Canadian Pharmacy Spam – smilewhere.com

August 10, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name	smilewhere.com.
aliases
addresses	203.93.208.86 218.75.144.6 220.196.59.35 91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name	class	type	data	time to live
smilewhere.com	IN	A	218.75.144.6	3600s	(01:00:00)
smilewhere.com	IN	A	220.196.59.35	3600s	(01:00:00)
smilewhere.com	IN	A	91.213.33.10	3600s	(01:00:00)
smilewhere.com	IN	A	203.93.208.86	3600s	(01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]…

hop

rtt

ip address

fully qualified domain name

70.84.211.97

61.d3.5446.static.theplanet.com

70.87.254.5

po101.dsr02.dllstx5.theplanet.com

70.85.127.109

po52.dsr02.dllstx3.theplanet.com

70.87.253.17

et3-2.ibr03.dllstx3.theplanet.com

208.172.139.129

cr1-tengig0-7-3-0.dallas.savvis.net

204.70.196.153

cr1-tengig-0-7-0-0.losangeles.savvis.net

62.156.128.57

212

217.239.41.102

208

217.6.49.182

208

210.53.126.1

213

210.52.132.229

213

218.105.5.81

222

223

210.52.132.210

1p0-gsr2-cs1.cncnet.net

235

238

236

210.53.53.58

248

220.248.161.178

225

203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut

SMTP – 25 Error: ConnectionRefused

HTTP – 80 HTTP/1.1 200 OK Server: nginx/0.8.4 Date: Mon, 10 Aug 2009 15:21:47 GMT Content-Type: text/html Content-Length: 27598 Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT Connection: close Accept-Ranges: bytes

POP3 – 110 Error: ConnectionRefused

IMAP – 143 Error: ConnectionRefused

— end —

Canadian Pharmacy – greatestrxhere.com

August 7, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.

A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
72.253.69.127	United States (Hana)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.195	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap” <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap” <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
72.149.17.130	United States (Miami)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.150	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link” <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link” <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
216.229.13.68	United States (Lincoln)*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.116	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran” <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran” <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
174.6.184.130	Canada*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.36.153	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier” <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier” <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162

Canadian Pharmacy – online-tabs.net

August 2, 20091 Comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

Address lookup

canonical name	online-tabs.net.
aliases
addresses	195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name

class

type

data

time to live

online-tabs.net

SOA

server:	ns1.nscontrol.com
email:	root.online-tabs.net
serial:	2007100801
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	30

60s

(00:01:00)

online-tabs.net

195.95.155.3

60s

(00:01:00)

online-tabs.net

ns2.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns3.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns5.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns4.nscontrol.com

60s

(00:01:00)

online-tabs.net

ns1.nscontrol.com

60s

(00:01:00)

— end —

Canadian Pharmacy – CANADIAN-DRUG-SHOP.COM

August 2, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Address lookup

canonical name	canadian-drug-shop.com.
aliases
addresses	69.46.228.186

Domain Whois record

Queried whois.internic.net with “dom canadian-drug-shop.com“…

   Domain Name: CANADIAN-DRUG-SHOP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.PARKED.COM
   Name Server: NS2.PARKED.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 25-jun-2008
   Creation Date: 29-jul-2002
   Expiration Date: 29-jul-2011

Last update of whois database: Sun, 02 Aug 2009 16:49:35 UTC <<<

Queried whois.godaddy.com with “canadian-drug-shop.com“…

Registrant:
   RUMIT SAHNI

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: CANADIAN-DRUG-SHOP.COM

   Domain servers in listed order:
      NS1.PARKED.COM
      NS2.PARKED.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-69-46-226-0-1“…

OrgName:    Parked.com, LLC
OrgID:      PARKE-19
Address:    5505 West Gray Street
City:       Tampa
StateProv:  FL
PostalCode: 33609
Country:    US

NetRange:   69.46.226.0 - 69.46.228.255
CIDR:       69.46.226.0/23, 69.46.228.0/24
OriginAS:   AS11575
NetName:    PARKED1
NetHandle:  NET-69-46-226-0-1
Parent:     NET-69-46-224-0-1
NetType:    Reallocated
NameServer: NS0.ZIPA.COM
NameServer: NS1.ZIPA.COM
Comment:
RegDate:    2007-10-23
Updated:    2007-10-23

RNOCHandle: NETWO2072-ARIN
RNOCName:   Network Administrator
RNOCPhone:  +1-813-386-2801
RNOCEmail:  netadmin@parked.com 

OrgTechHandle: DOMAI142-ARIN
OrgTechName:   Domain Administrator
OrgTechPhone:  +1-813-386-2801
OrgTechEmail:  admin@parked.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name

class

type

data

time to live

canadian-drug-shop.com

SOA

server:	ns1.parked.com
email:	admin.parked.com
serial:	2008062520
refresh:	28800
retry:	7200
expire:	1209600
minimum ttl:	86400

86400s

(1.00:00:00)

canadian-drug-shop.com

69.46.228.186

86400s

(1.00:00:00)

canadian-drug-shop.com

ns1.parked.com

86400s

(1.00:00:00)

canadian-drug-shop.com

ns2.parked.com

86400s

(1.00:00:00)

186.228.46.69.in-addr.arpa

PTR

69-46-228-186.parked.com

86400s

(1.00:00:00)

— end —

CANADIAN-DRUG-SHOP.COM is involved in a MASSIVE SPAM operation and is a menace to the internet.

Canadian Pharmacy Spam Servers – rx-partners. biz

August 2, 2009Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

SmartFilter Category:	Not Categorized Make Category Suggestions
Namerservers on IP:	dns2.onlinemedson.net ns0.rx-sharedhost.com ns0.rxp-hosting.com ns1.edportu.com ns1.partners-dns.com ns1.viagravendita.com ns2.bestpharm.org ns2.drugs-on.net ns2.edportu.com ns2.esfarmaciaonline.com ns2.genericdrugson.net ns2.healthproductson.net ns2.medications-on.net ns2.medsshop.org ns3.cesaonline.net whatever.rxp-alive.com

Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com

buyusarx.com

edcustomer.com

enjoymeds.com

hoodiaweightlosstablets.com

Domain

ultimatepillstore.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy Spam – Fake Online Pharmacy Scam

July 22, 2009Leave a comment

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
114.92.205.227	China*	Whois	Google	DNSStuff	Urgentmessage.org
207.115.20.18	United States (Richardson)*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Tammi G. Sosa Wed Jul 22 00:57:41 2009
Return-Path:
Authentication-Results: mta111.sbc.mail.gq1.yahoo.com from=gelcomms.co.uk; domainkeys=neutral (no sig); from=gelcomms.co.uk; dkim=neutral (no sig)
Received: from 114.92.205.227 (EHLO flph260.prodigy.net) (207.115.20.18)
by mta111.sbc.mail.gq1.yahoo.com with SMTP; Wed, 22 Jul 2009 01:01:19 -0700
Received: from whycmm2 ([114.92.205.227])
by flph260.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n6M81AZc028606;
Wed, 22 Jul 2009 01:01:18 -0700
Message-ID: <000701ca0aa2$16bbda30$d828ea62@gelcomms.co.uk>
Reply-To: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
From: “Tammi G. Sosa” <tg.sosanb@gelcomms.co.uk>
To: , ,
Subject: Look what i found
Date: Wed, 22 Jul 2009 02:57:41 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 142

Address lookup

canonical name

flowersuffix.com.

aliases

addresses

203.93.208.86
218.75.144.6
60.191.239.150

SmartFilter Category:

Malicious Sites
Make Category Suggestions

Namerservers on IP:

dns2.wishlate.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.birdwinner.com
dns3.boostpass.com
dns3.boughtcreate.com
dns3.buyvalued.com
dns3.camediffer.com
dns3.carryfit.com
dns3.dadserve.com
dns3.decenton.com
dns3.decidesmile.com
dns3.dreamylot.com
dns3.dressadd.com
dns3.duckspruce.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.geniusyet.com
dns3.giftedproper.com
dns3.grewmile.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.healthspeech.com
dns3.heldforce.com
dns3.huntbring.com
dns3.leadspitch.com
dns3.leveldepend.com
dns3.lightleave.com
dns3.littletrue.com
dns3.luckyoxygen.com
dns3.magnetsent.com
dns3.nationdimple.com
dns3.nightmodest.com
dns3.noseaglow.com
dns3.noticematch.com
dns3.pamperextra.com
dns3.pasttalk.com
dns3.peoplewind.com
dns3.personsuffix.com
dns3.planjust.com
dns3.pleaseself.com
dns3.pridenature.com
dns3.proudliquid.com
dns3.quartmover.com
dns3.relaxrange.com
dns3.renownstreet.com
dns3.saidplan.com
dns3.sawzeal.com
dns3.sereneread.com
dns3.sexyclock.com
dns3.sliporgan.com
dns3.smilefollow.com
dns3.smoothchoose.com
dns3.swimstand.com
dns3.teachwing.com
dns3.thanksent.com
dns3.trendylost.com
dns3.trendysit.com
dns3.varystart.com
dns3.vippast.com
dns3.weekplease.com
dns3.wentcrisp.com
dns3.whichcrop.com
dns3.witfun.com
dns5.good-1dns.com
host3.soonplay.com
nodns2.carrytake.com
nodns2.suitmotion.com
ns0.peakswell.com
ns0.saidcold.com
ns1.112911.org
ns1.adorenew.com
ns1.againseat.com
ns1.alertspring.com
ns1.andfell.com
ns1.ba43.com
ns1.beautybounce.com
ns1.bedplain.com
ns1.bedsing.com
ns1.boughtpose.com
ns1.breadprize.com
ns1.busyorder.com
ns1.cameegg.com
ns1.chartflat.in
ns1.cu28.com
ns1.cutfigure.com
ns1.decentbusy.com
ns1.deluxecrop.com
ns1.evertasty.com
ns1.exceptexotic.com
ns1.expertlofty.com
ns1.fabledmaxi.com
ns1.famousloyal.com
ns1.farkeep.com
ns1.fewwhole.com

Rogue Pharmacy Websites – Pharmacy Checker

July 3, 20092 Comments

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

24hsmeds.com

Amerisur.net

Buyphentermine4u.com

Buypillsonline.biz (“Canadian Pharmacy”)

BuyAmoxilOnline.PillsConcepts.info

Canadapharmacyline.com (“Canadian Pharmacy”)

Canadianmedsworld.com (“Canadian Meds”)

Canadianpharmacyltd.com (“Canadian Pharmacy”)

Cheap-pharmacy.us (“Canadian Health & Care Mail”)

Cod-rx.com

Dragon-rx.com

Eagle-meds.com (“US Drugstore”)

Edfriends.org (“Reliable Meds”)

Getlowdrugs.com (“US Drugstore”)

Gimmepills.com (Canadian Rx Drugs”)

Globalaccessrx.com

Globalrxpharmacy.net

Hyth.us

Lom-5.co.cc

Licensed-Rx.com

Max-pharm.com

Medsranch.com

My-pharm.com

Newcanadianhealthcare.com

Online-the.com/

OvernightMedsDirect.net

Pharmacynorthamerica.com

Pharmtransit.com

Pillzcctop.com (“US HealthCare Inc”)

Qualitygenerics.com

Rx-life.com

Rxpharma24hs.com

Shop.edmedsonline.com (“Canadian Pharmacy”)

Shoprxtoday.com

Thecanadianmeds.com (“Canadian Pharmacy”)

Thecanadianpharmacyone.com (“Pharmsite” or “Canadian Pharmacy”)

TrustedMedsMD.com

Us-rx-meds.com

Value-generics.com (“Generic Pharmacy”)

Value-pharm.com

Wholesale-generics.com

Xlpharmacy.com

Updated June 26, 2009.

Rogue websites that are no longer online:

Rogue online pharmacies often remove their website as the word gets around that they are not legitimate. Here are some that were live but have since gone offline; hopefully for good.

1canadameds.com (Canadian Pharmacy”)

Allrxonline.net

ApplyEdPills.info

Atterack.com (“My Canadian Pharmacy”)

Bestedmeds.com (“Canadian Pharmacy”)

Canadianmedsnow.com (“Canadian Pharmacy”)

Canadianpharmdirect.com (“Canadian Pharmacy”)

Canadianpharmacylive.com (“Canadian Family Pharmacy”)

Canapharmstore.com (“Canadian Health Center”)

Cheapviagstarmed.info

Directmedswhere.com (“Canadian Pharmacy”)

Drug-online.org (“Canadian Pharmacy”)

Fit-pharmacy.com

Generic365.com

Getfamilymedicines.com (“Canadian Health & Care Mall”)

Hot-drug.com (“Canadian Rx Drugs”)

Hotgrandpharm.com (“US Drugs”)

Interpill.com

Irontold.com (“Canadian Pharmacy”)

Jusikelsk.com (“US Healthcare, Inc”)

Laicsownsew.com (“World Pharmacy”)

Licensed-meds.com

Mantipu.com_world_drugs.com

Medicaldiscountrx.net

Meds35.com (“My Canadian Pharmacy”)

Medsmaster.com (“Official Medicines”)

Medsworldwidenetwork.com

Miztrust.cn (“My Canadian Pharmacy”)

Nextairsalepharm.com (“Canadian Health & Care Mall”)

Nextbestpharm.com (“My Canadian Pharmacy”)

Officialcanadianmeds.com (“Canadian Pharmacy, “Pharm Site”)

Onlinepharmcanada.com (“Official Medicines”)

Ottowadrugs.com (“Canadian Pharmacy”)

Ourglobalpharm.com (“World Pharmacy”)

Pharmasavers.com

Phshuue.com (“U.S. Healthcare, Inc”)

Piromeds.com (“Drug Store”)

Pot-1.co.cc

Pot-7.co.cc

Poispp.com (“My Canadian Pharmacy”)

Premierpharmacy.net

Presidentrx.com

Proovernightpharm.com (“US Drugs”)

Qualitycandianmeds.com (“Canadian Pharmacy”)

Quickeasymed.com

Realairmentablets.com (“US Drugs”)

Rx-pillssshop.com (“Canadian Rx Drugs”)

Rx-toronto.net (“My Canadian Pharmacy”)

Targetpluspharma.com (“Canadian Health Care”)

Topcheappills.com (“Toronto Pharmacy”)

Topratedmedication.com (“Toronto Pharmacy”)

Turkbine.com (“Canadian Healthcare”)

Universallydrugstore.com (“Canadian Pharmacy”)

Viagraorder.org (“Canadian Pharmacy”)

Webdrugs.biz (“Canadian Pharmacy”)

Weekrequire.com (“Canadian Pharmacy”)

Worldshippingmeds.com

PharmacyChecker.com has found each of the above sites to engage in one or more of the following practices:

Pretending to be a licensed Canadian pharmacy, or any licensed pharmacy.
Dispensing controlled substances to consumers with prescriptions written by doctors who have never seen them.
Stealing people’s financial information.
Charging a consumer’s credit card without ever sending the purchased product (s).
Selling drug products that do not come from a regulated business that is authorized to sell prescription products to individuals.
Selling prescription drugs, whether real or fake, without requiring a prescription.
Not responding to a consumer’s email or phone call after they have ordered a product.
Providing false contact information.
Selling a customer’s personal information to third parties without their consent.
Publishing fake or unauthorized verification or accreditation seals, such as the PharmacyChecker.com or the Better Business Bureau seals.

We have taken action against sites such by requesting that they remove misleading information and we have reported some to the appropriate authorities — but the world wide web is a difficult place to police.We encourage you to report rogue pharmacy websites to us at info@pharmacychecker.com.

Share Your Stories With PharmacyChecker.com!

We encourage you to report rogue online pharmacies to us so that we can expose them on this list and help prevent more people from falling victim to fraud. Email us at research@pharmacychecker.com and share your information.

OTHER SCAMS AND FRAUD!

FAKE FDA AGENTS DEMAND FINES ARE TO BE PAID BY CONSUMERS WHO PURCHASE DRUGS OVERSEAS

On November 12th, 2008, the FDA warned consumers about scammers posing as FDA agents who threaten criminal prosecution against consumers who have purchased prescriptions online from foreign sources. These rogues have their own websites, fake online pharmacies, where people place prescription orders that never arrive. After the orders are placed, consumers get called by people posing as FDA agents, demanding that a fine be paid. FDA agents, or other U.S. government personnel, would not be party to such actions. For more on this story see AARP Bulletin’s, “Double Drug Sting” –http://bulletin.aarp.org/yourmoney/scamalert/articles/double_drug_sting.html.

Canadian Pharmacy – safe-supplier.com

June 29, 20092 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Address lookup

canonical name	safe-supplier.com.
aliases	http://www.safe-supplier.com
addresses	72.167.131.144

Domain Whois record

Queried whois.internic.net with “dom safe-supplier.com“…

   Domain Name: SAFE-SUPPLIER.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS51.DOMAINCONTROL.COM
   Name Server: NS52.DOMAINCONTROL.COM
   Status: clientTransferProhibited
   Updated Date: 29-may-2009
   Creation Date: 15-mar-2007
   Expiration Date: 15-mar-2011

>>> Last update of whois database: Tue, 30 Jun 2009 04:16:27 UTC <<<

Queried whois.enom.com with “safe-supplier.com“…

Visit AboutUs.org for more information about safe-supplier.com
<a href="http://www.aboutus.org/safe-supplier.com">AboutUs: safe-supplier.com</a>

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: safe-supplier.com

Registrant Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali ()

   Fax:
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Administrative Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Technical Contact:
   Amin Mansoor Ali
   Amin Mansoor Ali (visionofpassion@hotmail.com)
   +92.4946824
   Fax: +1.5555555555
   256 Amynabad P.I.B Colony Karachi.
   Karachi, Sindh 74800
   PK

Status: Locked

Name Servers:
   ns51.domaincontrol.com
   ns52.domaincontrol.com

Creation date: 15 Mar 2007 10:44:00
Expiration date: 15 Mar 2011 10:44:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.arin.net with “72.167.131.144“…

OrgName:    GoDaddy.com, Inc.
OrgID:      GODAD
Address:    14455 N Hayden Road
Address:    Suite 226
City:       Scottsdale
StateProv:  AZ
PostalCode: 85260
Country:    US

NetRange:   72.167.0.0 - 72.167.255.255
CIDR:       72.167.0.0/16
OriginAS:   AS26496
NetName:    GO-DADDY-SOFTWARE-INC
NetHandle:  NET-72-167-0-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate:    2007-07-05
Updated:    2008-01-18

RAbuseHandle: ABUSE51-ARIN
RAbuseName:   Abuse Department
RAbusePhone:  +1-480-624-2505
RAbuseEmail:  abuse@godaddy.com 

RNOCHandle: NOC124-ARIN
RNOCName:   Network Operations Center
RNOCPhone:  +1-480-505-8809
RNOCEmail:  noc@godaddy.com 

RTechHandle: NOC124-ARIN
RTechName:   Network Operations Center
RTechPhone:  +1-480-505-8809
RTechEmail:  noc@godaddy.com 

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName:   Abuse Department
OrgAbusePhone:  +1-480-624-2505
OrgAbuseEmail:  abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-480-505-8809
OrgNOCEmail:  noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-480-505-8809
OrgTechEmail:  noc@godaddy.com

# ARIN WHOIS database, last updated 2009-06-29 20:00

DNS records

name

class

type

data

time to live

http://www.safe-supplier.com

CNAME

safe-supplier.com

3599s

(00:59:59)

safe-supplier.com

SOA

server:	ns51.domaincontrol.com
email:	dns.jomax.net
serial:	2009052800
refresh:	28800
retry:	7200
expire:	604800
minimum ttl:	86400

86400s

(1.00:00:00)

safe-supplier.com

72.167.131.144

3600s

(01:00:00)

safe-supplier.com

ns51.domaincontrol.com

3600s

(01:00:00)

safe-supplier.com

ns52.domaincontrol.com

3600s

(01:00:00)

safe-supplier.com

preference:	0
exchange:	smtp.secureserver.net

3600s

(01:00:00)

safe-supplier.com

preference:	10
exchange:	mailstore1.secureserver.net

3600s

(01:00:00)

144.131.167.72.in-addr.arpa

PTR

p3slh180.shr.phx3.secureserver.net

3600s

(01:00:00)

Spam – Canadian Pharmacy 29.6.2009 80% 0FF on Pfizer

June 29, 2009Leave a comment

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country	Additional Info
80.244.229.67	Russian Federation (Moscow)*	Whois	Google	DNSStuff	Urgentmessage.org
6.5.4.3	United States*	Whois	Google	DNSStuff	Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.90.65.6 with SMTP id n6cs392298aga;
Mon, 29 Jun 2009 02:16:21 -0700 (PDT)
Received: by 10.204.116.69 with SMTP id l5mr6938906bkq.102.1246266978895;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Return-Path:
Received: from 229.67.artcoms.ru ([80.244.229.67])
by mx.google.com with SMTP id 12si10825252fks.51.2009.06.29.02.15.48;
Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Received-SPF: neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) client-ip=80.244.229.67;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.244.229.67 is neither permitted nor denied by domain of ScamFraudAlert@gmail.com) smtp.mail=ScamFraudAlert@gmail.com
Date: Mon, 29 Jun 2009 02:16:18 -0700 (PDT)
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communications_msn_cs_enus@cimail15.msn.com
Message-ID: <22be01c9f8bb$c2253180$43e5f450@user2>
To: ScamFraudAlert@gmail.com
Subject: Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.
From: Pfizer Inc 1916-2009.
MIME-Version: 1.0
Content-Type: text/html; charset=”ISO-8859-1″
Content-Transfer-Encoding: 7bit

rom	Pfizer Inc 1916-2009.<ScamFraudAlert@gmail.com>
to		ScamFraudAlert@gmail.com
date		Mon, Jun 29, 2009 at 2:16 AM
subject		Dear ScamFraudAlert@gmail.com 29.6.2009 80% 0FF on Pfizer.

hide details 2:16 AM (2 hours ago)

Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more

About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. If you do not wish to receive this MSN Featured Offers e-mail, please click the “Unsubscribe” link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers’ content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

SFA

Canadian Pharmacy Spam – Vitalideal.com

May 24, 20096 Comments

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

National Association of Boards of Pharmacy (NABP)

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–> Vitalideal . com

A Great Canadian~Pharmacy is available at your Fingertips!
N0 Doctor Needed! Type in Your WebBrowser–> Vitalideal.com

WhoIs Lookup

Address lookup

canonical name	vitalideal.com
aliases
addresses	60.191.239.189

Domain Whois record

Queried whois.internic.net with “dom vitalideal.com“…

   Domain Name: VITALIDEAL.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PRIDEEASY.COM
   Name Server: NS2.PRIDEEASY.COM
   Name Server: NS3.GRATEFULFACT.COM
   Name Server: NS4.GRATEFULFACT.COM
   Status: ok
   Updated Date: 22-may-2009
   Creation Date: 20-may-2009
   Expiration Date: 20-may-2010

>>> Last update of whois database: Sun, 24 May 2009 09:48:41 UTC <<<

Queried whois.paycenter.com.cn with “vitalideal.com“…

Domain Name      : vitalideal.com
PunnyCode        : vitalideal.com

Registrant:
  Organization   : BAI ZIRONG
  Name           : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106

Administrative Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Technical Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Billing Contact:
  Name           : BAI ZIRONG
  Organization   : BAI ZIRONG
  Address        : CHANGFENGLU51
  City           : jianshi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 343106
  Phone Number   : 86-0796-65402651
  Fax            : 86-0796-65402651
  Email          : BAIZIRONG@SINA.COM

Network Whois record

Queried whois.apnic.net with “60.191.239.189“…

inetnum:      60.191.239.0 - 60.191.239.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd
descr:
admin-c:      LW945-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW945-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-3285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20060824
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 189.239.191.60.in-addr.arpa returned an error from the server: NameError

From Stanley Garza Sat May 23 18:12:49 2009
Return-Path:
Authentication-Results: mta168.sbc.mail.mud.yahoo.com from=st-and.ac.uk; domainkeys=neutral (no sig); from=st-and.ac.uk; dkim=neutral (no sig)
Received: from 190.218.142.211 (EHLO nlpi048.prodigy.net) (207.115.36.77)
by mta168.sbc.mail.mud.yahoo.com with SMTP; Sat, 23 May 2009 20:26:05 -0700
Received: from 42wac22 ([190.218.142.211])
by nlpi048.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4O3Pmlf017046;
Sat, 23 May 2009 22:26:01 -0500
Message-ID: <000701c9dc0c$c15f3410$627e269a@st-and.ac.uk>
Reply-To: “Stanley Garza”
From: “Stanley Garza”
To: , ,
Subject: Get all the medications you want online!
Date: Sun, 24 May 2009 09:12:49 +0800
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 163

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Traceroute

Service scan

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

A Botnet of Computers unknown to its owner being used to SEND SPAM.

Header Analysis

Header Analysis

Header Analysis

Header Analysis

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Header Analysis

Address lookup

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

Warning

Address lookup

Domain Whois record

Network Whois record

DNS records

Header Analysis

Buying Precription Drugs Online May Be Dangerous – Consumer Alert – Drug Enforcement Administration Says

WhoIs Lookup

Domain Whois record

Network Whois record

DNS records

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

The following websites may be unethical or unsafe. None are approved members of the PharmacyChecker.com Verification Program. For examples of pharmacy sites approved by PharmacyChecker.com, go to Online Pharmacy Ratings and Profiles.

Rouge Online Pharmacy Websites (and Other Aliases):

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says