Clicky
Last visit was: Sat Jul 05, 2014 3:14 pm
It is currently Sat Jul 05, 2014 3:14 pm

Pharmacy Express campaign


All times are UTC - 5 hours [ DST ]


 [ 4 posts ] 
Author Message
 PostPosted: Thu Mar 07, 2013 9:27 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
Pharmacy Express is a fraud. There is ample evidence of the criminality at the Spamtrackers site entry for Pharmacy Express.
It was set up by Leo Kuvayev, who was last reported as serving time in a Russian prison for the molestation of Russian orphan children His conviction has been covered at the spamtrackers wiki entry, and also by a report at Sophos

Lists of spammed domain names are regularly posted in the forum at Web Of Trust (WOT)

But the spam and the fraud continues unabated. It is time to turn the spotlight on this operation.

EDIT: SiL fixed a busted URL tag in this post.


Top
 Profile WWW  
 PostPosted: Thu Mar 14, 2013 5:22 am   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
Looking at the name servers

Complainterator wrote:
This is a compliance request for you to suspend the illegal domain name
servers used for the Pharmacy Express fraud

DNSDEADL.SU
HOSTVDS.SU
RBKXHOST.SU
VIPSHOST.SU
DNSEHOST.SU
HOMEHOST.SU
DNSAUSTRAL.SU

HOTHOSTS.RU

CRIMINAL EVIDENCE
> http://mywot.com/en/scorecard/dnsdeadl.su/msgpage
> http://mywot.com/en/scorecard/hostvds.su/msgpage
> http://mywot.com/en/scorecard/rbkxhost.su/msgpage
> http://mywot.com/en/scorecard/vipshost.su/msgpage
> http://mywot.com/en/scorecard/dnsehost.su/msgpage
> http://mywot.com/en/scorecard/homehost.su/msgpage
> http://mywot.com/en/scorecard/dnsaustral.su/msgpage

> http://mywot.com/en/scorecard/hothosts.ru/msgpage

Your company is the registrar sponsoring the domain names

ACTION
Set the ns1 and ns2 address records to a null route, such as 0.0.0.0 or
61.61.61.61
Set the status to Client Hold

Once suspended with that method, this Complaint Generator tool will not
create more requests on them.


reg.ru wrote:
Dear Sir/Madam,
Based on your request we forwarded notification to the client. In case, we didn't get any answer we take measures.
Спасибо! http://spasibo.reg.ru


Top
 Profile WWW  
 PostPosted: Sun Mar 17, 2013 9:15 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
Name servers used to resolve access to hundreds pf Pharmacy Express fraud domains

ns1.dnsoval.com.
ns2.dnsrainst.com.

ns1.dnsear.com.
ns2.dns45vds.com.

ns1.hosterv.su.
ns1.xicodns.com.
ns2.dnschil.su.
ns4.dnspare.name.

ns1.xicodns.com.
ns2.dnspamph.su.

ns1.dnscraze.com.
ns2.dnscowpox.su.

ns1.hostersmnx.com.
ns2.dnschow.su.

ns1.dnsecru.com.
ns2.dnsdally.su.


Top
 Profile WWW  
 PostPosted: Mon Mar 25, 2013 2:21 am   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
Registrar REG.RU (REGRU-REG-RIPN) has suspended 161 pharmacy Express domains

abetmedic.ru
amondmedic.ru
arbonmedic.ru
astermedic.ru
asticmedic.ru
astormedic.ru
baconmedic.ru
barbermedic.ru
cakemedic.ru
chainmedic.ru
crookmedic.ru
deskmedic.ru
elonymedic.ru
ementmedic.ru
eretmedic.ru
ffeurmedic.ru
ffinmedic.ru
frostmedic.ru
gdommedic.ru
gearmedic.ru
glovemedic.ru
grassmedic.ru
gretmedic.ru
handlemedic.ru
helmetmedic.ru
herrymedic.ru
hessmedic.ru
icensemedic.ru
ichardmedic.ru
icianmedic.ru
icinemedic.ru
icketmedic.ru
ilicamedic.ru
inachmedic.ru
indermedic.ru
inglemedic.ru
inianmedic.ru
inkermedic.ru
irclemedic.ru
ironmedic.ru
irrormedic.ru
istanmedic.ru
istrymedic.ru
ittymedic.ru
jumpmedic.ru
kcasemedic.ru
kneemedic.ru
lamemedic.ru
lanemedic.ru
larmmedic.ru
lauramedic.ru
ldiermedic.ru
leadmedic.ru
liammedic.ru
lindamedic.ru
loafmedic.ru
lonemedic.ru
lookmedic.ru
loonmedic.ru
losetmedic.ru
lrabimedic.ru
lsiusmedic.ru
lutchmedic.ru
lwaymedic.ru
medicambu.ru
medicarcha.ru
medicbarom.ru
medicbirth.ru
medicbody.ru
medicbulb.ru
mediccobw.ru
mediccoin.ru
mediccolor.ru
mediccone.ru
mediccours.ru
mediccurta.ru
medicdenim.ru
medicdill.ru
medicdinner.ru
medicdist.ru
medicdugou.ru
medicfiel.ru
medicfortn.ru
medicglide.ru
medichumor.ru
medickanga.ru
medickett.ru
mediclight.ru
mediclite.ru
mediclock.ru
medicpeon.ru
medicroom.ru
medicscor.ru
medicseash.ru
medicsecon.ru
medicshell.ru
medicshoem.ru
medicsinge.ru
medicslee.ru
medictempe.ru
medictort.ru
medictruck.ru
medicvisit.ru
medicyear.ru
menmedic.ru
nagermedic.ru
nclemedic.ru
ndeermedic.ru
needmedic.ru
nestmedic.ru
nicamedic.ru
nnethmedic.ru
ntagemedic.ru
ntistmedic.ru
ntrolmedic.ru
oducemedic.ru
oisonmedic.ru
olonmedic.ru
ongosmedic.ru
onionmedic.ru
oritymedic.ru
ortermedic.ru
ositmedic.ru
oubtmedic.ru
ovalmedic.ru
owelmedic.ru
owlingmedic.ru
oxygenmedic.ru
papermedic.ru
partymedic.ru
pathmedic.ru
phynxmedic.ru
placemedic.ru
planemedic.ru
pliermedic.ru
randymedic.ru
rbaramedic.ru
rcticamedic.ru
rdermedic.ru
rlesmedic.ru
sackmedic.ru
skinmedic.ru
sminemedic.ru
soapmedic.ru
steammedic.ru
tchermedic.ru
temptmedic.ru
tipmedic.ru
toadmedic.ru
trianmedic.ru
ttockmedic.ru
ugoutmedic.ru
uirymedic.ru
unchmedic.ru
usersmedic.ru
veinmedic.ru
viewmedic.ru
xglovemedic.ru
ymentmedic.ru
zuelamedic.ru


Top
 Profile WWW  
 [ 4 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008