Archive for June, 2008

Broken Links Are Bad News For Webmasters

Posted on June 30, 2008
By harry_blogger in Uncategorized

A webmaster or website owner’s role or responsibilities do not end when the website he operates goes “live” and is now accessible by visitors online. There are a whole new set of responsibilities and functions that a website owner has to assume in order to make sure that his website continuously works perfectly and is able to fulfill its intended functions. Some of the responsibilities he has to assume include providing fresh content as much as possible, submitting the website to search engines and actively looking for reciprocal links in order to raise the ranking in search engines.

One of the most crucial responsibilities of a website owner is to check for broken links to his website. Broken links can be considered as one of the worst things that can happen to a website. A lot of not so good perceptions and negative effects arise from having a site that is riddled with broken links.

In fact, broken links are plaguing so many websites that it is being considered as a serious problem on the web. Many reasons can be cited for the spread of broken hyperlinks, the general causes of broken links include: Websites not being maintained with the appropriate degree of dedication, the architecture of the website and how information is placed within the site constantly changes, and the large incidence of websites that are closing down.

Hyperlinks are a very important component of websites because it aids in the navigation around the webpages and points to directions outside of the site. A website without links is like a ton of documents that are piled one on top of the other with no rhyme or reason and no intelligent way for you to get to the information that you need.

Link management is a very important and absolutely essential part of maintaining a website. As previously mentioned, broken links bring with it very negative perceptions about the website and these can have very detrimental effects on the traffic generated by the website.

From a technical perspective, broken links can stop search engine robots dead in its tracks, effectively preventing it from completely mapping out a website for submission to search engines. In addition, a website that is riddled with numerous broken hyperlinks gives visitors the idea that the site is unprofessional and that the website owner or owners have a dubious reputation – very costly image problems that are hard to change once it is established. Moreover, visitors who encounter many difficulties in a website will most likely not go back for a return visit, this is almost tantamount to losing prospective clients. They will be turned off because they won’t get the page that they are looking for, thinking that it is not really in the site when in reality the page is there only that an error in coding made the page inaccessible.

With internet users becoming more and more sophisticated as time goes by, it will take website owners more effort to entice these users to visit their websites and broken hyperlinks will not help this very difficult process in any way.

Website owners and webmasters should be very aware of the bad effects of having broken links in their websites. They should diligently weed out and fix any broken links. Fortunately, there are now a growing number of handy utilities that can help webmasters located broken links. With these utilities, managing a website becomes relatively easier.

For example, xml-sitemaps.com has programmed a standalone script that will not only create sitemaps but also looks for broken links in a website and then rms webmasters or website owners what links they are and to which pages the links are associated with. This automation of the task of checking broken links is a great time saver for webmasters and website owners.

Technorati Tags:
Technorati Tags:
Technorati Tags:

No Comments

Online Banking - A few basic precautions will let you enjoy the outrageous convenience.

Posted on June 29, 2008
By harry_blogger in Uncategorized

Most everybody who is still missing out on the convenience of banking online does so because of concerns about the security banks offers through their web sites. Here are a few tips on how to confirm that an online bank is legitimate.

Actually whether you are selecting a traditional bank or an online bank that has no physical offices, it’s always wise to make sure that the bank is legitimate and that your deposits are federally insured.

- Read key information about the bank posted on its web site. Most bank Web sites have an “About Us” section or something similar that describes the institution. You may find a brief history of the bank, the official name and address of the bank’s headquarters, and information about its insurance coverage from the FDIC.

- Be aware of the existence of fraudulent Web sites.

For example, watch out for copycat Web sites that deliberately use a name or Web address very similar to, but not the same as, that of a real financial institution. The intent is to lure you into clicking onto their Web site and giving your personal information, such as your account number and password. Always check to see that you have typed the correct Web site address for your bank before conducting a transaction.

- Verify the bank insurance status.
To verify a bank insurance status, look for the familiar FDIC logo or the words “Member FDIC” or “FDIC Insured” on the Web site.

- Don’t worry about your deposit insurance coverage if you or your family have less than $100,000 in all your accounts combined at the same FDIC-insured bank. But if your accounts total $100,000 or more, find out if they’re within the insurance limit. Contact your bank for more information.

For additional assistance from the FDIC about the legitimacy of an institution or the insurance of your deposits, call the FDIC’s Division of Compliance and Consumer Affairs toll-free at 800-934-3342 or send an e-mail via the FDIC’s online Customer Assistance page at http://www.fdic.gov/consumers/questions/customer/index.html.

The FDIC’s Web site also has an interactive service called EDIE (Electronic Deposit Insurance Estimator) that can help you determine the amount of your insurance coverage. You can find EDIE at http://www2.fdic.gov/edie/. Or, you can read the online deposit insurance brochure, “Your Insured Deposit,” located athttp://www.fdic.gov/deposit/deposits/insured/index.html.

It’s important to note that only deposits offered by FDIC-insured institutions are protected by the FDIC. Non deposit investment and insurance products, such as mutual funds, stocks, annuities and life insurance policies that may be sold through Web sites or at the bank itself, are not FDIC-insured, are not guaranteed by the bank, and may lose value.

Also, you should check the FDIC’s online database of FDIC-insured institutions. You can search for an institution by going to the FDIC’s home page at http://www.fdic.gov and selecting “Is My Bank Insured?” Enter the official name, city, and state of the bank, and click the “Find My Institution” button.

A positive match will display the official name of the bank, the date it became insured, its insurance certificate number, the main office location for the bank, and its primary government regulator. If your bank does not appear on this list, contact the FDIC. Some bank Web sites provide links directly to the FDIC’s Web site to assist you in identifying or verifying the FDIC insurance protection of their deposits. Also remember that not all banks operating on the Internet are insured by the FDIC.

Many banks that are not FDIC-insured are chartered overseas. If you choose to use a bank chartered overseas, it is important for you to know that the FDIC may not insure your deposits. Check with your bank or the FDIC if you are not certain.

- For insurance purposes, be aware that a bank may use different names for its online and traditional services; this does not mean you are dealing with separate banks. This means, for example, that to determine your maximum FDIC insurance coverage, your deposits at the parent bank will be added together with those at the separately named bank Web site and will be insured for up to the maximum amount covered for one bank. Talk to your banker if you have questions.

Keep Your Transactions Secure. It is important to learn how to safeguard your banking information, credit card numbers, Social Security Number and other personal data.

- Look at your bank’s Web site for information about its security practices, or contact the bank directly. Also learn about and take advantage of security features. Some examples are:

- Encryption is the process of scrambling private information to prevent unauthorized access. To show that your transmission is encrypted, some browsers display a small icon on your screen that looks like a “lock” or a “key” whenever you conduct secure transactions online. Avoid sending sensitive information, such as account numbers, through unsecured e-mail.

- Passwords or personal identification numbers (PINs) should be used when accessing an account online. Your password should be unique to you and you should change it regularly. Do not use birthdates or other numbers or words that may be easy for others to guess. Be careful who you give your password to. For example, if you use a financial company that requires your passwords in order to gather your financial data from various sources, make sure you learn about the company’s privacy and security practices.

- General security on your personal computer such as virus protection and physical access controls should be used and updated regularly.

If you pay attention to these few safeguards your online banking will be just as safe as the traditional way of banking. All you need is access to the world wide web and you will enjoy the added convenience of being able to take care of “business” at any time, day or night, from any location, in your country or abroad.

Technorati Tags:

1 Comment

Can Web Service Companies Do Without 24×7 Dotcom-Monitor support?

Posted on June 28, 2008
By harry_blogger in Uncategorized

The background
Enterprises worldwide have embraced ‘Web services’ as the preferred middleware technology for integrating their Web-enabled, e-business applications. Hundreds of Web service sites offer very useful services that provide essential components for running B2B or B2C e-business applications. Many enterprises outsource items ranging from security services for their plants and offices to outsource packing and forwarding, or even cleaning services. Specialized Web service companies provide the latest exchange rates for any combination of the 100+ countries they cater to. Web service companies have hundreds of B2B or B2C e-commerce/e-business clients who need their services (on a 24×7 basis) for running their non-stop global businesses.

Some examples of Web services include:

* Providing access to FedEx tracking information by taking a tracking number and returning shipment status from FedEx
* Credit card maintenance and management
* Providing authentication
* Returning real-time flight information for flights in the air, given an airline code and flight number, using current information from online service.
* Calculating and providing postage requirements in any currency
* A monthly lease payment calculator service
* Sending text messages to mobile phones, when provided a list of countries and their international dialing codes
* Providing Internet time
* Retrieving news headlines from sites like CNN, CBS, or MSNmoney and supplying them to news portals
* Providing up-to-the-minute sports updates to various channels
* Offering Web site management system by providing 100+ functions
* … and many more!

Vital Issues involved in Web services business
As Web service companies integrate with hundreds of important B2B/B2C clients, they become vital components in hundreds of billions of dollars of international trade and e-commerce, manufacturing, and service business. Since a transaction cannot be completed without their service input, any disruption of service, delayed response, or system error could spell disaster and incalculable loss from deferred shipments, cancellations, and even business operations stoppage. Thus, it is imperative that Web services work correctly and efficiently every time.

Web service companies therefore must consistently performs within acceptable framework. There is little margin for error. That is why Web service companies typically have SLA agreements signed with clients for proper functional and performance delivery. Any deviations could mean attracting censure, penalties, or both.

What must be done to prevent exposure?
Clearly, automatic and constant monitoring of the functionality and performance of a Web service site is necessary. This website monitoring should not only check that correct functionality is delivered, but also, how efficiently it is being delivered. If the turnaround time is consistently beyond the SLA norms, it must be recorded and the service company notified of the anomalies, so that the company can examine inside and outside of their firewall to rectify the situation.

Dotcom-Monitor.com has the solution
Dotcom-Monitor.com can provide customized monitoring through its highly respected and acclaimed Dotcom Monitoring Service. This automated, non-stop (24×7) service caters to a site’s specific functional and performance monitoring needs, automatically alerting and reporting deviations to site management, in real time, through the built-in Dotcom-Monitor reporting system. This prompts site management for immediate remedial action.

How Dotcom-Monitor works
Dotcom-Monitor has remote agents strategically positioned around the world, each acting as an Internet browser. After a customer creates an account, he or she supplies the URLs of the Web service site, along with functions to be monitored with inputs, algorithms, expected results, and performance norms. Then, the process starts immediately. Dotcom-Monitor’s global agent checks the Web service(s) to ensure that it is accessible and maintaining acceptable levels of performance. If any of these fall outside the specified parameters, the customer is notified.

1. Functional Monitoring: Dotcom-Monitor constantly checks the functionality of the service by making specifically tailored, functional calls to the site (application) server to monitor the accuracy of the results obtained in real time. It uses representative input from transactions/messages, algorithms, and results provided by the Web service company for this purpose. The monitor performs Dotcom-Monitor’s service at pre-defined intervals. Any deviations from the supplied results are promptly reported for appropriate action.

2. Performance Monitoring: Most Web service companies use SOAP (Simple Object Access Protocol) technology to architect service transactions’ receipt, de-serialization, processing, serialization, and delivery. SOAP is a lightweight, stateless, XML communication protocol that lets applications exchange structured messages/transactions across the Internet. Most current SOAP implementations use HTTP binding due to SOAP’s wide availability and ability to pass through firewalls.

One of Dotcom-Monitor’s features is to determine the level of performance available from SOAP implementations using appropriate test transactions/messages. First, Dotcom-Monitor checks for latency, the round-trip time taken to send and receive a single transaction/message from the monitor server to the service server and back. High resolution timers are used to measure the time taken for each round-trip. Dotcom-Monitor repeats this check at a defined interval. For throughput, Dotcom-Monitor conducts checks to find the peak throughput available from each SOAP implementation using a number of concurrent driver threads, records the number of round-trips completed per second, and compares it to supplied norms.
Dotcom-Monitor conducts a separate exercise to measure SOAP serialization and de-serialization overheads. The test driver sends a number of customer detail records to the server. The monitor captures the times required by the server to perform serialization and de-serialization of SOAP transactions/messages. Any overall performance degradation beyond the Web service-defined boundaries are recorded and reported. A proper log of the checks made is maintained for later analysis.

In Conclusion
Just as business is vital to economy, Web services are crucial to e-business. Web services must consistently perform with absolute integrity and deliver sustained, non-stop performance to B2B or B2C e-business sites. Since these sites are concurrently concatenated with hundreds of e-business Web sites providing functions vital to each business they serve, there is no margin for error or for failure.

Web service sites must plan for zero tolerance. While it is easy to plan and implement redundant hardware and network infrastructure, exposure lies in making flawless functional delivery within desired turnaround time, every single time. That is only possible if constant monitoring for correct functional output(s) and response time performance are maintained, and any deviations highlighted in real time for remedial action. A 24×7 website monitoring solution from Dotcom-Monitor.com is the real answer.

Technorati Tags:
Technorati Tags:
Technorati Tags:

No Comments

5 Threats that make your Website Vulnerable

Posted on June 27, 2008
By harry_blogger in Uncategorized

Webmaster dilemma : having to choose between “easy and quick developments” and security ?
« 75% of malicious attacks on the web take place on the application layer (Gartner) »
«… The evolution of web applications has been characterized by a relatively immature level of security awareness … (Deloitte and Touche) »

Websites create value. Whether you are an e-merchant, an administration or a car manufacturer, your core values (accounting, supply chain, customer data, business , …) are processed, stored and communicated via your internet applications and more generally thanks to your IT system. Web applications include of course web sites as well as business and logic internal applications, intranets, extranets, portals … It is a fact : more and more companies and administrations tend to ‘webize’ their IT infrastructure.

But there are counterparts : being open brings dangers and threats that are often underestimated …

Web protocols are not secure
«More than 80% of all malware that emerged in the past year focus on application-level vulnerabilities (various sources, 2006). »
« In June 2006, 92 SQL injection and 34 cross-site scripting (XSS) new vulnerabilities were recorded on our database (Secunia) »

These real threats result in : private data theft, illegal use of your website (for instance to host forbidden contents or spam relays), website defacement, e-commerce website abuse, unavailability, …

Major threats include :
· Cross-site scripting (XSS) - arbitrary code injection in scripts
· SQL injection - reading or modifying databases
· Command injection - unauthorized command execution
· Parameter/form tampering - sending false arguments to the application
· Cookie/header tampering - HTTP fields use to send false values to the web server
· Buffer overflow - overflowing buffer memory
· Directory traversal/forceful browsing - access outside the application
· ‘Attack obfuscation’ - attack masquerading, for instance via URL encoding
Very well known security principles are confidentiality, availability, integrity and auditability. HTTP and HTTPS protocols give poor result on these aspects. Web protocols hardly authenticate, only partly guarantee confidentiality and integrity, … And malicious SSL traffic will remain illegitimate when processed by your website !
Keep in mind that an URL sent by a browser is a command line to your web server : for instance an URL generating an SQL command or activating a CGI script.

At last, web protocols do not impose input validation, this is the major cause of their ‘insecurity’ !

Coding secure web applications is a hard work
« For far too many development professionals, Web application security only consists of producing applications that are functional and stable, not building hacker protection into the code or checking for SQL injection vulnerabilities (Spi Dynamics) »

Web protocols are not secure by default. But web application developers could strongly improve security standards with good coding principles. As M. Andrews and J. Whittaker mention in their Guide to Web Application Security : “If developers only validated their inputs to what they are expecting to be given, rather than attempting to filter for malicious inputs (if at all), then 80-90% of web application vulnerabilities would go away. SQL Injection — gone, XSS — gone, parameter tampering — gone.”

Unfortunately, from a software vendor’s perspective : launching a new product on time is more important than launching a secure(d) software !

The limits of traditional tools
«According to CSI/FBI 2006 study :
97% of interviewed companies and administrations were using an antivirus, 98% have a network firewall, 69% have intrusion detection systems. However … 65% of these organisations have undergone a viral or spyware attack, 32% have experienced unauthorized access to their internal data and even 15% have suffered from network intrusions … »

Network security is not web application security !
The perimeter network firewall can not block all flows and attacks. Indeed, it usually lets http flows (ports 80 and 443) come into company’s networks as it is usually needed for communication with outside world. As this specific port is open, more and more applications are using this open door, for instance, VoIP as well as peer to peer. This http port becomes a real toll-free motorway to penetrate internal network. More and more applications (including suspicious ones) are encapsulated into http traffic. This is the “everything over HTTP” phenomenon !

Comprehensive IT security requires a layered approach
«Two very old adages in security are “least privileges” and “defense in depth.” The idea is to only give software enough privileges to get the job done, and not to rely on only one security mechanism. M. Andrews and J. Whittaker, Guide to Web Application Security »

Although security tools have their limits, they are usually necessary to make IT security infrastructure stronger.
Security experts refer to IT security infrastructure as “rings of protections”. Two very well known and common tools are antivirus and network firewalls. As regards with web security, we have seen that web traffic penetrates IT systems with no real opposition. That is why web application firewalls become indispensable. A web application and a web site need its ‘bodyguard’, as web technologies become increasingly critical and exposed in modern IT infrastructures ! In late 2004, a Red Herring journalist mentioned : “Web-app security will be just like anti-virus was 10 years ago. In five years, it will be a must-have.”.

Conclusion : web application firewalls act when conventional tools show their limits

Web application firewalls are an important building block in every HTTP network. First of all, they protect the most exposed part of your IT assets : the website. Web applications need their [intelligent and self-learning] bodyguard. When we say bodyguard, we mean a solution which ‘understands’ the application, taking into account its behavior, which is close to it (ie directly on the web server) and can ACT immediately and consequently (counter-measure). At the same time, it has to be discrete and stick to business logic. It is the “last rampart”, the ultimate protection !

Technorati Tags:
Technorati Tags:

No Comments

Protect Yourself From Online Fraud

Posted on June 26, 2008
By harry_blogger in Uncategorized

Being in the online medication industry for over two years has taught us much, but one of the most important lessons we have learnt is how to tell a scam pharmacy from a real pharmacy. You must be very vigilant in determining who you trust when you order online. We suggest you take note of the following.
Do they have contact information readily available?
Would you trust your medications when they come from a company you can only ever contact through an email address? More than 90% of the online pharmacies out there do not list phone numbers or addresses and this lack of contact information says many things about the pharmacy:
1. We don’t want to talk to you and
2. We want to remain anonymous
But it doesn’t stop at the phone number, because what a lot of online pharmacies are doing nowadays is outsourcing their call center to a 3rd party whose primary job is just to take orders. This is important to take note of because when a company outsources its call center they still separate themselves from the customers and maintain their degree of anonymity. When you combine this with the fact that they can pick up and move their operation literally overnight; this is a scary thing indeed. This is not to say that all pharmacies that outsource are fraudulent, it is just something to take note of when you are doing your due-diligence.
The next piece of information you want to look for is the company’s physical mailing address. The only reason a company would not provide this piece of information is to once again hide their true identity/location and this is a very common indication of fraud.
Next time you visit a pharmacy be sure to click their “Contact” page and see what information they have available to contact them by. You may be very surprised.
Reputable Domain Name?
Take a look at the top of the Internet browser to see the website address you are visiting, does it look like a reputable domain name?
A reputable domain name is something like:
http://www.google.com
If you are visiting a site that looks something like:
http://amiaminifg.net/HlvCGoiogpHkzl8FaT9sOfk6G/FBouNxwSAAYDDgclCxUeTAUD.htm
Then click the back button right away. These domain names are literally there one day and gone the next. Does the above URL look like it belongs to a pharmacy that is legitimate?
Another thing to watch out for are website addresses that are not using domain names at all, but rather IP addresses such as the example below:
http://204.37.84.153/viagra.htm
This is not just laziness on the part of the pharmacy, this is done on purpose. By using an IP address the fraudulent website can easily move anonymously from server to server without any problem. Do you think they are notifying all their previous customers of such moves?
How did you hear about the pharmacy?
Where did you hear about the pharmacy? Obviously the best way to hear about any pharmacy is from word of mouth but when you are online that is not always the case. There are so many ways to advertise on the internet that weeding out the good from the bad may seem daunting, but is rather quite easy. The absolute worst place to hear about any pharmacy is unsolicited email (otherwise known as SPAM) and then next worst would probably be pay-per-click (where pharmacies bid on keywords that you search for), although if the pharmacy is bidding on pay-per-click through Google Ad words (google.com) or Overture (yahoo.com, msn.com, etc) then they now are required to participate in Square Trade (a licensing body that governs online pharmacies and validates their legitimacy) before they can advertise. These pharmacies are supposed to be legit, but the screening process for them are certainly not perfect and on more than one occasion we have encountered known fraudulent sites to pop up from time to time, so be careful!
Other forms of advertising are banner ads and affiliate sites and these all must be taken with a BAG of salt. To put it in perspective, those are all “paid” advertisements and there is no one verifying anything they promote. The only reason one website would advertise another website such as a pharmacy is to obtain a sort of commission in return. So if they are being paid to refer you to a pharmacy, the only thing they care about is which pharmacy will pay them the most for the referral, not which pharmacy is the most legit. Think about that next time you take another websites word for a “recommendation”.
How do you identify an affiliate site? A good way is by the URL they are sending you too. For example, if a website was going to refer you to another website they would normally do so directly as in:
http://www.website.com
However, if they are an affiliate, you are likely to see other parameters in the URL that will allow the commission to be tracked. An affiliate URL could be any of the following:
http://www.website.com/?affiliateID=12345
http://www.website.com/product/service.html?partner=12345
http://partner123.website.com/
Also be careful because sometimes an affiliate URL will look like the above but then quickly redirect you to the main site (without the affiliate IDs) in order to try and fool the customer. To determine if this is the case, right click on the link you want to visit, copy the link, the paste it into your address bar. This is the only way to determine EXACTLY where you are going and what incentives are awaiting the referring website if you place your order there.
How many products?
This is not the be all end all of determining if a website is a scam, but most of the scam websites we come across all seem to share the characteristic of having less than 50 or 100 products in their inventory. Make note of this when you arrive at the website, and make note of the fact that it is a lot easier (and quicker) to throw up a 50 product site than a 5000 product site.
Is there a visible Internet presence?
How long has the site you are visiting been around? Is anyone (other than obvious affiliates) talking good/bad about it? Here is a good way to see:
Go to http://www.google.com and type:
cache:www.website.com
site:www.website.com
link:www.website.com
(where www.website.com is the website you are researching)
This will give you a few key pieces of information about the site.
* When (if ever) was the last time the search engine saw this site
* How many pages of the website is in the search engine
* How many other sites are linking to it
While this information can not be strictly used to tell legitimacy of any website, it can be used to determine how long the site has been around. If the site has many indexed pages and many other legitimate websites linking to it, you know it has been around for some time. This is always a good sign, since fraudulent websites typically don’t stay around long enough to even be cached by a search engine let alone have all their pages indexed.
SSL Security
In the day and age of Internet commerce you would think that by now everyone passing personal information across the Internet would be doing so securely, but sadly that is just not the case. Whenever you are visiting a site and are at a page where they are requesting information such as your credit card, make absolute sure they have an SSL certificate (little lock at the bottom right hand corner of your browser) present, because if they do not you are just asking for trouble. The lack of this symbol means that your information is being sent over the Internet in plain text, and anyone (including your ISP) could read it without trouble. Is it really worth the risk?
Also be careful about calling in to place your order, because most call centers (especially those that are outsourced) will place the order over the exact same website you would use online (secure or not), so if you think you are more secure over the phone that is not the case. In fact, we prefer to use the Internet ourselves since you never really know who the person on the other end of the line is and what they are doing with your information after you hang up.
Tracking information for Orders
Do the websites provide tracking numbers for their orders? Most do, but there have been a few we came across lately that were very suspicious about how they do their business. They will provide you with a tracking number, but the only way you can track the order is through their own website. They usually provide a number of falsified reasons as to why this may be, but that is beside the point. The goal of these websites are to provide you with “hope” that the order is actually in transit on the way to you. In the mean time they are waiting Visa/Mastercard to pay them the funds (there is sometimes up to a month delay from the day you pay with your credit card till the day the website owner receives their funds). Once these funds have been received they simply disappear. Of course, maybe they will put extended shipping times like 5-6 weeks to give them a little more time, but whatever the case make sure that whichever company you deal with will give you a tracking number for a service you can actually track yourself (FedEx, DHL, USPS, etc).
No charges at all
This actually happened to a few of our customers and so we decided to update this page with the information. Believe it or not, getting a merchant account (the ability to process MasterCard and Visa) is not an easy task, even for a legitimate website. Just having one is not a basis for legitimacy, but it’s a start. For those fraudulent websites that are either too lazy or incapable of acquiring such an account, they will just throw up a website and “pretend” to charge you for the order. They will then save all your credit card details (and those of a few thousands other people) to be sold/used at a later date for some other types of fraud. After you place an order with any new company online, give your bank a call 2-3 days later and see if it was charged. If it has not been charged, you may want to call the company and find out why. Some companies may just charge you when the order is about to be shipped so it is not an immediate cause for alarm, but then again, you never know unless you ask.
Subscription Fees
Probably one of the most common questions asked when people call in are “Do I pay any subscription fees to join your service?” There are quite a few sites selling subscriptions to their “service” that would allow potential customers to view lists of “legitimate” pharmacies carrying hard to find products that have been “fully verified”. So we signed up to one of these websites to see just what they would offer (after all it was only $25), and all they provided was a list of websites, nothing more, nothing less. So the next step was to verify these websites against our list of SCAM resistant methods and let’s just say we were not surprised when almost all of them failed one criteria or the other, especially the criteria of them all being affiliate related. One thing we were surprised with was the recurring monthly charge even after we cancelled the service. In fact, we had to cancel the card before those charges ended up stopping, so needless to say use these services at your own risk. Internet Scams a thing of the past?
Not anytime soon. It seems no matter how many times these pharmacies are shut down; they just keep popping up again and again under different names with more and more ways to take your hard-earned money. As long as it remains profitable for them to do so, they will always be there. Knowing this is the first step in protecting yourself. The next step is to have the latest tools and knowledge to weed through the good from the bad, and that is what we are here to help you do. We will update this page frequently with more ways to protect yourself online so be sure to bookmark us and check back later.
From all the staff at http://www.DrugDelivery.ca, we wish you a happy (and safe!) shopping trip.
DrugDelivery.ca is an online pharmacy escrow service which has been an industry leader in online medications since 2003. Our service protects both the customer and the pharmacy from the plethora of fraud on the Internet.

Technorati Tags:
Technorati Tags:
Technorati Tags:
Technorati Tags:

No Comments