WhoIs review-pharmacy.net

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Address lookup
canonical name review-pharmacy.net

aliases
addresses 64.191.85.106
Domain Whois record

Queried whois.internic.net with “dom review-pharmacy.net”…

Domain Name: REVIEW-PHARMACY.NET
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.REVIEW-PHARMACY.NET
Name Server: NS2.REVIEW-PHARMACY.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-apr-2013
Creation Date: 02-apr-2013
Expiration Date: 02-apr-2014

>>> Last update of whois database: Sat, 05 Oct 2013 16:31:57 UTC <<<

Queried whois.bizcn.com with "review-pharmacy.net"…

Domain name: review-pharmacy.net

Registrant Contact:
none
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Administrative Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Technical Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Billing Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

DNS:
ns1.review-pharmacy.net
ns2.review-pharmacy.net

Created: 2013-04-02
Expires: 2014-04-02

Network Whois record

Queried rwhois.hostnoc.net with "64.191.85.106"…

%rwhois V-1.5:003fff:00 rwhois.hostnoc.net (by Network Solutions, Inc. V-1.5.9.5)
%error 230 No Objects Found

Queried whois.arin.net with "n 64.191.85.106"…

NetRange: 64.191.0.0 – 64.191.127.255
CIDR: 64.191.0.0/17
OriginAS:
NetName: HOSTNOC-3BLK
NetHandle: NET-64-191-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-05-31
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-191-0-0-1

OrgName: Network Operations Center Inc.
OrgId: NOC
Address: PO Box 591
City: Scranton
StateProv: PA
PostalCode: 18501-0591
Country: US
RegDate: 2001-04-04
Updated: 2011-09-24
Comment: Abuse Dept: abuse@hostnoc.net
Ref: http://whois.arin.net/rest/org/NOC

ReferralServer: rwhois://rwhois.hostnoc.net:4321

OrgTechHandle: SMA4-ARIN
OrgTechName: Arcus, S. Matthew
OrgTechPhone: +1-570-343-2200
OrgTechEmail: nic@hostnoc.net
OrgTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

OrgAbuseHandle: SMA4-ARIN
OrgAbuseName: Arcus, S. Matthew
OrgAbusePhone: +1-570-343-2200
OrgAbuseEmail: nic@hostnoc.net
OrgAbuseRef: http://whois.arin.net/rest/poc/SMA4-ARIN

RTechHandle: SMA4-ARIN
RTechName: Arcus, S. Matthew
RTechPhone: +1-570-343-2200
RTechEmail: nic@hostnoc.net
RTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

DNS records
name class type data time to live
review-pharmacy.net IN A 64.191.85.106 900s (00:15:00)
review-pharmacy.net IN SOA
server: ns1.review-pharmacy.net
email: admin@mail.review-pharmacy.net
serial: 2011081709
refresh: 86400
retry: 7200
expire: 2592000
minimum ttl: 345600
900s (00:15:00)
review-pharmacy.net IN NS ns2.review-pharmacy.net 900s (00:15:00)
review-pharmacy.net IN NS ns1.review-pharmacy.net 900s (00:15:00)
106.85.191.64.in-addr.arpa IN PTR 64-191-85-106.static.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN SOA
server: dns.burst.net
email: root@dns.burst.net
serial: 2013092027
refresh: 28800
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
85.191.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-10-15 12:03:24Z
signature inception: 2013-10-05 12:03:24Z
key tag: 21392
signer's name: 64.in-addr.arpa
signature:
(1024 bits)

4027B30E8592EAF86697D3BE266C0B20
D05986ABA2CEC0E4F019FF6080A65F68
968DDFFD9AF8A3F86311B2AC054B0F96
4FB2236F006BE79EF2D4D6F8B03A971A
17B1218D7017D4F0E66D9DD2CC7BDD00
C2F4C58A0EF6D247970F7230165BD5E2
783D99CCBF12F750DEC7053B13FC220B
D7B24E3638F90FBB296B4FED9CEDF099

10800s (03:00:00)
85.191.64.in-addr.arpa IN NSEC
next domain name: 86.191.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
85.191.64.in-addr.arpa IN NS dns1.burst.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS ns2.hostnoc.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS dns.burst.net 86399s (23:59:59)
85.191.64.in-addr.arpa IN NS ns1.hostnoc.net 86399s (23:59:59)

— end —

Whois original-pharmacy.com/

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

http://original-pharmacy.com/
http://healthy-happy.net/unapp/index-69.htm

Address lookup
canonical name original-pharmacy.com

aliases
addresses 64.191.85.108
Domain Whois record

Queried whois.internic.net with “dom original-pharmacy.com

Domain Name: ORIGINAL-PHARMACY.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.ORIGINAL-PHARMACY.COM
Name Server: NS2.ORIGINAL-PHARMACY.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 03-may-2013
Creation Date: 03-may-2013
Expiration Date: 03-may-2014

Last update of whois database: Sat, 05 Oct 2013 16:18:05 UTC
Queried whois.bizcn.com with “original-pharmacy.com

Domain name: original-pharmacy.com
Registrant Contact:
none
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Administrative Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Technical Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

Billing Contact:
Mihail Medved mmmike2001@gmail.com
8125594917 fax: 8125594917
savushkina st. 148-1-19
St.Petersburg Leningradskaya oblast 194295
ru

DNS:
ns1.original-pharmacy.com
ns2.original-pharmacy.com

Created: 2013-05-03
Expires: 2014-05-03

Network Whois record

Queried rwhois.hostnoc.net with “64.191.85.108”…

%rwhois V-1.5:003fff:00 rwhois.hostnoc.net (by Network Solutions, Inc. V-1.5.9.5)
%error 230 No Objects Found

Queried whois.arin.net with “n 64.191.85.108″…

NetRange: 64.191.0.0 – 64.191.127.255
CIDR: 64.191.0.0/17
OriginAS:
NetName: HOSTNOC-3BLK
NetHandle: NET-64-191-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-05-31
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-191-0-0-1

OrgName: Network Operations Center Inc.
OrgId: NOC
Address: PO Box 591
City: Scranton
StateProv: PA
PostalCode: 18501-0591
Country: US
RegDate: 2001-04-04
Updated: 2011-09-24
Comment: Abuse Dept: abuse@hostnoc.net
Ref: http://whois.arin.net/rest/org/NOC

ReferralServer: rwhois://rwhois.hostnoc.net:4321

OrgTechHandle: SMA4-ARIN
OrgTechName: Arcus, S. Matthew
OrgTechPhone: +1-570-343-2200
OrgTechEmail: nic@hostnoc.net
OrgTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

OrgAbuseHandle: SMA4-ARIN
OrgAbuseName: Arcus, S. Matthew
OrgAbusePhone: +1-570-343-2200
OrgAbuseEmail: nic@hostnoc.net
OrgAbuseRef: http://whois.arin.net/rest/poc/SMA4-ARIN

RTechHandle: SMA4-ARIN
RTechName: Arcus, S. Matthew
RTechPhone: +1-570-343-2200
RTechEmail: nic@hostnoc.net
RTechRef: http://whois.arin.net/rest/poc/SMA4-ARIN

DNS records
name class type data time to live
original-pharmacy.com IN A 64.191.85.108 900s (00:15:00)
original-pharmacy.com IN SOA
server: ns1.original-pharmacy.com
email: admin@mail.original-pharmacy.com
serial: 2011081710
refresh: 86400
retry: 7200
expire: 2592000
minimum ttl: 345600
900s (00:15:00)
original-pharmacy.com IN NS ns2.original-pharmacy.com 900s (00:15:00)
original-pharmacy.com IN NS ns1.original-pharmacy.com 900s (00:15:00)
108.85.191.64.in-addr.arpa IN PTR 64-191-85-108.static.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN SOA
server: dns.burst.net
email: root@dns.burst.net
serial: 2013092027
refresh: 28800
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
85.191.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-10-15 12:03:24Z
signature inception: 2013-10-05 12:03:24Z
key tag: 21392
signer’s name: 64.in-addr.arpa
signature:
(1024 bits)

4027B30E8592EAF86697D3BE266C0B20
D05986ABA2CEC0E4F019FF6080A65F68
968DDFFD9AF8A3F86311B2AC054B0F96
4FB2236F006BE79EF2D4D6F8B03A971A
17B1218D7017D4F0E66D9DD2CC7BDD00
C2F4C58A0EF6D247970F7230165BD5E2
783D99CCBF12F750DEC7053B13FC220B
D7B24E3638F90FBB296B4FED9CEDF099

10800s (03:00:00)
85.191.64.in-addr.arpa IN NSEC
next domain name: 86.191.64.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
85.191.64.in-addr.arpa IN NS ns1.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS dns.burst.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS ns2.hostnoc.net 86400s (1.00:00:00)
85.191.64.in-addr.arpa IN NS dns1.burst.net 86400s (1.00:00:00)

— end —

WhoIs www.scam-fraud-report.com

Address lookup
canonical name: scam-fraud-report.com

aliases : http://www.scam-fraud-report.com
addresses: 203.124.104.12
Domain Whois record

Queried whois.internic.net with “dom scam-fraud-report.com

scam-fraud-report

Domain Name: SCAM-FRAUD-REPORT.COM
Domain Name: SCAM-FRAUD-REPORT.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM

Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited

Updated Date: 21-nov-2012
Creation Date: 21-nov-2012
Expiration Date: 21-nov-2013

Last update of whois database: Sat, 05 Oct 2013 15:54:41 UTC
Queried whois.godaddy.com with “scam-fraud-report.com

Domain Name: SCAM-FRAUD-REPORT.COM
Registrar URL: http://www.godaddy.com

Updated Date: 2012-11-21 08:19:46
Creation Date: 2012-11-21 08:19:46

Registrar Expiration Date: 2013-11-21 08:19:46
Registrar: GoDaddy.com, LLC
Registrant Name: dorris battle
Registrant Street: 17 Laura Drive
Registrant Street: averill park
Registrant City: New York City
Registrant State/Province: New York
Registrant Postal Code: 12018
Registrant Country: United States

Admin Name: dorris battle
Admin Street: 17 Laura Drive
Admin Street: averill park
Admin City: New York City
Admin State/Province: New York
Admin Postal Code: 12018
Admin Country: United States
Admin Phone: (518) 676-6428
Admin Email: scam-fraud-report@live.com

Tech Name: dorris battle
Tech Street: 17 Laura Drive
Tech Street: averill park
Tech City: New York City
Tech State/Province: New York
Tech Postal Code: 12018
Tech Country: United States
Tech Phone: (518) 676-6428
Tech Email: scam-fraud-report@live.com

Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM

Network Whois record

Queried whois.apnic.net with “203.124.104.12”…

% Information related to ‘203.124.96.0 – 203.124.127.255’

inetnum: 203.124.96.0 – 203.124.127.255
netname: GODADDY-NET-AP
descr: Godaddy.com
descr: 8 Cross Street
descr: #11-00 PWC Building
country: SG
admin-c: GNA32-AP
tech-c: GNA32-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-GODADDY-NET-SG
mnt-routes: MAINT-GODADDY-NET-SG
mnt-irt: IRT-GODADDY-NET-SG
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20100419
changed: hm-changed@apnic.net 20120123
source: APNIC

irt: IRT-GODADDY-NET-SG
address: 8 Cross Street, #11-00 PWC Building
e-mail: abuse@godaddy.com
abuse-mailbox: abuse@godaddy.com
admin-c: GNA32-AP
tech-c: GNA32-AP
auth: # Filtered
mnt-by: MAINT-GODADDY-NET-SG
changed: abuse@godaddy.com 20101221
source: APNIC

role: GODADDYCOM – network administrator
address: 8 Cross Street, #11-00 PWC Building
country: SG
phone: +011-1-480-505-8877
e-mail: gschwimer@godaddy.com
admin-c: GNA32-AP
tech-c: GNA32-AP
nic-hdl: GNA32-AP
mnt-by: MAINT-GODADDY-NET-SG
changed: hm-changed@apnic.net 20100226
source: APNIC

% Information related to ‘203.124.96.0/19AS7615’

route: 203.124.96.0/19
descr: Fortana Networks Australia Pty Ltd
country: AU
origin: AS7615
mnt-by: MAINT-FORTANA-AU
changed: network@fortana.net.au 20100715
source: APNIC

% This query was served by the APNIC Whois Service version 1.68.5 (WHOIS2)

DNS records
name class type data time to live
http://www.scam-fraud-report.com IN CNAME scam-fraud-report.com 3600s (01:00:00)
scam-fraud-report.com IN A 203.124.104.12 1800s (00:30:00)
scam-fraud-report.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
scam-fraud-report.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
scam-fraud-report.com IN NS ns17.domaincontrol.com 3600s (01:00:00)
scam-fraud-report.com IN NS ns18.domaincontrol.com 3600s (01:00:00)
scam-fraud-report.com IN SOA
server: ns17.domaincontrol.com
email: dns@jomax.net
serial: 2012120500
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
12.104.124.203.in-addr.arpa IN PTR ip-203-124-104-12.ip.secureserver.net 3600s (01:00:00)
104.124.203.in-addr.arpa IN SOA
server: cns1.secureserver.net
email: dns@jomax.net
serial: 2012060700
refresh: 300
retry: 600
expire: 86400
minimum ttl: 3600
3600s (01:00:00)
104.124.203.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 172800 (2.00:00:00)
signature expiration: 2013-11-03 18:27:51Z
signature inception: 2013-10-04 17:27:51Z
key tag: 27217
signer’s name: 203.in-addr.arpa
signature:
(1024 bits)

172800s (2.00:00:00)
104.124.203.in-addr.arpa IN NSEC
next domain name: 105.124.203.in-addr.arpa
record types: NS RRSIG NSEC
172800s (2.00:00:00)
104.124.203.in-addr.arpa IN NS cns2.secureserver.net 3600s (01:00:00)
104.124.203.in-addr.arpa IN NS cns1.secureserver.net 3600s (01:00:00)

— end —