Glavmed

[Volksjaeger]

Has anyone ever tried to get Glavmed(Spamit)'s site removed?

Site: glavmed.com
This is the ip the site is using: 74.86.34.144
reverse: softlayer.com

about 74.86.34.144
%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.74.86.32.0/19
network:Auth-Area:74.86.32.0/19
network:Network-Name:SOFTLAYER-74.86.32.0
network:IP-Network:74.86.34.144/29
network:IP-Network-Block:74.86.34.144-74.86.34.151
network:Organization;I:Private Residence
network:Street-Address:1950 Stemmons Freeway Suite 2043
network:City:Dallas
network:State:TX
network:Postal-Code:75207
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@srvz.ru
network:Admin-Contact;I:IPADM258-ARIN
network:Created:20070809
network:Updated:20071205
network:Updated-By:ipadmin@softlayer.com

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Nameservers:
ns1.glavmed.com (82.146.39.44)
[for 82.146.39.44:
* For spamming or other abuse issues
* please send your requests to
* abuse@ispserver.com]
ns2.glavmed.com (75.126.22.245)

[AlphaCentauri]

I guess I kind of like knowing what they're up to. It's useful to show people the site to emphasize the fact that
CPh has nothing to do with Canada (most of the Glavmed site is in Russian).

[Volksjaeger]

Yes I looked it is both in Russian and English.

[MyCanadian Spammerdeath]

I note that every IP on their little subnetwork resolves as softlayer.com.

Softlayer tries on most levels to present itself as a legitimate network service provider; they should be pressured to prove it.

http://softlayer.com/legal.html

[spamislame]

Has anyone ever tried to get Glavmed(Spamit)'s site removed?

Actually in July of last year I did complain to their hosting company and domain registrar. Got nowhere at all.

At the time it was easy to point them to the info on the spam wiki and castlecops. Now it's just the wiki (though we could point them here of course.) Well: and my blog.

SiL

[Volksjaeger]

Also is spamit.com the site being referred to in the Glavmed/spamit connection in the spamwiki?

I will assume so:
spamit.com:
Registrar: directnic.com

Registrant:
MEDIA CAPITAL LTD
Suite B, 29 Harley street
London, NA W1G 9QR
GB
+44.225330843

Administrative Contact:
Petrenko, Sergey info@spamit.com
Suite B, 29 Harley street
London, NA W1G 9QR
GB
+44.225330843

Nameservers:
using directnic's nameservers
ip of site:78.24.219.53
remarks: **************************************
* For spamming or other abuse issues *
* please send your requests to *
* abuse@ispserver.com *
**************************************


A lookup of the registrants address shows the address belongs to a company
"GVA Norway Limited"

[spamislame]

Also is spamit.com the site being referred to in the Glavmed/spamit connection in the spamwiki?

It is, although in all honesty the firm evidence to back that up is now out of the public domain. It was discusses indepth in bulkerforum.biz throughout the past two years, but then suddenly the key players promoting on behalf of spamit were completely deleted from that forum, including all of their postings.

Within spam-friendly forums and discussions, it was always the "Spamit" program. To the rest of the world, it has been (and remains) Glavmed.

SiL

[Volksjaeger]

Wait I made a mistake.
The business at that address is actually
http://www.londoncenter.com/contact_details.htm
It provides a 'virtual london office' and fowards calls anywhere in the world/VOIP.

[spamislame]

Innnnteresting.

I'm amending a new (and lengthy) blog posting about this operation, and I notice now that threads in their forum which used to feature comments about their knowledge of illicit operation and illegal spamming are now missing these incriminating posts.

Which caused me to investigate further changes. Canadian Pharmacy sites now no longer feature any of the following:

• FAQ page
• contact page
• BBB logo
• Pharma(cy) Checker Logo
• Verified by Visa logo

Clearly our research (which I now realize was only posted at CastleCops, so if anyone has any backups featuring these urls and citations I'd definitely appreciate it) has caused them to do a little housecleaning.

Similarly, someone has pruned the glavmed forums.

This thread used to have a sarcastic posting in it (following posting #3) about how illegal spamming produced "way, way more" than 0.01% conversion. That's gone now. There was also another semi-supportive posting about one particular affiliate's known spamming, again written sort of tongue-in-cheek. ("We all know how you promote" or words to that effect.) Gone.

Also this thread used to have several postings stating that they all knew that no valid pharma-checker id's had ever been in use on any Canadian Pharmacy site, and it also mentioned specific urls. Those are also gone.

I didn't even notice when any of that changed.

SiL

[MyCanadian Spammerdeath]

Canadian Pharmacy sites now no longer feature any of the following:

• FAQ page
• contact page
• BBB logo
• Pharma(cy) Checker Logo
• Verified by Visa logo

The ones at (58.253.66.49 | 60.191.254.251 | 124.207.117.60 | 124.207.41.201 | 124.236.241.91) seem to have dropped most of that but I think others still contain at least some of those elements. Actually, I see a contacts.php at pretty much all of them.

If I were a little clearer on what you're trying to tie together I might (?) be able to help. And that's no reflection on your documentation or communication skills, that's just me.

[spamislame]

If I were a little clearer on what you're trying to tie together I might (?) be able to help. And that's no reflection on your documentation or communication skills, that's just me.

What I'm getting at is that they're aware we knew about this content, and they removed it, an an attempt to undermine the research we posted, mostly at CastleCops. I don't need help on any of it per se. Just interesting that they took that action so recently.

Glavmed forum is one huge ghost town.

SiL

[Volksjaeger]

SiL: this is more funny than useful but thought you should see it. These are the replies someone (looking to join glavmed) got when inquiring about glavmed and their rep on the rxaffiliateforum. Looks like they hate Canadian pharmacy as much as we do.
http://rxaffiliateforum.com/showthread.php?t=5925

Old January 21st, 2009, 02:13 PM
lenny lenny is offline
Junior Member

Join Date: Nov 2008
Posts: 16
Exclamation
Glavmed are spamming criminal weasel b**st**rds. Do not go anywhere near them. You can recognise their sites everywhere by the penis enhancement pills they peddle. They often don't deliver orders too. You have been warned.

Old January 21st, 2009, 08:06 PM
amorphis amorphis is offline
Junior Member

Join Date: Dec 2008
Posts: 3
Default
Russian spammers, stay away..

mr_x mr_x is offline
Senior Member

Join Date: Jun 2006
Posts: 363
Default
80% of the spam i receive is thanks to glavmed.

some of their sites all look like this:
http://canadian-meds-shop.com
__________________
Rx Data: rxaffmrx@gmail.com
By FAR the BEST Affiliate Program out there!
30% instead of 25% Comission for all your orders only thru this link!
Last edited by mr_x; January 21st, 2009 at 11:10 PM.

[Volksjaeger]

I think this is what you SiL where looking for as far as evidence Glavmed=Canadian Pharmacy.
http://www.atlantea.org/reviews/glavmed ... -medicines

[AlphaCentauri]

I think this is what you SiL where looking for as far as evidence Glavmed=Canadian Pharmacy.
http://www.atlantea.org/reviews/glavmed ... -medicines

Great find -- what a sock puppet! I added a warning to the SiteAdvisor review for his page.

We don't need a smoking gun connecting Glavmed to CPh -- we've got a screen shot from their website -- but this also links it to Canadian Meds World.

[Volksjaeger]

http://www.ironport.com/company/pp_tech ... -2008.html
This is an older link about spamit but everyone should read it (sorry if it is already in the spamwiki or some other forum).