Mark Giles (talk | contribs) (Created page with "wp") Tags: Visual edit apiedit |
Mark Giles (talk | contribs) No edit summary Tag: rte-source |
||
|
==Description==
{|
|WikiPharmacy is another [[Bulker.biz]] property. Control of this organization has been attributed to the spammer using the pseudonym [[Alex Polyakov]]. The same group of scam pharmacy brands is referred to as "Eva Meds" by [http://knujon.com Knujon] and [http://legitscript.com LegitScript], and as "Yambo Financials" by [http://www.spamhaus.org/rokso/listing.lasso?file=880 Spamhaus].
This puts it into the same family as
* [[My Canadian Pharmacy]]
* [[International Legal RX]]
* [[Canadian Family Pharmacy]]
* [[Canadian Neighbor Pharmacy]]
* [[Toronto Drug Store]]
* [[US Drugs]]
* [[International_Rx]]
* [[US Pharmacy]]
* [[VIP Pharmacy]] ("Viagra + Cialis")
* [[Canadian Health&Care Mall]]
* [[Men Health]] (Men+ Health)
|[[Image:WikiPharmacy.jpg|thumb|Click to enlarge]]
[[Image:WikiPharmacy_trailer.jpg|thumb|Click to enlarge]]
|}
==False Pretenses==
Like other Bulker.biz sites, just about every claim made on this brand's site is a lie.
===Fake claim to be secure===
What is your security & privacy policy?
We are committed to protecting your privacy with the highest possible level of security.
All of your personal information, including credit card number, name, and address is
encrypted, so that it cannot be read as it is being transmitted from your computer to
our server. We use the Secure Socket Layer (SSL) protocol which enables end-to-end
data protection.
In fact, if you visit their Contact Us page, you see a request for you to provide your credit card on a page which has no encryption. And yet, the page contains this false statement:
The credit card number is required to identify your order correctly in our certified
secure network. Please note that all the information is securely transferred through
256-bit secure SSL connection, which provides high level of security. Any information
provided by our customers is never shared, sold, or released to any third party.
===Fake Locations===
Addresses listed for their headquarters and branches are real addresses, but no such company exists at those premises.
* 101 California St, San Francisci, CA 94111
* 4651 Salisbury Road, Jacksonville, FL 32356, USA
* 1200 Smith Street, Houston, TX 77002, USA (See [http://www.corporationwiki.com/Texas/Houston/1200-Smith-St-Ste-2400-Houston-TX-77002-a178191.aspx the tenancy listing]
===Fake Manufacturing License===
The pharmacy has no real location and no real pharmacists. But like other
Bulker.biz pharmacies, they have forged an imaginary license for their pharmacy.
[[Image:WikiPharmacy_license.jpg|600px]]
===Fake FDA Seal===
The Food and Drug Administration seal does not link to the FDA but is served on the same fake host.
[[Image:WikiPharmacy_FDA.jpg|300px|Click to enlarge]]
[https://www.registrarcorp.com/images/food-labels.gif The actual genuine logo] for Registrar Corp (with four red stars instead of the three shown above) can be compared with the version used in the certificate
Registrar Corp states [http://www.registrarcorp.com/fda-food/labeling/regulations.jsp?lang=en on their web site]:
Registrar Corp assists businesses with U.S. FDA compliance. Certificates of Registration issued by Registrar Corp provide confirmation to industry that you are fulfilling U.S. FDA registration requirements. U.S. FDA does not issue or recognize Certificates of Registration. Registrar Corp is not affiliated with the U.S. Food and Drug Administration.
The signatory is Russell K. Statman -
Russell K. Statman, Esq., is a founder and Executive Director of FDA Registrar Corp., a firm providing registration, compliance assistance and U.S. Agent Services for the food and beverage, cosmetics and medical device industries. Mr. Statman is an attorney-at-law representing firms in FDA-regulated industries for the past eighteen years. Contact the author at: <nowiki>statman@fdaregistrar.com</nowiki>
===Fake Better Business Bureau Seal===
At the bottom of each page of the site, there is a seal claiming the site is accredited by the Better Business Bureau. Clicking on a real BBB seal should link to a company's ratings page on BBB's website. But WikiPharmacy links to a page on their own website with a forged BBB rating. They have even got the chutzpah to have created a fake complaint and resolved it satisfactorily.
{| class="wikitable"
|Real BBB page for WikiPharmacy on BBB.org||Fake BBB page hosted on their own domain
|-
|[[Image:WikiPharmacy_BBB_fail.jpg|350px]]||[[Image:WikiPharmacy_BBB_fake.jpg|300px]]
|}
Notice that BBB hasn't yet even heard of them (May 2011)
==Hijacked servers==
'''Pre 2012'''
When you loaded a WikiPharmacy site, you found that the web site and the images used were being loaded from a range of different IP addresses. For example, take tabletspillsrx.net, which was operational in May 2011.
* The web page itself loaded from 5 IPs
**tabletspillsrx.net has address 91.200.240.251
**tabletspillsrx.net has address 91.200.240.252
**tabletspillsrx.net has address 200.91.115.75
**tabletspillsrx.net has address 200.122.165.18
**tabletspillsrx.net has address 213.55.114.132
* later in the day, these 5 IPs
**tabletspillsrx.net has address 91.200.240.251
**tabletspillsrx.net has address 91.200.240.252
**tabletspillsrx.net has address 201.7.103.58
**tabletspillsrx.net has address 202.164.39.218
**tabletspillsrx.net has address 213.55.114.132
* Uses a network of compromised machines to serve up the images, eg
**http://61.178.128.219:8080/images/wiki/logo.jpg
**http://61.191.24.42:8080/images/products/viagrasuperactive_b.gif
**http://61.153.244.13:8080/images/products/hghb.gif
**http://202.204.54.151:8080/images/products/powerpack_b.gif
**http://203.188.247.3:8080/images/products/generic_viagra_b.gif
These IP addresses were refreshed on a [[fast-flux]] basis every 10 minutes
Each of these IP addresses represented a site that had been hijacked, and taken over to provide services to these criminals, without the knowledge of the owners. The method used to infiltrate and take over these sites has been documented, together with cleaning instructions. See [[Hijacked host]].
==How to Report this Spam==
{{complainterator}}
==Sponsor Organization==
===Spamming Affiliates===
[[Bulker.biz]] is the [[:Category:Spam Sponsoring Companies| criminal sponsor organization]] behind this type of site.
===Registrars===
{| border="1" cellpadding="2"
! scope="col" width = "200" | WikiPharmacy domain name
! scope="col" width = "450" | Registrar sponsoring the domain
|-
| theherbseshop.eu || 1 API GmbH
|-
| || Suspended by registrar:
|-
| thewikipharmacy.com || TODAYNIC.COM, INC. suspended
|-
| fastmedicalprogram.com || NETLYNX, INC. suspended
|-
| wiki-pharmacy.org || TODAYNIC.COM,INC. suspended
|-
| wiki-pharmacy.net || BIZCN.COM, INC. suspended
|-
| herbalpillsgroup.com || NETEARTH ONE, INC. DBA NETEARTH suspended
|-
| tabletspillsrx.net|| ELB GROUP, INC. suspended
|-
| tabletprecisionpharmacyrx.net || ELB GROUP, INC. suspended
|-
| sleepingpillspharmacy.com || TRUNKOZ TECHNOLOGIES PVT LTD. suspended
|-
| pharmacyhealthpills.net || NETEARTH ONE, INC. DBA NETEARTH suspended
|-
| drugtorerxnewslettertablets.net || NETEARTH ONE, INC. DBA NETEARTH suspended
|-
| wikipharmacy.biz || CENTER OF UKRAINIAN INTERNET NAMES DBA UKRNAMES suspended
|-
| wikipharmacy.net || CENTER OF UKRAINIAN INTERNET NAMES DBA UKRNAMES suspended
|-
|}
==Related spam operations==
See: [[:Category:Yambo family]]
==Further Reading==
[http://www.legitscript.com/download/Rogues-and-Registrars-Report.pdf LegitScript report, May 2010]
[[Category:Well-known Spam]]
[[Category:Bulkerbiz Spam]]
[[Category:Yambo family]]
[[Category:Pharma spam]]
| |||
425
pages