Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.
Header Analysis
The following IP addresses were extracted from your headers:
Here is the text you submitted, with the IP addresses highlighted:
From Douglas Andrews Thu Jul 16 15:16:43 2009
Return-Path:
Authentication-Results: mta118.sbc.mail.mud.yahoo.com from=yeoy.fi; domainkeys=neutral (no sig); from=yeoy.fi; dkim=neutral (no sig)
Received: from 131.114.69.63 (EHLO flpi184.prodigy.net) (207.115.20.186)
by mta118.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 15:18:09 -0700
Received: from zelgti4 (verita.vet.unipi.it [131.114.69.63] (may be forged))
by flpi184.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GMGhA2014995;
Thu, 16 Jul 2009 15:18:06 -0700
Message-ID: <000701ca0663$19d4dcf0$627e2c0a@yeoy.fi>
Reply-To: “Douglas Andrews” <douglas.andrewsip@yeoy.fi>
From: “Douglas Andrews” <douglas.andrewsip@yeoy.fi>
To: ,
Subject: Have No Problem in BeD, RxMeds online!
Date: Thu, 16 Jul 2009 15:16:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 136
An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://tirethem.com
_________________________________________________________________________
Header Analysis
The following IP addresses were extracted from your headers:
Here is the text you submitted, with the IP addresses highlighted:
From Humberto Wade Thu Jul 16 12:23:14 2009
Return-Path:
Authentication-Results: mta167.sbc.mail.mud.yahoo.com from=cw-chamber.co.uk; domainkeys=neutral (no sig); from=cw-chamber.co.uk; dkim=neutral (no sig)
Received: from 97.93.204.30 (EHLO nlpi080.prodigy.net) (207.115.36.96)
by mta167.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 12:21:16 -0700
Received: from vyg3oj2 (static.unknown.charter.com [97.93.204.30] (may be forged))
by nlpi080.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GJKlgD004846;
Thu, 16 Jul 2009 14:21:10 -0500
Message-ID: <000701ca064a$dd1d9350$431333e2@cw-chamber.co.uk>
Reply-To: “Humberto Wade” <hwade_ms@cw-chamber.co.uk>
From: “Humberto Wade”
To: , ,
Subject: great web offer
Date: Thu, 16 Jul 2009 14:23:14 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 137
An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com
____________________________________________________________-
Header Analysis
The following IP addresses were extracted from your headers:
Here is the text you submitted, with the IP addresses highlighted:
From Lucille J. Stringer Thu Jul 16 10:02:34 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=crs-ltd.co.uk; domainkeys=neutral (no sig); from=crs-ltd.co.uk; dkim=neutral (no sig)
Received: from 65.126.184.100 (EHLO nlpi147.prodigy.net) (207.115.36.161)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Thu, 16 Jul 2009 10:05:49 -0700
Received: from 1blry72 ([65.126.184.100])
by nlpi147.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GH54dn028723;
Thu, 16 Jul 2009 12:05:42 -0500
Message-ID: <000701ca0637$36f56420$d828ea62@crs-ltd.co.uk>
Reply-To: “Lucille J. Stringer” <lucille_stringer_es@crs-ltd.co.uk>
From: “Lucille J. Stringer” <lucille_stringer_es@crs-ltd.co.uk>
To: , ,
Subject: Feeling unneeded in bedroom? We can change that..
Date: Thu, 16 Jul 2009 12:02:34 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 137
An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://liveevery.com
________________________________________________
Header Analysis
The following IP addresses were extracted from your headers:
Here is the text you submitted, with the IP addresses highlighted:
From Ashley J. Novak Thu Jul 16 02:30:44 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=londonthing.co.uk; domainkeys=neutral (no sig); from=londonthing.co.uk; dkim=neutral (no sig)
Received: from 207.115.20.133 (EHLO flpd123.prodigy.net) (207.115.20.133)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Thu, 16 Jul 2009 05:32:34 -0700
Received: from yj6l901 ([140.117.64.102])
by flpd123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6GCWUvG019198;
Thu, 16 Jul 2009 05:32:32 -0700
Message-ID: <000701ca05f8$181184b0$627e2b9a@londonthing.co.uk>
Reply-To: “Ashley J. Novak” <ashleyjnovaksv@londonthing.co.uk>
From: “Ashley J. Novak”
To: ,
Subject: Make her climax multiple times
Date: Thu, 16 Jul 2009 05:30:44 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 136
Content-Length: 136
An Incredible Canadian_Pharmacy is available at your Fingertips!
No Doctor Needed! Browse our Site Today! -> http://tirethem.com
Address lookup
| canonical name |
tirethem.com. |
| aliases |
|
| addresses |
60.191.239.150
203.93.208.86
218.75.144.6
|
Domain Whois record
Queried whois.internic.net with “dom tirethem.com“…
Domain Name: TIRETHEM.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.GROWFOUR.COM
Name Server: NS2.GROWFOUR.COM
Name Server: NS3.COUNTFROM.RU
Name Server: NS4.COUNTFROM.RU
Name Server: NS5.SIXTHE.COM
Name Server: NS6.SIXTHE.COM
Status: ok
Updated Date: 14-jul-2009
Creation Date: 14-jul-2009
Expiration Date: 14-jul-2010
Last update of whois database: Fri, 17 Jul 2009 04:46:46 UTC <<<
Queried whois.namerich.cn with “tirethem.com“…
DomainName : tirethem.com
RSP: China Springboard Inc.
URL: http://www.namerich.cn
Name Server......................NS5.SIXTHE.COM
Name Server......................NS1.GROWFOUR.COM
Name Server......................NS6.SIXTHE.COM
Name Server......................NS2.GROWFOUR.COM
Name Server......................NS3.COUNTFROM.RU
Name Server......................NS4.COUNTFROM.RU
Status...........................ok
Creation Date ..................2009-07-14
Expiration Date .................2010-07-14
Last Update Date ...............2009-07-14
Registrant ID ...................V-X-59142-15723
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............YUHUIDADAO31
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116008
Registrant Phone Number .........+86.041128805269
Registrant Fax ..................+86.041128805269
Registrant Email ................loansfg@163.com
Administrative ID ...............V-X-59142-15723
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........YUHUIDADAO31
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116008
Administrative Phone Number .....+86.041128805269
Administrative Fax ..............+86.041128805269
Administrative Email ............loansfg@163.com
Billing ID ......................V-X-59142-15723
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................YUHUIDADAO31
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116008
Billing Phone Number ............+86.041128805269
Billing Fax .....................+86.041128805269
Billing Email ...................loansfg@163.com
Technical ID ....................V-X-59142-15723
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............YUHUIDADAO31
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116008
Technical Phone Number ..........+86.041128805269
Technical Fax ...................+86.041128805269
Technical Email .................loansfg@163.com
; Please register your domains at
; http://www.namerich.cn
Network Whois record
Queried whois.apnic.net with “60.191.239.150“…
inetnum: 60.191.239.0 - 60.191.239.255
netname: JINHUA-TELECOM-LTD
country: CN
descr: Jinhua Telecom Co.,ltd
descr:
admin-c: LW945-AP
tech-c: CJ54-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20060824
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
role: CHINANET-ZJ Jinhua
address: No.155 Xishi street,Jinhua,Zhejiang.321000
country: CN
phone: +86-579-2300779
fax-no: +86-579-2330035
e-mail: anti_spam@mail.jhptt.zj.cn
trouble: send spam reports to anti_spam@mail.jhptt.zj.cn
trouble: and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble: Please include detailed information and times in UTC
admin-c: CH55-AP
tech-c: CH55-AP
nic-hdl: CJ54-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
person: Lujiang Wang
nic-hdl: LW945-AP
e-mail: anti_spam@mail.jhptt.zj.cn
address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone: +86-579-3285460
country: CN
changed: auto-dbm@dcb.hz.zj.cn 20060824
mnt-by: MAINT-CN-CHINANET-ZJ-JH
source: APNIC
DNS records
DNS query for 150.239.191.60.in-addr.arpa returned an error from the server: NameError
| name |
class |
type |
data |
time to live |
| tirethem.com |
IN |
A |
203.93.208.86 |
10800s |
(03:00:00) |
| tirethem.com |
IN |
A |
218.75.144.6 |
10800s |
(03:00:00) |
| tirethem.com |
IN |
A |
60.191.239.150 |
10800s |
(03:00:00) |
— end —
scamFRAUDalert®Pharmacies Checker 