Buying Prescription Drugs Online 
May Be Dangerous
Says Drug Enforcement Administration
National Association of Boards of Pharmacy (NABP)
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Behind The Online Pharmacy
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
Address lookup
| canonical name | www.edselection.com. |
| aliases | |
| addresses | 91.199.112.8 |
Domain Whois record
Queried whois.internic.net with “dom edselection.com“…
Domain Name: EDSELECTION.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 11-jul-2009
Creation Date: 29-nov-2005
Expiration Date: 29-nov-2009
>>> Last update of whois database: Sat, 25 Jul 2009 16:02:18 UTC
Queried whois.directnic.com with “edselection.com“…
Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172
Domain Name: EDSELECTION.COM
Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172
Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172
Record last updated 01-16-2009 11:08:28 AM
Record expires on 11-29-2009
Record created on 11-29-2005
Domain servers in listed order:
NS0.PARTNERS-DNS.COM 83.149.85.32
NS1.PARTNERS-DNS.COM 91.199.112.8
The compilation, repackaging, dissemination, or other use of this WHOIS
data is expressly prohibited without the prior written consent of
directNIC.com.
directNIC.com reserves the right to terminate your access to its WHOIS
database in its sole discretion, including without limitation, for
excessive querying of the database or for failure to otherwise abide by
this policy.
directNIC reserves the right to modify these terms at any time.
NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.
Network Whois record
Queried whois.ripe.net with “-B 91.199.112.8“…
Information related to ‘91.199.112.0 – 91.199.112.255’
inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE
organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE
person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE
% Information related to ‘91.199.112.0/24AS43816’
route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE
DNS records
DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |||||||||||||||
| http://www.edselection.com | IN | A | 91.199.112.8 | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | SOA |
|
1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | NS | ns0.partners-dns.com | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | NS | vip2.partners-dns.com | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | NS | vip1.partners-dns.com | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | NS | vip3.partners-dns.com | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | NS | ns1.partners-dns.com | 1200s | (00:20:00) | ||||||||||||||
| edselection.com | IN | A | 91.199.112.8 | 1200s | (00:20:00) | ||||||||||||||
Traceroute
Tracing route to http://www.edselection.com [91.199.112.8]…
| hop | rtt | rtt | rtt | ip address | fully qualified domain name |
| 1 | 6 | 4 | 4 | 70.84.211.97 | 61.d3.5446.static.theplanet.com |
| 2 | 0 | 0 | 0 | 70.87.254.1 | po101.dsr01.dllstx5.theplanet.com |
| 3 | 0 | 5 | 0 | 70.85.127.105 | po51.dsr01.dllstx3.theplanet.com |
| 4 | 0 | 0 | 0 | 70.87.253.5 | et5-1.ibr03.dllstx3.theplanet.com |
| 5 | 0 | 0 | 0 | 157.238.225.5 | xe-2-4.r01.dllstx09.us.bb.gin.ntt.net |
| 6 | 1 | 1 | 1 | 144.232.24.69 |
| 7 | 3 | 3 | 3 | 144.232.19.177 | sl-crs1-fw-0-6-3-0.sprintlink.net |
| 8 | 39 | 40 | 40 | 144.232.19.101 | sl-crs1-dc-0-8-5-0.sprintlink.net |
| 9 | 118 | 118 | 118 | 144.232.19.147 | sl-bb20-par-1-0-0.sprintlink.net |
| 10 | 128 | 128 | 128 | 213.206.129.66 | sl-bb21-fra-13-0-0.sprintlink.net |
| 11 | 128 | 128 | 128 | 217.147.96.42 | sl-gw10-fra-15-0-0.sprintlink.net |
| 12 | 169 | 150 | 173 | 217.147.109.22 |
| 13 | 179 | 165 | 165 | 194.186.157.137 | cat07.moscow.gldn.net |
| 14 | 165 | 165 | 165 | 195.239.10.202 | te1-1.maxwell.msk.wahome.ru |
| 15 | 166 | 166 | 166 | 77.91.225.76 | vl-500.ampere.msk.wahome.ru |
| 16 | 166 | 166 | 166 | 92.241.162.66 |
| 17 | * | * | * |
| 18 | * | * | * |
| 19 | * | * | * |
| 20 | * | * | * |
Trace aborted
Service scan
| FTP – 21 | Error: TimedOut |
| SMTP – 25 | Error: TimedOut |
| HTTP – 80 | HTTP/1.1 200 OK Date: Sat, 25 Jul 2009 15:07:40 GMT Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e X-Powered-By: PHP/5.2.9 Set-Cookie: PHPSESSID=ee6439032ebf71a1fe77d430143ad656; expires=Mon, 24-Aug-2009 15:07:40 GMT; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: close Content-Type: text/html;charset=iso-8859-1 |
| POP3 – 110 | Error: TimedOut |
| IMAP – 143 | Error: TimedOut |
— end —
Domains sharing name servers:
- ed-solution.com
- ed-sup.com
- edcollection.com
- edcustomer.com
- edselection.com
- luxpharmacy.com
- manfriendly.com
- partners-dns.com
- perfectgenerics.com
- prescriptionspoint.com
- propeciahair.com
- rx-partners.biz
- rxtrusted.com
- secureccpay.com
- somaextreme.com
- trustedtablets.com
- trustedtabs.com
- ultimatepillstore.com
- viagracomparison.com
- yoursecurebilling.com
- raypharma.com
- 64.128.93.5
- buyviagra-online.com
- buyvigrxpills.com
- edhealthshop.com
- extenzedeal.com
- extenzediscount.com
- myrxmart.com
- norxsexpills.com
- ordercheapviagra.com
- proactol4u.com
- rxnetshop.com
- samsexpills.com
- viagra0.com
- viagraorviagra.com
- http://www.cheap-edpills.com
- xmedicines.com
- youredstore.com
- 74.86.81.154
- theindiantv.com
- crocmint.com
- croc2host.com
- ns1.croc2host.com
- ns2.croc2host.com
- caliplus.org
- croc2host.com
- crocitalia.com
- crocmintdb2.com
- securedinfo.net
- vigaplus.org
- vitopay.com
- vitosaver.com
- vitoslim.com
- mail.hoodia-absolute.com
- hoodia-absolute.com
- securedinfo.net
- bill.rx-partners.biz
- rx-partners.biz
- topsecured.net
- securedtrack.com
- mysecurebilling.com
- vigrxplus.com
- extenzedeal.com
- shareasale.com
- zenerx.com
- everestnutrition.com
- 4rx.com
- proactol.com
- vigaplus.com
- cheap-pharma.com
- cheap-pharma.net
- cheap-pharma.org
- ezymedical.com
- aviagra.net
- edhelp.biz
- ezmedz.net
- mediaplace.biz
- meds4all.net
- rxp-alive.com
- buys-pills.com
funny whois entry
Registrant Contact:
Personality
Alexey Goncharov ()
per. Ryabinoviy 7
Krasnodar, KRASNODAR 353182
RU
scamFRAUDalert™ Report 
Well chances are they maybe using the similar Crimeware program to use built-in Xrumer Blackhat SEO Crimeware in order to exploit it, this is how they get into message boards more easly, and for the Russian Business Network, it is not a problem to them, apparently I have noticed that when ever I check back with korraforums.com Forums, apparently I see such things from guests doing “Unknown Action” or “You Can Not See Anything” on the board itself, which tells me they are modifying both the filters and the posts themselves to try use such hidden injection scripts to attempt to hack the board, so that these RBN Pharma Spamgangs are trying to take over the board for their own, so they would have it setup to load off an “Unlimited” set of pharma links as my research with allbestlinks.info and ipahere.com(Independent Pharmaceutical Association) have proven, they basically turn a forum into an RBN Xrumer site and even will make posts to encourage all Russians using the internet to install the Blackhat SEO Crimeware for profit and the Russian Economy, and use add-ons like of the ZeuS and SpyEye rootkits to inject exploits on to those sites in order to hack and get passed all security the board has.
Viagra spam injected for googlebot
http://wordpress.org/support/topic/viagra-spam-injected-for-googlebot
My blog has been hijacked so that it presents drug text to googlebot. It replaces my post titles and inserts drug names in the text. Some are linked to various innocent-looking sites, which I’m guessing are clients of some malicious SEO firm. Is there a name for this kind of attack?
I upgraded WP from 3.0.2 to 3.0.5. Everything looks clean, but the problem persists, as seen by setting useragent to googlebot. Research I’ve done has only turned up rather explicit php/js injections which I’ve been unable to find on my site, so maybe this is something newer and eviler.
I guess I’ll have to start fresh from backed up content, but I would like to figure out what’s going on. Anybody seen anything like this? Here’s what the content looks like to googlebot:
Buy Viagra No Prescription
December 5th, 2010
I can be found walking Stella along the trails of Duke Forest Buy Viagra no prescription, almost every week-end. Last week-end Bonnie joined us with her camera for the occasion of Stella’s second birthday, buy no prescription Viagra online. Viagra over the counter,
site is http://www.forthgo.com/blog/ if anyone wants to try it with useragent set to googlebot.