Canadian Pharmacy Spam – grewsix.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger you health by taking those dangerous counterfeit drugs.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
129.10.63.40 United States (Boston)* Whois Google DNSStuff Urgentmessage.org
207.115.36.121 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Terry G. Parks Fri Jun 26 10:09:27 2009
Return-Path:
Authentication-Results: mta107.sbc.mail.re3.yahoo.com from=vdc.lv; domainkeys=neutral (no sig); from=vdc.lv; dkim=neutral (no sig)
Received: from 129.10.63.40 (EHLO nlpi107.prodigy.net) (207.115.36.121)
by mta107.sbc.mail.re3.yahoo.com with SMTP; Fri, 26 Jun 2009 10:09:22 -0700
Received: from 329a0d2 ([129.10.63.40])
by nlpi107.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5QH9Euq004296;
Fri, 26 Jun 2009 12:09:21 -0500
Message-ID:  <000701c9f680$dcd89cc0$4a37416a@vdc.lv>
Reply-To: “Terry G. Parks”  <tg_parkszh@vdc.lv>
From: “Terry G. Parks”
To:
Subject: eye opening
Date: Fri, 26 Jun 2009 12:09:27 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 135

An Incredible Canadian Pharmacy is available at your Fingertips!
N0~Doctor~Needed! Browse our site Today! -> http://grewsix.com

Address lookup

An Incredible Canadian Pharmacy is available at your Fingertips!
NO `Doctor `Needed! Browse our site Today! -> http://camebear.com

canonical name grewsix.com. aliases
addresses 218.75.144.6
60.191.221.117
60.191.239.153
61.191.191.241
119.39.238.2
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom grewsix.com“…

   Domain Name: GREWSIX.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RUNMOTHER.IN
   Name Server: NS2.RUNMOTHER.IN
   Name Server: NS3.LISTENFACE.RU
   Name Server: NS4.LISTENFACE.RU
   Name Server: NS5.WESUCH.PL
   Name Server: NS6.WESUCH.PL
   Status: ok
   Updated Date: 22-jun-2009
   Creation Date: 22-jun-2009
   Expiration Date: 22-jun-2010

>>> Last update of whois database: Sun, 28 Jun 2009 15:51:35 UTC <<<

Queried whois.namerich.cn with “grewsix.com“…

; This data is provided by China Springboard Inc.
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; China Springboard Inc. does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
; unsolicited, commercial advertising or solicitations via E-mail
; (spam); or
; 2) enable high volume, automated, electronic processes that apply
; to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 DomainName : grewsix.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS4.LISTENFACE.RU
Name Server......................NS2.RUNMOTHER.IN
Name Server......................NS6.WESUCH.PL
Name Server......................NS1.RUNMOTHER.IN
Name Server......................NS5.WESUCH.PL
Name Server......................NS3.LISTENFACE.RU
Status...........................ok
Creation  Date ..................2009-06-22
Expiration Date .................2010-06-22
Last Update  Date ...............2009-06-22

Registrant ID ...................V-X-57955-13465
Registrant Name .................ZHAO LET
Registrant Organization .........ZHAO LEI
Registrant Address ..............JIEFANGLU19
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116019
Registrant Phone Number .........+86.04112880527
Registrant Fax ..................+86.04112880527
Registrant Email ................mklao9he@126.com

Administrative ID ...............V-X-57955-13465
Administrative Name .............ZHAO LET
Administrative Organization .....ZHAO LEI
Administrative Address ..........JIEFANGLU19
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116019
Administrative Phone Number .....+86.04112880527
Administrative Fax ..............+86.04112880527
Administrative Email ............mklao9he@126.com

Billing ID ......................V-X-57955-13465
Billing Name ....................ZHAO LET
Billing Organization ............ZHAO LEI
Billing Address .................JIEFANGLU19
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116019
Billing Phone Number ............+86.04112880527
Billing Fax .....................+86.04112880527
Billing Email ...................mklao9he@126.com

Technical ID ....................V-X-57955-13465
Technical Name ..................ZHAO LET
Technical Organization...........ZHAO LEI
Technical Address ...............JIEFANGLU19
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116019
Technical Phone Number ..........+86.04112880527
Technical Fax ...................+86.04112880527
Technical Email .................mklao9he@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “218.75.144.6“…

inetnum:      218.75.128.0 - 218.75.159.255
netname:      CHINANET-HN-CD
country:      CN
descr:        CHINANET-HN changde node network
descr:        hunan Telecom
admin-c:      CHC8-AP
tech-c:       CH636-AP
status:       ALLOCATED NON-PORTABLE
changed:      ipaddress@hntelecom.net.cn 20050823
mnt-by:       MAINT-CHINANET-HN
mnt-lower:    MAINT-CHINANET-HN-CD
source:       APNIC

role:         CHINANET HuNan ChangDe
address:      The middle of Wuling Street,Changde 415000
country:      CN
phone:        +86 736 7229427
fax-no:       +86 736 7267027
e-mail:       abuse.cd@2118.com.cn
trouble:      send spam reports to spam.cd@2118.com.cn
trouble:      and abuse reports to abuse.cd@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CM1092-AP
tech-c:       CM1092-AP
nic-hdl:      CHC8-AP
notify:       abuse.cd@2118.com.cn
mnt-by:       MAINT-CHINANET-HN-CD
changed:      ipaddress@hntelecom.net.cn 20050818
source:       APNIC

role:         CHINANET HUNAN
address:      No.1 TuanJie road,ChangSha,Hunan 410005
country:      CN
phone:        +86 731 4792092
fax-no:       +86 731 4792007
e-mail:       abuse.szx@2118.com.cn
trouble:      send spam reports to spam.szx@2118.com.cn
trouble:      and abuse reports to abuse.szx@2118.com.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      CH632-AP
tech-c:       CS499-AP
nic-hdl:      CH636-AP
mnt-by:       MAINT-CHINANET-HN
changed:      ipaddress@hntelecom.net.cn 20050816
source:       APNIC

DNS records

DNS query for 6.144.75.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
grewsix.com IN A 203.93.208.86 10800s (03:00:00)
grewsix.com IN A 60.191.221.117 10800s (03:00:00)
grewsix.com IN A 60.191.239.153 10800s (03:00:00)
grewsix.com IN A 61.191.191.241 10800s (03:00:00)
grewsix.com IN A 218.75.144.6 10800s (03:00:00)
grewsix.com IN A 119.39.238.2 10800s (03:00:00)

xxxxxxxxxx

sharepolite.com
luckyown.com
raincool.com
pathtotal.com
shareproper.com
rightthin.com
zapblack.com
verycuddly.com
offront.com
railactive.com
seekersmiles.com
windowdouble.com
bottomvanish.com
twentyparent.com
sailnotice.com
airproper.com
howheld.com
talkown.com
againnoon.com
minutewood.com
thatcost.com
onthick.com
allthough.com
grewsix.com
heardzest.com
lovingbehind.com
shellyou.com
amtreat.com
wouldground.com
gardenguess.com
wrotemotion.com
legacyshall.com
stateequate.com
beatsshe.com
humanemy.com
camebear.com
rainthree.com
chieftype.com
abovegray.com
deluxeparent.com
centerthen.com
cowzip.com
plumlegend.com
heartlong.com
expectjust.com
causejewel.com
cowwhose.com
simpleinvent.com
streamput.com
pamperthree.com
legendvisit.com
blue-admin.com
via-grashop.com
99-22.com
luckyyour.com
prizefor.com
objectlead.com
awardfelt.com
workenough.com
motiontasty.com
caringwow.com
eagerthin.com
degreeproper.com
recordweight.com
eagerbuild.com
jewelspread.com
shellsmiles.com
caringhigh.com
nosewife.com
serveseemly.com
stoodeight.com
fizzdry.com
99-33.com
80-30.com

Canadian Pharmacy – canadianpharmacy-shop.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


canadian pharmacy shop

Address lookup

canonical name canadian-medshop.com.
aliases
addresses 195.95.155.22

Domain Whois record

Queried whois.internic.net with “dom canadian-medshop.com“…

Now, don’t you think giving your personal or credit card information to such ruthless criminals would be sheer madness? You would possibly get some fake product (which in case of pharmaceuticals can endanger your health). But most probably you’d get nothing at all, and they would just rip you off. They couldn’t care less about you
Domain Name: CANADIAN-MEDSHOP.COM
Registrar: EURODNS S.A
Whois Server: whois.eurodns.com
Referral URL: http://www.eurodns.com
Name Server: NS1.EURODNS.COM
Name Server: NS2.EURODNS.COM
Status: clientTransferProhibited
Updated Date: 04-feb-2009
Creation Date: 04-feb-2009
Expiration Date: 04-feb-2010

Last update of whois database: Sat, 27 Jun 2009 23:31:12 UTC
Queried whois.eurodns.com with “canadian-medshop.com

By submitting this query, you agree to abide by the above policy.

Domain: canadian-medshop.com
Registrar: Eurodns S.A.

Registrant:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL

Administrative Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Technical Contact:
Company:
Name: Sokholov Sergey
Address: 176 Whalley Range
City: Blackburn
Country: UNITED KINGDOM
Postal Code: BB1 6NL
Phone: +18882817722
Fax:
Email: cadmium.hrz@gmail.com

Original Creation Date: 2009-02-04
Expiration Date: 2010-02-03

Status:
clientTransferProhibited

Nameserver Information:
Nameserver: ns1.eurodns.com
Nameserver: ns2.eurodns.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.22

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 22.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
canadian-medshop.com IN A 195.95.155.22 700s (00:11:40)
canadian-medshop.com IN MX
preference: 10
exchange: mail.canadian-medshop.com
3600s (01:00:00)
canadian-medshop.com IN SOA
server: ns1.eurodns.com
email: hostmaster.eurodns.com
serial: 2009062000
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
canadian-medshop.com IN NS ns1.eurodns.com 86400s (1.00:00:00)
canadian-medshop.com IN NS ns2.eurodns.com 86400s (1.00:00:00)

afsfsd

Address lookup

canonical name canadianpharmacy-shop.com.
aliases http://www.canadianpharmacy-shop.com
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom canadianpharmacy-shop.com“…

   Domain Name: CANADIANPHARMACY-SHOP.COM
   Registrar: EVERYONES INTERNET, LTD. DBA RESELLONE.NET
   Whois Server: whois.resellone.net
   Referral URL: http://www.resellone.net
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jun-2009
   Creation Date: 22-apr-2009
   Expiration Date: 22-apr-2010

Last update of whois database: Sat, 27 Jun 2009 23:39:39 UTC <<<

Queried whois.resellone.net with “canadianpharmacy-shop.com“…

Registrant:
 n/a
 p.o. box 1928
 CHERNIGOV, UA 14000
 UA

 Domain name: CANADIANPHARMACY-SHOP.COM

 Administrative Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614
 Technical Contact:
    Kuts, Valery  domain-abuse@it-spec.com
    p.o. box 1928
    CHERNIGOV, UA 14000
    UA
    +3.80913018614

 Registration Service Provider:
    IT-SPEC.COM, info@it-spec.com
    +3.80913018614
    http://it-spec.com
    IT-SPEC.COM - PROFESSIONAL DOMAIN REGISTRATION
    SEND FOR ABUSE: domain-abuse@it-spec.com

 Registrar of Record: Everyones Internet, LLC dba Resellone.net
 Record last updated on 21-Jun-2009.
 Record expires on 22-Apr-2010.
 Record created on 22-Apr-2009.

 Domain servers in listed order:
    NS1.SUSPENDED-DOMAINS.NET
    NS2.SUSPENDED-DOMAINS.NET   

 Domain status: clientTransferProhibited
                clientUpdateProhibited
Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

Information related to ‘195.95.155.0 – 195.95.155.255’

inetnum: 195.95.155.0 – 195.95.155.255
netname: MSKCOM-NET
descr: MoskvaCom Ltd
country: RU
org: ORG-ML114-RIPE
admin-c: PG5690-RIPE
tech-c: PG5690-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: MSKCOM-MNT
mnt-routes: MSKCOM-MNT
mnt-routes: AS2118-MNT
mnt-domains: MSKCOM-MNT
changed: dilotto@gmail.com 20090224
source: RIPE

organisation: ORG-ML114-RIPE
org-name: MoskvaCom Ltd
org-type: OTHER
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
mnt-ref: MSKCOM-MNT
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

person: Pavel Gorbunov
address: Parusnyj pr. 49/2
address: Moscow, Russia
phone: +7 910 4311272
e-mail: dilotto@gmail.com
nic-hdl: PG5690-RIPE
mnt-by: MSKCOM-MNT
changed: hostmaster@ripe.net 20090224
source: RIPE

% Information related to ‘195.95.155.0/24AS2118’

route: 195.95.155.0/24
descr: RusDesign Autonomous System
origin: AS2118
notify: noc@relcom.net
mnt-by: AS2118-MNT
changed: andreyss@relcom.net 20090303
source: RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.canadianpharmacy-shop.com IN CNAME canadianpharmacy-shop.com 60s (00:01:00)
canadianpharmacy-shop.com IN SOA
server: ns1.nscontrol.com
email: root.canadianpharmacy-shop.com
serial: 2007100805
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
canadianpharmacy-shop.com IN NS ns4.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns5.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns2.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns1.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN NS ns3.nscontrol.com 60s (00:01:00)
canadianpharmacy-shop.com IN A 195.95.155.3 60s (00:01:00)

— end —

WhoIs ns1.ispvds.com

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


used as nameserver but missing in zone
0uk.net
5070.info
5z0.net
absolute-portal.com
alternatenet.net
bakomatex.com
banstock.com
birdtower.com
blueiontech.com
blueorange.be
bluepills-rx.net
brandpills.net
cafeschlag.com
carlvdupre.com
casino-consul.com
ced-wb.org
clearcutsemblance.com
club-ip.net
cvswebclient.net
dikoepole.org
diversionmedia.net
dooopa.net
ediz.ru
egreenrx.net
eis-ru.net
entec-systems.com
esposende.com
etherealrealm.org
facechange.com
findadive.com
finncrosse.com
forexdvd.net
foustok.net
gabrielaschutz.com
garden-office.net
generationplus.net
geniev.net
get43.net
go34.net
goodweeks.biz
gozetle.net
gozetleme.net
graszoden.be
hard-exotique.com
hard-lesbienne.com
hard-mature.com
hard-pipe.com
hard-sodo.com
imagesalon.net
indylink.net
inmedicines.net
islandofmusic.com
isp-server.com
job-hunts.net
kitetelecom.net
koschalk.com
kyotogames.com
l0a.net
lansman.org
loftd.com
matota.com
max-price.net
maxicus.com
mbcbe.com
mdcheap.net
mdski.net
mdsrx.net
meds-cheap.net
medsbuy.net
mgastudios.net
mobilia-online.com
mobipic.net
mosgu.net
motorhomesscotland.net
mouvementreformateur.net
mymultitracker.net
myspot.info
nedved.net
nervenne.com
new-pharm.net
nydragoes.com
onlinerxmeds.net
orangeblack.org
pandaetu.info
paradis-fiscaux.com
paris-rent-apartment.com
pmds.org
promotion-theatre.org
rxviagra.net
salatmix.com
samiasmahi.net
selseg.com
seo2you.com
seohacker.net
silvacabinetry.com
slavmobile.com
smartdietcenter.com
sochiguide.net
spectraimaging.net
supereach.net
svjatoshino.com
svyatoshino.com
sztdr.net
telecharger-video-x.com
telfordhouse.com
thedreamstore.com
ttsmaster.com
ua-beckhoff.com
umkabooks.com
umpkb.com
urozhay.com
vitaminize.net
webteriors.com
welieverchevrolet.com
wmplanet.net
yourshopper.net
zaboysultra.com
znai.net
domains using this as nameserver
3foisrien.com
4senses.ispvds.com
5070.info
activebiometrix.com
actualfree.com
aksmarket.ru
akvadar.ru
al-multimix.ispvds.com
allpets.ru
amakan.ru
amsu.ru
apdsystem.com
aries-hosting.com
artec-group.com
aska-shop.com.ua
astropolis.net
at-hosting.com
avto-sait.ru
bakomatex.com
banstock.isp-server.com
beffective.ca
belgasite.be
belsite.com
betsee.com
bossavit.com
bruhost-2.ispvds.com
bruhost.ispvds.com
carrefourmedical.net
cell-tissuetransplantation.com
centreindigo.org
chemport.ru
chemy.ru
chronorace.be
cogendi.com
cotejardins.ch
cracnet.com
cyberdepot.biz
daniel.ispvds.com
de-troyer.be
deine-freunde.net
drnd.be
drvrn.com
e-ticket.ru
ediz.ru
efireice.com
elbase.ispvds.com
esales.ru
etobolsk.ru
euroconsultants.be
evm.ru
fastorder.net
foratel.com
format21.com
freekerrybook.org
g9e.ru
george.ispvds.com
geot.ispvds.com
gooddays.ru
gouralnik.com
graphic-lettering.be
hote.net
houebe.com
idsbd.net
intermedia-communication.biz
ishango.ispvds.com
isobel.be
ispserver.com
ispsystem.com
ispvds.com
itcomplex.ru
jbsoares.net
kgora.ru
kinologia.ru
labstyle.com
ls.ispvds.com
luxuryparlor.ispvds.com
mail.amsu.ru
markopizza.ru
matota.com
mdbt.be
megaded.info
merlin-worlds.ru
merscomdocs.com
mirronix.com
momotaro.biz
moving-storage.net
mskhost-2.ispvds.com
mskhost.ispvds.com
multiactivist.com
mykorzina.com
norsite.net
novgorod.su
nyhost-2.ispvds.com
nyk-backup.ispvds.com
openforall.net
pavel.ispvds.com
planbweb.com
progsight.be
reanimator.ispvds.com
redin.info
rental-apartment-paris.com
rolissisp.ispvds.com
rus.aero
rusaero.aero
sdv2.antipode.info
seli01.be
sferaweb.ru
sidora.net
societe-internationale.com
stagingarea3.com
staquet.net
synergir.com
taxpolicy.ru
tlnh.ru
totogolo.com
transmaster177.ru
triniforce.ispvds.com
vdelo.ru
webcoop.org
wildboarmusic.co

WhoIs GlavMed.com aka Canadian Pharmacy

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Glavmed is the public-facing affiliate program which sponsors spammers to promote what are generally known to be illegal pharmacy websites. It appears to be a cover for the real sponsor organization behind all of these sites: Spamit. These include [Canadian Pharmacy], one of the most-spammed properties during 2006-2008. Glavmed is alternately known in the spammer community as the “Spamit” program, making it clear that this operation endorses and condones illegal spamming in the promotion of their properties.

This was learned from postings on bulkerforum.biz by username “kref”, who would invite users to promote for their properties. kref is also known as “fakir f” (his Skype username.)

Glavmed (Spamit) is believed to be based out of Moscow, and thought to be very closely related to the “Russian Business Network”, or “RBN.


Spamtracker.eu


GlavMed2

Address lookup

canonical name www.glavmed.com.
aliases
addresses 74.86.34.144

Domain Whois record

Queried whois.internic.net with “dom glavmed.com“…

   Domain Name: GLAVMED.COM
   Registrar: REGTIME LTD.
   Whois Server: whois.regtime.net
   Referral URL: http://www.webnames.ru
   Name Server: NS1.GLAVMED.COM
   Name Server: NS2.GLAVMED.COM
   Status: ok
   Updated Date: 23-jan-2009
   Creation Date: 14-mar-2006
   Expiration Date: 14-mar-2013

>>> Last update of whois database: Sat, 27 Jun 2009 02:40:08 UTC <<<

Queried whois.regtime.net with “glavmed.com“…

% Regtime Ltd. WHOIS server

Domain name: glavmed.com

Name servers:
    ns1.glavmed.com
    ns2.glavmed.com

Registrar: Regtime Ltd.
Creation date: 2009-01-15
Expiration date: 2013-03-14
Status: active

Registrant:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Administrative Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Technical Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747
Billing Contact:
    PHARMOS LIMITED
    Email: info@glavmed.com
    Organization: PHARMOS LIMITED
    Address: 177 WHALLEY RANGE
    City: BLACKBURN
    State: LANCS
    ZIP: BB1 6NL
    Country: GB
    Phone: +1.8778062747
    Fax: +1.8778062747

Network Whois record

Queried whois.arin.net with “!NET-74-86-34-144-1“…

CustName:   Dmitry Fedorov
Address:    Ivanov st 31
City:       Moscow
StateProv:
PostalCode: 125725
Country:    RU
RegDate:    2009-03-19
Updated:    2009-03-19

NetRange:   74.86.34.144 - 74.86.34.151
CIDR:       74.86.34.144/29
NetName:    NET-74-86-34-144
NetHandle:  NET-74-86-34-144-1
Parent:     NET-74-86-0-0-1
NetType:    Reassigned
Comment:    Send abuse issues to abuse@softlayer.com
RegDate:    2009-03-19
Updated:    2009-03-19

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  abuse@softlayer.com 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin
RNOCPhone:  +1-214-442-0600
RNOCEmail:  ipadmin@softlayer.com 

RTechHandle: IPADM258-ARIN
RTechName:   IP Admin
RTechPhone:  +1-214-442-0600
RTechEmail:  ipadmin@softlayer.com 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  abuse@softlayer.com

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  ipadmin@softlayer.com

# ARIN WHOIS database, last updated 2009-06-26 19:10

DNS records

name class type data time to live
http://www.glavmed.com IN A 74.86.34.144 60s (00:01:00)
glavmed.com IN SOA
server: ns1.glavmed.com
email: root.glavmed.com
serial: 2009041832
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
glavmed.com IN NS ns1.glavmed.com 60s (00:01:00)
glavmed.com IN NS ns2.glavmed.com 60s (00:01:00)
glavmed.com IN MX
preference: 10
exchange: mail.glavmed.com
60s (00:01:00)
glavmed.com IN A 74.86.34.144 60s (00:01:00)
144.34.86.74.in-addr.arpa IN PTR 74.86.34.144-static.reverse.softlayer.com 3600s (01:00:00)

— end —

Legal Rx Drugs – www.legalrxdrugs.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Legalrxdrugs

Address lookup

canonical name www.legalrxdrugs.com.
aliases
addresses 85.17.189.163

Domain Whois record

Queried whois.internic.net with “dom legalrxdrugs.com“…

   Domain Name: LEGALRXDRUGS.COM
   Registrar: MONIKER ONLINE SERVICES, INC.
   Whois Server: whois.moniker.com
   Referral URL: http://www.moniker.com/whois.html
   Name Server: NS1.SPECIALHOSTING.INFO
   Name Server: NS2.SPECIALHOSTING.INFO
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 26-dec-2008
   Creation Date: 27-nov-2006
   Expiration Date: 27-nov-2009

>>> Last update of whois database: Thu, 25 Jun 2009 13:57:35 UTC <<<

Queried whois.moniker.com with “legalrxdrugs.com“…

Domain Name: LEGALRXDRUGS.COM

Registrant [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US

Administrative Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Billing Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Technical Contact [1666466]:
        Moniker, Privacy Services LEGALRXDRUGS.COM@domainservice.com
        Moniker Privacy Services
        20 SW 27th Ave.
        Suite 201
        Pompano Beach
        FL
        33069
        US
        Phone: +1.9549848445
        Fax:   +1.9549699155

Domain servers in listed order:

        NS1.SPECIALHOSTING.INFO
        NS2.SPECIALHOSTING.INFO

        Record created on:        2006-11-27 18:22:00.0
        Database last updated on: 2008-12-26 06:35:00.293
        Domain Expires on:        2009-11-27 18:22:00.0

Network Whois record

Queried whois.ripe.net with “-B 85.17.189.163“…

% Information related to '85.17.189.0 - 85.17.189.255'

inetnum:        85.17.189.0 - 85.17.189.255
netname:        LEASEWEB
descr:          LeaseWeb
descr:          P.O. Box 93054
descr:          1090BB AMSTERDAM
descr:          Netherlands
descr:          www.leaseweb.com
remarks:        Please send email to "abuse@leaseweb.com" for complaints
remarks:        regarding portscans, DoS attacks and spam.
remarks:        INFRA-AW
country:        NL
admin-c:        LSW1-RIPE
tech-c:         LSW1-RIPE
status:         ASSIGNED PA
mnt-by:         OCOM-MNT
changed:        ripe@leaseweb.com 20070809
source:         RIPE

person:         RIP Mean
address:        P.O. Box 93054
address:        1090BB AMSTERDAM
address:        Netherlands
phone:          +31 20 3162880
fax-no:         +31 20 3162890
abuse-mailbox:  abuse@leaseweb.com
e-mail:         ripe@leaseweb.com
nic-hdl:        LSW1-RIPE
notify:         ripe@leaseweb.com
mnt-by:         OCOM-MNT
changed:        ripe@ocom.com 20050607
changed:        ripe@ocom.com 20060215
changed:        ripe@ocom.com 20060608
changed:        ripe@ocom.com 20080603
source:         RIPE

% Information related to '85.17.0.0/16AS16265'

route:          85.17.0.0/16
descr:          LEASEWEB
origin:         AS16265
remarks:        LeaseWeb
mnt-by:         OCOM-MNT
changed:        ripe@ocom.com 20050311
changed:        ripe@ocom.com 20070610
source:         RIPE

DNS records

name class type data time to live
http://www.legalrxdrugs.com IN A 85.17.189.163 14400s (04:00:00)
legalrxdrugs.com IN MX
preference: 10
exchange: mail.legalrxdrugs.com
14400s (04:00:00)
legalrxdrugs.com IN TXT v=spf1 a mx ip4:85.17.189.163 ?all 14400s (04:00:00)
legalrxdrugs.com IN A 85.17.189.163 14400s (04:00:00)
legalrxdrugs.com IN SOA
server: ns1.specialhosting.info
email: root.legalrxdrugs.com
serial: 2008040600
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
legalrxdrugs.com IN NS ns2.specialhosting.info 14400s (04:00:00)
legalrxdrugs.com IN NS ns1.specialhosting.info 14400s (04:00:00)
163.189.17.85.in-addr.arpa IN PTR hosted-by.leaseweb.com 86400s (1.00:00:00)
Domain
mobitube.org
phoneporn.org
dietdeals.net
gmgint.net
hotdrugs.net
myphentermine.net
paintabs.net
sleeptabs.net
yourphentermine.net
masterfibre.net
meds-easy.net
specialhosting.info
drugslive.com
germanycars-direct.com
legalrxdrugs.com
medicationstocks.com
trustpharm.com
unfairclients.com
veritypharma.com
replok.com
online-meds-order.com
acompliaweb.com
medical-and-pharmacy.com
webxanax.com
viagradirectonline.com
medmarketer.com
alpram.com
ruagra.com
meds-trade.com
meds-easy.com
buywmz.com
acompliageneric.com
ozernoe.com
meds-buy.com
sfordela.com

WHOIS www.ruler-domains.com

WHOIS informations for ruler-domains.com

AboutUs: ruler-domains.com

Registration Service Provided By:

Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name:
ruler-domains.com

Administrative Contact:


Sergey Ryabov director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Technical Contact:

Sergey Ryabov  director@climbing-games.com
+7.9219270961
Fax: +7.9219270961
Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Registrant Contact:

Sergey Ryabov ()

Fax:

Scherbakova st., 6-38
Saint-Petersburg, 197375
RU

Status: Locked

Name Servers:

ns1.ruler-domains.com
ns2.ruler-domains.com

Creation date:
18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet! Increase visibility for this domain name by listing it atwww.whoisbusinesslistings.com

We reserve the right to modify these terms at any time. By submitting
this query, you agree to abide by these terms.
Version 6.3 4/3/2002

Websites linked from ruler-domains.com:

WHOIS informations for megastock.ru

% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
http://www.ripn.net/about/servpol.html#3.2 (in Russian)
http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain:
MEGASTOCK.RU
type: CORPORATE
nserver: ns.molot.ru.
nserver: ns.relsoft.ru.
nserver: ns.relsoftcom.ru.
state: REGISTERED, DELEGATED
org: Joint Stock Company “Computing Forces”
phone: +7 495 7274333
fax-no: +7 495 7274333
e-mail: shalopin@webmoney.ru
registrar: RUCENTER-REG-RIPN
created: 2001.03.24
paid-till: 2010.03.27
source: TC-RIPN

Last updated on 2009.07.26 18:01:10 MSK/MSD

Websites linked from megastock.ru:

Domain
ruler-domains.com
richisoftware2.com
castoholder.com

Address lookup

canonical name ruler-domains.com.
aliases
addresses 213.174.139.29

Domain Whois record

Queried whois.internic.net with “dom ruler-domains.com“…

   Domain Name: RULER-DOMAINS.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.RULER-DOMAINS.COM
   Name Server: NS2.RULER-DOMAINS.COM
   Status: clientTransferProhibited
   Updated Date: 17-may-2009
   Creation Date: 17-nov-2008
   Expiration Date: 17-nov-2010

>>> Last update of whois database: Sun, 26 Jul 2009 14:04:26 UTC <<<

Queried whois.enom.com with “ruler-domains.com“…

Visit AboutUs.org for more information about ruler-domains.com
<a href="http://www.aboutus.org/ruler-domains.com">AboutUs: ruler-domains.com</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: ruler-domains.com

Administrative Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Technical Contact:
   -
   Sergey Ryabov (director@climbing-games.com)
   +7.9219270961
   Fax: +7.9219270961
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Registrant Contact:
   -
   Sergey Ryabov ()

   Fax:
   Scherbakova st., 6-38
   Saint-Petersburg,  197375
   RU

Status: Locked

Name Servers:
   ns1.ruler-domains.com
   ns2.ruler-domains.com

Creation date: 18 Nov 2008 00:58:03
Expiration date: 18 Nov 2010 00:58:00

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 213.174.139.29“…

% Information related to '213.174.136.0 - 213.174.139.255'

inetnum:        213.174.136.0 - 213.174.139.255
netname:        ADVANCEDHOSTERS-NET
descr:          Advanced Hosters
country:        US
admin-c:        AH36-RIPE
tech-c:         AH36-RIPE
status:         ASSIGNED PA
remarks:        INFRA-AW
remarks:        Send abuse reports to abuse@advancedhosters.com
mnt-by:         ADVANCEDHOSTERS-MNT
mnt-lower:      ADVANCEDHOSTERS-MNT
mnt-routes:     ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090402
source:         RIPE

role:           ADVANCEDHOSTERS LIMITED
address:        THE MERIDIAN 4 COPTHALL HOUSE, STATION SQUARE, COVENTRY,
address:        WEST MIDLANDS, CV1 2FL, United Kingdom
org:            ORG-AH11-RIPE
e-mail:         ripe@advancedhosters.com
admin-c:        OAVO1-RIPE
tech-c:         OAVO1-RIPE
nic-hdl:        AH36-RIPE
changed:        ripe@advancedhosters.com 20090331
source:         RIPE

% Information related to '213.174.128.0/19AS39572'

route:          213.174.128.0/19
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

% Information related to '213.174.136.0/22AS39572'

route:          213.174.136.0/22
descr:          Hosting segment
origin:         AS39572
mnt-by:         ADVANCEDHOSTERS-MNT
changed:        ripe@advancedhosters.com 20090403
source:         RIPE

DNS records

DNS query for 29.139.174.213.in-addr.arpa returned an error from the server: NameError

name class type data time to live
ruler-domains.com IN A 213.174.139.29 86400s (1.00:00:00)
ruler-domains.com IN MX
preference: 10
exchange: mail.ruler-domains.com
86400s (1.00:00:00)
ruler-domains.com IN SOA
server: localhost.ruler-domains.com
email: root.ruler-domains.com
serial: 4
refresh: 10800
retry: 900
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
ruler-domains.com IN NS ns1.ruler-domains.com 86400s (1.00:00:00)
ruler-domains.com IN NS ns2.ruler-domains.com 86400s (1.00:00:00)

Traceroute

Tracing route to ruler-domains.com [213.174.139.29]

hop rtt rtt rtt ip address fully qualified domain name
1 2 4 10 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 1 0 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.1 et3-1.ibr03.dllstx3.theplanet.com
5 32 32 32 70.87.253.190 be.fd.5746.static.theplanet.com
6 32 33 32 206.223.115.120 10g.r0.eqix.ash.va.us.iptp.net
7 32 33 32 87.239.188.250
8 32 32 32 213.174.139.29

Trace complete

Service scan

FTP – 21 220 (vsFTPd 2.0.5)
500 OOPS: vsf_sysutil_recv_peek: no data
500 OOPS: child died
SMTP – 25 220 localhost.localdomain ESMTP Sendmail 8.13.8/8.13.8; Sun, 26 Jul 2009 10:02:28 -0400
HTTP – 80
POP3 – 110 +OK Dovecot ready.
IMAP – 143 * OK Dovecot ready.

— end —

Canadian Pharmacy – genericspharm.org

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos


  1. happy-pills.net
  2. noprecriptiontablets.net
  3. pharmascop.com
  4. buyneurontin.com
  5. educationequipment.net
  6. genericspharm.org
  7. yourdose.net
  8. lamisil-store.com
  9. luvchat.com
  10. sitewisellc.com
  11. allpharmacyonline.com
  12. drugpurchase.com
  13. aciphex-drugstore.com
  14. www.pharmaorder.com
  15. original-doctor.com
  16. edsupport.info
  17. meds-without-prescription.com
  18. pillsforweight.com
  19. clomid-medication.com
  20. viagra-levitra.com
  21. rxplls.com
  22. generic-allegra.net
  23. zithromax-without-prescription.com
  24. canadian-medstore.com
  25. amerismart.org
  26. vigra.rx-ed.info
  27. cialis-buy.info
  28. viagra-100mg.net
  29. allpharmacyonline.net
  30. aciphex-drugstore.com
  31. buyneurontin.com
  32. pharmaorder.com
  33. drugspurchase.com
  34. genericspharm.org
  35. yourdose.net
  36. original-doctor.com
  37. viagra-100mg.net
  38. anxietyzoloft.com
  39. orccug.com
  40. ca-drugstore.com
  41. largestonlinepharmacy.com
  42. drugsdelivery.net
  43. amazing-drugs.com
  44. amoxicillinnoprescription.com
  45. officialpharmacy.com

happy-pills.net
noprecriptiontablets.net
pharmascop.com
buyneurontin.com
educationequipment.net
genericspharm.org
yourdose.net
lamisil-store.com
luvchat.com
sitewisellc.com
allpharmacyonline.com
drugpurchase.com
aciphex-drugstore.com
original-doctor.com
edsupport.info
meds-without-prescription.com
pillsforweight.com
clomid-medication.com
viagra-levitra.com
rxplls.com
generic-allegra.net
zithromax-without-prescription.com
canadian-medstore.com
amerismart.org
vigra.rx-ed.info
cialis-buy.info
viagra-100mg.net
allpharmacyonline.net
aciphex-drugstore.com
buyneurontin.com
pharmaorder.com
drugspurchase.com
genericspharm.org
yourdose.net
original-doctor.com
viagra-100mg.net
anxietyzoloft.com
orccug.com
ca-drugstore.com
largestonlinepharmacy.com
drugsdelivery.net
amazing-drugs.com
amoxicillinnoprescription.com
officialpharmacy.com

Address lookup

canonical name genericspharm.org.
aliases
addresses 85.17.177.196

Domain Whois record

Queried whois.publicinterestregistry.net with “genericspharm.org“…

Domain ID:D155629905-LROR
Domain Name:GENERICSPHARM.ORG
Created On:16-Mar-2009 17:52:09 UTC
Last Updated On:16-May-2009 03:52:27 UTC
Expiration Date:16-Mar-2010 17:52:09 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:cb61fa3d409
Registrant Name:Whois Agent
Registrant Organization:Nexton Limited
Registrant Street1:Irpinskaya 69
Registrant City:Kiev
Registrant State/Province:
Registrant Postal Code:03142
Registrant Country:UA
Registrant Phone:+380.993161649
Registrant Email:support@ruler-domains.com

Admin ID:cb61fa3d409
Admin Name:Whois Agent
Admin Organization:Nexton Limited
Admin Street1:Irpinskaya 69
Admin City:Kiev
Admin State/Province:
Admin Postal Code:03142
Admin Country:UA
Admin Phone:+380.993161649
Admin Email:support@ruler-domains.com

Tech ID:cb61fa3d409
Tech Name:Whois Agent
Tech Organization:Nexton Limited
Tech Street1:Irpinskaya 69
Tech City:Kiev
Tech State/Province:
Tech Postal Code:03142
Tech Country:UA
Tech Phone:+380.993161649
Tech Email:support@ruler-domains.com

Name Server:NS1.MEDICATIONS-ONLINE.CO.UK
Name Server:NS2.MEDICATIONS-ONLINE.CO.UK
Name Server:

Network Whois record

Queried whois.ripe.net with “-B 85.17.177.196“…

Information related to ‘85.17.177.0 – 85.17.177.255’

inetnum: 85.17.177.0 – 85.17.177.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070710
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

% Information related to ‘85.17.0.0/16AS16265’

route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE

DNS records

DNS query for genericspharm.org failed: WouldBlock

name class type data time to live
196.177.17.85.in-addr.arpa IN PTR belhost.biz 86400s (1.00:00:00)
SmartFilter Category: Not Categorized
Make Category Suggestions
IP: 85.17.177.196
Nameservers: ns1.kpv007.local
ns2.kpv007.local

Crime Servers – Canadian Pharmacy Spam

Canadian Pharmacy Spam Servers

SmartFilter Category: Malicious Sites
Make Category Suggestions
Namerservers on IP: dns1.carryfit.com
dns1.deepworthy.com
dns1.drivefabled.com
dns1.duckspruce.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fullrail.com
dns1.grewmile.com
dns1.leadspitch.com
dns1.littletrue.com
dns1.luckyoxygen.com
dns1.nationreap.com
dns1.noseaglow.com
dns1.orclock.com
dns1.pamperextra.com
dns1.personsuffix.com
dns1.pleaseself.com
dns1.relaxrange.com
dns1.replyvoice.com
dns1.ropebird.com
dns1.saidplan.com
dns1.thingspend.com
dns1.towardhardy.com
dns1.trendylost.com
dns1.trendysit.com
dns1.varystart.com
dns1.vippast.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.winnertrue.com
dns1.wishlate.com
dns2.aftermulti.com
dns2.agreecrop.com
dns2.angerboat.com
dns2.boughtcreate.com
dns2.carryfit.com
dns2.createwere.com
dns2.dadfour.com
dns2.deepworthy.com
dns2.dreamylot.com
dns2.drivefabled.com
dns2.fireideal.com
dns2.greatyule.com
dns2.hasfeet.com
dns2.headraise.com
dns2.huntbring.com
dns2.leadspitch.com
dns2.littletrue.com
dns2.nationdimple.com
dns2.nationreap.com
dns2.noseaglow.com
dns2.orclock.com
dns2.pleaseself.com
dns2.pridenature.com
dns2.replyvoice.com
dns2.ropebird.com
dns2.saidplan.com
dns2.shallcoat.com
dns2.spotseason.com
dns2.tangyprime.com
dns2.towardhardy.com
dns2.trendysit.com
dns2.varystart.com
dns2.vippast.com
dns2.weekplease.com
dns3.aftermulti.com
dns3.agreecrop.com
dns3.andside.com
dns3.aromaeager.com
dns3.beginwisdom.com
dns3.buyvalued.com
dns3.caringmodest.com
dns3.coldfull.com
dns3.createwere.com
dns3.dadwrote.com
dns3.dealusual.com
dns3.decenton.com
dns3.decidesmile.com
dns3.deepworthy.com
dns3.dependchoice.com
dns3.dressadd.com
dns3.drivefabled.com
dns3.duckspruce.com
dns3.eachmean.com
dns3.elsehear.com
dns3.enginemost.com
dns3.fireideal.com
dns3.flipdollar.com
dns3.fullrail.com
dns3.geniusyet.com
dns3.getensure.com
dns3.giftedproper.com
dns3.growverb.com
dns3.hasfeet.com
dns3.headraise.com
dns3.heldforce.com
dns3.inchkept.com
dns3.leadspitch.com
dns3.leveldepend.com

Crime – Canadian Pharmacy Spam Servers

Canadian Pharmacy Spam Servers

SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: deleteddns.suitmotion.com
dns1.agreecrop.com
dns1.andside.com
dns1.aromaeager.com
dns1.beginwisdom.com
dns1.belldeep.com
dns1.birdwinner.com
dns1.boughtcreate.com
dns1.buyvalued.com
dns1.camediffer.com
dns1.carryfit.com
dns1.coldfull.com
dns1.coursethey.com
dns1.createshore.com
dns1.createwere.com
dns1.dadfour.com
dns1.dadserve.com
dns1.dadwrote.com
dns1.dealusual.com
dns1.decenton.com
dns1.decidesmile.com
dns1.deepworthy.com
dns1.dependchoice.com
dns1.dreamylot.com
dns1.dressadd.com
dns1.duckspruce.com
dns1.eachmean.com
dns1.elsehear.com
dns1.enginemost.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fromvital.com
dns1.fullrail.com
dns1.getensure.com
dns1.giftedproper.com
dns1.grewmile.com
dns1.growverb.com
dns1.hasfeet.com
dns1.huntbring.com
dns1.inchkept.com
dns1.leadspitch.com
dns1.leveldepend.com
dns1.lightleave.com
dns1.littletrue.com
dns1.loyalgreat.com
dns1.luckyoxygen.com
dns1.magnetsent.com
dns1.nationdimple.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noticematch.com
dns1.nounstudy.com
dns1.orclock.com
dns1.overbehind.com
dns1.pamperextra.com
dns1.pasttalk.com
dns1.pathwhen.com
dns1.peoplewind.com
dns1.personsuffix.com
dns1.planjust.com
dns1.pleaseself.com
dns1.proudliquid.com
dns1.quartmover.com
dns1.regionthe.com
dns1.renownstreet.com
dns1.replyvoice.com
dns1.ridebought.com
dns1.ropebird.com
dns1.saidplan.com
dns1.sawzeal.com
dns1.sereneread.com
dns1.sexyclock.com
dns1.shallcoat.com
dns1.sliporgan.com
dns1.smilefollow.com
dns1.smoothchoose.com
dns1.someown.com
dns1.spotseason.com
dns1.swimstand.com
dns1.tangyprime.com
dns1.teachwing.com
dns1.thanksent.com
dns1.thingspend.com
dns1.trendylost.com
dns1.twentyterm.com
dns1.varystart.com
dns1.vippast.com
dns1.weekplease.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.wishlate.com
dns1.witfun.com
dns1.zoomknew.com
dnsdeleted.carrytake.com
ns1.7594.org
ns1.9307.org
ns1.9736.org
ns1.agogalore.com
ns1.alertwow.com

Canadian Pharmacy Spam Domains

WARNING: The following links may contain malware, spyware, browser exploits, or other harmful code which can damage your system. URIBL strongly advises against clicking any links and/or accessing any of the sites included in these lists. URIBL.COM is not an ISP, web host, or domain registrar. We do not have any control over what is found on any of the sites linked from this page. This information is made available to the public so action can be taken by the responsible party. If you do not know how to properly put this information to good use, you should not be here. Complaints regarding information found on this page will go unanswered.

# Domain Date/Time Added
#1 holeabove.com Thu, 18 Jun 2009 07:51:12 +0000
#2 trialtrials.com Thu, 18 Jun 2009 06:17:30 +0000
#3 settlenoon.com Thu, 18 Jun 2009 06:14:25 +0000
#4 nightbye.com Thu, 18 Jun 2009 04:01:06 +0000
#5 keptuntil.com Thu, 18 Jun 2009 03:59:17 +0000
#6 fewhair.com Thu, 18 Jun 2009 03:21:17 +0000
#7 spacemonth.com Thu, 18 Jun 2009 02:01:02 +0000
#8 thinggrow.com Thu, 18 Jun 2009 01:57:52 +0000
#9 prefercoat.com Thu, 18 Jun 2009 01:54:46 +0000
#10 rosyhat.com Thu, 18 Jun 2009 00:02:24 +0000
#11 poemread.com Wed, 17 Jun 2009 20:58:03 +0000
#12 toolwhere.com Wed, 17 Jun 2009 20:48:50 +0000
#13 northunique.com Wed, 17 Jun 2009 18:10:12 +0000
#14 eecam.com Wed, 17 Jun 2009 16:51:42 +0000
#15 titsss.com Wed, 17 Jun 2009 16:51:40 +0000
#16 hrnygirl.com Wed, 17 Jun 2009 16:51:36 +0000
#17 slutyy.com Wed, 17 Jun 2009 16:51:34 +0000
#18 basepast.com Wed, 17 Jun 2009 15:26:09 +0000
#19 fourmighty.com Wed, 17 Jun 2009 15:24:28 +0000
#20 casedreamy.com Wed, 17 Jun 2009 15:21:35 +0000
#21 massideal.com Wed, 17 Jun 2009 15:11:21 +0000
#22 slipmine.com Wed, 17 Jun 2009 15:06:55 +0000
#23 daringbring.com Wed, 17 Jun 2009 15:06:14 +0000
#24 ninacams.com Wed, 17 Jun 2009 14:02:09 +0000
#25 putbits.com Wed, 17 Jun 2009 06:09:01 +0000
#26 burntold.com Wed, 17 Jun 2009 04:43:19 +0000
#27 leaddoes.com Wed, 17 Jun 2009 04:11:23 +0000
#28 foundtiny.com Wed, 17 Jun 2009 03:34:17 +0000
#29 voiceflip.com Wed, 17 Jun 2009 03:08:42 +0000
#30 washrace.com Wed, 17 Jun 2009 02:45:01 +0000
#31 hisfly.com Wed, 17 Jun 2009 02:26:06 +0000
#32 extolact.com Wed, 17 Jun 2009 02:02:16 +0000
#33 qosogcim.com Tue, 16 Jun 2009 21:37:38 +0000
#34 zezozvaz.com Tue, 16 Jun 2009 21:27:57 +0000
#35 triallenght.com Tue, 16 Jun 2009 20:49:52 +0000
#36 trialextra.com Tue, 16 Jun 2009 19:37:09 +0000
#37 keptmarket.com Tue, 16 Jun 2009 16:39:17 +0000
#38 wokofmum.com Tue, 16 Jun 2009 15:46:16 +0000
#39 ciluhgis.com Tue, 16 Jun 2009 15:42:06 +0000
#40 wejezhux.com Tue, 16 Jun 2009 15:29:26 +0000
#41 jonoklem.com Tue, 16 Jun 2009 15:20:17 +0000
#42 supidxew.com Tue, 16 Jun 2009 15:15:38 +0000
#43 mumuvhej.com Tue, 16 Jun 2009 15:07:49 +0000
#44 gluekewl.com Tue, 16 Jun 2009 14:31:00 +0000
#45 hollycams.com Tue, 16 Jun 2009 08:03:57 +0000
#46 gigicams.com Tue, 16 Jun 2009 08:03:49 +0000
#47 tiffcams.com Tue, 16 Jun 2009 08:03:45 +0000
#48 summrcams.com Tue, 16 Jun 2009 07:28:17 +0000
#49 wendicams.com Tue, 16 Jun 2009 07:16:45 +0000
#50 h0tcams.com Tue, 16 Jun 2009 07:16:42 +0000
#51 mandicams.com Tue, 16 Jun 2009 07:06:10 +0000
#52 jenncams.com Tue, 16 Jun 2009 06:57:40 +0000
#53 quarttan.com Tue, 16 Jun 2009 06:00:55 +0000
#54 saidapple.com Tue, 16 Jun 2009 05:23:25 +0000
#55 treatdry.com Tue, 16 Jun 2009 04:43:14 +0000
#56 happenmelody.com Tue, 16 Jun 2009 04:15:48 +0000
#57 groundfeel.com Tue, 16 Jun 2009 04:10:31 +0000
#58 scoreseither.com Tue, 16 Jun 2009 03:21:55 +0000
#59 coatbits.com Tue, 16 Jun 2009 02:34:51 +0000
#60 abcscript5.com Tue, 16 Jun 2009 01:36:26 +0000
#61 sidehalf.com Mon, 15 Jun 2009 22:08:45 +0000
#62 excitefind.com Mon, 15 Jun 2009 22:01:05 +0000
#63 grewjoin.com Mon, 15 Jun 2009 21:43:45 +0000
#64 foundreply.com Mon, 15 Jun 2009 21:38:04 +0000
#65 chiefpound.com Mon, 15 Jun 2009 21:34:29 +0000
#66 humormunchy.com Mon, 15 Jun 2009 21:06:41 +0000
#67 widerenown.com Mon, 15 Jun 2009 20:42:11 +0000
#68 cellrest.com Mon, 15 Jun 2009 16:30:24 +0000
#69 roundleft.com Mon, 15 Jun 2009 16:23:10 +0000
#70 beganpretty.com Mon, 15 Jun 2009 16:20:32 +0000
#71 livebut.com Mon, 15 Jun 2009 16:19:05 +0000
#72 monthred.com Mon, 15 Jun 2009 10:22:05 +0000
#73 monthawe.com Mon, 15 Jun 2009 09:19:22 +0000
#74 monthblack.com Mon, 15 Jun 2009 06:21:27 +0000
#75 familylevel.com Mon, 15 Jun 2009 05:12:06 +0000
#76 singboard.com Mon, 15 Jun 2009 05:08:19 +0000
#77 abcscript6.com Mon, 15 Jun 2009 04:01:44 +0000
#78 speedwonder.com Mon, 15 Jun 2009 03:56:19 +0000
#79 warmproper.com Mon, 15 Jun 2009 02:37:46 +0000
#80 tryneck.com Mon, 15 Jun 2009 01:42:35 +0000
#81 stribethree.com Sun, 14 Jun 2009 19:49:26 +0000
#82 drysexy.com Sun, 14 Jun 2009 09:57:01 +0000
#83 monthtwo.com Sun, 14 Jun 2009 07:28:13 +0000
#84 greathumble.com Sun, 14 Jun 2009 06:56:53 +0000
#85 tiemodel.com Sun, 14 Jun 2009 05:58:57 +0000
#86 suffixwonder.com Sun, 14 Jun 2009 04:34:32 +0000
#87 wemaxi.com Sun, 14 Jun 2009 04:16:49 +0000
#88 homevaried.com Sun, 14 Jun 2009 02:48:04 +0000
#89 swelltrue.com Sun, 14 Jun 2009 02:27:00 +0000
#90 thinmeet.com Sun, 14 Jun 2009 02:23:47 +0000
#91 cuddlysuffix.com Sun, 14 Jun 2009 02:22:31 +0000
#92 monthblue.com Sat, 13 Jun 2009 13:49:44 +0000

Source: http://rss.uribl.com/nic/CHINA_SPRINGBOARD_INC_.html

Canadian Pharmacy Spam – homevaried.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.18.238.145 Canada (Calgary)* Whois Google DNSStuff Urgentmessage.org
207.115.36.154 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Todd Hinkle Sat Jun 13 16:47:50 2009 Return-Path: todd.hinklexs@netron.cz
Authentication-Results: mta167.sbc.mail.mud.yahoo.com from=netron.cz; domainkeys=neutral (no sig); from=netron.cz; dkim=neutral (no sig) Received: from 66.18.238.145 (EHLO nlpi140.prodigy.net) (207.115.36.154) by mta167.sbc.mail.mud.yahoo.com with SMTP;
Sat, 13 Jun 2009 16:47:48 -0700 Received: from zjl05r3 (dsl-vlan458-66-18-238-145.nucleus.com [66.18.238.145]) by nlpi140.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5DNlSlm031067; Sat, 13 Jun 2009 18:47:47 -0500 Message-ID: <000701c9ec81$5c956240$4a37416a@netron.cz>
Reply-To: “Todd Hinkle” todd.hinklexs@netron.cz
From: “Todd Hinkle” todd.hinklexs@netron.cz
To: ScamFraudAlert
Subject: Get anti anxiety medications online!!
Date: Sat, 13 Jun 2009 18:47:50 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=”windows-1250″ reply-type=original Content-Transfer-Encoding: 7bit Content-Length: 136
An Incredible CanadianPharmacy is available at your Fingertips!
No Doctor Needed! Browse our SiteToday! -> http://homevaried.com

Address lookup

canonical name homevaried.com.
aliases
addresses 60.191.221.123
60.191.239.166
61.191.191.241
203.93.208.86
58.17.3.41

Domain Whois record

Queried whois.internic.net with “dom homevaried.com“…

   Domain Name: HOMEVARIED.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.BEDPLAIN.COM
   Name Server: NS2.BEDPLAIN.COM
   Name Server: NS3.AGAINTAIL.COM
   Name Server: NS4.AGAINTAIL.COM
   Name Server: NS5.OUTMILK.IM
   Name Server: NS6.OUTMILK.IM
   Status: ok
   Updated Date: 10-jun-2009
   Creation Date: 10-jun-2009
   Expiration Date: 10-jun-2010

Last update of whois database: Thu, 18 Jun 2009 07:58:28 UTC <<<

Queried whois.namerich.cn with “homevaried.com“…

 DomainName : homevaried.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.OUTMILK.IM
Name Server......................NS3.AGAINTAIL.COM
Name Server......................NS1.BEDPLAIN.COM
Name Server......................NS6.OUTMILK.IM
Name Server......................NS4.AGAINTAIL.COM
Name Server......................NS2.BEDPLAIN.COM
Status...........................ok
Creation  Date ..................2009-06-10
Expiration Date .................2010-06-10
Last Update  Date ...............2009-06-10

Registrant ID ...................V-X-57187-12492
Registrant Name .................JIANG HUA
Registrant Organization .........JIANG HUA
Registrant Address ..............LONGSHABEILU12
Registrant City..................TianJin
Registrant Province/State .......TianJin
Registrant Country Code .........CN
Registrant Postal Code ..........300009
Registrant Phone Number .........+86.02251251685
Registrant Fax ..................+86.02251251685
Registrant Email ................xianeldb@126.com

Administrative ID ...............V-X-57187-12492
Administrative Name .............JIANG HUA
Administrative Organization .....JIANG HUA
Administrative Address ..........LONGSHABEILU12
Administrative City..............TianJin
Administrative Province/State ...TianJin
Administrative Country Code .....CN
Administrative Postal Code ......300009
Administrative Phone Number .....+86.02251251685
Administrative Fax ..............+86.02251251685
Administrative Email ............xianeldb@126.com

Billing ID ......................V-X-57187-12492
Billing Name ....................JIANG HUA
Billing Organization ............JIANG HUA
Billing Address .................LONGSHABEILU12
Billing City.....................TianJin
Billing Province/State ..........TianJin
Billing Country Code ............CN
Billing Postal Code .............300009
Billing Phone Number ............+86.02251251685
Billing Fax .....................+86.02251251685
Billing Email ...................xianeldb@126.com

Technical ID ....................V-X-57187-12492
Technical Name ..................JIANG HUA
Technical Organization...........JIANG HUA
Technical Address ...............LONGSHABEILU12
Technical City...................TianJin
Technical Province/State.........TianJin
Technical Country Code ..........CN
Technical Postal Code ...........300009
Technical Phone Number ..........+86.02251251685
Technical Fax ...................+86.02251251685
Technical Email .................xianeldb@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.221.123“…

inetnum:      60.191.221.0 - 60.191.221.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd IDC Center
descr:
admin-c:      LW1143-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW1143-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-83285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 123.221.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
homevaried.com IN A 58.17.3.41 3600s (01:00:00)
homevaried.com IN A 60.191.239.166 3600s (01:00:00)
homevaried.com IN A 60.191.221.123 3600s (01:00:00)
homevaried.com IN A 61.191.191.241 3600s (01:00:00)
homevaried.com IN A 203.93.208.86 3600s (01:00:00)

— end —


Rx partner – Meds-Easy.com – Meds-Easy.com

1001medicines.com Acomplia-pills.info Hotdrugs.net Alldietdrugs.com Bestmedicineonline.net Codeinebuy.com Legalrxdrugs.com Meds-trade.com Meds24.net Mypaindrugs.com Paintabs.net Xa

Meds-Easy.com – Meds-Easy.com logo

Phone: 800-556-5617

http://www.Meds-Easy.com

Internet,

India

First , before I Begin , I will Start by Stating that i Have Saved and Kept ALL Emails/Conversations between myself and meds-easy.com to Prove and Back-up what i am Stating Below. If anyone needs to Contact me, my email address is th0rn@verizon.net . I will Help anyone I can or Answer any Questions I can, that isnt answered below.

I placed an Order Online with meds-easy.com or http://www.meds-easy.com and I Paid them Over $300 + $45 for ‘so-called’ Faster Shipping. I broke my Back when i was about 12 years old, and my Back has never been right since the incident. My Doctor is going to be moving up North soon, so i will not have a way to get the Pain Medication that I need to Live and Function unless i found out a way to do so , or if i find another Doctor. I was told that i could go Online and Order My Medication from Online Pharmacies and even some without a Prescription and it was Supposed to be Legal , or to a certain extent anyways. I tryed to take the easy way out, by trying out the Online thing First, cause if it did infact Work and was Legit, I would save Alot of Money that I was giving to my Doctors Every Month.

So, I tryed to order 40mg Oxycodone from Meds-Easy.com , as they stated on thier site that I could get it there from them, Without an Rx or Prescription. I was supposed to be able to Legally order it (as long as i was ordering it for Personal Use) , without a Doctors Approval or an Rx/Prescription. All I was supposed to need, was the Sites Physicans ok’ing, and everything was supposed to be good. I should have known better I guess.

They did indeed take that Money with-in the First Week, However they told me in emails that they had Not gotten it Yet . My Bank verified that the Money had in Fact been taken from my Bank Account, but Meds-Easy.com was still telling me they had Not Gotten Anything.

According to meds-easy.com, they received the Order that I placed. But the Money that I used to Pay Meds-Easy.com with , was Paid to/through using another Service ( E-Checks.com ) , and that my Money that I paid out was in the possesion of that service still. They would not be able to receive my Money that I Paid to them for another 20-25 Business Days , or until E-Checks Succesfully Transfered the Money to Them there at Meds-Easy.com .

So Basically, since I went to thier Website and Placed my Order, and I was told on the Site that I Could Use my Credit-Card , but when I went through the Check-Out Process , I Only had One Option I could use to Pay them with, and that was Through E-Checks. So going this Route , I (or You) have to Pay your Money to E-Checks (which takes about 1-2 weeks to Complete) , and then I (or You) Have to Wait another 20-25 Business Days (Not including Any Holidays or Weekends) for E-Checks to Successfully Transfer the Money I(or You) sent using thier Service to Meds-Easy.com

So this Process takes a while and i think it is done or Setup that way for a Reason or Purpose. If you have to Wait a Month ( 30 Days ) or so for the Funds to Clear, Then Surely the Friendly People there at Meds-Easy.com can send you Enough Nice, Comforting Emails to make you Wait another 30 Days or so, before you Really start to Suspect anything Seriously is wrong. I mean, come on. Why wouldn’t it take 30 Days to Get from them to you? It is (supposedly) in Another Whole Country!

DONT FALL FOR IT! It’s a Total and Complete SCAM and your just Pissing your Money AWAY!!!

But an Update on My Order that I Placed and NEVER Got. I Finally , after I received an email from them on 11-1-08 (Reminder that My Order was Placed with them in Sept of 2008) , they told me that they had received my Order and had also received my Money from E-Checks. And for me not to worry , that my order would be shipped out to me with-in 2-3 Business Days and I should received it by 7 Business Days or so.

I placed my Order with them on 9-30-08. It is now 12-1-08 and I have still not gotten anything from them. When I email them now and tell them I have not gotten anything from them , and that I would like an Update or REFUND on my Order that I placed with them , they tell me that I should not worry.

That my Order is probrobly Lost SomeWhere or that it was Stuck in U.S. Customs. However when I Searched/Tracked the ‘So-Called’ Tracking Number they Provided me for the http://www.usps.com Website , there is no such record of that Tracking Number. But they tell me it is still Lost somewhere.

So after MANY Emails Back and Forth between Myself and Meds-Easy.com , I Still was Not getting any Clear Answers from them. Basically , all i Kept on getting from them was Emails asking me to Wait Longer or Hinting at me to Wait just a little Longer.Still Nothing.

After Waiting as they asked me to, just to see nothing, I sent them another Email. When support@meds-easy.com Finally Replied, this Amy Jones , ( or atleast thats what they signed thier name as in the E-Mail in EVERY SINGLE RESPONSE that I got from them at Meds-Easy.com ) told me that they are going to ‘ReShip it out to me. Again, it is now December and it was September when I placed my Order online for my Pain Medication. I have Not gotten anything from them yet, and I still dont Plan to, as now they are ignoring All my Attempt to email them or Contact them. When I leave a Message at the Telephone Number that is in my Replied emails from them and on thier website, I Never get any Responses or Returned Calls when I do leave a Message.

The Telephone Number that they gave me in email and on thier website is in-fact Bogus (or atleast they have No Intentions of Returning your Calls when you leave a Message). Noone ever answers when you call. All you get when you dial the Telehone Number is a Recording from a ‘so-called’ ‘Call Service’ or ‘Answering Service’. When you ask about it in email , they tell you that they are having Problems with the Telephone Line and they are working to have it corrected. They also tell you in email that the Telephone Number/Line , should be Corrected and Operational with-in the Week.

Its been 3 Months now. Still isnt fixed or Operational. I also dont think it will ever be, as that is the way they have you waiting even Longer for your Money to Clear your Bank for them to STEAL .

My Bank has a Rule, and since I waited Longer than 60 Days to try to Dispute the Charges for ‘Services not Rendered’ , now I cannot Dispute and/or Reverse the Charges to Re-Collect my Money Back because too much time has Expired.

Listen EVERYONE.

Everyone should tell the Truth when dealing with something like this with your Bank or Finacial Institution. Everyone should always try thier best to Keep An Honest Relationship with thier Bank or Finacial Institution. So what-ever excuse you use ( The Best Excuse would be to Dispute the Charge and tell your Bank that you Never even Autherized the Charges and you do NOT know whom the Person/Company even is that Stole Your Money, which would FORCE a Charge-Back to Re-Collect your Money and Best of All, ITS FREE TO DO)( * HINT HINT * ) , I would ‘Suggest’ you be Honest.

By all Means, Check with your Finacial Institution or Bank and see what the Rules is on Reversing Unautherized Charges made to your Account with-out your Permission. Also ask them How Long do you Have to Place a Charge-Back on the Money in Question, if you place an Order with an Online Site and you Dont receive it.

Also if you have Not gotten your Product that you Order from Meds-Easy.com or any other site Claiming to sell you Any Kind of Medication ,( especially Pain Medication ) with-in the alloted time that your Bank gives you to Dispute those Charges (Usually 30 or 60 Days) , then by all means, You need to go to your Bank and tell them that you did Not Autherize Anyone to STEAL Money from Your Account ( or whatever you plan on telling them , or whatever pertains to your genuine situation , as I cannot speak for you , to your Bank ) , and that you do Not even know Who(m) these/this People/Company are/is

OR that you have never Recieved anything for your Money and you cannot get up with anyone to try to Settle the matter with the site that stole your Money. Thats what Happened to me, yet i just waited a bit too Long.

Hind-Sight is always 20/20.

I am Not telling you to Lie. I am just using the Above Information as an Example. However I think Most People wouldn’t mind telling a Lie to Save Thier Money , Rather than allow someone to Steal from them. Especially thier Hard-Earned Money. But thats just MY OPINION.

Too Bad it isnt LEGAL to Fraud the ones that Frauded you.

I dont know if there is Anything at all I can do, as it is well Past the 60 Days that my Bank allots me to do a Charge-Back , so I guess I pissed my Money Away. Oh well. Leason Learned if nothing else.

Remember as it still aplies…..’If it seems too good to be True, it Probrobly is’.

Cause in the end, I Lost ALOT of Money and Got nothing for it, but Alot of Wasted Time and Headaches, and B.S. E-Mails.

By the way, you can E-Mail me if ANYONE out there knows of any TRUSTED SITES that are NOT SCAMS , that I can get my Medication that I need from, as I might have to go without my Medication after my Doctor Moves away, Atleast until i can Find a Place to get it just until i can get a New Doctor. That is if there is a Site that you can Order from that Will Not Rip Me Off. Any Help would be better than None.

Thanks and I just hope that I have been able to Help Someone Retrieve thier Money Back they had Stolen or that I was able to Prevent someone from Dealing with these People. Which in-turn Prevents Someone Else (or You) from having to go through all the things I did, just to get Burned.

J.C. from Hayesville, N.C.

My Email : (((Redacted)))

( Hint, thats a Zero in my Email, Not an o ).

Thorn-was-ripped-off

Hayesville, North Carolina

U.S.A.

Beware, Meds-Easy.com Scamed Me. Scam RipOff Rip Off Con Cheats Steals Stole Money – Internet Online Pharmacey – Buy Pain Medication – Oxy Oxys Oxycodone Oxycontin with No Prior Prescription or Rx needed, is whats advertised but dont fall for it. Heres Y

Please see this Entire Post to Spot and Determine for yourself, what action, if any, you will or may take. Also please READ this Article Post in its Entirety and try to understand what its purpose is for , before you here at RipoffReport.com makes any decisions to Cancel and or Reject the Allowance of this Post. We the Public have the right to be informed. All I am trying to do is provide VALID Information to try to Better Inform and Help the Public make a Better Decision. If there is Anything in my Post that Crosses the Line , when it comes to your T&C’s , then if you must , please just Remove that Particular info , instead of Removing the Entire Post and/or Thread. And a Big Thanks to these people here at RipoffReport.com , for the site and information they help provide , to Assist and Protect us, as the Public. Kudo’s! Keep up the Great Work.

**Please Note** I have done some Research and found that this same Company that Scammed me, Meds-Easy.com , Not Only Uses and Operates that Website Alone, but The Same People/Company Also Operates Atleast 54 More Websites just like it, All Claiming to Sell Prescription Medication. I will Post a List of the 54 webites that are Owned and/or Operated by the same People that Operate Meds-Easy.com Below , and the PROOF that I found of it.

Also, there are a few website, similar to this one, that will help Warn you about Websites and Companys committing Scams and Frauds listed in this post, so if you need additional help, you can find those websites in this post. Another site you can visit and view about these type of Scams and Warnings , which may also help is …

http://www.scamfraudalert.com

But To Respond to the Comment to my post and to try to help clarify any Confusion anyone might have about me , or what I have said and stated above and to better help explain the Reason for my Post , I will try Harder to Explain my Actions.

Bsmjuem , Thanks for your Comment and if you did Take the Time to Read the ENTIRE Post above about my Experience with this Rouge Company , then I want to Thank You Personally. But Please allow me to start by stating that i did not take the time to Register and Log-In at this site , just to Create a Post and Cry about a Mistake I made, or to get people to feel sorry for me, as if i was looking for sympathy or something. You stated that you have been Warning people for quite some time now, but where were you at, before i placed my order and wasted my Money? I didnt know you, nor did you know me. I had no idea that there was such a Huge epidimic when it comes to Online Pharmacey Scams. Most of these Online Sites look Very Professional, and they seem to have all the right answers. They also offer the Medication you are looking for at Such a Great Deal! So MANY of these Rouge Sites Can be pretty Convincing. That being said, they got me, and took my money. So I couldnt take your advice that you have been warning others about for such a long time. I wished now, that I had taken the time to Do more Research on the Company and also the laws , as they apply to Buying Medication Online.

Anyways , I am Updating this Post , to clear a few things up that Bsmjuem or anyone else may have Misunderstood. The Reason for my Post , was to HELP Warn Others about this site and what goes on when people try to Order from these Online Pharmacys. How can I Help Warn others , unless i tell my Story? I didnt know about them Myself , until i had Already been ‘Had’ , by them. Then i still waited forever for the Product that I ordered, before i ever even thought to Google it , and do a little more research on the site and other sites like it. Now I KNOW. But Hindsights 20/20.

So , thats why I am Posting here. I am Hoping that with all the Posts about this Crooked site, thats already been complained about here at ripoffreport.com and other sites, Along with my Post , We can Together help others make Better Decisions and Steer them Clear from these Rouge Sites. Maybe we can Convince others to do thier research before attempting things like this. So if someone does Google it, and didnt find This Information on this site and others like it because the Exact KeyWords that they typed in the SearchBar didnt match , then maybe after I tell My Story, they can find this Information much easier, as there are More KeyWords.

Anyways , i done some Research for Everyone to look at. Many of you may be looking for a few Answers to Certain Questions , so you can look below for your possible answers. The information below is for Educational Purposes and Hopefully it Can or Will Help Someone.

Below is Registration info and Server Data on the Site Meds-Easy.com

———————

They are Also Operating Online, not only using just this website, http://www.Meds-Easy.com , but they are actaully using ATLEAST 54 Other websites that I have found (as they all have the Same IP Address and/or Whois info), and Possibly even More.

A list of All 54 Websites that are owned, and or Operated by this/these Person/People , will Also be Listed Below.

I am just Posting the info on or about the site so Everyone has the Cahnce to be WARNED about this ROUGE Site. It is Only up to you , how you use this information. You also agree that I am in no way responsible, for any actions , for which you may or might use the information provided.

The information that I am Posting Below, can be VERIFIED and PROVEN TO BE TRUE at this site mentioned, by me and posted on this page , below.

If having More In-Depth Info about the Meds-Easy.com website will Help you Recover, Divert and/or Stop these Persons involved from Ripping Off More People like Others and Myself, then I Hope the Info i am Posting Below Can be of use. If you would like to View More info, like the Whois Database, IP Address, Hostnames, Domain info, Service Provider info, Servers, Records and More, on Meds-Easy.com , please see this site ……

http://www.robtex.com/dns/meds-easy.com.html

I have decided to Help Provide this info to whomever may want and or need it. I also was ‘Taken’ or ‘Scammed’ by them at http://www.Meds-Easy.com , and I dont want them to get-over on anyone else. Email me if you have any Q’s at th0rn @ verizon net

*Note* : This Information is provided to you for information purposes only, that is, to assist you in obtaining information about or related to a domain name registration record, in an effort to Help you Recover Monies Lost to this Company, from being Scammed and Ripped Off. Also Note that this information listed here is available ‘as is’.

JC from N.Carolina

—————————

Registration Service Provided By: HOSTLIFE

Contact: +806.63615492

Domain Name: MEDS-EASY.COM

Registrant:
N/A
Maksim Ykubenko skiner82@mail.ru
Saburova str 18-206
Kiev
Kiev,02223
UA
Tel. +202.25365423

Creation Date: 30-Nov-2007
Expiration Date: 30-Nov-2008
Domain servers in listed order:
ns2.specialhosting.info
ns1.specialhosting.info

Administrative Contact:
N/A
Maksim Ykubenko skiner82@mail.ru
Saburova str 18-206
Kiev
Kiev,02223
UA
Tel. +202.25365423

Technical Contact:
N/A
Maksim Ykubenko skiner82@mail.ru
Saburova str 18-206
Kiev
Kiev,02223
UA
Tel. +202.25365423

Billing Contact:
N/A
Maksim Ykubenko (skiner82@mail.ru)
Saburova str 18-206
Kiev
Kiev,02223
UA

Tel. +202.25365423
Status:RENEWAL HOLD

href=”http://www.ripoffreport.com/reports/0/396/RipOff0396564.htm#&#8221; target=”undefined”><span style="color:blue!important;font-weight:normal;font-s.

All of this info can also be Seen and Verified at :
http://www.robtex.com/dns/meds-easy.com.html
————————

Other sites that are Also Owned, Operated and/or Connected to Meds-Easy.com are……

Search Results for 85.17.189.163 [reverse DNS – hosted by.leaseweb.com]

54 Results for 85.17.189.163 (Meds-easy.com)
Website DMOZ
1. 1001medicines.com
2. Acomplia-pills.info
3. Acompliaweb.com
4. Adipexbuy.com
5. Alldietdrugs.com
6. Allrxmeds.eu
7. Bestmedicineonline.net
8. Buy-adipex.net
9. Buypharma.nets
10. Buywmz.com
11. Codeinebuy.com
12. Diet-pharm.net
13. Dietdeals.net
14. Dietreview.biz
15. Diettablets.net
16. Drugslive.com
17. Ecigs.org
18. Familypharma.net
19. Germanycars-direct.com
20. Gmgint.net
21. Hotdrugs.net
22. Hotpharma.net
23. Hotphentermine.com
24. Legalrxdrugs.com
25. Masterfibre.net
26. Medicinestores.net
27. Meds-easy.com
28. Meds-trade.com
29. Meds24.net
30. Medups.com
31. Monaslim.com
32. Mypaindrugs.com
33. Myphentermine.net
34. Orderdiet.net
35. Ozernoe.com
36. Painmedicinestore.com
37. Paintabs.net
38. Phenterminestore.net
39. Phoneporn.org
40. Porno-home.com
41. Replok.com
42. Rxpartner.net
43. Searchadmin.net
44. Sleeptabs.net
45. Specialhosting.info
46. Trustpharm.com
47. Ukrainetouring.com
48. Unfairclients.com
49. Web-las-vegas.com
50. Weighteditorial.com
51. Weightorganizer.com
52. Xanax2mg.net
53. Xxxstock.net
54. Mobitube.org

——-
So all of the 54 Sites Listed Above are One and the Same as the Owners and/or Operaters of Meds-Easy.com
——-
More Server Data Info and Registration Info :

———————————————

Server Data
IP Address: 85.17.189.163 Whois | Reverse-IP | Ping | DNS
Lookup | Traceroute

IP Location Netherlands – Noord-holland – Amsterdam

Leaseweb
Response Code: 200
SSL Cert: Meds Easy – Reliable Online Pharmacy expires in 286 days
Domain Status: Registered And Active Website
Whois Record
Registration Service Provided By: HOSTLIFE.NET
Contact: +066.3615492

Domain Name: MEDS-EASY.COM
Registrant:
Protect Details, Inc

29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Creation Date: 30-Nov-2007
Expiration Date: 30-Nov-2008

Domain servers in listed order:
ns2.specialhosting.info
ns1.specialhosting.info

Administrative Contact:
Protect Details, Inc
Domain Manager ()
29 Kompozitorov st.
Saint Petersburg
,194358
RU

Tel. +7.8129342271
Technical Contact:
Protect Details, Inc
Domain Manager ()
29 Kompozitorov st.
Saint Petersburg
,194358
RU
Tel. +7.8129342271
Billing Contact:
Protect Details, Inc
Domain Manager ()
29 Kompozitorov st.
Saint Petersburg
,194358
RU

Tel. +7.8129342271
All of this info can also be Seen and Verified at :
http://www.scamfraudalert.com/f137/meds-easy-com-16354/

I Hope This Helps. Thanks and Happy Holidays Eva 1.

Canadian Pharmacy Spam Servers

Buying Prescription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

SmartFilter Category:

Spam URLs
Make Category Suggestions Namerservers on IP: dns1.agreecrop.com
dns1.andside.com
dns1.aromaeager.com
dns1.beginwisdom.com
dns1.birdwinner.com
dns1.boughtcreate.com
dns1.buyvalued.com
dns1.camediffer.com
dns1.carryfit.com
dns1.coldfull.com
dns1.coursethey.com
dns1.createshore.com
dns1.createwere.com
dns1.dadfour.com
dns1.dadserve.com
dns1.dadwrote.com
dns1.dealusual.com
dns1.decenton.com
dns1.decidesmile.com
dns1.deepworthy.com
dns1.dependchoice.com
dns1.dreamylot.com
dns1.dressadd.com
dns1.duckspruce.com
dns1.eachmean.com
dns1.elsehear.com
dns1.enginemost.com
dns1.fireideal.com
dns1.flipdollar.com
dns1.fromvital.com
dns1.fullrail.com
dns1.getensure.com
dns1.giftedproper.com
dns1.grewmile.com
dns1.growverb.com
dns1.hasfeet.com
dns1.huntbring.com
dns1.inchkept.com
dns1.leadspitch.com
dns1.leveldepend.com
dns1.lightleave.com
dns1.littletrue.com
dns1.loyalgreat.com
dns1.luckyoxygen.com
dns1.magnetsent.com
dns1.nationdimple.com
dns1.nationreap.com
dns1.nightmodest.com
dns1.noticematch.com
dns1.nounstudy.com
dns1.orclock.com
dns1.overbehind.com
dns1.pamperextra.com
dns1.pasttalk.com
dns1.pathwhen.com
dns1.peoplewind.com
dns1.personsuffix.com
dns1.planjust.com
dns1.proudliquid.com
dns1.quartmover.com
dns1.regionthe.com
dns1.renownstreet.com
dns1.replyvoice.com
dns1.ridebought.com
dns1.ropebird.com
dns1.saidplan.com
dns1.sawzeal.com
dns1.sereneread.com
dns1.sexyclock.com
dns1.shallcoat.com
dns1.sliporgan.com
dns1.smilefollow.com
dns1.smoothchoose.com
dns1.someown.com
dns1.spotseason.com
dns1.swimstand.com
dns1.tangyprime.com
dns1.teachwing.com
dns1.thanksent.com
dns1.thingspend.com
dns1.trendylost.com
dns1.twentyterm.com
dns1.varystart.com
dns1.vippast.com
dns1.weekplease.com
dns1.wentcrisp.com
dns1.wheelfinish.com
dns1.whiteaware.com
dns1.witfun.com
dns1.zoomknew.com
dnsdeleted.carrytake.com
ns1.7594.org
ns1.9736.org
ns1.agogalore.com
ns1.alertwow.com
ns1.alsodivine.com
ns1.bandcost.com
ns1.bandwater.com
ns1.bedplain.com
ns1.bitsfair.com 

SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: dnsdeleted.carrytake.com
ns1.7594.org
ns1.9736.org
ns1.bedplain.com
ns2.11121.org
ns2.7594.org
ns3.quietfree.ru
ns4.13123.org
ns4.7594.org
ns4.9736.org
ns4.truereap.ru
Trusted Neutral Unverified Suspicious Malicious
SmartFilter Category: Spam URLs
Make Category Suggestions
Namerservers on IP: ns1.7594.org
ns1.9736.org
ns1.bedplain.com
ns2.11121.org
ns2.7594.org
ns4.13123.org
ns4.7594.org
ns4.9736.org

Canadian Pharmacy Spam – easesummer.com

Buying Precription Drugs Online May Be Dangerous
Consumer Alert
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

An Amazing Canadian Pharmacy is available_at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://easesummer.com

Read more about this unrivaled fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read more about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed

Address lookup

canonical name easesummer.com.
aliases
addresses 60.191.221.123
60.191.239.164
61.191.191.241
203.93.208.86
58.17.3.41

Domain Whois record

Queried whois.internic.net with “dom easesummer.com“…

   Domain Name: EASESUMMER.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.GREENWROTE.COM
   Name Server: NS2.GREENWROTE.COM
   Name Server: NS3.KNEWTASTY.COM
   Name Server: NS4.KNEWTASTY.COM
   Name Server: NS5.REPLYLAKE.IM
   Name Server: NS6.REPLYLAKE.IM
   Status: ok
   Updated Date: 09-jun-2009
   Creation Date: 09-jun-2009
   Expiration Date: 09-jun-2010

Last update of whois database: Sat, 13 Jun 2009 12:10:35 UTC

Queried whois.namerich.cn with easesummer.com

 DomainName : easesummer.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.REPLYLAKE.IM
Name Server......................NS3.KNEWTASTY.COM
Name Server......................NS2.GREENWROTE.COM
Name Server......................NS1.GREENWROTE.COM
Name Server......................NS6.REPLYLAKE.IM
Name Server......................NS4.KNEWTASTY.COM
Status...........................ok
Creation  Date ..................2009-06-09
Expiration Date .................2010-06-09
Last Update  Date ...............2009-06-09

Registrant ID ...................V-X-57113-12390
Registrant Name .................ZHAO JUN
Registrant Organization .........ZHAO JUN
Registrant Address ..............BEILUXILU23
Registrant City..................TianJin
Registrant Province/State .......TianJin
Registrant Country Code .........CN
Registrant Postal Code ..........300024
Registrant Phone Number .........+86.02285412624
Registrant Fax ..................+86.02285412624
Registrant Email ................longhua444@126.com

Administrative ID ...............V-X-57113-12390
Administrative Name .............ZHAO JUN
Administrative Organization .....ZHAO JUN
Administrative Address ..........BEILUXILU23
Administrative City..............TianJin
Administrative Province/State ...TianJin
Administrative Country Code .....CN
Administrative Postal Code ......300024
Administrative Phone Number .....+86.02285412624
Administrative Fax ..............+86.02285412624
Administrative Email ............longhua444@126.com

Billing ID ......................V-X-57113-12390
Billing Name ....................ZHAO JUN
Billing Organization ............ZHAO JUN
Billing Address .................BEILUXILU23
Billing City.....................TianJin
Billing Province/State ..........TianJin
Billing Country Code ............CN
Billing Postal Code .............300024
Billing Phone Number ............+86.02285412624
Billing Fax .....................+86.02285412624
Billing Email ...................longhua444@126.com

Technical ID ....................V-X-57113-12390
Technical Name ..................ZHAO JUN
Technical Organization...........ZHAO JUN
Technical Address ...............BEILUXILU23
Technical City...................TianJin
Technical Province/State.........TianJin
Technical Country Code ..........CN
Technical Postal Code ...........300024
Technical Phone Number ..........+86.02285412624
Technical Fax ...................+86.02285412624
Technical Email .................longhua444@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.191.221.123“…

inetnum:      60.191.221.0 - 60.191.221.255
netname:      JINHUA-TELECOM-LTD
country:      CN
descr:        Jinhua Telecom Co.,ltd IDC Center
descr:
admin-c:      LW1143-AP
tech-c:       CJ54-AP
status:       ASSIGNED NON-PORTABLE
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

role:         CHINANET-ZJ Jinhua
address:      No.155 Xishi street,Jinhua,Zhejiang.321000
country:      CN
phone:        +86-579-2300779
fax-no:       +86-579-2330035
e-mail:       anti_spam@mail.jhptt.zj.cn
trouble:      send spam reports to anti_spam@mail.jhptt.zj.cn
trouble:      and abuse reports to anti_spam@mail.jhptt.zj.cn
trouble:      Please include detailed information and times in UTC
admin-c:      CH55-AP
tech-c:       CH55-AP
nic-hdl:      CJ54-AP
mnt-by:       MAINT-CHINANET-ZJ
changed:      master@dcb.hz.zj.cn 20031204
source:       APNIC

person:       Lujiang Wang
nic-hdl:      LW1143-AP
e-mail:       anti_spam@mail.jhptt.zj.cn
address:      NO.155 Xishi Street,Jinhua,Zhejiang.Postcode:321000
phone:        +86-579-83285460
country:      CN
changed:      auto-dbm@dcb.hz.zj.cn 20070618
mnt-by:       MAINT-CN-CHINANET-ZJ-JH
source:       APNIC

DNS records

DNS query for 123.221.191.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
easesummer.com IN A 60.191.221.123 3600s (01:00:00)
easesummer.com IN A 61.191.191.241 3600s (01:00:00)
easesummer.com IN A 203.93.208.86 3600s (01:00:00)
easesummer.com IN A 58.17.3.41 3600s (01:00:00)
easesummer.com IN A 60.191.239.164 3600s (01:00

Canadian Pharmacy – sayfinish.com (Spam)

An Amazing Canadian Pharmacy is available_at your_Fingertips!
No Doctor Needed! Browse our Site Today! -> http://sayfinish.com

“Canadian Pharmacy” is property of some of the worst criminals on the Internet. Don’t let them fool you, as they lie just about everything. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you endanger your health by eating those drugs.

It’s your personal and credit card information they are after, and they’d do anything to get their filthy hands on that information. Their greed knows no measure, and they would probably sell their own mother for a quick buck. Of course they don’t have one, as this kind of filth breeds in drains.

Read more about this unrivaled fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
74.42.73.118 United States (Thorntown)* Whois Google DNSStuff Urgentmessage.org
207.115.36.102 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Randal Ford Wed Jun 10 15:40:56 2009
Return-Path:

Authentication-Results: mta141.sbc.mail.mud.yahoo.com from=datasul.com.br; domainkeys=neutral (no sig); from=datasul.com.br; dkim=neutral (no sig)
Received: from 74.42.73.118 (EHLO nlpi086.prodigy.net) (207.115.36.102)
by mta141.sbc.mail.mud.yahoo.com with SMTP; Wed, 10 Jun 2009 15:40:55 -0700
Received: from fa87sf1 (static-74-42-73-118.dr01.shlw.az.frontiernet.net [74.42.73.118])
by nlpi086.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5AMeNjN013251;
Wed, 10 Jun 2009 17:40:53 -0500
Message-ID: <000701c9ea1c$851353b0$4a37416a@datasul.com.br>
Reply-To: “Randal Ford” <ford_rr@datasul.com.br>
From: “Randal Ford” <ford_rr@datasul.com.br>
To: ScamFraudAlert
Subject: We have anti anxiety medications!!
Date: Wed, 10 Jun 2009 17:40:56 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 134

Address lookup

canonical name sayfinish.com.
aliases
addresses 203.93.208.86
58.17.3.41

Domain Whois record

Queried whois.internic.net with “dom sayfinish.com“…

   Domain Name: SAYFINISH.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.WITHPIOUS.COM
   Name Server: NS2.WITHPIOUS.COM
   Name Server: NS3.DADOBJECT.COM
   Name Server: NS4.DADOBJECT.COM
   Name Server: NS5.CENTAROMA.IM
   Name Server: NS6.CENTAROMA.IM
   Status: ok
   Updated Date: 08-jun-2009
   Creation Date: 06-jun-2009
   Expiration Date: 06-jun-2010

>>> Last update of whois database: Thu, 11 Jun 2009 04:54:59 UTC <<<

Queried whois.paycenter.com.cn with “sayfinish.com“…

Domain Name      : sayfinish.com
PunnyCode        : sayfinish.com

Registrant:
  Organization   : CAO XINXIN
  Name           : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269

Administrative Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Technical Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Billing Contact:
  Name           : CAO XINXIN
  Organization   : CAO XINIXN
  Address        : DONGFANGLU26
  City           : SHANGHAI
  Province/State : Shanghai
  Country        : CN
  Postal Code    : 200269
  Phone Number   : 86-021-69512325
  Fax            : 86-021-69512325
  Email          : CAOXINIXN566251@QQ.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Canadian Pharmacy – www.stickscale.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
12.238.6.206 United States (Indianapolis)* Whois Google DNSStuff Urgentmessage.org
207.115.36.166 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Rusty Cisneros Mon Jun 1 22:06:20 2009 
Return-Path: 
Authentication-Results: mta111.sbc.mail.re3.yahoo.com from=sievi.fi; domainkeys=neutral (no sig); from=sievi.fi; dkim=neutral (no sig) 
Received: from 12.238.6.206 (EHLO nlpi152.prodigy.net) (207.115.36.166
by mta111.sbc.mail.re3.yahoo.com with SMTP; Mon, 01 Jun 2009 22:06:20 -0700 
Received: from atvvzcc ([12.238.6.206]) 
by nlpi152.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n5255p2w017612; 
Tue, 2 Jun 2009 00:06:19 -0500 
Message-ID: <000701c9e33f$ddcdb2e0$4a37416a@sievi.fi> 
Reply-To: “Rusty Cisneros”  rusty_cisnerostv@sievi.fi
From: “Rusty Cisneros”  <rusty_cisnerostv@sievi.fi>
To: , , <rusty_cisnerostv@sievi.fi>
Subject: Get all the medications you want online! 
Date: Tue, 02 Jun 2009 00:06:20 -0500 
MIME-Version: 1.0 
Content-Type: text/plain; 
format=flowed; 
charset=”windows-1250″ 
reply-type=original 
Content-Transfer-Encoding: 7bit 
Content-Length: 128

An Incredible Canadian Pharmacy is available at your Fingertips!
N0_Doctor_Needed! Click Here -> http://stickscale.com

 

SmartFilter Category: Not Categorized
Make Category Suggestions
IPs: 60.191.239.181
61.191.63.150
203.93.208.86
58.17.3.41

Address lookup

canonical name stickscale.com.
aliases  
addresses 203.93.208.86
58.17.3.41
60.191.239.181
61.191.63.150

Domain Whois record

Queried whois.internic.net with “dom stickscale.com“…

   Domain Name: STICKSCALE.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.RESTLOYAL.COM
   Name Server: NS2.RESTLOYAL.COM
   Name Server: SP66.DELETEDNS.COM
   Name Server: SP68.DELETEDNS.COM
   Status: ok
   Updated Date: 01-jun-2009
   Creation Date: 31-may-2009
   Expiration Date: 31-may-2010

>>> Last update of whois database: Wed, 03 Jun 2009 06:08:42 UTC <<<

Queried whois.paycenter.com.cn with “stickscale.com“…

Domain Name      : stickscale.com
PunnyCode        : stickscale.com

Registrant:
  Organization   : HOUXINYI
  Name           : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013

Administrative Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Technical Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Billing Contact:
  Name           : HOUXINYI
  Organization   : HOUXINYI
  Address        : FUNANLU154
  City           : xinyushi
  Province/State : jiangxisheng
  Country        : china
  Postal Code    : 338013
  Phone Number   : 86-0790-54185069
  Fax            : 86-0790-54185069
  Email          : HOUXINYI@SINA.COM

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
stickscale.com IN A 60.191.239.181 3600s (01:00:00)
stickscale.com IN A 58.17.3.41 3600s (01:00:00)
stickscale.com IN A 61.191.63.150 3600s (01:00:00)
stickscale.com IN A 203.93.208.86 3600s (01:00:00)

Canadian Pharmacy – www.motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
12.161.202.90 United States (Neffs)* Whois Google DNSStuff Urgentmessage.org
207.115.36.137 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Brendan Collier Sun May 31 05:31:41 2009
Return-Path:
Authentication-Results: mta143.sbc.mail.mud.yahoo.com from=dck.com.ar; domainkeys=neutral (no sig); from=dck.com.ar; dkim=neutral (no sig)
Received: from 12.161.202.90 (EHLO nlpi123.prodigy.net) (207.115.36.137)
by mta143.sbc.mail.mud.yahoo.com with SMTP; Sat, 30 May 2009 21:31:35 -0700
Received: from 5s9gclp ([12.161.202.90])
by nlpi123.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4V4VGXY028689;
Sat, 30 May 2009 23:31:33 -0500
Message-ID: <000701c9e1eb$c0242c10$627e2ad2@dck.com.ar>
Reply-To: “Brendan Collier”
From: “Brendan Collier”
To: ,
Subject: great deals goin on
Date: Sun, 31 May 2009 08:31:41 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
66.147.35.66 United States (Davenport)* Whois Google DNSStuff Urgentmessage.org
207.115.20.48 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

From Amparo Savage Fri May 29 11:46:23 2009

Return-Path:
Authentication-Results: mta102.sbc.mail.re3.yahoo.com from=blm.co.uk; domainkeys=neutral (no sig); from=blm.co.uk; dkim=neutral (no sig)
Received: from 66.147.35.66 (EHLO flph261.prodigy.net) (207.115.20.48)
by mta102.sbc.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 22:35:52 -0700
Received: from tcdb592 (nsc66.147.35-66.newsouth.net [66.147.35.66])
by flph261.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n4U5ZbWA013298;
Fri, 29 May 2009 22:35:52 -0700
Message-ID: <000701c9e08d$c3fa2150$627e2c7a@blm.co.uk>
Reply-To: “Amparo Savage”     a.savage_go@blm.co.uk
From: “Amparo Savage”    a.savage_go@blm.co.uk
To: ScamFraudAlert
Subject: Canadian Rx Medications to the rescue
Date: Fri, 29 May 2009 11:46:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 127

An Incredible Canadian Pharmacy is available at your_Fingertips!
N0 Doctor_Needed! Click Here -> http://motherany.com

top-phar-medshop2

Canadian Pharmacy – the worst Internet fraud problem today. These criminals steal identities and credit card details from unsuspecting customers, to use later to pay for tens of thousands of domain name registrations. Don’t be fooled.
Similar sites to this are listed in the spam trap report at
http://rss.uribl.com/ns/plumbold_com.html
Use complainterator.com to generate complaints to the registrars, and include a link to this page for evidence.

Posted at 05/31/2009-12:43:06 AM by pharmalert, Experienced Reviewer

“Canadian Pharmacy” is a flagrant criminal operation that keeps opening thousands and thousands new sites promoting the same old illegal pharmaceuticals. You seldom see greedier scumbags than these criminals. They don’t care how much damage they cause to innocent people as long as they get all they want. No matter if people get seriously ill after taking their fake drugs, or lose their money after giving over their credit card details. This kind of scammers would be happy to sell their own mother for a quick buck (if they only had one).

It’s always better to stay far away from here and similar sites altogether. There’s no one on the face of earth who would gain by this scam but the criminals behind it, and possibly the poor schmucks who send all the spam for them. They think they are safe, but one day the tide will turn…

See evidence of fraud:
http://www.spamtrackers.eu/wiki/index.php/Canadian_Pharmacy
Read about the affiliate program responsible for spamming this brand:
http://www.spamtrackers.eu/wiki/index.php/Glavmed

Posted at 05/30/2009-08:56:12 PM by Nodus, Experienced Reviewer View profile [ Reputation score: 9 / 9 ]

Address lookup

canonical name www.motherany.com.
aliases
addresses 58.17.3.41
60.191.239.181
61.191.63.150
203.93.208.86

Domain Whois record

Queried whois.internic.net with “dom motherany.com“…

   Domain Name: MOTHERANY.COM
   Registrar: XIN NET TECHNOLOGY CORPORATION
   Whois Server: whois.paycenter.com.cn
   Referral URL: http://www.xinnet.com
   Name Server: NS1.PLUMBOLD.COM
   Name Server: NS2.PLUMBOLD.COM
   Name Server: NS3.MORALFLAIR.COM
   Name Server: NS4.MORALFLAIR.COM
   Status: ok
   Updated Date: 27-may-2009
   Creation Date: 25-may-2009
   Expiration Date: 25-may-2010

>>> Last update of whois database: Sun, 31 May 2009 18:19:27 UTC <<<

Queried whois.paycenter.com.cn with “motherany.com“…

Domain Name      : motherany.com
PunnyCode        : motherany.com

Registrant:
  Organization   : LIUJIARONG
  Name           : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064

Administrative Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Technical Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Billing Contact:
  Name           : LIUJIARONG
  Organization   : LIUJIARONG
  Address        : JIULONGLU256
  City           : shaoyangshi
  Province/State : hunansheng
  Country        : china
  Postal Code    : 422064
  Phone Number   : 86-0739-75912657
  Fax            : 86-0739-75912657
  Email          : LIUJIARONG@263.COM

Network Whois record

Queried whois.apnic.net with “58.17.3.41“…

inetnum:      58.17.3.32 - 58.17.3.47
netname:      CHAOREN-CAFE
country:      CN
descr:        Superman Internet Cafe
admin-c:      CH444-AP
tech-c:       CH444-AP
status:       ASSIGNED NON-PORTABLE
changed:      wujiawei@china-netcom.com 20070427
mnt-by:       MAINT-CNCGROUP-JX
source:       APNIC

route:        58.17.0.0/17
descr:        CNC Group CHINA169 Jiangxi Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060728
source:       APNIC

route:        58.17.0.0/17
descr:        CNCGroup JiangXi province network
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20050218
changed:      hm-changed@apnic.net 20050331
source:       APNIC

person:       CNCGroup Hostmaster
nic-hdl:      CH444-AP
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
phone:        +86-10-82993155
fax-no:       +86-10-82993144
country:      CN
changed:      abuse@cnc-noc.net 20041220
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 41.3.17.58.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.motherany.com IN A 60.191.239.181 3600s (01:00:00)
http://www.motherany.com IN A 61.191.63.150 3600s (01:00:00)
http://www.motherany.com IN A 203.93.208.86 3600s (01:00:00)
http://www.motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 58.17.3.41 3600s (01:00:00)
motherany.com IN A 61.191.63.150 3600s (01:00:00)
motherany.com IN A 203.93.208.86 3600s (01:00:00)
motherany.com IN A 60.191.239.181 3600s (01:00:00)

— end —

Canadian Pharmacy – Rxpayouts.com Complaint

RxPayouts.com Online Pharmacy Fraud Internet

RxPayouts.com                                                                                                                           logo
http://www.rxpayouts.com 
Internet,
U.S.A.

I am a member of the affiliate program of RxPayouts.com, which is an online pharmacy.

On Oct 24, I was shocked to learn that my account was suspended due to inactivity when my store have been consistently operating for more than a month now. I immediately tried to contact their affiliate support through phone and email but to no avail, until on Oct 27 when one of my employees was able to reach an affiliate support personnel by phone by the name of allen.

Allen basically said that my store does not exist. How can my store not exist when Rxpayouts own customer support knows us and we are still able to process orders.

Rxpayouts faked a suspension then removed my account when we are about to receive our USD 4000 commission. Rxpayouts stole my commissions! This company is scamming people and affiliates should know!

To prove that my store still operates here is a shipped out transaction, note that sensitive info have been removed:
——————————————————————
This email is to notify you that an order for your store
greensafemeds.com has been shipped, all the details
are shown below.

Order ID: #2852237
Order Date: 2008-10-23 15:27:25

You are receiving this email because your email address is registered in the
back office (((Redacted)))
If you do not wish to receive these notification emails you can leave
Notify email blank for this store. All notification emails arrive with the
subject prefix ‘Admin:’ allowing you to easily filter these messages if you
have a high volume store.

If you have any questions please contact us at any time, but not by using this
email as this email was sent to you by our systems.

Thanks — (((Redacted)))

Phillip yao
Manila
Philippines

 

Rxpayouts payment fraud

Well they paid me for the USD 4000 a few weeks back. So I thought that the issue, whatever it was, was finally resolved.

Now three (3) weeks later and I have an unpaid commission of USD 8000+ and they won’t pay again.

They say I am under fraud investigation. They neglected to say what fraudulent act I supposedly did or that I was under investigation to begin with. If they want to put me under investigation, at the very least tell me so that I wouldn’t have wasted time selling their products.

It seems I am not the first to encounter this problem with Rxpayouts. It seems this is standard operation in our local industry. They have duped many affiliates.