Canadian Pharmacy Spam – Stimul-cash.com (www.happeningrxcenter.com)

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration


DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


0rder all your Favorite Rx~Medications 0nline!
N0_Doctor_Needed!
Browse 0ur Website Today! –> http://happeningrxcenter.com

 

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
164.77.200.130 Chile (Santiago)* Whois Google DNSStuff Urgentmessage.org
207.115.20.119 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

From Caleb Henderson Wed Sep 16 11:41:48 2009
X-Apparently-To: ; Wed, 16 Sep 2009 11:39:48 -0700
Return-Path:
X-YahooFilteredBulk: 164.77.200.130
X-YMailISG: nt555YEWLDveVZbH1kYbzWeVbM9G4WRxyS.Kx_uai_pU02hKAXpaZeUMCEuJ
H8K8L5B7KsaSXQZXTeXekwFImkTADxR5uIWapkRrg42ri48py3F38C
_wVzwVod2XQjhVo.3p
QGMHQJq4jQZsJJGO1bLJdXHZcv68h_
Qf3WkmA1jWjbD29ggGbNYC9McI4La_J2C0hsFZp47OGS5MF5Qb03
Loui8QQI2qnu2wx7NeS1OINO4nji2DmUpJ0z.8zVgEgqs3cDOGgTWIJqFE0
pQEz28RXcIJ6K.qtUfF1Wbnu02nuNE_I4h34H0Dp0bLgz.AUlzNQucCiWt2lQ–
X-Originating-IP: [164.77.200.130]
Authentication-Results: mta134.sbc.mail.re2.yahoo.com from=canter.fi; domainkeys=neutral (no sig); from=canter.fi; dkim=neutral (no sig)
Received: from 164.77.200.130 (EHLO flpd109.prodigy.net) (207.115.20.119)
by mta134.sbc.mail.re2.yahoo.com with SMTP; Wed, 16 Sep 2009 11:39:48 -0700
X-Header-NoReverseIP: IP.name.lookup.failed[164.77.200.130]
X-Originating-IP: [164.77.200.130]
Received: from d8ja2a3 ([164.77.200.130])
by flpd109.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n8GIdQj0013048;
Wed, 16 Sep 2009 11:39:44 -0700
Message-ID: <000701ca36fd$5906bcc0$627e0f72@canter.fi>
Reply-To: “Caleb Henderson” <c.henderson_ky@canter.fi>
From: “Caleb Henderson” <c.henderson_ky@canter.fi>
To: ,
Subject: Get all the medications you want online!
Date: Wed, 16 Sep 2009 11:41:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset=”windows-1250″
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Length: 130

Address lookup

canonical name happeningrxcenter.com.
aliases
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom happeningrxcenter.com“…

Domain Name: HAPPENINGRXCENTER.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

>>> Last update of whois database: Thu, 17 Sep 2009 13:24:23 UTC

Queried whois.hupo.com with “happeningrxcenter.com“…

Domain Name: happeningrxcenter.com

Registrant Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Administrative Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Technical Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Billing Contact:
LIN FAHU
LIN FAHU
Email:sjbngopp@yeah.net
Tel:+86.02589255471
Fax:+86.02589255471
GANGWANLU46
NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:50:05
Expireation Date:2010-08-22 14:50:05

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
happeningrxcenter.com IN SOA
server: ns.happeningrxcenter.com
email: admin.happeningrxcenter.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
happeningrxcenter.com IN A 60.12.166.154 300s (00:05:00)

— end —

ww.stimul-cash.com Stimul-media.com Centralux Limited


13/02/2009 Go to comments Comment
http://www.stimul-cash.com Stimul-media.com Centralux Limited

Affiliate System for selling drugs
Many types of Viagra spams appear to be linked to these sites

http://www.stimul-cash.com 91.199.112.5

STIMUL-MEDIA.COM
Marysheva, Asiyat marysheva@yahoo.com
Petrozavodskaya st, apt 16. 123 Moscow, Moscow 125414 RU +7.9160248086

Skype: inika. Support@stimul-cash.com
Mark ICQ 340293353 ICQ 439136275 Irene
Emergency Contact: 428930501

hosted in Cyprus in Centralux Limited
Centralux Limited
Kolokotroni, 6 1-st floor, Office 6
PC 1101, Nicosia, Cyprus admin@cluxltd.com
Jessica Eagloff Kolokotroni, 6 1-st floor, Office 6 PC 1101, Nicosia, Cyprus

Canadian Pharamacy Spam – Stimul-cash.com (www.getallyourfavorites.com)

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.166 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
76.210.238.82 United States (Beaumont)* Whois Google DNSStuff Urgentmessage.org
207.115.20.184 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Order all your Favorite Rx`Medications_0nline!
NoPrescription_Needed!
Browse_Our Selection_Today! –> http://getallyourfavorites.com

getallyourfavorites

Address lookup

canonical name getallyourfavorites.com.
aliases http://www.getallyourfavorites.com
addresses 60.12.166.154

Domain Whois record

Queried whois.internic.net with “dom getallyourfavorites.com“…

   Domain Name: GETALLYOURFAVORITES.COM
   Registrar: CHINA SPRINGBOARD INC.
   Whois Server: whois.namerich.cn
   Referral URL: http://www.namerich.cn
   Name Server: NS1.UBR34NS.COM
   Name Server: NS2.UBR34NS.COM
   Name Server: NS3.DRLSDRO.COM
   Name Server: NS4.DRLSDRO.COM
   Name Server: NS5.HOSTLIFE45.COM
   Name Server: NS6.HOSTLIFE45.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 16-sep-2009
   Creation Date: 16-sep-2009
   Expiration Date: 16-sep-2010

Last update of whois database: Thu, 17 Sep 2009 13:13:38 UTC <<<

Queried whois.namerich.cn with “getallyourfavorites.com“…

DomainName : getallyourfavorites.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn      

Name Server......................NS5.HOSTLIFE45.COM
Name Server......................NS1.UBR34NS.COM
Name Server......................NS2.UBR34NS.COM
Name Server......................NS3.DRLSDRO.COM
Name Server......................NS4.DRLSDRO.COM
Name Server......................NS6.HOSTLIFE45.COM
Status...........................clientTransferProhibited
Status...........................clientDeleteProhibited
Creation  Date ..................2009-09-16
Expiration Date .................2010-09-16
Last Update  Date ...............2009-09-16

Registrant ID ...................V-X-58522-14215
Registrant Name .................ZHANG WENQI
Registrant Organization .........ZHANG WENQI
Registrant Address ..............JIAOTONGLU16
Registrant City..................DL
Registrant Province/State .......LN
Registrant Country Code .........CN
Registrant Postal Code ..........116049
Registrant Phone Number .........+86.041128805621
Registrant Fax ..................+86.041128805621
Registrant Email ................kaokga@126.com

Administrative ID ...............V-X-58522-14215
Administrative Name .............ZHANG WENQI
Administrative Organization .....ZHANG WENQI
Administrative Address ..........JIAOTONGLU16
Administrative City..............DL
Administrative Province/State ...LN
Administrative Country Code .....CN
Administrative Postal Code ......116049
Administrative Phone Number .....+86.041128805621
Administrative Fax ..............+86.041128805621
Administrative Email ............kaokga@126.com

Billing ID ......................V-X-58522-14215
Billing Name ....................ZHANG WENQI
Billing Organization ............ZHANG WENQI
Billing Address .................JIAOTONGLU16
Billing City.....................DL
Billing Province/State ..........LN
Billing Country Code ............CN
Billing Postal Code .............116049
Billing Phone Number ............+86.041128805621
Billing Fax .....................+86.041128805621
Billing Email ...................kaokga@126.com

Technical ID ....................V-X-58522-14215
Technical Name ..................ZHANG WENQI
Technical Organization...........ZHANG WENQI
Technical Address ...............JIAOTONGLU16
Technical City...................DL
Technical Province/State.........LN
Technical Country Code ..........CN
Technical Postal Code ...........116049
Technical Phone Number ..........+86.041128805621
Technical Fax ...................+86.041128805621
Technical Email .................kaokga@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “60.12.166.154“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 154.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.getallyourfavorites.com IN CNAME getallyourfavorites.com 300s (00:05:00)
getallyourfavorites.com IN SOA
server: ns.getallyourfavorites.com
email: admin.getallyourfavorites.com
serial: 2009091601
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
getallyourfavorites.com IN A 60.12.166.154 300s (00:05:00)

— end —

Customer Service Representative Needed

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

Customer Service Rep:

Requirements for the position include: Excellent communication skills over the phone. Candidate must be proficient in Outlook. Candidate should be comfortable working independently and have the ability to multi-tasks, must be able to work in a fast paced environment

Responsibilities include: Sending and receiving emails,and a payroll specailist the successful candidate will possess a polished professional demeanor. They will also be a team player with a positive attitude, be extremely punctual and be reliable.

EXPERIENCE: No experience necessary. Basic computer skills preferred.
Salary $ 12 hourly.

  • Compensation: $50
  • Telecommuting is ok.
  • This is a part-time job.
  • This is a contract job.
  • Principals only. Recruiters, please don’t contact this job poster.
  • Please, no phone calls about this job!
  • Please do not contact job poster about other services, products or commercial interests.