Your Online Pharmacy

From Spamwiki

1 Description
2 How to report this spam
3 Related sites
4 Spam Examples
5 Sponsoring Registrars
- 5.1 Name Servers
- 5.2 Spamvertized Sites

[edit] Description

Seemingly cut from a "cookie cutter", these pharmacy web sites are beginning to proliferate on the Internet. This page features a Leo Kuvayev fake pharmacy.

The Shipping Policy link states

Shipping Policy

Our Pharmacy delivers your orders to most countries over the world comparatively quickly
and not expensively. Usually it takes about 3 weeks for your order to be delivered.
All orders are processed and shipped from our certified, licensed, and secured
Canada-based Pharmacy to your door.

Although it purports to be Canada-based the web sites are predominantly hosted in Russia. This can be shown by a lookup on the IP addresses shown below in the Round robin.

When you proceed to checkout, you will observe that the page requesting your identity and credit card details uses http not https, which means that it is not secure.

The operation is 'not certified - that claim is false and fraudulent.

The operation is 'not licensed - that claim is false and fraudulent.

The operation is 'not secure - that claim is false and fraudulent.

Your Online Pharmacy

Your Online Fake links

Fake State of Ontario, "Premier" license

The trailer has a link to "View License", which displays the same fake Photoshopped "license" as Premier Pharmacy

Evidently the perpetrators of this fake pharmacy did not even bother to update the fake license and change the name from Premier Pharmacy to Your Online Pharmacy. This lack of attention to detail only serves to make the fraud more obvious.

Current sites use a Round robin aka fast-flux method - showing that the site is running on multiple machines simultaneously.

Round robin of spammed web sites
Server	Response	Time
ns0.waseruikionyunhentradesun.com [222.88.90.106]	64.18.74.31 77.41.80.174 78.49.172.8 82.81.151.71 86.49.28.28 88.154.51.21 89.178.233.125 89.209.81.41 89.55.43.95 91.122.1.67	673ms
ns0.ferunhandesunjintungandsa.com [222.88.90.106]	64.18.74.31 77.41.80.174 78.49.172.8 82.81.151.71 86.49.28.28 88.154.51.21 89.178.233.125 89.209.81.41 89.55.43.95 91.122.1.67	674ms

[edit] How to report this spam

The Complainterator is configured to request removal of these fraudulent sites. Add a link to this page as evidence.

[edit] Related sites

Pharmacy Express

The same name servers are used to resolve both Pharmacy Express and Your Online Pharmacy sites. For example

ns0.pasdrtionkintungandesunjin.com
ns0.deryandsuikiontunhandes.com

These were used simultaneously to resolve access to

Pharmacy Express
- xrzu.com
- mudrx.com
- pudrx.com

Your Online Pharmacy
- 2211122.com
- dodrx.com
- kodrx.com
- gudrx.com
- xodrx.com

Your Online Pharmacy also shares the same name servers as Health Nation

Example: May registrations that use ns0.deruikintungandesunlion.com

basedrukinqanssderun.com	Your Online Pharmacy
casedrinkandefunpio.com	Your Online Pharmacy
goguymobip.com	Health Nation
basedrunjahsin.com	Your Online Pharmacy
andesukionyungandes.com	Your Online Pharmacy
baserungdnefikonmasde.com	Your Online Pharmacy
bdefungandesjinoiki.com	Your Online Pharmacy

More relationships may be found by comparing sites resolved by the same name servers. For example, ns0.puntunhdefunterun.com resolves

rxpillsoffice.com	Premier Pharmacy
bizrxpills.com	Premier Pharmacy
rxpillsbuy.com	Premier Pharmacy
internetrxpills.com	Your Online Pharmacy
industryrxpills.com	Premier Pharmacy
rx444.com	Premier Pharmacy
rxpillsinteractive.com	Premier Pharmacy
aztxobzipyijon.com	Your Online Pharmacy
puntunhdefunterun.com	Your Online Pharmacy
portalrxshop.com	Premier Pharmacy
superportalrxshop.com	Premier Pharmacy
entryrxshop.com	Your Online Pharmacy
rxpillscyber.com	Premier Pharmacy

See: Category:Kuvayev family

[edit] Spam Examples

[edit] Sponsoring Registrars

[edit] Name Servers

Beijing Innovative
- ns0.deryandsuikiontunhandes.com ns0.pasdrtionkintungandesunjin.com
- ns0.waseruikionyunhentradesun.com ns0.ferunhandesunjintungandsa.com