Canadian Pharmacy Spam – phamostermo32.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


http://phamostermo32.com

IP address: 195.88.226.2
Host name: phamostermo32.com
Alias:
phamostermo32.com
195.88.226.2 is from Moldova, Republic of(MD) in region Eastern Europe

TraceRoute to 195.88.226.2 [phamostermo32.com]
Hop (ms) (ms) (ms) IP Address Host name
1 77 55 35 72.249.128.105 –
2 128 99 103 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 53 45 95 66.192.253.26 peer-02-xe-0-0-0.palo.twtelecom.net
4 70 99 135 4.69.132.77 ae-3-3.ebr2.losangeles1.level3.net
5 130 326 89 4.69.132.13 ae-2-2.ebr2.sanjose1.level3.net
6 283 305 155 4.69.134.218 ae-82-82.csw3.sanjose1.level3.net
7 270 102 310 195.88.226.2 –
Trace complete

Retrieving DNS records for phamostermo32.com…
DNS servers
ns1.namerich.com
ns2.namerich.com

Answer records
phamostermo32.com SOA
server: NS1.NAMERICH.com
email: guoliang@chinaspringboard.cn
serial: 2010030500
refresh: 10800
retry: 7200
expire: 3600000
minimum ttl: 3600
3600s
phamostermo32.com A 195.88.226.2 3600s
phamostermo32.com A 91.212.132.230 3600s
phamostermo32.com NS NS1.NAMERICH.com 3600s
phamostermo32.com NS ns2.NAMERICH.com 3600s

Authority records

Additional records

Whois query for phamostermo32.com…
Query error: Timed out
Network IP address lookup:

Whois query for 195.88.226.2…

Results returned from whois.arin.net:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 195.0.0.0 – 195.255.255.255
CIDR: 195.0.0.0/8
NetName: RIPE-CBLK3
NetHandle: NET-195-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 1996-03-25
Updated: 2009-03-25

RTechHandle: RIPE-NCC-ARIN
RTechName: RIPE NCC Hostmaster
RTechPhone: +31 20 535 4444
RTechEmail: search-ripe-ncc-not-arin@ripe.net

# ARIN WHOIS database, last updated 2010-03-08 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html

Results returned from whois.ripe.net:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to ‘195.88.226.0 – 195.88.227.255’

inetnum: 195.88.226.0 – 195.88.227.255
netname: Evpatur
descr: Evpatur LTD
country: MD
org: ORG-EL79-RIPE
admin-c: NK539-RIPE
tech-c: NK539-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: EVPATUR-MNT
mnt-routes: EVPATUR-MNT
mnt-domains: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

organisation: ORG-EL79-RIPE
org-name: Evpatur LTD
org-type: OTHER
address: Komsomolskaya 10a, 3200 Bendery, Moldova
admin-c: NK539-RIPE
tech-c: NK539-RIPE
e-mail: service@evpatour.md
mnt-ref: EVPATUR-MNT
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

person: Nikolay Kravchuk
address: Komsomolskaya 10a, 3200 Bendery, Moldova
mnt-by: EVPATUR-MNT
phone: +373-821-02184
nic-hdl: NK539-RIPE
changed: service@evpatour.md 20090804
source: RIPE

% Information related to ‘195.88.226.0/23AS49188’

route: 195.88.226.0/23
descr: route point
origin: AS49188
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20091215
source: RIPE

Canadian Pharmacy Spam – findthemmedsherenow.com

Buying Prescription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Order your favorite RxMedications 0nline!
No doctor needed!
Browse our selection today! -> http://findthemmedsherenow.com

Address lookup

canonical name findthemmedsherenow.com.
aliases
addresses 222.170.127.122

Domain Whois record

Queried whois.internic.net with “dom findthemmedsherenow.com”…
Domain Name: FINDTHEMMEDSHERENOW.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.91UKRAINE.COM
Name Server: NS2.91UKRAINE.COM
Name Server: NS3.LIKENS45.COM
Name Server: NS4.LIKENS45.COM
Name Server: NS5.ANTRASCRNS.COM
Name Server: NS6.ANTRASCRNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 17-nov-2009
Creation Date: 30-sep-2009
Expiration Date: 30-sep-2010

Last update of whois database: Fri, 20 Nov 2009 21:02:39 UTC
Queried whois.namerich.cn with “findthemmedsherenow.com”…
DomainName : findthemmedsherenow.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server :NS2.91UKRAINE.COM
Name Server :NS4.LIKENS45.COM
Name Server :NS5.ANTRASCRNS.COM
Name Server :NS1.91UKRAINE.COM
Name Server :NS6.ANTRASCRNS.COM
Name Server :NS3.LIKENS45.COM
Status :clientTransferProhibited
Status :clientDeleteProhibited
Creation Date :2009-10-01
Expiration Date :2010-10-01
Last Update Date :2009-11-18

Registrant ID :V-X-63774-22022
Registrant Name :LIN YIXIA
Registrant Organization :LINYIXIA
Registrant Address :chongjiangxilu42
Registrant City :JN
Registrant Province/State :ShanDong
Registrant Country Code :CN
Registrant Postal Code :250069
Registrant Phone Number :+86.053181416841
Registrant Fax :+86.053181416841
Registrant Email :kuledeliu@126.com

Administrative ID :V-X-63774-22022
Administrative Name :LIN YIXIA
Administrative Organization :LINYIXIA
Administrative Address :chongjiangxilu42
Administrative City :JN
Administrative Province/State :ShanDong
Administrative Country Code :CN
Administrative Postal Code :250069
Administrative Phone Number :+86.053181416841
Administrative Fax :+86.053181416841
Administrative Email :kuledeliu@126.com

Billing ID :V-X-63774-22022
Billing Name :LIN YIXIA
Billing Organization :LINYIXIA
Billing Address :chongjiangxilu42
Billing City :JN
Billing Province/State :ShanDong
Billing Country Code :CN
Billing Postal Code :250069
Billing Phone Number :+86.053181416841
Billing Fax :+86.053181416841
Billing Email :kuledeliu@126.com

Technical ID :V-X-63774-22022
Technical Name :LIN YIXIA
Technical Organization :LINYIXIA
Technical Address :chongjiangxilu42
Technical City :JN
Technical Province/State :ShanDong
Technical Country Code :CN
Technical Postal Code :250069
Technical Phone Number :+86.053181416841
Technical Fax :+86.053181416841
Technical Email :kuledeliu@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “222.170.127.122”…
inetnum: 222.170.0.0 – 222.172.127.255
netname: CHINANET-HL
descr: CHINANET HEILONGJIANG PROVINCE NETWORK
descr: Heilongjiang Telecom Corporation
descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country: CN
admin-c: LZ298-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HL
mnt-routes: MAINT-CHINANET-HL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040305
changed: hm-changed@apnic.net 20060605
source: APNIC

person: LIJUAN ZHENG
nic-hdl: LZ298-AP
e-mail: network@hljtele.com
address: Communication Corporation Internet Enterprise Division of HLJ
phone: +86-451-53902002
fax-no: +86-451-53900012
country: CN
changed: jxwx1234@163.com 20061229
mnt-by: MAINT-CHINANET-HLJTELE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

DNS records

DNS query for 122.127.170.222.in-addr.arpa returned an error from the server: NameError

name class type data time to live
findthemmedsherenow.com IN SOA
server: ns.findthemmedsherenow.com
email: admin.findthemmedsherenow.com
serial: 2009100101
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
findthemmedsherenow.com IN A 222.170.127.122 300s (00:05:00)

— end —

Canadian Pharmacy Spam – quickrxrefillsnow.com

Buying Precription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

______________________________________________________

quickrxrefillsnow

manyrxmeds

xxxxxxxxxxxxxxxxxxxxxxx

Address lookup

canonical name quickrxrefillsnow.com.
aliases
addresses 218.10.16.155

Domain Whois record

Queried whois.internic.net with “dom quickrxrefillsnow.com”…

   Domain Name: QUICKRXREFILLSNOW.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.NSSTUFF1.COM
   Name Server: NS2.NSSTUFF1.COM
   Name Server: NS3.ANTINS45.COM
   Name Server: NS4.ANTINS45.COM
   Name Server: NS5.BROIM89.COM
   Name Server: NS6.BROIM89.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 29-oct-2009
   Creation Date: 30-sep-2009
   Expiration Date: 30-sep-2010

>>> Last update of whois database: Sat, 31 Oct 2009 15:01:01 UTC <<<

Queried whois.namerich.cn with “quickrxrefillsnow.com”…

Network Whois record

Queried whois.apnic.net with “218.10.16.155”…

inetnum:      218.7.0.0 - 218.10.255.255
netname:      UNICOM-HL
country:      CN
descr:        China Unicom Heilongjiang province network
descr:        China Unicom
admin-c:      CH1302-AP
tech-c:       LZ31-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HL
mnt-routes:   MAINT-CNCGROUP-RR
changed:      hm-changed@apnic.net 20031110
changed:      hm-changed@apnic.net 20040927
changed:      hm-changed@apnic.net 20050511
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        218.10.0.0/16
descr:        CNC Group CHINA169 Heilongjiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Liu Zhiyong
nic-hdl:      LZ31-AP
e-mail:       gaobh@mail.hl.cn
address:      Data Communication Bureau of HLJ
phone:        +86-451-542931
country:      CN
changed:      gaobh@mail.hl.cn 20030801
mnt-by:       MAINT-CNCGROUP-HL
source:       APNIC

DNS records

DNS query for 155.16.10.218.in-addr.arpa returned an error from the server: NameError

name class type data time to live
quickrxrefillsnow.com IN SOA
server: ns.quickrxrefillsnow.com
email: admin.quickrxrefillsnow.com
serial: 2009093001
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
quickrxrefillsnow.com IN A 218.10.16.155 300s (00:05:00)

— end —

Domains on Nameserver ns1.nsstuff1.com

Entries 1 – 31 of 31
IP: 218.10.16.155

Canadian Pharmacy Spam – greatrxhere4u.com

Buying Prescription Drugs Online

Scam Alert 1

May Be Dangerous
Says Drug Enforcement Administration


DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well-organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Purchase RxMedications_Online!.. NO_Doctor Needed!
Browse Our Selection Today! -> http://greatrxhere4u.com

Address lookup

canonical name greatrxhere4u.com.
aliases
addresses 121.14.213.151

Domain Whois record

Queried whois.internic.net with “dom greatrxhere4u.com“…

Domain Name: GREATRXHERE4U.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.RXCHOICEZ.COM
Name Server: NS2.RXCHOICEZ.COM
Status: clientTransferProhibited
Updated Date: 29-sep-2009
Creation Date: 29-sep-2009
Expiration Date: 29-sep-2010

>>> Last update of whois database: Mon, 26 Oct 2009 01:37:31 UTC

Queried whois.dns.com.cn with “greatrxhere4u.com“…

Domain Name………. greatrxhere4u.com
Creation Date…….. 2009-09-30 09:53:11
Registration Date…. 2009-09-30 09:53:11
Expiry Date………. 2010-09-30 09:53:11
Organisation Name…. li wen
Organisation Address. tianhe dongpu
Organisation Address.
Organisation Address. guangzhou
Organisation Address. 510660
Organisation Address. GD
Organisation Address. CN

Admin Name……….. liwen
Admin Address…….. tianhe dongpu
Admin Address……..
Admin Address…….. guangzhou
Admin Address…….. 510660
Admin Address…….. GD
Admin Address…….. CN
Admin Email………. 282560@qq.com
Admin Phone………. +86.2062861432-0
Admin Fax………… +86.2062861432

Tech Name………… lu chuan
Tech Address……… guangzhou
Tech Address………
Tech Address……… Guangzhou
Tech Address……… 510660
Tech Address……… GD
Tech Address……… CN
Tech Email……….. 350286@qq.com
Tech Phone……….. +86.2033199123
Tech Fax…………. +86.2033199123

Bill Name………… lu chuan
Bill Address……… guangzhou
Bill Address………
Bill Address……… Guangzhou
Bill Address……… 510660
Bill Address……… GD
Bill Address……… CN
Bill Email……….. 350286@qq.com
Bill Phone……….. +86.2033199123
Bill Fax…………. +86.2033199123
Name Server………. ns2.rxchoicez.com
Name Server………. ns1.rxchoicez.com

Network Whois record

Queried whois.apnic.net with “121.14.213.151“…

inetnum: 121.8.0.0 – 121.15.255.255
netname: CHINANET-GD
descr: CHINANET Guangdong province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: IC83-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-GD
mnt-routes: MAINT-CHINANET-GD
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20060518
source: APNIC

route: 121.8.0.0/13
descr: From Guangdong Network of ChinaTelecom
origin: AS4134
mnt-by: MAINT-CHINANET
changed: dingsy@cndata.com 20060707
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: IPMASTER CHINANET-GD
nic-hdl: IC83-AP
e-mail: ipadm@gddc.com.cn
address: NO.1,RO.DONGYUANHENG,YUEXIUNAN,GUANGZHOU
phone: +86-20-83877223
fax-no: +86-20-83877223
country: CN
changed: ipadm@gddc.com.cn 20040902
mnt-by: MAINT-CHINANET-GD
remarks: IPMASTER is not for spam complaint,please send spam complaint to abuse@gddc.com.cn
source: APNIC

DNS records

DNS query for 151.213.14.121.in-addr.arpa returned an error from the server: NameError

name class type data time to live
greatrxhere4u.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 1440
1440s (00:24:00)
greatrxhere4u.com IN NS ns1.greatrxhere4u.com 1440s (00:24:00)
greatrxhere4u.com IN NS ns2.greatrxhere4u.com 1440s (00:24:00)
greatrxhere4u.com IN NS ns3.greatrxhere4u.com 1440s (00:24:00)
greatrxhere4u.com IN NS ns4.greatrxhere4u.com 1440s (00:24:00)
greatrxhere4u.com IN A 121.14.213.151 1440s (00:24:00)

— end —

Canadian Pharmacy Spam – refillwithadeal.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

___________________________________
Purchase Your Favorite RxMedications Online!
NO_Doctor_Needed!
Browse Our Selection Today! -> http://refillwithadeal.com
__________________________________________

Address lookup

lookup failed refillwithadeal.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom refillwithadeal.com”…

Domain Name: REFILLWITHADEAL.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.RXCHOICEZ.COM
Name Server: NS2.RXCHOICEZ.COM
Status: clientTransferProhibited
Updated Date: 29-sep-2009
Creation Date: 29-sep-2009
Expiration Date: 29-sep-2010

>>> Last update of whois database: Mon, 19 Oct 2009 04:17:40 UTC <<<
Queried whois.dns.com.cn with "refillwithadeal.com"…

Domain Name………. refillwithadeal.com
Creation Date…….. 2009-09-30 09:53:45
Registration Date…. 2009-09-30 09:53:45
Expiry Date………. 2010-09-30 09:53:45
Organisation Name…. li wen
Organisation Address. tianhe dongpu
Organisation Address.
Organisation Address. guangzhou
Organisation Address. 510660
Organisation Address. GD
Organisation Address. CN

Admin Name……….. liwen
Admin Address…….. tianhe dongpu
Admin Address……..
Admin Address…….. guangzhou
Admin Address…….. 510660
Admin Address…….. GD
Admin Address…….. CN
Admin Email………. 282560@qq.com
Admin Phone………. +86.2062861432-0
Admin Fax………… +86.2062861432

Tech Name………… lu chuan
Tech Address……… guangzhou
Tech Address………
Tech Address……… Guangzhou
Tech Address……… 510660
Tech Address……… GD
Tech Address……… CN
Tech Email……….. 350286@qq.com
Tech Phone……….. +86.2033199123
Tech Fax…………. +86.2033199123

Bill Name………… lu chuan
Bill Address……… guangzhou
Bill Address………
Bill Address……… Guangzhou
Bill Address……… 510660
Bill Address……… GD
Bill Address……… CN
Bill Email……….. 350286@qq.com
Bill Phone……….. +86.2033199123
Bill Fax…………. +86.2033199123
Name Server………. ns2.rxchoicez.com
Name Server………. ns1.rxchoicez.com
Network Whois record

Don't have an IP address for which to get a record

DNS records

name class type data time to live
refillwithadeal.com IN NS ns3.refillwithadeal.com 1206s (00:20:06)
refillwithadeal.com IN NS ns4.refillwithadeal.com 1206s (00:20:06)
refillwithadeal.com IN NS ns1.refillwithadeal.com 1206s (00:20:06)
refillwithadeal.com IN NS ns2.refillwithadeal.com 1206s (00:20:06)
— end —

Canadian Pharmacy Spam – newrx4champions.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Rx-Medications Online!
Browse Our Selection Today! -> http://newrx4champions.com

Address lookup

canonical name newrx4champions.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom newrx4champions.com“…

   Domain Name: NEWRX4CHAMPIONS.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.BIDOKODJU.COM
   Name Server: NS4.BIDOKODJU.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Wed, 30 Sep 2009 20:07:11 UTC

Queried whois.namerich.cn with “newrx4champions.com“…

 DomainName : newrx4champions.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS4.BIDOKODJU.COM
Name Server......................NS6.HOSTLIFE45.COM
Name Server......................NS3.BIDOKODJU.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-23

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
newrx4champions.com IN A 60.12.166.154 54s (00:00:54)

— end —

Canadian Pharmacy Spam – mediaplace.biz

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration


DEA Logo - Buying Prescription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

 


mediaplace

 

Address lookup

canonical name mediaplace.biz.
aliases
addresses 94.142.134.218

Domain Whois record

Queried whois.biz with “mediaplace.biz“…

Domain Name: WWW.MEDIAPLACE.BIZ
Domain ID: D29728416-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Sponsoring Registrar IANA ID: 113
Domain Status: clientTransferProhibited

Registrant ID: CNEU-172415
Registrant Name: Henry Dobson
Registrant Address1: 34A-36 Kilburn High Road
Registrant City: London
Registrant State/Province: —
Registrant Postal Code: NW6 5UA
Registrant Country: UNITED KINGDOM
Registrant Country Code: GB
Registrant Phone Number: +44.7005930944
Registrant Email: henryadobson@yahoo.com

Administrative Contact ID: CNEU-172414
Administrative Contact Name: Henry Dobson
Administrative Contact Address1: 34A-36 Kilburn High Road
Administrative Contact City: London
Administrative Contact State/Province: —
Administrative Contact Postal Code: NW6 5UA
Administrative Contact Country: UNITED KINGDOM
Administrative Contact Country Code: GB
Administrative Contact Phone Number: +44.7005930944
Administrative Contact Email: henryadobson@yahoo.com

Billing Contact ID: CNEU-172414
Billing Contact Name: Henry Dobson
Billing Contact Address1: 34A-36 Kilburn High Road
Billing Contact City: London
Billing Contact State/Province: —
Billing Contact Postal Code: NW6 5UA
Billing Contact Country: UNITED KINGDOM
Billing Contact Country Code: GB
Billing Contact Phone Number: +44.7005930944
Billing Contact Email: henryadobson@yahoo.com

Technical Contact ID: CNEU-172414
Technical Contact Name: Henry Dobson
Technical Contact Address1: 34A-36 Kilburn High Road
Technical Contact City: London
Technical Contact State/Province: —
Technical Contact Postal Code: NW6 5UA
Technical Contact Country: UNITED KINGDOM
Technical Contact Country Code: GB
Technical Contact Phone Number: +44.7005930944
Technical Contact Email: henryadobson@yahoo.com

Name Server: NS1.DIORCHID.COM
Name Server: NS2.DIORCHID.COM

Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Domain Registration Date: Tue Feb 10 13:21:17 GMT 2009
Domain Expiration Date: Tue Feb 09 23:59:59 GMT 2010
Domain Last Updated Date: Tue Feb 10 21:59:22 GMT 2009
Registrar Fields
—————-
IDNLang: de

>>>> Whois database was last updated on: Tue Sep 29 07:27:04 GMT 2009

Network Whois record

Queried whois.ripe.net with “-B 94.142.134.218“…

Information related to ‘94.142.134.0 – 94.142.134.255’

inetnum: 94.142.134.0 – 94.142.134.255
netname: CSSGROUP-NET
descr: SIA “CSS GROUP” colocation
org: ORG-SG55-RIPE
country: LV
admin-c: CGN-RIPE
tech-c: CGN-RIPE
status: ASSIGNED PA
mnt-by: CSSGROUP-MNT
changed: info@cssgroup.lv 20090723
source: RIPE

organisation: ORG-SG55-RIPE
org-name: SIA “CSS GROUP”
org-type: LIR
address: SIA “CSS GROUP”
Caunas 7A-26
LV-4101 Cesis
Latvia
phone: +371 67 404544
fax-no: +371 67 414545
e-mail: info@cssgroup.lv
admin-c: DJ1401-RIPE
mnt-ref: CSSGROUP-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20081217
changed: bitbucket@ripe.net 20081217
changed: bitbucket@ripe.net 20081217
changed: bitbucket@ripe.net 20081223
changed: bitbucket@ripe.net 20081223
changed: bitbucket@ripe.net 20081224
changed: bitbucket@ripe.net 20081224
changed: bitbucket@ripe.net 20081231
changed: bitbucket@ripe.net 20090120
changed: bitbucket@ripe.net 20090315
changed: bitbucket@ripe.net 20090402
changed: bitbucket@ripe.net 20090404
changed: bitbucket@ripe.net 20090421
changed: bitbucket@ripe.net 20090630
changed: bitbucket@ripe.net 20090911
source: RIPE

role: CSS GROUP NOC
address: Caunas 7A-26, Cesis, LV-4101, Latvia
e-mail: noc@cssgroup.lv
phone: +371 67 404544
fax-no: +371 67 414545
abuse-mailbox: noc@cssgroup.lv
admin-c: DJ1401-RIPE
tech-c: AC13043-RIPE
nic-hdl: CGN-RIPE
changed: hostmaster@cssgroup.lv 20090402
source: RIPE

% Information related to ‘94.142.128.0/21AS48662’

route: 94.142.128.0/21
descr: SIA “CSS GROUP”
origin: AS48662
mnt-by: CSSGROUP-MNT
changed: info@cssgroup.lv 20090120
source: RIPE

DNS records

name class type data time to live
mediaplace.biz IN A 94.142.134.218 1200s (00:20:00)
mediaplace.biz IN SOA
server: ns1.diorchid.com
email: root.diorchid.com
serial: 2009107222
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
mediaplace.biz IN NS ns2.diorchid.com 1200s (00:20:00)
mediaplace.biz IN NS ns1.diorchid.com 1200s (00:20:00)
218.134.142.94.in-addr.arpa IN PTR h-134-218.cssgroup.lv 3600s (01:00:00)

— end —

 

  1. http://www.cheapgenerictabs.com
  2. http://www.pharmahut.com
  3. http://www.magic-generics.com
  4. http://www.viagra-50-100mg.com
  5. http://www.rx-genericpharmacy.com
  6. http://www.cheapgenerictabs.com
  7. http://www.orderedpills.com
  8. http://www.ordermedications.org
  9. http://www.indian-online-pharmacy.com
  10. http://www.cialisx.org
  11. http://www.rxtablets.net
  12. http://www.cialismailorder.net
  13. http://www.ed-medication-pharma.com
  14. http://www.pharmacyvis.com
  15. http://www.genericviagra.in
  16. http://www.ernestosalmeron.com
  17. http://www.thunderjump.com
  18. http://www.pastillasgenericas.com
  19. http://www.daoco.com
  20. http://www.secure-health.info
  21. http://www.ultimate-pill-store.net
Domain
nisabt.org
onlinehostlocation.com
specialhostingspot.com
freehostlocation.com
freehostp.com
diorchid.com
lakeye.com
europeantablets.com
best-ed-solution.com
eucustomer.com
eutablets.com
mediaplace.biz
telehost.biz

viagra-50-100mg.com
rx-genericpharmacy.com
ordermedications.org
cialisx.org
rxtablets.net
cialismailorder.net
ed-medication-pharma.com
genericviagra.in
pastillasgenericas.com

Canadian Pharmacy Spam – choosefr0mthebest.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

getallyourfavorites

Order all your Favorite Rx-MedicationsOnline! NODoctorNeeded!

Browse Our Website Today! –> http://choosefr0mthebest.com

Address lookup

canonical name choosefr0mthebest.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom choosefr0mthebest.com“…

   Domain Name: CHOOSEFR0MTHEBEST.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 20-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

>>> Last update of whois database: Mon, 21 Sep 2009 03:08:18 UTC <<<

Queried whois.namerich.cn with “choosefr0mthebest.com“…

 DomainName : choosefr0mthebest.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-21

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
choosefr0mthebest.com IN SOA
server: ns.choosefr0mthebest.com
email: admin.choosefr0mthebest.com
serial: 2009091601
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
choosefr0mthebest.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharamacy Spam – Stimul-cash.com (www.getallyourfavorites.com)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.166 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
76.210.238.82 United States (Beaumont)* Whois Google DNSStuff Urgentmessage.org
207.115.20.184 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Order all your Favorite Rx`Medications_0nline!
NoPrescription_Needed!
Browse_Our Selection_Today! –> http://getallyourfavorites.com

getallyourfavorites

Address lookup

canonical name getallyourfavorites.com.
aliases http://www.getallyourfavorites.com
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom getallyourfavorites.com“…

   Domain Name: GETALLYOURFAVORITES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 16-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Thu, 17 Sep 2009 13:13:38 UTC <<<

Queried whois.namerich.cn with “getallyourfavorites.com“…

DomainName : getallyourfavorites.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-16

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.getallyourfavorites.com IN CNAME getallyourfavorites.com 300s (00:05:00)
getallyourfavorites.com IN SOA
server: ns.getallyourfavorites.com
email: admin.getallyourfavorites.com
serial: 2009091601
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
getallyourfavorites.com IN A 60.12.166.154 300s (00:05:00)

— end —

Pure Magnum Pro – fullafrica.com – puremagnumpro.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning



“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
“Pure Magnum Pro” is an alleged male enhancement product promoted through spam by criminals. They offer you a “free trial bottle”, but you still have to hand over your credit card details for shipping. That information is of course exactly what these criminals are after, and they know the right strings to pull. But you’re not that stupid, are you? Of course they don’t leave it there. If you read the fine print you will notice that they will automatically send you a new bottle subject to a charge every month, unless you opt out. And guess what? You can’t opt out, because their contact information is missing and their contact/opt-out forms are useless. Your credit card would keep being charged until the sun explodes.

Did I already mention they are criminals?
Pure Magnum

Address lookup

canonical name fullafrica.com.
aliases
addresses 60.12.166.134

Domain Whois record

Queried whois.internic.net with “dom fullafrica.com“…

Domain Name: FULLAFRICA.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.PIJORGOF.COM
Name Server: NS1.TUQOTGAC.COM
Name Server: NS2.PIJORGOF.COM
Name Server: NS2.TUQOTGAC.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 06-sep-2009
Creation Date: 25-aug-2009
Expiration Date: 25-aug-2010

Last update of whois database: Fri, 11 Sep 2009 11:51:14 UTC

Queried whois.namerich.cn with “fullafrica.com“…

DomainName : fullafrica.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS1.TUQOTGAC.COM
Name Server………………….NS2.PIJORGOF.COM
Name Server………………….NS2.TUQOTGAC.COM
Name Server………………….NS1.PIJORGOF.COM
Status………………………clientTransferProhibited
Status………………………clientDeleteProhibited
Creation Date ………………2009-08-25
Expiration Date ……………..2010-08-25
Last Update Date ……………2009-09-07

Registrant ID ……………….V-X-59719-16703
Registrant Name ……………..HUANG QINGHUA
Registrant Organization ………HUANG QINGHUA
Registrant Address …………..DONGFANGLU26
Registrant City………………HF
Registrant Province/State …….AH
Registrant Country Code ………CN
Registrant Postal Code ……….230061
Registrant Phone Number ………+86.051154732151
Registrant Fax ………………+86.051154732151
Registrant Email …………….nioehdk@126.com

Administrative ID ……………V-X-59719-16703
Administrative Name ………….HUANG QINGHUA
Administrative Organization …..HUANG QINGHUA
Administrative Address ……….DONGFANGLU26
Administrative City…………..HF
Administrative Province/State …AH
Administrative Country Code …..CN
Administrative Postal Code ……230061
Administrative Phone Number …..+86.051154732151
Administrative Fax …………..+86.051154732151
Administrative Email …………nioehdk@126.com

Billing ID ………………….V-X-59719-16703
Billing Name ………………..HUANG QINGHUA
Billing Organization …………HUANG QINGHUA
Billing Address ……………..DONGFANGLU26
Billing City…………………HF
Billing Province/State ……….AH
Billing Country Code …………CN
Billing Postal Code ………….230061
Billing Phone Number …………+86.051154732151
Billing Fax …………………+86.051154732151
Billing Email ……………….nioehdk@126.com

Technical ID ………………..V-X-59719-16703
Technical Name ………………HUANG QINGHUA
Technical Organization………..HUANG QINGHUA
Technical Address ……………DONGFANGLU26
Technical City……………….HF
Technical Province/State………AH
Technical Country Code ……….CN
Technical Postal Code ………..230061
Technical Phone Number ……….+86.051154732151
Technical Fax ……………….+86.051154732151
Technical Email ……………..nioehdk@126.com

Please register your domains at
http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.134“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for 134.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
fullafrica.com IN A 60.12.166.134 600s (00:10:00)
fullafrica.com IN SOA
server: ns1.fullafrica.com
email: ns2.fullafrica.com
serial: 2009097594
refresh: 600
retry: 600
expire: 2419200
minimum ttl: 600
600s (00:10:00)
fullafrica.com IN NS ns1.heyodziz.com 600s (00:10:00)
fullafrica.com IN NS ns2.heyodziz.com 600s (00:10:00)
fullafrica.com IN NS ns2.bilulkog.com 600s (00:10:00)
fullafrica.com IN NS ns1.bilulkog.com 600s (00:10:00)

— end —

Address lookup

canonical name puremagnumpro.com.
aliases
addresses 123.108.108.175

Domain Whois record

Queried whois.internic.net with “dom puremagnumpro.com“…

Domain Name: PUREMAGNUMPRO.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.PUREMAGNUMPRO.COM
Name Server: NS2.PUREMAGNUMPRO.COM
Status: clientTransferProhibited
Updated Date: 09-jul-2009
Creation Date: 07-jul-2009
Expiration Date: 07-jul-2010

Last update of whois database: Fri, 11 Sep 2009 11:57:07 UTC

Queried whois.onlinenic.com with “puremagnumpro.com“…

Domain Name:puremagnumpro.com
Record created:2009/7/7
Record expired:2010/7/7

Domain servers in listed order:
ns1.puremagnumpro.com ns2.puremagnumpro.com

Administrat:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904501@absolutee.com
Technical Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641904502@absolutee.com
Billing Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784003@absolutee.com
Registrant Contact:
name– DNS MANAGER
org– ABSOLUTEE CORP. LTD.
country– CN
province– Hongkong
city– Hongkong
address– FLAT/RM B 8/F CHONG MING BUILDING 72 CHEUNG SHA WAN RD KL
postalcode– 999077
telephone– +00.85223192933
fax– +00.85223195168
E-mail– pu3772641784004@absolutee.com

Network Whois record

Queried whois.apnic.net with “123.108.108.175“…

inetnum: 123.108.108.0 – 123.108.111.255
netname: PANGNET
descr: Pang International Limited
descr: Dedicated Server and Colocation Service Provider
country: HK
admin-c: YL2194-AP
tech-c: YL2194-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-PANG
mnt-routes: MAINT-HK-PANG
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20081224
source: APNIC

person: Yu Pang Law
nic-hdl: YL2194-AP
e-mail: admin@pangintl.com
address: 2D Hung Hay Building,
address: 1st Fa Yuen Street,
address: Mong Kok,
address: Kowloon,
address: Hong Kong
phone: +852-6172-5306
fax-no: +852-2332-8934
country: HK
changed: pang@laws.ms 20081229
mnt-by: MAINT-HK-PANG
source: APNIC<

DNS records

name class type data time to live
175.108.108.123.in-addr.arpa IN PTR scdc.worra.com 259200s (3.00:00:00)

— end —

Canadian Pharmacy Spam – nodocneededforrxmedz.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Order your Favorite RxMedications Online!
Browse Our Selection Today! –> http://nodocneededforrxmedz.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.172 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
131.178.248.63 Mexico (Monterrey)* Whois Google DNSStuff Urgentmessage.org
207.115.20.186 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Jared Bradley Mon Sep 7 19:50:35 2009

X-Apparently-To:  Mon, 07 Sep 2009 19:49:06 -0700
Return-Path:
X-YahooFilteredBulk: 131.178.248.63
X-YMailISG: kPEUCM0WLDsMZaRt0mugjhf81VGYWsnwQHTkTCdQznTOCLgu6bQtzKJUvHEXN1soHFIP.LfJX3JoDImx9GesvkxdX.9bZG.RplT5N.bJmrYr7nKs.gTA21px0sHlf1uyJLdCmE.5pB6D1rCvaIVdt5T9J5DEeo5NRYDJfSdg9uQW7px1NFjynTLb.TngKiHHwiJuxEAzV9Qoo4IZKCZU9HI8S0PYMhSKH3jRuuNtSJsTLf1XPoi4_t7NPmK4q4br43MhDinm_jspY9c4ze5cT5udqV6_UwZXf.Q.xS887XJSoief4CdSigE-
X-Originating-IP: [131.178.248.63]
Authentication-Results: mta110.sbc.mail.re2.yahoo.com from=kalbe.co.id; domainkeys=neutral (no sig); from=kalbe.co.id; dkim=neutral (no sig)
Received: from 131.178.248.63 (EHLO flpi184.prodigy.net) (207.115.20.186)
by mta110.sbc.mail.re2.yahoo.com with SMTP; Mon, 07 Sep 2009 19:49:05 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[131.178.248.63]
X-Originating-IP: [131.178.248.63]

Received: from 7hwnqa7 ([131.178.248.63])
by flpi184.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n882kLgi029857;
Mon, 7 Sep 2009 19:48:49 -0700
Message-ID: <000701ca302f$23f0cbe0$627e0f72@kalbe.co.id>
Reply-To: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
From: “Jared Bradley” <jared.bradley_xe@kalbe.co.id>
To: , ,
Subject: We have weight loss and pain med!
Date: Mon, 07 Sep 2009 19:50:35 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 112

Address lookup

canonical name nodocneededforrxmedz.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom nodocneededforrxmedz.com“…

   Domain Name: NODOCNEEDEDFORRXMEDZ.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.84GNK.COM
   Name Server: NS6.84GNK.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 02-sep-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Wed, 09 Sep 2009 07:31:03 UTC <<<

Queried whois.hupo.com with “nodocneededforrxmedz.com“…

Domain Name: nodocneededforrxmedz.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.84gnk.com
  ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
nodocneededforrxmedz.com IN SOA
server: ns.nodocneededforrxmedz.com
email: admin.nodocneededforrxmedz.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
nodocneededforrxmedz.com IN A 60.12.166.154 300s (00:05:00)

— end —

Canadian Pharmacy Spam – easyonlinerxmedz.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Order All your Favorite RxMedications Online!
Browse Our Selection Today –> http://easyonlinerxmedz.com

Address lookup

canonical name easyonlinerxmedz.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom easyonlinerxmedz.com“…

Domain Name: EASYONLINERXMEDZ.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

Last update of whois database: Thu, 03 Sep 2009 03:00:02 UTC

Queried whois.hupo.com with “easyonlinerxmedz.com“…

Domain Name: easyonlinerxmedz.com

Registrant Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Administrative Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Technical Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Billing Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for easyonlinerxmedz.com returned an error from the server: ServerFailure

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – ng-systems.net

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
67.195.14.109 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.115.20.132 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
75.213.113.93 United States (Los Angeles)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Robert Sexton Wed Sep 2 09:16:46 2009
X-Apparently-Wed, 02 Sep 2009 09:17:11 -0700
Return-Path:
X-YahooFilteredBulk: 67.195.14.109
X-YMailISG: TBYRKD8WLDtrypfO6NxNXGP0yDAzrz3CdYN4uNyB8zdkhJygyME2AhOzjHKhRrUpZq._NUInKsP.EyiIliCb157CnYhB0BqaezKzuUp53Qiu9w1Ljzy0zv3rJhK5JqUEngfcMKEaQiOlPYusfPPFQNkIjgjQV1yX3poFuPqlw1ZVyf0YPmnOOoAmpd5Ks8lY0n3Erej6ctnbMy1U8NtEpWaiL7oIBA5W5Q8XzWGYudFTGG5Ees2iLR9HSjvwZTwsimeHnMAI8y0e9q.BpsyFwVw0OvYAXKdqkNTqaKXEdLp8WNBeamfQbhhP2gak5mTnjKNACj0Skf1P4L9iyBIPRjskRx4Mnd78YLfNHkQL_tjdrZd4juoFvgSGlm5d9EDxq_CR3dnJlN8Q7uqANIL0zO8SZ2SC5klu.HC983GsCBDV
X-Originating-IP: [67.195.14.109]
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ng-systems.net; domainkeys=neutral (no sig); from=ng-systems.net; dkim=neutral (no sig)
Received: from 207.115.20.132 (EHLO flpd122.prodigy.net) (207.115.20.132)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Wed, 02 Sep 2009 09:17:11 -0700
X-Originating-IP: [67.195.14.109]
Received: from smtp106.sbc.mail.gq1.yahoo.com (smtp106.sbc.mail.gq1.yahoo.com [67.195.14.109])
by flpd122.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n82GHA2X021427
for ; Wed, 2 Sep 2009 09:17:10 -0700
Message-Id: <200909021617.n82GHA2X021427@flpd122.prodigy.net>
Received: (qmail 53401 invoked from network); 2 Sep 2009 16:17:10 -0000
Received: from unknown (HELO 13.sub-70-213-117.myvzw.com) (bob@75.213.113.93 with login)
by smtp106.sbc.mail.gq1.yahoo.com with SMTP; 2 Sep 2009 16:17:09 -0000
X-Yahoo-SMTP: 9I.gPjKswBDDpZ74lhf2pkNv37iwyZQ3CbOW
X-YMail-OSG: oUhrznUVM1m0i7c_kQUv33Cnb7rJoF.P1fFuiaoKzRi8KB0dRejSrtUR4IWuStPzGEB3UdtW6IkkTv4A9iT_8EMnu54dGGZlg38LsYrtSE7mFs.culAKmpimV3LbxXx.QLjcbmTEeZSqqqAz7DeIb9PTuMvIVAetjNSBXaQDPxqbrX4Vduu_t1LnL_tVwCoLase2jJzB53Jc7vU-
X-Yahoo-Newman-Property: ymail-3
From: “Robert Sexton” <bob@ng-systems.net>
To:
Subject: Online pharmacies (9/2/2009)
Date: Wed, 2 Sep 2009 09:16:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset=”utf-8″
Content-Transfer-Encoding: 8bit
Content-Length: 783

Hello,

I represent a company called SPN Solutions, a company that does what’s known as advanced search engine placement. We reach a Network of over 35 million people who are predominantly US based. Our Network is entirely opt-in, and the users on our Network allow us to present them with a preferred choice whenever they are looking for anything on the top sixteen search engines. (GOOGLE, YAHOO, MSN and thirteen others.)

I seek one source to send the users on our Network, from the major search engines, for online pharmacies in various Canadian markets.

Please contact me at your earliest convenience. I am in the office daily from 9:00 AM to 5:00 PM Pacific time.

Best regards,

Robert Sexton
Dir/Business Development, SPN Solutions
Phone: 800.481.2979, ext 2001

Address lookup

canonical name myvzw.com.
aliases
addresses 207.68.174.238

Domain Whois record

Queried whois.internic.net with “dom myvzw.com“…

   Domain Name: MYVZW.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: CARKDNS.VZWDOMAIN.COM
   Name Server: NJBRDNS.VZWDOMAIN.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jan-2009
   Creation Date: 31-may-2000
   Expiration Date: 31-may-2012

>>> Last update of whois database: Thu, 03 Sep 2009 02:55:26 UTC <<<

Queried whois.markmonitor.com with “myvzw.com“…

Registrant:
        Verizon Trademark Services LLC
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669

    Domain Name: myvzw.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Administrator
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669
    Technical Contact, Zone Contact:
        Domain Technician
        Verizon
        1320 North Court House Road
         Arlington VA 22201
        US
        sysmgr@verizon.com +1.7033513164 Fax: +1.7033513669

    Created on..............: 2000-05-31.
    Expires on..............: 2012-05-31.
    Record last updated on..: 2009-05-30.

    Domain servers in listed order:

    njbrdns.vzwdomain.com
    carkdns.vzwdomain.com

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protection™
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at www.markmonitor.com
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300

Network Whois record

Queried whois.arin.net with “207.68.174.238“…

OrgName:    Microsoft Corp 
OrgID:      MSFT
Address:    One Microsoft Way
City:       Redmond
StateProv:  WA
PostalCode: 98052
Country:    US

NetRange:   207.68.128.0 - 207.68.207.255 
CIDR:       207.68.128.0/18, 207.68.192.0/20 
NetName:    MICROSOFT-CORP-MSN-BLK
NetHandle:  NET-207-68-128-0-1
Parent:     NET-207-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:    
RegDate:    1996-03-26
Updated:    2005-06-29

RTechHandle: ZM39-ARIN
RTechName:   Microsoft 
RTechPhone:  +1-425-882-8080
RTechEmail:  noc@microsoft.com 

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName:   Hotmail Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName:   MSN ABUSE 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName:   Microsoft Corporation 
OrgNOCPhone:  +1-425-882-8080
OrgNOCEmail:  noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName:   MSFT-POC 
OrgTechPhone:  +1-425-882-8080
OrgTechEmail:  iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-09-02 20:00

DNS records

DNS query for 238.174.68.207.in-addr.arpa returned an error from the server: NameError

name class type data time to live
myvzw.com IN SOA
server: njbrnsmgr.vzwdomain.com
email: cdsdns.verizonwireless.com
serial: 2009073100
refresh: 43200
retry: 7200
expire: 1209600
minimum ttl: 10800
7200s (02:00:00)
myvzw.com IN NS njbrdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN NS carkdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN A 207.68.174.238 7200s (02:00:00)

— end —


RezXtra – www.medsxtra.com

RezXtra (medsxtra.com) medsxtra.com – St. louis, Missouri Net Natural Laboratories, London Scam!!! Buyer Beware!!! Misleading marketing Tatics!!! Internet

RezXtra (medsxtra.com)
Phone: 8883399872
Fax: 888-339-9872
www.medsxtra.com
Internet, Missouri 63129
United States of America

Buyer Beware.  This company offers you a trial for Resveratrol through their website but the product that they ship is not the one featured on 60 minutes.  They do not disclose the price of the products they sale on their website nor do they ship any information to that matter with the product.  Also you will find unauthorized charges on your credit card.  Even the shipping is more than what they advertise. Impossible to get through their customerservice toll free number. On their website, under terms and conditions, they claim to provide 24/7 customer service. Which is also not true. This is not a reputable company.  Once they get a hold of your credit card it is over. DO NOT ORDER ANYTHING FROM THEIR WEBSITE.

Address lookup

canonical name www.medsxtra.com.
aliases
addresses 67.55.86.148

Domain Whois record

Queried whois.internic.net with “dom medsxtra.com“…

   Domain Name: MEDSXTRA.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS.WEBAIR.NET
   Name Server: NS2.WEBAIR.NET
   Status: ok
   Updated Date: 20-aug-2009
   Creation Date: 23-mar-2009
   Expiration Date: 23-mar-2010

Last update of whois database: Fri, 28 Aug 2009 06:09:40 UTC <<<

Queried whois.godaddy.com with “medsxtra.com“…

Registrant:
   Domains by Proxy, Inc.

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: MEDSXTRA.COM

   Domain servers in listed order:
      NS.WEBAIR.NET
      NS2.WEBAIR.NET

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “67.55.86.148“…

OrgName:    Webair Internet Development Inc 
OrgID:      WAIR
Address:    333 Jericho Tpke
Address:    Suite 200
City:       Jericho
StateProv:  NY
PostalCode: 11753
Country:    US

ReferralServer: rwhois://rwhois.webair.com:4321

NetRange:   67.55.64.0 - 67.55.127.255 
CIDR:       67.55.64.0/18 
NetName:    WEBAIRINTERNET6
NetHandle:  NET-67-55-64-0-1
Parent:     NET-67-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.WEBAIR.NET
NameServer: NS2.WEBAIR.NET
Comment:    All rwhois info can be found at rwhois.webair.com:4321
RegDate:    2006-07-28
Updated:    2007-04-18

RNOCHandle: ZW64-ARIN
RNOCName:   IPAdmin-Webair 
RNOCPhone:  +1-516-938-4100
RNOCEmail:  IPAdmin@webair.com 

OrgNOCHandle: ZW64-ARIN
OrgNOCName:   IPAdmin-Webair 
OrgNOCPhone:  +1-516-938-4100
OrgNOCEmail:  IPAdmin@webair.com

OrgTechHandle: ZW64-ARIN
OrgTechName:   IPAdmin-Webair 
OrgTechPhone:  +1-516-938-4100
OrgTechEmail:  IPAdmin@webair.com

# ARIN WHOIS database, last updated 2009-08-27 20:00

DNS records

name class type data time to live
http://www.medsxtra.com IN A 67.55.86.148 900s (00:15:00)
medsxtra.com IN SOA
server: ns.webair.net
email: webmaster.medsxtra.com
serial: 2009060401
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 43200
900s (00:15:00)
medsxtra.com IN NS ns.webair.net 900s (00:15:00)
medsxtra.com IN NS ns2.webair.net 900s (00:15:00)
medsxtra.com IN MX
preference: 10
exchange: filter.medsxtra.com
900s (00:15:00)
medsxtra.com IN A 67.55.86.148 900s (00:15:00)
148.86.55.67.in-addr.arpa IN PTR technet.webair.com 43200s (12:00:00)

— end —

Canadian Pharmacy – reliableflowagehere.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.



Threat Chaos – Pharmacy Fraud Escalates

Order your Favorite Rx-Medications Online!

Click Here! –> http://happeninggoodtime.com

Order your all Favorite Rx~Medications Online! Browse Our Selection Today! –> http://reliableflowagehere.com

From Fredric Jennings Mon Aug 24 15:19:27 2009
X-Apparently-To: agr2@sbcglobal.net via 68.142.207.172; Mon, 24 Aug 2009 15:18:44 -0700
Return-Path:
X-YahooFilteredBulk: 186.112.8.247
X-YMailISG: YfBx818WLDv93VBKlC8zeJ4RnIh.PVrE72QQn.xz3DDr4v0ETMkWr.DRbRvqBFnnpjTkMJW8TTFv2OCYNwgNMTqPTHsIiRBdNimG6Yb8D9pdFbW5P62hKy81l58Ct4NBJ0vDIfK1diVDjWTYQbEbHvSwkSJs_hfF2Q–
X-Originating-IP: [186.112.8.247]
Authentication-Results: mta103.sbc.mail.re3.yahoo.com from=arel.com.au; domainkeys=neutral (no sig); from=arel.com.au; dkim=neutral (no sig)
Received: from 207.115.20.124 (EHLO flpd114.prodigy.net) (207.115.20.124)
by mta103.sbc.mail.re3.yahoo.com with SMTP; Mon, 24 Aug 2009 15:18:44 -0700
X-Header-Overseas: Mail.from.Overseas.source.186.112.8.247
X-Header-NoReverseIP: IP.name.lookup.failed[186.112.8.247]
X-Originating-IP: [186.112.8.247]
Received: from 687n82s ([186.112.8.247])
by flpd114.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7OMIQmo016747;
Mon, 24 Aug 2009 15:18:34 -0700
Message-ID: <000701ca2508$f1653bb0$627e0f72@arel.com.au>
Reply-To: “Fredric Jennings”
From: “Fredric Jennings”
To: , ,
Subject: Buy Hydrocodone Online from a US Pharmacy
Date: Mon, 24 Aug 2009 15:19:27 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 117

Address lookup

canonical name reliableflowagehere.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom reliableflowagehere.com“…

Domain Name: RELIABLEFLOWAGEHERE.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.LIGHTINGDNSFLASH.COM
Name Server: NS2.LIGHTINGDNSFLASH.COM
Name Server: NS3.CEASEDNSERROR.COM
Name Server: NS4.CEASEDNSERROR.COM
Name Server: NS5.YELLOWDNSPLACE.COM
Name Server: NS6.YELLOWDNSPLACE.COM
Status: ok
Updated Date: 23-aug-2009
Creation Date: 15-aug-2009
Expiration Date: 15-aug-2010

Last update of whois database: Tue, 25 Aug 2009 00:33:13 UTC

Queried whois.namerich.cn with “reliableflowagehere.com“…

DomainName : reliableflowagehere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server………………….NS3.CEASEDNSERROR.COM
Name Server………………….NS1.LIGHTINGDNSFLASH.COM
Name Server………………….NS6.YELLOWDNSPLACE.COM
Name Server………………….NS5.YELLOWDNSPLACE.COM
Name Server………………….NS4.CEASEDNSERROR.COM
Name Server………………….NS2.LIGHTINGDNSFLASH.COM
Status………………………ok
Creation Date ………………2009-08-15
Expiration Date ……………..2010-08-15
Last Update Date ……………2009-08-24

Registrant ID ……………….V-X-58472-14162
Registrant Name ……………..TIAN JUN
Registrant Organization ………TIAN JUN
Registrant Address …………..CAOANXILU991
Registrant City………………JN
Registrant Province/State …….SD
Registrant Country Code ………CN
Registrant Postal Code ……….272019
Registrant Phone Number ………+86.053727816329
Registrant Fax ………………+86.053727816329
Registrant Email …………….iagonane@126.com

Administrative ID ……………V-X-58472-14162
Administrative Name ………….TIAN JUN
Administrative Organization …..TIAN JUN
Administrative Address ……….CAOANXILU991
Administrative City…………..JN
Administrative Province/State …SD
Administrative Country Code …..CN
Administrative Postal Code ……272019
Administrative Phone Number …..+86.053727816329
Administrative Fax …………..+86.053727816329
Administrative Email …………iagonane@126.com

Billing ID ………………….V-X-58472-14162
Billing Name ………………..TIAN JUN
Billing Organization …………TIAN JUN
Billing Address ……………..CAOANXILU991
Billing City…………………JN
Billing Province/State ……….SD
Billing Country Code …………CN
Billing Postal Code ………….272019
Billing Phone Number …………+86.053727816329
Billing Fax …………………+86.053727816329
Billing Email ……………….iagonane@126.com

Technical ID ………………..V-X-58472-14162
Technical Name ………………TIAN JUN
Technical Organization………..TIAN JUN
Technical Address ……………CAOANXILU991
Technical City……………….JN
Technical Province/State………SD
Technical Country Code ……….CN
Technical Postal Code ………..272019
Technical Phone Number ……….+86.053727816329
Technical Fax ……………….+86.053727816329
Technical Email ……………..iagonane@126.com

Please register your domains at
ttp://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Network Communications Corporation Limited
descr: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
admin-c: XZ67-AP
tech-c: XZ67-AP
country: CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20090424
source: APNIC

person: Xiaomin Zhou
address: No.21 Financial Street,Xicheng District, Beijing 100140 ,P.R.China
country: CN
phone: +86-10-66259626
fax-no: +86-10-66259626
e-mail: zhouxm@chinaunicom.cn
nic-hdl: XZ67-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.cn 20090617
source: APNIC

inetnum: 211.90.0.0 – 211.97.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
admin-c: JY7-CN
tech-c: JY7-CN
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CN-UNICOM
status: ALLOCATED PORTABLE
changed: ipas@cnnic.cn 20071010
source: CNNIC

person: Jin Yang
nic-hdl: JY7-CN
e-mail: ip_address@chinaunicom.com.cn
address: No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone: +86-10-66505588
fax-no: +86-10-66504252
country: CN
changed: ipas@cnnic.net.cn 20070927
mnt-by: MAINT-CNNIC-AP
source: CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
reliableflowagehere.com IN SOA
server: ns.reliableflowagehere.com
email: admin.reliableflowagehere.com
serial: 2009081601
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
reliableflowagehere.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy Spam – geitwhileitshot.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All 0f Your Favorite_RxMedications are available at your_Fingtertips!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://geitwhileitshot.com

Address lookup

canonical name geitwhileitshot.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom geitwhileitshot.com“…

   Domain Name: GEITWHILEITSHOT.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

>>> Last update of whois database: Tue, 11 Aug 2009 23:57:32 UTC <<<

Queried whois.hupo.com with “geitwhileitshot.com“…

Domain Name: geitwhileitshot.com

Registrant Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Administrative Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Technical Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Billing Contact:
  wangxiaohua
  wangxiaohua
  Email:kanejag@163.com
  Tel:+86.02589259253
  Fax:+86.02589259253
  yangshulu857
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.lightingdnsflash.com
  ns2.lightingdnsflash.com
  ns3.ceasednserror.com
  ns4.ceasednserror.com
  ns5.yellowdnsplace.com
  ns6.yellowdnsplace.com

Registration Date:2009-08-07 05:53:14
Expireation Date:2010-08-07 05:53:14

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
geitwhileitshot.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
geitwhileitshot.com IN NS ns3.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns4.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns2.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN NS ns1.geitwhileitshot.com 86400s (1.00:00:00)
geitwhileitshot.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —


Canadian Pharmacy Spam – wehavethemforyou.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All_of_Your Favorite RxMedications are Available at your_Fingtertips!
No Doctor Needed!
Browse_Our Website Today! –> http://wehavethemforyou.com

Address lookup

canonical name wehavethemforyou.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom wehavethemforyou.com“…

   Domain Name: WEHAVETHEMFORYOU.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.LIGHTINGDNSFLASH.COM
   Name Server: NS2.LIGHTINGDNSFLASH.COM
   Name Server: NS3.CEASEDNSERROR.COM
   Name Server: NS4.CEASEDNSERROR.COM
   Name Server: NS5.YELLOWDNSPLACE.COM
   Name Server: NS6.YELLOWDNSPLACE.COM
   Status: ok
   Updated Date: 11-aug-2009
   Creation Date: 07-aug-2009
   Expiration Date: 07-aug-2010

Last update of whois database: Tue, 11 Aug 2009 16:31:02 UTC

Queried whois.namerich.cn with “wehavethemforyou.com“…

 DomainName : wehavethemforyou.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS1.LIGHTINGDNSFLASH.COM
Name Server......................NS3.CEASEDNSERROR.COM
Name Server......................NS6.YELLOWDNSPLACE.COM
Name Server......................NS5.YELLOWDNSPLACE.COM
Name Server......................NS4.CEASEDNSERROR.COM
Name Server......................NS2.LIGHTINGDNSFLASH.COM
Status...........................ok
Creation  Date ..................2009-08-07
Expiration Date .................2010-08-07
Last Update  Date ...............2009-08-11

Registrant ID ...................V-X-57584-12998
Registrant Name .................ZHANG JIE
Registrant Organization .........ZHANG JIE
Registrant Address ..............BEIFANGHUANLU27
Registrant City..................HZ
Registrant Province/State .......ZJ
Registrant Country Code .........CN
Registrant Postal Code ..........313061
Registrant Phone Number .........+86.057258421513
Registrant Fax ..................+86.057258421513
Registrant Email ................olajeng@163.com

Administrative ID ...............V-X-57584-12998
Administrative Name .............ZHANG JIE
Administrative Organization .....ZHANG JIE
Administrative Address ..........BEIFANGHUANLU27
Administrative City..............HZ
Administrative Province/State ...ZJ
Administrative Country Code .....CN
Administrative Postal Code ......313061
Administrative Phone Number .....+86.057258421513
Administrative Fax ..............+86.057258421513
Administrative Email ............olajeng@163.com

Billing ID ......................V-X-57584-12998
Billing Name ....................ZHANG JIE
Billing Organization ............ZHANG JIE
Billing Address .................BEIFANGHUANLU27
Billing City.....................HZ
Billing Province/State ..........ZJ
Billing Country Code ............CN
Billing Postal Code .............313061
Billing Phone Number ............+86.057258421513
Billing Fax .....................+86.057258421513
Billing Email ...................olajeng@163.com

Technical ID ....................V-X-57584-12998
Technical Name ..................ZHANG JIE
Technical Organization...........ZHANG JIE
Technical Address ...............BEIFANGHUANLU27
Technical City...................HZ
Technical Province/State.........ZJ
Technical Country Code ..........CN
Technical Postal Code ...........313061
Technical Phone Number ..........+86.057258421513
Technical Fax ...................+86.057258421513
Technical Email .................olajeng@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
wehavethemforyou.com IN SOA
server: ns1.domain.com
email: admin.domain.com
serial: 1
refresh: 300
retry: 300
expire: 300
minimum ttl: 86400
86400s (1.00:00:00)
wehavethemforyou.com IN NS ns3.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns4.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns2.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN NS ns1.wehavethemforyou.com 86400s (1.00:00:00)
wehavethemforyou.com IN A 60.12.166.154 86400s (1.00:00:00)

— end —

Canadian Pharmacy Spam – smilewhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

An Awesome Canadian Pharmacy is available at your Fingertips!
No Doctor Needed!
Browse our Site Today! -> http://smilewhere.com

Address lookup

canonical name smilewhere.com.
aliases
addresses 203.93.208.86
218.75.144.6
220.196.59.35
91.213.33.10

Domain Whois record

Queried whois.internic.net with “dom smilewhere.com“…

   Domain Name: SMILEWHERE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.CARDPEARL.COM
   Name Server: NS2.CARDPEARL.COM
   Name Server: NS3.SPEAKSMELL.COM
   Name Server: NS4.SPEAKSMELL.COM
   Name Server: NS5.BW5.RU
   Name Server: NS6.BW5.RU
   Status: ok
   Updated Date: 23-jul-2009
   Creation Date: 23-jul-2009
   Expiration Date: 23-jul-2010

Last update of whois database: Mon, 10 Aug 2009 15:20:51 UTC <<<

Queried whois.namerich.cn with “smilewhere.com“…

 DomainName : smilewhere.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS2.CARDPEARL.COM
Name Server......................NS6.BW5.RU
Name Server......................NS1.CARDPEARL.COM
Name Server......................NS5.BW5.RU
Name Server......................NS4.SPEAKSMELL.COM
Name Server......................NS3.SPEAKSMELL.COM
Status...........................ok
Creation  Date ..................2009-07-23
Expiration Date .................2010-07-23
Last Update  Date ...............2009-07-23

Registrant ID ...................V-X-59917-16940
Registrant Name .................DING JIANHUA
Registrant Organization .........DING JIANHUA
Registrant Address ..............HUANMEILU82
Registrant City..................SJZ
Registrant Province/State .......HB
Registrant Country Code .........CN
Registrant Postal Code ..........050029
Registrant Phone Number .........+86.031158541214
Registrant Fax ..................+86.031158541214
Registrant Email ................iuhjoahg@yeah.net

Administrative ID ...............V-X-59917-16940
Administrative Name .............DING JIANHUA
Administrative Organization .....DING JIANHUA
Administrative Address ..........HUANMEILU82
Administrative City..............SJZ
Administrative Province/State ...HB
Administrative Country Code .....CN
Administrative Postal Code ......050029
Administrative Phone Number .....+86.031158541214
Administrative Fax ..............+86.031158541214
Administrative Email ............iuhjoahg@yeah.net

Billing ID ......................V-X-59917-16940
Billing Name ....................DING JIANHUA
Billing Organization ............DING JIANHUA
Billing Address .................HUANMEILU82
Billing City.....................SJZ
Billing Province/State ..........HB
Billing Country Code ............CN
Billing Postal Code .............050029
Billing Phone Number ............+86.031158541214
Billing Fax .....................+86.031158541214
Billing Email ...................iuhjoahg@yeah.net

Technical ID ....................V-X-59917-16940
Technical Name ..................DING JIANHUA
Technical Organization...........DING JIANHUA
Technical Address ...............HUANMEILU82
Technical City...................SJZ
Technical Province/State.........HB
Technical Country Code ..........CN
Technical Postal Code ...........050029
Technical Phone Number ..........+86.031158541214
Technical Fax ...................+86.031158541214
Technical Email .................iuhjoahg@yeah.net

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “203.93.208.86“…

inetnum:      203.93.0.0 - 203.93.255.255
netname:      UNICOM-CN
descr:        China Unicom IP network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       CH1302-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040116
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

DNS records

DNS query for 86.208.93.203.in-addr.arpa returned an error from the server: NameError

name class type data time to live
smilewhere.com IN A 218.75.144.6 3600s (01:00:00)
smilewhere.com IN A 220.196.59.35 3600s (01:00:00)
smilewhere.com IN A 91.213.33.10 3600s (01:00:00)
smilewhere.com IN A 203.93.208.86 3600s (01:00:00)

Traceroute

Tracing route to smilewhere.com [203.93.208.86]

hop rtt rtt rtt ip address fully qualified domain name
1 0 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.5 po101.dsr02.dllstx5.theplanet.com
3 0 0 0 70.85.127.109 po52.dsr02.dllstx3.theplanet.com
4 0 0 0 70.87.253.17 et3-2.ibr03.dllstx3.theplanet.com
5 1 0 0 208.172.139.129 cr1-tengig0-7-3-0.dallas.savvis.net
6 33 33 33 204.70.196.153 cr1-tengig-0-7-0-0.losangeles.savvis.net
7 34 34 36 62.156.128.57
8 212 212 212 217.239.41.102
9 208 208 208 217.6.49.182
10 208 208 208 210.53.126.1
11 213 213 213 210.52.132.229
12 213 213 213 218.105.5.81
13 222 223 223 210.52.132.210 1p0-gsr2-cs1.cncnet.net
14 235 238 236 210.53.53.58
15 248 248 248 220.248.161.178
16 225 225 225 203.93.208.86

Trace complete

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: ConnectionRefused
HTTP – 80 HTTP/1.1 200 OK
Server: nginx/0.8.4
Date: Mon, 10 Aug 2009 15:21:47 GMT
Content-Type: text/html
Content-Length: 27598
Last-Modified: Thu, 25 Jun 2009 18:50:02 GMT
Connection: close
Accept-Ranges: bytes
POP3 – 110 Error: ConnectionRefused
IMAP – 143 Error: ConnectionRefused

— end —


Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
219.76.110.185 Hong Kong (Central District)* Whois Google DNSStuff Urgentmessage.org
207.115.36.162 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Marylou K. Howe Sat Aug 8 13:06:23 2009

Return-Path:
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=robobat.fr; domainkeys=neutral (no sig); from=robobat.fr; dkim=neutral (no sig)
Received: from 219.76.110.185 (EHLO nlpi148.prodigy.net) (207.115.36.162)
by mta147.sbc.mail.mud.yahoo.com with SMTP; Sat, 08 Aug 2009 13:06:13 -0700
Received: from vmpuhc1 (n219076110185.netvigator.com [219.76.110.185])
by nlpi148.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n78K2vNe028613;
Sat, 8 Aug 2009 15:06:01 -0500
Message-ID: <000701ca1863$b43ce8c0$627e0202@robobat.fr>
Reply-To: “Marylou K. Howe” <marylou_howeql@robobat.fr>
From: “Marylou K. Howe”  <marylou_howeql@robobat.fr>
To: , ,
Subject: Rxmed Refill?
Date: Sat, 08 Aug 2009 13:06:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 156

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Sat, 08 Aug 2009 22:06:56 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Canadian Pharmacy – greatestrxhere.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are available at your Fingtertips!
No Doctor or Prescription Required!

Order Online Today! –> http://greatestrxhere.com

A Botnet of Computers unknown to its owner being used to SEND SPAM.


A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.253.69.127 United States (Hana)* Whois Google DNSStuff Urgentmessage.org
207.115.20.195 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Nola Dunlap Thu Aug 6 17:02:01 2009
Return-Path:
Authentication-Results: mta100.sbc.mail.re3.yahoo.com from=ein.cz; domainkeys=neutral (no sig); from=ein.cz; dkim=neutral (no sig)
Received: from 72.253.69.127 (EHLO flpi193.prodigy.net) (207.115.20.195)
by mta100.sbc.mail.re3.yahoo.com with SMTP; Thu, 06 Aug 2009 17:02:42 -0700
Received: from hk5xp73 ([72.253.69.127])
by flpi193.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n7702Ags027250;
Thu, 6 Aug 2009 17:02:40 -0700
Message-ID: <000701ca16f2$4a4e90c0$ae8b12d2@ein.cz>
Reply-To: “Nola Dunlap”  <nola.dunlap_cq@ein.cz>
From: “Nola Dunlap”   <nola.dunlap_cq@ein.cz>
To: , ,
Subject: great Weightl0ss medications!
Date: Thu, 06 Aug 2009 17:02:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
72.149.17.130 United States (Miami)* Whois Google DNSStuff Urgentmessage.org
207.115.36.150 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Russ Link Thu Aug 6 08:20:32 2009
Return-Path:
Authentication-Results: mta156.sbc.mail.mud.yahoo.com from=inrs-iaf.uquebec.ca; domainkeys=neutral (no sig); from=inrs-iaf.uquebec.ca; dkim=neutral (no sig)
Received: from 72.149.17.130 (EHLO nlpi136.prodigy.net) (207.115.36.150)
by mta156.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 08:25:16 -0700
Received: from mslavd2 (adsl-072-149-017-130.sip.mia.bellsouth.net [72.149.17.130])
by nlpi136.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n76FOusp012572;
Thu, 6 Aug 2009 10:25:15 -0500
Message-ID: <000701ca16a9$70a44ba0$d828ea62@inrs-iaf.uquebec.ca>
Reply-To: “Russ Link”  <r.linkhg@inrs-iaf.uquebec.ca>
From: “Russ Link”    <r.linkhg@inrs-iaf.uquebec.ca>
To: , ,
Subject: Unbeatable Pharmacy Offers!
Date: Thu, 06 Aug 2009 10:20:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
216.229.13.68 United States (Lincoln)* Whois Google DNSStuff Urgentmessage.org
207.115.36.116 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Elnora Moran Thu Aug 6 00:26:39 2009

Return-Path:
Authentication-Results: mta162.sbc.mail.mud.yahoo.com from=mineralogie.uni-hamburg.de; domainkeys=neutral (no sig); from=mineralogie.uni-hamburg.de; dkim=neutral (no sig)
Received: from 216.229.13.68 (EHLO nlpi100.prodigy.net) (207.115.36.116)
by mta162.sbc.mail.mud.yahoo.com with SMTP; Thu, 06 Aug 2009 00:27:19 -0700
Received: from r1cuoi1 (lnk2-landscape-3.binary.net [216.229.13.68])
by nlpi100.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n767QmPM013246;
Thu, 6 Aug 2009 02:27:19 -0500
Message-ID: <000701ca1667$3cd58830$ae8b12d2@mineralogie.uni-hamburg.de>
Reply-To: “Elnora Moran”  <emoranxy@mineralogie.uni-hamburg.de>
From: “Elnora Moran”   <emoranxy@mineralogie.uni-hamburg.de>
To: ,
Subject: Codeine is here at your fingertips and many more!
Date: Thu, 06 Aug 2009 00:26:39 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 147

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
174.6.184.130 Canada* Whois Google DNSStuff Urgentmessage.org
207.115.36.153 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Francisca Pelletier Wed Aug 5 23:15:31 2009
Return-Path:
Authentication-Results: mta166.sbc.mail.mud.yahoo.com from=ezweb.ne.jp; domainkeys=neutral (no sig); from=ezweb.ne.jp; dkim=neutral (no sig)
Received: from 174.6.184.130 (EHLO nlpi139.prodigy.net) (207.115.36.153)
by mta166.sbc.mail.mud.yahoo.com with SMTP; Wed, 05 Aug 2009 23:15:27 -0700
Received: from wmdmjo3 ([174.6.184.130])
by nlpi139.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n766EiBY001286;
Thu, 6 Aug 2009 01:15:25 -0500
Message-ID: <000701ca165d$4d302190$627e0202@ezweb.ne.jp>
Reply-To: “Francisca Pelletier”  <fpelletier_ac@ezweb.ne.jp>
From: “Francisca Pelletier”   <fpelletier_ac@ezweb.ne.jp>
To: , ,
Subject: Real Deal Phentermin available here!
Date: Wed, 05 Aug 2009 23:15:31 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 162