recursal/Fanatic-Fandom huggingface dataset:
GKG list

Background information on this registrar headquartered in Texas - GKG

Each heading is a link to the evidence of fraud. This evidence enables the registrar to take immediate action to suspend their service contract for the provision of the domain name, which breaks the terms of the Registrar Accreditation Agreement with ICANN. These were found to be live when loaded on August 18, 2019.

**Awaiting action**

## Canadian Drugstore

```
canadian-healthcare-24h.com
canadian-pharmacy-drugstore.com
canadianmeds-24.com
mycanadianrxmeds.com
secure-rx-shop.com
topcanadianshop.com

```

## CanadianPharmacy

```
canadianrxmedsonline.com
medsoffers.net

```

## My Canadian Pharmacy

```
my-canadianpharmacy.com

```

## Online Pharmacy

```
24-7-drugstore.com
247drugsshop.com
247worldstorerxc.com
247worldstorerxd.com
247worldstorerxn.com
247worldstorerxs.com
247worldstorewrxe.com
24h-drugsshop.com
24h-drugsstore.com
24x7-healthstore-online.com
365worldstorerxc.com
365worldstorerxd.com
365worldstorerxm.com
365worldstorerxn.com
365worldstorerxs.com
365worldstorewrxe.com
bestcanadadrugs.net
bestmedsonline24-7.com
bestmedsonline24h.com
bestmedsonline24x7.com
buydrugs365.com
ca-green-store.com
canadameds-24.com
canadiandrugs24.com
cmed24.com
de-online-apotheke.com
deliveryspot.net
eu-medshop.com
euro-pharma-24h.com
euro-pharma24h.com
euro-pharmstore24h.com
farmacia-online-italia.com
heals-rx.com
healthbonuses-24.com
i24x7pills.com
mds-top.com
med-shop24h.com
med-shop24x7.com
med-shop365.com
medmarket24-7.com
medmarket247.com
medmarket24x7.com
medsmarket247.com
medsprostore.com
medstore-24h.com
mens-active.com
mens-ed-solution.com
mobilereorders.com
my-online-pillsstore.com
my-reorder.com
myhealthonline247.com
myhealthonline24x7.com
online-rx-shop.com
online-secure-shop.com
pills24x7.com
rx-medis.com
rxcanadianmarket.com
rxstore-24h.com
rxstore-365.com
rxstore-365d.com
secure-rx-market.com
secure-rx-market.net
secure-rx-shop.net
sundayhealth.net
topcanadadrugs.net
topdrugshop24-7.com
topmedsonline24h.com
toppharmastore.com
topqualitydrugs.com
trustpharmamall.com
trustpharmastore.com
trustpharmshop.com
trustpharmstore.com

```

# Where to send abuse complaints

* Submit a ticket to abuse@gkg.net providing links to the comprehensive evidence of fraud.
35 TECHNOLOGY list

Click the heading for evidence of fraud. All of these domains have an invalid address or phone number for the registrant.

## The Doctors

```
ctlssf.com
gvcetv.com
gyonbe.com
hfhdht.com
oxndds.com
pymke.com
zybyde.com

```

## The Doctors

**Already Suspended:**

```
evvzs.net (suspended)
msaves.net (suspended)
msxeoe.net (suspended)
orccrn.net (suspended)
suuaem.net (suspended)
uocrx.net (suspended)
6ikcnz.net (suspended)
gmil1s.net (suspended)
ha1xso.net (suspended)
iprj2t.net (suspended)
ree6z6.net (suspended)
rk74h4.net (suspended)
1ij5dy.net (suspended)
28ziug.net (suspended)
3c0g3e.net (suspended)
3xg8bk.net (suspended)
4ctdei.net (suspended)
4k3cj3.net (suspended)
6ysjuy.net (suspended)
a1743f.net (suspended)
a7787t.net (suspended)
ad8lyn.net (suspended)
ajjofh.net (suspended)
b2vm8m.net (suspended)
blz5ns.net (suspended)
com-0n5.net (suspended)
com-6r0.net (suspended)
com-c63.net (suspended)
com-g1b.net (suspended)
com-m23.net (suspended)
com-0i6.net (suspended)
com-2y8.net (suspended)
com-41x.net (suspended)
com-43p.net (suspended)
com-5y2.net (suspended)
com-67t.net (suspended)
com-c0i.net (suspended)
com-js2.net (suspended)
com-q6g.net (suspended)
com-tqj.net (suspended)
com-x21.net (suspended)
com-xcy.net (suspended)
com-yrr.net (suspended)
com-122.net (suspended)
d1sobz.net (suspended)
dh0ohd.net (suspended)
egbeob.net (suspended)
eta430.net (suspended)
f7scut.net (suspended)
fel8vx.net (suspended)
g4tski.net (suspended)
gncbxe.net (suspended)
h6yzbz.net (suspended)
h8fmse.net (suspended)
jbgc91.net (suspended)
k0ko25.net (suspended)
ko9zsf.net (suspended)
lmzlur.net (suspended)
nkdufx.net (suspended)
oh6b46.net (suspended)
p57rri.net (suspended)
tjdxfj.net (suspended)
turg69.net (suspended)
u0efjp.net (suspended)
uvd9ly.net (suspended)
v1oy6d.net (suspended)

```

## Complaint process

Mail to icann*@*35.cn or mail to yuhx*@*35.cn
Int.Pharmacy

## Description

This purports to be a legitimate pharmacy.

However, it is widely believed to be a credit card theft scam - fronted by a fake pharmacy retailer.

The whole site is full of false pretenses.

Distinguishing features.

The help desk phone number is +1 (844) 241-4210 which is the same as the number for MedMarket.

The web site title is Bestsellers, which is the same as the title for MedMarket.

The web page icon is

The secure checkout page resides at safeserviceonline.com registered with PDR Ltd. doing business as PublicDomainRegistry.com

It was registered on Creation Date: 2016-08-18.

## False Claims

Typically fraud pharmacies try to look legitimate by posting images of pharmacy approval organizations. It is obvious that they are fake. On legitimate sited these images will link though to the relevant authority web site.

### Fake registration

Int.Pharmacy uses identity theft or fake identity generators to register its sites.

### Not FDA approved

Though it posts this image, there is no link through to any FDA site.

### Not IPAC approved

Though it posts this image, there is no link through to any IPAC site.

### Not USA Quality approved

Though it posts this image, there is no link through to any USA Quality site.

### Not CIPA Rx approved

Though it posts this image, there is no link through to any CPA site.

## Sample sites and registrars sponsoring them

### RU-CENTER

```
apotheke-de.biz
clubhealthonline.com
drugscheckout.com
pharmapassport.biz
pillwebstore.com

```

### Hosting Concepts

```
apexonlinepharmacy.net
carestore24.com
intcareshop.com
intercaremarket.com
intmarket365.com
intmarketonline.com
intshop24.com
intshoponline.com
intstore24.com
intstore365.com
intstoreonline.com
topdiscountclub.com
topintstore.com
updiscount24.com

```

### PDR Ltd

```
onediscount24.top

```

### Epik, Inc.

```
rx-direct.com

```

## How to Report this Spam

Send complaints to the abuse desk at each registrar.
LogicBoxes list

## LogicBoxes fraud domains

These domains are part of the EvaPharmacy fraud run from Russia.

**Suspended by the Registrar**

## Canadian Health&Care Mall

```
onlineherbsprogram.com (suspended)
excellentpharmgroup.com (suspended)
fsgjaoni.com (suspended)
medicalherbquality.com (suspended)
medicinalcareinc.com (suspended)
perfectcuringmarket.com (suspended)
theherbalelement.com (suspended)
vpvtioqa.com (suspended)

```

## CanadianPharmacy

```
generichotoutlet.com (suspended)
hotmedicativeshop.com (suspended)

```

## International Legal RX

```
thepharmacyshoponline.com (suspended)

```

## Men's Health

```
medicatingsafedeal.com (suspended)
myhealingservice.com (suspended)
healingfirstprogram.com (suspended)
biologicalrxprogram.com (suspended)
funeralhomewelnessmall.com (suspended)
thehealthdeal.com (suspended)
theorganicinc.com (suspended)

```

## My Canadian Pharmacy

```
elynkonstanze.com (suspended)

```

## Toronto Drugstore

```
dealsandalliances.com (suspended)
fastrxassist.com (suspended)

```
Suspending an EPP name server domain

Note: While Verisign has a special version of EPP in place, the procedures below also apply to .com and .net domains. **Placing a domain on Client Hold will not affect the nameserver's ability to function.**

## To suspend the name server effectively, the registrar must take the following steps in this order:

### 1. Change the name server's address record to a nonroutable black hole address

A black hole address is one such as 0.0.0.0 or 61.61.61.61.

This will ensure that in all cases, even after the domain has been suspended, the name server cannot resolve at the registry.

### 2. Ensure that the address record for the name server cannot be changed back

This may be done either automatically or by the domain's administrator, by applying the following status to the domain:

```
 ClientUpdateProhibited

```

If you are not able to apply this status to the domain at the registry for technical reasons, please use your backoffice application to prevent your customer from modifying the IP address either manually or automatically.

*You may need to act quickly in adding this status, as many nameservers are now fast-flux domains, and it may be possible that the IP address will be changed before you can apply this status.*

### 3. Prevent the name server's domain from leaving for an abuse-friendly registrar

It is important to assure that the domain can neither be deleted nor transferred. This may be accomplished by applying **both** of the following statuses

```
 ClientDeleteProhibited
 ClientTransferProhibited

```

If you are not able to apply these statuses to the domain at the registry level for technical reasons, please use your backoffice application to prevent your customer from transferring the domain or deleting it.

*If you do not succeed in suspending the domain and preventing its transfer or deletion to another registrar, you will be seen as supporting the illicit organization behind the domain, and may be held liable for your complicit inaction.*

### 4. Ensure that the domain does not resolve in the zone

This may be accomplished by applying the status:

```
 ClientHold

```

### 5. Verify that your settings have taken effect

Note that you will not be able to verify by ping or host command for several hours, whether or not the changes have fully propagated. Therefore, please check back the following day to ensure that:

* the name server does not resolve at the registry (use the host command)
* still has non-routable black hole IP addresses
* has not been modified from the settings you have applied

To view an example by GANDI of a correct suspension see: Correct suspensions.
Perth

* Narrow
* Wide
* Promo
* Memories

**Perth** is the 127th city in *Gummy Drop!*.

## Story

**Introduction:**

You arrived in Perth with Gummy Guys by jeep to rebuild the monuments.

**Epilogue:**

After you built all the monuments, you will travel by ferryboat to Warsaw.

## Souvenir symbols

* Deckchair and Parasol
* Koala
* Kangaroo

## Levels

This city contains 173 levels, consisting of 120 normal levels, 37 side-levels, and 12 Helping Hand levels.

### Mystery Boxes

 2

## Trivia

* The koala souvenir also appears in Melbourne.
* The deckchair and parasol souvenir also appears in Port Louis, Salvador and Water Balloon Fight.
* The Kangaroo souvenir also appears in Vienna.
R01 RU list CP

## CanadianPharmacy

```
ajkqalji.ru
akmtsfii.ru
assistancedata.ru
bestcurativeassist.ru
bestorganicreward.ru
bestremedialsupply.ru
canadianremedyvalue.ru
ctrhzpzm.ru
curativehotprogram.ru
curativeonlinedeal.ru
curingfirsttrade.ru
curinghotpurchase.ru
curingtabsservice.ru
familyhealthassist.ru
fastgenericwebmart.ru
fastorganicinc.ru
fastpharmacyinc.ru
fastrxtrade.ru
firstcarewebmart.ru
genericglobaltrade.ru
globalherbstrade.ru
globalmedicaremall.ru
globalwelnessreward.ru
goodcaredeal.ru
goodherbsoutlet.ru
goodpillsmart.ru
gucmiqnw.ru
guidetohealth.ru
healingcarestore.ru
healingmedscompany.ru
herbalonlineoutlet.ru
herbalremedyservice.ru
homemedicalreward.ru
hotdrugsstore.ru
hotmedicatingmarket.ru
hotnaturalmart.ru
hotremedysale.ru
hottreatmenttrade.ru
idkdhtca.ru
klinccbo.ru
magichealingelement.ru
medicativecareinc.ru
medicativerxdeal.ru
medicinalherbvalue.ru
medicinalmedsstore.ru
mghsuvep.ru
mtevxfen.ru
myhealingservices.ru
myherbinvestment.ru
naturalbestquality.ru
naturalprivatemall.ru
newmedicamentsupply.ru
newpharmacyoutlet.ru
nfyydfio.ru
nsctykou.ru
onlinecuringstore.ru
onlinedrugmall.ru
organicbestdeal.ru
organiccarewebmart.ru
organiconlineshoponline.ru
organictableteshop.ru
perfecthealthsale.ru
privategenericvalue.ru
privateherbalreward.ru
privaterxdeal.ru
puredrugsinvestment.ru
pureremedyvalue.ru
remedialsafestore.ru
remedialtabletdeal.ru
riwmqgkd.ru
rtftbaul.ru
safeherbsinc.ru
securedrugstore.ru
smartmedicalinc.ru
smartpharmelement.ru
srbpcjpz.ru
tcegyevr.ru
thecareelement.ru
thehealthcarestoreonline.ru
togatyub.ru
trustedpillreward.ru
trustedremedyeshop.ru
vxflogtp.ru
wiwlubab.ru
wkskordp.ru
xehvozop.ru
xuzqcqle.ru
ybebadjx.ru
yourdrugtrade.ru
yourmedicalstore.ru
yourmedicativedeal.ru
yourremedialcompany.ru
yrebtfpf.ru
zcgqnete.ru

```
R01 RU list MH

## Men Health

```
bestmedicalcompany.ru
biologicalherbsinc.ru
canadianpharminc.ru
canadianrxstore.ru
curingonlinegroup.ru
curingtrustedtrade.ru
excellentrxprogram.ru
familyhealingsale.ru
familyremedygroup.ru
fastcuringprogram.ru
fastmedicatingmarts.ru
firstcurativedeal.ru
genericsmartgroup.ru
generictabsprogram.ru
gooddrugsupply.ru
goodgenericgroup.ru
healingfastservice.ru
homeremedyservice.ru
hotmedicinalsupply.ru
magicnaturalmall.ru
magicpillservices.ru
medicalfastprogram.ru
medicalmedsservices.ru
medicatingpharminc.ru
medicativecareeshop.ru
myherbsservices.ru
mymedicatingtrade.ru
mytreatmentservices.ru
naturalsmartdeal.ru
organichealthtrade.ru
organicremedyvalue.ru
organicsmartinc.ru
privaterxsupply.ru
remedialpillssale.ru
remedialrxvalue.ru
safecuringpurchase.ru
safedrugssupply.ru
secureaidassist.ru
securedrugsquality.ru
securepillsquality.ru
smartherbtrade.ru
thebiologicalmart.ru
thecanadiantrade.ru
theremedyservice.ru
thetrustedpillsassist.ru
youraidquality.ru
yourgenericsquality.ru
yourmedicationgroup.ru

```
InterNetworX

Click on headings for evidence of fraud

* + All suspended\*\*

## Canadian Health&Care Mall

```
asalesgrowth.be
firsthealingprogram.be
globalpillprogram.eu
globalpillsmarket.eu
goodcanadianbargain.be
medicalglobaloutlet.be
newmedicalinc.eu
newtreatmentreward.eu
safenaturalquality.be

```

## Canadian Neighbor Pharmacy

```
genericbestservices.eu
luckygenericassist.be

```

## CanadianPharmacy

```
curingprivatereward.eu
fastherbinvestment.eu
medicalsafetrade.be
privatewelnessinc.eu
theorganiconline.be
trustedpharmmart.be

```

## My Canadian Pharmacy

```
medicalglobalvalue.be

```

## Toronto Drugstore

```
bestmedicareassist.eu

```
Namecheap list

Click on any heading for evidence of fraud.

Examples are shown on the right. These were screen captured, using a proxy service to avoid their IP blocking of law enforcement and registrar IP addresses. These may serve other fraud sites at other times, or from other geographies. But any site served is still an illegal fraud pharmacy.

## -Canadian-Pharmacy-

```
canadianphrmc.com
cndpharmacy.com

```

## Canadian\_Health&Care\_Mall

```
canadianhnc.com

```

## CanadianPharmacy

```
cndphrmc.com

```

## Pharmacy Express

```
phrmexpress.com

```

# ALREADY SUSPENDED

Tested and verified from an unblocked proxy on May 21, 2017

## Toronto\_Drugstore

```
drugs416.com
drugs905.com
meds905.com

```
NAUNET List

Click the heading for evidence of fraud.

## RxExpressOnline

```
mypharmacymedicare.ru

```

## The Doctors

```
anocdiser.ru
caosiundre.ru
casniojunew.ru
cjnisugnser.ru
cjnsoiuenrfser.ru
cjsoijuecse.ru
ckjnoasgse.ru
ckjsiougnse.ru
ckmaosig.ru
cmosigewfs.ru
cmosingser.ru
cnisungec.ru
cnosigsecs.ru
cojmnsoeifcse.ru
cosigescsed.ru
indiojuna.ru
iybgsecse.ru
jcnisjugnserd.ru
jincodise.ru
jkcnoisjug.ru
jncisujecs.ru
jndijsnsec.ru
jnijsunbec.ru
jnijusecs.ru
junciusec.ru
kacodeac.ru
kcmoasidecse.ru
kcoiseca.ru
kfaidsec.ru
kfnoisjnvs.ru
kjncisouj.ru
kjncoijsugs.ru
kjncosiu.ru
kmcoisasdr.ru
kmcosige.ru
knaocsec.ru
kodamce.ru
kosidgxr.ru
lkcsoise.ru
mocisgxe.ru
nciosujec.ru
njisjungsec.ru
sjncijuagse.ru
skcniugse.ru
skociefser.ru
uesgwecs.ru
unigsecse.ru
vmoigsese.ru

```

## Complaint process

Mail to dom-reg*@*naunet.ru and response*@*cert-gib.ru
Openprovider

# Description of the Registrar

Openprovider is a trading name of Hosting Concepts B.V.

Arno Vis, CEO of Openprovider

Openprovider is one of the leading wholesale Internet Service Providers. It offers in a single completely automated system the following multiple Internet products: more than 400 ccTLDs, more than 600 gTLDs including all new gTLDs, DNS management, a large range of SSL certificates, Plesk and Virtuozzo licenses, spam filters and more. Our self-service control panel and API allow our customers to manage their products 24/7 by a clear and simple method. Openprovider has an international and professional team that focus on helping our customers to save money and time by providing quality services and products.

# Anti-Crime Position

## Official Position

Contact support

A complaint about a domain name

If you have a complaint about a domain registered through Openprovider, please contact the domain holder or administrative contact first. You can find these contact details in the domain’s whois data. If your complaint is not followed up, you can contact us. Within two days, you will receive our answer on your e-mail. Please refer to our Knowledge Base for more information about how Openprovider deals with complaints.

E-mail: abuse@openprovider.nl

## Actual Behavior

Some action has been taken on complaints of sponsoring illegal domains in May 2018. But this is a typical response:

We have informed the resellers about your complaint and he will investigate this issue.

Please, be aware that we, as a domain-only provider and not providing any content, hosting or e-mail services, are not in a position to judge the content of a website. For that reason, our normal procedure is that we inform our reseller and the domain holder, but will not suspend the domain names without an official WIPO decision or court order.

Unfortunately we cannot guarantee that our reseller will respond to the complainant.

# Sample illegal domains

**Click on each heading to see the evidence of fraud**

These were alive when last tested on February 1 2021

## Canadian Neighbor Pharmacy

```
neighbor-pharm-canada.com

```

# Additional Contact Information

## Postal address

```
Kipstraat 3c
3011RR Rotterdam
The Netherlands

```

## Telephone and FAX

```
Support Number:+31 (0)10 4482299
Fax: +31 (0)10 2440250

```

## Related information

Openprovider is a trading name of Hosting Concepts B.V.

Arno Vis is the CEO of Openprovider.

# Sources for this article

## Corporate

* https://www.openprovider.com/openprovider/contact-support/
* https://www.internic.net/registrars/registrar-1647.html
Naunet

# Description of the Registrar

It was established in 2005 to provide services in the field of information and communication technologies. The main specialization of "Naunet SP" is the production and delivery of integrated services to both end users and operators. The main objective of the company - is to ensure customers and partners effective tools for the management and development of their own business on the basis of modern information and communication technologies.

"Naunet SP" is a company that provides a full range of provision of services necessary for the improvement and development of our clients' businesses using Internet technologies. We do our best to provide high stability, reliability and good quality of service.

"Naunet JV" develops partnership programs . Thus, from November 2006 to actively develop partnerships in the registration of domain names offered by hosting reseller program, there is a regional program of the project SIPNAME.
"Coordination Center for TLD"

The establishment of the Coordination Center for TLD in 2001 was a new milestone in the development of domain RU. In 2002, the Coordinating Center transferred the authority to develop rules for registration of domain names in RU, accreditation of registrars and the development of future projects related to the development of the Russian national domain. In order to preserve the stability of the domain RU to RIPN entrusted with the functions of the Technical Center for TLD RU.
Netlynx list

**Suspended by the registrar**

## Canadian Health&Care Mall

```
canadiansafeservice.in (suspended)
magicherbsmall.in (suspended)
curinghotpurchase.in (suspended)
lbjcploh.in (suspended)
lpxrcbno.in (suspended)
newbiologicalreward.in (suspended)
organicherbsupply.in (suspended)
pfapwier.in (suspended)
remedialmedsstore.in (suspended)
safeherbalreward.in (suspended)
wnywvbmh.in (suspended)
wojeagkt.in (suspended)
curinghotelement.in (suspended)
medicinalhotdeal.in (suspended)
canadiandrugsmart.in (suspended)
goodaidmart.in (suspended)
goodnaturalinc.in (suspended)
herbalglobalquality.in (suspended)
ajfbxufw.in (suspended)
goodcareexchange.com  (suspended)
magicnaturalmart.com (suspended)
onlineorganiceshop.in (suspended)

```

## Canadian Neighbor Pharmacy

```
firstherbdeal.in (suspended)

```

## CanadianPharmacy

```
hotdrugshop.in (suspended)
excellentpillssale.in (suspended)
luckycureeshop.in (suspended)
mypharmservices.in (suspended)
rtcgzefr.in (suspended)
onlinepillinc.in (suspended)

```

## Toronto Drugstore

```
bestmedicatinggroup.in (suspended)

```

## US Drugs

```
newwelnessvalue.in (suspended)

```

# Where to send abuse complaints

## By email

support*@*netlynx*.*com

abuse*@*netlynx*.*com

## By contact page

http://www.netlynx.com/contact.htm

Report false registration details

http://www.netlynx.in/support/report-false-whois.php
TUCOWS frauds

Every example of a Malaysian 16th Anniversary Promotional Event fraud can be easily proven by looking for the fraud title on the page.

LIVE SITE Malaysian fraud Lakeville Tours on TUCOWScancelled Malaysian fraud Prima Bay Tours on TUCOWScanceled Malaysian fraud Sea Queen Travel on TUCOWScanceled Malaysian fraud Sea Queen / Awesome Fly Tours on TUCOWScanceled Malaysian fraud Kl Compass Travel on TUCOWScanceled Malaysian fraud Bounty Star Tour on TUCOWScanceled Malaysian Fraud De Royale Tours on TUCOWScanceled Malaysian fraud Dorsett Tours on TUCOWScanceled Malaysian fraud Gorgeous Tourism on TUCOWS
More examples can be seen at TUCOWS\_frauds\_2
Paknice.com

https://paknice.com/blogs/139/Paknice-is-a-Social-Network-Platforms

https://paknice.com/ is a Social Media Platform

Share your memories,

connect with others,

make new friends On Web.Paknice

Discover new people

create new connections and make new friends

Explore the latest articles

Discover new products

Discover new funding requests

Discover new offers

Discover new jobs offers

The great place to discuss topics with other users

Live Chat & audio msg and call your ad friends

Discover new movies
Site Index

* Different types of spam
* Spammer Economy and Infrastructure
* Understanding the Whois database
* Protecting Yourself
* Anti-Spam Software
* Glossary
* Reporting Spam

* Registrar\_Advice
* Anti-Spam Organizations
* Registrar/Registry Reports
* Known major spammers
* How spammers spam
* Reporting and terminating botnets

* RxExpressOnline
* RxMedications
* R01\_RU
* Complainterator
* Registrar
* My Canadian Pharmacy
* Canadian Health&Care Mall
* Todaynic

2. RxExpressOnline
3. Canadian Health&Care Mall
4. My Canadian Pharmacy
5. RxMedications
6. Canadian Pharmacy
7. Euro Software
8. Pharmacy Express
9. Complainterator
Vincent Chan

Top 10 ROKSO listed spammer

See ED Choice and Discount Pharmacy

See the evidence on him in his Spamhaus record

His sites are characterized by link obfuscation in JavaScript and site redirections. He is also responsible for the majority of the Geocities Spam being sent in recent years.

His name servers are often set up in two pairs, using Beijing Innovative Linkage Technology's name servers in one pair, and his own in the second pair. Examples to illustrate -

* NS1.DNS.COM.CN
* NS2.DNS.COM.CN
* NS3.AAAPHARM.ORG
* NS4.AAAPHARM.ORG

and

* NS1.DNS.COM.CN
* NS2.DNS.COM.CN
* NS3.RXASAP.ORG
* NS4.RXASAP.ORG

An alternative naming convention is listed under ED Choice

## Contact Details

From http://www.commandprompt.com/community/consultants/view/1830

```
Company Name: Asia(HKSAR), Yoric Network Limited
URL: www.yoric.net
Country: Hong Kong
Address: Room 802, Alliance Building, 133 Connaught Rd
City: Central
Primary Contact: **Vincent Chan** (RHCE)
Email: info@yoric.net
Company Phone: 852 2391 4685
Company Fax: 852 2142 3022

```

## Other spammed site types

* African Hoodia Gordonii sample (same name servers)
* OEM Soft Store sample (same name servers)
* Pills Direct sample (same name servers)
* Discount Pharmacy
* Replica Classics
* ED Choice
* ED Express
Port 43 Whois service&action=edit

The Whois servers provide results in ASCII.

These can be queried using any number of free whois clients, and use specific whois query commands.

**Query Controls**

Whois query controls fall into two categories: those that specify the type of field and those that modify the interpretation of the input or determine the type of output to provide.

**Object Type Control**
The following keywords restrict a search to a specific object type:

 HOst
 Contact
 Registrar

**By default, if no object type control is specified, then the Name field of the Domain object is searched.**

# Additional reading

http://www.icann.org/tlds/agreements/info/appendix-05-08dec06.htm
Whois proxy

Spammers and scammers will often make use of a proxy: someone that is hired to act on their behalf.

In the case of domain name registration this can be for several reasons notably:

* **Need of a physical country-specific location**: This is because some ccTLDS (ex. .eu, .fr) require a valid physical address and telephone number in the particular geographical region.

* **Need of real contact information**: The CAN-SPAM act stipulates that commercial email must "... *include your valid physical postal address*.". ICANN regulations also require that domain name contacts must be able to be contacted.

In such cases, hiring a proxy will enable the spammer/scammer to be technically compliant. The downside is that in such cases, the person who may be held liable is the proxy himself or herself.

While proxies (they perfer to be referred to as 'agents') may allow their personal information to be used by spammers/scammers, they are often unaware of the ramifications of such an act. Notably, that they are subsequently liable for the use of domains registered in their name, and activities thereof.

**Alerting/educating the proxies as to their liability in such matters will result in their withdrawing of support of such operations**, as they are often unaware of the extent to which they are accepting the legal risk for someone else's actions. Registrars may be useful in such an action, **as they have an interest in obtaining the information of the person who 'hired' the proxy**.

Consequently, registrars can cooperate with the proxies to both obtain their approval (since the proxy is the legal owner of the domains) to suspend/delete the domains, as well as locate the person or persons who are behind the operation. There is evidence of such an operation (in French) having occurred:

```
*Bonjour*,

*Je suis Francois Panassac gérant de la société Creascripts. Des noms*
*de domaine litigieux ont été enregistrés sous mon nom sans que je'*
*sois informé. Gandi m'a contacté dès la connaissance de ce*
*problème, je me suis rendu dans leurs locaux et nous avons suivi les*
*procédures nécessaires pour régler les problèmes. Tout est rentré*
*l'ordre, Gandi a été rapide honnête et professionnel.*

*Francois*

```

(source: http://groups.gandi.net/post/gandi.en.domain/3789)

From a spammer/scammer's perspective, a proxy therefore has the **major disadvantage that it is ultimately the proxy who owns the domains**, and who may be influenced to delete them.
NICENIC

Registrar: Guangdong Nicenic Technology Co., Ltd. dba NiceNIC

# Description of the Registrar

NiceNIC INTERNATIONAL GROUP CO., LIMITED (NiceNIC.NET) is an ICANN, gTLDs, ccTLD, new gTLDs Accredited Domain Registrar, and Hong Kong TOP Data Center, Alibaba Cloud, Baidu Cloud, Tencent Cloud cooperated Hosting & Server Provider, founded in 2006, based in Hong Kong, China.

NiceNIC is a registrar for domain names. ICANN accredited registrars are obliged to

1. ensure domain names are not used for illegal purposes
2. ensure registrant details are valid

# Examples of Pharmacy Fraud domains

Click on any heading for evidence of fraud.

These domains have been verified using a proxy service to avoid their IP blocking of law enforcement and registrar IP addresses. They may serve up other fraud sites at other times, or from other geographies. But any site served is still an illegal fraud pharmacy.

# Awaiting action

* Tested and verified from an unblocked proxy on September 9 2021.
* Sample screen shots are sometimes shown on this page.

Any web site domains shown here are used exclusively to host Eva Pharmacy fraud domains, and use fake names, fake addresses as the contact address, and fake phone numbers to avoid verification calls.

## Canadian Health&Care Mall

```
bernadettejulianna.com
cassandrenicole.com
gelyasofia.com
giulianancy.com
goodcarequality.com
laurainebrenda.com
marenezmeralda.com
mypillsvalue.com
newerectcheap.com
newmedicalstore.com
olympiazonda.com
rxpowerstore.com
safeherbalcaring.com
stormibeverie.com
thetabdiscount.com
trixiemarietta.com

```

## CanadianPharmacy

```
curativetabsmall.com
healthiestmens.com
mypowerpacking.com
smartbestbargain.com

```

# Previously suspended by the registrar

## Canadian Health&Care Mall

```
naturalcareworld.com
perfectednow.com
worldcaremall.com

```

## My Canadian Pharmacy

```
newaidassist.com
organicerectstore.com

```

# Common IP Addresses

```
185.182.105.218
185.227.136.205
103.139.42.59
81.7.7.159
185.182.105.222

```

# Where to send abuse complaints

Web site https://nicenic.net/customer/contact.php
Spamhaus

Spamhaus was created by Steve Linford in 1998. The all-volunteer organisation tracks the Internet's major spammers, spamgangs and spam services, provides dependable realtime anti-spam protection for Internet networks, and works with Law Enforcement to identify and pursue spammers worldwide.

## Spamhaus ROKSO

Register Of Known Spam Operations

200 Known Spam Operations responsible for 80% of your spam.
When a known spamgang has been terminated from at least 3 ISPs, a profile of its spamming activities is listed on the ROKSO webpage.

## Spamhaus Top 10

TOP 10 chart of ROKSO-listed spammers - are those which Spamhaus views as the highest threat, the worst of the career spammers causing the most damage on the Internet currently. Spamhaus flags these as a priority for Law Enforcement Agencies.

## How to Use Spamhaus

When you make a complaint to a registrar, a lot of time is spent looking for evidence of spamming or crime. You can help shorten the time it takes to deal with a complaint by providing evidence yourself. Links to the relevant Spamhaus or ROKSO record are an effective method.

Spamhaus has credibility among ISPs and those who work to fight spam - its records have often been used in court as evidence for prosecutions. Some spammers have even started a joe job to discredit its founders.
Resources for a compromised PC

### Overview

Below is information, links, software, and more that can assist you in cleaning a compromised or hijacked PC. This page is not here to provide you support in cleaning your PC, but should help you find the necessary resources to get rid of that nasty Trojan, spyware, adware, etc. All software listed here should be completely FREE and EASY to use.

### Companies that will assist you

##### Excessive Computing

* They are the only company I know of that will, completely for free with no obligations (limit of 1 hour per client), clean any malicious software from your PC AND set you up with free software to secure your PC. Why do they do this? They absolutely hate spammers, and spammers often use compromised machines for spamming!
* Location: Burgaw, NC
* Service Area: Pender and New Hanover Counties
* Phone: 910-398-4288
* Hours: 10am-6pm M-F

### Web Sites that will Provide Assistance

#### Software to help keep your PC secure

##### Firefox web browser

* Use this instead of Internet Explorer (the blue E) to browse the internet, as it is much less likely to allow the installation of an unwanted program without your knowledge. Companies who use Firefox instead of Internet Explorer have been reporting FAR less trouble with infected machines.

* Essential Add-ons (these are programs that work with Firefox to make you even more secure)
	+ Adblock Plus - Used to block unwanted ads from appearing as you browse the internet.
	+ McAfee SiteAdvisor - Used to alert you of known malicious web sites.

* Recommended Add-ons
	+ NoScript - Used to prevent JavaScript from running on all websites except those you allow. This add-on is for the novice that understands what JavaScript is; otherwise it's not recommended that you attempt to use it.

##### Thunderbird email client

* Use this instead of Outlook for your email. Why? Because Outlook has many security problems, and it is MUCH easier for an unwanted program to be installed to your PC through a nasty email attachment received by Outlook than it is if the same email is received by Thunderbird.

##### ZoneLabs ZoneAlarm Free

* Rated by many people to be one of the best firewalls out there. It does a good job, but you MUST learn a few things to use it properly. In any event, it's much better than the firewall included with Windows.

##### Avast! Antivirus Home Edition

* One of the better free antivirus softwares out there. You do have to register, but registration for the home edition is free.

##### HijackThis

* This is a program that lists out lots of information about your PC, which you can provide to a tech to help you figure out your problem.

##### LSPFix

* This program can fix the LSP chains that often become broken because of spyware. Basically, some spyware can screw up the way your PC talks to the internet, and this utility can fix it.

There are MANY more helpful softwares out there, but I'm short on time and others can always post more.
Registrant

Registrant: A registrant is the person or company who purchases a domain name. For example, John Doe is a registrant who registers the name example.com through Network Solutions (the registrar)) who in turn writes the domain name to the central registry database.

Thus, a registrant is the person or entity that has the license to use a domain name by the registry of the TLD that governs the domain.

This is often referred to as the "owner" of a domain name.
R01 RU list Tor

## Toronto Drugstore

```
airweavesupplies.ru
biologicalaidshop.ru
curativesafevalue.ru
curingaidpurchase.ru
curingcareoutlet.ru
familyrxstore.ru
firstgenericgroup.ru
firsthealingservice.ru
goodcurativeinc.ru
goodmedicatingmall.ru
healingonlinestore.ru
healingpillscompany.ru
herbalcareservices.ru
hotorganicassist.ru
luckyhealingvalue.ru
luckymedicalcompany.ru
mymedicalservice.ru
newbiologicalvalue.ru
newgenericassist.ru
onlineremedyreward.ru
pharmaceutichotmart.ru
privatecuringassist.ru
remedialhotgroup.ru
safepillsshop.ru
smartmedicatinginc.ru
thecuringmarket.ru
yourmedicamentinc.ru

```
Robert Soloway

## Description

He then sends spam out to this database of millions, offering to sell them the database itself! He wants his victims to become his customers.
Despite his prosecution, $10 million fine, and a court injunction against further spamming, the spam operation continued until mid 2008 when he was arrested, convicted and sentenced to imprisonment for nearly 4 years.
An analysis of a web site is found under Broadcast Email Service.

In June 2007, Robert Alan Soloway is scheduled for his initial appearance in a U.S. District Court in Seattle on 13 counts of money laundering, 10 counts of mail fraud, five counts of wire fraud, five counts of aggravated identity theft and two counts of fraud in connection with electronic mail.

## False Claims

**1. Secure ordering**
The ordering page proudly proclaims that it is using a **Complete Secure Online Order Form**. However, the page is rendered under non-secure **http**, not secure **https**.

**2. You can opt out**
The option to opt out of further spamming has been shown to be purely cosmetic. The underlying code behind that web page ignores anything entered.

## Sample Spam

```
To: *<an entry stolen from DNS registrant's email address>*

we email advertise your charity web site to 7,500,000 people. free.

http://www.emailsolutioncorp.com

```

```
we email advertise your charity web site to 7,500,000 people. free.

http://www.emailmarketingassociates.com

```

## Sponsoring Registrars

**Web site**

```
Domain Name: EMAILSOLUTIONCORP.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.EMAILSOLUTIONCORP.COM
Name Server: NS2.EMAILSOLUTIONCORP.COM
Name Server: NS3.EMAILSOLUTIONCORP.COM
Name Server: NS4.EMAILSOLUTIONCORP.COM

```

**Name Servers**

```
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN

```

**IP Address of web site**

```
inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
..
person:       Yi Fu
nic-hdl:      YF124-AP
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323

```

## How to report

Complainterator will formulate a request to the name server's registrar to remove him. Add a link to this page for evidence.

## Typical Domain Names

 broadcastadvertise.org
 theemailbroadcastingcompany.com

## Further Reading

* MSN interview after his conviction and sentencing
* Sentenced to 47 months in prison, July 2008
* The Wikipedia entry
* His Spamhaus record
* The $10 million fine
Protecting Yourself

## Reduce the impact of spam

Protect your main email boxes: follow one of the many guides on preventing your address getting out there.

One thing that is advisable is to have multiple email addresses set up when signing up for newsletters, purchasing of items online, and other such activity. Alternatively, services such as mailinator offer "disposable" email-addresses.

It is best to keep your personal and business email address protected from such sign-ups in order to minimize spam you receive in your primary email boxes.

Also *stamp* outgoing email using systems like Penny Post and demand stamped email from your senders. This makes it harder for spammers to generate spam for your email address.

## Check your computer for malware

* Resources for a compromised PC
* Symantec's web-based malware and virus checker

Get more help from the links on Spam Links' consumer security advice page.

## Protect your online identity

Identity Theft is one of the fastest-growing crimes online.
You should never enter personal details on untrusted websites. Ideally, the only places you should enter personal contact information are on secured order forms on websites you trust.

## DDoS Protection

DDoS Protection is important for anti-spam websites, which are often targeted by spammers in an attempt to silence opposition to unwanted e-mail.

## External links

* Spam Links on Spam Prevention for Users
R01 RU list CFP

## Canadian Family Pharmacy

```
anassistantcoach.ru
bestcanadianquality.ru
bestmedicinalsupply.ru
canadiansmartoutlet.ru
curativebestdeal.ru
curativedrugsstore.ru
excellentmedssupply.ru
fastpharminvestment.ru
fastpillservices.ru
firstcareprogram.ru
firstremedymart.ru
firsttabsservices.ru
genericdrugpurchase.ru
genericsafecompany.ru
goodhealthcareinc.ru
healingsafepurchase.ru
healingsafesupply.ru
healingtabssale.ru
herbalpillelement.ru
homepharmacyquality.ru
luckyremedyservice.ru
magicpharmpurchase.ru
medicaldrugtrade.ru
medicalglobalinc.ru
medicinalpharmstore.ru
mycanadianinc.ru
mymedicatingprogram.ru
mypowerpack.net
naturalaidshop.ru
naturalfastinc.ru
naturalprivatedeal.ru
naturalsmartprogram.ru
newhealthcareassist.ru
newpillsvalue.ru
onlinehealthquality.ru
organicglobalmart.ru
organicsecuremall.ru
organicsecurevalue.ru
perfectpillsquality.ru
perfectpillsupply.ru
privatepillbargain.ru
pureherbalservices.ru
remedialdrugstrade.ru
remedialhotshop.ru
remedialpillbargain.ru
remedialsmartstore.ru
securecaremarket.ru
securegenericmart.ru
securegenericsupply.ru
securehealthwebmart.ru
smartdrugspurchase.ru
thedealannounces.ru
themedicationvalue.ru
thepharmacydeal.ru
trustedpillscompany.ru
yourdrugassist.ru
yourhealingprogram.ru
yourwelnessquality.ru

```
Naunet list

# Examples of domains used for fraud

By loading any of these, the registrar can verify the brand, then establish the fraudulent use of the domain name by viewing the evidence that has been prepared for registrars and law enforcement. Note that some of these will be switched from one fraud brand to another.

## The Doctors

now redirecting to SaveTheChildren.org

```
amcosigser.ru
ckjsiougnse.ru
ckmaosig.ru
cnosigsecs.ru
cnsoigdser.ru
cojmnsoeifcse.ru
cosigescsed.ru
cosigsers.ru
csoescs.ru
csoifsear.ru
dfnaoe.ru
hncusiecs.ru
hosigese.ru
jincodise.ru
jnijusecs.ru
junciusec.ru
kcierser.ru
kcmoasidecse.ru
kcmosiedser.ru
kcmosierser.ru
kcoiseca.ru
kcoisecser.ru
kjnciousgter.ru
kjncoijsugs.ru
kjncoisuge.ru
kjncosiu.ru
kmcosige.ru
kmocisgse.ru
kmoidsoes.ru
knmciousgs.ru
ncoiusedr.ru
njisjungsec.ru
oasierc.ru
osigese.ru
soasierc.ru
uwncsefser.ru
vmoigsese.ru
wkcierser.ru
yfrsoigdser.ru
ysncecser.ru

```

# Suspended

## The Doctors

```
casniojunew.ru (suspended)
ccfserssre.ru (suspended)
cjnasijdnrcs.ru (suspended)
cjnisjercs.ru (suspended)
cjnisuecs.ru (suspended)
cjnisugnser.ru (suspended)
cjsoijuecse.ru (suspended)
ckijsnoignsesc.ru (suspended)
ckjnoasgse.ru (suspended)
ckjnoijdase.ru (suspended)
cknosiersdr.ru (suspended)
ckoigecae.ru (suspended)
cmosigewfs.ru (suspended)
cmosingser.ru (suspended)
cnisungec.ru (suspended)
iybgsecse.ru (suspended)
jcnisjugnserd.ru (suspended)
jcnsoidr.ru (suspended)
jkcnoisjug.ru (suspended)
kacodeac.ru (suspended)
kcoasid.ru (suspended)
kcoasierc.ru (suspended)
kfaidsec.ru (suspended)
kfaocneac.ru (suspended)
kfjosiugsecs.ru (suspended)
kicmsoigserfs.ru (suspended)
kijcsoescs.ru (suspended)
kjcnoisuescs.ru (suspended)
kjncisouj.ru (suspended)
kmcoisasdr.ru (suspended)
koiceosec.ru (suspended)
lkcsoise.ru (suspended)
mocisgxe.ru (suspended)
oiusecs.ru (suspended)
okdfnaoe.ru (suspended)
osiecse.ru (suspended)
sjncijuagse.ru (suspended)
skcniugse.ru (suspended)
skociefser.ru (suspended)
uesgwecs.ru (suspended)
unigsecse.ru (suspended)

```
REGTIME.RU

This registrar has its home page redirected to https://rf.ru

The registrar is accredited to provide registrations in national zones .ru and .рф as well as promising domains in the .kz (Kazakhstan) region.

This registrar is often abused by the perpetrators of the EvaPharmacy fraud.

Examples are listed here, with links to the criminal evidence in the headings. These were seen live in September 2021.

## Canadian Health&Care Mall

```
mycanadianhealthcaremall.com

```

## Canadian Neighbor Pharmacy

```
rxcanadapharmacy.com
rxdrugcanada.com
rxmedcare.com

```

## CanadianPharmacy

```
canadianpharm.org

```

## Indian Pharmacy

```
indianpharmacy.info

```

## My Canadian Pharmacy

```
2su.su

```

## Toronto Drugstore

```
torontodrugstore.su

```
WEST263 list

Click on the heading for evidence of fraud

## The Doctors

**All suspended**

```
com-in8.net (suspended)
com-l4i.net (suspended)
com-lt5.net (suspended)
com-5rn.net (suspended)
com-9o1.net (suspended)
com-c02.net (suspended)
com-hgz.net (suspended)
com-n3t.net (suspended)
com-rm8.net (suspended)
com-z6f.net (suspended)
com-350.net (suspended)
com-697.net (suspended)
com-f9a.net (suspended)
com-kgf.net (suspended)
com-m8h.net (suspended)

```

## Complaint process

Mail to domain*@*west263.com, abuse*@*westdata.cn
8th Birthday Community Challenge

* Promo
* Complete

The **8th Birthday Community Challenge** is a special event in *Gummy Drop!*. The event was not shown on the globe.

The event set a target for all players to contribute to. If the target was met by September 12, 2022, then a bonus would be awarded to all players on September 14, 2022.

The challenge is linked to the Who 8 the Cake? Event.
Webnames

# Description of the Registrar

Webnames.ru is one of the leaders in the Russian domain registration market. More than 500,000 domain names are supported, we are trusted by 200,000 clients. Webnames.ru provides services for the registration of domain names of sites in hundreds of national and international zones, hosting services , free DNS support, SSL certificates , Whois service.

# Examples of domains used for pharmacy fraud

## Canadian Family Pharmacy

```
canadianfamilypharmacy.ru

```

## Canadian Neighbor Pharmacy

```
canadianneighborpharmacy.ru

```

## CanadianPharmacy

```
canadianpharmacy.ru

```

## My Canadian Pharmacy

```
mycanadianpharmacy.ru

```

IP Addresses for hosting sites:
5.188.211.29 with ISP pindc.ru

# Contacts

```
Office address: Samara, Moskovskoe shosse, 17, office 2103 (TC "Vertical", 21st floor)
Opening hours: Mon - Fri 9:00 - 18:00
Break: 13:00 - 14:00
Phone: +7 (846) 373-30-47
Postal address: 443013, Samara, Moskovskoe shosse, 17, office 2103 Ragtime LLC
Email для связи: support@webnames.ru

```
REG.RU list

# Awaiting suspension

Click any heading for evidence of fraud.

**Registrant information is usually fake.**

All of these were tested and verified from an unblocked proxy on June 7 2021

## Toronto Drugstore

```
torontomedshop.net

```

# Already Suspended

## Canadian Health&Care Mall

```
genericfastshop.com
safegenericmart.com
thewelnessmart.com
yourdrugwebmart.com
globalsecureinc.com
goodhotelement.com
grl.januaryhetzner.live
luckybestvalue.com
magicsafeshop.com
bestaideshop.com
bestaidstore.com
curativeaiddeal.com
curativepillinc.com
curingbesttrade.com
fastcuringvalue.com
fastfastdeal.com
fasthealingshop.com
fastmedsreward.com
fastsmartmarket.com
genericdrugsale.com
globalsecureinc.com
goodherbwebmart.com
goodhotelement.com
goodnaturalmart.com
goodtabsstore.com
herbalsmartdeal.com
homeaidwebmart.com
homedrugquality.com
homeglobalsale.com
homeorganicdeal.com
hotfastservice.com
hotherbsdeal.com
hotpharmeshop.com
luckybestvalue.com
magicaidsale.com
magicrxcompany.com
magicsafeshop.com
myfamilyquality.com
myhotassist.com
myhotcompany.com
myhotvalue.com
newaidvalue.com
newherbreward.com
newhotservices.com
newmedicaresale.com
newremedyinc.com
organicdrugmall.com
organicmedsmart.com
purecuringdeal.com
purehotquality.com
puremedseshop.com
pureonlinemall.com
pureorganicinc.com
puresecureshop.com
safebestdeal.com
safebestsupply.com
safetabsprogram.com
smartherbalmart.com
smartpillsdeal.com
themedsreward.com
theorganictrade.com
thepillssale.com
thetabsquality.com
trustedhottrade.com
yourdrugsassist.com
yourgenericsinc.com
youronlineeshop.com
yourrxcompany.com

```

## Canadian Neighbor Pharmacy

```
organicherbsinc.com

```

## Canadian Family Pharmacy

```
canadianfamilypharmacy.su

```

## Canadian Pharmacy

```
toponlinepharmacy.org

```

## CanadianPharmacy

```
firsthotoutlet.com
firsttabsgroup.com
goodprivatesale.com
goodtabsdeal.com
healingrxmarket.com
myremedialmart.com
naturaldrugmall.com
newpillelement.com
privaterxgroup.com
safepharmshop.com
yourbestassist.com
yourtablettrade.com

```

## My Canadian Pharmacy

```
daniellaagnesse.ru
eustaciacorine.ru
herbalherbdeal.com
hotcaredeal.com
magicherbsshop.com
magicmedsshop.com
onlinefasteshop.com

```

## Nameserver

```
bdnrkeqj.com
bzkqbuja.com
cicrlecw.com
dynwchbg.com
eifugqox.com
fmvghgfw.com
fzhkhgyu.com
gjoxupyd.com
gvbntfxn.com
hfdsydjt.com
hphokqdy.com
ijkngdlb.com
ilmckswr.com
imkybksg.com
jqaykxkm.com
kagaskey.com
kbofxvnr.com
kndpabna.com
lzptpaan.com
miewspfu.com
mwixkwey.com
mzxdpklc.com
ohirwcxh.com
pqscdyxc.com
qmktfhgj.com
remzduoc.com
rgrhwevq.com
rwnyfzmt.com
stnsrodf.com
tkeonrpe.com
tycxrsbn.com
wpgjyekx.com
wvozvpsm.com
xgjhnoll.com
xjkvgtpm.com
yezxizus.com
ykktyitz.com
yyucdmlg.com
zbcopxzo.com
zbnvumqa.com
zbqqvwqn.com

```

## Canadian Neighbor Pharmacy

```
fastsafemart.com
magicsafemart.com
organicherbsinc.com

```

## Trusted Tabs

```
apotekochmedicin.com

```

## CANADA-PHARMACY

```
simplyevent.su
luxurymarket.su
saledelivery.su

```

## Canadian-Pharmacy

```
buydiscount.su
greatvipsale.su

```

## US Drugs

```
hotsafereward.com

```