Check out our new Mobile App

Форум

  1. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:21:44

    RxExpressOnline / RxMedications - rogue pharmacies

    New from September 1, 2013 RxExpressOnline and RxMedications are two more of the Eva Pharmacy frauds.

    The reference entry for this fraud is at
    http://fraud-reports.wikia.com/wiki/RxExpressOnlin...
    http://fraud-reports.wikia.com/wiki/RxMedications

    Like other Eva Pharmacy frauds, RxExpressOnline and RxMedications use many spammed domains which are set up as disposables. They are registered with a small subset of registrars.

    These spammed domains will redirect to a central site which is not spammed,
    in an attempt to avoid blacklisting by the spam URL detection methods, such as SURBL.

    Unlike most other Eva sites, RxExpressOnline and RxMedications use SSL layer security at checkout, with a certificate issued by RapidSSL CA from the GeoTrust Inc. organization to the web site rxcheckoutnow.com or securerxshopping.com and later smartrxpayments.com registered in Russia.

    Examples of redirection targets from November 2013 -
    RxExpressOnline e102.carcareprescription.net
    RxMedications c100.healthrxshop.ru

    Examples of redirection target domains from October 2014

    Registered on R01.RU in Russia

    thedruginc.ru
    pilldrugstablets.ru
    canadapillgroup.ru
    bestpharmacydirect.ru
    yourtabstrade.ru
    safetabletpurchase.ru
    pillhealthcaretenet.ru
    goodtabletvalue.ru
    luckyrxtrade.ru
    safeaidassist.ru
    bestrxgrouponline.ru
    themedicalstore.ru
    canadianprivateinc.ru

    Redirecting domains on TRUNKOZ TECHNOLOGIES PVT LTD.
    madeleneulla.com
    octaviafrayda.com

    Infrastructure domains

    Registrar = 1 API GMBH
    discountreorder.com
    my-support-central.com
    refillmyorders.com

    Registrar = CJSC REGISTRAR R01
    pleasefixdeclines.com
    privatesupportpages.com
    rxprivatesupport.com

    Registrar = KEY-SYSTEMS GMBH
    smartreorders.com
    todayreorder.com

Комментарии:

  1. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:49:28

    RE: RxExpressOnline - rogue pharmacy

    Redirectors:

    ===BIZCN.COM, INC.===

    List of domains/hosts:

    aloiseerica.com
    benitananice.com
    earthasheila.com
    katinamagda.com
    kristicharlot.com
    nessyzahara.com
    tinavivia.com
    zanetakerstin.com
  2. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:50:19

    RE: RxExpressOnline - rogue pharmacy

    ===HTTP.NET INTERNET GMBH===

    List of domains/hosts:

    lindieanabella.com
    lorenadeni.com
    merrillelle.com
    paulitamarysa.com
  3. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:50:48

    RE: RxExpressOnline - rogue pharmacy

    ===NAMESILO, LLC===

    List of domains/hosts:

    damitaerica.com
    deenalaney.com
    dinadonielle.com
    elsinorevivienne.com
    roiscamel.com
  4. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:51:21

    RE: RxExpressOnline - rogue pharmacy

    ===NETLYNX, INC.===

    List of domains/hosts:

    abbielegra.com
    allinamel.com
    gertshelba.com
    kileytana.com
    nataaurel.com
    reenarafa.com
    trixmeridel.com
  5. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:52:14

    RE: RxExpressOnline - rogue pharmacy

    ===PSI-USA, INC. DBA DOMAIN ROBOT / InterNetX, Germany===

    List of domains/hosts:

    ailenearlyne.com
    angedamaris.com
    cinnamonbeatrice.com
    cosettasandi.com
    georginealmeda.com
    hyacinthiazorine.com
    melisandraadrian.com
    poppyshandeigh.com
  6. Изображение пользователя
    • MarkGiles on Пнд 11 Ноя 2013
    • 23:56:29

    RE: RxExpressOnline - rogue pharmacy

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    List of domains/hosts:

    cybillvanny.com
    madeleneulla.com
    malissagwendolen.com
    maurebiddie.com
    octaviafrayda.com
    roannamirabelle.com
    zenaflossy.com
  7. Изображение пользователя
    • c۞g on Срд 13 Ноя 2013
    • 05:20:48

    RxMeds / RxMedications

    Same scam different site template
    http://i.imgur.com/ea721I4.png

    scam payment processors: rxcheckoutnow.com (referenced in OP)
    rxsupportcheckout.com - IP: 192.111.130.133

    List of domains/hosts:

    healthrxshop.ru
    o100.healthrxshop.ru
    edonlinerx.com
    ns1.edonlinerx.com
    ns2.edonlinerx.com
    rxscheap.com
    ns1.rxscheap.com
    ns2.rxscheap.com
    rxsupportcheckout.com
    edprods.com
    ns1.edprods.com
    ns2.edprods.com
    edtrs.com
    ns1.edtrs.com
    ns2.edtrs.com

    edonlinerx.com - whois
    Creation Date: 2012-12-14

    rxscheap.com - whois
    Creation Date: 2012-12-14

    edtrs.com - whois
    Creation Date: 2012-08-21

    ∞ Opto, ergo sum _https://en.wikipedia.org/wiki/And_You_and_I

  8. Изображение пользователя
    • MarkGiles on Сбт 16 Ноя 2013
    • 22:44:33

    RE: RxExpressOnline - rogue pharmacy

    Redirection targets sponsored by NETLYNX

    e100.mypillgenerics.in
    mypillgenerics.in

  9. Изображение пользователя
    • MarkGiles on Вск 17 Ноя 2013
    • 00:31:08

    RE: RxExpressOnline - rogue pharmacy

    Update in the original posting

    Infrastructure domains

    Registrar = 1 API GMBH
    christmasrx.com
    discountreorder.com
    my-support-central.com
    pharmacyreoder.com
    refillmyorders.com

    Registrar = CJSC REGISTRAR R01
    rxcheckoutnow.com
    securerxshopping.com
    christmasrxsupport.com
    pleasefixdeclines.com
    privatesupportpages.com
    rxprivatesupport.com
    rxsupportcenter.com

    Registrar = KEY-SYSTEMS GMBH
    smartreorders.com
    todayreorder.com

    Registrar = ACTIVE REGISTRAR, INC.
    fastordertracking.com

  10. Изображение пользователя
    • MarkGiles on Вск 17 Ноя 2013
    • 01:42:50

    RE: RxExpressOnline - rogue pharmacy

    BIZCN.COM, INC.
    chandalbonita.com
    darellmarianne.com
    ulrikaumekokissie.com

    HTTP.NET INTERNET GMBH
    anestassiadion.com
    electranorry.com
    elvinalorene.com
    margalojenda.com

    NAMESILO, LLC
    tabbiaila.com

    NETLYNX, INC.
    antonettaalina.com
    roxannejaquith.com

    NETLYNX, INC.
    corneliamalinde.com
    iviecorie.com
    pattigustyjo.com

  11. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:42:56

    RE: RxExpressOnline - rogue pharmacy

    ===BIZCN.COM, INC.===

    List of domains/hosts:

    aloiseerica.com
    benitananice.com
    chandalbonita.com
    darellmarianne.com
    earthasheila.com
    katinamagda.com
    kristicharlot.com
    mindybeverley.com
    nessyzahara.com
    tinavivia.com
    ulrikaumekokissie.com
    zanetakerstin.com
  12. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:43:35

    RE: RxExpressOnline - rogue pharmacy

    ===HTTP.NET INTERNET GMBH===

    **RxExpressOnline**

    List of domains/hosts:

    anestassiadion.com
    arlenerosalynd.com
    electranorry.com
    elvinalorene.com
    laurettesuziajay.com
    lindieanabella.com
    lorenadeni.com
    margalojenda.com
    merrillelle.com
    paulitamarysa.com
  13. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:44:13

    RE: RxExpressOnline - rogue pharmacy

    ===NAMESILO, LLC===

    **RxExpressOnline**

    List of domains/hosts:

    damitaerica.com
    deenalaney.com
    dinadonielle.com
    elsinorevivienne.com
    roiscamel.com
    tabbiaila.com
  14. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:44:44

    RE: RxExpressOnline - rogue pharmacy

    ===NETLYNX, INC.===

    **RxExpressOnline**

    List of domains/hosts:

    abbielegra.com
    allinamel.com
    alviracaitrin.com
    antonettaalina.com
    corneliamalinde.com
    gertshelba.com
    kileytana.com
    melisendadarice.com
    mypillgenerics.in
    nataaurel.com
    reenarafa.com
    roxannejaquith.com
    trixmeridel.com
  15. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:45:16

    RE: RxExpressOnline - rogue pharmacy

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    **RxExpressOnline**

    List of domains/hosts:

    ailenearlyne.com
    angedamaris.com
    blairenoelyn.com
    cinnamonbeatrice.com
    cosettasandi.com
    georginealmeda.com
    hyacinthiazorine.com
    iviecorie.com
    melisandraadrian.com
    pattigustyjo.com
    poppyshandeigh.com
  16. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:45:51

    RE: RxExpressOnline - rogue pharmacy

    ===PSI-USA,INC. DBA DOMAIN ROBOT===

    **RxExpressOnline**

    List of domains/hosts:

    euphemiabritta.com
    leighgretal.com
    tedisiobhan.com
  17. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:46:27

    RE: RxExpressOnline - rogue pharmacy

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    **RxExpressOnline**

    List of domains/hosts:

    autocarepharmacy.com
    cybillvanny.com
    madeleneulla.com
    malissagwendolen.com
    maurebiddie.com
    octaviafrayda.com
    oraleeyoshi.com
    roannamirabelle.com
    zenaflossy.com
  18. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:47:21

    RE: RxMedications - rogue pharmacy

    ===BIZCN.COM, INC.===

    **RxMedications**

    List of domains/hosts:

    arlendorri.com
    audryperri.com
    caciliaaeriela.com
    costanzawendy.com
    daffysharron.com
    fredeliajordana.com
    janellaclaude.com
    ladonnaethyl.com
    maryloufelita.com
    missiekayle.com
    nerissaaubree.com
    nissiethelma.com
    rosmundaglenn.com
    tersinalinn.com
  19. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:47:51

    RE: RxMedications - rogue pharmacy

    ===HTTP.NET INTERNET GMBH===

    **RxMedications**

    List of domains/hosts:

    amitymorganica.com
    analieseorelle.com
    audreypooh.com
    carlenwini.com
    christiansybille.com
    harlicheri.com
    helenelindi.com
    laureenmerola.com
    mattipauletta.com
  20. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:48:21

    RE: RxMedications - rogue pharmacy

    ===NAMESILO, LLC===

    **RxMedications**

    List of domains/hosts:

    celiebrita.com
    danyarhodia.com
    fionaermina.com
    jansharai.com
    jenicafelicdad.com
    jessimarion.com
    mathilderanice.com
    talyahroxi.com
  21. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:48:49

    RE: RxMedications - rogue pharmacy

    ===NETLYNX, INC.===

    **RxMedications**

    List of domains/hosts:

    aarenmarsha.com
    ainsleeantoinette.com
    angelikaaubree.com
    anniecaitrin.com
    bernellecarolyne.com
    brittancatarina.com
    corrinaabby.com
    deborasimone.com
    fenelianicholle.com
    florevelma.com
    gladysmatilda.com
    honorlegra.com
    jacquiedomini.com
    jordanelspeth.com
    lettaroxie.com
    lianeclari.com
    lianeclari.com
    lucieleah.com
    migueladorolisa.com
    nanondominica.com
    paulettedorrie.com
    perlarhodie.com
    raniqueberti.com
    remediespharm.in
    teodoraavril.com
    terrikarlen.com
  22. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:49:30

    RE: RxMedications - rogue pharmacy

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    **RxMedications**

    List of domains/hosts:

    amilallyson.com
    bunnyfancie.com
    caylaaugusta.com
    dawnvilma.com
    dienasioux.com
    dulcetobeadah.com
    ellynjobi.com
    enrichettacorylind.com
    hildegaardgennie.com
    ilsemathilda.com
    jerrileerobin.com
    joannestheressa.com
    karylincasie.com
    maddibeecinda.com
    monahstephanie.com
    nellgerrie.com
    nellgerrie.com
    nertcariotta.com
    nissiedalenna.com
    nursingmeds.net
    reevapiper.com
    thaliabertha.com
    vannysherry.com
  23. Изображение пользователя
    • MarkGiles on Пнд 18 Ноя 2013
    • 06:50:05

    RE: RxMedications - rogue pharmacy

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    **RxMedications**

    List of domains/hosts:

    abigaleletizia.com
    adrianeidelle.com
    amyenancyag.com
    aniaharmonie.com
    brinamaritsa.com
    cinnamontamara.com
    eadithmargeaux.com
    evangelinaportia.com
    glenniebettina.com
    isabelitajosephine.com
    jessleoline.com
    kelliclem.com
    malissatessi.com
    margiesean.com
    orianaeulalie.com
    tanyacallida.com
  24. Изображение пользователя
    • MarkGiles on Чтв 21 Ноя 2013
    • 19:20:36

    RE: RxExpressOnline - rogue pharmacy

    ===BIZCN.COM, INC.===

    **RxExpressOnline**
    nonnahlorrin.com

    ===HTTP.NET INTERNET GMBH===

    **RxExpressOnline**
    amandyrenata.com
    fainamaybelle.com

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    **RxExpressOnline**
    christyshandie.com
    ginellepetunia.com

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    **RxExpressOnline**
    brenwindy.com
    fancyqueenie.com
    laceyroanne.com
    melittalynn.com
    rosmundaursa.com

  25. Изображение пользователя
    • MarkGiles on Чтв 21 Ноя 2013
    • 19:20:49

    RE: RxMedications - rogue pharmacy

    ===BIZCN.COM, INC.===

    **RxMedications**
    florenzaclarette.com
    opalineletitia.com

    ===HTTP.NET INTERNET GMBH===

    **RxMedications**
    agmarylynne.com
    arleynerobbi.com
    maureneolympia.com
    siouxiemilly.com

    ===NAMESILO, LLC===

    **RxMedications**
    neysasonja.com

    ===NETLYNX, INC.===

    **RxMedications**
    anabellasarita.com
    francescamarianne.com
    joeannkaye.com

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    **RxMedications**
    drugstorepillpharmacy.net

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    **RxMedications**
    eliecasey.com
    laureldora.com
    marcelalorilyn.com

  26. Изображение пользователя
    • MarkGiles on Срд 27 Ноя 2013
    • 03:33:40

    RE: RxExpressOnline - rogue pharmacy

    ** RXEXPRESSONLINE**
    http://spamtrackers.eu/wiki/index.php/RxExpressOnl...

    ===BIZCN.COM, INC.===

    joyousemylee.com
    filidesiouxie.com

    ===HTTP.NET INTERNET GMBH===

    carmonwaly.com
    lilyadore.com

    ===NAMESILO, LLC===

    keslieamity.com
    shaunamelia.com
    ethelindmarybelle.com
    marjorieshelbi.com
    meridelemera.com

    ===NETLYNX, INC.===

    barbkimmarja.com
    caretabpatients.com
    cathrynlouisette.com
    emmiemorna.com
    torontotab.in

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    claritaminda.com
    ansticerickie.com
    carcareprescription.net
    kassandrabeatrice.com
    othellanellie.com


    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    carolingerry.com
    deanabritte.com
    evangeliapetronia.com
    harribecki.com

  27. Изображение пользователя
    • MarkGiles on Срд 27 Ноя 2013
    • 03:37:48

    RE: RxMedications - rogue pharmacy

    RxMedications
    http://spamtrackers.eu/wiki/index.php/RxMedication...

    ===BIZCN.COM, INC.===

    cathrineelinor.com
    alishalucinda.com

    ===HTTP.NET INTERNET GMBH===

    malenajulianne.com
    nessygerrie.com

    ===NAMESILO, LLC===

    darbyromola.com
    dietpillsmedicine.com
    fionnulareggi.com
    marjawally.com

    ===NAUNET-REG-RIPN===

    drugtorerxassays.ru

    ===NETLYNX, INC.===

    korensuzy.com
    abagaelamil.com
    margaretmarcela.com
    sybilteddi.com

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    bridgetdorthea.com
    carmencitaemiline.com
    noladniren.com

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    floramaddie.com
    jocelingratiana.com
    layneyblythe.com
    nalaniluterrye.com

  28. Изображение пользователя
    • c۞g on Срд 27 Ноя 2013
    • 11:01:49

    RE: RxExpressOnline / RxMedications - rogue pharmacies

    systemrx.com

    ∞ Opto, ergo sum _https://en.wikipedia.org/wiki/And_You_and_I

  29. Изображение пользователя
    • c۞g on Срд 27 Ноя 2013
    • 11:15:50

    HerbalMeds

    Same scam but also offers "herbal remedies"
    http://i.imgur.com/N1u2Qnh.jpg

    HTML title: <title>HerbalMeds</title>

    Footer: Copyright © 2009–2013 Herbal Meds. All rights reserved.

    checkout URL: hXXps://rxsupportcheckout.com/cart/checkout/
    http://i.imgur.com/q4Du9Vx.png

    Registrar: 1 API GMBH - hXXp://www.1api.net
    Creation Date: 21-aug-2012

    herbsinet.com
    currently resides on IP: 66.55.129.206 - DNS@H.E.

    NameServers: (both display site template)
    ns1.herbsinet.com
    ns2.herbsinet.com

    ∞ Opto, ergo sum _https://en.wikipedia.org/wiki/And_You_and_I

  30. Изображение пользователя
    • MarkGiles on Втр 03 Дек 2013
    • 19:29:46

    RE: RxExpressOnline / RxMedications - rogue pharmacies

    RxExpressOnline
    http://spamtrackers.eu/wiki/index.php/RxExpressOnline

    === NETLYNX, INC.===

    kickedmedia.in

    ===BIZCN.COM, INC.===

    arlennesta.com
    emmalynnelucilia.com
    filidesiouxie.com
    jocelynedotty.com
    leanorapauly.com
    nicolacary.com
    sofiacherrita.com
    storegenerics.com

    ===HTTP.NET INTERNET GMBH===

    carmonwaly.com
    dalorisharley.com
    lilyadore.com
    liralisabeth.com
    marriagepills.com
    mathildelinell.com
    riannongavrielle.com

    ===Key-Systems GmbH===

    medicarepillpatients.eu

    ===NAMESILO, LLC===

    desiraebendite.com
    ethelindmarybelle.com
    marjorieshelbi.com
    meridelemera.com
    sheereejoete.com
    susettelinda.com
    viagrafood.com

    ===NETLYNX, INC.===

    barbkimmarja.com
    caretabpatients.com
    carrissaianthe.com
    cathrynlouisette.com
    corenajuditha.com
    dianstephana.com
    emmiemorna.com
    meagancookie.com
    torontotab.in

    ===PSI-USA, INC. DBA DOMAIN ROBOT===

    albertinadot.com
    ansticerickie.com
    blakeleenicoli.com
    carcareprescription.net
    cathrynedith.com
    daveenbert.com
    dorettebrittani.com
    hermionerianon.com
    jandyshelley.com
    janetcamilla.com
    jehannafernande.com
    joelynnconstanta.com
    kassandrabeatrice.com
    lettipapagena.com
    libbycosetta.com
    othellanellie.com

    ===TRUNKOZ TECHNOLOGIES PVT LTD.===

    carolingerry.com
    deanabritte.com
    effiekarlotte.com
    evangeliapetronia.com
    gretavanessa.com
    harribecki.com
    verlacorabel.com