Canadian Pharmacy – online-tabs.net

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

1(210) 888-9089

CANADIAN PHARMACY-McCann Schoolonline tablet

Address lookup

canonical name online-tabs.net.
aliases
addresses 195.95.155.3

Domain Whois record

Queried whois.internic.net with “dom online-tabs.net“…

   Domain Name: ONLINE-TABS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1.SUSPENDED-DOMAINS.NET
   Name Server: NS2.SUSPENDED-DOMAINS.NET
   Name Server: NS3.SUSPENDED-DOMAINS.NET
   Name Server: NS4.SUSPENDED-DOMAINS.NET
   Status: clientTransferProhibited
   Updated Date: 27-jul-2009
   Creation Date: 27-jul-2009
   Expiration Date: 27-jul-2010

>>> Last update of whois database: Sun, 02 Aug 2009 18:07:21 UTC <<<

Queried whois.enom.com with “online-tabs.net“…

Visit AboutUs.org for more information about online-tabs.net
<a href="http://www.aboutus.org/online-tabs.net">AboutUs: online-tabs.net</a>

Registration Service Provided By: -
Contact: director@climbing-games.com
Visit: http://www.ruler-domains.com

Domain name: online-tabs.net

Registrant Contact:

   Aleksandr Kalinin ()

   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Administrative Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Technical Contact:

   Aleksandr Kalinin akkalinin@gmail.com
   +7.9211039847
   Fax: 
   Vinokurova ul. d.19 k.1 kv.24
   Moskow,  113447
   RU

Status: Locked

Name Servers:
   ns1.suspended-domains.net
   ns2.suspended-domains.net
   ns3.suspended-domains.net
   ns4.suspended-domains.net

Creation date: 27 Jul 2009 12:42:05
Expiration date: 27 Jul 2010 12:42:05

Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com

Network Whois record

Queried whois.ripe.net with “-B 195.95.155.3“…

% Information related to '195.95.155.0 - 195.95.155.255'

inetnum:        195.95.155.0 - 195.95.155.255
netname:        MSKCOM-NET
descr:          MoskvaCom Ltd
country:        RU
org:            ORG-ML114-RIPE
admin-c:        PG5690-RIPE
tech-c:         PG5690-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         MSKCOM-MNT
mnt-routes:     MSKCOM-MNT
mnt-routes:     AS2118-MNT
mnt-domains:    MSKCOM-MNT
changed:        dilotto@gmail.com 20090224
source:         RIPE

organisation:   ORG-ML114-RIPE
org-name:       MoskvaCom Ltd
org-type:       OTHER
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
mnt-ref:        MSKCOM-MNT
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

person:         Pavel Gorbunov
address:        Parusnyj pr. 49/2
address:        Moscow, Russia
phone:          +7 910 4311272
e-mail:         dilotto@gmail.com
nic-hdl:        PG5690-RIPE
mnt-by:         MSKCOM-MNT
changed:        hostmaster@ripe.net 20090224
source:         RIPE

% Information related to '195.95.155.0/24AS2118'

route:          195.95.155.0/24
descr:          RusDesign Autonomous System
origin:         AS2118
notify:         noc@relcom.net
mnt-by:         AS2118-MNT
changed:        andreyss@relcom.net 20090303
source:         RIPE

DNS records

DNS query for 3.155.95.195.in-addr.arpa returned an error from the server: NameError

name class type data time to live
online-tabs.net IN SOA
server: ns1.nscontrol.com
email: root.online-tabs.net
serial: 2007100801
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 30
60s (00:01:00)
online-tabs.net IN A 195.95.155.3 60s (00:01:00)
online-tabs.net IN NS ns2.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns3.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns5.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns4.nscontrol.com 60s (00:01:00)
online-tabs.net IN NS ns1.nscontrol.com 60s (00:01:00)

— end —

Advertisements

Loan Union Financial – www.loanunion.net

I went to loan union.net then someone from Silverfield financial group contacted me about a 25,000 dollar loan which required a 2500 dollar deposit to secure I did not bite, it sounds good, a little to good,sounds like the same scam. I was given this number 800-627-6189 and this web address http://www.silverfieldfinancial.com please check it out thanks Tony

Does anyone know about a company called Loan Union Financial? They said the web address is http://www.loanunion.net. They claimed to be associated with intel insurance company and need money for the insurance company to secure a personal loan.

Their phone number is 1-800-847-4307 and they asked for collateral in the form of a home completely paid off, a vehicle paid off 4 years or newer, or a payment of $540 to the insurance company to insure my loan of $5,000.  I tried searching the Better Business Bureau and could not find the company listed.  I admit I have bad credit, but do not want to lose money.

CreditBloggers

Address lookup

canonical name www.loanunion.net.
aliases
addresses 64.150.180.73

Domain Whois record

Queried whois.internic.net with “dom loanunion.net“…

Domain Name: LOANUNION.NET
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.SITELUTIONS.COM
Name Server: NS2.SITELUTIONS.COM
Name Server: NS3.SITELUTIONS.COM
Name Server: NS4.SITELUTIONS.COM
Name Server: NS5.SITELUTIONS.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 14-nov-2008
Creation Date: 12-nov-2008
Expiration Date: 12-nov-2009

Last update of whois database: Sun, 02 Aug 2009 17:06:13 UTC

Queried whois.godaddy.com with “loanunion.net“…

Registrant:
Domains by Proxy, Inc.

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: LOANUNION.NET

Domain servers in listed order:
NS1.SITELUTIONS.COM
NS2.SITELUTIONS.COM
NS3.SITELUTIONS.COM
NS4.SITELUTIONS.COM
NS5.SITELUTIONS.COM

For complete domain details go to:

Network Whois record

Queried whois.arin.net with “64.150.180.73“…

OrgName: Codero
OrgID: APHIN
Address: 7500 W 110th St., Suite 400
City: Overland Park
StateProv: KS
PostalCode: 66210
Country: US

NetRange: 64.150.176.0 – 64.150.191.255
CIDR: 64.150.176.0/20
OriginAS: AS10316
NetName: CODERO2008A
NetHandle: NET-64-150-176-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.CODERO.COM
NameServer: NS2.CODERO.COM
Comment:
RegDate: 2008-06-25
Updated: 2009-07-31

OrgAbuseHandle: APHAB-ARIN
OrgAbuseName: APH Abuse
OrgAbusePhone: +1-877-275-8763
OrgAbuseEmail: abuse@codero.com

OrgTechHandle: ADA108-ARIN
OrgTechName: APH DNS Administrator
OrgTechPhone: +1-877-275-8763
OrgTechEmail: dns@codero.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name class type data time to live
http://www.loanunion.net IN A 64.150.180.73 600s (00:10:00)
loanunion.net IN SOA
server: ns1.sitelutions.com
email: lmrcorp25.gmail.com
serial: 5
refresh: 28000
retry: 7200
expire: 604800
minimum ttl: 1
3600s (01:00:00)
loanunion.net IN A 64.150.180.73 600s (00:10:00)
loanunion.net IN NS ns1.sitelutions.com 172800s (2.00:00:00)
loanunion.net IN NS ns2.sitelutions.com 172800s (2.00:00:00)
loanunion.net IN NS ns3.sitelutions.com 172800s (2.00:00:00)
loanunion.net IN NS ns4.sitelutions.com 172800s (2.00:00:00)
loanunion.net IN NS ns5.sitelutions.com 172800s (2.00:00:00)
73.180.150.64.in-addr.arpa IN PTR 64-150-180-73.dedicated.abac.net 43200s (12:00:00)

— end —

Canadian Pharmacy – CANADIAN-DRUG-SHOP.COM

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharma

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharma world.

canadian-drugshop

Address lookup

canonical name canadian-drug-shop.com.
aliases
addresses 69.46.228.186

Domain Whois record

Queried whois.internic.net with “dom canadian-drug-shop.com“…

   Domain Name: CANADIAN-DRUG-SHOP.COM
   Registrar: GODADDY.COM, INC.
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: NS1.PARKED.COM
   Name Server: NS2.PARKED.COM
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 25-jun-2008
   Creation Date: 29-jul-2002
   Expiration Date: 29-jul-2011

Last update of whois database: Sun, 02 Aug 2009 16:49:35 UTC <<<

Queried whois.godaddy.com with “canadian-drug-shop.com“…

Registrant:
   RUMIT SAHNI

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
   Domain Name: CANADIAN-DRUG-SHOP.COM

   Domain servers in listed order:
      NS1.PARKED.COM
      NS2.PARKED.COM

   For complete domain details go to:

Network Whois record

Queried whois.arin.net with “!NET-69-46-226-0-1“…

OrgName:    Parked.com, LLC
OrgID:      PARKE-19
Address:    5505 West Gray Street
City:       Tampa
StateProv:  FL
PostalCode: 33609
Country:    US

NetRange:   69.46.226.0 - 69.46.228.255
CIDR:       69.46.226.0/23, 69.46.228.0/24
OriginAS:   AS11575
NetName:    PARKED1
NetHandle:  NET-69-46-226-0-1
Parent:     NET-69-46-224-0-1
NetType:    Reallocated
NameServer: NS0.ZIPA.COM
NameServer: NS1.ZIPA.COM
Comment:
RegDate:    2007-10-23
Updated:    2007-10-23

RNOCHandle: NETWO2072-ARIN
RNOCName:   Network Administrator
RNOCPhone:  +1-813-386-2801
RNOCEmail:  netadmin@parked.com 

OrgTechHandle: DOMAI142-ARIN
OrgTechName:   Domain Administrator
OrgTechPhone:  +1-813-386-2801
OrgTechEmail:  admin@parked.com

# ARIN WHOIS database, last updated 2009-08-01 20:00

DNS records

name class type data time to live
canadian-drug-shop.com IN SOA
server: ns1.parked.com
email: admin.parked.com
serial: 2008062520
refresh: 28800
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
canadian-drug-shop.com IN A 69.46.228.186 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns1.parked.com 86400s (1.00:00:00)
canadian-drug-shop.com IN NS ns2.parked.com 86400s (1.00:00:00)
186.228.46.69.in-addr.arpa IN PTR 69-46-228-186.parked.com 86400s (1.00:00:00)

— end —

CANADIAN-DRUG-SHOP.COM is involved in a MASSIVE SPAM operation and is a menace to the internet.

Raven Media / Grant Masters

Raven Media / Grant Masters CD # Misc charges p/month for a year! Total $47.85 per month! Total Charges $586.25 Las Vegas Nevada

Raven Media / Grant Masters
Phone: 866-370-7270
2620 S. Maryland Parkway #859 – A,
Las Vegas, Nevada, 89109
U.S.A.

ATTN ALL GRANT MASTER PATRONS…….

I have been scammed by this company as well as several other people that I can see. This business should be shut down or they should have in BOLD letters what their intentions are, including that they plan to have recurring charges on your credit card!

For the first month, they charged mybusiness credit card 3 different times. The first for $1.97, the S/H for the CD, which I also never received. The second, for $29.95 for internet website access, which I have never even logged on to. Which to me proves that I was never aware of any website. I JUST WANTED THE CD! And three, for some sort of ‘Express Funding Program.’

I have my secretary pay my cc bill every month and these charges went unnoticed for almost a year. She was off today, 10/22/08, so I went through the statement and noticed some charges that should not have been there. Upon pulling my CC bills for this past year, I found 3 charges each month on there, totaling $47.85 each!!!!! I thought to myself, this has to be a scam!!! I never would have authorized a recurring purchase of that sort when all I wanted in the first place was a stupid CD that I never even received. Now why would I keep buying something if I didn[‘t even receive the first part of it!

I called the company and demanded that they send me a copy of every single charge that they have ever put on my cc bill. She said that she would refund two of the $29.95 charges and that was it. TWO???!!!!! Two out of a total of 13 that was on there??? NO! I told her that I would not get off of the phone until I received a full reimbursement, that their company is a scam and I cannot believe that they are still in business. She then said that she would refund two additional $9.95 charges. I WAS FLOORED!!!!! I told her then that I would spend the next week searching for every online company that I could report fraud to. She then put me on hold.

When the call ended, she ended up refunding me THE ENTIRE AMOUNT< EVERY SINGLE CHARGE!!!!!

DO NOT back down to this company, if you feel that you have been taken for a short ride, take them for a roller coaster ride right back!!!!!

Good Luck!

Courtneymh
Aviston, Illinois
U.S.A.

Ripoffreport.com

Better Business Bureau


Tipp Consulting, GmbH – Switzerland

Tipp Consulting, GmbH Job seekers beware of Tipp Consulting, Job Scam!! Zurich Other

Tipp Consulting, GmbH
Grosswiesenstrasse 151
Zurich, Other, 8051
Switzerland
Phone: 866-360-4112
Fax: 866-471-0651

Job seekers beware of this Job Scam from “Tipp Consulting GmbH”, JOB SCAM!!!! If you are currently in the job market or you are looking for a job and come into contact with this company. Be careful and stay away. Please read my story.

I got an email from a recruiter representing ‘Tipp Consulting GmbH,’ saying that they have reviewed my resume and after thorough review, they believed that I would be a valuable addition to theirworkforce. They said that they are “presently expanding their services in the United States and are looking for highly qualified and experienced individuals such as you.”

They claim to be VAT reclamation and income tax refund application service from Switzerland. Their clients were international business people who are owed money from VAT and other similar taxes. The Job duty was to handle the VAT applications of their clients to claim their income tax refund. They mentioned that they had a “new back-office technology” that provides training and access to their staff.

It sounded a little suspicious. I then tried to look up the company and see if there were any Rip Off Reports or if there was anything weird listed on Google. I did not find any rip off reports but I did find their website. Everything looked ok so, I proceeded to complete the application.
After completing the application, I was expecting a phone interview. But instead I was told to register and create an account to their back office account (referring to their “back office technology”). This was to collect any necessary HR information, collect documentation, and communicate with their team. There were some additional forms on their “back office website” such as an Application Guide, Employee Handbook, Employment Agreement, Benefits and Duties. I thought these process was interesting since I did not have an interview as of yet. But I signed the paperwork anyways.

Next I received another form to sign called “task and payroll terms.” This is what really took me by surprise and opened my eyes to a possible scam. It said that in my work duties, I was expected to proceed to perform refund transactions on behalf of the company. I was to use my personal checking account for the refund transactions. And it goes on saying that my personal checking account was needed for payroll distribution, (they say “a contemporary way of conducting salary based transfers”.)

This form ends with asking for my
personal bank account #’s,
routing #’s and
bank name & address

This company is total B.S. I had not even had an interview or even been extended an offer for a position and all of a sudden I was part of their company and they needed mybank account number for payroll and other transactions. No one should be asking for your personal banking account information at all. So I have stopped communications with them at this time.
I am so embarrassed that I even went as far as I did. But I feel compelled to tell others about my experience, and hopefully save someone else out there from a huge Rip Off.

Please be aware of this kind of job scam. I have a feeling that there other various or similar job scams like this one! At the very least, stay away from Tipp Consulting GmbH.

Rebecca
Los Angeles, California
U.S.A.

Canadian Pharmacy Spam Servers – rx-partners. biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


SmartFilter Category: Not Categorized
Make Category Suggestions
Namerservers on IP: dns2.onlinemedson.net
ns0.rx-sharedhost.com
ns0.rxp-hosting.com
ns1.edportu.com
ns1.partners-dns.com
ns1.viagravendita.com
ns2.bestpharm.org
ns2.drugs-on.net
ns2.edportu.com
ns2.esfarmaciaonline.com
ns2.genericdrugson.net
ns2.healthproductson.net
ns2.medications-on.net
ns2.medsshop.org
ns3.cesaonline.net
whatever.rxp-alive.com
Domain
rx-sharedhost.com
tr-tabs.com
mysecurebilling.com
bill-my-card.com
buyusarx.com
edcustomer.com
enjoymeds.com
hoodiaweightlosstablets.com
longlovetabs.com
medextreme.com
medsjoy.com
pillsfm.com
rxfeel.com
rxfeeling.com
rxp-hosting.com
rxparty.com
farmacia-es.com
linkzpage.com
Domain
ed-solution.com
ed-sup.com
edselection.com
manfriendly.com
partners-dns.com
perfectgenerics.com
propeciahair.com
rxtrusted.com
secureccpay.com
somaextreme.com
trustedtablets.com
trustedtabs.com
ultimatepillstore.com
viagracomparison.com
4drugs.com
paid4meds.com
paid4med.com
paid4pill.com
paid4pills.com
paid4tabs.com

Domain
comprarecialis.org
rxp-alive.com

Canadian Pharmacy- cheapest-drug.org – rx-partners.biz

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Submitted by Rune on May 18, 2008 – 16:05

I don’t ever bother to mention the problematic “affiliate did it” argument.

This guy is not directly spamming the domain in question, cheapest-drug.org.
He has instead registered as a user on several forums/communities, giving a link to a domain (or several) in his userprofile and spamvertizes his userprofile via comments.

The latest from today came in via 207.38.4.12 which appears to be a free open proxy on “M9 Systems” in Canada. Tries to leave a comment on the posting about can-spam mailers.

“User”: Paeal (including a link to a wikidot.com site, I reckon they will nuke it).
Subject: “Your site has very much liked me.” (That seems to be a favourite among commentspammers).
The links in the commentspam:
http://forums.ugo.com/member.php?u=46618 “>Buy Viagra
http://www.mixx.com/users/viagrapill “>buy viagra online<
http://ubuntuforums.org/member.php?u=580712 “>buy cialis online
http://www.flixster.com/user/levitraa “>buy levitra

For examples of this comment- (and guestbook-) spammer, see this search result (Google):
“u=46618” +ugo

The links in the userprofiles at the forums/communities above all goes to various pages at cheapest-drug.org.
cheapest-drug.org is hosted at 91.199.112.8, which is rx-partners.biz who has their own listing in Spamhaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL64756

rx-partners.biz are sneaky. This probably does not violate their policies and their “affiliates” can happily continue with their comment spam. Or what, Jessica? (rx-partners won’t listen, jessicaeagloff@yahoo.co.uk comes back to me and their form submission does not work/or I can’t read their captcha. Not my problem)

Screenshot from cheapest-drug.org (click on it for a larger one):

Address lookup

canonical name cheapest-drug.org.
aliases
addresses 91.199.112.104

Domain Whois record

Queried whois.publicinterestregistry.net with “cheapest-drug.org“…

AS43816 Centralux (a.k.a. WebAlta, Russia);
AS28753 NetDirect (Germany); and
AS41867 Geonic (Ukraine)

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:01-Jan-2009 00:28:52 UTC
Expiration Date:15-Nov-2009 17:56:41 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:OK
Registrant ID:ec82bbcdbb3
Registrant Name:WhoisGuard  Protected
Registrant Organization:WhoisGuard
Registrant Street1:8939 S. Sepulveda Blvd. #110 -
Registrant City:Westchester
Registrant State/Province:CA
Registrant Postal Code:90045
Registrant Country:US
Registrant Phone:+1.6613102107

Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com

Admin ID:ec82bbcdbb3
Admin Name:WhoisGuard  Protected
Admin Organization:WhoisGuard
Admin Street1:8939 S. Sepulveda Blvd. #110 -
Admin City:Westchester
Admin State/Province:CA
Admin Postal Code:90045
Admin Country:US
Admin Phone:+1.661-310-2107
Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com

Tech ID:ec82bbcdbb3
Tech Name:WhoisGuard  Protected
Tech Organization:WhoisGuard
Tech Street1:8939 S. Sepulveda Blvd. #110 -
Tech City:Westchester
Tech State/Province:CA
Tech Postal Code:90045
Tech Country:US
Tech Phone:+1.661-310-2107
Email:b946005550354558b4e48120e77d6930.protect@whoisguard.com
Name Server:ELD.STEELURK.COM
Name Server:ISA.STEELURK.COM

Network Whois record

Queried whois.ripe.net with “-B 91.199.112.104“…

Information related to '91.199.112.0 - 91.199.112.255'

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
notify:         lexa@wahome.ru
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
changed:        hostmaster@ripe.net 20080111
source:         RIPE

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080110
source:         RIPE

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
changed:        lexa@wahome.ru 20080110
source:         RIPE

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
changed:        lexa@wahome.ru 20080112
source:         RIPE

DNS records

DNS query for 104.112.199.91.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cheapest-drug.org IN SOA
server: eld.steelurk.com
email: root.steelurk.com
serial: 2006669692
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 1200
1200s (00:20:00)
cheapest-drug.org IN NS eld.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN NS isa.steelurk.com 1200s (00:20:00)
cheapest-drug.org IN A 91.199.112.104 1200s (00:20:00)

— end —

cheapest-drug.org

Domain ID:D149813888-LROR
Domain Name:CHEAPEST-DRUG.ORG
Created On:15-Nov-2007 17:56:41 UTC
Last Updated On:22-Jan-2008 13:37:03 UTC
Expiration Date:15-Nov-2008 17:56:41 UTC
Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd.
					d/b/a PublicDomainRegistry.com (R27-LROR)
Status:OK
Registrant ID:DI_7040912
Registrant Name:saniok
Registrant Organization:RX-partner
Registrant Street1:Alexandr cel bun 94/53
Registrant City:Hincesti
Registrant State/Province:0
Registrant Postal Code:3401
Registrant Country:MD
Registrant Phone:+373.079777957
Registrant Phone Ext.:
Registrant Email:saniok44@gmail.com

Admin ID:DI_7040912
Admin Name:saniok
Admin Organization:RX-partner
Admin Street1:Alexandr cel bun 94/53
Admin City:Hincesti
Admin State/Province:0
Admin Postal Code:3401
Admin Country:MD
Admin Phone:+373.079777957
Admin Email:saniok44@gmail.com

Tech ID:DI_7040912
Tech Name:saniok
Tech Organization:RX-partner
Tech Street1:Alexandr cel bun 94/53
Tech City:Hincesti
Tech State/Province:0
Tech Postal Code:3401
Tech Country:MD
Tech Phone:+373.079777957
Tech Phone Ext.:

Tech Email:saniok44@gmail.com
Name Server:ONLINE.RXP-FOREVER.COM
Name Server:LIVE.RXP-FOREVER.COM

 DiG 9.3.4-P1 cheapest-drug.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59717
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;cheapest-drug.org.             IN      A

;; ANSWER SECTION:
cheapest-drug.org.      1200    IN      A       91.199.112.8

;; AUTHORITY SECTION:
cheapest-drug.org.      1200    IN      NS      online.rxp-forever.com.
cheapest-drug.org.      1200    IN      NS      live.rxp-forever.com.

;; ADDITIONAL SECTION:
live.rxp-forever.com.   52213   IN      A       91.199.112.8
online.rxp-forever.com. 52213   IN      A       91.199.112.7

;; Query time: 201 msec
;; SERVER: 217.13.7.140#53(217.13.7.140)
;; WHEN: Sun May 18 14:58:55 2008
;; MSG SIZE  rcvd: 138

91.199.112.8

inetnum:        91.199.112.0 - 91.199.112.255
netname:        CENTRALUX
descr:          Centralux Ltd
country:        CY
org:            ORG-CLUX1-RIPE
admin-c:        JE782-RIPE
tech-c:         JE782-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-by:         MNT-CENTRALUX
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-routes:     MNT-CENTRALUX
mnt-domains:    MNT-CENTRALUX
source:         RIPE # Filtered

organisation:   ORG-CLUX1-RIPE
org-name:       Centralux Limited
org-type:       OTHER
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
e-mail:         admin@cluxltd.com
mnt-ref:        RU-WEBALTA-MNT
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

person:         Jessica Eagloff
address:        Kolokotroni, 6
                1-st floor, Office 6
                P.C. 1101, Nicosia, Cyprus
mnt-by:         MNT-CENTRALUX
phone:          +44 0121 288 8651
nic-hdl:        JE782-RIPE
source:         RIPE # Filtered

% Information related to '91.199.112.0/24AS43816'

route:          91.199.112.0/24
descr:          Centralux
origin:         AS43816
mnt-by:         MNT-CENTRALUX
source:         RIPE # Filtered

“jessica Eagloff”. That is rx-partners.biz.
See this SBL-listing: