Buying Prescription Drugs Online 
May Be Dangerous
Says Drug Enforcement Administration
National Association of Boards of Pharmacy (NABP)
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Behind The Online Pharmacy
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
0rder all your Favorite Rx~Medications 0nline!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://happeningrxcenter.com
Header Analysis
The following IP addresses were extracted from your headers:
| IP Address | Probable Country | Additional Info | |||
| 68.142.207.169 | United States (Sunnyvale)* | Whois | DNSStuff | Urgentmessage.org | |
| 164.77.200.130 | Chile (Santiago)* | Whois | DNSStuff | Urgentmessage.org | |
| 207.115.20.119 | United States (Richardson)* | Whois | DNSStuff | Urgentmessage.org | |
| * The last IP listed is usually the originating IP address | |||||
Here is the text you submitted, with the IP addresses highlighted:
From Caleb Henderson Wed Sep 16 11:41:48 2009
X-Apparently-To: ; Wed, 16 Sep 2009 11:39:48 -0700
Return-Path:
X-YahooFilteredBulk: 164.77.200.130
X-YMailISG: nt555YEWLDveVZbH1kYbzWeVbM9G4WRxyS.Kx_uai_pU02hKAXpaZeUMCEuJ
H8K8L5B7KsaSXQZXTeXekwFImkTADxR5uIWapkRrg42ri48py3F38C
_wVzwVod2XQjhVo.3p
QGMHQJq4jQZsJJGO1bLJdXHZcv68h_
Qf3WkmA1jWjbD29ggGbNYC9McI4La_J2C0hsFZp47OGS5MF5Qb03
Loui8QQI2qnu2wx7NeS1OINO4nji2DmUpJ0z.8zVgEgqs3cDOGgTWIJqFE0
pQEz28RXcIJ6K.qtUfF1Wbnu02nuNE_I4h34H0Dp0bLgz.AUlzNQucCiWt2lQ–
X-Originating-IP: [164.77.200.130]
Authentication-Results: mta134.sbc.mail.re2.yahoo.com from=canter.fi; domainkeys=neutral (no sig); from=canter.fi; dkim=neutral (no sig)
Received: from 164.77.200.130 (EHLO flpd109.prodigy.net) (207.115.20.119)
by mta134.sbc.mail.re2.yahoo.com with SMTP; Wed, 16 Sep 2009 11:39:48 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[164.77.200.130]
X-Originating-IP: [164.77.200.130]
Received: from d8ja2a3 ([164.77.200.130])
by flpd109.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8GIdQj0013048;
Wed, 16 Sep 2009 11:39:44 -0700
Message-ID: <000701ca36fd$5906bcc0$627e0f72@canter.fi>
Reply-To: “Caleb Henderson” <c.henderson_ky@canter.fi>
From: “Caleb Henderson” <c.henderson_ky@canter.fi>
To: ,
Subject: Get all the medications you want online!
Date: Wed, 16 Sep 2009 11:41:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 130
Address lookup
| canonical name | happeningrxcenter.com. |
| aliases | |
| addresses | 60.12.166.154 |
Domain Whois record
Queried whois.internic.net with “dom happeningrxcenter.com“…
Domain Name: HAPPENINGRXCENTER.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010
>>> Last update of whois database: Thu, 17 Sep 2009 13:24:23 UTC
Queried whois.hupo.com with “happeningrxcenter.com“…
Domain Name: happeningrxcenter.com
Registrant Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038
Administrative Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038
Technical Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038
Billing Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038
Domain Status:clientTransferProhibited,clientDeleteProhibited
Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com
Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05
Network Whois record
Queried whois.apnic.net with “60.12.166.154“…
inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC
route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC
person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC
DNS records
DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError
| name | class | type | data | time to live | |||||||||||||||
| happeningrxcenter.com | IN | SOA |
|
300s | (00:05:00) | ||||||||||||||
| happeningrxcenter.com | IN | A | 60.12.166.154 | 300s | (00:05:00) | ||||||||||||||
— end —
ww.stimul-cash.com Stimul-media.com Centralux Limited
13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited
Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites
http://www.stimul-cash.com 91.199.112.5
STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086
Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501
hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus
scamFRAUDalert™ Report 