| SmartFilter Category: | Spam URLs Make Category Suggestions |
| Namerservers on IP: | ns1.7594.org ns1.9307.org ns1.9736.org ns1.bedplain.com ns2.11121.org ns2.12332.org ns2.13231.org ns2.7594.org ns3.9736.org ns3.quietfree.ru ns4.13123.org ns4.7594.org ns4.9736.org ns4.quietfree.ru ns4.truereap.ru |
| SmartFilter Category: | Not Categorized Make Category Suggestions |
| IPs: | 58.17.3.41 60.191.221.123 60.191.239.166 61.191.191.241 203.93.208.86 |
WARNING: The following links may contain malware, spyware, browser exploits, or other harmful code which can damage your system. URIBL strongly advises against clicking any links and/or accessing any of the sites included in these lists. URIBL.COM is not an ISP, web host, or domain registrar. We do not have any control over what is found on any of the sites linked from this page. This information is made available to the public so action can be taken by the responsible party. If you do not know how to properly put this information to good use, you should not be here. Complaints regarding information found on this page will go unanswered.
| # | Domain | Date/Time Added |
| #1 | holeabove.com | Thu, 18 Jun 2009 07:51:12 +0000 |
| #2 | trialtrials.com | Thu, 18 Jun 2009 06:17:30 +0000 |
| #3 | settlenoon.com | Thu, 18 Jun 2009 06:14:25 +0000 |
| #4 | nightbye.com | Thu, 18 Jun 2009 04:01:06 +0000 |
| #5 | keptuntil.com | Thu, 18 Jun 2009 03:59:17 +0000 |
| #6 | fewhair.com | Thu, 18 Jun 2009 03:21:17 +0000 |
| #7 | spacemonth.com | Thu, 18 Jun 2009 02:01:02 +0000 |
| #8 | thinggrow.com | Thu, 18 Jun 2009 01:57:52 +0000 |
| #9 | prefercoat.com | Thu, 18 Jun 2009 01:54:46 +0000 |
| #10 | rosyhat.com | Thu, 18 Jun 2009 00:02:24 +0000 |
| #11 | poemread.com | Wed, 17 Jun 2009 20:58:03 +0000 |
| #12 | toolwhere.com | Wed, 17 Jun 2009 20:48:50 +0000 |
| #13 | northunique.com | Wed, 17 Jun 2009 18:10:12 +0000 |
| #14 | eecam.com | Wed, 17 Jun 2009 16:51:42 +0000 |
| #15 | titsss.com | Wed, 17 Jun 2009 16:51:40 +0000 |
| #16 | hrnygirl.com | Wed, 17 Jun 2009 16:51:36 +0000 |
| #17 | slutyy.com | Wed, 17 Jun 2009 16:51:34 +0000 |
| #18 | basepast.com | Wed, 17 Jun 2009 15:26:09 +0000 |
| #19 | fourmighty.com | Wed, 17 Jun 2009 15:24:28 +0000 |
| #20 | casedreamy.com | Wed, 17 Jun 2009 15:21:35 +0000 |
| #21 | massideal.com | Wed, 17 Jun 2009 15:11:21 +0000 |
| #22 | slipmine.com | Wed, 17 Jun 2009 15:06:55 +0000 |
| #23 | daringbring.com | Wed, 17 Jun 2009 15:06:14 +0000 |
| #24 | ninacams.com | Wed, 17 Jun 2009 14:02:09 +0000 |
| #25 | putbits.com | Wed, 17 Jun 2009 06:09:01 +0000 |
| #26 | burntold.com | Wed, 17 Jun 2009 04:43:19 +0000 |
| #27 | leaddoes.com | Wed, 17 Jun 2009 04:11:23 +0000 |
| #28 | foundtiny.com | Wed, 17 Jun 2009 03:34:17 +0000 |
| #29 | voiceflip.com | Wed, 17 Jun 2009 03:08:42 +0000 |
| #30 | washrace.com | Wed, 17 Jun 2009 02:45:01 +0000 |
| #31 | hisfly.com | Wed, 17 Jun 2009 02:26:06 +0000 |
| #32 | extolact.com | Wed, 17 Jun 2009 02:02:16 +0000 |
| #33 | qosogcim.com | Tue, 16 Jun 2009 21:37:38 +0000 |
| #34 | zezozvaz.com | Tue, 16 Jun 2009 21:27:57 +0000 |
| #35 | triallenght.com | Tue, 16 Jun 2009 20:49:52 +0000 |
| #36 | trialextra.com | Tue, 16 Jun 2009 19:37:09 +0000 |
| #37 | keptmarket.com | Tue, 16 Jun 2009 16:39:17 +0000 |
| #38 | wokofmum.com | Tue, 16 Jun 2009 15:46:16 +0000 |
| #39 | ciluhgis.com | Tue, 16 Jun 2009 15:42:06 +0000 |
| #40 | wejezhux.com | Tue, 16 Jun 2009 15:29:26 +0000 |
| #41 | jonoklem.com | Tue, 16 Jun 2009 15:20:17 +0000 |
| #42 | supidxew.com | Tue, 16 Jun 2009 15:15:38 +0000 |
| #43 | mumuvhej.com | Tue, 16 Jun 2009 15:07:49 +0000 |
| #44 | gluekewl.com | Tue, 16 Jun 2009 14:31:00 +0000 |
| #45 | hollycams.com | Tue, 16 Jun 2009 08:03:57 +0000 |
| #46 | gigicams.com | Tue, 16 Jun 2009 08:03:49 +0000 |
| #47 | tiffcams.com | Tue, 16 Jun 2009 08:03:45 +0000 |
| #48 | summrcams.com | Tue, 16 Jun 2009 07:28:17 +0000 |
| #49 | wendicams.com | Tue, 16 Jun 2009 07:16:45 +0000 |
| #50 | h0tcams.com | Tue, 16 Jun 2009 07:16:42 +0000 |
| #51 | mandicams.com | Tue, 16 Jun 2009 07:06:10 +0000 |
| #52 | jenncams.com | Tue, 16 Jun 2009 06:57:40 +0000 |
| #53 | quarttan.com | Tue, 16 Jun 2009 06:00:55 +0000 |
| #54 | saidapple.com | Tue, 16 Jun 2009 05:23:25 +0000 |
| #55 | treatdry.com | Tue, 16 Jun 2009 04:43:14 +0000 |
| #56 | happenmelody.com | Tue, 16 Jun 2009 04:15:48 +0000 |
| #57 | groundfeel.com | Tue, 16 Jun 2009 04:10:31 +0000 |
| #58 | scoreseither.com | Tue, 16 Jun 2009 03:21:55 +0000 |
| #59 | coatbits.com | Tue, 16 Jun 2009 02:34:51 +0000 |
| #60 | abcscript5.com | Tue, 16 Jun 2009 01:36:26 +0000 |
| #61 | sidehalf.com | Mon, 15 Jun 2009 22:08:45 +0000 |
| #62 | excitefind.com | Mon, 15 Jun 2009 22:01:05 +0000 |
| #63 | grewjoin.com | Mon, 15 Jun 2009 21:43:45 +0000 |
| #64 | foundreply.com | Mon, 15 Jun 2009 21:38:04 +0000 |
| #65 | chiefpound.com | Mon, 15 Jun 2009 21:34:29 +0000 |
| #66 | humormunchy.com | Mon, 15 Jun 2009 21:06:41 +0000 |
| #67 | widerenown.com | Mon, 15 Jun 2009 20:42:11 +0000 |
| #68 | cellrest.com | Mon, 15 Jun 2009 16:30:24 +0000 |
| #69 | roundleft.com | Mon, 15 Jun 2009 16:23:10 +0000 |
| #70 | beganpretty.com | Mon, 15 Jun 2009 16:20:32 +0000 |
| #71 | livebut.com | Mon, 15 Jun 2009 16:19:05 +0000 |
| #72 | monthred.com | Mon, 15 Jun 2009 10:22:05 +0000 |
| #73 | monthawe.com | Mon, 15 Jun 2009 09:19:22 +0000 |
| #74 | monthblack.com | Mon, 15 Jun 2009 06:21:27 +0000 |
| #75 | familylevel.com | Mon, 15 Jun 2009 05:12:06 +0000 |
| #76 | singboard.com | Mon, 15 Jun 2009 05:08:19 +0000 |
| #77 | abcscript6.com | Mon, 15 Jun 2009 04:01:44 +0000 |
| #78 | speedwonder.com | Mon, 15 Jun 2009 03:56:19 +0000 |
| #79 | warmproper.com | Mon, 15 Jun 2009 02:37:46 +0000 |
| #80 | tryneck.com | Mon, 15 Jun 2009 01:42:35 +0000 |
| #81 | stribethree.com | Sun, 14 Jun 2009 19:49:26 +0000 |
| #82 | drysexy.com | Sun, 14 Jun 2009 09:57:01 +0000 |
| #83 | monthtwo.com | Sun, 14 Jun 2009 07:28:13 +0000 |
| #84 | greathumble.com | Sun, 14 Jun 2009 06:56:53 +0000 |
| #85 | tiemodel.com | Sun, 14 Jun 2009 05:58:57 +0000 |
| #86 | suffixwonder.com | Sun, 14 Jun 2009 04:34:32 +0000 |
| #87 | wemaxi.com | Sun, 14 Jun 2009 04:16:49 +0000 |
| #88 | homevaried.com | Sun, 14 Jun 2009 02:48:04 +0000 |
| #89 | swelltrue.com | Sun, 14 Jun 2009 02:27:00 +0000 |
| #90 | thinmeet.com | Sun, 14 Jun 2009 02:23:47 +0000 |
| #91 | cuddlysuffix.com | Sun, 14 Jun 2009 02:22:31 +0000 |
| #92 | monthblue.com | Sat, 13 Jun 2009 13:49:44 +0000 |
Source: http://rss.uribl.com/nic/CHINA_SPRINGBOARD_INC_.html
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 66.18.238.145 | Canada (Calgary)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.36.154 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Todd Hinkle Sat Jun 13 16:47:50 2009 Return-Path: todd.hinklexs@netron.cz
Authentication-Results: mta167.sbc.mail.mud.yahoo.com from=netron.cz; domainkeys=neutral (no sig); from=netron.cz; dkim=neutral (no sig) Received: from 66.18.238.145 (EHLO nlpi140.prodigy.net) (207.115.36.154) by mta167.sbc.mail.mud.yahoo.com with SMTP;
Sat, 13 Jun 2009 16:47:48 -0700 Received: from zjl05r3 (dsl-vlan458-66-18-238-145.nucleus.com [66.18.238.145]) by nlpi140.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5DNlSlm031067; Sat, 13 Jun 2009 18:47:47 -0500 Message-ID: <000701c9ec81$5c956240$4a37416a@netron.cz>
Reply-To: “Todd Hinkle” todd.hinklexs@netron.cz
From: “Todd Hinkle” todd.hinklexs@netron.cz
To: ScamFraudAlert
Subject: Get anti anxiety medications online!!
Date: Sat, 13 Jun 2009 18:47:50 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=”windows-1250″ reply-type=original Content-Transfer-Encoding: 7bit Content-Length: 136
An Incredible CanadianPharmacy is available at your Fingertips!
No Doctor Needed! Browse our SiteToday! -> http://homevaried.com
| canonical name | homevaried.com. |
| aliases | |
| addresses | 60.191.221.123 60.191.239.166 61.191.191.241 203.93.208.86 58.17.3.41 |
Queried whois.internic.net with “dom homevaried.com“…
Domain Name: HOMEVARIED.COM Registrar: CHINA SPRINGBOARD INC. Whois Server: whois.namerich.cn Referral URL: http://www.namerich.cn Name Server: NS1.BEDPLAIN.COM Name Server: NS2.BEDPLAIN.COM Name Server: NS3.AGAINTAIL.COM Name Server: NS4.AGAINTAIL.COM Name Server: NS5.OUTMILK.IM Name Server: NS6.OUTMILK.IM Status: ok Updated Date: 10-jun-2009 Creation Date: 10-jun-2009 Expiration Date: 10-jun-2010 Last update of whois database: Thu, 18 Jun 2009 07:58:28 UTC <<<
Queried whois.namerich.cn with “homevaried.com“…
DomainName : homevaried.com RSP: China Springboard Inc. URL: http://www.namerich.cn Name Server......................NS5.OUTMILK.IM Name Server......................NS3.AGAINTAIL.COM Name Server......................NS1.BEDPLAIN.COM Name Server......................NS6.OUTMILK.IM Name Server......................NS4.AGAINTAIL.COM Name Server......................NS2.BEDPLAIN.COM Status...........................ok Creation Date ..................2009-06-10 Expiration Date .................2010-06-10 Last Update Date ...............2009-06-10 Registrant ID ...................V-X-57187-12492 Registrant Name .................JIANG HUA Registrant Organization .........JIANG HUA Registrant Address ..............LONGSHABEILU12 Registrant City..................TianJin Registrant Province/State .......TianJin Registrant Country Code .........CN Registrant Postal Code ..........300009 Registrant Phone Number .........+86.02251251685 Registrant Fax ..................+86.02251251685 Registrant Email ................xianeldb@126.com Administrative ID ...............V-X-57187-12492 Administrative Name .............JIANG HUA Administrative Organization .....JIANG HUA Administrative Address ..........LONGSHABEILU12 Administrative City..............TianJin Administrative Province/State ...TianJin Administrative Country Code .....CN Administrative Postal Code ......300009 Administrative Phone Number .....+86.02251251685 Administrative Fax ..............+86.02251251685 Administrative Email ............xianeldb@126.com Billing ID ......................V-X-57187-12492 Billing Name ....................JIANG HUA Billing Organization ............JIANG HUA Billing Address .................LONGSHABEILU12 Billing City.....................TianJin Billing Province/State ..........TianJin Billing Country Code ............CN Billing Postal Code .............300009 Billing Phone Number ............+86.02251251685 Billing Fax .....................+86.02251251685 Billing Email ...................xianeldb@126.com Technical ID ....................V-X-57187-12492 Technical Name ..................JIANG HUA Technical Organization...........JIANG HUA Technical Address ...............LONGSHABEILU12 Technical City...................TianJin Technical Province/State.........TianJin Technical Country Code ..........CN Technical Postal Code ...........300009 Technical Phone Number ..........+86.02251251685 Technical Fax ...................+86.02251251685 Technical Email .................xianeldb@126.com ; Please register your domains at ; http://www.namerich.cn
Queried whois.apnic.net with “60.191.221.123“…
inetnum: 60.191.221.0 - 60.191.221.255 netname: JINHUA-TELECOM-LTD country: CN descr: Jinhua Telecom Co.,ltd IDC Center descr: admin-c: LW1143-AP tech-c: CJ54-AP status: ASSIGNED NON-PORTABLE changed: auto-dbm@dcb.hz.zj.cn 20070618 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC role: CHINANET-ZJ Jinhua address: No.155 Xishi street,Jinhua,Zhejiang.321000 country: CN phone: +86-579-2300779 fax-no: +86-579-2330035 e-mail: anti_spam@mail.jhptt.zj.cn trouble: send spam reports to anti_spam@mail.jhptt.zj.cn trouble: and abuse reports to anti_spam@mail.jhptt.zj.cn trouble: Please include detailed information and times in UTC admin-c: CH55-AP tech-c: CH55-AP nic-hdl: CJ54-AP mnt-by: MAINT-CHINANET-ZJ changed: master@dcb.hz.zj.cn 20031204 source: APNIC person: Lujiang Wang nic-hdl: LW1143-AP e-mail: anti_spam@mail.jhptt.zj.cn address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000 phone: +86-579-83285460 country: CN changed: auto-dbm@dcb.hz.zj.cn 20070618 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC
DNS query for 123.221.191.60.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| homevaried.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| homevaried.com | IN | A | 60.191.239.166 | 3600s | (01:00:00) |
| homevaried.com | IN | A | 60.191.221.123 | 3600s | (01:00:00) |
| homevaried.com | IN | A | 61.191.191.241 | 3600s | (01:00:00) |
| homevaried.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
— end —
Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
National Association of Boards of Pharmacy (NABP)
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Who's Behind Online Pharmacy
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
This was brought to our attention that RxPartners are associated with 121Doc Affiliate which is also associated with Health Affiliate Network
________________________________
If you have a website with a focus on health and medicine, 121doc has an affiliate program that is worth exploring. The 121doc affiliate program is part of a larger affiliate program called the Health Affiliates Network. 121doc offers expert medical consultation in a large range of areas from weight loss and impotence to cardiovascular diseases. Patients come to the website and fill out information about their medical condition; the doctors of 121doc then give consultation and prescribe medicine as needed. The 121doc focus on consultation differentiates the site from many other competitors that prescribe medicine in a much less reliable format. The company is based in the U.K. but offers service all over the world. As an affiliate of 121Doc, you can promote popular products such as Cialis and Viagra. You get lifetime commissions, too, for 121doc customers that re-order products from the site, which is a huge plus. Every product that you promote through 121doc is name brand and clinically-certified.
____________________________________
[91.199.112.8]
28-Jan-2009 02:22 GMT | SR04
RX-PARTNERS.BIZ / partners-dns.com pill spam program
Checking server [whois.neulevel.biz]
Results:
Domain Name: RX-PARTNERS.BIZ
Domain ID: D11438087-BIZ
Sponsoring Registrar: NETBENEFIT D/B/A NETNAMES
Sponsoring Registrar IANA ID: 70
Domain Status: ok
Registrant ID: 549542340-NBTO
Registrant Name: Jessica Eagloff
Registrant Organization: Jessica Eagloff
Registrant Address1: 145-157 St John Street
Registrant City: London
Registrant Postal Code: EC1V 4PY
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.441315167104
Registrant Facsimile Number: +44.441315167104
Registrant Email: jessicaeagloff@yahoo.co.uk
Administrative Contact ID: 549542887-NBTA
Administrative Contact Name: Technical Support
Administrative Contact Organization: Easily Limited
Administrative Contact Address1: 3rd Floor Prospero House, 241 Borough High St.
Administrative Contact City: London
Administrative Contact Postal Code: SE1 1GB
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.448701624824
Administrative Contact Facsimile Number: +44.44078417460
Administrative Contact Email: domain-admin@easily.co.uk
Billing Contact ID: 549543395-NBTB
Billing Contact Name: Easily Limited
Billing Contact Organization: Easily Limited
Billing Contact Address1:
3rd Floor Prospero House,
241 Borough High St.
Billing Contact Address2:
241 Borough High St.
Billing Contact City: London
Billing Contact Postal Code: SE1 1GB
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.448701624824
Billing Contact Facsimile Number: +44.448704589458
Billing Contact Email: helpdesk@easily.co.uk
Technical Contact ID: 549543972-NBTT
Technical Contact Name: Technical Support
Technical Contact Organization: Easily Limited
Technical Contact Address1:
3rd Floor Prospero House, 241 Borough High St.
Technical Contact Address2:
241 Borough High St.
Technical Contact City: London
Technical Contact Postal Code: SE1 1GB
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.448701624824
Technical Contact Facsimile Number: +44.44078417460
Technical Contact Email: helpdesk@easily.co.uk
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM
Created by Registrar: NETBENEFIT D/B/A NETNAMES
Last Updated by Registrar: NETBENEFIT D/B/A NETNAMES
Domain Registration Date: Wed Nov 09 15:19:05 GMT 2005
Domain Expiration Date: Sun Nov 08 23:59:59 GMT 2009
Domain Last Updated Date: Fri Nov 09 10:32:34 GMT 2007
Buying Precription Drugs Online May Be Dangerous
Consumer Alert
Drug Enforcement Administration Says
National Association of Boards of Pharmacy (NABP)
An Amazing Canadian Pharmacy is available_at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://easesummer.com
Read more about this unrivaled fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read more about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed
| canonical name | easesummer.com. |
| aliases | |
| addresses | 60.191.221.123 60.191.239.164 61.191.191.241 203.93.208.86 58.17.3.41 |
Queried whois.internic.net with “dom easesummer.com“…
Domain Name: EASESUMMER.COM Registrar: CHINA SPRINGBOARD INC. Whois Server: whois.namerich.cn Referral URL: http://www.namerich.cn Name Server: NS1.GREENWROTE.COM Name Server: NS2.GREENWROTE.COM Name Server: NS3.KNEWTASTY.COM Name Server: NS4.KNEWTASTY.COM Name Server: NS5.REPLYLAKE.IM Name Server: NS6.REPLYLAKE.IM Status: ok Updated Date: 09-jun-2009 Creation Date: 09-jun-2009 Expiration Date: 09-jun-2010 Last update of whois database: Sat, 13 Jun 2009 12:10:35 UTC
Queried whois.namerich.cn with easesummer.com
DomainName : easesummer.com RSP: China Springboard Inc. URL: http://www.namerich.cn Name Server......................NS5.REPLYLAKE.IM Name Server......................NS3.KNEWTASTY.COM Name Server......................NS2.GREENWROTE.COM Name Server......................NS1.GREENWROTE.COM Name Server......................NS6.REPLYLAKE.IM Name Server......................NS4.KNEWTASTY.COM Status...........................ok Creation Date ..................2009-06-09 Expiration Date .................2010-06-09 Last Update Date ...............2009-06-09 Registrant ID ...................V-X-57113-12390 Registrant Name .................ZHAO JUN Registrant Organization .........ZHAO JUN Registrant Address ..............BEILUXILU23 Registrant City..................TianJin Registrant Province/State .......TianJin Registrant Country Code .........CN Registrant Postal Code ..........300024 Registrant Phone Number .........+86.02285412624 Registrant Fax ..................+86.02285412624 Registrant Email ................longhua444@126.com Administrative ID ...............V-X-57113-12390 Administrative Name .............ZHAO JUN Administrative Organization .....ZHAO JUN Administrative Address ..........BEILUXILU23 Administrative City..............TianJin Administrative Province/State ...TianJin Administrative Country Code .....CN Administrative Postal Code ......300024 Administrative Phone Number .....+86.02285412624 Administrative Fax ..............+86.02285412624 Administrative Email ............longhua444@126.com Billing ID ......................V-X-57113-12390 Billing Name ....................ZHAO JUN Billing Organization ............ZHAO JUN Billing Address .................BEILUXILU23 Billing City.....................TianJin Billing Province/State ..........TianJin Billing Country Code ............CN Billing Postal Code .............300024 Billing Phone Number ............+86.02285412624 Billing Fax .....................+86.02285412624 Billing Email ...................longhua444@126.com Technical ID ....................V-X-57113-12390 Technical Name ..................ZHAO JUN Technical Organization...........ZHAO JUN Technical Address ...............BEILUXILU23 Technical City...................TianJin Technical Province/State.........TianJin Technical Country Code ..........CN Technical Postal Code ...........300024 Technical Phone Number ..........+86.02285412624 Technical Fax ...................+86.02285412624 Technical Email .................longhua444@126.com ; Please register your domains at ; http://www.namerich.cn
Queried whois.apnic.net with “60.191.221.123“…
inetnum: 60.191.221.0 - 60.191.221.255 netname: JINHUA-TELECOM-LTD country: CN descr: Jinhua Telecom Co.,ltd IDC Center descr: admin-c: LW1143-AP tech-c: CJ54-AP status: ASSIGNED NON-PORTABLE changed: auto-dbm@dcb.hz.zj.cn 20070618 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC role: CHINANET-ZJ Jinhua address: No.155 Xishi street,Jinhua,Zhejiang.321000 country: CN phone: +86-579-2300779 fax-no: +86-579-2330035 e-mail: anti_spam@mail.jhptt.zj.cn trouble: send spam reports to anti_spam@mail.jhptt.zj.cn trouble: and abuse reports to anti_spam@mail.jhptt.zj.cn trouble: Please include detailed information and times in UTC admin-c: CH55-AP tech-c: CH55-AP nic-hdl: CJ54-AP mnt-by: MAINT-CHINANET-ZJ changed: master@dcb.hz.zj.cn 20031204 source: APNIC person: Lujiang Wang nic-hdl: LW1143-AP e-mail: anti_spam@mail.jhptt.zj.cn address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000 phone: +86-579-83285460 country: CN changed: auto-dbm@dcb.hz.zj.cn 20070618 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC
DNS query for 123.221.191.60.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| easesummer.com | IN | A | 60.191.221.123 | 3600s | (01:00:00) |
| easesummer.com | IN | A | 61.191.191.241 | 3600s | (01:00:00) |
| easesummer.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
| easesummer.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| easesummer.com | IN | A | 60.191.239.164 | 3600s | (01:00 |
An Amazing Canadian Pharmacy is available_at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sayfinish.com
“Canadian Pharmacy” is property of some of the worst criminals on the Internet. Don’t let them fool you, as they lie just about everything. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by eating those drugs.
It’s your personal and credit card information they are after, and they’d do anything to get their filthy hands on that information. Their greed knows no measure, and they would probably sell their own mother for a quick buck. Of course they don’t have one, as this kind of filth breeds in drains.
Read more about this unrivaled fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 74.42.73.118 | United States (Thorntown)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.36.102 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Randal Ford Wed Jun 10 15:40:56 2009
Return-Path:
Authentication-Results: mta141.sbc.mail.mud.yahoo.com from=datasul.com.br; domainkeys=neutral (no sig); from=datasul.com.br; dkim=neutral (no sig)
Received: from 74.42.73.118 (EHLO nlpi086.prodigy.net) (207.115.36.102)
by mta141.sbc.mail.mud.yahoo.com with SMTP; Wed, 10 Jun 2009 15:40:55 -0700
Received: from fa87sf1 (static-74-42-73-118.dr01.shlw.az.frontiernet.net [74.42.73.118])
by nlpi086.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5AMeNjN013251;
Wed, 10 Jun 2009 17:40:53 -0500
Message-ID: <000701c9ea1c$851353b0$4a37416a@datasul.com.br>
Reply-To: “Randal Ford” <ford_rr@datasul.com.br>
From: “Randal Ford” <ford_rr@datasul.com.br>
To: ScamFraudAlert
Subject: We have anti anxiety medications!!
Date: Wed, 10 Jun 2009 17:40:56 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 134
Address lookup
| canonical name | sayfinish.com. |
| aliases | |
| addresses | 203.93.208.86 58.17.3.41 |
Queried whois.internic.net with “dom sayfinish.com“…
Domain Name: SAYFINISH.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.WITHPIOUS.COM Name Server: NS2.WITHPIOUS.COM Name Server: NS3.DADOBJECT.COM Name Server: NS4.DADOBJECT.COM Name Server: NS5.CENTAROMA.IM Name Server: NS6.CENTAROMA.IM Status: ok Updated Date: 08-jun-2009 Creation Date: 06-jun-2009 Expiration Date: 06-jun-2010 >>> Last update of whois database: Thu, 11 Jun 2009 04:54:59 UTC <<<
Queried whois.paycenter.com.cn with “sayfinish.com“…
Domain Name : sayfinish.com PunnyCode : sayfinish.com Registrant: Organization : CAO XINXIN Name : CAO XINIXN Address : DONGFANGLU26 City : SHANGHAI Province/State : Shanghai Country : CN Postal Code : 200269 Administrative Contact: Name : CAO XINXIN Organization : CAO XINIXN Address : DONGFANGLU26 City : SHANGHAI Province/State : Shanghai Country : CN Postal Code : 200269 Phone Number : 86-021-69512325 Fax : 86-021-69512325 Email : CAOXINIXN566251@QQ.COM Technical Contact: Name : CAO XINXIN Organization : CAO XINIXN Address : DONGFANGLU26 City : SHANGHAI Province/State : Shanghai Country : CN Postal Code : 200269 Phone Number : 86-021-69512325 Fax : 86-021-69512325 Email : CAOXINIXN566251@QQ.COM Billing Contact: Name : CAO XINXIN Organization : CAO XINIXN Address : DONGFANGLU26 City : SHANGHAI Province/State : Shanghai Country : CN Postal Code : 200269 Phone Number : 86-021-69512325 Fax : 86-021-69512325 Email : CAOXINIXN566251@QQ.COM
Queried whois.apnic.net with “203.93.208.86“…
inetnum: 203.93.0.0 - 203.93.255.255 netname: UNICOM-CN descr: China Unicom IP network descr: China Unicom country: CN admin-c: CH1302-AP tech-c: CH1302-AP mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP mnt-routes: MAINT-CNCGROUP-RR status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 20040116 changed: hm-changed@apnic.net 20060124 changed: hm-changed@apnic.net 20090507 changed: hm-changed@apnic.net 20090508 source: APNIC person: ChinaUnicom Hostmaster nic-hdl: CH1302-AP e-mail: abuse@chinaunicom.cn address: No.21,Jin-Rong Street address: Beijing,100140 address: P.R.China phone: +86-10-82993155 fax-no: +86-10-82993144 country: CN changed: abuse@chinaunicom.cn 20090408 mnt-by: MAINT-CNCGROUP source: APNIC
I have not yet got my order.10cialis and 4 free.ordered on 5-28-09 please let me know
512-909-1505.
thanks,
ted
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 207.115.20.181 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| 110.172.0.198 | Japan* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Annette Macdonald Sat Jun 6 22:07:48 2009
Return-Path:
Authentication-Results: mta129.sbc.mail.re3.yahoo.com from=holts.co.uk; domainkeys=neutral (no sig); from=holts.co.uk; dkim=neutral (no sig)
Received: from 207.115.20.181 (EHLO flpi179.prodigy.net) (207.115.20.181)
by mta129.sbc.mail.re3.yahoo.com with SMTP; Sat, 06 Jun 2009 22:07:48 -0700
Received: from vhnpx42 (0.198.net4.hinocatv.ne.jp [110.172.0.198])
by flpi179.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5757h3C021495;
Sat, 6 Jun 2009 22:07:46 -0700
Message-ID: <000701c9e72d$e6bd25b0$4a37416a@holts.co.uk>
Reply-To: “Annette Macdonald” a_macdonald_hi@holts.co.uk
From: “Annette Macdonald” a_macdonald_hi@holts.co.uk
To: ScamFraudAlert
Subject: Lose weight fast Here!
Date: Sun, 07 Jun 2009 00:07:48 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 128
An Incredible Canadian_Pharmacy is available at your_Fingertips!
NO_Doctor_Needed! Click There -> http://pathjoyful.com
| canonical name | pathjoyful.com. |
| aliases | |
| addresses | 58.17.3.41 60.191.239.181 203.93.208.86 |
Queried whois.internic.net with “dom pathjoyful.com“…
Domain Name: PATHJOYFUL.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS1.FELTTWENTY.COM
Name Server: NS2.FELTTWENTY.COM
Name Server: SP151.DELETEDNS.COM
Name Server: SP152.DELETEDNS.COM
Name Server: SP153.DELETEDNS.COM
Name Server: SP154.DELETEDNS.COM
Status: ok
Updated Date: 04-jun-2009
Creation Date: 03-jun-2009
Expiration Date: 03-jun-2010
Last update of whois database: Sun, 07 Jun 2009 22:53:18 UTC
Queried whois.paycenter.com.cn with “pathjoyful.com“…
Domain Name : pathjoyful.com
PunnyCode : pathjoyful.com
Registrant:
Organization : TIANCHUNLIN
Name : TIANCHUNLING
Address : daxuenanlu29
City : xinxiangshi
Province/State : henansheng
Country : china
Postal Code : 453039
Administrative Contact:
Name : TIANCHUNLING
Organization : TIANCHUNLIN
Address : daxuenanlu29
City : xinxiangshi
Province/State : henansheng
Country : china
Postal Code : 453039
Phone Number : 86-0373-61255412
Fax : 86-0373-61255412
Email : TIANCHUNLIN@139.COM
Technical Contact:
Name : TIANCHUNLING
Organization : TIANCHUNLIN
Address : daxuenanlu29
City : xinxiangshi
Province/State : henansheng
Country : china
Postal Code : 453039
Phone Number : 86-0373-61255412
Fax : 86-0373-61255412
Email : TIANCHUNLIN@139.COM
Billing Contact:
Name : TIANCHUNLING
Organization : TIANCHUNLIN
Address : daxuenanlu29
City : xinxiangshi
Province/State : henansheng
Country : china
Postal Code : 453039
Phone Number : 86-0373-61255412
Fax : 86-0373-61255412
Email : TIANCHUNLIN@139.COM
Queried whois.apnic.net with “58.17.3.41“…
inetnum: 58.17.3.32 – 58.17.3.47
netname: CHAOREN-CAFE
country: CN
descr: Superman Internet Cafe
admin-c: CH444-AP
tech-c: CH444-AP
status: ASSIGNED NON-PORTABLE
changed: wujiawei@china-netcom.com 20070427
mnt-by: MAINT-CNCGROUP-JX
source: APNIC
route: 58.17.0.0/17
descr: CNC Group CHINA169 Jiangxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060728
source: APNIC
route: 58.17.0.0/17
descr: CNCGroup JiangXi province network
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20050218
changed: hm-changed@apnic.net 20050331
source: APNIC
person: CNCGroup Hostmaster
nic-hdl: CH444-AP
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
phone: +86-10-82993155
fax-no: +86-10-82993144
country: CN
changed: abuse@cnc-noc.net 20041220
mnt-by: MAINT-CNCGROUP
source: APNIC
DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| pathjoyful.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
| pathjoyful.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
| pathjoyful.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
An Incredible Canadian~Pharmacy is available at your Fingertips!
NO_Doctor_Needed! Click Here => http://rosefight.com
An Incredible Canadian~Pharmacy is available at your_Fingertips!
NO_Doctor_Needed! Click Here => http://causebreezy.com
An Incredible CanadianPharmacy is available at your Fingertips!
NO Doctor Needed! Click Here -> http://zealstay.com
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 60.198.140.245 | Taiwan (Taipei)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.20.195 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Amanda King Wed Jun 3 19:08:30 2009
Return-Path:
Authentication-Results: mta124.sbc.mail.mud.yahoo.com from=anglianet.co.uk; domainkeys=neutral (no sig); from=anglianet.co.uk; dkim=neutral (no sig)
Received: from 60.198.140.245 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta124.sbc.mail.mud.yahoo.com with SMTP; Wed, 03 Jun 2009 19:08:30 -0700
Received: from wd4l8b2 (60-198-140-245.dynamic.tfn.ent.tw [60.198.140.245] (may be forged))
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5427Wlt003373;
Wed, 3 Jun 2009 19:08:27 -0700
Message-ID: <000701c9e4b9$5af491b0$4a37416a@anglianet.co.uk>
Reply-To: “Amanda King” <a_kingjf@anglianet.co.uk>
From: “Amanda King” <a_kingjf@anglianet.co.uk>
To: ScamFraudAlert
Subject: We have all the best Rxmed Out!
Date: Wed, 03 Jun 2009 21:08:30 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 124
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 194.254.168.135 | France (Sannois)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.36.113 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Louie Hicks Fri Jun 5 02:48:58 2009
Return-Path:
Authentication-Results: mta138.sbc.mail.re3.yahoo.com from=sparebank1.no; domainkeys=neutral (no sig); from=sparebank1.no; dkim=neutral (no sig)
Received: from 194.254.168.135 (EHLO nlpi097.prodigy.net) (207.115.36.113)
by mta138.sbc.mail.re3.yahoo.com with SMTP; Fri, 05 Jun 2009 02:48:58 -0700
Received: from 9brjah2 ([194.254.168.135])
by nlpi097.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n559mm9j001639;
Fri, 5 Jun 2009 04:48:57 -0500
Message-ID: <000701c9e5c2$d939a6a0$4a37416a@sparebank1.no>
Reply-To: “Louie Hicks” louiehicks_ig@sparebank1.no
From: “Louie Hicks” louiehicks_ig@sparebank1.no
To: , ,
Subject: Have long strong night in BED!
Date: Fri, 05 Jun 2009 04:48:58 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 128
Address lookup
| canonical name | rosefight.com. |
| aliases | |
| addresses | 203.93.208.86 58.17.3.41 60.191.239.181 |
Queried whois.internic.net with “dom rosefight.com“…
Domain Name: ROSEFIGHT.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.FELTTWENTY.COM Name Server: NS2.FELTTWENTY.COM Name Server: SP151.DELETEDNS.COM Name Server: SP152.DELETEDNS.COM Name Server: SP153.DELETEDNS.COM Name Server: SP154.DELETEDNS.COM Status: ok Updated Date: 04-jun-2009 Creation Date: 03-jun-2009 Expiration Date: 03-jun-2010 >>> Last update of whois database: Sat, 06 Jun 2009 22:46:50 UTC <<<
Queried whois.paycenter.com.cn with “rosefight.com“…
Domain Name : rosefight.com PunnyCode : rosefight.com Registrant: Organization : TIANCHUNLIN Name : TIANCHUNLING Address : daxuenanlu29 City : xinxiangshi Province/State : henansheng Country : china Postal Code : 453039 Administrative Contact: Name : TIANCHUNLING Organization : TIANCHUNLIN Address : daxuenanlu29 City : xinxiangshi Province/State : henansheng Country : china Postal Code : 453039 Phone Number : 86-0373-61255412 Fax : 86-0373-61255412 Email : TIANCHUNLIN@139.COM Technical Contact: Name : TIANCHUNLING Organization : TIANCHUNLIN Address : daxuenanlu29 City : xinxiangshi Province/State : henansheng Country : china Postal Code : 453039 Phone Number : 86-0373-61255412 Fax : 86-0373-61255412 Email : TIANCHUNLIN@139.COM Billing Contact: Name : TIANCHUNLING Organization : TIANCHUNLIN Address : daxuenanlu29 City : xinxiangshi Province/State : henansheng Country : china Postal Code : 453039 Phone Number : 86-0373-61255412 Fax : 86-0373-61255412 Email : TIANCHUNLIN@139.COM
Queried whois.apnic.net with “203.93.208.86“…
inetnum: 203.93.0.0 - 203.93.255.255 netname: UNICOM-CN descr: China Unicom IP network descr: China Unicom country: CN admin-c: CH1302-AP tech-c: CH1302-AP mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP mnt-routes: MAINT-CNCGROUP-RR status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 20040116 changed: hm-changed@apnic.net 20060124 changed: hm-changed@apnic.net 20090507 changed: hm-changed@apnic.net 20090508 source: APNIC person: ChinaUnicom Hostmaster nic-hdl: CH1302-AP e-mail: abuse@chinaunicom.cn address: No.21,Jin-Rong Street address: Beijing,100140 address: P.R.China phone: +86-10-82993155 fax-no: +86-10-82993144 country: CN changed: abuse@chinaunicom.cn 20090408 mnt-by: MAINT-CNCGROUP source: APNIC
DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| rosefight.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
| rosefight.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| rosefight.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says
National Association of Boards of Pharmacy (NABP)
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 12.238.6.206 | United States (Indianapolis)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.36.166 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Rusty Cisneros Mon Jun 1 22:06:20 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.re3.yahoo.com from=sievi.fi; domainkeys=neutral (no sig); from=sievi.fi; dkim=neutral (no sig)
Received: from 12.238.6.206 (EHLO nlpi152.prodigy.net) (207.115.36.166)
by mta111.sbc.mail.re3.yahoo.com with SMTP; Mon, 01 Jun 2009 22:06:20 -0700
Received: from atvvzcc ([12.238.6.206])
by nlpi152.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5255p2w017612;
Tue, 2 Jun 2009 00:06:19 -0500
Message-ID: <000701c9e33f$ddcdb2e0$4a37416a@sievi.fi>
Reply-To: “Rusty Cisneros” rusty_cisnerostv@sievi.fi
From: “Rusty Cisneros” <rusty_cisnerostv@sievi.fi>
To: , , <rusty_cisnerostv@sievi.fi>
Subject: Get all the medications you want online!
Date: Tue, 02 Jun 2009 00:06:20 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 128
An Incredible Canadian Pharmacy is available at your Fingertips!
N0_Doctor_Needed! Click Here -> http://stickscale.com
| SmartFilter Category: | Not Categorized Make Category Suggestions |
| IPs: | 60.191.239.181 61.191.63.150 203.93.208.86 58.17.3.41 |
Address lookup
| canonical name | stickscale.com. |
| aliases | |
| addresses | 203.93.208.86 58.17.3.41 60.191.239.181 61.191.63.150 |
Queried whois.internic.net with “dom stickscale.com“…
Domain Name: STICKSCALE.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.RESTLOYAL.COM Name Server: NS2.RESTLOYAL.COM Name Server: SP66.DELETEDNS.COM Name Server: SP68.DELETEDNS.COM Status: ok Updated Date: 01-jun-2009 Creation Date: 31-may-2009 Expiration Date: 31-may-2010 >>> Last update of whois database: Wed, 03 Jun 2009 06:08:42 UTC <<<
Queried whois.paycenter.com.cn with “stickscale.com“…
Domain Name : stickscale.com PunnyCode : stickscale.com Registrant: Organization : HOUXINYI Name : HOUXINYI Address : FUNANLU154 City : xinyushi Province/State : jiangxisheng Country : china Postal Code : 338013 Administrative Contact: Name : HOUXINYI Organization : HOUXINYI Address : FUNANLU154 City : xinyushi Province/State : jiangxisheng Country : china Postal Code : 338013 Phone Number : 86-0790-54185069 Fax : 86-0790-54185069 Email : HOUXINYI@SINA.COM Technical Contact: Name : HOUXINYI Organization : HOUXINYI Address : FUNANLU154 City : xinyushi Province/State : jiangxisheng Country : china Postal Code : 338013 Phone Number : 86-0790-54185069 Fax : 86-0790-54185069 Email : HOUXINYI@SINA.COM Billing Contact: Name : HOUXINYI Organization : HOUXINYI Address : FUNANLU154 City : xinyushi Province/State : jiangxisheng Country : china Postal Code : 338013 Phone Number : 86-0790-54185069 Fax : 86-0790-54185069 Email : HOUXINYI@SINA.COM
Queried whois.apnic.net with “203.93.208.86“…
inetnum: 203.93.0.0 - 203.93.255.255 netname: UNICOM-CN descr: China Unicom IP network descr: China Unicom country: CN admin-c: CH1302-AP tech-c: CH1302-AP mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP mnt-routes: MAINT-CNCGROUP-RR status: ALLOCATED PORTABLE changed: hm-changed@apnic.net 20040116 changed: hm-changed@apnic.net 20060124 changed: hm-changed@apnic.net 20090507 changed: hm-changed@apnic.net 20090508 source: APNIC person: ChinaUnicom Hostmaster nic-hdl: CH1302-AP e-mail: abuse@chinaunicom.cn address: No.21,Jin-Rong Street address: Beijing,100140 address: P.R.China phone: +86-10-82993155 fax-no: +86-10-82993144 country: CN changed: abuse@chinaunicom.cn 20090408 mnt-by: MAINT-CNCGROUP source: APNIC
DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| stickscale.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
| stickscale.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| stickscale.com | IN | A | 61.191.63.150 | 3600s | (01:00:00) |
| stickscale.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 12.161.202.90 | United States (Neffs)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.36.137 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
From Brendan Collier Sun May 31 05:31:41 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=dck.com.ar; domainkeys=neutral (no sig); from=dck.com.ar; dkim=neutral (no sig)
Received: from 12.161.202.90 (EHLO nlpi123.prodigy.net) (207.115.36.137)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Sat, 30 May 2009 21:31:35 -0700
Received: from 5s9gclp ([12.161.202.90])
by nlpi123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4V4VGXY028689;
Sat, 30 May 2009 23:31:33 -0500
Message-ID: <000701c9e1eb$c0242c10$627e2ad2@dck.com.ar>
Reply-To: “Brendan Collier”
From: “Brendan Collier”
To: ,
Subject: great deals goin on
Date: Sun, 31 May 2009 08:31:41 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127
An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 66.147.35.66 | United States (Davenport)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.20.48 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
From Amparo Savage Fri May 29 11:46:23 2009
Return-Path:
Authentication-Results: mta102.sbc.mail.re3.yahoo.com from=blm.co.uk; domainkeys=neutral (no sig); from=blm.co.uk; dkim=neutral (no sig)
Received: from 66.147.35.66 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 22:35:52 -0700
Received: from tcdb592 (nsc66.147.35-66.newsouth.net [66.147.35.66])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4U5ZbWA013298;
Fri, 29 May 2009 22:35:52 -0700
Message-ID: <000701c9e08d$c3fa2150$627e2c7a@blm.co.uk>
Reply-To: “Amparo Savage” a.savage_go@blm.co.uk
From: “Amparo Savage” a.savage_go@blm.co.uk
To: ScamFraudAlert
Subject: Canadian Rx Medications to the rescue
Date: Fri, 29 May 2009 11:46:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127
An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com
Canadian Pharmacy – the worst Internet fraud problem today. These criminals steal identities and credit card details from unsuspecting customers, to use later to pay for tens of thousands of domain name registrations. Don’t be fooled.
Similar sites to this are listed in the spam trap report at
http://rss.uribl.com/ns/plumbold_com.html
Use complainterator.com to generate complaints to the registrars, and include a link to this page for evidence.Posted at 05/31/2009-12:43:06 AM by pharmalert, Experienced Reviewer
“Canadian Pharmacy” is a flagrant criminal operation that keeps opening thousands and thousands new sites promoting the same old illegal pharmaceuticals. You seldom see greedier scumbags than these criminals. They don’t care how much damage they cause to innocent people as long as they get all they want. No matter if people get seriously ill after taking their fake drugs, or lose their money after giving over their credit card details. This kind of scammers would be happy to sell their own mother for a quick buck (if they only had one).
It’s always better to stay far away from here and similar sites altogether. There’s no one on the face of earth who would gain by this scam but the criminals behind it, and possibly the poor schmucks who send all the spam for them. They think they are safe, but one day the tide will turn…
See evidence of fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/GlavmedPosted at 05/30/2009-08:56:12 PM by Nodus, Experienced Reviewer , View profile [ Reputation score: 9 / 9 ]
| canonical name | www.motherany.com. |
| aliases | |
| addresses | 58.17.3.41 60.191.239.181 61.191.63.150 203.93.208.86 |
Queried whois.internic.net with “dom motherany.com“…
Domain Name: MOTHERANY.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.PLUMBOLD.COM Name Server: NS2.PLUMBOLD.COM Name Server: NS3.MORALFLAIR.COM Name Server: NS4.MORALFLAIR.COM Status: ok Updated Date: 27-may-2009 Creation Date: 25-may-2009 Expiration Date: 25-may-2010 >>> Last update of whois database: Sun, 31 May 2009 18:19:27 UTC <<<
Queried whois.paycenter.com.cn with “motherany.com“…
Domain Name : motherany.com PunnyCode : motherany.com Registrant: Organization : LIUJIARONG Name : LIUJIARONG Address : JIULONGLU256 City : shaoyangshi Province/State : hunansheng Country : china Postal Code : 422064 Administrative Contact: Name : LIUJIARONG Organization : LIUJIARONG Address : JIULONGLU256 City : shaoyangshi Province/State : hunansheng Country : china Postal Code : 422064 Phone Number : 86-0739-75912657 Fax : 86-0739-75912657 Email : LIUJIARONG@263.COM Technical Contact: Name : LIUJIARONG Organization : LIUJIARONG Address : JIULONGLU256 City : shaoyangshi Province/State : hunansheng Country : china Postal Code : 422064 Phone Number : 86-0739-75912657 Fax : 86-0739-75912657 Email : LIUJIARONG@263.COM Billing Contact: Name : LIUJIARONG Organization : LIUJIARONG Address : JIULONGLU256 City : shaoyangshi Province/State : hunansheng Country : china Postal Code : 422064 Phone Number : 86-0739-75912657 Fax : 86-0739-75912657 Email : LIUJIARONG@263.COM
Queried whois.apnic.net with “58.17.3.41“…
inetnum: 58.17.3.32 - 58.17.3.47 netname: CHAOREN-CAFE country: CN descr: Superman Internet Cafe admin-c: CH444-AP tech-c: CH444-AP status: ASSIGNED NON-PORTABLE changed: wujiawei@china-netcom.com 20070427 mnt-by: MAINT-CNCGROUP-JX source: APNIC route: 58.17.0.0/17 descr: CNC Group CHINA169 Jiangxi Province Network country: CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR changed: abuse@cnc-noc.net 20060728 source: APNIC route: 58.17.0.0/17 descr: CNCGroup JiangXi province network country: CN origin: AS9929 mnt-by: MAINT-CNCGROUP-RR changed: abuse@cnc-noc.net 20050218 changed: hm-changed@apnic.net 20050331 source: APNIC person: CNCGroup Hostmaster nic-hdl: CH444-AP e-mail: abuse@cnc-noc.net address: No.156,Fu-Xing-Men-Nei Street, address: Beijing,100031,P.R.China phone: +86-10-82993155 fax-no: +86-10-82993144 country: CN changed: abuse@cnc-noc.net 20041220 mnt-by: MAINT-CNCGROUP source: APNIC
DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| http://www.motherany.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
| http://www.motherany.com | IN | A | 61.191.63.150 | 3600s | (01:00:00) |
| http://www.motherany.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
| http://www.motherany.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| motherany.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
| motherany.com | IN | A | 61.191.63.150 | 3600s | (01:00:00) |
| motherany.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
| motherany.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
— end —
RxPayouts.com 
http://www.rxpayouts.com
Internet,
U.S.A.
I am a member of the affiliate program of RxPayouts.com, which is an online pharmacy.
On Oct 24, I was shocked to learn that my account was suspended due to inactivity when my store have been consistently operating for more than a month now. I immediately tried to contact their affiliate support through phone and email but to no avail, until on Oct 27 when one of my employees was able to reach an affiliate support personnel by phone by the name of allen.
Allen basically said that my store does not exist. How can my store not exist when Rxpayouts own customer support knows us and we are still able to process orders.
Rxpayouts faked a suspension then removed my account when we are about to receive our USD 4000 commission. Rxpayouts stole my commissions! This company is scamming people and affiliates should know!
To prove that my store still operates here is a shipped out transaction, note that sensitive info have been removed:
——————————————————————
This email is to notify you that an order for your store
greensafemeds.com has been shipped, all the details
are shown below.
Order ID: #2852237
Order Date: 2008-10-23 15:27:25
You are receiving this email because your email address is registered in the
back office (((Redacted)))
If you do not wish to receive these notification emails you can leave
Notify email blank for this store. All notification emails arrive with the
subject prefix ‘Admin:’ allowing you to easily filter these messages if you
have a high volume store.
If you have any questions please contact us at any time, but not by using this
email as this email was sent to you by our systems.
Thanks — (((Redacted)))
Phillip yao
Manila
Philippines
Well they paid me for the USD 4000 a few weeks back. So I thought that the issue, whatever it was, was finally resolved.
Now three (3) weeks later and I have an unpaid commission of USD 8000+ and they won’t pay again.
They say I am under fraud investigation. They neglected to say what fraudulent act I supposedly did or that I was under investigation to begin with. If they want to put me under investigation, at the very least tell me so that I wouldn’t have wasted time selling their products.
It seems I am not the first to encounter this problem with Rxpayouts. It seems this is standard operation in our local industry. They have duped many affiliates.
Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says
Address lookup
canonical name simple-op.net. aliases http://www.simple-op.net addresses 195.95.155.3
Domain Whois record
Queried whois.internic.net with “dom simple-op.net“…
Domain Name: SIMPLE-OP.NET Registrar: ENOM, INC. Whois Server: whois.enom.com Referral URL: http://www.enom.com Name Server: NS1.NSCONTROL.COM Name Server: NS2.NSCONTROL.COM Name Server: NS3.NSCONTROL.COM Name Server: NS4.NSCONTROL.COM Name Server: NS5.NSCONTROL.COM Status: clientTransferProhibited Updated Date: 31-jul-2008 Creation Date: 06-jun-2008 Expiration Date: 06-jun-2011 >>> Last update of whois database: Sun, 31 May 2009 12:11:56 UTC <<<Queried whois.enom.com with “simple-op.net“…
Visit AboutUs.org for more information about simple-op.net <a href="http://www.aboutus.org/simple-op.net">AboutUs: simple-op.net</a> Registration Service Provided By: NameCheap.com Contact: support@NameCheap.com Visit: http://www.namecheap.com/ Domain name: simple-op.net Registrant Contact: WhoisGuard WhoisGuard Protected () Fax: 8939 S. Sepulveda Blvd. #110 - 732 Westchester, CA 90045 US Administrative Contact: WhoisGuard WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com) +1.6613102107 Fax: 8939 S. Sepulveda Blvd. #110 - 732 Westchester, CA 90045 US Technical Contact: WhoisGuard WhoisGuard Protected (81f0be3c32124e4a997ff56ef97e5155.protect@whoisguard.com) +1.6613102107 Fax: 8939 S. Sepulveda Blvd. #110 - 732 Westchester, CA 90045 US Status: Locked Name Servers: ns1.nscontrol.com ns2.nscontrol.com ns3.nscontrol.com ns4.nscontrol.com ns5.nscontrol.com Creation date: 06 Jun 2008 09:43:55 Expiration date: 06 Jun 2011 09:43:55 Get Noticed on the Internet! Increase visibility for this domain name by listing it at www.whoisbusinesslistings.comNetwork Whois record
Queried whois.ripe.net with “-B 195.95.155.3“…
% Information related to '195.95.155.0 - 195.95.155.255' inetnum: 195.95.155.0 - 195.95.155.255 netname: MSKCOM-NET descr: MoskvaCom Ltd country: RU org: ORG-ML114-RIPE admin-c: PG5690-RIPE tech-c: PG5690-RIPE status: ASSIGNED PI mnt-by: RIPE-NCC-HM-PI-MNT mnt-lower: RIPE-NCC-HM-PI-MNT mnt-by: MSKCOM-MNT mnt-routes: MSKCOM-MNT mnt-routes: AS2118-MNT mnt-domains: MSKCOM-MNT changed: dilotto@gmail.com 20090224 source: RIPE organisation: ORG-ML114-RIPE org-name: MoskvaCom Ltd org-type: OTHER address: Parusnyj pr. 49/2 address: Moscow, Russia phone: +7 910 4311272 e-mail: dilotto@gmail.com mnt-ref: MSKCOM-MNT mnt-by: MSKCOM-MNT changed: hostmaster@ripe.net 20090224 source: RIPE person: Pavel Gorbunov address: Parusnyj pr. 49/2 address: Moscow, Russia phone: +7 910 4311272 e-mail: dilotto@gmail.com nic-hdl: PG5690-RIPE mnt-by: MSKCOM-MNT changed: hostmaster@ripe.net 20090224 source: RIPE % Information related to '195.95.155.0/24AS2118' route: 195.95.155.0/24 descr: RusDesign Autonomous System origin: AS2118 notify: noc@relcom.net mnt-by: AS2118-MNT changed: andreyss@relcom.net 20090303 source: RIPEDNS records
DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError
name class type data time to live http://www.simple-op.net IN CNAME simple-op.net 60s (00:01:00) simple-op.net IN SOA
server: ns1.adverdomain.com email: root.simple-op.net serial: 2009030829 refresh: 28800 retry: 7200 expire: 604800 minimum ttl: 30 60s (00:01:00) simple-op.net IN NS ns4.nscontrol.com 60s (00:01:00) simple-op.net IN NS ns2.nscontrol.com 60s (00:01:00) simple-op.net IN NS ns5.nscontrol.com 60s (00:01:00) simple-op.net IN NS ns1.nscontrol.com 60s (00:01:00) simple-op.net IN NS ns3.nscontrol.com 60s (00:01:00) simple-op.net IN A 195.95.155.3 60s (00:01:00)
Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says
National Association of Boards of Pharmacy (NABP)
http://www.canadianpharmacyltd.com/?aid=6644
| canonical name | cheapfasteasy.info. |
| aliases | |
| addresses | 66.154.53.36 |
Queried whois.afilias.info with “cheapfasteasy.info“…
Domain ID:D24249387-LRMS Domain Name:CHEAPFASTEASY.INFO Created On:27-Mar-2008 13:56:30 UTC Last Updated On:09-Apr-2009 16:36:03 UTC Expiration Date:27-Mar-2010 13:56:30 UTC Sponsoring Registrar:Name.com LLC (R279-LRMS) Status:CLIENT TRANSFER PROHIBITED
Registrant ID:ncr-1910406-9413 Registrant Name:bodo unger Registrant Organization:bodo unger Registrant Street1:blk 1 door 1 consolation village Registrant City:cagayan de oro city Registrant State/Province:misamis oriental Registrant Postal Code:9000 Registrant Country:PH Registrant Phone:+63.9194311743 Registrant Email:bodounger@yahoo.de
Admin ID:nc-365243 Admin Name:bodo unger Admin Organization:bodo unger Admin Street1:blk 1 door 1 consolation village Admin City:cagayan de oro city Admin State/Province:misamis oriental Admin Postal Code:9000 Admin Country:PH Admin Phone:+63.9194311743 Admin Email:bodounger@yahoo.de
Billing ID:nc-365245 Billing Name:bodo unger Billing Organization:bodo unger Billing Street1:blk 1 door 1 consolation village Billing City:cagayan de oro city Billing State/Province:misamis oriental Billing Postal Code:9000 Billing Country:PH Billing Phone:+63.9194311743 Billing Email:bodounger@yahoo.de
Tech ID:nc-365244 Tech Name:bodo unger Tech Organization:bodo unger Tech Street1:blk 1 door 1 consolation village Tech City:cagayan de oro city Tech State/Province:misamis oriental Tech Postal Code:9000 Tech Country:PH Tech Phone:+63.9194311743 Tech Email:bodounger@yahoo.de Name Server:NS1.CONEPUPPY.COM Name Server:NS2.CONEPUPPY.COM
Network Whois record
Queried whois.arin.net with “66.154.53.36“…
OrgName: Cyber Wurx LLC OrgID: CPCW Address: 12430 Tesson Ferry Rd City: St Louis StateProv: MO PostalCode: 63128 Country: US NetRange: 66.154.0.0 - 66.154.95.255 CIDR: 66.154.0.0/18, 66.154.64.0/19 NetName: CONEPUPPY-COM NetHandle: NET-66-154-0-0-1 Parent: NET-66-0-0-0-0 NetType: Direct Allocation NameServer: NS1.CONEPUPPY.COM NameServer: NS2.CONEPUPPY.COM Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2001-07-20 Updated: 2003-08-20 RTechHandle: CS1169-ARIN RTechName: IP SUPPORT, Christopher RTechPhone: +1-404-681-9888 RTechEmail: ipsupport@cyberwurx.com OrgAbuseHandle: ABUSE2236-ARIN OrgAbuseName: Abuse Department OrgAbusePhone: +1-404-681-9888 OrgAbuseEmail: abuse@cyberwurx.com OrgTechHandle: NOC2137-ARIN OrgTechName: Network Operations Center OrgTechPhone: +1-404-681-9888 OrgTechEmail: routing@cyberwurx.com OrgTechHandle: IPALL4-ARIN OrgTechName: ipallocation OrgTechPhone: +1-404-681-9888 OrgTechEmail: arin@cyberwurx.com # ARIN WHOIS database, last updated 2009-05-29 20:00
| name | class | type | data | time to live | |||||||||||||||
| cheapfasteasy.info | IN | A | 66.154.53.36 | 86400s | (1.00:00:00) | ||||||||||||||
| cheapfasteasy.info | IN | SOA |
|
86400s | (1.00:00:00) | ||||||||||||||
| cheapfasteasy.info | IN | NS | ns1.conepuppy.com | 86400s | (1.00:00:00) | ||||||||||||||
| cheapfasteasy.info | IN | NS | ns2.conepuppy.com | 86400s | (1.00:00:00) | ||||||||||||||
| cheapfasteasy.info | IN | MX |
|
86400s | (1.00:00:00) | ||||||||||||||
| cheapfasteasy.info | IN | MX |
|
86400s | (1.00:00:00) | ||||||||||||||
| 36.53.154.66.in-addr.arpa | IN | PTR | bbwz.com | 86400s | (1.00:00:00) | ||||||||||||||
 odf@ideazeal.com |
|||
| Sat, May 30, 2009 at 1:03 PM |
|||
| subject | Love pill !! |
||
| canonical name | ideazeal.com. |
| aliases | |
| addresses | 60.191.239.181 61.191.63.150 203.93.208.86 58.17.3.41 |
Queried whois.internic.net with “dom ideazeal.com“…
Domain Name: IDEAZEAL.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.IDEAZEAL.COM Name Server: NS2.IDEAZEAL.COM Name Server: NS3.IDEAZEAL.COM Name Server: NS4.IDEAZEAL.COM Status: ok Updated Date: 30-may-2009 Creation Date: 27-may-2009 Expiration Date: 27-may-2010 >>> Last update of whois database: Sat, 30 May 2009 21:11:46 UTC <<<
Queried whois.paycenter.com.cn with “ideazeal.com“…
Domain Name : ideazeal.com PunnyCode : ideazeal.com Registrant: Organization : CAI JIAHAO Name : CAI JIAHAO Address : JIULONGLU256 City : luoyangshi Province/State : henansheng Country : china Postal Code : 471029 Administrative Contact: Name : CAI JIAHAO Organization : CAI JIAHAO Address : JIULONGLU256 City : luoyangshi Province/State : henansheng Country : china Postal Code : 471029 Phone Number : 86-0379-72154305 Fax : 86-0379-72154305 Email : CAIJIAHAO@126.COM Technical Contact: Name : CAI JIAHAO Organization : CAI JIAHAO Address : JIULONGLU256 City : luoyangshi Province/State : henansheng Country : china Postal Code : 471029 Phone Number : 86-0379-72154305 Fax : 86-0379-72154305 Email : CAIJIAHAO@126.COM Billing Contact: Name : CAI JIAHAO Organization : CAI JIAHAO Address : JIULONGLU256 City : luoyangshi Province/State : henansheng Country : china Postal Code : 471029 Phone Number : 86-0379-72154305 Fax : 86-0379-72154305 Email : CAIJIAHAO@126.COM
Queried whois.apnic.net with “60.191.239.181“…
inetnum: 60.191.239.0 - 60.191.239.255 netname: JINHUA-TELECOM-LTD country: CN descr: Jinhua Telecom Co.,ltd descr: admin-c: LW945-AP tech-c: CJ54-AP status: ASSIGNED NON-PORTABLE changed: auto-dbm@dcb.hz.zj.cn 20060824 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC role: CHINANET-ZJ Jinhua address: No.155 Xishi street,Jinhua,Zhejiang.321000 country: CN phone: +86-579-2300779 fax-no: +86-579-2330035 e-mail: anti_spam@mail.jhptt.zj.cn trouble: send spam reports to anti_spam@mail.jhptt.zj.cn trouble: and abuse reports to anti_spam@mail.jhptt.zj.cn trouble: Please include detailed information and times in UTC admin-c: CH55-AP tech-c: CH55-AP nic-hdl: CJ54-AP mnt-by: MAINT-CHINANET-ZJ changed: master@dcb.hz.zj.cn 20031204 source: APNIC person: Lujiang Wang nic-hdl: LW945-AP e-mail: anti_spam@mail.jhptt.zj.cn address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000 phone: +86-579-3285460 country: CN changed: auto-dbm@dcb.hz.zj.cn 20060824 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC
DNS query for 181.239.191.60.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |
| ideazeal.com | IN | A | 61.191.63.150 | 3600s | (01:00:00) |
| ideazeal.com | IN | A | 203.93.208.86 | 3600s | (01:00:00) |
| ideazeal.com | IN | A | 60.191.239.181 | 3600s | (01:00:00) |
| ideazeal.com | IN | A | 58.17.3.41 | 3600s | (01:00:00) |
http://find-mortgage-refinance.netsearchworld.com
Visit AboutUs.org for more information about netsearchworld.com
<a href=”http://www.aboutus.org/netsearchworld.com”>AboutUs: netsearchworld.com</a>
Registration Service Provided By: –
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com
Domain name: netsearchworld.com
Registrant Contact:
Nexton Limited
Whois Agent ()
Fax:
Irpinskaya 69
Kiev, 03142
UA
Administrative Contact:
Nexton Limited
Whois Agent (support@ruler-domains.com)
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA
Technical Contact:
Nexton Limited
Whois Agent (support@ruler-domains.com)
+380993161649
Fax: +380993161649
Irpinskaya 69
Kiev, 03142
UA
Status: Locked
Name Servers:
ns1.NetSearchWorld.com
ns2.NetSearchWorld.com
Creation date: 27 Apr 2009 09:18:15
Expiration date: 27 Apr 2010 09:18:15
| IP Location: |  Korea, Republic Of Seoul Krnic |
| Resolve Host: | static.211-232-69-115.nexg.net |
| IP Address: | 211.232.69.115      |
| Blacklist Status: | Clear |
inetnum: 211.232.0.0 – 211.255.255.255
netname: KRNIC-KR
descr: KRNIC
descr: Korea Network Information Center
country: KR
admin-c: HM127-AP
tech-c: HM127-AP
remarks: ******************************************
remarks: KRNIC is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the KRNIC Whois DB
remarks: http://whois.nic.or.kr/english/index.html
remarks: ******************************************
mnt-by: APNIC-HM
mnt-lower: MNT-KRNIC-AP
changed: 20000908
changed: 20010627
status: ALLOCATED PORTABLE
source: APNIC
person: Host Master
address: 11F, KTF B/D, 1321-11, Seocho2-Dong, Seocho-Gu,
address: Seoul, Korea, 137-857
country: KR
phone: +82-2-2186-4500
fax-no: +82-2-2186-4496
e-mail:
nic-hdl: HM127-AP
mnt-by: MNT-KRNIC-AP
changed: 20020507
source: APNIC
inetnum: 211.232.0.0 – 211.232.191.255
netname: VAAN-KR
descr: NexG
country: KR
admin-c: LS151-KR
tech-c: LS151-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed:
———————————————–
Queried Domain Information as follows
———————————————–
Domain Name : nexg.net
::Registrant::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998
::Administrative Contact::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998
::Technical Contact::
Name : NexG, Inc.
Email : domain@nexg.net
Address : #2023 Hyundai Venturevill 713 Suso-dong, Kangnam-gu, Seoul
Zipcode : 135884
Nation : KR
Tel : 82-02-577-8426
Fax : 82-02-571-8998
::Name Servers::
ns1.nexg.net 211.232.190.2
dc1.nexg.net 211.232.191.2
::Dates & Status::
Created Date 2001-10-29 04:43:11 EST
Updated Date 2008-10-10 11:32:39 EDT
Valid Date 2013-10-29 03:43:11 EST
Status ACTIVE
Fast-online-refills.com is an Unapproved Internet Pharmacy: LegitScript has reviewed this Internet pharmacy and determined that it does not meet LegitScript Internet pharmacy verification standards.
Additionally, LegitScript has determined that this pharmacy website meets our definition of a “Rogue Internet Pharmacy”.
Rogue Internet pharmacy (definition):
A pharmacy website that intentionally or knowingly:
| URL: | http://www.fast-online-refills.com |
|---|---|
| Registrar: | Key-Systems |
| Approval Status: |  rogue (since 07/31/2009) |
| Online Status: |  online |
This site seems to be part of the Stimul-Cash network.
Stimul-Cash is a rogue Internet pharmacy affiliate program. Websites affiliated with this network admit offering prescription drugs from overseas without a valid prescription (which violates multiple US laws). Stimul-Cash’s website claims that the drugs come from India. However, India is known to be a source of illicit, sometimes counterfeit or adulterated, medicines.
Stimul-Cash’s forums are in Russian, which suggests that the operation is not actually run by Indians, but that the network may be linked to an organization in Russia. Additionally, Stimul-Cash appears to be linked to Rx-Partners.biz, another rogue online pharmacy network.
eSoft provided me with data on seven different templates they have discovered. The quantity is amazing. In four days last week they detected:
1,104 canadian_pharm_light_blue
993 canadian_pharm_blue
27 top_pharmacy
23 canadian_pharm_white
18 health_sol
6 canadian_pharm_blue2
1 canadian_pharm_p_images
That is 543 of these sites per day over four days — and only for these seven templates.
“The canadian_* templates are clearly the most prevalent and we have traced these back to “GlavMed”, which we believe operates out of the Russian Business Network and is likely tied to the Russian mafia. The GlavMed hosts tend to stay online for no more than a couple of weeks.”
The other major outfit is Rx Partners/Rx-Commission Networks/ Stimul Cash and they have websites:
http://www.rx-partners.biz
http://www.stimul-cash.com/sites.html
Here are some recent (last 4 days) examples of these sites
www.stimul-cash.com stimul-media.com Centralux Limited
Affiliation system for the sale of drugs
many spams Viagra type appear to be linked to these sites
www.stimul-cash.com 91.199.112.5
Stimuli-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, 16 appt. 123 Moscow, Moscow 125414 RU +7.9160248086
Skype: Inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501
hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus
| canonical name | stimul-media.com. |
| aliases | |
| addresses | 88.85.65.160 |
Queried whois.internic.net with “dom stimul-media.com“…
Domain Name: STIMUL-MEDIA.COM
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Name Server: NS1.STIMUL-MEDIA.COM
Name Server: NS2.STIMUL-MEDIA.COM
Status: clientTransferProhibited
Updated Date: 13-apr-2009
Creation Date: 18-apr-2006
Expiration Date: 18-apr-2011
>>> Last update of whois database: Sun,
24 May 2009 19:28:00 UTC
Queried whois.rrpproxy.net with “stimul-media.com“…
DOMAIN: STIMUL-MEDIA.COM
RSP: domaindiscount24.com
URL: http://www.dd24.net
owner-contact: P-AMM1304
owner-organization: STIMUL-MEDIA.COM
owner-fname: Asiyat
owner-lname: Marysheva
owner-street: Petrozavodskaya st, 16, appt. 123
owner-city: Moscow
owner-zip: 125414
owner-country: RU
owner-phone: 79160248086
owner-email: marysheva@yahoo.com
admin-contact: P-AMM1304
admin-organization: STIMUL-MEDIA.COM
admin-fname: Asiyat
admin-lname: Marysheva
admin-street: Petrozavodskaya st, 16, appt. 123
admin-city: Moscow
admin-zip: 125414
admin-country: RU
admin-phone: 79160248086
admin-email: marysheva@yahoo.com
tech-contact: P-AMM1304
tech-organization: STIMUL-MEDIA.COM
tech-fname: Asiyat
tech-lname: Marysheva
tech-street: Petrozavodskaya st, 16, appt. 123
tech-city: Moscow
tech-zip: 125414
tech-country: RU
tech-phone: 79160248086
tech-email: marysheva@yahoo.com
billing-contact: P-AMM1304
billing-organization: STIMUL-MEDIA.COM
billing-fname: Asiyat
billing-lname: Marysheva
billing-street: Petrozavodskaya st, 16, appt. 123
billing-city: Moscow
billing-zip: 125414
billing-country: RU
billing-phone: 79160248086
billing-email: marysheva@yahoo.com
nameserver: ns1.stimul-media.com 88.85.65.160
nameserver: ns2.stimul-media.com
Queried whois.ripe.net with “-B 88.85.65.160“…
Information related to ‘88.85.64.0 – 88.85.71.255’
inetnum: 88.85.64.0 – 88.85.71.255
netname: WEBAZILLA
descr: WebaZilla
country: NL
admin-c: WZNL1-RIPE
tech-c: WZNL1-RIPE
status: ASSIGNED PA
mnt-by: WZNET-MNT
mnt-routes: WZNET-MNT
changed: bk@webazilla.com 20070209
source: RIPE
role: WebaZilla RIPE Manager
address: WebaZilla B.V.
address: Postbus 19115
address: 3501DC Utrecht
address: Netherlands
phone: +31612253464
fax-no: +31303100299
e-mail: noc@webazilla.com
mnt-by: WZNET-MNT
admin-c: BK5536-RIPE
tech-c: BK5536-RIPE
tech-c: KV1670-RIPE
nic-hdl: WZNL1-RIPE
changed: bk@webazilla.com 20070718
source: RIPE
% Information related to ‘88.85.64.0/19AS35415’
route: 88.85.64.0/19
descr: WEBAZILLA
origin: AS35415
mnt-by: WZNET-MNT
changed: bk@webazilla.com 20060728
source: RIPE
DNS query for 160.65.85.88.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |||||||||||||||
| stimul-media.com | IN | MX |
|
3600s | (01:00:00) | ||||||||||||||
| stimul-media.com | IN | SOA |
|
3600s | (01:00:00) | ||||||||||||||
| stimul-media.com | IN | NS | ns2.stimul-media.com | 3600s | (01:00:00) | ||||||||||||||
| stimul-media.com | IN | NS | ns1.stimul-media.com | 3600s | (01:00:00) | ||||||||||||||
| stimul-media.com | IN | A | 88.85.65.160> | ||||||||||||||||
CaCeWeb.com
Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says
National Association of Boards of Pharmacy (NABP)
A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–> Vitalideal . com
A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–> Vitalideal.com
Address lookup
| canonical name | vitalideal.com |
| aliases | |
| addresses | 60.191.239.189 |
Queried whois.internic.net with “dom vitalideal.com“…
Domain Name: VITALIDEAL.COM Registrar: XIN NET TECHNOLOGY CORPORATION Whois Server: whois.paycenter.com.cn Referral URL: http://www.xinnet.com Name Server: NS1.PRIDEEASY.COM Name Server: NS2.PRIDEEASY.COM Name Server: NS3.GRATEFULFACT.COM Name Server: NS4.GRATEFULFACT.COM Status: ok Updated Date: 22-may-2009 Creation Date: 20-may-2009 Expiration Date: 20-may-2010 >>> Last update of whois database: Sun, 24 May 2009 09:48:41 UTC <<<
Queried whois.paycenter.com.cn with “vitalideal.com“…
Domain Name : vitalideal.com PunnyCode : vitalideal.com Registrant: Organization : BAI ZIRONG Name : BAI ZIRONG Address : CHANGFENGLU51 City : jianshi Province/State : jiangxisheng Country : china Postal Code : 343106 Administrative Contact: Name : BAI ZIRONG Organization : BAI ZIRONG Address : CHANGFENGLU51 City : jianshi Province/State : jiangxisheng Country : china Postal Code : 343106 Phone Number : 86-0796-65402651 Fax : 86-0796-65402651 Email : BAIZIRONG@SINA.COM Technical Contact: Name : BAI ZIRONG Organization : BAI ZIRONG Address : CHANGFENGLU51 City : jianshi Province/State : jiangxisheng Country : china Postal Code : 343106 Phone Number : 86-0796-65402651 Fax : 86-0796-65402651 Email : BAIZIRONG@SINA.COM Billing Contact: Name : BAI ZIRONG Organization : BAI ZIRONG Address : CHANGFENGLU51 City : jianshi Province/State : jiangxisheng Country : china Postal Code : 343106 Phone Number : 86-0796-65402651 Fax : 86-0796-65402651 Email : BAIZIRONG@SINA.COM
Queried whois.apnic.net with “60.191.239.189“…
inetnum: 60.191.239.0 - 60.191.239.255 netname: JINHUA-TELECOM-LTD country: CN descr: Jinhua Telecom Co.,ltd descr: admin-c: LW945-AP tech-c: CJ54-AP status: ASSIGNED NON-PORTABLE changed: auto-dbm@dcb.hz.zj.cn 20060824 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC role: CHINANET-ZJ Jinhua address: No.155 Xishi street,Jinhua,Zhejiang.321000 country: CN phone: +86-579-2300779 fax-no: +86-579-2330035 e-mail: anti_spam@mail.jhptt.zj.cn trouble: send spam reports to anti_spam@mail.jhptt.zj.cn trouble: and abuse reports to anti_spam@mail.jhptt.zj.cn trouble: Please include detailed information and times in UTC admin-c: CH55-AP tech-c: CH55-AP nic-hdl: CJ54-AP mnt-by: MAINT-CHINANET-ZJ changed: master@dcb.hz.zj.cn 20031204 source: APNIC person: Lujiang Wang nic-hdl: LW945-AP e-mail: anti_spam@mail.jhptt.zj.cn address: NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000 phone: +86-579-3285460 country: CN changed: auto-dbm@dcb.hz.zj.cn 20060824 mnt-by: MAINT-CN-CHINANET-ZJ-JH source: APNIC
DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError
From Stanley Garza Sat May 23 18:12:49 2009
Return-Path:
Authentication-Results: mta168.sbc.mail.mud.yahoo.com from=st-and.ac.uk; domainkeys=neutral (no sig); from=st-and.ac.uk; dkim=neutral (no sig)
Received: from 190.218.142.211 (EHLO nlpi048.prodigy.net) (207.115.36.77)
by mta168.sbc.mail.mud.yahoo.com with SMTP; Sat, 23 May 2009 20:26:05 -0700
Received: from 42wac22 ([190.218.142.211])
by nlpi048.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4O3Pmlf017046;
Sat, 23 May 2009 22:26:01 -0500
Message-ID: <000701c9dc0c$c15f3410$627e269a@st-and.ac.uk>
Reply-To: “Stanley Garza”
From: “Stanley Garza”
To: , ,
Subject: Get all the medications you want online!
Date: Sun, 24 May 2009 09:12:49 +0800
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 163
scamFRAUDalert®Pharmacies Checker 