Canadian Pharmacy Spam – rxkingsatyourservice.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

All of Your Favorite RxMedications are Available at your Fingtertips!
No Doctor Needed!
Browse Our Website Today! –> http://rxkingsatyourservice.com

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
219.76.110.185 Hong Kong (Central District)* Whois Google DNSStuff Urgentmessage.org
207.115.36.162 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Marylou K. Howe Sat Aug 8 13:06:23 2009

Return-Path:
Authentication-Results: mta147.sbc.mail.mud.yahoo.com from=robobat.fr; domainkeys=neutral (no sig); from=robobat.fr; dkim=neutral (no sig)
Received: from 219.76.110.185 (EHLO nlpi148.prodigy.net) (207.115.36.162)
by mta147.sbc.mail.mud.yahoo.com with SMTP; Sat, 08 Aug 2009 13:06:13 -0700
Received: from vmpuhc1 (n219076110185.netvigator.com [219.76.110.185])
by nlpi148.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n78K2vNe028613;
Sat, 8 Aug 2009 15:06:01 -0500
Message-ID: <000701ca1863$b43ce8c0$627e0202@robobat.fr>
Reply-To: “Marylou K. Howe” <marylou_howeql@robobat.fr>
From: “Marylou K. Howe”  <marylou_howeql@robobat.fr>
To: , ,
Subject: Rxmed Refill?
Date: Sat, 08 Aug 2009 13:06:23 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
Content-Length: 156

Address lookup

canonical name rxkingsatyourservice.com.
aliases
addresses 211.95.78.2

Domain Whois record

Queried whois.internic.net with “dom rxkingsatyourservice.com“…

   Domain Name: RXKINGSATYOURSERVICE.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.RELAYMYDNS4ME.COM
   Name Server: NS2.RELAYMYDNS4ME.COM
   Name Server: NS3.DNSSHIFTER4US.COM
   Name Server: NS4.DNSSHIFTER4US.COM
   Name Server: NS5.SHIFTMYDNS4ME.COM
   Name Server: NS6.SHIFTMYDNS4ME.COM
   Status: ok
   Updated Date: 04-aug-2009
   Creation Date: 30-jul-2009
   Expiration Date: 30-jul-2010

Last update of whois database: Sat, 08 Aug 2009 22:06:56 UTC

Queried whois.namerich.cn with “rxkingsatyourservice.com“…

 DomainName : rxkingsatyourservice.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS3.DNSSHIFTER4US.COM
Name Server......................NS4.DNSSHIFTER4US.COM
Name Server......................NS6.SHIFTMYDNS4ME.COM
Name Server......................NS2.RELAYMYDNS4ME.COM
Name Server......................NS1.RELAYMYDNS4ME.COM
Name Server......................NS5.SHIFTMYDNS4ME.COM
Status...........................ok
Creation  Date ..................2009-07-31
Expiration Date .................2010-07-31
Last Update  Date ...............2009-08-04

Registrant ID ...................V-X-60403-17525
Registrant Name .................LIN TIANBAO
Registrant Organization .........LIU TIANBAO
Registrant Address ..............KONGZIBEILU37
Registrant City..................JN
Registrant Province/State .......SD
Registrant Country Code .........CN
Registrant Postal Code ..........250149
Registrant Phone Number .........+86.055184421271
Registrant Fax ..................+86.055184421271
Registrant Email ................kuosan_11@163.com

Administrative ID ...............V-X-60403-17525
Administrative Name .............LIN TIANBAO
Administrative Organization .....LIU TIANBAO
Administrative Address ..........KONGZIBEILU37
Administrative City..............JN
Administrative Province/State ...SD
Administrative Country Code .....CN
Administrative Postal Code ......250149
Administrative Phone Number .....+86.055184421271
Administrative Fax ..............+86.055184421271
Administrative Email ............kuosan_11@163.com

Billing ID ......................V-X-60403-17525
Billing Name ....................LIN TIANBAO
Billing Organization ............LIU TIANBAO
Billing Address .................KONGZIBEILU37
Billing City.....................JN
Billing Province/State ..........SD
Billing Country Code ............CN
Billing Postal Code .............250149
Billing Phone Number ............+86.055184421271
Billing Fax .....................+86.055184421271
Billing Email ...................kuosan_11@163.com

Technical ID ....................V-X-60403-17525
Technical Name ..................LIN TIANBAO
Technical Organization...........LIU TIANBAO
Technical Address ...............KONGZIBEILU37
Technical City...................JN
Technical Province/State.........SD
Technical Country Code ..........CN
Technical Postal Code ...........250149
Technical Phone Number ..........+86.055184421271
Technical Fax ...................+86.055184421271
Technical Email .................kuosan_11@163.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “211.95.78.2“…

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Network Communications Corporation Limited
descr:        No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
admin-c:      XZ67-AP
tech-c:       XZ67-AP
country:      CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20090424
source:       APNIC

person:       Xiaomin Zhou
address:      No.21 Financial Street,Xicheng District, Beijing  100140 ,P.R.China
country:      CN
phone:        +86-10-66259626
fax-no:       +86-10-66259626
e-mail:       zhouxm@chinaunicom.cn
nic-hdl:      XZ67-AP
mnt-by:       MAINT-CNNIC-AP
changed:      ipas@cnnic.cn 20090617
source:       APNIC

inetnum:      211.90.0.0 - 211.97.255.255
netname:      UNICOM
descr:        China United Telecommunications Corporation
descr:        No.133,Taiyun Building,Xidan North Street
descr:        Xicheng District,Beijing,China
country:      CN
admin-c:      JY7-CN
tech-c:       JY7-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-UNICOM
status:       ALLOCATED PORTABLE
changed:      ipas@cnnic.cn 20071010
source:       CNNIC

person:       Jin Yang
nic-hdl:      JY7-CN
e-mail:       ip_address@chinaunicom.com.cn
address:      No.133,Taiyun Building,Xidan North Street, Xicheng District,Beijing,China
phone:        +86-10-66505588
fax-no:       +86-10-66504252
country:      CN
changed:      ipas@cnnic.net.cn 20070927
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

DNS records

DNS query for 2.78.95.211.in-addr.arpa returned an error from the server: NameError

name class type data time to live
rxkingsatyourservice.com IN SOA
server: ns.rxkingsatyourservice.com
email: admin.rxkingsatyourservice.com
serial: 2009080101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
rxkingsatyourservice.com IN A 211.95.78.2 300s (00:05:00)

— end —

Leave A Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.