20080102
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 2.238.39.119.in-addr.arpa returned an error from the server: NameError

name class type data time to live
firmvictor.com IN A 218.75.144.6 10800s (03:00:00)
firmvictor.com IN A 119.39.238.2 10800s (03:00:00)
firmvictor.com IN A 203.93.208.86 10800s (03:00:00)
firmvictor.com IN A 60.191.221.117 10800s (03:00:00)
firmvictor.com IN A 60.191.239.153 10800s (03:00:00)
firmvictor.com IN A 61.191.191.241 10800s (03:00:00)

Canadian Pharmacy – Rx Partners – www.rx-partner.biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


rx-partners

rxpartner-sign in

Canadian Pharmacy Spamming Operation

Address lookup

canonical name rx-partners.biz.
aliases
addresses 91.199.112.18
Domain Whois record

Queried whois.biz with “rx-partners.biz”…

Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok

Registrant ID: 550770560-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: 2nd Floor
Registrant State/Province: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005968172
Registrant Facsimile Number: +44.7005968172
Registrant Email: jessicaeagloff@yahoo.co.uk

Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk

Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Billing Contact Address2: 241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk

Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2: 241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk

Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM

Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Wed Jan 21 15:12:51 GMT 2009
Registrar Fields
—————-
IDNLang: de

Whois database was last updated on: Sat May 02 15:29:14 GMT 2009
Network Whois record

Queried whois.ripe.net with “-B 91.199.112.18″…
Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records

DNS query for rx-partners.biz failed: MessageTruncated

DNS query for 18.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rx-partners.biz IN TXT v=spf1 +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN TXT spf2.0/pra +ip4:91.199.112.0/24 +ip4:82.103.130.174/32 +ip4:82.103.129.188/32 +ip4:82.103.130.171 +ip4:82.103.135.35 -all 1200s (00:20:00)
rx-partners.biz IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006617085
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
rx-partners.biz IN NS ns1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS ns0.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip3.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip2.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN NS vip1.partners-dns.com 1200s (00:20:00)
rx-partners.biz IN A 91.199.112.18 1200s (00:20:00)
rx-partners.biz IN MX
preference: 10
exchange: mail.rx-partners.biz 1200s

Domain

  1. ed-solution.com
  2. ed-sup.com
  3. edselection.com
  4. manfriendly.com
  5. partners-dns.com
  6. perfectgenerics.com
  7. propeciahair.com
  8. rxtrusted.com
  9. secureccpay.com
  10. somaextreme.com
  11. trustedtablets.com
  12. trustedtabs.com
  13. ultimatepillstore.com
  14. viagracomparison.com
  15. 4drugs.com
  16. paid4meds.com
  17. paid4med.com
  18. paid4pill.com
  19. paid4pills.com
  20. paid4tabs.com
  21. rx-partners.biz
  22. rxpbill.biz
  23. rxpcash.biz
  24. rxpcheck.biz
  25. rxppay.biz
  26. tabzcash.biz
  27. pillzcash.biz
  28. pillzcheck.biz
  29. pillzmeds.biz
  30. tabpaid.biz
  31. pay4meds.biz
  32. pay4medz.biz
  33. pay4pill.biz
  34. pay4tabs.biz
  35. pay4tabz.biz
  36. pay4med.biz
  37. pay4medc.biz
  38. pay4pillz.biz
  39. paid4meds.biz
  40. ed-sup.com
    edselection.com
    manfriendly.com
    omhca.com
    partners-dns.com
    perfectgenerics.com
    prescriptionspoint.com
    propeciahair.com
    rxtrusted.com
    secureccpay.com
  • 83.149.69.46
  • 83.149.69.47
  • 83.149.82.186
  • 91.199.112.7
  • 91.199.112.8

ww.stimul-cash.com Stimul-media.com Centralux Limited

13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

SpamFilter IPs – TrustedSource.org (NameServers)

 

SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.drivefabled.com
dns1.grewmile.com
dns1.relaxrange.com
dns1.towardhardy.com
dns1.trendysit.com
dns1.varystart.com
dns1.wentcrisp.com
dns1.winnertrue.com
dns2.angerboat.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.hasfeet.com
dns2.headraise.com
dns2.pridenature.com
dns2.shallcoat.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns3.drivefabled.com
dns3.headraise.com
dns3.noticematch.com
dns3.nounstudy.com
dns3.relaxrange.com
dns3.shallcoat.com
dns3.tangyprime.com
dns3.towardhardy.com
dns3.varystart.com
dns4.coursethey.com
dns4.createwere.com
dns4.dadfour.com
dns4.dreamylot.com
dns4.greatyule.com
dns4.headraise.com
dns4.joyfulthin.com
dns4.relaxrange.com
dns4.shallcoat.com
dns4.sliporgan.com
dns4.towardhardy.com
dns4.trendysit.com
dns4.varystart.com
dns4.winnertrue.com
host2.soonplay.com
host4.soonplay.com
ns1.activeinch.com
ns1.boatabove.com
ns1.breezycorner.com
ns1.cookmulti.com
ns1.croppast.com
ns1.dimplechair.com
ns1.dimplechaste.com
ns1.donewater.com
ns1.earlytwenty.com
ns1.feetreal.com
ns1.ideazeal.com
ns1.listenflower.com
ns1.plainable.com
ns1.posewill.com
ns1.powerhardy.com
ns1.silverwe.com
ns1.strongwisdom.com
ns1.toophrase.com
ns1.wheredone.com
ns2.activeinch.com
ns2.callold.com
ns2.cookmulti.com
ns2.croppast.com
ns2.cuddlyhumble.com
ns2.dimplechair.com
ns2.dimplechaste.com
ns2.earlytwenty.com
ns2.listenflower.com
ns2.lucidsoon.com
ns2.mightexcept.com
ns2.posewill.com
ns2.resttrust.com
ns2.ropemeant.com
ns2.toophrase.com
ns2.wheredone.com
ns3.activeinch.com
ns3.atbread.com
ns3.bandwater.com
ns3.briefdesire.com
ns3.burnround.com
ns3.callold.com
ns3.cookmulti.com
ns3.cuddlyhumble.com
ns3.dimplechair.com
ns3.dimplechaste.com
ns3.earlytwenty.com
ns3.fizzdecent.com
ns3.listenflower.com
ns3.lucidsoon.com
ns3.posewill.com
ns3.quietyet.com
ns3.radiothan.com

Canadian Pharmacy – www.motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
12.161.202.90 United States (Neffs)* Whois Google DNSStuff Urgentmessage.org
207.115.36.137 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Brendan Collier Sun May 31 05:31:41 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=dck.com.ar; domainkeys=neutral (no sig); from=dck.com.ar; dkim=neutral (no sig)
Received: from 12.161.202.90 (EHLO nlpi123.prodigy.net) (207.115.36.137)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Sat, 30 May 2009 21:31:35 -0700
Received: from 5s9gclp ([12.161.202.90])
by nlpi123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4V4VGXY028689;
Sat, 30 May 2009 23:31:33 -0500
Message-ID: <000701c9e1eb$c0242c10$627e2ad2@dck.com.ar>
Reply-To: “Brendan Collier”
From: “Brendan Collier”
To: ,
Subject: great deals goin on
Date: Sun, 31 May 2009 08:31:41 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.147.35.66 United States (Davenport)* Whois Google DNSStuff Urgentmessage.org
207.115.20.48 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Amparo Savage Fri May 29 11:46:23 2009

Return-Path:
Authentication-Results: mta102.sbc.mail.re3.yahoo.com from=blm.co.uk; domainkeys=neutral (no sig); from=blm.co.uk; dkim=neutral (no sig)
Received: from 66.147.35.66 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 22:35:52 -0700
Received: from tcdb592 (nsc66.147.35-66.newsouth.net [66.147.35.66])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4U5ZbWA013298;
Fri, 29 May 2009 22:35:52 -0700
Message-ID: <000701c9e08d$c3fa2150$627e2c7a@blm.co.uk>
Reply-To: “Amparo Savage”     a.savage_go@blm.co.uk
From: “Amparo Savage”    a.savage_go@blm.co.uk
To: ScamFraudAlert
Subject: Canadian Rx Medications to the rescue
Date: Fri, 29 May 2009 11:46:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

top-phar-medshop2

Canadian Pharmacy – the worst Internet fraud problem today. These criminals steal identities and credit card details from unsuspecting customers, to use later to pay for tens of thousands of domain name registrations. Don’t be fooled.
Similar sites to this are listed in the spam trap report at
http://rss.uribl.com/ns/plumbold_com.html
Use complainterator.com to generate complaints to the registrars, and include a link to this page for evidence.

Posted at 05/31/2009-12:43:06 AM by pharmalert, Experienced Reviewer

“Canadian Pharmacy” is a flagrant criminal operation that keeps opening thousands and thousands new sites promoting the same old illegal pharmaceuticals. You seldom see greedier scumbags than these criminals. They don’t care how much damage they cause to innocent people as long as they get all they want. No matter if people get seriously ill after taking their fake drugs, or lose their money after giving over their credit card details. This kind of scammers would be happy to sell their own mother for a quick buck (if they only had one).

It’s always better to stay far away from here and similar sites altogether. There’s no one on the face of earth who would gain by this scam but the criminals behind it, and possibly the poor schmucks who send all the spam for them. They think they are safe, but one day the tide will turn…

See evidence of fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed

Posted at 05/30/2009-08:56:12 PM by Nodus, Experienced Reviewer View profile [ Reputation score: 9 / 9 ]

Address lookup

canonical name www.motherany.com.
aliases
addresses 58.17.3.41
60.191.239.181
61.191.63.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom motherany.com“…

   Domain Name: MOTHERANY.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PLUMBOLD.COM
   Name Server: NS2.PLUMBOLD.COM
   Name Server: NS3.MORALFLAIR.COM
   Name Server: NS4.MORALFLAIR.COM
   Status: ok
   Updated Date: 27-may-2009
   Creation Date: 25-may-2009
   Expiration Date: 25-may-2010

>>> Last update of whois database: Sun, 31 May 2009 18:19:27 UTC <<<

Queried whois.paycenter.com.cn with “motherany.com“…

Domain Name      : motherany.com
PunnyCode        : motherany.com

Registrant:
  Organization   : LIUJIARONG
  Name           : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064

Administrative Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Technical Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Billing Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Network Whois record

Queried whois.apnic.net with “58.17.3.41“…

inetnum:      58.17.3.32 - 58.17.3.47
netname:      CHAOREN-CAFE
country:      CN
descr:        Superman Internet Cafe
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      wujiawei@china-netcom.com 20070427
mnt-by:       MAINT-CNCGROUP-JX
source:       APNIC

route:        58.17.0.0/17
descr:        CNC Group CHINA169 Jiangxi Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060728
source:       APNIC

route:        58.17.0.0/17
descr:        CNCGroup JiangXi province network
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20050218
changed:      hm-changed@apnic.net 20050331
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.motherany.com IN A 60.191.239.181 3600s (01:00:00)
http://www.motherany.com IN A 61.191.63.150 3600s (01:00:00)
http://www.motherany.com IN A 203.93.208.86 3600s (01:00:00)
http://www.motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 61.191.63.150 3600s (01:00:00)
motherany.com IN A 203.93.208.86 3600s (01:00:00)
motherany.com IN A 60.191.239.181 3600s (01:00:00)

— end —

Canadian Pharmacy – www.simple-op.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

top-phar-medshop2

Address lookup

canonical name simple-op.net.
aliases http://www.simple-op.net
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom simple-op.net“…

   Domain Name: SIMPLE-OP.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.NSCONTROL.COM
   Name Server: NS2.NSCONTROL.COM
   Name Server: NS3.NSCONTROL.COM
   Name Server: NS4.NSCONTROL.COM
   Name Server: NS5.NSCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 31-jul-2008
   Creation Date: 06-jun-2008
   Expiration Date: 06-jun-2011

>>> Last update of whois database: Sun, 31 May 2009 12:11:56 UTC <<<

Queried whois.enom.com with “simple-op.net“…

Visit AboutUs.org for more information about simple-op.net
<a href="http://www.aboutus.org/simple-op.net">AboutUs: simple-op.net</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: simple-op.net

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com)
   +1.6613102107
   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   ns1.nscontrol.com
   ns2.nscontrol.com
   ns3.nscontrol.com
   ns4.nscontrol.com
   ns5.nscontrol.com

Creation date: 06 Jun 2008 09:43:55
Expiration date: 06 Jun 2011 09:43:55

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.simple-op.net IN CNAME simple-op.net 60s (00:01:00)
simple-op.net IN SOA
server: ns1.adverdomain.com
email: root.simple-op.net
serial: 2009030829
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
simple-op.net IN NS ns4.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns2.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns5.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns1.nscontrol.com 60s (00:01:00)
simple-op.net IN NS ns3.nscontrol.com 60s (00:01:00)
simple-op.net IN A 195.95.155.3 60s (00:01:00)

Canadian Pharmacy – cheapfasteasy.info aka canadianpharmacyltd.com


Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

 

http://www.canadianpharmacyltd.com/?aid=6644

 

Address lookup

canonical name cheapfasteasy.info.
aliases  
addresses 66.154.53.36

Domain Whois record

Queried whois.afilias.info with “cheapfasteasy.info“…

Domain ID:D24249387-LRMS
Domain Name:CHEAPFASTEASY.INFO
Created On:27-Mar-2008 13:56:30 UTC
Last Updated On:09-Apr-2009 16:36:03 UTC
Expiration Date:27-Mar-2010 13:56:30 UTC
Sponsoring Registrar:Name.com LLC (R279-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:ncr-1910406-9413
Registrant Name:bodo unger
Registrant Organization:bodo unger
Registrant Street1:blk 1 door 1 consolation village
Registrant City:cagayan de oro city
Registrant State/Province:misamis oriental
Registrant Postal Code:9000
Registrant Country:PH
Registrant Phone:+63.9194311743
Registrant Email:bodounger@yahoo.de
Admin ID:nc-365243
Admin Name:bodo unger
Admin Organization:bodo unger
Admin Street1:blk 1 door 1 consolation village
Admin City:cagayan de oro city
Admin State/Province:misamis oriental
Admin Postal Code:9000
Admin Country:PH
Admin Phone:+63.9194311743
Admin Email:bodounger@yahoo.de
Billing ID:nc-365245
Billing Name:bodo unger
Billing Organization:bodo unger
Billing Street1:blk 1 door 1 consolation village
Billing City:cagayan de oro city
Billing State/Province:misamis oriental
Billing Postal Code:9000
Billing Country:PH
Billing Phone:+63.9194311743
Billing Email:bodounger@yahoo.de
Tech ID:nc-365244
Tech Name:bodo unger
Tech Organization:bodo unger
Tech Street1:blk 1 door 1 consolation village
Tech City:cagayan de oro city
Tech State/Province:misamis oriental
Tech Postal Code:9000
Tech Country:PH
Tech Phone:+63.9194311743

Tech Email:bodounger@yahoo.de
Name Server:NS1.CONEPUPPY.COM
Name Server:NS2.CONEPUPPY.COM 
Network Whois record

Queried whois.arin.net with “66.154.53.36“…

OrgName:    Cyber Wurx LLC
OrgID:      CPCW
Address:    12430 Tesson Ferry Rd
City:       St Louis
StateProv:  MO
PostalCode: 63128
Country:    US

NetRange:   66.154.0.0 - 66.154.95.255
CIDR:       66.154.0.0/18, 66.154.64.0/19
NetName:    CONEPUPPY-COM
NetHandle:  NET-66-154-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.CONEPUPPY.COM
NameServer: NS2.CONEPUPPY.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-07-20
Updated:    2003-08-20

RTechHandle: CS1169-ARIN
RTechName:   IP SUPPORT, Christopher
RTechPhone:  +1-404-681-9888
RTechEmail:  ipsupport@cyberwurx.com 

OrgAbuseHandle: ABUSE2236-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-404-681-9888
OrgAbuseEmail:  abuse@cyberwurx.com

OrgTechHandle: NOC2137-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  routing@cyberwurx.com

OrgTechHandle: IPALL4-ARIN
OrgTechName:   ipallocation
OrgTechPhone:  +1-404-681-9888
OrgTechEmail:  arin@cyberwurx.com

# ARIN WHOIS database, last updated 2009-05-29 20:00

DNS records

name class type data time to live
cheapfasteasy.info IN A 66.154.53.36 86400s (1.00:00:00)
cheapfasteasy.info IN SOA
server: ns1.conepuppy.com
email: hostmaster.conepuppy
serial: 2008090209
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
cheapfasteasy.info IN NS ns1.conepuppy.com 86400s (1.00:00:00)
cheapfasteasy.info IN NS ns2.conepuppy.com 86400s (1.00:00:00)
cheapfasteasy.info IN MX
preference: 20
exchange: cwmail2.conepuppy.com
86400s (1.00:00:00)
cheapfasteasy.info IN MX
preference: 10
exchange: cwmail.conepuppy.com
86400s (1.00:00:00)
36.53.154.66.in-addr.arpa IN PTR bbwz.com 86400s (1.00:00:00)

WhoIs netsearchworld.com – 211.232.69.115

netsearchworld.com – 211.232.69.115

 http://find-mortgage-refinance.netsearchworld.com

Visit AboutUs.org for more information about netsearchworld.com 
<a href=”http://www.aboutus.org/netsearchworld.com”>AboutUs: netsearchworld.com</a> 

Registration Service Provided By: – 
Contact: director@climbing-games.com 
Visit: http://www.ruler-domains.com 

Domain name: netsearchworld.com 

Registrant Contact: 
Nexton Limited 
Whois Agent () 

Fax: 
Irpinskaya 69 
Kiev, 03142 
UA 

Administrative Contact: 
Nexton Limited 
Whois Agent (support@ruler-domains.com) 
+380993161649 
Fax: +380993161649 
Irpinskaya 69 
Kiev, 03142 
UA 

Technical Contact: 
Nexton Limited 
Whois Agent (support@ruler-domains.com) 
+380993161649 
Fax: +380993161649 
Irpinskaya 69 
Kiev, 03142 
UA 

Status: Locked 

Name Servers: 
ns1.NetSearchWorld.com 
ns2.NetSearchWorld.com 

Creation date: 27 Apr 2009 09:18:15 
Expiration date: 27 Apr 2010 09:18:15 

 

IP Information for 211.232.69.115

IP Location: Korea, Republic Of Korea, Republic Of Seoul Krnic
Resolve Host: static.211-232-69-115.nexg.net
IP Address: 211.232.69.115     
Blacklist Status: Clear

Whois Record

inetnum:      211.232.0.0 – 211.255.255.255
netname:      KRNIC-KR
descr:        KRNIC
descr:        Korea Network Information Center
country:      KR
admin-c:      HM127-AP
tech-c:       HM127-AP
remarks:      ******************************************
remarks:      KRNIC is the National Internet Registry
remarks:      in Korea under APNIC. If you would like to
remarks:      find assignment information in detail
remarks:      please refer to the KRNIC Whois DB
remarks:      http://whois.nic.or.kr/english/index.html
remarks:      ******************************************
mnt-by:       APNIC-HM
mnt-lower:    MNT-KRNIC-AP
changed:       20000908
changed:       20010627
status:       ALLOCATED PORTABLE
source:       APNIC

person:       Host Master
address:      11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address:      Seoul, Korea, 137-857
country:      KR
phone:        +82-2-2186-4500
fax-no:       +82-2-2186-4496
e-mail:       
nic-hdl:      HM127-AP
mnt-by:       MNT-KRNIC-AP
changed:       20020507
source:       APNIC

inetnum:      211.232.0.0 – 211.232.191.255
netname:      VAAN-KR
descr:        NexG
country:      KR
admin-c:      LS151-KR
tech-c:       LS151-KR
status:       ALLOCATED PORTABLE
mnt-by:       MNT-KRNIC-AP
remarks:      This information has been partially mirrored by APNIC from
remarks:      KRNIC. To obtain more specific information, please use the
remarks:      KRNIC whois server at whois.krnic.net.
changed:      

 

———————————————–
Queried Domain Information as follows
———————————————–

Domain Name : nexg.net

::Registrant::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998

::Administrative Contact::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998

::Technical Contact::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998

::Name Servers::
ns1.nexg.net 211.232.190.2
dc1.nexg.net 211.232.191.2

::Dates & Status::
Created Date 2001-10-29 04:43:11 EST
Updated Date 2008-10-10 11:32:39 EDT
Valid Date 2013-10-29 03:43:11 EST
Status ACTIVE

WhoIs viagrasuperstore.net (Rx-Partners)

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Address lookup 1-800-532-4808

canonical name viagrasuperstore.net
aliases
addresses 91.199.112.168

viagrasuperstore

edtrusted

Domain ueried whois.internic.net with “dom viagrasuperstore.net“…

Domain Name: VIAGRASUPERSTORE.NET
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: ELD.STEELURK.COM
Name Server: ISA.STEELURK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 13-mar-2009
Creation Date: 03-may-2007
Expiration Date: 03-may-2010

Last update of whois database: Sun, 24 May 2009 10:22:42 UTC

Queried whois.directnic.com with “viagrasuperstore.net“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: VIAGRASUPERSTORE.NET

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:15:24 AM
Record expires on 05-03-2010
Record created on 05-03-2007

Domain servers in listed order:
ELD.STEELURK.COM 91.199.112.7
ISA.STEELURK.COM 91.199.112.8

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.168“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 168.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
viagrasuperstore.net IN A 91.199.112.168 1200s (00:20:00)
viagrasuperstore.net IN SOA
server: eld.steelurk.com
email: root.steelurk.com
serial: 2006629636
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
viagrasuperstore.net IN NS eld.steelurk.com 1200s (00:20:00)
viagrasuperstore.net IN NS isa.steelurk.com 1200s (00:20:00)

Domains

  1. lovepills.us
  2. ed-drugs.us
  3. bluepillsonline.org
  4. caverta.org
  5. cheapest-drug.org
  6. edfriends.org
  7. menssexpills.org
  8. tableta.org
  9. zenegra.org
  10. pills-for-you.org
  11. rxbuy.org
  12. ukgenerics.net
  13. achetercialis.net
  14. bluepillsonline.net
  15. aviagra.net
  16. ezmedz.net
  17. colmed.net
  18. meds4all.net
  19. genericsaver.net
  20. pillsamples.net
  21. viagrasuperstore.net
  22. acquistoviagra.net
  23. ezgenerics.net
  24. rxdeal.net
  25. edselected.net
  26. cialis-generic.net
  27. mens-pharmacy.net
  28. uk-pharmacy.net
  29. offshore-pharmacy.net
  30. viagra-sample.net
  31. pillskingdom.net
  32. pills-kingdom.net
  33. easy-pharmacy.net
  34. comprarviagra.net
  35. comprarcialis.net
  36. indianpharmacyltd.net
  37. pharmaciegenerique.net
  38. trusted-tabs.net
  39. farmaciagenerica.net
  40. viagra-compare.net
  41. cialiskaufen.net
  42. bluepillsonline.info
  43. cheap-generic.info
  44. cheapestgeneric.info
  45. cialis-bestellen.info
  46. cialis-kaufen.info
  47. discountgeneric.info
  48. edfriends.info
  49. generic-cialiss.info
  50. generic-viagras.info
  51. genericcialisuk.info
  52. genericoviagra.info
  53. genericviagras.info
  54. order-generic.info
  55. pharmacywholesale.info
  56. quality-generic-cialis.info
  57. qualitygeneric.info
  58. tabs-pack.info
  59. ukgeneric.info
  60. viagra-bestellen.info
  61. viagra-generic-cialis.info
  62. viagra-generic-pharmacy.info
  63. viagra-kaufen.info
  64. viagra-pharmacy-online.info
  65. viagra-samples.info
  66. viagra100mg.info
  67. viagraon-line.info
  68. pillgen.info
  69. onlinepharmacystore.com
  70. cheapedpills.com
  71. pharmacy-style.com
  72. comprar-levitra.com
  73. get-cheap-pills.com
  74. genericsaver.com
  75. cheap-viagra-pills.com
  76. viagraon-line.com
  77. viagra-gratis.com
  78. 247rxpharmacy.com
  79. farmaciaazzurra.com
  80. ed-generic.com
  81. fcpconline.com
  82. sildegen.com
  83. bettergenerics.com
  84. onlinedrugscatalogue.com
  85. drugstoretrust.com
  86. ordercheapdrugs.com
  87. japanexpressgeneric.com
  88. medicanasfiables.com
  89. edgenerics.com
  90. steelurk.com
  91. ed-selection.com
  92. pillsample1.com
  93. genericsforlove.com
  94. drugsshipping.com
  95. erbaslim.com
  96. menspillstore.com
  97. pillsu.com
  98. cheap-viagra-24.com
  99. pillschoice.com
  100. ed-meds-online.com
  101. bestmedchoice.com
  102. bestbluepills.com
  103. global-online-pharmacy.com
  104. enefibio.com
  105. rx-trusted.com
  106. usapharmacyvip.com
  107. eddiscounts.com
  108. buyacyclovirweb.com
  109. bluepillsonline.com
  110. edtrusted.com
  111. perfectmenspill.com
  112. viagratis.com
  113. viagracomprare.com
  114. pharma-top.com
  115. edmedsidea.com
  116. skyrxshop.com
  117. drgreenpharmacy.com
  118. worldexpressgeneric.com
  119. getupsf.com
  120. rxgenericexpress.com
  121. trusted-tabs.com
  122. rxedtabs.com
  123. cialischoice.com
  124. discountcaregivers.com
  125. shreya-life.com
  126. generic-viagra-shop.com
  127. cheap-pills-store.com
  128. yourpharmacyrx.com
  129. bestpricelovetabs.com
  130. erectile-pills.com
  131. farmacialusa.com
  132. farmaciaazul.com
  133. kuzishop.com
  134. generic-online-store.com
  135. rx-pharmacy-worldwide.com
  136. kamagra-generic-viagra.com
  137. health-for-men.com
  138. pills-now.com
  139. generic-pills-online.com
  140. generics-drugs.com
  141. famouspills.com
  142. ezgenerics.com
  143. ukgenerics.com
  144. generics-supplier.com
  145. telepharmasite.com
  146. genericonlinestore.com
  147. buyedpills.com
  148. ed-choice.com
  149. comprarviagra24h.com
  150. comprarviagrawww.com
  151. edgrouppills.com
  152. rxdstore.com
  153. viagra-24.com
  154. genericbuyer.com
  155. genericviagrauk.com
  156. canadagenericviagra.com
  157. onlinepills4all.com
  158. trustedtabletsonline.com
  159. payformeds.com
  160. cialison-line.com
  161. lafarmaciaenlinea.com
  162. pharmakings.com
  163. bluemagicpill.com
  164. pills-kingdom.com
  165. drugskingdom.com
  166. edportugal.com
  167. vijapan.com
  168. italiaed.com
  169. tabletslist.com
  170. qualitytablets.com
  171. viopage.com
  172. telegenericos.com
  173. ukgenericviagra.com
  174. telemedicamentos.com
  175. pillskingdom.com
  176. menhealth-pharmacy.com
  177. the-med-store.com
  178. safe-drugstore.com
  179. trusty-pharmacy.com
  180. edpillseu.com
  181. farmaciaiberica.com
  182. discount-levitra.com
  183. findgenericviagra.com
  184. cialis-sample.com
  185. drug-buy.com
  186. rxpstore.com
  187. onlinepharms.com
  188. edspain.com
  189. vifrance.com
  190. trustedgenericdrugs.com
  191. trustedkamagra.com
  192. edcurepills.com
  193. ivlon.com
  194. cheap-supplier.com
  195. 1stgenerics.com
  196. edstorerx.com
  197. genericorders.com
  198. rxheal.com
  199. rxcare-global.com
  200. rxalfa.com
  201. drugslines.com
  202. caremedication.com
  203. eu-pills.com
  204. cheap-genericviagra.com
  205. vigrox.com
  206. softvigrax.com
  207. best-quality-pills.com
  208. you-cheap-drugstore.com
  209. medicine-catalog.com
  210. abc-pharmacy.com
  211. viagraenligne.com
  212. bestseller-tablets.com
  213. hushpills.com
  214. pillsamples.com
  215. prescriptionsgiant.com
  216. levitra-compare.com
  217. viagramedic.com
  218. edmedsworld.com
  219. ed-guru.com
  220. cialistore.com
  221. acheterviagra.biz
  222. ed-solution.biz
  223. generic-levitra.biz
  224. rxdrugstore.biz
  225. securepharmacy.biz
  226. steroids-online.biz
  227. trusted-tabs.biz
  228. trustedtablets.biz
  229. viagra-generic.biz
  230. edselected.biz
  231. medical-pill.biz
  232. viagra-ed.biz
  233. pharma-market.biz

Canadian Pharmacy Spam – Vitalideal.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal . com 

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal.com

WhoIs Lookup

Address lookup

canonical name vitalideal.com
aliases  
addresses 60.191.239.189

Domain Whois record

Queried whois.internic.net with “dom vitalideal.com“…

   Domain Name: VITALIDEAL.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PRIDEEASY.COM
   Name Server: NS2.PRIDEEASY.COM
   Name Server: NS3.GRATEFULFACT.COM
   Name Server: NS4.GRATEFULFACT.COM
   Status: ok
   Updated Date: 22-may-2009
   Creation Date: 20-may-2009
   Expiration Date: 20-may-2010

>>> Last update of whois database: Sun, 24 May 2009 09:48:41 UTC <<<

Queried whois.paycenter.com.cn with “vitalideal.com“…

Domain Name      : vitalideal.com
PunnyCode        : vitalideal.com

Registrant:
  Organization   : BAI ZIRONG
  Name           : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106

Administrative Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Technical Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Billing Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

190.218.142.211From Stanley Garza Sat May 23 18:12:49 2009 
Return-Path: 
Authentication-Results: mta168.sbc.mail.mud.yahoo.com from=st-and.ac.uk; domainkeys=neutral (no sig); from=st-and.ac.uk; dkim=neutral (no sig) 
Received: from 190.218.142.211 (EHLO nlpi048.prodigy.net) (207.115.36.77
by mta168.sbc.mail.mud.yahoo.com with SMTP; Sat, 23 May 2009 20:26:05 -0700 
Received: from 42wac22 ([190.218.142.211]) 
by nlpi048.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4O3Pmlf017046; 
Sat, 23 May 2009 22:26:01 -0500 
Message-ID: <000701c9dc0c$c15f3410$627e269a@st-and.ac.uk> 
Reply-To: “Stanley Garza” 
From: “Stanley Garza” 
To: , , 
Subject: Get all the medications you want online! 
Date: Sun, 24 May 2009 09:12:49 +0800 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 163