Fraud Reports Wiki
Edit Page

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 2: Line 2:
   
 
{|
 
{|
|
 
 
|This is one of several new fake pharmacy sites first observed in July 2007 and which are part of the [[Rx-Promotions]] affiliate program. This program was described in detail together with screen shots of the different themes by [http://www.nartv.org/2010/12/23/rx-promotion-a-pharma-shop/ Nart Villeneuve]
 
|This is one of several new fake pharmacy sites first observed in July 2007 and which are part of the [[Rx-Promotions]] affiliate program. This program was described in detail together with screen shots of the different themes by [http://www.nartv.org/2010/12/23/rx-promotion-a-pharma-shop/ Nart Villeneuve]
   
Line 34: Line 33:
 
Visitors to these sites are cautioned against placing an order for any of the products advertised. With so much obvious fraud in the set up of the web sites, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant fraudsters.
 
Visitors to these sites are cautioned against placing an order for any of the products advertised. With so much obvious fraud in the set up of the web sites, any reasonable person would be justified in having doubts about passing identity and credit card details to such blatant fraudsters.
   
The contact page has a form for inquiries as well as a phone number (currently 1-800-998-7978) and the mailto link. The website also displays this phone number for customer support, giving the appearance of legitimacy. Read on to see how legitimate the sites are.
+
The contact page has a form for inquiries as well as a phone number (currently 1-800-998-7978) and the mailto link <nowiki>support@rx-drugs-support.com</nowiki>. The website rx-drugs-support.com also displays this phone number for customer support, giving the appearance of legitimacy. Read on to see how legitimate the sites are.
 
|}
 
|}
 
{|
 
{|
 
|-
 
|-
| align="right" valign="top" |[[Image:CanadianRXDrugs.jpg|top|thumb|none|Canadian RX Drugs, July, 2007]]
+
|align="right" valign="top"|[[Image:CanadianRXDrugs.jpg|top|thumb|none|Canadian RX Drugs, July, 2007]]
 
|[[Image:CanadianRXDrugs_trailer.jpg|top|thumb|none|Fake cerificates, Canadian RX Drugs, July, 2007 ]]
 
|[[Image:CanadianRXDrugs_trailer.jpg|top|thumb|none|Fake cerificates, Canadian RX Drugs, July, 2007 ]]
 
|}
 
|}
Line 89: Line 88:
 
This secure page currently the following statement:
 
This secure page currently the following statement:
 
For your convenience in case of any questions or concerns feel free to contact our Customer
 
For your convenience in case of any questions or concerns feel free to contact our Customer
  +
Service at support@rx-drugs-support.com. Also you're able to check your Order Status using our
  +
Support Center at http://www.rx-drugs-support.com or contact us by phone +1 (800) 998-7978
  +
  +
rx-drugs-support.com is also registered with privacy protection.
   
 
In 2007, when first observed, the support domain was pharmacycs.com.
 
In 2007, when first observed, the support domain was pharmacycs.com.
Line 135: Line 138:
 
|[[image:Canadian_Rx_Drugs_SSL.jpg|thumb]]|[[image:Canadian_RX_notSSL.jpg|thumb]]
 
|[[image:Canadian_Rx_Drugs_SSL.jpg|thumb]]|[[image:Canadian_RX_notSSL.jpg|thumb]]
 
|}
 
|}
  +
   
 
The site is now using the slightly different domain paymentrx.com, registered with eNom, and with SSL -- for as long as that lasts. But they have tipped their hand that they are willing to use deception to be able to take money while transmitting your medical information and credit card number in plain view.
 
The site is now using the slightly different domain paymentrx.com, registered with eNom, and with SSL -- for as long as that lasts. But they have tipped their hand that they are willing to use deception to be able to take money while transmitting your medical information and credit card number in plain view.
Line 222: Line 226:
 
|-
 
|-
 
|}
 
|}
  +
  +
   
 
'''Pharmacy Checker response'''
 
'''Pharmacy Checker response'''
Line 294: Line 300:
 
Expiration Date: 17-dec-2010
 
Expiration Date: 17-dec-2010
   
  +
The phone number on the site - 1 (800) 998 7978 is answered by a recorded message, which provides a different e-mail address - support@rx-drugs-support.com which is sponsored by US registrar, Enom
The web site at gives the contact address for Canadian RX Drugs as
 
  +
Domain Name: RX-DRUGS-SUPPORT.COM
  +
Registrar: ENOM, INC.
  +
Name Server: NS1.RX-DRUGS-SUPPORT.COM
  +
Name Server: NS2.RX-DRUGS-SUPPORT.COM
  +
Status: clientTransferProhibited
  +
Updated Date: 26-feb-2010
  +
Creation Date: 09-jul-2008
  +
Expiration Date: 09-jul-2010
  +
 
The web site at rx-drugs-support.com gives the contact address for Canadian RX Drugs as
 
Suite 2, Portland House, Glacis Road, Gibraltar which is [http://www.flickr.com/photos/lancashire/3918429721/ depicted in a photograph]
 
Suite 2, Portland House, Glacis Road, Gibraltar which is [http://www.flickr.com/photos/lancashire/3918429721/ depicted in a photograph]
 
This address can also be found in a Google search:
 
This address can also be found in a Google search:
 
* [http://forums.malwarebytes.org/index.php?showtopic=4701 Rogue antivirus distributor]
 
* [http://forums.malwarebytes.org/index.php?showtopic=4701 Rogue antivirus distributor]
 
* [http://answers.google.com/answers/threadview?id=437261 Registered address of an Adult web site provider]
 
* [http://answers.google.com/answers/threadview?id=437261 Registered address of an Adult web site provider]
  +
it has an IP address 91.212.135.134 which is located in Russia
+
rx-drugs-support.com has an IP address 91.212.135.134 which is located in Russia
   
 
inetnum: 91.212.135.0 - 91.212.135.255
 
inetnum: 91.212.135.0 - 91.212.135.255
Line 429: Line 446:
   
 
[[Category:Well-known Spam]]
 
[[Category:Well-known Spam]]
[[Category:Pharma spam]]|}
+
[[Category:Pharma spam]]

Please note that all contributions to the Fraud Reports Wiki are considered to be released under the CC-BY-SA

Cancel Editing help (opens in new window)