Canadian Pharmacy – EDSelection.com Viagra Superstore

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


 


 

edselection

Address lookup

canonical name www.edselection.com.
aliases
addresses 91.199.112.8

Domain Whois record

Queried whois.internic.net with “dom edselection.com“…

Domain Name: EDSELECTION.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS0.PARTNERS-DNS.COM
Name Server: NS1.PARTNERS-DNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 11-jul-2009
Creation Date: 29-nov-2005
Expiration Date: 29-nov-2009

>>> Last update of whois database: Sat, 25 Jul 2009 16:02:18 UTC

Queried whois.directnic.com with “edselection.com“…

Registrant:
RX Partners
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Domain Name: EDSELECTION.COM

Administrative Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Technical Contact:
Eagloff, Jessica jessicaeagloff@yahoo.co.uk
145-157 St John Street
2nd Floor
London, GB EC1V 4PY
GB
+44.7005968172

Record last updated 01-16-2009 11:08:28 AM
Record expires on 11-29-2009
Record created on 11-29-2005

Domain servers in listed order:
NS0.PARTNERS-DNS.COM 83.149.85.32
NS1.PARTNERS-DNS.COM 91.199.112.8

The compilation, repackaging, dissemination, or other use of this WHOIS
data is expressly prohibited without the prior written consent of
directNIC.com.

directNIC.com reserves the right to terminate your access to its WHOIS
database in its sole discretion, including without limitation, for
excessive querying of the database or for failure to otherwise abide by
this policy.

directNIC reserves the right to modify these terms at any time.

NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY.
LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.8“…

Information related to ‘91.199.112.0 – 91.199.112.255’

inetnum: 91.199.112.0 – 91.199.112.255
netname: CENTRALUX
descr: Centralux Ltd
country: CY
org: ORG-CLUX1-RIPE
admin-c: JE782-RIPE
tech-c: JE782-RIPE
status: ASSIGNED PI
notify: lexa@wahome.ru
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-CENTRALUX
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-CENTRALUX
mnt-domains: MNT-CENTRALUX
changed: hostmaster@ripe.net 20080111
source: RIPE

organisation: ORG-CLUX1-RIPE
org-name: Centralux Limited
org-type: OTHER
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
e-mail: admin@cluxltd.com
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080110
source: RIPE

person: Jessica Eagloff
address: Kolokotroni, 6
1-st floor, Office 6
P.C. 1101, Nicosia, Cyprus
mnt-by: MNT-CENTRALUX
phone: +44 0121 288 8651
nic-hdl: JE782-RIPE
changed: lexa@wahome.ru 20080110
source: RIPE

% Information related to ‘91.199.112.0/24AS43816’

route: 91.199.112.0/24
descr: Centralux
origin: AS43816
mnt-by: MNT-CENTRALUX
changed: lexa@wahome.ru 20080112
source: RIPE

DNS records

DNS query for 8.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.edselection.com IN A 91.199.112.8 1200s (00:20:00)
edselection.com IN SOA
server: ns1.partners-dns.com
email: root.partners-dns.com
serial: 2006665128
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
edselection.com IN NS ns0.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip2.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip1.partners-dns.com 1200s (00:20:00)
edselection.com IN NS vip3.partners-dns.com 1200s (00:20:00)
edselection.com IN NS ns1.partners-dns.com 1200s (00:20:00)
edselection.com IN A 91.199.112.8 1200s (00:20:00)

Traceroute

Tracing route to http://www.edselection.com [91.199.112.8]

hop rtt rtt rtt ip address fully qualified domain name
1 6 4 4 70.84.211.97 61.d3.5446.static.theplanet.com
2 0 0 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
3 0 5 0 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
4 0 0 0 70.87.253.5 et5-1.ibr03.dllstx3.theplanet.com
5 0 0 0 157.238.225.5 xe-2-4.r01.dllstx09.us.bb.gin.ntt.net
6 1 1 1 144.232.24.69
7 3 3 3 144.232.19.177 sl-crs1-fw-0-6-3-0.sprintlink.net
8 39 40 40 144.232.19.101 sl-crs1-dc-0-8-5-0.sprintlink.net
9 118 118 118 144.232.19.147 sl-bb20-par-1-0-0.sprintlink.net
10 128 128 128 213.206.129.66 sl-bb21-fra-13-0-0.sprintlink.net
11 128 128 128 217.147.96.42 sl-gw10-fra-15-0-0.sprintlink.net
12 169 150 173 217.147.109.22
13 179 165 165 194.186.157.137 cat07.moscow.gldn.net
14 165 165 165 195.239.10.202 te1-1.maxwell.msk.wahome.ru
15 166 166 166 77.91.225.76 vl-500.ampere.msk.wahome.ru
16 166 166 166 92.241.162.66
17 * * *
18 * * *
19 * * *
20 * * *

Trace aborted

Service scan

FTP – 21 Error: TimedOut
SMTP – 25 Error: TimedOut
HTTP – 80 HTTP/1.1 200 OK
Date: Sat, 25 Jul 2009 15:07:40 GMT
Server: Apache/1.3.41 (Unix) PHP/5.2.9 mod_accel/1.0.34 mod_ssl/2.8.30 OpenSSL/0.9.8e
X-Powered-By: PHP/5.2.9
Set-Cookie: PHPSESSID=ee6439032ebf71a1fe77d430143ad656; expires=Mon, 24-Aug-2009 15:07:40 GMT; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Connection: close
Content-Type: text/html;charset=iso-8859-1
POP3 – 110 Error: TimedOut
IMAP – 143 Error: TimedOut

— end —

Domains sharing name servers:

  1. ed-solution.com
  2. ed-sup.com
  3. edcollection.com
  4. edcustomer.com
  5. edselection.com
  6. luxpharmacy.com
  7. manfriendly.com
  8. partners-dns.com
  9. perfectgenerics.com
  10. prescriptionspoint.com
  11. propeciahair.com
  12. rx-partners.biz
  13. rxtrusted.com
  14. secureccpay.com
  15. somaextreme.com
  16. trustedtablets.com
  17. trustedtabs.com
  18. ultimatepillstore.com
  19. viagracomparison.com
  20. yoursecurebilling.com
  21. raypharma.com
  22. 64.128.93.5
  23. buyviagra-online.com
  24. buyvigrxpills.com
  25. edhealthshop.com
  26. extenzedeal.com
  27. extenzediscount.com
  28. myrxmart.com
  29. norxsexpills.com
  30. ordercheapviagra.com
  31. proactol4u.com
  32. rxnetshop.com
  33. samsexpills.com
  34. viagra0.com
  35. viagraorviagra.com
  36. http://www.cheap-edpills.com
  37. xmedicines.com
  38. youredstore.com
  39. 74.86.81.154
  40. theindiantv.com
  41. crocmint.com
  42. croc2host.com
  43. ns1.croc2host.com
  44. ns2.croc2host.com
  45. caliplus.org
  46. croc2host.com
  47. crocitalia.com
  48. crocmintdb2.com
  49. securedinfo.net
  50. vigaplus.org
  51. vitopay.com
  52. vitosaver.com
  53. vitoslim.com
  54. mail.hoodia-absolute.com
  55. hoodia-absolute.com
  56. securedinfo.net
  57. bill.rx-partners.biz
  58. rx-partners.biz
  59. topsecured.net
  60. securedtrack.com
  61. mysecurebilling.com
  62. vigrxplus.com
  63. extenzedeal.com
  64. shareasale.com
  65. zenerx.com
  66. everestnutrition.com
  67. 4rx.com
  68. proactol.com
  69. vigaplus.com
  70. cheap-pharma.com
  71. cheap-pharma.net
  72. cheap-pharma.org
  73. ezymedical.com
  74. aviagra.net
  75. edhelp.biz
  76. ezmedz.net
  77. mediaplace.biz
  78. meds4all.net
  79. rxp-alive.com
  80. buys-pills.com

funny whois entry

Registrant Contact:
Personality
Alexey Goncharov ()
per. Ryabinoviy 7
Krasnodar, KRASNODAR 353182
RU

2 thoughts on “Canadian Pharmacy – EDSelection.com Viagra Superstore

  1. animejeffrey228 says:

    Well chances are they maybe using the similar Crimeware program to use built-in Xrumer Blackhat SEO Crimeware in order to exploit it, this is how they get into message boards more easly, and for the Russian Business Network, it is not a problem to them, apparently I have noticed that when ever I check back with korraforums.com Forums, apparently I see such things from guests doing “Unknown Action” or “You Can Not See Anything” on the board itself, which tells me they are modifying both the filters and the posts themselves to try use such hidden injection scripts to attempt to hack the board, so that these RBN Pharma Spamgangs are trying to take over the board for their own, so they would have it setup to load off an “Unlimited” set of pharma links as my research with allbestlinks.info and ipahere.com(Independent Pharmaceutical Association) have proven, they basically turn a forum into an RBN Xrumer site and even will make posts to encourage all Russians using the internet to install the Blackhat SEO Crimeware for profit and the Russian Economy, and use add-ons like of the ZeuS and SpyEye rootkits to inject exploits on to those sites in order to hack and get passed all security the board has.

  2. bonsayok says:

    Viagra spam injected for googlebot
    http://wordpress.org/support/topic/viagra-spam-injected-for-googlebot

    My blog has been hijacked so that it presents drug text to googlebot. It replaces my post titles and inserts drug names in the text. Some are linked to various innocent-looking sites, which I’m guessing are clients of some malicious SEO firm. Is there a name for this kind of attack?

    I upgraded WP from 3.0.2 to 3.0.5. Everything looks clean, but the problem persists, as seen by setting useragent to googlebot. Research I’ve done has only turned up rather explicit php/js injections which I’ve been unable to find on my site, so maybe this is something newer and eviler.

    I guess I’ll have to start fresh from backed up content, but I would like to figure out what’s going on. Anybody seen anything like this? Here’s what the content looks like to googlebot:

    Buy Viagra No Prescription
    December 5th, 2010

    I can be found walking Stella along the trails of Duke Forest Buy Viagra no prescription, almost every week-end. Last week-end Bonnie joined us with her camera for the occasion of Stella’s second birthday, buy no prescription Viagra online. Viagra over the counter,

    site is http://www.forthgo.com/blog/ if anyone wants to try it with useragent set to googlebot.

Leave A Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.