Canadian Health&Care Mall

From Spamwiki

Jump to: navigation, search

Contents

[edit] Description

Canadian Health&Care Mall is another Bulker.biz property. (Also previously thought to be managed by Alex Polyakov The same group of scam pharmacy brands is referred to as "Eva Pharmacy" by Knujon and LegitScript and as "Yambo Financials" by Spamhaus.)

Image:canhedmed.jpg

It also appears under Canadian Pharmacy as a copyright statement

© 2001–2013 Canadian Health&Care Mall. All rights reserved.


The FAQ fraudulently states

Our online ordering system uses the latest in Secure Encryption Technology.
All personal and credit card information is submitted with the highest level
of security and precautions.

In fact, when you go to Checkout you are on a non-secure http page hosted by feeblemindedkow.com!

When last tested (Aprl, 2007) the links to "Verisign Secured", "FDA", "CPA Approved" and "American Quality" all failed, as well as the "View License". Canadian Health&Care Mall, in common with Polyakov's other fake pharmacy operations, has no licenses, approval, quality guarantees, security or site awards.

Under "Our Address" the site for this "Canadian" pharmacy lists addresses in Monroe, LA and New Delhi, India. Neither of these addresses are in Canada.


Each domain name resolves to an IP address of a hijacked host. Images loaded into web pages, as is common with Bulker.biz hijacked servers, are pulled down from a variety of other hijacked hosts. Each name server used to resolve the domain name to the IP address is also run on yet another hijacked host.

Awards
Awards

[edit] Fake License 1

Note the false information: It claims to be "Canadian", yet its alleged head office is in Monroe, Louisiana. The first sentence in the license is "State of Minnesota".

A look-up of the "company" in the Minnesota Board of Pharmacy database yields no results.

Note the obvious typos and grammatical errors which would not occur on a real license:

  • "...licensed by Minnesota Board..." (missing "the")
  • no space after the comma after "...chapter 151"
  • "...reported in the Application.immediately notify..." (no space after the period, and a lower-case "i" starting the following sentence.
Old fake license
Old fake license

The actual Minnesota Board of Pharmacy has stated clearly that the license on this site is a fake, and even have a page devoted to Canadian Health&Care Mall on their websites's FAQ. They provided a statement to our investigators, pointing out all of the discrepancies in it.

Comment from the Minnesota Board of Pharmacy:

We are very much aware of this issue. It has been an ongoing issue for
over a year. I have turned over information to our state's attorney
general office and have had conversations with FDA investigators. The
problem, as you are probably aware, is that it appears that whoever is
behind this is operating outside the United States.

The fake "license" shows clear indications that it is not valid. There
are misspellings, sentences run together, Board of Pharmacy is not
capitalized.

Anyone who did some comparison shopping would also find that the
websites charge several times more for drugs than legitimate websites.
For example, tramdol sells for $0.64 on Walgreens.com but $2.17 on
bestusdrugs.com.

I will consider putting a statement on our website. Not sure what good
it will do because I have a hunch that many people who actually try to
purchase drugs from these websites already know they aren't legitimate -
and don't care. As long as there are people willing to respond to spam
that they know is illegitimate, the spammers will keep operating.

Cody Wiberg, Pharm.D., R.Ph.
Executive Director
Minnesota Board of Pharmacy

[edit] Fake License 2

With the license clearly exposed as a fraud, these fraudsters have decided to try again.

The new fake originally had the same date as the old one, but is now refreshed.

Although it is supposedly Canadian, it has used American spelling, an error typical of foreigners not well versed in English.

The address given for Canadian Health&Care Mall is false, as shown below. No college of pharmacists would issue a license to a fake company at a false address.

The title of the issuer is incorrect. On the fake it is listed as College of Pharmacists of Ontario whereas the actual title is The Ontario College of Pharmacists (OCP). No official certificate issuer would misname its own organization.

New fake license
New fake license

[edit] Fake Doctors

About Us
About Us
The "About Us" section of Canadian Health&Care Mall sites includes a heartwarming description of its beginnings as a "store of so-called 'useful things,'" written in rather clumsy English. They brag about selling "medication of the best possible quality, licensed and working." And since we've already seen what their license is worth, we conclude the likelihood of getting any drugs that work is ... ?
Canadian Health&Care Mall started as a multistore based in 
Toronto and Ottawa in early 90s. Operating not just as a 
family pharmacy but also as a store of so- called "useful 
things" Health&Care chain store system grew from year to 
year and resulted in current online project. We tried to 
make use of our previous experience and to create a really 
competing online resource for absolutely any customer. 
Though the idea is standard you may be absolutely sure
that the filling is unique and has no analogues all over 
the Internet. We would like to admit that our online store 
is operating independently from the offline store system.


The site lists its medical staff as "Dr. Edward B. Armington" and "Dr. William Grant," both with impressive resumés. Apparently they and their team also have time on the side for modeling, as gettyimages.com is selling some of the same stock photos:

Image:aboutus_1.jpg Image:aboutus_team.jpg
www.gettyimages.com

image #: 200354730-001 [1]

www.gettyimages.com

image #: 200335242-004 [2]

These same fake credentials are found on the "Global Canadian Online" spam brand.

This is a common trait across most of the Yambo Financials sites. My Canadian Pharmacy also uses stock photos as portraits of their so-called "physicians" and "staff."

[edit] Fake Offices

The "contacts" page includes addresses for offices in Ontario, Louisiana, and New Delhi, as well as photos of the buildings they claim to occupy at those locations. They even offer to provide a "face to face audience" with one of their managers to anyone who wishes to visit them on site.


Image:CanadianHealth&CareContacts.jpg


But comparing the buildings in the photos to Google Maps satellite images of those addresses shows residential areas with no sign of large buildings like these:

Image:monroeh&c.jpg
"2110 Oak Aly, Monroe LA" "2110 Oak St., Monroe LA" (although, admittedly Oak St. does appear to terminate at 21st St., so perhaps this could be called "Oak Alley." But not "Oak Aly." Please.




In more recent sites, the same building has been teleported to Kingston, ON, Canada:



satellite view of 186 Brock St., Kingston, ON "186 Brock St. Kingston, ON" is part of the Hotel Dieu Hospital, which occupies the entire block.



The address in Waterloo, ON turns out to be a residential neighborhood:

Image:ontarioh&c.jpg
"121 Hawkswood, Kitchener Waterloo, Ontario, Canada" "121 Hawkswood Dr, Kitchener, ON N2K, Canada"


The third location, an address in New Delhi, is too inexact for Google maps to locate it; it is unclear if such an address actually exists.

[edit] Fake VeriSign certificate

Under Awards and Certificates the site displays an apparent link to VeriSign, so that the user can check that it is using encryption to protect credit card information. When you click on this emblem, you expect to be transferred to the VeriSign site to inspect the certificate. But here, the faked certificate is served from the fraud site itself.

The certificate states that information exchanged with any address beginning with https will be encrypted using SSL before transmission. However, when you load the checkout page that transfers your identity and credit card information it is using only http. There is no encryption, no consumer protection, and no VeriSign certificate - just another example of fraud.

Fake VeriSign certificate
Fake VeriSign certificate

[edit] Fake FDA certificate

Under Awards and Certificates the site displays an apparent link to an FDA Certificate of Registration. Once again, the "certificate" is served up from the fraud site itself. The certificate refers to the false address of Canadian Health&Care Mall at 186 Brock Street, Kingston, ON, Canada. Who would issue a certificate to a fake company at a false address?

The certificate states that it was issued by the FDA Registrar Corp in Hampton, Virginia. This organization exists at

Registrar Corp's Main Office
144 Research Drive
Hampton, Virginia 23666 USA
Phone: +1-757-224-0177
Fax: +1-757-224-0179 

The certificate lists it as

Registrar Corp's Main Office
144 Research Drive
Hampton, Virginia 23666 USA
Phone: +1-757-225-0367
Fax: +1-757-225-0369 

The changes they have made to the contact numbers are most likely to prevent anyone checking up on the certificate. For example, Fax: +1-757-224-0179 goes to a fax, but Fax: +1-757-225-0369 does not. +1-757-225-0367 exists, but it is a military location in Virgina, and they are tired of misdirected calls.

Fake FDA Registration
Fake FDA Registration

[edit] Fake Registration

Like other Yambo family sites, CH&CM uses identity theft to register its sites. Victims whose personal information has been used to register one of these sites should follow the steps outlined here.

In 2014 the method changed from using stolen identities, to using a fake name generator service, such as the one found at http://www.fakenamegenerator.com. These fake ID sites will generate real looking names, addresses, phone numbers and credit cards to simulate real identities. The aim is to make it more difficult for registrars to identify fake registrant data. Only the email address will be true, so that the registrant can handle information requests from the registrars.

[edit] Sample Spam

Hi there, this is your chance to Heal your healt!
We have various medicament that will assistance you
For the real men we have our special proposal Just CLICK here!
Come on start a new life with our medicament!!!


As our customer you have a chance to check out first to anybody our new page!
Only primal high-grade pharmaceutics at a price you can afford!!
20% guaranteed reduction is for you only!!!

Take notice what said our pleased clients:
From: Brian Zalewski
Subject: Simply Thank you!
"Thank you very much you rendered me festal rebates &
your special offers that preserve time and greens,
offering only medicinal agents of highest quality.
You're of my minions,
I shall tell about your drugstore without fail all my buddies!"

Note some more testimonials at our site!


[edit] Sample sites and registrars sponsoring them

[edit] Active-Domain LLC

becmivynmik.com
charitywithoutborders.com
cherishwithoutedges.com
eherbalviagra.com
herbalviagrasildenafil.com

[edit] ACTIVE REGISTRAR, INC.

dwigcyofjoj.com

[edit] ARCTIC NAMES, INC.

xeipfampu.net

[edit] BIZCN.COM, INC.

androidherbal.com
arabelacicily.com
asiajaneta.com
barbevannie.com
betterhealthpills.com
bevvybunny.com
bioportfoliotabhealthcare.com
bplispills.com
brigitjennlinn.com
canadawelvotto.com
caremedspatients.com
chemistmedicine.com
constantalita.com
desireenatalina.com
drugstorepharmetro.com
drugstoreviagradioshack.com
elnapegbecca.com
evanneconsolata.com
fatmedsdiet.com
garagesalerx.com
gertaurelia.com
gothamisttratab.com
herbalchemists.com
kailawynne.com
kalilaveronika.com
kamilaberthe.com
korduladaveen.com
levitranexus.com
levitrarxgroup.com
lynnettcarie.com
malindacatlaina.com
marijuanamedicaltab.com
marsiellamelicent.com
marylynnechelsae.com
maureenepatrice.com
medicalprescriptionpatients.com
medicarecbo.com
medicarepharmacygroup.com
medicinechemist.com
milenamalinde.com
mollielaurie.com
mymedicalprescription.com
myviagralevitra.com
neddamyrta.com
nitalarissa.com
onlinepharmacy4.org
perpills.com
pharmaceuticalpharm.com
pillsbioportfolio.com
rafaeliailla.com
raquelcherey.com
reinaantonietta.com
rosmundaglenn.com
rubyjanina.com
rxcls.com
rxjeanstra.com
salepharmacyprescription.com
salewelnessmartrend.com
shoppersgenerics.com
stellaholly.com
tabhealthreit.com
tabhumana.com
themedscanada.com
themedsdiet.com
theodoramira.com
thepharmsale.com
veterinarypatients.com
viagramedicinedownton.com
wanidsdelly.com
welbiznessgenerics.com
welnessdrugstoreprescription.com
wineslnessherbal.com


[edit] DOMAINPEOPLE, INC.

largepharmacy.net


[edit] HTTP.NET INTERNET GMBH

amilchiquita.com
androidgenericstablet.com
asqrtplc.com
bioportfoliohealthcarerx.com
biotechnologywelness.com
bobbyamie.com
brennancialismeds.com
brittamelonie.com
brynadonella.com
candidejami.com
charleenclaribel.com
cmsmedicarepills.com
contraceptivetrapills.com
dicetablet.com
dowviagraherbal.com
drughealthcareprescription.com
drugherbalpharmacy.com
drugmakergenerics.com
drugmedicalpills.com
drugstoreviagrawalgreens.com
drugstorewalgreenspharmacy.com
drusieshannon.com
drusysophronia.com
dynahallys.com
emeliaelke.com
farrasonnnie.com
fatdietmeds.com
florindacrysta.com
florisathena.com
genericspharmacypharmacists.com
gilemettebryn.com
hcgprescriptioncanada.com
hcgwelness.com
herbalpillsdrug.com
homemedicalrx.com
internalmedicineprescription.com
jacklynlaurette.com
jaclynmichel.com
jaymeevickie.com
jessikamarlo.com
kalinamarchelle.com
kristancassey.com
leighchloe.com
letitiavivyan.com
levisontrarx.com
lifewellnessdiet.com
lynneamandi.com
mairmilzie.com
marenleonora.com
medicalprescriptiongroup.com
medicareimbursement.com
medicaretrillion.com
mediterraneandietprescription.com
medpillbosch.com
medshealthhealthcare.com
medshealthopioid.com
medshunter.com
medsmedicalcenter.com
morganlucinda.com
nealaailsun.com
newrxmedicine.com
noemibessy.com
novationdrx.com
oliycorri.com
onlinehealthbox.com
onlinehealthsales.com
paracanada.com
patentgenericsrx.com
patientsmedicaremeds.com
pauliepamjobey.com
perpharmsale.com
persalerx.com
pharmacyviagradrugstore.com
pharmdietweight.com
pharmedicaremedicaid.com
pharmlevitax.com
pharmlevitrafitch.com
philippaalanna.com
physiciancarepharm.com
pillcialbenghazi.com
pillhealthinsurance.com
pillmedicinevitamin.com
prescriptioncarehome.com
prescriptiondietfat.com
prescriptionhealthcaredrug.com
prescriptionhealthpatients.com
prescriptionpharmacyhealthcare.com
reckittmedicinepills.com
rikkinelli.com
rodriguezmeds.com
roriemodestine.com
rxdrugeneric.com
rxshiraz.com
sabineshana.com
salesmartrend.com
saleviagrahighest.com
salewelhighest.com
sandiclarette.com
sportsmedicinepharmacy.com
streetinsidermeds.com
surfacetabletcanada.com
tabherbalgothamist.com
tabletcanadaandroid.com
tabletcialipad.com
tabmarijuana.com
tedijacquette.com
tediluella.com
tenetpill.com
thedrugstorepills.com
theherbalpill.com
thepharmacyherbal.com
thepillsale.com
therxmedicine.com
thesaleprescription.com
thetabletmedical.com
thewelnesslevitra.com
torturepharmacycialis.com
toveelita.com
viagradietplan.com
viagradrugstore.com
viagrafitness.com
viagramedicinedrugs.com
viagramediterranean.com
viagrasequester.com
viagrasmartrend.com
walgreenswelness.com
welnessgenericspatent.com

[edit] Key-Systems GmbH

agjujvwh.eu
drugstoreandroid.nl
garagesaleprescription.eu
genericscontab.nl
medsmedjama.eu
nexustabletcialis.eu
pillsussslis.eu
vitaminharmed.eu

[edit] NAMESILO, LLC

albertapharm.com
alvertamarga.com
alyselucie.com
apriletteashil.com
cheslienerissa.com
deeyngretchen.com
eolandeirenalou.com
freecialisrx.com
gennakayley.com
giorgiamaurine.com
gipsyelisha.com
gretelangele.com
heidaannadiane.com
jillanetrudi.com
junettepeggy.com
karylinlauralee.com
katharinavivien.com
maxygretna.com
medicarewelnessmedicaid.com
medtabletgroup.com
merlmarin.com
mitraphap.com
morgangussi.com
mygenerictagvar.com
mylangenerics.com
nanceelicha.com
oonanatala.com
patientspharmcare.com
pharmacydrugstoreviagra.com
pillcareprescription.com
pillsbiotechnology.com
prescriptiondrugstoreviagra.com
rachelernaline.com
roiscamel.com
rxhealthprescriptions.com
starlasharyl.com
tabbeneficiaries.com
tabdrugeneric.com
tabletcialbrennan.com
tabletmedicalsupply.com
tammakimberlyn.com
torturelistab.com
tressamorgana.com
viagradiethcg.com
welnesshcg.com
zorahshae.com

[edit] NAUNET-REG-RIPN

acureo.ru
afterpill.ru
ailiek.ru
appstabletsrx.ru
aprpharmacyrx.ru
aprpharmacytabletsrx.ru
aprtabletsrx.ru
assaystorerxpills.ru
bhun.ru
boug.ru
bprxmedspills.ru
caphealthpharmacy.ru
carehealthtabletspills.ru
carepharmacymeds.ru
coyd.ru
dnid.ru
dosedrugstorepills.ru
dosedrugstorerx.ru
dosepharmacyrx.ru
drugcutmedspharmacy.ru
drugshealthpills.ru
drugstoremeds.ru
drugstoremedsbronzer.ru
drugstoremedshade.ru
drugstorepharmacypillstablets.ru
drugstorepharmacytech.ru
drugstorepillsprescription.ru
drugstorepillstablets.ru
drugstorereliablerxpills.ru
drugstorerxbronzer.ru
drugstorerxshade.ru
drugstorerxtabs.ru
drugstoretabletspillsrx.ru
drugtoredrugstoretablets.ru
drugtorefitnesstablets.ru
drugtorehealthmeds.ru
drugtorehealthrx.ru
drugtorehealthtabletscare.ru
drugtoremedstablets.ru
drugtorepillspharmacy.ru
drugtorerxpillsassays.ru
edency.ru
fdadrugtorepillspharmacy.ru
fdatorepillspharmacy.ru
fitnesspharmacyrx.ru
gulfmedspills.ru
healthmeds.ru
healthrxpharmacyinsurance.ru
healthrxshop.ru
healthtablets.ru
healthtabletsmedicare.ru
hece.ru
hirony.ru
ileb.ru
iphs.ru
kerj.ru
kerung.ru
knieum.ru
larapy.ru
medicarehealthtabletsdrugstore.ru
medicinespharmacyrx.ru
medicinetorepillshealth.ru
medshealthrx.ru
medshealthtablets.ru
medspillsfitness.ru
medsrxwalgreens.ru
niry.ru
nureri.ru
nutritiondrugstoretablets.ru
ommadrugstorepharmacy.ru
oreacp.ru
paea.ru
patientsrxpharmacymeds.ru
pharmacydrugstorefitness.ru
pharmacyhealthcarerx.ru
pharmacyrxremedies.ru
pharmacyshowroom.ru
pharmacytabletsapr.ru
pharmacytabletsomma.ru
pharmacytabletsrxomma.ru
phay.ru
phidos.ru
pilldrugstorerx.ru
pillfitnesspharmacy.ru
pillhealth.ru
pillmedsunix.ru
pillrxdrugs.ru
pillrxmedicines.ru
pillsdrugshealth.ru
pillsdrugstoredrugstore.ru
pillshealthcaremeds.ru
pillshealthmeds.ru
pillsnutritiontablets.ru
pillspharmacyfitness.ru
pillspharmacystoretablets.ru
pillspharmacytechtablets.ru
pillspillshealth.ru
pillsrxpharmacydrugstore.ru
pillstabletsomma.ru
pillswellbeingtablets.ru
pilltabletsomma.ru
pilltabletsrxomma.ru
prescriptionpharmacymeds.ru
prescriptionpillsdrugstorerx.ru
psinit.ru
qualityrxpills.ru
remedycutrxpills.ru
remedyrippharmacyrx.ru
ridh.ru
roalow.ru
rxcapsule.ru
rxdrugstoremedicines.ru
rxdrugstoreremedies.ru
rxhealthcaremeds.ru
rxhealthmeds.ru
rxhealthpharmacy.ru
rxmedspharmacygroup.ru
rxmedspills.ru
rxpharmacyfitness.ru
rxpillstablets.ru
rxtabletsomma.ru
shoppharmacy.ru
sketay.ru
tabletdrugsfitness.ru
tabletdrugstorehealth.ru
tabletpharmacyrxgroup.ru
tabletrxdrugs.ru
tabletrxtreatments.ru
tabletsdrugstorenutrition.ru
tabletsfitness.ru
tabletshealthpillspharmacy.ru
tabletsmedscare.ru
tabletsmedshealth.ru
tabletspharmacynutrition.ru
tabletspharmacywellbeing.ru
tabletspillspharmacy.ru
tabletspillsworlddrugstore.ru
tabletsrx.ru
tabletsrxdrugstore.ru
tabletsrxteam.ru
tanilm.ru
terchs.ru
toremedstablets.ru
trippharmacytablets.ru
twey.ru
unixpillmedsdrugstore.ru
urow.ru
utow.ru
viales.ru
vowl.ru
walgreenspillsrx.ru
walgreensrxdrugstore.ru
walgreensrxpharmacymeds.ru
wanast.ru
webhealthpharmacy.ru
wour.ru
wreq.ru
zeae.ru

[edit] NETLYNX, INC.

aliamabelle.com
alidiaashly.com
andeevalina.com
appcialis.com
baruchelcanadapills.in
bisphenolmedical.in
bpcialispills.com
briefprescription.in
canadaprescriptionpharmacy.com
canadianpharmacistspharmacy.com
careteachers.com
carynalanna.com
chertessy.com
chromedical.com
cialismed.com
codimildrid.com
contabdrugstore.com
cyndiaeyde.com
doctorlevitra.in
dorismisty.com
dorreemarne.com
drugprescriptionmedicare.in
drugstoremedsopioid.com
eatingviagra.com
fatdietpharmacy.com
fatdietpill.com
firefoxtabherbal.in
ginniclaude.com
hadriafredelia.com
healthcarepillbioportfolio.in
healthcarewelbioportfolio.com
healthpharmacydrug.in
healthwelnesscare.in
herbalpillgroup.in
herbalpillsgroup.in
hghmedpharm.in
humanameds.in
iphonetabletmed.in
jemieamandie.com
jenncordie.com
judithshaun.com
kileytana.com
kindredpill.com
lauraleefaydra.com
levitraairline.com
levitrapralston.in
levitratabgothamist.com
lossdietmeds.in
lscfrepd.com
mashakelila.com
medicaidrxcare.com
medicalprescriptiongroup.in
medicareprescriptionmedicaid.com
medicationsupplements.com
medicineveterinaryacupuncture.com
medmedsped.in
medopioidama.in
medshcg.in
medsleviipo.com
meghannholli.com
meryledin.com
metricsale.com
metrodrugstorerx.com
microsoftabletdrugstore.com
mypillsgenerics.com
myprescriptionhealth.com
neillahayley.com
nicupharm.com
oilgenericspill.com
opioidjama.com
opioidmedscare.com
orelienixie.com
patientwelness.com
pedherbal.in
pharmaceuticalpharm.in
pharmaciesherbal.com
pharmacymedicalbilling.com
pharmlevifitch.com
piljeanstra.com
pillhealthcaretenet.in
pillslevitradrug.com
pippykrysta.com
prescriptionmedicares.in
prescriptionpharmacysale.in
pssarmedical.in
psswelness.in
quintilladeerdre.com
reimbursementmedicare.in
rkwyfzqv.in
rxcanadaottawa.in
rxsalehighest.com
stdoftyc.in
streetinsidermedicalwelness.in
sugarlevitrawelness.com
tabcanadagoose.in
tabcarenursing.com
tabcialisbenghazi.com
tabdietweight.com
tabletjeanstra.in
thehealthcarerx.com
themedpharmacy.in
thepillsdiet.in
theprescriptioncanada.in
theprescriptionmedical.com
theprescriptionmedicine.com
thewelnesscialis.com
tillieevonne.com
tommiechristi.com
trixodetta.com
ursaelaine.com
viagracialalec.in
viagradrugpharmacy.com
viagrandroid.in
viagraphysician.com
viagrasdiet.in
violetrenell.com
vitahalley.com
walgreenspills.in
wandielatrena.com
welnessasaletraining.in
welnessdietpills.in
welnesshealthcarebiotechnology.in
wxbereho.in
yfhsrnhz.in

[edit] NIC.AT

asaletabla.at
bplispills.at
canadabirth.at
canadaprescriptioninc.at
dietpillsmediterranean.at
dietwelhcg.at
fitchtraviagra.at
levitrachrome.at
medsmartphone.at
pharmcialisbenghazi.at
pharmhealthcarebioportfolio.at
pillsciaslis.at
pillslevitradrug.at
pillsmedicinedrugs.at
pmgvyloo.at
tabdietfat.at
tabmarijuana.at
tabmedicine.at
walgreensmeds.at
zodqagrb.at

[edit] NIC.UA

abigail.in.ua
abra.in.ua
abril.in.ua
adoracion.in.ua
adriana.in.ua
aina.in.ua
alana.in.ua
alba.in.ua
alejandra.in.ua
alexandra.in.ua
alexi.in.ua
alicia.in.ua
alison.in.ua
ally.in.ua
almudena.in.ua
amalia.in.ua
amelia.in.ua
denise.in.ua
elsa.in.ua
georgia.co.ua
grace.co.ua
gyliane.co.ua
helly.co.ua
ingrid.co.ua
janice.biz.ua
judith.biz.ua
july.biz.ua
ksenia.km.ua
ksenya.biz.ua
laia.km.ua
lauren.km.ua
liliya.biz.ua
maggie.biz.ua
marianela.km.ua
nicole.km.ua
polly.km.ua
pooh.km.ua
poohbear.km.ua
princess.km.ua
rachel.km.ua
rita.co.ua
roberta.co.ua
sabrina.co.ua
shannon.co.ua
solomia.biz.ua
vera.kr.ua
viola.kr.ua
vyka.kr.ua
wanda.kr.ua
wilma.kr.ua
zhenya.biz.ua

[edit] Nordnet

lyxleqwuvv.com


[edit] PSI-USA, Inc. dba Domain Robot

bigrxdiscountmedstore.com
albertacanadapill.com
androidtabletcialis.com
ansticemartelle.com
ashlachrystal.com
babbettelivtiena.com
benghazilisprescription.com
boschhghmed.com
bryanadelazia.com
canadapharmacywalgreens.com
clareyjobina.com
claribelnessi.com
cmslnessmedicare.com
contabmed.com
dardaolgamala.com
dentalcarepharmacy.com
desiriflo.com
dienasioux.com
dionadanetta.com
docherbalprescription.com
dondiggermaniuy.com
drugstoreabortion.com
drugstoremetro.com
drugstoreretail.com
familymedicineviagra.com
gabiekellia.com
giseleerena.com
gwenniefeliza.com
healthcareprescriptiondrugs.com
healthcarestreetinsider.com
healthcareviagrabiotech.com
healthcarewelnessbiotechnology.com
herbalrxgroup.com
herbalusc.com
hyacinthiazorine.com
inaogdnevoyrubes.com
ingavictoria.com
interrogationcialis.com
itakakzdkodes.com
itakakzdoeutro.com
janayebreena.com
jeniantonie.com
jerrileerobin.com
kakbikotereujil.com
kakoytamlistnezuji.com
kidneypharmacy.com
kotikplushzivorikl.com
kotilubyatdehuyt.com
krasivzivotikujes.com
kristinaconny.com
leolagabbie.com
lezutukadurilo.com
lianemarcy.com
ltiobeanepoteryal.com
maddibeecinda.com
maggiagnese.com
marileeanthiathia.com
maybellejannel.com
medicarepills.com
medicaretabletnexus.com
medicineveterinarypatients.com
medshealthcarebioportfolio.com
mentalhealthpill.com
mivseolenikuhyt.com
monahstephanie.com
moroktotakoyhuil.com
moronichegonekakilo.com
moylicniykambaka.com
mozetnelezutijo.com
myprescriptionherbal.com
nadoehatoformlyatsya.com
nalanirafaela.com
nemnogovulgarnenko.com
neuspelpozasikojuyyt.com
normalpremialnieot.com
nunastiledosikolader.com
nunastillikode.com
oapalikodesadoji.com
ogurcinadoifse.com
onaboalkoshodito.com
onasilnoizmenytesax.com
oniegopoubezdenikole.com
onobhotesadiko.com
opioidsalemeds.com
patentmedsgenerics.com
patientsprescriptionmedical.com
pedherbal.com
pharmacylevitrapharmacist.com
pharmacyprescriptionmedicare.com
pharmlevitrakorsinsky.com
pharmphysician.com
phjbazbkfk.com
physiciancareviagra.com
physiciansarmedicine.com
pierettesibylle.com
pillbaruchel.com
pillhumana.com
pillmedicalvitamin.com
poobesratuted.com
prescriptionmedicares.com
queridakrystal.com
rafaelitagerianna.com
rebyataobsikoliju.com
reginablinnie.com
rhonaeleen.com
roditelinasedkijoi.com
rosalindfawnia.com
rxcials.com
rxmedicarepatients.com
rxtreatmentspatients.net
scenariyvipolnenkoli.com
selestinasherri.com
shirjanie.com
shtobilonapadesikuj.com
shtobivoditvrayonesa.com
shtotiholodesagoti.com
skolzkootbedasiju.com
srazunepoymiktopreshel.com
steelitrawelness.com
streetinsidermedicalpharm.com
tabmedicares.com
takzekakvkoperiku.com
taliashayne.com
talloumalia.com
tamzsrafujyterop.com
terrylura.com
theherbaltab.com
thepharmacygenerics.com
thepharmcare.com
umenyaobrazojihuted.com
uzevprogramesokiju.com
valareehermine.com
viagracanadatoronto.com
viagracarehealth.com
viagralevinikita.com
viagraopioid.com
vprincipenemalosikju.com
vsesoglasnoreglamentuy.com
vsunochijutesaxcol.com
walgreenslevitra.com
wandingerwelness.com
washingtologistprescription.com
welnessfat.com
welnesshealthhealthcare.com
wendiefredra.com
yabonukokolijuy.com
yahochuvseuznakijuy.com
yakuplusedokij.com
zaetomoznslopotated.com


[edit] SIBERNAME INTERNET AND SOFTWARE TECHNOLOGIES INC.

carinapia.com

[edit] SILICONHOUSE.NET PVT LTD.

stephited.com

[edit] TODAYNIC.COM, INC.

approved-canadianpharmacy.net
canadianhealthcarepharmacy.com

[edit] TRUNKOZ

adenaralina.com
albertaflorencia.com
alfredacarilyn.com
aurliedanya.com
benoitefreddi.com
caralieroch.com
desireecarmita.com
doecharita.com
electrarena.com
elsygiralda.com
elyssaeulalie.com
etheldajemimah.com
giraldafanny.com
hettiagace.com
ivorymarjy.com
janettedelcina.com
jenachristina.com
juliarhodie.com
kamillahulrika.com
karelmadelene.com
lauramavra.com
mallissalinzy.com
marketaseline.com
maurestace.com
myherbaltablet.com
ottilieisahella.com
overdosepharm.com
ranksaleviagra.com
rxmedicationsmarijuana.net
sallyciel.com
tabmedicine.com
thelevitrapill.com
toniaofella.com
umekoandromache.com
verniceemlynne.com

[edit] History

History of the Spam - followed on from My Canadian Pharmacy

In the past they have used the same process of running its name servers, web site servers and image servers on hijacked hosts.

For example, examining the html source of a sample web page at any one time will have found

src="http://82.240.202.162:8080/e/ch/images/spacer.gif"
src="http://201.28.121.171:8080/e/ch/images/aw_verisign.gif"
src="http://217.6.21.195:8080/e/ch/images/aw_fda.gif"
src="http://148.223.209.19:8080/e/ch/images/aw_cpa.gif"
src="http://142.217.131.166:8080/e/ch/images/aw_aq.gif"

for a web site running on 222.161.21.110

The four name servers are meanwhile running on 200.62.226.85 and 80.191.123.206

In total there were 8 different IP addresses involved, all running a trojan proxy name server or web server without their owners' consent.

This method has now been abandoned after a comcerted campaign to report these hijacked hosts and to have them cleaned.

[edit] Look-alike sites

MycanadarxStore appeared in late October 2007. Its "about us" section is highly similar to that of Canadian Health&Care Mall, including the photos of "Dr. Edward B. Armington" and "Dr. William Grant." However, it differs from the other Yambo sites in that it does not share the image server IP address(es) they all use. It shares its nameservers with Prestige Replicas, not any Yambo sites. So this appears to be a case of plagiarism rather than affiliation.

[edit] How to Report this Spam

The Complainterator is configured to report this spam to the registrars. It performs a "whois" lookup on the domain names used by the name servers that resolve access to the web site. It discovers the registrars that are sponsoring the access to the web site. It prepares a complaint to the sponsoring registrars.

Removal instructions

web site domains
- the registrar needs to set the status of the domain to

  • clientHold
  • clientUpdateProhibited
  • clientDeleteProhibited
  • clientTransferProhibited

name server domains
- the registrar needs to set the status of each of the name server domains to

  • clientHold
  • clientUpdateProhibited
  • clientDeleteProhibited
  • clientTransferProhibited

In addition, to remove them as name servers, the subdomain address records (eg for ns1 and ns2) need to be changed to a non-routable address, such as 0.0.0.0 or a blackhole address within their own address space.

[edit] Sponsor Organization

Bulker.biz is the sponsor organization behind this type of site. They pay spammers to promote it, and they don't shut down illegal spammers.

[edit] Related Spams

[edit] Related spam operations

See: Category:Yambo family

[edit] Further Reading

LegitScript report, May 2010

Personal tools