Canadian Neighbor Pharmacy

Canadian Neighbor Pharmacy is an Eva Pharmacy fraud.

## Description

Its appearance coincided with an announcement of a new Canadian themed pharmacy template by user "EvaPharmacy" on the Russian Language antichat.ru forum:

```
"EvaPharmacy presents a new Canadian pharmacy sales template.  It differs
significantly in design and contents from our previous CAD templates.  The new store
is colorful, easy to use for the buyer, and contains new sections and features.  It
should also be noted that a Canadian brand is the best way to attract customers,
since Canada is known as a producer of high quality pharmaceutical products at
affordable prices. Testing shows the template creates trust among customers, and as a
result, gives us a paycheck! Try out the new template by activating your account on
EvaPharmacy - http://antichat.evapharmacy.ru

As usual, more information can be obtained from our a support - ICQ 269082060.

Sincerely, Team EvaPharmacy

```

In August 2010, they edited posts to change the ICQ number to 750000 and add a Jabber address, evasupport@jabber.org. They also specified that they do not accept sales from Uzbekistan or the CIS (former Soviet republics).

False Pretenses
Like other Bulker.biz sites, just about every claim made on CNP sites is a lie.

Fake Staff

We're sure the nice people pictured on their "About Us" page are real. They just aren't doctors or pharmacists or spammers or anyone else associated with these sites. They are models from Getty Images, and their photographs were assembled into a single picture with photo editing software. They didn't even bother to flip them right to left to make the lighting consistent:

The original photos:

Fake Locations

They describe the first building as "Headquarters," and give its address:

```
Headquarters
1210 Midhurst Dr,
Vancouver, OT 76313,
Canada

```

Those familiar with Canada, a country whose geography has been well-documented, will know there is no province whose postal abbreviation is "OT." There's Ontario, which is "ON," but Vancouver doesn't happen to be located there.
On the other hand, the skyline in their photo is Toronto, Ontario -- though they've again edited the photo to paste their logo on the photo of one of the buildings. The actual photo shows it should be a Hilton logo:

Photo by AldenC

Their "local" offices are supposedly located here:

```
Local Office
1225 Rue De Bleury,
Montreal, QC H3B
Canada

```

But that location is a construction site, as can be seen on Google street view. A check on the Sidev.com website confirms that no building on that site was completed and leased in the interval after this photo was taken:

The "International Orders Department" address is harder to locate; it appears to be a public park in Houston, TX. At any rate, there is no building there that resembles the one in the photo:

```
International Orders Department
1300 Smith St.,
Houston, TX 77002
USA

```

The building in the last photo is listed as being located here:

```
USA Branch Office
503 W Olympic Blvd,
Los Angeles, CA 90015
USA

```

But there is no building at 503 W. Olympic. The Renaissance Tower Apartments, at 501 W. Olympic, take up the entire block. The building looks nothing like the one in their picture.

Fake Guarantee

```
Refund Policy

Dear customer, we stand behind our products and services! This is a risk free offer!

Within the 14 days of receiving your order, you may return any item shipped by
Canadian Neighbor Pharmacy for any of the following reasons:

   * Item was received damaged or defective;
   * Incorrect item was shipped.

```

Sounds great. But which of the above fake addresses should you ship your returned product to?
These sites are operating completely illegally. They aren't going to give you a real address, even if you contact them after delivery to get your return "authorized." (The FBI could easily place a bait order and call to get a return authorized, then be waiting by the post office box for them to pick up their mail.) And anyway, you won't be able to contact them after your order arrives, if anything arrives at all, because the website will most likely be shut down by then.

Fake License
The pharmacy has no real location and no real pharmacists. But like other
Bulker.biz pharmacies, they have forged an imaginary license for their pharmacy. They didn't bother to have the address agree with the other addresses on their website.

The Ontario College of Pharmacy (not "College of Pharmacists of Ontario) has a website that allows you to look up their licensees. Not surprisingly, Canadian Neighbor Pharmacy isn't listed.

Fake American Pharmacists Association Certificate
This task apparently fell to one of the non-native English speakers, because it is quite clumsily worded:

```
All the drugs sold at Canadian Neighbor Pharmacy are considered to be approved by
the American Pharmacists Association (APhA).

This bulletin certifies that Canadian Neighbor Pharmacy (License Number 05850848)
sells high-quality medications that are presented by certified online shop. We
ensure that Canadian Neighbor Pharmacy team has the highest standards of practice
carried out by its members.

The American Pharmacists Association (APhA) is the organization whose members are
recognized in society as essential in all patient care settings for optimal
medication use that improves health, wellness, and quality of life.

Date: 07/04/10     Signature: Harold N. Godwin

```

This certificate, viewed as of this writing in June 2010, appears to be dated in the future. Actually, whoever did the forgery was unfamiliar with the fact that in the U.S., dates are in month-day-year format, rather than day-month-year. They were trying to make it look like an April 7, 2010 date.
When asked if this certificate was fake, the reply from the American Pharmacists Association was

```
Yes, this is a fake. Thanks for passing along to us.

Sharon Corbitt
External Communications Director
American Pharmacists Association
2215 Constitution Ave.
Washington, DC 20037-2895

```

The APhA does not license pharmacies or approve the quality of medications. The logo they display is wrong as well, resembling the Glavmed logo instead.

Fake Better Business Bureau Seal
At the bottom of each page of the site, there is a seal claiming the site is accredited by the Better Business Bureau. Clicking on a real BBB seal should link to a company's ratings page on BBB's website. But CNP links to a page on their own website with a forged BBB rating. They have even got the chutzpah to have created a fake complaint and resolved it satisfactorily.

**Reason for Rating**
BBB rating is based on 16 factors.
Factors that lowered Canadian Neighbor Pharmacy's rating include:
* 25 complaints filed against business
* Failure to respond to 3 complaints filed against business.
* Advertising issue(s) found by BBB.
* BBB does not have sufficient information to determine how long this business has been operating.
* BBB does not have sufficient background information on this business. BBB made two or more requests for background information from the business. BBB has not received a response from this business and/or has not been able to verify information received from this business.
* BBB does not have sufficient information to determine size of business. BBB evaluation of business is based on rating formula's smallest size classification.

**Additional Information**
On this company's multiple website, they supply two different local addresses for Canadian Neighbor Pharmacy in Vancouver. Upon a detail review of these addresses, the BBB notes that these addresses do not appear to be valid, and complaints forwarded to the company by the BBB have been returned in the mail.
1210 Midhurst Dr, Vancouver OT 76313. This address does not appear to be a valid address. "OT" is neither listed as a province or state. 76313 is not a valid postal or zip code.
1241 Commercial Dr, Vancouver BC V5L 3X2, Canada Post website confirms that while 1241 Commercial Dr is a valid street address, this is not the correct postal code for this address.
Licensing
As of November 12, 2010, although this company claims affiliation with the College of Pharmacists in Ontario, the College has advised the BBB that Canadian Neighbor Pharmacy is not a licensed Pharmacy in Ontario.
- See more at: http://www.bbb.org/mbc/business-reviews/online-drug-and-prescription-services/canadian-neighbor-pharmacy-in-vancouver-bc-1252718#sthash.W8XuIHXt.QcbDYHYf.dpuf

Fake PharmacyChecker seal
pharmacychecker.com issues seals of approval to validated genuine pharmacies. The PharmacyChecker Verification Program was established in 2003 to help consumers find qualified online pharmacies and is the only independent evaluator of U.S. and non-U.S. online pharmacies. The PharmacyChecker Seal indicates that websites market prescription drugs dispensed from pharmacies in good standing in the countries where they are located.
Canadian Neighbor Pharmacy, being a fraud, pretends it has the seal of approval by displaying a fake seal on their sites.

Fake CIPARx Seal
The Canadian International Pharmacy Association maintains a list of member pharmacies. Those pharmacies can legitimately display the CIPARx seal on their websites. Clicking on the seal links to a page on http://www.ciparx.ca . But in the case of CNP, it links on another one of their fake certificates posted on their own website.

Clicking the CIPARx seal on a CNP website brings you the above certificate. What it should have done if brought you to a page on ciparx.ca something like this:

Fake Testimonials
Many scam pharmacies have fake testimonials. CNP has gone over the top in number and detail. There are American spammers involved in Bulker.biz, so you don't get the same humorous broken English from "satisfied customers" who are supposedly Americans. But there are plenty of obvious lies. Let's look at some of them.

```

```

We're betting that this fellow's picture is being used without his consent. Even if Alex J. Pollock, Resident Fellow of the American Enterprise Institute, wanted to praise a scam pharmacy using a fake name, he's not likely to have used his real picture:

```

```

Andrew in New Jersey, satisfied customer?

```

```

Nope. Bryan Hjelm, vice president of marketing at Unicast. We doubt he's doing any product endorsements for criminals, either.

```

```

This fellow is supposedly "George Estrella" in Brazil:

```

```

Except that he's really Tom Z, and both he and his hair are in Connecticut, USA.

```

```

In addition to misusing images of people without permission, they are dispensing dangerous medical advice:

```
About 4 months ago me, my husband and our four-year-old son were on our way back home
from a party when suddenly a dog appeared on the road right in front of our car. My
husband tried to avoid the collision but in vain. As a result the dog was dead and
our car got into a ditch beside the road. Taking into consideration that it was quite
stressful even for me what can I say about the state of my son! Time passed but he
still quite depressed and he often screams in his sleep. Our doctor advised me to by
Zoloft for him. I give him half a pill from time to time and he definitely feels
better. I hope that soon his nervous system would be completely restored!

– Diane Markey, 41

```

Zoloft is indicated for depression in adults, but only obsessive compulsive disorder in children. In any case, it isn't indicated for use in 4 year olds at all. To suggest that a parent give their child an unprescribed drug "off-label," something experienced psychiatrists would only do after serious consideration of the risks and benefits, shows an outrageous disregard for the health and safety of children.
But doesn't the vignette mention that the doctor advised its use? Well, hello, we've already established they're making this stuff up. There's no doctor, no 4 year old, no dog -- and no Zoloft. All they are selling is generics. And you can get 90 tabs of 25 mg generic sertraline for under $40 at a major legal US pharmacy as of this writing, June 2010. The CNP price for sertraline without prescription, same dose but uncertain origin -- is $104.40, over 2.5 times HIGHER than from a legal pharmacy. They're selling unprescribed drugs for off-label uses to people who don't take their children to doctors. If a doctor had recommended the drug, he would have provided a prescription, and the family could have purchased the generic sertraline legally at a much lower price.

```
I am very happy with Zithromax. I was suffering from a very strong vaginal yeast
infection that was unaffected by 3 doses of diflucan, and several doses of the over
the counter drugs available. I took Zithromax and the yeast infection went away in a
matter of days.

– Susan, Washington

```

The whole idea of ordering an antibiotic from a website that is shipping the product from India is absurd -- if the customer can wait that long, she probably didn't need antibiotics in the first place. And unfortunately for "Susan," Zithromax (azithromycin) doesn't treat yeast infections. Not even a little bit. If anything, it will make them worse by killing competing bacteria. However, it does kill a number of other things that cause discharges, like chlamydia and some gonorrhea. If azithromycin made her "yeast infection" go away and fluconazole (Diflucan) failed, she and her sexual partner had better get proper medical attention.

Hijacked servers
**Historical information**
When you loaded a CNP site, you found that the web site and the images used were being loaded from a range of different IP addresses. For example, take superharmacytablets.com, which was operational in July 2010.
* The web page itself loaded from address 203.113.112.249 (Banhkok, Thailand)
* The banner image loaded from http://204.12.228.105:8080/images/cnp/main.jpg (Kansas City, MO)
* The logo loaded from http://140.113.151.70:8080/images/cnp/logo.jpg (National University, Taiwan)
* The checkout image loaded from http://150.188.210.3:8080/images/cnp/cart\_checkout\_inactive.gif (Montevideo)
* The Levitra pill image loaded from http://61.178.21.164:8080/images/products/levitrab.gif (Lanzhou, China)

The following day, the site was at 58.16.250.10 (China) and the images were being loaded from different servers:
* http://203.255.181.238:8080/images/cnp/main.jpg (Ewha Women's University, Korea)
* http://66.35.193.159:8080/images/cnp/logo.jpg (California, US)
* http://59.50.115.20:8080/images/cnp/cart\_checkout\_inactive.gif (China)
* http://61.178.128.220:8080/images/products/levitrab.gif (China)

and the fake CIPARx logo was being loaded from
* http://222.168.52.2:8080/images/cnp/aw\_cipa.gif (China)

Each of these IP addresses represented a site that has been hijacked, and taken over to provide services to these criminals, without the knowledge of the owners. The method used to infiltrate and take over these sites has been documented, together with cleaning instructions at pharmalert.zoomshare.com.

How to Report this Spam
The Complainterator is configured to report this spam to the registrars.
It performs a "whois" lookup on the domain names used by the name servers that resolve access to the web site. It discovers the registrars that are sponsoring the access to the web site. It prepares a complaint to the sponsoring registrars.
Removal instructions
**web site domains**
- the registrar needs to set the status of the domain to
* clientHold
* clientUpdateProhibited
* clientDeleteProhibited
* clientTransferProhibited

**name server domains**
- the registrar needs to set the status of each of the name server domains to
* clientHold
* clientUpdateProhibited
* clientDeleteProhibited
* clientTransferProhibited

In addition, to remove them as name servers, the subdomain address records (eg for ns1 and ns2) need to be changed to a non-routable address, such as 0.0.0.0 or a blackhole address within their own address space.

Sample sites and registrars sponsoring them
REGTIME.RU

```
rxcanadapharmacy.com
rxdrugcanada.com
rxmedcare.com

```

GKG.Net, Inc.

```
neighbor-pharm-canada.com

```

WEBNAMES.RU

```
canadianneighborpharmacy.ru

```

R01-RU

```
mypharmacysupply.ru
trustedherbsale.ru
genericaidsale.su
goodremedyeshop.su
pureonlinemart.ru
purecarequality.su

```

Expired after 12 months

```
aajfavxa.ru
aedhqlbs.ru
agqllgwc.ru
aifuspcl.ru
aivzojbw.ru
anwrnqhp.ru
auuuappm.ru
aymkfvok.ru
bdypkivv.ru
bestcurativeeshop.ru
bestherbalreward.ru
bestmedsinvestment.ru
bestpharmelement.ru
bestsafestore.ru
bfkifjeq.ru
bgdfaulp.ru
bhbrsups.ru
bihxgtye.ru
biilaxot.ru
biologicalpillmart.ru
biologicaltabsinc.ru
blceepsn.ru
btnxsspn.ru
bukcoijh.ru
buxexynz.ru
chljjuny.ru
cmaplzln.ru
cqkpoqdn.ru
cqvsosvt.ru
crdivtko.ru
crnoaobe.ru
curativeherbreward.ru
curativerxassist.ru
curingpillsservices.ru
cwmnrefn.ru
dadhwhpn.ru
dcvoswer.ru
dgzztfqt.ru
dijeajyv.ru
dmlrsxwi.ru
doqvjmgy.ru
dppekrod.ru
eaazjkis.ru
enfirfqk.ru
esrivrji.ru
fasthealtheshop.ru
firstorganicsale.ru
fjsyulcp.ru
focvhalc.ru
fptzspqj.ru
fqpphgmm.ru
gbcabpfm.ru
genericmedswebmart.ru
globalhealthinc.ru
globalnaturalgroup.ru
globalpilloutlet.ru
globalrxstore.ru
goodcaretrade.ru
goodfastoutlet.ru
goodhotvalue.ru
goodmedicinalstore.ru
goodmedsbargain.ru
guohwnda.ru
guszwdkw.ru
gvlwroqv.ru
gwztovzt.ru
gyuijhur.ru
herbalherbstore.ru
herbalpillsdeal.ru
herbaltreatmentshop.ru
hevnkxtk.ru
hhhlatfq.ru
hjtyxefp.ru
hnrzazdn.ru
homepharmwebmart.ru
hotbiologicalsale.ru
hotpillmall.ru
hottreatmentoutlet.ru
hotwelnessassist.ru
hssfclcb.ru
hssojntz.ru
htxxmsmn.ru
hwrzxota.ru
hzgaqkeu.ru
icmjfmdu.ru
idvhgwhx.ru
ihsvajfj.ru
imgkiqrn.ru
ixxeoylb.ru
japzhbgx.ru
jfbbtmic.ru
jhffsdno.ru
jiflcsii.ru
jkmxzqdl.ru
jlgahctb.ru
jrzktcmr.ru
jsrjsned.ru
juvnrdip.ru
jwyimaed.ru
jzmuqwhb.ru
kbukhitp.ru
kfsvorsm.ru
kjqsrjpr.ru
kwpchfoo.ru
lspvhkkl.ru
luckycanadianmart.ru
luckypillbargain.ru
luckytabsgroup.ru
lvchhlff.ru
lwvxkyvr.ru
lwxdzzmb.ru
magicpillsmart.ru
magictabletgroup.ru
medicaldrugsshop.ru
medicalfirstprogram.ru
medicativepillstore.ru
medicinalsafemall.ru
mjfloobj.ru
mrrxhotw.ru
myfastmarket.ru
mypharmvalue.ru
naturalhotmarket.ru
naturalpillsmart.ru
naturalrxmall.ru
ncdkwkno.ru
newaidgroup.ru
newdrugeshop.ru
newrxdeal.ru
ngnpqqkn.ru
nhdyabte.ru
nikdnznu.ru
nmirzzdv.ru
nsfcvulw.ru
nuotbtfn.ru
nvncrhmr.ru
nxutcxnl.ru
oapuivts.ru
onlinecurativestore.ru
onlinesecuredeal.ru
organicbeststore.ru
organicdrugsvalue.ru
organicfirstreward.ru
organicprivatemart.ru
organicsafemart.ru
organicsecurestore.ru
organicsmarteshop.ru
oyrmnjsq.ru
ozxmgwti.ru
perfectdrugsbargain.ru
perfectpharmaceuticquality.ru
pmzauvwi.ru
privatecareinc.ru
privatecuringshop.ru
privateherbservices.ru
ptaxjxlh.ru
pureherbsservice.ru
pwxhzwpx.ru
qaolxvkg.ru
qapmxgsc.ru
qceiolcp.ru
qkjssnen.ru
qlbzbfvc.ru
qmcaapcy.ru
qndalaqk.ru
qnkepljk.ru
qwfhlblv.ru
qwurojlx.ru
qzqnnvtj.ru
rauwaymi.ru
rdhbsgsp.ru
rdmpugvy.ru
rebzmbhk.ru
remedialdrugwebmart.ru
remedialmedsshop.ru
remedialrxshop.ru
rkjnrzws.ru
rtbkunsi.ru
rtnespeq.ru
rztjwktb.ru
safegenericsquality.ru
savhldty.ru
sctwxxhb.ru
securecarepurchase.ru
sesvzuun.ru
sivcndtv.ru
skswjnld.ru
smartfastwebmart.ru
smartpharmacyoutlet.ru
smartrxeshop.ru
smarttabsprogram.ru
sqfulhgr.ru
srixlmdg.ru
sviolyjz.ru
taotgixl.ru
tcvzlbdu.ru
teqlaahe.ru
thegenericassist.ru
thegenericmart.ru
thehealinggroup.ru
thehealtheshop.ru
thepharmeshoponline.ru
thetabsbargain.ru
thetabsmart.ru
tjvxqiwa.ru
trustedherbsupply.ru
trustedrxbargain.ru
turerdlw.ru
uauepcks.ru
umxocbhh.ru
uvtromum.ru
uwacobpw.ru
uyufxhjj.ru
uzbqicnx.ru
vhlztjfo.ru
vlicnqqo.ru
vnjkgddu.ru
vwrvcosa.ru
vwvkuqdl.ru
wgmownpl.ru
wjlrqjpo.ru
wjtgmmdx.ru
wrcatzqi.ru
wxrlprro.ru
xgntkurv.ru
xkheytsg.ru
xkwmiuub.ru
xpblwjfa.ru
xrkowzvn.ru
yditihcw.ru
yivzdyta.ru
ymlubhjs.ru
yoycylfu.ru
ypfwmrcu.ru
yqiamlkj.ru
yqllcmsz.ru
ysoyvhxj.ru
yvccbmge.ru
yzrejmzg.ru
zczsurjc.ru
zdrdewil.ru
zfjalrfo.ru
zgtblkdn.ru
zjzibpqo.ru
zptimlto.ru
zwdpjarj.ru
zxekpaip.ru

```

Sponsor Organization
Bulker.biz is the  criminal sponsor organization behind this type of site.

Related spam operations
See: Category:Yambo family

Further Reading
LegitScript report, May 2010