Canadian Pharmacy Spam Sites

Buying Prescription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________

  1. realdealrxbrandnames.com
  2. onpointflowage.com
  3. rxmedzatthefingers.com
  4. neverendingflowages.com
  5. 91ukraine.com
  6. niceflowofmedz.com
  7. getmedicatedonline.com
  8. anyrxmedications.com
  9. firerxmedication.com
  10. quickrxmedications.com
  11. readysetgetmedz.com
  12. smokingdealz4u.com
  13. medzfromonlinetoyourhome.com
  14. realdealrxrefills.com
  15. fingtertiprxmedacces.com
  16. grillindealz4u.com
  17. getitatrxcenternow.com
  18. theeasyreliablesourcenow.com
  19. findthemmedsherenow.com
  20. wehavewhaturlookingfornow.com
  21. rxmedsolution4unow.com
  22. acquireflowherenow.com
  23. fingertipmedpharmnow.com
  24. realdealrxbrandnamesnow.com
  25. besatifiedmedsnow.com
  26. nodocneededforrxmedznow.com
  27. acquirerxmedzherenow.com
  28. hardtofindrxmedznow.com
  29. happeningrxcenternow.com
  30. getrxmedicationsherenow.com
  31. easyonlinerxmedznow.com
  32. rxmedzinnotime.com
  33. greatrxonline4u.com
  34. rxthatbeatsallothers.com
  35. rxmedexpress.com
  36. rxwindowonline.com
  37. neverwaitrx.com
  38. rxmainsource.com
  39. expressmedz4u.com
  40. alwaysbetterrx.com

 

Sample unlawful domains used as name servers, and the crime sponsring registrars     222.170.127.122
68F.RU 68W.RU 6A5.RU 6AQ.RU 6F0.RU 6GY.RU – REGRU-REG-RIPN (Russia)
ADDAPPEAR.COM – BILT (China)
BELLFROM.COM- BIZCN (China)
CRAFTDNS.COM – BILT (China)
DARINGGRAND.COM – BILT (China)
DREVIOHARS.COM – BILT (China)
FROMENDORES.COM – BILT (China)
GRASSFAVOR.COM – BILT (China)
KURTOSISDNS.COM – BILT (China)
MAPPROPER.COM – ALANTRON (Turkey)
MONTHDRY.COM – BIZCN (China)
NERVUREDNS.COM – BILT (China)
RANNEED.COM – BILT (China)
REPLYCLOTHE.COM – BILT (China)
SLICKVICTOR.COM – BILT (China)
STATESDNS.COM – BILT (China)
THOUGHAGO.COM – BIZCN (China)
TIEDRAW.COM – BIZCN (China)
TOOPLANE.COM – BILT (China)
WASHEQUATE.COM – BIZCN (China)

Canadian Pharmacy Spam – rxthatbeatsallothers.com

Buying Prescription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Order Pharmacy Medications_Online!
No Doctor Needed!
Browse Our Selection Today! -> http://rxthatbeatsallothers.com

Order Your RxMeds Online!.. No Doctor Needed!
Browse Our Website Today! -> http://neverwaitrx.com

Order your RxMedications_Online!.. N0_Doctor Needed!
Browse Our Selection Today! -> http://rxwindowonline.com

bluebridrx

Address lookup

canonical name rxthatbeatsallothers.com.
aliases
addresses 222.170.127.122

Domain Whois record

Queried whois.internic.net with “dom rxthatbeatsallothers.com”…
Domain Name: RXTHATBEATSALLOTHERS.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.91UKRAINE.COM
Name Server: NS2.91UKRAINE.COM
Name Server: NS3.LIKENS45.COM
Name Server: NS4.LIKENS45.COM
Name Server: NS5.ANTRASCRNS.COM
Name Server: NS6.ANTRASCRNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 19-oct-2009
Creation Date: 19-oct-2009
Expiration Date: 19-oct-2010

>>> Last update of whois database: Sun, 01 Nov 2009 18:48:55 UTC <<<

Queried whois.namerich.cn with “rxthatbeatsallothers.com”…
DomainName : rxthatbeatsallothers.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS2.91UKRAINE.COM
Name Server………………….NS4.LIKENS45.COM
Name Server………………….NS5.ANTRASCRNS.COM
Name Server………………….NS1.91UKRAINE.COM
Name Server………………….NS6.ANTRASCRNS.COM
Name Server………………….NS3.LIKENS45.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-10-19
Expiration Date ……………..2010-10-19
Last Update Date ……………2009-10-19

Registrant ID ……………….V-X-64603-22988
Registrant Name ……………..SHEN DALIANG
Registrant Organization ………SHENDALIANG
Registrant Address …………..XINHUAZHONGLU51
Registrant City………………JN
Registrant Province/State …….ShanDong
Registrant Country Code ………CN
Registrant Postal Code ……….250061
Registrant Phone Number ………+86.053181416841
Registrant Fax ………………+86.053181416841
Registrant Email …………….feihua1234@yeah.net

Administrative ID ……………V-X-64603-22988
Administrative Name ………….SHEN DALIANG
Administrative Organization …..SHENDALIANG
Administrative Address ……….XINHUAZHONGLU51
Administrative City…………..JN
Administrative Province/State …ShanDong
Administrative Country Code …..CN
Administrative Postal Code ……250061
Administrative Phone Number …..+86.053181416841
Administrative Fax …………..+86.053181416841
Administrative Email …………feihua1234@yeah.net

Billing ID ………………….V-X-64603-22988
Billing Name ………………..SHEN DALIANG
Billing Organization …………SHENDALIANG
Billing Address ……………..XINHUAZHONGLU51
Billing City…………………JN
Billing Province/State ……….ShanDong
Billing Country Code …………CN
Billing Postal Code ………….250061
Billing Phone Number …………+86.053181416841
Billing Fax …………………+86.053181416841
Billing Email ……………….feihua1234@yeah.net

Technical ID ………………..V-X-64603-22988
Technical Name ………………SHEN DALIANG
Technical Organization………..SHENDALIANG
Technical Address ……………XINHUAZHONGLU51
Technical City……………….JN
Technical Province/State………ShanDong
Technical Country Code ……….CN
Technical Postal Code ………..250061
Technical Phone Number ……….+86.053181416841
Technical Fax ……………….+86.053181416841
Technical Email ……………..feihua1234@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “222.170.127.122”…
inetnum: 222.170.0.0 – 222.172.127.255
netname: CHINANET-HL
descr: CHINANET HEILONGJIANG PROVINCE NETWORK
descr: Heilongjiang Telecom Corporation
descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country: CN
admin-c: LZ298-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HL
mnt-routes: MAINT-CHINANET-HL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040305
changed: hm-changed@apnic.net 20060605
source: APNIC

person: LIJUAN ZHENG
nic-hdl: LZ298-AP
e-mail: network@hljtele.com
address: Communication Corporation Internet Enterprise Division of HLJ
phone: +86-451-53902002
fax-no: +86-451-53900012
country: CN
changed: jxwx1234@163.com 20061229
mnt-by: MAINT-CHINANET-HLJTELE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

DNS records

DNS query for rxthatbeatsallothers.com returned an error from the server: ServerFailure

DNS query for 122.127.170.222.in-addr.arpa returned an error from the server:

Scammers Are On Complaintsboard.com

The Operators of Complaintsboard.com and their related sites such as the Canadian and Online Pharmacies origin are from India.

Complaints Board

7500 W 110th St Ste 400,
Overland Park, KS 66210
Phone: (240) 764-4863
http://www.complaintsboard.com

Other Known businesses at the same address:

Aplus Net Internet Services

7500 W 110th St, Ste 400,
Overland Park, KS 66210
(913) 563-6400

Aplus Net Internet Services
8735 Rosehill Road # 400
Overland Park, KS 66215-4624

Stephens and Associates Advertising Inc.
7500 W 110th St., Ste. 530
Overland Park, KS 66210-2332
United States


Ripoffreport.com vs Complaintsboard.com

It is a widespread knowledge within the consumer advocacy scam fighting community that Complaintsboard.com manufactures some consumer complaints to boost traffic.

  1. complaintsboard.com
  2. Merareview.com
  3. scamfound.com
  4. ReviewTalk.com
  5. Ripoffonline.com
  6. complaintcafe.com
  7. scaminformer.com
  8. scamfraudripoff.com
  9. scamchasers.com
  10. scamtracers.com
  11. scamrader.com
  12. scamfound.org
  13. ripoffreport.cc
  14. reviewstalk.com
  15. pageinsider.com
  16. ripoffreport.com
  17. pagespan.com
  18. scamchecker.com
  19. ripandscam.com

Publisher Id: pub-7643816519439245

Domains associated with this Google Adsense Id



Do you know another site for this pub-id? Give us the Url.



Does anyone know about the www.complaintsboard.com? I filed the online complaint against Allure Construction Group, Inc. about stealing my $10,799.00 and left me a consumer alert
big hole in the backyard instead of a pool and today, I received an email which asked for $700.00 to handle the case. Here’s a copy “US Consumer Help” has sent you a message on ComplaintsBoard.com:

Hello,
In responce to your complaint, we will do everything possible to make sure you get a redress against Allure Construction Group Inc. The Management of Allure Construction Group Inc is currently facing a Four Count Charge of Gross Misconduct and Fraud in the Consumer Bureau. Forward us your Complaints,full name and contact details, to enable us file a complaint to that effect. Do not post your contact details on our complaint board, all usefull information,regarding your complaint should be forwarded to us on complaintsboardus@live.com for necessary actions. Help us to serve you better! powered by the US government. We usually get refunds!
Note: Complaints fee Amounts to $700.00{Seven Hundred Dollars} which includes Cost of Presentation and Case Handling Fees.

bbb-trustlink

Complaintsboard Alert – complaintsboardus@live.com


I have read the FAQs and checked for similar issues: YES
My site’s URL (web address) is: http://www.accentsofsalado.com
Description (including timeline of any changes made):

RIP OFF REPORTS and COMPLAINTS BOARD are currently attempting to extort payment from my company to remove negative reviews of my ecommerce business. Complaints Board posted a false complaint on 9-28-2010 about an invented product that I do not sell and used my unique company name along with a state location (Nevada) where my company is not located.

http://www.complaintsboard.com/complaints/accents-of-salado-c377553.html#comment

Google picked up my company name within hours of the posting and ranked this invented complaint #6 out of 4,180 results. Google ranks Rip Off Reports and Complaints Board pages even higher than my Google Blogspot blog. Curiously I received an email this morning 9-29-2010 from a Reactive Online Reputation Management company offering to remove this complaint. The email reads:

Hello,
Good day, hope you are doing well. My name is Janette Adams and I am a Search Engine Reputation Management (SERM) consultant at BrandRevitalize, a leading reputation management company.

I am writing to inform you that your online reputation may be at risk.
While i was doing my daily research concerning your niche, i noticed that your company, together with other companies, has a listing on Ripoffreport.com http://www.ripoffreport.com/specialty-stores/accents-of-salado/accents-of-salado-poor-qualit-699f6.htm

The above negative listing may put your brand equity and customer loyalty you’ve built at risk. Who you are online is as important as who you are offline.

Imagine how frustrating it is to build rapport with a potential client, only to lose the deal when they Google your company name—accentsofsalado.com.

BrandRevitalize preserves your marketing investments, customer trust and revenues by eliminating potentially fraudulent use of your brand online. Our company makes sure your online reputation is free from false malicious associations and libelous accusations. We make sure CONTROL is delivered back to you, where it belongs.

In line with this, i am hoping we can schedule a time to discuss your Reactive Online Reputation Management and the amount of time needed to eliminate your negative listings in Google’s Search Engine Results Page (SERP). Are you free for a quick discussion today or tomorrow?

Kindly please let me know so we can schedule a call.
You may also visit our processes’ page for more information

http://brandrevitalize.com/our-process.php

Regards,
Janette Adams
BrandRevitalize – Protect. Repair. Reinforce.
8 Maiden Lane, Streetsville,
ONT, Canada L5M 1W8
1-877-878-4108


Accents Of Salado
Posted: 2010-09-28 by terrawest

Quality
Complaint Rating: 100 % with 2 votes
Company information:
Nevada
United States

I had purchased 3 urns for $289.00… It was nothing like the actual picture… The picture looks like the the tops are bronzed like almost faxed and smooth… Just beautiful was real excited to get them in…What I got was 3 pieces of ceramic that looks as if someone took them in the back alley and spray painted them and forgot to dust them off. I had to put them on top of my kitchen cabinets up far so you could not see all the imperfections and just the poor quality…I was very disappointed… Well one day I had went to the furniture show where they sell wholesale and I actually went into a show room that sells the same exact stuff and found out that’s where they order alot of there stuff and all of it was junk… I was amazed this company stays in business. I give them an A plus on the website because everything looks so beautiful but they obviously photo shop those pictures… On top of that the whole sale price was 90 dollars and they sell it for 289.00 that is such a ripoff…

Anyways be careful what you buy because honestly the quality is very poor…


THIS FRAUDULENT AND LIBELOUS ACTION IS EXTORTION PURE AND SIMPLE.

I have looked at both Rip Off Report and Complaints Board HTML code. There is no reason that the web site HTML Meta Tags and lack of supporting text would propel these two sites to the top 10 Google search results within hours or even at all. My company has received repeated emails and phone calls that have attempted to extort payment for complaint removal services.

MY QUESTIONS:
1. Does Google give ranking preference to these extortionists?
2. Does Google have a special relationship with these complaint web sites?
3. Google has the ability to remove these web sites from their search results. Why has Google not done so?
4. Is there a Google contact email address?

All replies would be greatly appreciated as it is impossible to find Google contact information anywhere on the Google site. It is impossible to report abuse to Google if Google doesn’t provide Google contact information for these serious matters.

Canadian Pharmacy Spam – newrx4champions.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Rx-Medications Online!
Browse Our Selection Today! -> http://newrx4champions.com

Address lookup

canonical name newrx4champions.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom newrx4champions.com“…

   Domain Name: NEWRX4CHAMPIONS.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.BIDOKODJU.COM
   Name Server: NS4.BIDOKODJU.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Wed, 30 Sep 2009 20:07:11 UTC

Queried whois.namerich.cn with “newrx4champions.com“…

 DomainName : newrx4champions.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS4.BIDOKODJU.COM
Name Server......................NS6.HOSTLIFE45.COM
Name Server......................NS3.BIDOKODJU.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-23

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
newrx4champions.com IN A 60.12.166.154 54s (00:00:54)

— end —

Canadian Pharmacy Spam – Rx-Medications 0nline – rxsourceforwinners.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

 


0rder all your Favorite Rx-Medications0nline!
N0DoctorNeeded!
Browse 0ur Website Today! –> http://rxsourceforwinners.com

0rder all your Favorite Rx-Medications0nline!
N0DoctorNeeded!
Browse 0ur Website Today! –> http://rxsourceforwinners.com

Address lookup

canonical name rxsourceforwinners.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom rxsourceforwinners.com”…
Domain Name: RXSOURCEFORWINNERS.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.UBR34NS.COM
Name Server: NS2.UBR34NS.COM
Name Server: NS3.BIDOKODJU.COM
Name Server: NS4.BIDOKODJU.COM
Name Server: NS5.HOSTLIFE45.COM
Name Server: NS6.HOSTLIFE45.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-sep-2009
Creation Date: 16-sep-2009
Expiration Date: 16-sep-2010

>>> Last update of whois database: Wed, 23 Sep 2009 16:23:38 UTC
Queried whois.namerich.cn with “rxsourceforwinners.com”…
DomainName : rxsourceforwinners.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS5.HOSTLIFE45.COM
Name Server………………….NS1.UBR34NS.COM
Name Server………………….NS2.UBR34NS.COM
Name Server………………….NS4.BIDOKODJU.COM
Name Server………………….NS6.HOSTLIFE45.COM
Name Server………………….NS3.BIDOKODJU.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-09-16
Expiration Date ……………..2010-09-16
Last Update Date ……………2009-09-23

Registrant ID ……………….V-X-58522-14215
Registrant Name ……………..ZHANG WENQI
Registrant Organization ………ZHANG WENQI
Registrant Address …………..JIAOTONGLU16
Registrant City………………DL
Registrant Province/State …….LN
Registrant Country Code ………CN
Registrant Postal Code ……….116049
Registrant Phone Number ………+86.041128805621
Registrant Fax ………………+86.041128805621
Registrant Email …………….kaokga@126.com

Administrative ID ……………V-X-58522-14215
Administrative Name ………….ZHANG WENQI
Administrative Organization …..ZHANG WENQI
Administrative Address ……….JIAOTONGLU16
Administrative City…………..DL
Administrative Province/State …LN
Administrative Country Code …..CN
Administrative Postal Code ……116049
Administrative Phone Number …..+86.041128805621
Administrative Fax …………..+86.041128805621
Administrative Email …………kaokga@126.com

Billing ID ………………….V-X-58522-14215
Billing Name ………………..ZHANG WENQI
Billing Organization …………ZHANG WENQI
Billing Address ……………..JIAOTONGLU16
Billing City…………………DL
Billing Province/State ……….LN
Billing Country Code …………CN
Billing Postal Code ………….116049
Billing Phone Number …………+86.041128805621
Billing Fax …………………+86.041128805621
Billing Email ……………….kaokga@126.com

Technical ID ………………..V-X-58522-14215
Technical Name ………………ZHANG WENQI
Technical Organization………..ZHANG WENQI
Technical Address ……………JIAOTONGLU16
Technical City……………….DL
Technical Province/State………LN
Technical Country Code ……….CN
Technical Postal Code ………..116049
Technical Phone Number ……….+86.041128805621
Technical Fax ……………….+86.041128805621
Technical Email ……………..kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154”…
inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for rxsourceforwinners.com returned an error from the server: ServerFailure

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – Stimul-cash.com (www.happeningrxcenter.com)

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration


DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


0rder all your Favorite Rx~Medications 0nline!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://happeningrxcenter.com

 

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
164.77.200.130 Chile (Santiago)* Whois Google DNSStuff Urgentmessage.org
207.115.20.119 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Caleb Henderson Wed Sep 16 11:41:48 2009
X-Apparently-To: ; Wed, 16 Sep 2009 11:39:48 -0700
Return-Path:
X-YahooFilteredBulk: 164.77.200.130
X-YMailISG: nt555YEWLDveVZbH1kYbzWeVbM9G4WRxyS.Kx_uai_pU02hKAXpaZeUMCEuJ
H8K8L5B7KsaSXQZXTeXekwFImkTADxR5uIWapkRrg42ri48py3F38C
_wVzwVod2XQjhVo.3p
QGMHQJq4jQZsJJGO1bLJdXHZcv68h_
Qf3WkmA1jWjbD29ggGbNYC9McI4La_J2C0hsFZp47OGS5MF5Qb03
Loui8QQI2qnu2wx7NeS1OINO4nji2DmUpJ0z.8zVgEgqs3cDOGgTWIJqFE0
pQEz28RXcIJ6K.qtUfF1Wbnu02nuNE_I4h34H0Dp0bLgz.AUlzNQucCiWt2lQ–
X-Originating-IP: [164.77.200.130]
Authentication-Results: mta134.sbc.mail.re2.yahoo.com from=canter.fi; domainkeys=neutral (no sig); from=canter.fi; dkim=neutral (no sig)
Received: from 164.77.200.130 (EHLO flpd109.prodigy.net) (207.115.20.119)
by mta134.sbc.mail.re2.yahoo.com with SMTP; Wed, 16 Sep 2009 11:39:48 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[164.77.200.130]
X-Originating-IP: [164.77.200.130]
Received: from d8ja2a3 ([164.77.200.130])
by flpd109.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8GIdQj0013048;
Wed, 16 Sep 2009 11:39:44 -0700
Message-ID: <000701ca36fd$5906bcc0$627e0f72@canter.fi>
Reply-To: “Caleb Henderson” <c.henderson_ky@canter.fi>
From: “Caleb Henderson” <c.henderson_ky@canter.fi>
To: ,
Subject: Get all the medications you want online!
Date: Wed, 16 Sep 2009 11:41:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 130

Address lookup

canonical name happeningrxcenter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom happeningrxcenter.com“…

Domain Name: HAPPENINGRXCENTER.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

>>> Last update of whois database: Thu, 17 Sep 2009 13:24:23 UTC

Queried whois.hupo.com with “happeningrxcenter.com“…

Domain Name: happeningrxcenter.com

Registrant Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Administrative Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Technical Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Billing Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
happeningrxcenter.com IN SOA
server: ns.happeningrxcenter.com
email: admin.happeningrxcenter.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
happeningrxcenter.com IN A 60.12.166.154 300s (00:05:00)

— end —

ww.stimul-cash.com Stimul-media.com Centralux Limited


13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Canadian Pharamacy Spam – Stimul-cash.com (www.getallyourfavorites.com)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.166 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
76.210.238.82 United States (Beaumont)* Whois Google DNSStuff Urgentmessage.org
207.115.20.184 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Order all your Favorite Rx`Medications_0nline!
NoPrescription_Needed!
Browse_Our Selection_Today! –> http://getallyourfavorites.com

getallyourfavorites

Address lookup

canonical name getallyourfavorites.com.
aliases http://www.getallyourfavorites.com
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom getallyourfavorites.com“…

   Domain Name: GETALLYOURFAVORITES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 16-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Thu, 17 Sep 2009 13:13:38 UTC <<<

Queried whois.namerich.cn with “getallyourfavorites.com“…

DomainName : getallyourfavorites.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-16

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.getallyourfavorites.com IN CNAME getallyourfavorites.com 300s (00:05:00)
getallyourfavorites.com IN SOA
server: ns.getallyourfavorites.com
email: admin.getallyourfavorites.com
serial: 2009091601
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
getallyourfavorites.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharmacy Spam – wehavewhaturlookingfor.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________________________

Order all your Favorite Rx~Medications Online! No Doctor Needed!
Browse Our Selection Today! –> http://wehavewhaturlookingfor.com

______________________________________________________________________

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.172 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.144.100.125 United States (Lexington)* Whois Google DNSStuff Urgentmessage.org
207.115.36.88 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Carolina Evans Sun Sep 13 06:01:31 2009
X-Apparently-To:  13 Sep 2009 05:59:42 -0700
Return-Path:
X-YahooFilteredBulk: 207.144.100.125
X-YMailISG: CJFKwrQWLDuy0vndKRqizfC.yhTuXOT0vEuSG9r6TIYF0YRFNo7JJnIEJ90Bu2ZBhh1kBKwOwqAAd6aHYHZyiZWh_tTPZJabL4SPFV07n8icbd5uLRsKgJgy1uyjAL_4p_kaY1XWevUAf1_rXwb57h6RxfGCkA8zqrkpkqOa_KvK0Svy1AwNUlL7YQ52GoNCzbjaGz1V8Y57B7CyArP.b31kFStrRIEOn1Ic1L_93WENyMLIAMNn.nN18Q1mYZikO8ZJq_kiNaCoDmZbz03xef0klPzBPorVIWSoPpj2Spe4TiOOXJjNhDBTqgiGidfOoK9NXrVq1uXOq36uAiAK_rc-
X-Originating-IP: [207.144.100.125]
Authentication-Results: mta111.sbc.mail.re2.yahoo.com from=altranet.fr; domainkeys=neutral (no sig); from=altranet.fr; dkim=neutral (no sig)
Received: from 207.144.100.125 (EHLO nlpi105.prodigy.net) (207.115.36.88)
by mta111.sbc.mail.re2.yahoo.com with SMTP; Sun, 13 Sep 2009 05:59:41 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[207.144.100.125]
X-Originating-IP: [207.144.100.125]
Received: from xda72aq ([207.144.100.125])
by nlpi105.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8DCxTTF030044;
Sun, 13 Sep 2009 07:59:39 -0500
Message-ID: <000701ca3472$50902320$627e0202@altranet.fr>
Reply-To: “Carolina Evans”
From: “Carolina Evans”
To: , ,
Subject: Get all the medications you want online!
Date: Sun, 13 Sep 2009 06:01:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 137

Address lookup

canonical name wehavewhaturlookingfor.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom wehavewhaturlookingfor.com”…

   Domain Name: WEHAVEWHATURLOOKINGFOR.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Sun, 13 Sep 2009 16:14:20 UTC <<<

Queried whois.hupo.com with “wehavewhaturlookingfor.com”…

Domain Name: wehavewhaturlookingfor.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:50:07
Expireation Date:2010-08-22 14:50:07

Network Whois record

Queried whois.apnic.net with “60.12.166.154”…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
wehavewhaturlookingfor.com IN SOA
server: ns.wehavewhaturlookingfor.com
email: admin.wehavewhaturlookingfor.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
wehavewhaturlookingfor.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharmacy Spam – nodocneededforrxmedz.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Favorite RxMedications Online!
Browse Our Selection Today! –> http://nodocneededforrxmedz.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.172 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
131.178.248.63 Mexico (Monterrey)* Whois Google DNSStuff Urgentmessage.org
207.115.20.186 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Jared Bradley Mon Sep 7 19:50:35 2009

X-Apparently-To:  Mon, 07 Sep 2009 19:49:06 -0700
Return-Path:
X-YahooFilteredBulk: 131.178.248.63
X-YMailISG: kPEUCM0WLDsMZaRt0mugjhf81VGYWsnwQHTkTCdQznTOCLgu6bQtzKJUvHEXN1soHFIP.LfJX3JoDImx9GesvkxdX.9bZG.RplT5N.bJmrYr7nKs.gTA21px0sHlf1uyJLdCmE.5pB6D1rCvaIVdt5T9J5DEeo5NRYDJfSdg9uQW7px1NFjynTLb.TngKiHHwiJuxEAzV9Qoo4IZKCZU9HI8S0PYMhSKH3jRuuNtSJsTLf1XPoi4_t7NPmK4q4br43MhDinm_jspY9c4ze5cT5udqV6_UwZXf.Q.xS887XJSoief4CdSigE-
X-Originating-IP: [131.178.248.63]
Authentication-Results: mta110.sbc.mail.re2.yahoo.com from=kalbe.co.id; domainkeys=neutral (no sig); from=kalbe.co.id; dkim=neutral (no sig)
Received: from 131.178.248.63 (EHLO flpi184.prodigy.net) (207.115.20.186)
by mta110.sbc.mail.re2.yahoo.com with SMTP; Mon, 07 Sep 2009 19:49:05 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[131.178.248.63]
X-Originating-IP: [131.178.248.63]

Received: from 7hwnqa7 ([131.178.248.63])
by flpi184.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n882kLgi029857;
Mon, 7 Sep 2009 19:48:49 -0700
Message-ID: <000701ca302f$23f0cbe0$627e0f72@kalbe.co.id>
Reply-To: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
From: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
To: , ,
Subject: We have weight loss and pain med!
Date: Mon, 07 Sep 2009 19:50:35 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 112

Address lookup

canonical name nodocneededforrxmedz.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom nodocneededforrxmedz.com“…

   Domain Name: NODOCNEEDEDFORRXMEDZ.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Wed, 09 Sep 2009 07:31:03 UTC <<<

Queried whois.hupo.com with “nodocneededforrxmedz.com“…

Domain Name: nodocneededforrxmedz.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
nodocneededforrxmedz.com IN SOA
server: ns.nodocneededforrxmedz.com
email: admin.nodocneededforrxmedz.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
nodocneededforrxmedz.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharmacy Spam – rxofthereliablesort.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning



“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
All_of your Favorite_RxMedications are available Online!
Browse_Our Selection_Today! –> http://rxofthereliablesort.com

Address lookup

canonical name rxofthereliablesort.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxofthereliablesort.com“…

   Domain Name: RXOFTHERELIABLESORT.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

>>> Last update of whois database: Wed, 02 Sep 2009 01:55:27 UTC <<<

Queried whois.hupo.com with “rxofthereliablesort.com“…

Domain Name: rxofthereliablesort.com

Registrant Contact:
  WANG JIAXIN
  WANG JIAXIN
  Email:olajeng@163.com
  Tel:+86.056688925142
  Fax:+86.056688925142
  KAIXUANLU512
  GuiChi, AnHui, CN 247103

Administrative Contact:
  WANG JIAXIN
  WANG JIAXIN
  Email:olajeng@163.com
  Tel:+86.056688925142
  Fax:+86.056688925142
  KAIXUANLU512
  GuiChi, AnHui, CN 247103

Technical Contact:
  WANG JIAXIN
  WANG JIAXIN
  Email:olajeng@163.com
  Tel:+86.056688925142
  Fax:+86.056688925142
  KAIXUANLU512
  GuiChi, AnHui, CN 247103

Billing Contact:
  WANG JIAXIN
  WANG JIAXIN
  Email:olajeng@163.com
  Tel:+86.056688925142
  Fax:+86.056688925142
  KAIXUANLU512
  GuiChi, AnHui, CN 247103

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.relaymydns4me.com
  ns2.relaymydns4me.com
  ns3.dnsshifter4us.com
  ns4.dnsshifter4us.com
  ns5.shiftmydns4me.com
  ns6.shiftmydns4me.com

Registration Date:2009-07-31 01:19:46
Expireation Date:2010-07-31 01:19:46

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxofthereliablesort.com IN SOA
server: ns.rxofthereliablesort.com
email: admin.rxofthereliablesort.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxofthereliablesort.com IN A 211.95.78.2 300s (00:05:00)

— end —

RezXtra – www.medsxtra.com

RezXtra (medsxtra.com) medsxtra.com – St. louis, Missouri Net Natural Laboratories, London Scam!!! Buyer Beware!!! Misleading marketing Tatics!!! Internet

RezXtra (medsxtra.com)
Phone: 8883399872
Fax: 888-339-9872
www.medsxtra.com
Internet, Missouri 63129
United States of America

Buyer Beware.  This company offers you a trial for Resveratrol through their website but the product that they ship is not the one featured on 60 minutes.  They do not disclose the price of the products they sale on their website nor do they ship any information to that matter with the product.  Also you will find unauthorized charges on your credit card.  Even the shipping is more than what they advertise. Impossible to get through their customerservice toll free number. On their website, under terms and conditions, they claim to provide 24/7 customer service. Which is also not true. This is not a reputable company.  Once they get a hold of your credit card it is over. DO NOT ORDER ANYTHING FROM THEIR WEBSITE.

Address lookup

canonical name www.medsxtra.com.
aliases
addresses 67.55.86.148

Domain Whois record

Queried whois.internic.net with “dom medsxtra.com“…

   Domain Name: MEDSXTRA.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS.WEBAIR.NET
   Name Server: NS2.WEBAIR.NET
   Status: ok
   Updated Date: 20-aug-2009
   Creation Date: 23-mar-2009
   Expiration Date: 23-mar-2010

Last update of whois database: Fri, 28 Aug 2009 06:09:40 UTC <<<

Queried whois.godaddy.com with “medsxtra.com“…

Registrant:
   Domains by Proxy, Inc.

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: MEDSXTRA.COM

   Domain servers in listed order:
      NS.WEBAIR.NET
      NS2.WEBAIR.NET

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “67.55.86.148“…

OrgName:    Webair Internet Development Inc 
OrgID:      WAIR
Address:    333 Jericho Tpke
Address:    Suite 200
City:       Jericho
StateProv:  NY
PostalCode: 11753
Country:    US

ReferralServer: rwhois://rwhois.webair.com:4321

NetRange:   67.55.64.0 - 67.55.127.255 
CIDR:       67.55.64.0/18 
NetName:    WEBAIRINTERNET6
NetHandle:  NET-67-55-64-0-1
Parent:     NET-67-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.WEBAIR.NET
NameServer: NS2.WEBAIR.NET
Comment:    All rwhois info can be found at rwhois.webair.com:4321
RegDate:    2006-07-28
Updated:    2007-04-18

RNOCHandle: ZW64-ARIN
RNOCName:   IPAdmin-Webair 
RNOCPhone:  +1-516-938-4100
RNOCEmail:  IPAdmin@webair.com 

OrgNOCHandle: ZW64-ARIN
OrgNOCName:   IPAdmin-Webair 
OrgNOCPhone:  +1-516-938-4100
OrgNOCEmail:  IPAdmin@webair.com

OrgTechHandle: ZW64-ARIN
OrgTechName:   IPAdmin-Webair 
OrgTechPhone:  +1-516-938-4100
OrgTechEmail:  IPAdmin@webair.com

# ARIN WHOIS database, last updated 2009-08-27 20:00

DNS records

name class type data time to live
http://www.medsxtra.com IN A 67.55.86.148 900s (00:15:00)
medsxtra.com IN SOA
server: ns.webair.net
email: webmaster.medsxtra.com
serial: 2009060401
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 43200
900s (00:15:00)
medsxtra.com IN NS ns.webair.net 900s (00:15:00)
medsxtra.com IN NS ns2.webair.net 900s (00:15:00)
medsxtra.com IN MX
preference: 10
exchange: filter.medsxtra.com
900s (00:15:00)
medsxtra.com IN A 67.55.86.148 900s (00:15:00)
148.86.55.67.in-addr.arpa IN PTR technet.webair.com 43200s (12:00:00)

— end —

Canadian Pharmacy Spam – www.niceflowofmedz.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

All of your Favorite Rx~Medications are available Online!
Browse Our Website Today! –> htt://niceflowofmedz.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.166 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
146.134.14.16 Brazil (Petrópolis)* Whois Google DNSStuff Urgentmessage.org
207.115.20.48 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Sandy Dale Wed Aug 26 20:53:51 2009
X-Apparently-To: agr2@sbcglobal.net via 68.142.207.166; Wed, 26 Aug 2009 09:52:24 -0700
Return-Path:
X-YahooFilteredBulk: 146.134.14.16
X-YMailISG: zisMy60WLDsHz4dHCgN1N8qKieSqifWITCWj4WkxJnWsoaJ9fOWiq15L5hAe3NAI7rBRx3Merr4hp2E26v5kGC8Fu_Gmrkqf4cb3DcLZKZV4Y.X0us97serjQoxUoUZNGFizkP4DYYtqKu93vYPfwnhy_kYs59Ego8rq0AAvyXd_MeOk5VMtB7sM1CRvg7whS75Qpz9p.giB0VNeaaGhQ82yTEakBL6vB8dvZTm0lTj7s1SCYY44GNR.zA160Ruzy4YOYmPUj1kfXw–
X-Originating-IP: [146.134.14.16]
Authentication-Results: mta102.sbc.mail.re2.yahoo.com from=ilender.com.pe; domainkeys=neutral (no sig); from=ilender.com.pe; dkim=neutral (no sig)
Received: from 146.134.14.16 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re2.yahoo.com with SMTP; Wed, 26 Aug 2009 09:52:24 -0700
X-Header-Overseas: Mail.from.Overseas.source.cpti-prof06.lncc.br
X-Originating-IP: [146.134.14.16]
Received: from zhomtm1 (cpti-prof06.lncc.br [146.134.14.16])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7QGpqLD016821;
Wed, 26 Aug 2009 09:52:19 -0700
Message-ID: <000701ca26c9$fd70cab0$ae8bf0aa@ilender.com.pe>
Reply-To: “Sandy Dale” <sandy_dalela@ilender.com.pe>
From: “Sandy Dale”   <sandy_dalela@ilender.com.pe>
To: ,
Subject: No Doctor needed to order online!
Date: Wed, 26 Aug 2009 20:53:51 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 119

Address lookup

canonical name niceflowofmedz.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom niceflowofmedz.com“…

   Domain Name: NICEFLOWOFMEDZ.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.SYSTERNS.COM
   Name Server: NS6.SYSTERNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-aug-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Thu, 27 Aug 2009 05:32:10 UTC <<<

Queried whois.namerich.cn with “niceflowofmedz.com“…

 DomainName : niceflowofmedz.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS6.SYSTERNS.COM
Name Server......................NS1.ACTCTICNS.COM
Name Server......................NS2.ACTCTICNS.COM
Name Server......................NS5.SYSTERNS.COM
Name Server......................NS3.BRIILOVENS.COM
Name Server......................NS4.BRIILOVENS.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-08-22
Expiration Date .................2010-08-22
Last Update  Date ...............2009-08-22

Registrant ID ...................V-X-60144-17241
Registrant Name .................zhang mingxuan
Registrant Organization .........zhang mingxuan
Registrant Address ..............LANCHANGLU28
Registrant City..................NT
Registrant Province/State .......JS
Registrant Country Code .........CN
Registrant Postal Code ..........226037
Registrant Phone Number .........+86.051382642427
Registrant Fax ..................+86.051382642427
Registrant Email ................haieya01@126.com

Administrative ID ...............V-X-60144-17241
Administrative Name .............zhang mingxuan
Administrative Organization .....zhang mingxuan
Administrative Address ..........LANCHANGLU28
Administrative City..............NT
Administrative Province/State ...JS
Administrative Country Code .....CN
Administrative Postal Code ......226037
Administrative Phone Number .....+86.051382642427
Administrative Fax ..............+86.051382642427
Administrative Email ............haieya01@126.com

Billing ID ......................V-X-60144-17241
Billing Name ....................zhang mingxuan
Billing Organization ............zhang mingxuan
Billing Address .................LANCHANGLU28
Billing City.....................NT
Billing Province/State ..........JS
Billing Country Code ............CN
Billing Postal Code .............226037
Billing Phone Number ............+86.051382642427
Billing Fax .....................+86.051382642427
Billing Email ...................haieya01@126.com

Technical ID ....................V-X-60144-17241
Technical Name ..................zhang mingxuan
Technical Organization...........zhang mingxuan
Technical Address ...............LANCHANGLU28
Technical City...................NT
Technical Province/State.........JS
Technical Country Code ..........CN
Technical Postal Code ...........226037
Technical Phone Number ..........+86.051382642427
Technical Fax ...................+86.051382642427
Technical Email .................haieya01@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
niceflowofmedz.com IN SOA
server: ns.niceflowofmedz.com
email: admin.niceflowofmedz.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
niceflowofmedz.com IN A 60.12.166.135 300s (00:05:00)

— end —

<blockquote>
<h2 style=”text-align:center;”><span style=”color:#ff0000;”>Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says</span></h2>
</blockquote>
<a href=”http://www.deadiversion.usdoj.gov/consumer_alert.htm”><img title=”warning1″ src=”http://scamfraudalert.files.wordpress.com/2009/04/warning1.jpeg&#8221; alt=”warning1″ width=”500″ height=”65″ /></a>
<blockquote>
<h2 style=”text-align:center;”><a href=”http://www.nabp.net/”>National Association of Boards of Pharmacy (NABP)</a></h2>
</blockquote>
<h3 style=”font-size:18px;line-height:0;margin-top:40px;”><span style=”color:#ff0000;”><span style=”text-decoration: underline;”>Warning</span></span></h3>
<span style=”color:#ff0000;”><span style=”text-decoration: underline;”>
</span></span>
<blockquote>”The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized<strong> <span style=”color:#ff0000;”><span style=”text-decoration: underline;”>CRIMINAL OPERATION</span></span></strong> of all times. <strong><span style=”color:#ff0000;”>”GREED” </span></strong>is the driving force behind this operation.  Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
<h2 style=”text-align:center;”><span style=”color:#000080;”><a href=”http://behindonlinepharma.com/”>Behind The Online Pharmacy</a></span></h2>
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors,<strong> <a href=”http://behindonlinepharma.com/investigation/e-pharma-affiliates”>Web site operators</a>, <a href=”http://behindonlinepharma.com/investigation/the-rise-and-fall-of-christopher-smith”>spammers and criminals </a></strong>makes up the online pharmacy world.
<h2 style=”text-align:center;”><a href=”http://www.legitscript.com/&#8221; target=”_blank”><span style=”color:#008000;”>Buying Medication Online Can Be Safe</span></a></h2>
There are many options out there when it comes to buying medication online. We have looked at websites after websites.  Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health,<span style=”color:#ff0000;”><span style=”text-decoration: underline;”><strong> we strongly recommend that you consult your physician &amp; DO NOT self-medicate.</strong></span></span> Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.<strong> </strong></blockquote>

Canadian Pharmacy – reliableflowagehere.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.



Threat Chaos – Pharmacy Fraud Escalates

Order your Favorite Rx-Medications Online!

Click Here! –> http://happeninggoodtime.com

Order your all Favorite Rx~Medications Online! Browse Our Selection Today! –> http://reliableflowagehere.com

From Fredric Jennings Mon Aug 24 15:19:27 2009
X-Apparently-To: agr2@sbcglobal.net via 68.142.207.172; Mon, 24 Aug 2009 15:18:44 -0700
Return-Path:
X-YahooFilteredBulk: 186.112.8.247
X-YMailISG: YfBx818WLDv93VBKlC8zeJ4RnIh.PVrE72QQn.xz3DDr4v0ETMkWr.DRbRvqBFnnpjTkMJW8TTFv2OCYNwgNMTqPTHsIiRBdNimG6Yb8D9pdFbW5P62hKy81l58Ct4NBJ0vDIfK1diVDjWTYQbEbHvSwkSJs_hfF2Q–
X-Originating-IP: [186.112.8.247]
Authentication-Results: mta103.sbc.mail.re3.yahoo.com from=arel.com.au; domainkeys=neutral (no sig); from=arel.com.au; dkim=neutral (no sig)
Received: from 207.115.20.124 (EHLO flpd114.prodigy.net) (207.115.20.124)
by mta103.sbc.mail.re3.yahoo.com with SMTP; Mon, 24 Aug 2009 15:18:44 -0700
X-Header-Overseas: Mail.from.Overseas.source.186.112.8.247
X-Header-NoReverseIP: IP.name.lookup.failed[186.112.8.247]
X-Originating-IP: [186.112.8.247]
Received: from 687n82s ([186.112.8.247])
by flpd114.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7OMIQmo016747;
Mon, 24 Aug 2009 15:18:34 -0700
Message-ID: <000701ca2508$f1653bb0$627e0f72@arel.com.au>
Reply-To: “Fredric Jennings”
From: “Fredric Jennings”
To: , ,
Subject: Buy Hydrocodone Online from a US Pharmacy
Date: Mon, 24 Aug 2009 15:19:27 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 117

Address lookup

canonical name reliableflowagehere.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom reliableflowagehere.com“…

Domain Name: RELIABLEFLOWAGEHERE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.LIGHTINGDNSFLASH.COM
Name Server: NS2.LIGHTINGDNSFLASH.COM
Name Server: NS3.CEASEDNSERROR.COM
Name Server: NS4.CEASEDNSERROR.COM
Name Server: NS5.YELLOWDNSPLACE.COM
Name Server: NS6.YELLOWDNSPLACE.COM
Status: ok
Updated Date: 23-aug-2009
Creation Date: 15-aug-2009
Expiration Date: 15-aug-2010

Last update of whois database: Tue, 25 Aug 2009 00:33:13 UTC

Queried whois.namerich.cn with “reliableflowagehere.com“…

DomainName : reliableflowagehere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS3.CEASEDNSERROR.COM
Name Server………………….NS1.LIGHTINGDNSFLASH.COM
Name Server………………….NS6.YELLOWDNSPLACE.COM
Name Server………………….NS5.YELLOWDNSPLACE.COM
Name Server………………….NS4.CEASEDNSERROR.COM
Name Server………………….NS2.LIGHTINGDNSFLASH.COM
Status………………………ok
Creation Date ………………2009-08-15
Expiration Date ……………..2010-08-15
Last Update Date ……………2009-08-24

Registrant ID ……………….V-X-58472-14162
Registrant Name ……………..TIAN JUN
Registrant Organization ………TIAN JUN
Registrant Address …………..CAOANXILU991
Registrant City………………JN
Registrant Province/State …….SD
Registrant Country Code ………CN
Registrant Postal Code ……….272019
Registrant Phone Number ………+86.053727816329
Registrant Fax ………………+86.053727816329
Registrant Email …………….iagonane@126.com

Administrative ID ……………V-X-58472-14162
Administrative Name ………….TIAN JUN
Administrative Organization …..TIAN JUN
Administrative Address ……….CAOANXILU991
Administrative City…………..JN
Administrative Province/State …SD
Administrative Country Code …..CN
Administrative Postal Code ……272019
Administrative Phone Number …..+86.053727816329
Administrative Fax …………..+86.053727816329
Administrative Email …………iagonane@126.com

Billing ID ………………….V-X-58472-14162
Billing Name ………………..TIAN JUN
Billing Organization …………TIAN JUN
Billing Address ……………..CAOANXILU991
Billing City…………………JN
Billing Province/State ……….SD
Billing Country Code …………CN
Billing Postal Code ………….272019
Billing Phone Number …………+86.053727816329
Billing Fax …………………+86.053727816329
Billing Email ……………….iagonane@126.com

Technical ID ………………..V-X-58472-14162
Technical Name ………………TIAN JUN
Technical Organization………..TIAN JUN
Technical Address ……………CAOANXILU991
Technical City……………….JN
Technical Province/State………SD
Technical Country Code ……….CN
Technical Postal Code ………..272019
Technical Phone Number ……….+86.053727816329
Technical Fax ……………….+86.053727816329
Technical Email ……………..iagonane@126.com

Please register your domains at
ttp://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Network Communications Corporation Limited
descr: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
admin-c: XZ67-AP
tech-c: XZ67-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20090424
source: APNIC

person: Xiaomin Zhou
address: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
country: CN
phone: +86-10-66259626
fax-no: +86-10-66259626
e-mail: zhouxm@chinaunicom.cn
nic-hdl: XZ67-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090617
source: APNIC

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
admin-c: JY7-CN
tech-c: JY7-CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-UNICOM
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20071010
source: CNNIC

person: Jin Yang
nic-hdl: JY7-CN
e-mail: ip_address@chinaunicom.com.cn
address: No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone: +86-10-66505588
fax-no: +86-10-66504252
country: CN
changed: ipas@cnnic.net.cn 20070927
mnt-by: MAINT-CNNIC-AP
source: CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
reliableflowagehere.com IN SOA
server: ns.reliableflowagehere.com
email: admin.reliableflowagehere.com
serial: 2009081601
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
reliableflowagehere.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy – fast-online-refills.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


Address lookup

canonical name <a href=”http://www.fast-online-refills.com fast-online-refills.com.
aliases
addresses 88.85.65.165

Domain Whois record

Queried whois.internic.net with “dom fast-online-refills.com”…
Domain Name: FAST-ONLINE-REFILLS.COM
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Name Server: NS0.STIMULCASH.COM
Name Server: NS1.STIMULCASH.COM
Status: ok
Updated Date: 20-may-2009
Creation Date: 06-mar-2009
Expiration Date: 06-mar-2011

Last update of whois database: Sat, 15 Aug 2009 16:04:51 UTC
whois.rrpproxy.net with “fast-online-refills.com”…
DOMAIN: FAST-ONLINE-REFILLS.COM

RSP: domaindiscount24.com
URL: http://www.dd24.net

owner-contact: P-VLP199
owner-organization: STIMUL-MEDIA.COM
owner-fname: Vitaly
owner-lname: Petrov
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: vitalypetrov76@yahoo.com

admin-contact: P-VLP199
admin-organization: STIMUL-MEDIA.COM
admin-fname: Vitaly
admin-lname: Petrov
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: vitalypetrov76@yahoo.com

tech-contact: P-VLP199
tech-organization: STIMUL-MEDIA.COM
tech-fname: Vitaly
tech-lname: Petrov
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: vitalypetrov76@yahoo.com

billing-contact: P-VLP199
billing-organization: STIMUL-MEDIA.COM
billing-fname: Vitaly
billing-lname: Petrov
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: vitalypetrov76@yahoo.com

nameserver: ns0.stimulcash.com
nameserver: ns1.stimulcash.com

Network Whois record

Queried whois.ripe.net with “-B 88.85.65.165″…
Information related to ‘88.85.64.0 – 88.85.71.255’

inetnum: 88.85.64.0 – 88.85.71.255
netname: WEBAZILLA
descr: WebaZilla
country: NL
admin-c: WZNL1-RIPE
tech-c: WZNL1-RIPE
status: ASSIGNED PA
mnt-by: WZNET-MNT
mnt-routes: WZNET-MNT
changed: bk@webazilla.com 20070209
source: RIPE

role: WebaZilla RIPE Manager
address: WebaZilla B.V.
address: Postbus 19115
address: 3501DC Utrecht
address: Netherlands
phone: +31612253464
fax-no: +31303100299
e-mail: noc@webazilla.com
mnt-by: WZNET-MNT
admin-c: BK5536-RIPE
tech-c: BK5536-RIPE
tech-c: KV1670-RIPE
nic-hdl: WZNL1-RIPE
changed: bk@webazilla.com 20070718
source: RIPE

Information related to ‘88.85.64.0/19AS35415’

route: 88.85.64.0/19
descr: WEBAZILLA
origin: AS35415
mnt-by: WZNET-MNT
changed: bk@webazilla.com 20060728
source: RIPE

DNS records

DNS query for 165.65.85.88.in-addr.arpa returned an error from the server: NameError

name class type data time to live
fast-online-refills.com IN SOA
server: ns1.stimul-cash.com
email: root.stimul-cash.com
serial: 2009030606
refresh: 60
retry: 60
expire: 600
minimum ttl: 60
60s (00:01:00)
fast-online-refills.com IN NS ns0.stimulcash.com 60s (00:01:00)
fast-online-refills.com IN NS ns1.stimulcash.com 60s (00:01:00)
fast-online-refills.com IN A 88.85.65.165 60s (00:01:00)

— end —

ANALYSIS:

Fast-online-refills.com is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.

Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.

Rogue Internet pharmacy (definition):

A pharmacy website that intentionally or knowingly:

  1. violates, appears to violate, or encourages violation of Federal or state law or regulation;
  2. does not adhere to accepted standards of medicine and/or pharmacy practice, including standards of safety; and/or
  3. engages in fraudulent or deceptive business practices.

Website Summary

URL: http://www.fast-online-refills.com
Registrar: Key-Systems
Approval Status: rogue rogue (since 07/31/2009)
Online Status: online online

Network

This site seems to be part of the Stimul-Cash network.

Stimul-Cash is a rogue Internet pharmacy affiliate program. Websites affiliated with this network admit offering prescription drugs from overseas without a valid prescription (which violates multiple US laws). Stimul-Cash’s website claims that the drugs come from India. However, India is known to be a source of illicit, sometimes counterfeit or adulterated, medicines.

Stimul-Cash’s forums are in Russian, which suggests that the operation is not actually run by Indians, but that the network may be linked to an organization in Russia. Additionally, Stimul-Cash appears to be linked to Rx-Partners.biz, another rogue online pharmacy network.

Domains on Nameserver ns0.stimulcash.com

stimul-cash.com
stimulcash.com
rxlivehelp.com
fast-online-refills.com

Canadian Pharmacy Spam – wehavethemforyou.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://wehavethemforyou.com

Address lookup

canonical name wehavethemforyou.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom wehavethemforyou.com“…

   Domain Name: WEHAVETHEMFORYOU.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Tue, 11 Aug 2009 16:31:02 UTC

Queried whois.namerich.cn with “wehavethemforyou.com“…

 DomainName : wehavethemforyou.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.LIGHTINGDNSFLASH.COM
Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS6.YELLOWDNSPLACE.COM
Name Server......................NS5.YELLOWDNSPLACE.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS2.LIGHTINGDNSFLASH.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-11

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
wehavethemforyou.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
wehavethemforyou.com IN NS ns3.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns4.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns2.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns1.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – mosthighlysoughtafter.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://mosthighlysoughtafter.com

Address lookup

canonical name mosthighlysoughtafter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom mosthighlysoughtafter.com“…

   Domain Name: MOSTHIGHLYSOUGHTAFTER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BIGBADDNS.COM
   Name Server: NS2.BIGBADDNS.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.STEADYDNSGOES.COM
   Name Server: NS6.STEADYDNSGOES.COM
   Status: ok
   Updated Date: 07-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Mon, 10 Aug 2009 15:27:46 UTC

Queried whois.namerich.cn with “mosthighlysoughtafter.com“…


 DomainName : mosthighlysoughtafter.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS1.BIGBADDNS.COM
Name Server......................NS6.STEADYDNSGOES.COM
Name Server......................NS2.BIGBADDNS.COM
Name Server......................NS5.STEADYDNSGOES.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-07

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
mosthighlysoughtafter.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns3.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns4.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns2.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN NS ns1.mosthighlysoughtafter.com 86400s (1.00:00:00)
mosthighlysoughtafter.com IN A 60.12.166.154 86400s (1.00:00:00)

Traceroute

Tracing route to mosthighlysoughtafter.com [60.12.166.154]

hop rtt rtt rtt ip address fully qualified domain name
1 11 3 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.29 et5-2.ibr04.dllstx3.theplanet.com
5 0 0 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 12 1 1 4.69.145.180 ae-83-80.ebr3.dallas1.level3.net
7 39 36 34 4.69.132.77 ae-3.ebr2.losangeles1.level3.net
8 33 33 33 4.69.144.72 ae-2-70.edge2.losangeles1.level3.net
9 209 212 206 4.78.202.18 china-netco.edge2.losangeles1.level3.net
10 209 208 206 219.158.3.185
11 207 208 206 219.158.4.110
12 206 207 206 219.158.12.42
13 224 224 226 221.12.82.106
14 261 291 258 221.12.82.78
15 213 212 214 60.12.166.154

Trace complete

Service scan

FTP – 21 Error: ConnectionRefused
SMTP – 25 Error: TimedOut
HTTP – 80
POP3 – 110 Error: TimedOut
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:24:26 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

Traceroute

Tracing route to rxkingsatyourservice.com [211.95.78.2]

hop rtt rtt rtt ip address fully qualified domain name
1 4 4 3 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.9 et3-1.ibr04.dllstx3.theplanet.com
5 0 2 0 4.71.122.1 te-3-4.car4.dallas1.level3.net
6 1 1 7 4.69.145.204 ae-4-90.edge2.dallas3.level3.net
7 1 1 1 4.68.111.122 tiscali-level3-te.paris1.level3.net
8 1 1 1 152.63.96.46 0.ge-1-1-0.xl3.dfw7.alter.net
9 36 36 36 152.63.116.249 0.so-7-0-0.xt1.lax7.alter.net
10 36 36 37 152.63.118.33 gigabitethernet6-0-0.ig2.lax7.alter.net
11 205 205 205 63.65.154.222 chinaunicom-gw.customer.alter.net
12 205 206 206 211.94.39.97
13 206 205 206 211.94.44.14
14 206 206 206 211.95.88.25
15 206 205 206 211.95.74.17
16 206 206 206 211.95.78.2

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Mon, 10 Aug 2009 15:25:16 GMT
Server: Apache/2.2.11 (Fedora)
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=oghjitc99kb4rbu933bi3mhj00; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: dt=2009-08-10+15%3A25%3A16; expires=Mon, 10-Aug-2009 16:25:16 GMT
Connection: close
Content-Type: text/html; charset=UTF-8
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —


Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
219.76.110.185 Hong Kong (Central District)* Whois Google DNSStuff Urgentmessage.org
207.115.36.162 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Marylou K. Howe Sat Aug 8 13:06:23 2009

Return-Path:
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=robobat.fr; domainkeys=neutral (no sig); from=robobat.fr; dkim=neutral (no sig)
Received: from 219.76.110.185 (EHLO nlpi148.prodigy.net) (207.115.36.162)
by mta147.sbc.mail.mud.yahoo.com with SMTP; Sat, 08 Aug 2009 13:06:13 -0700
Received: from vmpuhc1 (n219076110185.netvigator.com [219.76.110.185])
by nlpi148.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n78K2vNe028613;
Sat, 8 Aug 2009 15:06:01 -0500
Message-ID: <000701ca1863$b43ce8c0$627e0202@robobat.fr>
Reply-To: “Marylou K. Howe” <marylou_howeql@robobat.fr>
From: “Marylou K. Howe”  <marylou_howeql@robobat.fr>
To: , ,
Subject: Rxmed Refill?
Date: Sat, 08 Aug 2009 13:06:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 156

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Sat, 08 Aug 2009 22:06:56 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162