Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162

Canadian Pharmacy – online-tabs.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

CANADIAN PHARMACY-McCann Schoolonline tablet

Address lookup

canonical name online-tabs.net.
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
online-tabs.net IN SOA
server: ns1.nscontrol.com
email: root.online-tabs.net
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
online-tabs.net IN A 195.95.155.3 60s (00:01:00)
online-tabs.net IN NS ns2.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns3.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns5.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns4.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns1.nscontrol.com 60s (00:01:00)

— end —

Canadian Pharmacy – CANADIAN-DRUG-SHOP.COM

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

canadian-drugshop

Address lookup

canonical name canadian-drug-shop.com.
aliases
addresses 69.46.228.186

Domain Whois record

Queried whois.internic.net with “dom canadian-drug-shop.com“…

   Domain Name: CANADIAN-DRUG-SHOP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.PARKED.COM
   Name Server: NS2.PARKED.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 25-jun-2008
   Creation Date: 29-jul-2002
   Expiration Date: 29-jul-2011

Last update of whois database: Sun, 02 Aug 2009 16:49:35 UTC <<<

Queried whois.godaddy.com with “canadian-drug-shop.com“…

Registrant:
   RUMIT SAHNI

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: CANADIAN-DRUG-SHOP.COM

   Domain servers in listed order:
      NS1.PARKED.COM
      NS2.PARKED.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-69-46-226-0-1“…

OrgName:    Parked.com, LLC
OrgID:      PARKE-19
Address:    5505 West Gray Street
City:       Tampa
StateProv:  FL
PostalCode: 33609
Country:    US

NetRange:   69.46.226.0 - 69.46.228.255
CIDR:       69.46.226.0/23, 69.46.228.0/24
OriginAS:   AS11575
NetName:    PARKED1
NetHandle:  NET-69-46-226-0-1
Parent:     NET-69-46-224-0-1
NetType:    Reallocated
NameServer: NS0.ZIPA.COM
NameServer: NS1.ZIPA.COM
Comment:
RegDate:    2007-10-23
Updated:    2007-10-23

RNOCHandle: NETWO2072-ARIN
RNOCName:   Network Administrator
RNOCPhone:  +1-813-386-2801
RNOCEmail:  netadmin@parked.com 

OrgTechHandle: DOMAI142-ARIN
OrgTechName:   Domain Administrator
OrgTechPhone:  +1-813-386-2801
OrgTechEmail:  admin@parked.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name class type data time to live
canadian-drug-shop.com IN SOA
server: ns1.parked.com
email: admin.parked.com
serial: 2008062520
refresh: 28800
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
canadian-drug-shop.com IN A 69.46.228.186 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns1.parked.com 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns2.parked.com 86400s (1.00:00:00)
186.228.46.69.in-addr.arpa IN PTR 69-46-228-186.parked.com 86400s (1.00:00:00)

— end —

CANADIAN-DRUG-SHOP.COM is involved in a MASSIVE SPAM operation and is a menace to the internet.

Canadian Pharmacy Spam Servers – rx-partners. biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: dns2.onlinemedson.net
ns0.rx-sharedhost.com
ns0.rxp-hosting.com
ns1.edportu.com
ns1.partners-dns.com
ns1.viagravendita.com
ns2.bestpharm.org
ns2.drugs-on.net
ns2.edportu.com
ns2.esfarmaciaonline.com
ns2.genericdrugson.net
ns2.healthproductson.net
ns2.medications-on.net
ns2.medsshop.org
ns3.cesaonline.net
whatever.rxp-alive.com
Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com
buyusarx.com
edcustomer.com
enjoymeds.com
hoodiaweightlosstablets.com
longlovetabs.com
medextreme.com
medsjoy.com
pillsfm.com
rxfeel.com
rxfeeling.com
rxp-hosting.com
rxparty.com
farmacia-es.com
linkzpage.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
114.92.205.227 China* Whois Google DNSStuff Urgentmessage.org
207.115.20.18 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name flowersuffix.com.
aliases
addresses 203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com


Rogue Pharmacy Websites – Pharmacy Checker

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):
24hsmeds.com
Amerisur.net
Buyphentermine4u.com
Buypillsonline.biz (“Canadian Pharmacy”)
BuyAmoxilOnline.PillsConcepts.info
Canadapharmacyline.com (“Canadian Pharmacy”)
Canadianmedsworld.com (“Canadian Meds”)
Canadianpharmacyltd.com (“Canadian Pharmacy”)
Cheap-pharmacy.us (“Canadian Health & Care Mail”)
Cod-rx.com
Dragon-rx.com
Eagle-meds.com (“US Drugstore”)
Edfriends.org (“Reliable Meds”)
Getlowdrugs.com (“US Drugstore”)
Gimmepills.com (Canadian Rx Drugs”)
Globalaccessrx.com
Globalrxpharmacy.net
Hyth.us
Lom-5.co.cc
Licensed-Rx.com
Max-pharm.com
Medsranch.com
My-pharm.com
Newcanadianhealthcare.com
Online-the.com/
OvernightMedsDirect.net
Pharmacynorthamerica.com
Pharmtransit.com
Pillzcctop.com (“US HealthCare Inc”)
Qualitygenerics.com
Rx-life.com
Rxpharma24hs.com
Shop.edmedsonline.com (“Canadian Pharmacy”)
Shoprxtoday.com
Thecanadianmeds.com (“Canadian Pharmacy”)
Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)
TrustedMedsMD.com
Us-rx-meds.com
Value-generics.com (“Generic Pharmacy”)
Value-pharm.com
Wholesale-generics.com
Xlpharmacy.com



Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)
Allrxonline.net
ApplyEdPills.info
Atterack.com (“My Canadian Pharmacy”)
Bestedmeds.com (“Canadian Pharmacy”)
Canadianmedsnow.com (“Canadian Pharmacy”)
Canadianpharmdirect.com (“Canadian Pharmacy”)
Canadianpharmacylive.com (“Canadian Family Pharmacy”)
Canapharmstore.com (“Canadian Health Center”)
Cheapviagstarmed.info
Directmedswhere.com (“Canadian Pharmacy”)
Drug-online.org (“Canadian Pharmacy”)
Fit-pharmacy.com
Generic365.com
Getfamilymedicines.com (“Canadian Health & Care Mall”)
Hot-drug.com (“Canadian Rx Drugs”)
Hotgrandpharm.com (“US Drugs”)
Interpill.com
Irontold.com (“Canadian Pharmacy”)
Jusikelsk.com (“US Healthcare, Inc”)
Laicsownsew.com (“World Pharmacy”)
Licensed-meds.com
Mantipu.com_world_drugs.com
Medicaldiscountrx.net
Meds35.com (“My Canadian Pharmacy”)
Medsmaster.com (“Official Medicines”)
Medsworldwidenetwork.com
Miztrust.cn (“My Canadian Pharmacy”)
Nextairsalepharm.com (“Canadian Health & Care Mall”)
Nextbestpharm.com (“My Canadian Pharmacy”)
Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)
Onlinepharmcanada.com (“Official Medicines”)
Ottowadrugs.com (“Canadian Pharmacy”)
Ourglobalpharm.com (“World Pharmacy”)
Pharmasavers.com
Phshuue.com (“U.S. Healthcare, Inc”)
Piromeds.com (“Drug Store”)
Pot-1.co.cc
Pot-7.co.cc
Poispp.com (“My Canadian Pharmacy”)
Premierpharmacy.net
Presidentrx.com
Proovernightpharm.com (“US Drugs”)
Qualitycandianmeds.com (“Canadian Pharmacy”)
Quickeasymed.com
Realairmentablets.com (“US Drugs”)
Rx-pillssshop.com (“Canadian Rx Drugs”)
Rx-toronto.net (“My Canadian Pharmacy”)
Targetpluspharma.com (“Canadian Health Care”)
Topcheappills.com (“Toronto Pharmacy”)
Topratedmedication.com (“Toronto Pharmacy”)
Turkbine.com (“Canadian Healthcare”)
Universallydrugstore.com (“Canadian Pharmacy”)
Viagraorder.org (“Canadian Pharmacy”)
Webdrugs.biz (“Canadian Pharmacy”)
Weekrequire.com (“Canadian Pharmacy”)
Worldshippingmeds.com



PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

  • Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
  • Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
  • Stealing people’s financial information.
  • Charging a consumer’s credit card without ever sending the purchased product (s).
  • Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
  • Selling prescription drugs, whether real or fake, without requiring a prescription.
  • Not responding to a consumer’s email or phone call after they have ordered a product.
  • Providing false contact information.
  • Selling a customer’s personal information to third parties without their consent.
  • Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.



We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS


On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Pharmacy – safe-supplier.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

safe-supplier

Address lookup

canonical name safe-supplier.com.
aliases http://www.safe-supplier.com
addresses 72.167.131.144

Domain Whois record

Queried whois.internic.net with “dom safe-supplier.com“…

   Domain Name: SAFE-SUPPLIER.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS51.DOMAINCONTROL.COM
   Name Server: NS52.DOMAINCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 29-may-2009
   Creation Date: 15-mar-2007
   Expiration Date: 15-mar-2011

>>> Last update of whois database: Tue, 30 Jun 2009 04:16:27 UTC <<<

Queried whois.enom.com with “safe-supplier.com“…

Visit AboutUs.org for more information about safe-supplier.com
<a href="http://www.aboutus.org/safe-supplier.com">AboutUs: safe-supplier.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: safe-supplier.com

Registrant Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali ()

   Fax:
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Administrative Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Technical Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Status: Locked

Name Servers:
   ns51.domaincontrol.com
   ns52.domaincontrol.com

Creation date: 15 Mar 2007 10:44:00
Expiration date: 15 Mar 2011 10:44:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “72.167.131.144“…

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US

NetRange:   72.167.0.0 - 72.167.255.255
CIDR:       72.167.0.0/16
OriginAS:   AS26496
NetName:    GO-DADDY-SOFTWARE-INC
NetHandle:  NET-72-167-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate:    2007-07-05
Updated:    2008-01-18

RAbuseHandle: ABUSE51-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-480-624-2505
RAbuseEmail:  abuse@godaddy.com 

RNOCHandle: NOC124-ARIN
RNOCName:   Network Operations Center
RNOCPhone:  +1-480-505-8809
RNOCEmail:  noc@godaddy.com 

RTechHandle: NOC124-ARIN
RTechName:   Network Operations Center
RTechPhone:  +1-480-505-8809
RTechEmail:  noc@godaddy.com 

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809
OrgNOCEmail:  noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809
OrgTechEmail:  noc@godaddy.com

# ARIN WHOIS database, last updated 2009-06-29 20:00

DNS records

name class type data time to live
http://www.safe-supplier.com IN CNAME safe-supplier.com 3599s (00:59:59)
safe-supplier.com IN SOA
server: ns51.domaincontrol.com
email: dns.jomax.net
serial: 2009052800
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
safe-supplier.com IN A 72.167.131.144 3600s (01:00:00)
safe-supplier.com IN NS ns51.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN NS ns52.domaincontrol.com 3600s (01:00:00)
safe-supplier.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
safe-supplier.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
144.131.167.72.in-addr.arpa IN PTR p3slh180.shr.phx3.secureserver.net 3600s (01:00:00)

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
80.244.229.67 Russian Federation (Moscow)* Whois Google DNSStuff Urgentmessage.org
6.5.4.3 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to ScamFraudAlert@gmail.com
date Mon, Jun 29, 2009 at 2:16 AM
subject Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA

Canadian Pharmacy Spam – Vitalideal.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal . com 

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–>  Vitalideal.com

WhoIs Lookup

Address lookup

canonical name vitalideal.com
aliases  
addresses 60.191.239.189

Domain Whois record

Queried whois.internic.net with “dom vitalideal.com“…

   Domain Name: VITALIDEAL.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PRIDEEASY.COM
   Name Server: NS2.PRIDEEASY.COM
   Name Server: NS3.GRATEFULFACT.COM
   Name Server: NS4.GRATEFULFACT.COM
   Status: ok
   Updated Date: 22-may-2009
   Creation Date: 20-may-2009
   Expiration Date: 20-may-2010

>>> Last update of whois database: Sun, 24 May 2009 09:48:41 UTC <<<

Queried whois.paycenter.com.cn with “vitalideal.com“…

Domain Name      : vitalideal.com
PunnyCode        : vitalideal.com

Registrant:
  Organization   : BAI ZIRONG
  Name           : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106

Administrative Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Technical Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Billing Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

190.218.142.211From Stanley Garza Sat May 23 18:12:49 2009 
Return-Path: 
Authentication-Results: mta168.sbc.mail.mud.yahoo.com from=st-and.ac.uk; domainkeys=neutral (no sig); from=st-and.ac.uk; dkim=neutral (no sig) 
Received: from 190.218.142.211 (EHLO nlpi048.prodigy.net) (207.115.36.77
by mta168.sbc.mail.mud.yahoo.com with SMTP; Sat, 23 May 2009 20:26:05 -0700 
Received: from 42wac22 ([190.218.142.211]) 
by nlpi048.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4O3Pmlf017046; 
Sat, 23 May 2009 22:26:01 -0500 
Message-ID: <000701c9dc0c$c15f3410$627e269a@st-and.ac.uk> 
Reply-To: “Stanley Garza” 
From: “Stanley Garza” 
To: , , 
Subject: Get all the medications you want online! 
Date: Sun, 24 May 2009 09:12:49 +0800 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 163