Find LegitScript on Twitter to report suspicious Internet pharmacies

We recently added a handful of rogue Internet pharmacy domain names to our database after a tip from a Twitter user. All the websites reported to us are being linked to from a hijacked law firm website and have .pl and .ru TLDs. The websites are operated by the criminal network EVApharmacy and use a subdomain of one of the network’s “anchor” websites, paysystemcore.com, for payment processing:

  • chromeherbaltab.pl
  • asmear.ru
  • healthmedsgroup.pl
  • bigenn.ru

EVApharmacy operates between 2,000 and 20,000 fake pharmacy websites and is one of the most common sources of spam worldwide. Although many EVApharmacy domain names are “trashy,” or likely to be scrapped after use in spam emails, keeping track of this major rogue Internet pharmacy network relies on information such as the new website templates, domain name registrars, ISPs and IP addresses that are used.

LegitScript always welcomes input and tips from the public, and we appreciate any opportunity to expand our database of online pharmacies. Information about new websites can assist in shutting down Internet pharmacies that are engaged in criminal activity. You can check an Internet pharmacy’s legitimacy by visiting our home page. If we don’t have information about the website yet, alert us on Twitter by tweeting @legitscript, or report it via our home page.