Canadian Healthcare

From Spamwiki

Jump to: navigation, search

Contents

[edit] Introduction

Canadian Healthcare is another SanCash-sponsored illegal online pharmacy which sells fake or counterfeit versions of pharmaceutical products, specializing (of course) in "men's health" products such as fake Viagra and fake Cialis. This property is spammed nearly as often as VPXL Penis Enlargement and others.

Canadian Healthcare also exploits redirections to try to escape detection.

This property was the first in a string of illegal online pharmacies to start being spammed in mid-2008. This was the first, followed soon after by Worldwide Wholesale Pharmacy, Direct Pharmacy, and later Canadian Drugstore. All feature the same ordering process, similar product id's, and the same fake "Infinity Secure" order processing page as is featured on literally every single SanCash-spammed website. (Notably VPXL, MaxGain+, and a variety of replica watch sites including King Replica, Prestige Replicas and Diamond Replica.

It shares the same name servers, as in ns1.freigai.com and ns2.freigae.com

daysunes.com   Canadian Drugstore
gendareys.com  Canadian Drugstore
illkees.com    Canadian Drugstore
bienngiea.com	Canadian Healthcare	
pisniiea.com	Canadian Healthcare	
bouttlea.com	Canadian Healthcare	
higerend.com	Canadian Healthcare	
stevowell.com	Canadian Healthcare	
klimaned.com	Canadian Healthcare	
plimakke.com	Canadian Healthcare

polijjea.com	VPXL - Penis Enlargement
bittlea.com	VPXL - Penis Enlargement
bueutea.com	VPXL - Penis Enlargement
klixerto.com	VPXL - Penis Enlargement	
filstecke.com	VPXL - Penis Enlargement	
pruweel.com	VPXL - Penis Enlargement	
widdalls.com	VPXL - Penis Enlargement	
poweajeit.com	VPXL - Penis Enlargement	
klinbenh.com	VPXL - Penis Enlargement	
figgerti.com	VPXL - Penis Enlargement	
kiullene.com	VPXL - Penis Enlargement	
questerni.com	VPXL - Penis Enlargement	
junebago.com	VPXL - Penis Enlargement	
buenaglop.com	VPXL - Penis Enlargement	
cesentoo.com	VPXL - Penis Enlargement	
poermaite.com	VPXL - Penis Enlargement	
pagkelce.com	VPXL - Penis Enlargement	

nuehayoea.com	MaxGain+  
poiegnea.com	MaxGain+  

huantuea.com	King Replicas


These are usually registered by the same familiar spam registrant with Xin Net (which is owned by Chinese / Hong Kong company Sino-I.com)

 Li Ming
 NO.38,YongFeng street,Tianchange City,Anhui Province
 Tianchange Anhui 239355
 CN
 tel:   2400568
 fax:   2400568
 yayun22@163.com

All of the above sites were observed being hosted on the same IP address, e.g. or 220.113.33.40 which appears to be under the jurisdiction of the People's Liberation Army of China, according to the WHO IS lookup

netname:      MLPLA
country:      CN
descr:        Medical library of People\'s liberation Army
admin-c:      YL1108-AP
tech-c:       YL1108-AP
status:       ASSIGNED NON-PORTABLE
changed:      lyz@gwbn.net.cn 20080316

It is unlikely that the medical library of China's army is conducting research into or product marketing for penile growth pills. It is also unlikely that it is associated with a Canadian Healthcare initiative. This IP is known as a "bullet-proof" address, because no amount of requests or complaints are heard or acted upon. It brings disgrace upon the People's Liberation Army of China. It should be black-holed immediately.


earliest Canadian Healthcare
earliest Canadian Healthcare
later Canadian Healthcare
later Canadian Healthcare
Canadian Healthcare April 2009
Canadian Healthcare April 2009
Canadian Healthcare January 2010
Canadian Healthcare January 2010

[edit] Related Brands

Canadian Healthcare is a rebranding of Target Pharmacy. All previous Target Pharmacy sites became Canadian Healthcare sites in late March 2008.

As mentioned above, this site was the first in a series of illegal online pharmacies sponsored by SanCash, followed by Worldwide Wholesale Pharmacy, Direct Pharmacy, and later Canadian Drugstore.

[edit] Sample spams

Sample Canadian Healthcare Spam Message, August 2008
Sample Canadian Healthcare Spam Message, August 2008
Another sample Canadian Healthcare Spam Message, Late-September 2008
Another sample Canadian Healthcare Spam Message, Late-September 2008



Subject: Get all your hypertension medicines here

I love popping pills and I treat them like sweets, welcome to our candy store.
http://www.lmaytos.com/
Subject: We'll serve you right
 
Let the professionals at CanadianPharm serve you.
See our specials-View our bestsellers-We have a lot to offer you.
http://radotitunyn76.blogspot.com  (redirects to http://gehsabettes.com)

acid edgerton persecution barfly calorie animadversion custom  !. immaculate corrosion chin attach bemuse  a some.
Subject: Tlmely narcotlc Offer

No prescriptions required. No personal questions..just the meds you want

http:''//''mrltl.nieurean.com
Subject: Your perscrlptlon Advlsers

kleuba

Pharmacy online. Ship from Canada...save big
http:''//''www.poerale.com
Subject: Works with sexual stimulation

Free Viagra Pills!
Get 12 free Viagra pills with any order more than 300$!
At Canadian healthcare shop! (links to http://alquesti.com/)
Subject: Canadian heathcare - your pharmacy shop!

Canadian Healthcare is your convenient, safe and private online source 
for approved pharmacy prescriptions. We sell exact generic equivalents of US FDA 
approved prescription drugs through our fully-licensed pharmacies.
Visit Canadian healthcare!

[edit] Sponsor Organization

SanCash (in early 2008 known as "Etranzmu", the underground sponsor affiliate program related to GenBucks) is the sponsor organization behind this type of site. They pay spammers to promote it, and they don't shut down illegal spammers.

Personal tools