Rogues and Registrars – Are some Domain Name Registrars Safe Havens for Internet Drug Rings

LegitScript and Knujon have published a report on Save Habor for Illegal Internet Pharmacies.. We at SFA thought the public at large should view this report.

executive summary
! The Internet is sometimes said to be the “Wild West”  a place without any rules. The sentiment is understandable, but incorrect: the Internet does have rules. These rules are supposed to ensure the growth of the Internet in a way that fosters legitimate personal and commercial activity, but prevents an out-of-control explosion of fraud and crime.
! In this report, we examine how Domain Name Registrars  companies that are supposed to follow those rules  responded when put to the test. From November 2009 through April 2010, the authors provided evidence to over a dozen Domain Name Registrars establishing that each companyʼs paid domain name registration services were being used by one or more Internet drug rings to register websites engaged in criminal and fraudulent activity. The authors then asked the Registrars to enforce their own Terms and Conditions regarding each website.

The Internet rule that is most pertinent to this report is straightforward. Domain Name Registrars  companies like GoDaddy, Network Solutions, eNom and others who rgister domain names  are required by ICANN, the organization that accredits (and can e-accredit) them, to prohibit website owners from using their domains for unlawful purposes. Without exception, this rule is also reflected in each Registrarʼs Terms and Conditions, thus formalizing and protecting the companyʼs contractual right to suspend domain names for unlawful activity. Once a Registrar becomes aware that a website is engaged in criminal activity, the company has the legal authority and technical ability to suspend the domain name, rendering the illegal and fraudulent content inaccessible. This self-policing is meant to balance freedom of speech with safety and legitimacy as the Internet continues to evolve.

But all too often, Registrars simply turn a blind eye to criminal activity. After all, Registrars have an inherent financial conflict of interest: on the one hand, they are supposed to adhere to the policy requiring them to prohibit unlawful activity; on the other hand, they stay in business from the registration and re-registration fees that website owners pay to keep those very websites online. As for-profit companies, Registrars will readily shut down a website that fails to pay annual re-registration fees. But as we show, not all Registrars will suspend a domain name if presented with irrefutable evidence that the customer is using the website to commit fraud or a crime.

To document this, the authors provided indisputable evidence to these Domain Name Registrars that websites were displaying a forged pharmacy license and/or selling drugs without requiring a prescription. Our evidence included letters from the government agencies that license pharmacies stating that the pharmacy “license” displayed on the websiteʼs home page was a forgery. In other cases, the website clearly and overtly advertised prescription drugs such as Vicodin, Viagra or OxyContin “without a prescription.”

Additionally, most of the US-based Registrars identified in this report had, in late 2008, received a letter from the National Association of Boards of Pharmacy (NABP) informing them that the NABP had
recognized LegitScriptʼs standards for Internet pharmacy verification, and asking those Registrars to work with LegitScript to identify “rogue” Internet pharmacies misusing those companiesʼ domain name
registration services. The intent of these letters was to request that the Registrars give credence to LegitScriptʼs notifications, based on the NABPʼs recognition of LegitScriptʼs program, and the NABPʼs
own status as the organization that represents pharmacy-related regulatory authorities.

The good news is, most of the Registrars we contacted acted to prevent the further use of their services by websites engaged in illegal or fraudulent activity. Part of the reason for this report is to
recognize and applaud the actions taken by those Registrars, including GoDaddy, Directi, SpiritDomain, and several others.

Read More……

Canadian pharmacy –

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Department of Justice – Ryan Haight Act
Read More Health Canada

IP address:
Host name:
Alias: is from China(CN) in region Southern and Eastern Asia

TraceRoute to []

Hop (ms) (ms) (ms) IP Address Host name
1 39 24 14
2 6 6 11
3 24 10 58
4 56 54 51
5 49 236 54
6 242 253 249
7 261 252 264
8 277 273 259
9 268 266 257
10 262 259 259
11 257 258 263
12 Timed out 251 Timed out
13 Timed out Timed out 247

Trace complete

Retrieving DNS records for

DNS servers [] []

Answer records A 600s

Authority records NS 600s NS 600s

Additional records A 600s A 600s

Whois query for

Results returned from

   Whois Server:
   Referral URL:
   Status: ok
   Updated Date: 30-may-2010
   Creation Date: 24-may-2010
   Expiration Date: 24-may-2011

 Last update of whois database: Mon, 19 Jul 2010 01:02:16 UTC <<<

The Registry database contains ONLY .COM, .NET, .EDU domains and
Results returned from

Domain name:
Record created on: 2010-05-24
Record expires on: 2011-05-24

Technical Contact:
   Ekaterina Nevzorova
   Ekaterina Nevzorova
   proezd Turgeneva d.110 kv.19
   Krasnodar  Krasnodarskiy krai  350000
   Phone: +7.8619121078
   Fax: +7.8619121078

Administration Contact:
   Ekaterina Nevzorova
   Ekaterina Nevzorova
   proezd Turgeneva d.110 kv.19
   Krasnodar  Krasnodarskiy krai  350000
   Phone: +7.8619121078
   Fax: +7.8619121078


Registrar of Record: Distribute IT Pty. Ltd.
Network IP address lookup:

Whois query for

Results returned from

# Query terms are ambiguous.  The query is assumed to be:
#     "n"
# The following results may also be obtained via:

NetRange: -
NetName:        APNIC5
NetHandle:      NET-219-0-0-0-1
NetType:        Allocated to APNIC
NameServer:     NS-SEC.RIPE.NET
NameServer:     TINNIE.ARIN.NET
NameServer:     NS4.APNIC.NET
NameServer:     NS3.APNIC.NET
NameServer:     NS1.APNIC.NET

Updated:        2009-10-08

OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 2131
City:           Milton
StateProv:      QLD
PostalCode:     4064
Country:        AU
Updated:        2004-03-01

ReferralServer: whois://

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 

# ARIN WHOIS data and services are subject to the Terms of Use
# available at:
Results returned from