EvaPharmacy - Enough is enough

This is transferred to the new board at http://fraudreports.prophpbb.com
Spammers should not profit, so post information here that hits their pockets.

EvaPharmacy - Enough is enough

Postby spamislame » Sun Nov 25, 2012 2:54 pm

This topic is transferred to the new board at http://fraudreports.prophpbb.com


b]Explanation - this series of posts documents a concerted campaign to remove from the Internet a family of illegal pharmacy operations.

Starting from December 23 2012, requests were sent to registrars to terminate their service contracts with criminals who have unlawful domain names.

Some registrars complied 100%, others failed to respond or act at all.

A summary of registrar compliance is listed at EvaPharmacy Campaign

In the listings, any items shown with an * and colored red represent domains that have been either taken down by the registrar., or expired after one year

Now read on.[/b]
(Added Feb 20, 2013)



I want to discuss methods of going after this group.

We have tons of evidence about how they operate, which has gone on virtually unchanged since this forum began, back when they were called bulker.biz and bulkerbiz.com.

They hack into every server they can get their hands on and render them irreparable by removing several key unix commands (restart, passwd, chmod, shutdown, and several others.)

They use these servers essentially "for free" going on for months and months and months.

Nobody does anything.

I have had only mild success in reporting and resetting several servers.

I think if we organize, we can make this the next front-burner target.

Given that they are one of only a small handful of major pharmacy spam operations left, who's with me?

And who's got some interesting ideas for targeting them more specifically?

Thanks.

SiL :silthumb:

EDIT: Best advice for registrars from LegitScript. These are 3 of the most common excuses used by registrars
https://www.legitscript.com/blog/2017/0 ... harmacies/
* Excuse #1: “Sorry, but you need a court order for that.”
* Excuse #2: “We only manage the domain name. The website content is not hosted on our servers.”
* Excuse #3: “The registrant provided us a valid pharmacy license.”
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Oct 21, 2014 4:24 pm

Update March 28, 2017

Most common Eva Pharmacy domains alive today

700 Canadian Health&Care Mall
319 RxExpressOnline
201 My Canadian Pharmacy
192 CanadianPharmacy
134 Canadian Neighbor Pharmacy
90 RxMedications
28 Toronto Drugstore
20 Canadian Family Pharmacy
14 US Drugs
6 Canadian Pharmacy
5 International Legal RX
5 Herbal Store
3 Men's Health
3 Healthy Life
1 Canadian Safe Pharmacy

Most abused registrars, with live domains March 2017

1213 R01-RU
105 R01-REG-FID
101 R01-SU
80 PDR LTD.
76 Key-Systems GmbH
57 REGRU-SU
31 BIZCN.COM, INC.
20 TUCOWS DOMAINS INC.
12 ARDIS-SU
9 REGRU-REG-FID
5 Gransy s.r.o.
2 REG.RU
2 GKG.NET, INC.
2 ARDIS-REG-FID
2 ADVANCED INTERNET TECHNOLOGIES, INC.
1 REGISTRAR OF DOMAIN NAMES REG.RU LLC
1 JSC REGISTRAR R01
1 Domainerschoice
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Thu Nov 20, 2014 9:10 pm

      Common Checkout across the Eva Pharmacy family

----
March 28 2017
card-billing.net is registered with instra.com (abuse@instra.com)
Instra Corporation Pty Ltd is a privately owned company based in Melbourne, Australia. card-billing.net is used over an unencrypted link to solicit customer name, address and CREDIT CARD information for the Eva Pharmacy fraud.
----

[EDIT Dec 16 - domain SAFECHECKOUTRX.COM taken down by Registrar: CJSC REGISTRAR R01]

Looking at the different families of fraud brands under the Eva Pharmacy group, and loading up a shopping cart, then proceeding to checkout, you find a common factor. They all transfer to the same site with variations on the prefix. Here are some examples


https://checkoutwbaxvbsy.safecheckoutrx.com/cart/checkout/
https://checkoutxzwtucrc.safecheckoutrx.com/cart/checkout/
https://checkoututdeyfzt.checkoutservicerx.com/cart/checkout/
https://checkoutwdebtuas.safecheckoutrx.com/cart/checkout/


Closing down the domain safecheckoutrx.com would be a good move.

Domain Name: SAFECHECKOUTRX.COM
Registrar: CJSC REGISTRAR R01
Registrant Name: Privacy protection service - whoisproxy.ru.

So sure enough, R01.RU who protects over 3,350 Eva pharmacy fraud domains, also protects the checkout operation. Russia looks after its own.

Brands going through this checkout include
    WikiPharmacy
    Men's Health
    US Drugs
    Toronto Drugstore
    Canadian Family Pharmacy
    Canadian Neighbor Pharmacy
    My Canadian Pharmacy
    Canadian Health&Care Mall

The site has an SSL certificate issued by COMODO RSA and the connection uses 128-bit TLS 1.2 encryption issued Nov 19 2014 to *.safecheckoutrx.com with expiry Nov 20 2015.

The Contact Us shows two locations, with pictures of the buildings. One is the Lyric Center, the other is a Virtual Office location:

Main Office
440 Louisiana St,
Houston, TX 77002,
USA

International Orders Department
555 Republic Dr,
Plano, TX 75074,
USA

Those checkout pages are likely to be red-alert listed by MyWOT very soon.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Fri Nov 28, 2014 1:07 am

It is evident that some of the registrars who have been accepting payment for registered domain names have come to the conclusion that it is not good for business.

A registrar has a reputation to protect. When they act decisively to sever their links with organized crime, they will see their reputation improve.
But those registrars who are slow to act, or refuse to act, will soon see themselves with a bad reputation. They will become associated with the criminals whom they welcome as customers.

Registrars always have some legal clauses in their Terms of Service. Invariably these terms forbid the use of domain names for unlawful purposes. They also permit the registrar to terminate the service contract at their own discretion. They can terminate an account for any reason they deem fit. And certainly, protecting their own reputation and not being seen to be aiding a crime is a good reason to terminate a contract.

As more registrars adopt this attitude and invoke their terms of service, we will see a slow-down and eventual demise of the criminals who abuse their registration services and inflict harm on so many innocent victims.

-----

Michal at LegitScript has provided an interesting article on the top 3 reasons that rogue registrars give for not taking action.
Top 3 Excuses Registrars Use That Help Enable Rogue Pharmacies
* Excuse #1: “Sorry, but you need a court order for that.”
* Excuse #2: “We only manage the domain name. The website content is not hosted on our servers.”
* Excuse #3: “The registrant provided us a valid pharmacy license.”

For each of these excuses, she gives a wonderful explanation showing them to be invalid.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Oct 27, 2015 4:44 pm

Removal request: healthiestmen.net Oct 27 2015
tld-abuse wrote: To meet your complaint we have taken appropriate measures against healthiestmen.net according to our Registrar's schedule:

http://help.r01.ru/domain/gtld/en/complaint.html

Thank you for notification.

--
Best regards,
Tatiana Agafonova
R01 Registrar (RU-CENTER Group)
Phone: +7 (495) 783-3-783
Fax: +7 (495) 930-88-00
http://www.r01.ru


Complaints regarding gTLDs

Any issues which may arise from Registrant’s violations of exclusive rights for the trademark, illegal activities and abuses, as well as spamming from this domain, should be addressed to tld-abuse@r01.ru or phone +7.4957833783.

The appropriate actions for addressing such issues will be shortly adopted. After receiving a complaint, R01 will:

Send a copy of such complaint to Registrant with a request to comment on it within 10 calendar days.
Initialize the procedure of Registrant’s data confirmation.
If Registrant fails to confirm the data within 10 calendar days, the domain will be undelegated. If Registrant confirms the data after the domain is undelegated, the domain will be re-delegated within 2 business days.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Apr 12, 2016 5:45 pm

Sample template-style request for one fraud domain zxekpaip.ru (Canadian Neighbor Pharmacy)

To: tld-abuse@r01.ru
R01-RU
Dear Registrar

This is a compliance request for you to suspend the illegal domain zxekpaip.ru
It is used for illegal purposes.

CRIMINAL EVIDENCE
https://mywot.com/en/scorecard/zxekpaip.ru

Your company is the registrar sponsoring the domain name

ACTION
Set the status to NOT DELEGATED

Thank you for your efforts to reduce crime and to keep criminals from abusing your terms of service.


Current status at time of request - April 12 2016

Code: Select all
domain:        ZXEKPAIP.RU
nserver:       ns1.zxekpaip.ru. 202.78.227.138
nserver:       ns2.zxekpaip.ru. 118.193.240.40
state:         REGISTERED, DELEGATED, VERIFIED
person:        Private Person
registrar:     R01-RU
admin-contact: https://partner.r01.ru/contact_admin.khtml
created:       2015.12.30
paid-till:     2016.12.30
free-date:     2017.01.30


Template reply from R01.RU
R01.RU wrote:Hello,

This is an automatic notification message from R01 Registrar to tell you that your request has been successfully submitted and is being processed. We will respond to you shortly.

Your request number is 2016041320001507.

--
Best regards,
R01 Registrar Customer Service Department
Phones:
+7 495 783-3-783
Fax: +7 (495) 930-88-00
http://www.r01.ru
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Sep 06, 2016 5:18 pm

Our predictable Russian contribution

* directshopa.su- Canadian Pharmacy -ARDIS-REG-FID
* directshopb.su- Canadian Pharmacy -ARDIS-REG-FID
* directshopc.su- Canadian Pharmacy -ARDIS-REG-FID
* directshopd.su- Canadian Pharmacy -ARDIS-REG-FID
* directshope.su- Canadian Pharmacy -ARDIS-REG-FID
* bestdrugsmarket.ruCanadian Health&Care MallR01-RU
* fastmedicareinc.ruCanadian Health&Care MallR01-RU
* fastremedymall.ruCanadian Health&Care MallR01-RU
* firstpharmvalue.ruCanadian Health&Care MallR01-RU
* globalpillgroup.ruCanadian Health&Care MallR01-RU
* herbalsafeeshop.ruCanadian Health&Care MallR01-RU
* homefastdeal.ruCanadian Health&Care MallR01-RU
* luckydrugeshop.ruCanadian Health&Care MallR01-RU
luckypillstrade.ruCanadian Health&Care MallR01-RU
* magicmedsinc.ruCanadian Health&Care MallR01-RU
* naturalsafetrade.ruCanadian Health&Care MallR01-RU
* onlinepillvalue.ruCanadian Health&Care MallR01-RU
* privatedrugsshop.ruCanadian Health&Care MallR01-RU
* purerxprogram.ruCanadian Health&Care MallR01-RU
* safesafesupply.ruCanadian Health&Care MallR01-RU
* securesafetrade.ruCanadian Health&Care MallR01-RU
* securesmarttrade.ruCanadian Health&Care MallR01-RU
* yourfirstinc.ruCanadian Health&Care MallR01-RU
* yourmedsmarket.ruCanadian Health&Care MallR01-RU
* yourprivateeshop.ruCanadian Health&Care MallR01-RU
* yourtrustedmart.ruCanadian Health&Care MallR01-RU
* magicaidsupply.ruCanadian Neighbor PharmacyR01-RU
* myherbsbargain.ruCanadian Neighbor PharmacyR01-RU
* newherbmart.ruCanadian Neighbor PharmacyR01-RU
* securepharmeshop.ruCanadian Neighbor PharmacyR01-RU
* firstmedicalsale.ruCanadianPharmacyR01-RU
* healingsmartdeal.ruCanadianPharmacyR01-RU
youraidwebmart.ruMy Canadian PharmacyR01-RU
* toptargeta.su- Canadian Pharmacy -REGTIME-REG-FID
* toptargetb.su- Canadian Pharmacy -REGTIME-REG-FID
* toptargetc.su- Canadian Pharmacy -REGTIME-REG-FID
* toptargetd.su- Canadian Pharmacy -REGTIME-REG-FID
* toptargete.su- Canadian Pharmacy -REGTIME-REG-FID
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Mon Sep 19, 2016 2:41 am

More Russian fraud
* domains highlighted in red have been taken down by the registrar

* targetwebc.su- Canadian Pharmacy -ARDIS-REG-FID
* targetwebd.su- Canadian Pharmacy -ARDIS-REG-FID
* targetwebe.su- Canadian Pharmacy -ARDIS-REG-FID
* targetwebf.su- Canadian Pharmacy -ARDIS-REG-FID
* targetwebg.su- Canadian Pharmacy -ARDIS-REG-FID
* bestmedicaltrade.ruCanadian Family PharmacyR01-RU
* mypillservice.ruCanadian Family PharmacyR01-RU
* conchitaclaude.ruCanadian Health&Care MallR01-RU
* fastcareservice.ruCanadian Health&Care MallR01-RU
* goodorganicstore.ruCanadian Health&Care MallR01-RU
* hotcuringoutlet.ruCanadian Health&Care MallR01-RU
* magicfirstmart.ruCanadian Health&Care MallR01-RU
* onlinepharmstore.ruCanadian Health&Care MallR01-RU
* puremedsshop.ruCanadian Health&Care MallR01-RU
* remedialhotservices.ruCanadian Health&Care MallR01-RU
* axhhzsmu.ruCanadian Neighbor PharmacyR01-RU
* bghutwba.ruCanadian Neighbor PharmacyR01-RU
* drzrxfor.ruCanadian Neighbor PharmacyR01-RU
* ghjtxbzv.ruCanadian Neighbor PharmacyR01-RU
* ionfxpjn.ruCanadian Neighbor PharmacyR01-RU
* iqqjwfoz.ruCanadian Neighbor PharmacyR01-RU
* irbrblml.ruCanadian Neighbor PharmacyR01-RU
* lhkrbwps.ruCanadian Neighbor PharmacyR01-RU
* srmezqjq.ruCanadian Neighbor PharmacyR01-RU
* viqsiniw.ruCanadian Neighbor PharmacyR01-RU
* wgoaubla.ruCanadian Neighbor PharmacyR01-RU
* zyjjyocm.ruCanadian Neighbor PharmacyR01-RU
homeprivategroup.ruCanadianPharmacyR01-RU
* pureherbeshop.ruCanadianPharmacyR01-RU
* smartpillsmall.ruMy Canadian PharmacyR01-RU
* smartprivatemart.ruMy Canadian PharmacyR01-RU
* themedicamentinc.ruMy Canadian PharmacyR01-RU
* yourorganicmall.ruMy Canadian PharmacyR01-RU
* yourremedyreward.ruMy Canadian PharmacyR01-RU
* abagaildaniele.ruRxExpressOnlineR01-RU
* aggilibbey.ruRxExpressOnlineR01-RU
* agnolavirginia.ruRxExpressOnlineR01-RU
* aileneestel.ruRxExpressOnlineR01-RU
* aimiljessalin.ruRxExpressOnlineR01-RU
* alanaloria.ruRxExpressOnlineR01-RU
* albinanisse.ruRxExpressOnlineR01-RU
* alejandralaurette.ruRxExpressOnlineR01-RU
* alidavelvet.ruRxExpressOnlineR01-RU
* allyceeimile.ruRxExpressOnlineR01-RU
* amelaverna.ruRxExpressOnlineR01-RU
* amitymarne.ruRxExpressOnlineR01-RU
* andiedollelsa.ruRxExpressOnlineR01-RU
* annadianaenrichetta.ruRxExpressOnlineR01-RU
* annadianewindy.ruRxExpressOnlineR01-RU
* aubertaromona.ruRxExpressOnlineR01-RU
* aubretteadela.ruRxExpressOnlineR01-RU
* audriesalomi.ruRxExpressOnlineR01-RU
* aureliaestele.ruRxExpressOnlineR01-RU
* bonneealyssandi.ruRxExpressOnlineR01-RU
* daylejohnette.ruRxExpressOnlineR01-RU
* emlynnerica.ruRxExpressOnlineR01-RU
* ulrikaumekojoye.ruRxExpressOnlineR01-RU
* adoreeshandie.ruRxMedicationsR01-RU
* maribethsteffi.ruCanadian Health&Care MallR01-RU
* miquelabree.ruCanadian Health&Care MallR01-RU
* maurinejenlilly.ruMy Canadian PharmacyR01-RU
* adalineirita.ruRxExpressOnlineR01-RU
* adelheidcassandre.ruRxExpressOnlineR01-RU
* margittraci.ruRxExpressOnlineR01-RU
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Oct 25, 2016 12:54 am

Russia continues to sponsor fake pharmacies

* bestprivatedeal.ruCanadian Health&Care MallR01-RU
* genericbestsale.ruCanadian Health&Care MallR01-RU
* homefastpurchase.ruCanadian Health&Care MallR01-RU
* luckyrxstore.ruCanadian Health&Care MallR01-RU
* newremedyreward.ruCanadian Health&Care MallR01-RU
* perfectsafevalue.ruCanadian Health&Care MallR01-RU
* privatecaredeal.ruCanadian Health&Care MallR01-RU
* pureherbpurchase.ruCanadian Health&Care MallR01-RU
* smartcareservice.ruCanadian Health&Care MallR01-RU
thefastreward.ruCanadian Health&Care MallR01-RU
* goodfastwebmart.ruCanadian Neighbor PharmacyR01-RU
* purepharmgroup.ruCanadian Neighbor PharmacyR01-RU
* familymedsgroup.ruCanadianPharmacyR01-RU
* familydrugsmall.ruMy Canadian PharmacyR01-RU
* firstglobalshop.ruMy Canadian PharmacyR01-RU
* goodsmarttrade.ruMy Canadian PharmacyR01-RU
* safepharmwebmart.ruMy Canadian PharmacyR01-RU
* firstremedygroup.ruRxMedicationsR01-RU
* homefastmall.ruRxMedicationsR01-RU
* hotglobaloutlet.ruRxMedicationsR01-RU
* perfectpillsmall.ruRxMedicationsR01-RU
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Sat Dec 03, 2016 1:04 am

Russia, home of the Eva Pharmacy fraud:

* yourremedyvalue.ruCanadian Family PharmacyR01-RU
* bestdrugcompany.ruCanadian Health&Care MallR01-RU
* bestpillservice.ruCanadian Health&Care MallR01-RU
* erikanerti.ruCanadian Health&Care MallR01-RU
* familyaidquality.ruCanadian Health&Care MallR01-RU
* firstpharmeshop.ruCanadian Health&Care MallR01-RU
* gooddruginc.ruCanadian Health&Care MallR01-RU
* goodfastgroup.ruCanadian Health&Care MallR01-RU
* goodmedswebmart.ruCanadian Health&Care MallR01-RU
* herbalfastmart.ruCanadian Health&Care MallR01-RU
* homebestmarket.ruCanadian Health&Care MallR01-RU
homefirstelement.ruCanadian Health&Care MallR01-RU
* luckyrxmart.ruCanadian Health&Care MallR01-RU
* magicdrugvalue.ruCanadian Health&Care MallR01-RU
magichotoutlet.ruCanadian Health&Care MallR01-RU
* magichotprogram.ruCanadian Health&Care MallR01-RU
* medicalherbinc.ruCanadian Health&Care MallR01-RU
* newcuringshop.ruCanadian Health&Care MallR01-RU
* newhealinginc.ruCanadian Health&Care MallR01-RU
* newsecurequality.ruCanadian Health&Care MallR01-RU
* onlinedrugoutlet.ruCanadian Health&Care MallR01-RU
* onlinefasteshop.ruCanadian Health&Care MallR01-RU
* purefastmarket.ruCanadian Health&Care MallR01-RU
* pureprivatesale.ruCanadian Health&Care MallR01-RU
* puretrustedmall.ruCanadian Health&Care MallR01-RU
* safepharmservice.ruCanadian Health&Care MallR01-RU
* thefamilycompany.ruCanadian Health&Care MallR01-RU
* thegenericsgroup.ruCanadian Health&Care MallR01-RU
* trustedherbshop.ruCanadian Health&Care MallR01-RU
* yourcurativemall.ruCanadian Health&Care MallR01-RU
* yourtabswebmart.ruCanadian Health&Care MallR01-RU
* bltapdps.ruCanadian Neighbor PharmacyR01-RU
* bnwdoimh.ruCanadian Neighbor PharmacyR01-RU
* dvbqogew.ruCanadian Neighbor PharmacyR01-RU
* firstsmartsale.ruCanadian Neighbor PharmacyR01-RU
* fpklwoxg.ruCanadian Neighbor PharmacyR01-RU
* fqusbuvt.ruCanadian Neighbor PharmacyR01-RU
* hyrcwsmk.ruCanadian Neighbor PharmacyR01-RU
* kejfsfky.ruCanadian Neighbor PharmacyR01-RU
* njkyewqy.ruCanadian Neighbor PharmacyR01-RU
* oharzrsm.ruCanadian Neighbor PharmacyR01-RU
* qcrrmjuq.ruCanadian Neighbor PharmacyR01-RU
* qdntjlkd.ruCanadian Neighbor PharmacyR01-RU
* tgqizgky.ruCanadian Neighbor PharmacyR01-RU
* estelleminni.ruRxExpressOnlineR01-RU
* hyacinthiecairistiona.ruRxExpressOnlineR01-RU
* penelopajohannah.ruRxExpressOnlineR01-RU
* christializa.ruRxMedicationsR01-RU
* webdirectx.suCanadian Health&Care MallREGRU-REG-FID
* webdirecty.suCanadian Health&Care MallREGRU-REG-FID
* webdirectz.suCanadian Health&Care MallREGRU-REG-FID
* bestshopx.suCanadian Health&Care MallREGTIME-REG-FID
* bestshopy.suCanadian Health&Care MallREGTIME-REG-FID
* bestshopz.suCanadian Health&Care MallREGTIME-REG-FID
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Mon Dec 05, 2016 8:31 pm

Gransy - the only ICANN accredited domain registrar in the Czech Republic - has a share of hits
All currently failing to load
* genericpharminc.beCanadian Health&Care MallGransy s.r.o.
* onlineremedialmall.beCanadian Health&Care MallGransy s.r.o.
* perfectmedspurchase.beCanadian Health&Care MallGransy s.r.o.
* yourherbalmarket.euCanadian Health&Care MallGransy s.r.o.
* medicatingsmartshop.beCanadianPharmacyGransy s.r.o.
* theonlinepharmacyinc.comCanadian Health&Care MallGransy s.r.o.


http://genericpharminc.be was seized by "Operation Transatlantic VII"
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Wed Dec 07, 2016 12:25 am

Early December, from Russia
Domains highlighted in red have been taken down or expired after 12 months.

* smartdrugmart.ruCanadian Health&Care MallR01-RU
* tessyflorida.ruRxExpressOnlineR01-RU
* goodcuringgroup.ruCanadian Health&Care MallR01-RU
* mydrugsassist.ruCanadian Health&Care MallR01-RU
* adelinakalindi.ruCanadianPharmacyR01-RU
* jerrileekarilynn.ruCanadianPharmacyR01-RU
* karliebrigidmin.ruCanadianPharmacyR01-RU
* lillianviv.ruCanadianPharmacyR01-RU
* purewelnessvalue.ruCanadianPharmacyR01-RU
* mysafetrade.ruMy Canadian PharmacyR01-RU
* safecarereward.ruMy Canadian PharmacyR01-RU
* thehottrade.ruMy Canadian PharmacyR01-RU
bestwebx.suCanadian Health&Care MallREGRU-REG-FID
bestweby.suCanadian Health&Care MallREGRU-REG-FID
bestwebz.suCanadian Health&Care MallREGRU-REG-FID
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Thu Dec 22, 2016 8:18 pm

Pre-Christmas bundle from Russia

* realxlife.suCanadian Health&Care MallDR-REG-FID
* realylife.suCanadian Health&Care MallDR-REG-FID
* realzlife.suCanadian Health&Care MallDR-REG-FID
* indiraophelia.ruMy Canadian PharmacyR01-RU
* annabelahindasuzi.ruRxExpressOnlineR01-RU
* cammiedrucill.ruRxExpressOnlineR01-RU
* homerxelement.ruCanadian Family PharmacyR01-RU
* magicbestwebmart.ruCanadian Family PharmacyR01-RU
* perfectfirstshop.ruCanadian Family PharmacyR01-RU
* safeherbsbargain.ruCanadian Family PharmacyR01-RU
* evdvpjgd.ruCanadian Health&Care MallR01-RU
* hotfastsale.ruCanadian Health&Care MallR01-RU
* magichotbargain.ruCanadian Health&Care MallR01-RU
* magicsafevalue.ruCanadian Health&Care MallR01-RU
* medicalmedsdeal.ruCanadian Health&Care MallR01-RU
* mirelleberyl.ruCanadian Health&Care MallR01-RU
* newgenericseshop.ruCanadian Health&Care MallR01-RU
* newpillinc.ruCanadian Health&Care MallR01-RU
* nmaoivud.ruCanadian Health&Care MallR01-RU
* purebestdeal.ruCanadian Health&Care MallR01-RU
* purecanadianinc.ruCanadian Health&Care MallR01-RU
* puregenericsdeal.ruCanadian Health&Care MallR01-RU
* purepillsprogram.ruCanadian Health&Care MallR01-RU
* rdlqibmd.ruCanadian Health&Care MallR01-RU
* securecaredeal.ruCanadian Health&Care MallR01-RU
* thecurativemall.ruCanadian Health&Care MallR01-RU
* thecurativetrade.ruCanadian Health&Care MallR01-RU
* vhliuili.ruCanadian Health&Care MallR01-RU
* zvbvldhj.ruCanadian Health&Care MallR01-RU
* aljhzlku.ruCanadian Neighbor PharmacyR01-RU
* cfzfmjwf.ruCanadian Neighbor PharmacyR01-RU
* fdhgozme.ruCanadian Neighbor PharmacyR01-RU
* fihcxtgz.ruCanadian Neighbor PharmacyR01-RU
* fmmhdbpl.ruCanadian Neighbor PharmacyR01-RU
* globalorganicinc.ruCanadian Neighbor PharmacyR01-RU
* hometabseshop.ruCanadian Neighbor PharmacyR01-RU
* huiqypzg.ruCanadian Neighbor PharmacyR01-RU
* jbmcyckz.ruCanadian Neighbor PharmacyR01-RU
* joaqlibk.ruCanadian Neighbor PharmacyR01-RU
* kjjcbjmp.ruCanadian Neighbor PharmacyR01-RU
* lszyfxkn.ruCanadian Neighbor PharmacyR01-RU
* newcarequality.ruCanadian Neighbor PharmacyR01-RU
* newfamilyvalue.ruCanadian Neighbor PharmacyR01-RU
* onlinedrugmart.ruCanadian Neighbor PharmacyR01-RU
* opulknyh.ruCanadian Neighbor PharmacyR01-RU
* pyjforoi.ruCanadian Neighbor PharmacyR01-RU
* rzmvzsaf.ruCanadian Neighbor PharmacyR01-RU
* safeonlinemarket.ruCanadian Neighbor PharmacyR01-RU
* sbzielhv.ruCanadian Neighbor PharmacyR01-RU
* tciwbnfq.ruCanadian Neighbor PharmacyR01-RU
* tlizdzev.ruCanadian Neighbor PharmacyR01-RU
* ujfwduhg.ruCanadian Neighbor PharmacyR01-RU
* uzvmwcko.ruCanadian Neighbor PharmacyR01-RU
* vbadhyle.ruCanadian Neighbor PharmacyR01-RU
* xljvgnif.ruCanadian Neighbor PharmacyR01-RU
* xsktvjpw.ruCanadian Neighbor PharmacyR01-RU
* yckvesdk.ruCanadian Neighbor PharmacyR01-RU
* ydlwedlg.ruCanadian Neighbor PharmacyR01-RU
* zznewbkw.ruCanadian Neighbor PharmacyR01-RU
* bestgenericstore.ruCanadianPharmacyR01-RU
* healingdrugdeal.ruCanadianPharmacyR01-RU
* luckybestservice.ruCanadianPharmacyR01-RU
* privatepillvalue.ruCanadianPharmacyR01-RU
* fastpillsmall.ruMy Canadian PharmacyR01-RU
* herbalrxreward.ruMy Canadian PharmacyR01-RU
* hotdrugsprogram.ruMy Canadian PharmacyR01-RU
* newherbalprogram.ruMy Canadian PharmacyR01-RU
* newsecurestore.ruMy Canadian PharmacyR01-RU
* puredrugseshop.ruMy Canadian PharmacyR01-RU
* smartherbprogram.ruMy Canadian PharmacyR01-RU
* caraliehortense.ruRxExpressOnlineR01-RU
* dollyatlanta.ruRxExpressOnlineR01-RU
* georgenaxenia.ruRxExpressOnlineR01-RU
* illasiouxie.ruRxExpressOnlineR01-RU
* jacquenettetinejania.ruRxExpressOnlineR01-RU
* katalinkarlotte.ruRxExpressOnlineR01-RU
* katleenstorm.ruRxExpressOnlineR01-RU
* kesleylydia.ruRxExpressOnlineR01-RU
* loreneardra.ruRxExpressOnlineR01-RU
* lyndelljania.ruRxExpressOnlineR01-RU
* neillalindi.ruRxExpressOnlineR01-RU
* ninettamufinella.ruRxExpressOnlineR01-RU
* wiliezorana.ruRxExpressOnlineR01-RU
* jayneelisa.ruRxMedicationsR01-RU
* laviniejenifer.ruRxMedicationsR01-RU
* luckynaturalinc.ruRxMedicationsR01-RU
* modestalelahbel.ruRxMedicationsR01-RU
* privatepharmshop.ruRxMedicationsR01-RU
* goodtableteshop.ruToronto DrugstoreR01-RU
* safegenericmall.ruToronto DrugstoreR01-RU
* mybestxsale.suCanadian Health&Care MallREGRU-REG-FID
* mybestysale.suCanadian Health&Care MallREGRU-REG-FID
* mybestzsale.suCanadian Health&Care MallREGRU-REG-FID
mytargetwebx.suCanadian Health&Care MallREGRU-REG-FID
mytargetweby.suCanadian Health&Care MallREGRU-REG-FID
mytargetwebz.suCanadian Health&Care MallREGRU-REG-FID
* tradeshopx.suCanadian Health&Care MallREGRU-REG-FID
* tradeshopy.suCanadian Health&Care MallREGRU-REG-FID
* tradeshopz.suCanadian Health&Care MallREGRU-REG-FID
* mybestwebsale.suCanadian Health&Care MallREGTIME-REG-FID
* shopcforyou.suCanadian Health&Care MallREGTIME-REG-FID
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Wed Jan 11, 2017 12:29 am

Some of these domains have not been taken down because the registrars have repeatedly ignored requests to terminate their sponsorship of cyber-crime

healthcarepharm.netMy Canadian PharmacyADVANCED INTERNET TECHNOLOGIES, INC.
max-pharmacy.comToronto DrugstoreADVANCED INTERNET TECHNOLOGIES, INC.
* cialis.cmCanadian Health&Care MallDomainerschoice
prosales24x7.comCanadian Health&Care MallGKG.NET, INC.
medsoffers.netCanadianPharmacyGKG.NET, INC.
* dinaroxanna.comRxExpressOnlineNAMESILO, LLC
* onlineherbmarket.beCanadian Health&Care MallGransy s.r.o.
* thehealingmart.euCanadianPharmacyGransy s.r.o.
* drugs416.comToronto DrugstoreNAMECHEAP INC.
* drugs905.comToronto DrugstoreNAMECHEAP INC.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: EvaPharmacy - Enough is enough

Postby Red Dwarf » Tue Jan 17, 2017 5:16 pm

Mid January's Russian selection

goodcarewebmart.suCanadian Health&Care MallR01-REG-FID
* sydelleailalib.suMy Canadian PharmacyR01-REG-FID
evviemicaela.suRxExpressOnlineR01-REG-FID
* jaimieliza.suRxExpressOnlineR01-REG-FID
abbyehildagarde.suRxMedicationsR01-REG-FID
* myrxinvestment.ruCanadian Family PharmacyR01-RU
* goodfirstservice.ruCanadian Health&Care MallR01-RU
* homeaidpurchase.ruCanadian Health&Care MallR01-RU
* hotherbsale.ruCanadian Health&Care MallR01-RU
* mbvionhe.ruCanadian Health&Care MallR01-RU
* ppiyhohe.ruCanadian Health&Care MallR01-RU
* ppiyhohe.ruCanadian Health&Care MallR01-RU
* onlinepilleshop.ruCanadian Health&Care MallR01-RU
* safemedsstore.ruCanadian Health&Care MallR01-RU
* sxhtorgl.ruCanadian Health&Care MallR01-RU
* theorganiceshop.ruCanadian Health&Care MallR01-RU
* thvdhawt.ruCanadian Health&Care MallR01-RU
* ttzkpkxo.ruCanadian Health&Care MallR01-RU
* ufbpypau.ruCanadian Health&Care MallR01-RU
* vdicoyup.ruCanadian Health&Care MallR01-RU
* wlvvthvx.ruCanadian Health&Care MallR01-RU
* yhiubfst.ruCanadian Health&Care MallR01-RU
* yikwaail.ruCanadian Health&Care MallR01-RU
* yitmrfqy.ruCanadian Health&Care MallR01-RU
* bestdrugswebmart.ruMy Canadian PharmacyR01-RU
* curingsecurequality.ruMy Canadian PharmacyR01-RU
* firstdruginc.ruMy Canadian PharmacyR01-RU
* healinghealthinc.ruMy Canadian PharmacyR01-RU
* purefamilyeshop.ruMy Canadian PharmacyR01-RU
* safeonlineassist.ruMy Canadian PharmacyR01-RU
* smartmedssupply.ruMy Canadian PharmacyR01-RU
* yourhealinginc.ruMy Canadian PharmacyR01-RU
* bestcarestore.ruRxExpressOnlineR01-RU
* giorgiablanche.ruRxExpressOnlineR01-RU
* kassiaaline.ruRxExpressOnlineR01-RU
* malloriejess.ruRxExpressOnlineR01-RU
* nadiyaisabelita.ruRxExpressOnlineR01-RU
* genericherbsinc.ruToronto DrugstoreR01-RU
* safepillvalue.ruToronto DrugstoreR01-RU
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Next

Return to Fight Spammers

Who is online

Users browsing this forum: Ahrefs and 2 guests