Indian pharmacy

[edit] False Pretenses

Like other Bulker.biz/EvaPharmacy sites, just about every claim made on CNP sites is a lie.

[edit] Fake Staff

As with other Bulker/Eva sites, they have created bios of imaginary people to run their imaginary pharmacy.

So far we've identified "Eric Mitchell," "Larry Howard," "Heather Sanders, "Jerry Patterson," and "M.L. Katiyar" as models in photos from Getty Images.

[edit] Fake Locations

The top photo, of their alleged U.S. location, was taken from a stock photo on Fotolia.com. 11603 Wilshire Blvd is part of the World Savings Center, a high rise complex with multiple tenants that doesn't happen to look anything like the building in the photo on the Indian Pharmacy website. (Not only don't these scammers have any location in the U.S.; they clearly don't even have a visa to come take their own photo of someone else's location.) This is taken from Google street view:

The bottom one is more difficult. It appears that addresses in the first block of Dinshaw Vacha (or Dinshaw Vachha) are not generally listed as street numbers; tenants just give the name of the building and their suite number within the building. So it's difficult to say which building is number 30 from photos available to us. But none of the buildings seen on satellite look like the low-rise modern office building shown in the Indian Pharmacy website photo:

[edit] Fake Guarantee

Dear customer, we stand behind our products and services! This is a risk free offer!

Within the 14 days of receiving your order, you may return any item shipped by  
Indian Pharmacy for any of the following reasons:

   * Item was received damaged or defective;
   * Incorrect item was shipped.

Returns must be authorized by Indian Pharmacy. The returned item must be in new 
condition with original packaging and accessories.

Upon approval, you’ll be provided with a return materials authorization (RMA) and 
once we’ve received and accepted your return, we’ll exchange your item, issue store 
credit or a refund.

Progress and history of your return processing is logged for your convenience. 
We’ll also provide shipping reimbursement if your return is the result of our  
error. We’re sorry, but we do not accept returns of opened items or items returned 
more than 14 days after delivery.

So, the only thing you need to do is to send all unopened packages back to us, and 
you will get back your money for those unopened packages, excluding delivery fees.

Here at Indian Pharmacy, we offer you a 100% moneyback guarantee on all our 
products!

Sounds great. But which of the above fake addresses should you ship your returned product to?

These sites are operating completely illegally. They aren't going to give you a real address, even if you contact them after delivery to get your return "authorized." (The FBI could easily place a bait order and call to get a return authorized, then be waiting by the post office box for them to pick up their mail.) And anyway, you won't be able to contact them after your order arrives, if anything arrives at all, because the website will most likely be shut down by then.

[edit] Fake License

The pharmacy has no real location and no real pharmacists. But like other Bulker.biz/EvaPharmacy sites, they have forged an imaginary license for their pharmacy. No need to ask if it's real, since it displays the address we've already established is fake. And since it's illegal for individuals to import drugs by mail into the U.S., there's no way it will be authorized by the U.S. Food and Drug Association (the only FDA that counts when you're bringing drugs in to the U.S.).

[edit] How to Report this Spam

The Complainterator is configured to report this spam to the registrars. It performs a "whois" lookup on the domain names used by the name servers that resolve access to the web site. It discovers the registrars that are sponsoring the access to the web site. It prepares a complaint to the sponsoring registrars.

Removal instructions

web site domains
- the registrar needs to set the status of the domain to

• clientHold
• clientUpdateProhibited
• clientDeleteProhibited
• clientTransferProhibited

name server domains
- the registrar needs to set the status of each of the name server domains to

• clientHold
• clientUpdateProhibited
• clientDeleteProhibited
• clientTransferProhibited

In addition, to remove them as name servers, the subdomain address records (eg for ns1 and ns2) need to be changed to a non-routable address, such as 0.0.0.0 or a blackhole address within their own address space.

[edit] Sponsor Organization

Bulker.biz is the criminal sponsor organization behind this type of site.

[edit] Related spam operations

See: Category:Yambo family

[edit] Further Reading

LegitScript report, May 2010