ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Yambo Financials

Evidence Menu:

Yambo Financials Index


Country: Ukraine
State:
Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank."


Yambo Financials SBL Listings History
Current SBL Listings
Archived SBL Listings

MyCanadianPharmacy Corp.


CANADAPHARM.INFO.
CANADAPHARMSTORE.INFO.
CANADAPILLS.NET.
CANADRUGS.NET.
CANAMEDICAL.INFO.
CANAMEDS.INFO.
CANAPILL.COM.
CANDRUGPORTAL.COM.
CANDRUGS.BIZ.
CANPHARMACY.INFO.
CAVIAR2006.COM.
DRUGPORTAL.INFO.
INETMEDS.INFO.
LEGALMEDICATIONS.INFO.
MYPHARMACYPORTAL.COM.
MYPHARMACYREFILL.COM.
MYPHARMACYREFILLS.COM.
MYPHARMAPORTAL.COM.
PHARMACYSOURCE.INFO.
PHARMAINCANADA.COM.
PHARMAPORTAL.INFO.
PHARMASTORE.INFO.

"Natural" DNS points to here:

$ host candrugs.biz
candrugs.biz has address 193.165.178.164

But an HTTP GET at shows the very same files here:

--- reading URL http://candrugs.biz/p/images/license.jpg
--- contacting host candrugs.biz [207.226.167.66] on port 80

HTTP/1.1 200 OK
Date: Sat, 18 Feb 2006 x:x:x GMT
Server: Apache/2.0.53 (Fedora)
Last-Modified: Wed, 22 Jun 2005 10:59:59 GMT
ETag: "8541-32d09-784749c0"
Accept-Ranges: bytes
Content-Length: 208137
Connection: close
Content-Type: image/jpeg

ÿØÿàí¤x^ ûwRºeýÂþ]ÿWæÜ7åæð&frac;&frac;øÿ&frac;0XrÍ&frac;~¤ÿç«øáÏ÷cqP<±I EQ¦éäٝuùP-êÛAûÖÙG¡¤©&áèû
[snip]

http://groups.google.com/groups?q=%221592+Wilson+Avenue%22&start=0&hl=en&filter=0

MyCanadianPharmacy Corp.
592 Wilson Avenue
Toronto, ON M3L 1A6

State of Ontario
Department of Health Services
Food and Drug Branch
Drug Reselling License #02838940

Issue Date: 02/18/2001
Expiration Date: 02/18/2011






http://www.technology-corner.com/20051023.shtml

Canada must be larger than I thought

I received (at the Technology Corner address) this week an offer for various medicines at "My Canadian Pharmacy". But, as it turned out, My Canadian Pharmacy is in Sofia, Bulgaria. Maybe. That's where the domain registrar says the domain holder is located, but that may not be the case.

Click the image for a larger view.

That's the problem with spam. If you click a link that claims to be from Canada, it might really go to a website in Bulgaria or China. And the owner of the website might actually be in Viet Nam, Australia, the United States, or Libya.

You're foolish if you click on any link in any spam because the spam is, by definition, a lie from the outset. I followed the link (which may make me, by definition, foolish) but I wasn't planning to buy anything. I wanted to find out something about the outfit.

What do you receive if you place an order with "My Canadian Pharmacy"? It's anybody's guess. You might receive a generic equivalent drug, but  because most of the drugs these folks advertise have no generic equivalents  you'll probably receive a placebo that's designed to look like the medication you ordered.

If you're lucky, you'll receive a placebo that's in a counterfeit package. But you might also receive a forged medication that's stronger or weaker than the real product. Or you might receive something that's truly dangerous. If you're taking the medication for something serious, any deviation from the real thing would be dangerous.

What else might happen? Identity theft is a possibility when you're dealing with spammers. Additionally, the website could be booby trapped with spyware that exploits a browser bug. There's no way to know. As far as I'm concerned, spam gets deleted without question.
For your amusement.
(VIEW LARGER IMAGES BY CLICKING THE SMALL IMAGES)
MyCanadianPharmacy claims accreditation, but ...
... if you click any of the logos, you're not taken to VeriSign or to the Better Business Bureau. You may think that's where you are, but open the larger version of the image at the left and notice the URL in the title bar.
The "About Us" section tells about the "pharmacy" and about the doctors. In both cases, the text is badly written.


The site says "Dr. Jack Poppins studied reanimatology at Ontario Medical State University in 1969." Perform a Google search for "Ontario Medical State University" and you'll find exactly 2 references: Both are on the MyCanadianPharmacy website. What the writer seemed not to know is that Canada has provinces, not states.

The site also says "Dr. Paul Newman graduated from the faculty of psychiatry of the University of Ottawa." Better guess this time. The University of Ottawa exists and even has a medical school.


This document is represented to be the organization's "Drug Reselling Licence" but it lists the state of Ontario as the issuing authority. A Google search for +"ontario health and safety code" +"division 104" found nothing. "The license is required by law to immediately notify the Department of Health Services," but the Oxford Canadian Dictionary reveals that Canadian English makes a distinction between "license" and "licensee", so "license" is a spelling error. A search for "Department of Health Services" turns up no references in Ontario, but a search for the "Ministry of Health Services" does. And finally, the form uses both "licence" and "license". Both spellings are accepted in Canada, but not within a single document.


Where exactly is 1592 Wilson Ave, Toronto, Ontario? The website operator selected a believable location. It seems to be an address in the Sheridan Shopping Mall, just off highway 401 (a major road) and not far from the airport.

Do you think "MyCanadianPharmacy", licensed by the "state" of Ontario, and operated by a "doctor" who attended a medical school that doesn't exist, is located here?

It may be, but the operators have already stretched the truth just a little too far for my comfort .

I asked a friend who lives in Toronto about the address. "What a ratty part of town! Just north of there is Jane and Finch, the really scary part of the city. The address they give seems to be in a strip mall right beside the Sheridan Mall. Stores with adjacent addresses include a video store, a tattoo place, and a Jamaican savings and loan. I'm guessing the address they give is a cheap office above one of those stores."
But wait, there's more!

Later in the day, I heard from other Toronto residents. Here's what I learned:

* You're correct that Ontario Medical State University does not exist, and never has.
* The only medical schools in Ontario are at McMaster U. (in Hamilton), Queen's U. (in Kingston), the University of Western Ontario (in London), the University of Toronto, the U. of Ottawa, and the Northern Ontario School of Medicine, which is a brand-new joint venture between universities in Sudbury and Thunder Bay.
* Ontario does have a Ministry of Health, not a Department of Health. Ontario's ministries used to be referred to as departments, but that's outmoded usage.
* Here's something that those characters overlook: in Ontario, you can't operate a pharmacy unless you're a pharmacist.
* Dr. Poppins (wonder if he thinks a spoonful of sugar helps the medicine go down in the most delightful way?) claims to be the founder of the Canadian International Pharmacy Association. Turns out that there is such a body. The outfit claims to certify online pharmacies. MyCanadianPharmacy isn't listed.
* The Better Business Bureau in Kitchener, Ontario, has checked into complaints related to this outfit. The investigations were both "closed as unpursuable. Company cannot be located. Mail returned and phone disconnected." See here.
* They don't even get their postal code right: the code for 1592 is M3L 1A3. The code they give, ending in 1A6, seems to link up to the beer store at 1718 Wilson Avenue.
* As a practicing Ontario physician, I can assure you there's no Ontario Medical State University.
* The "certificate" has a watermark logo from Ontario County. Interestingly, there used to be an Ontario county in the province of Ontario until it was adsorbed into the Regional Municipality of Durham in 1972.




Related URLs

Original article at technology-corner.com is 404


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK6271/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy