Drug Control Authority

Drug Control Authority | Targeting illegal online pharmaceutical operations. We identify, report and take down unlicensed pharmacies. Submit report via DMs

[Drug Control Authority @DrugControlAuth]

40+ illegal GLP-1 storefronts taken down in the last 4 weeks across the UK and EU.

Websites. Gone.
TikTok accounts. Gone.
Instagram pages. Gone.
Facebook storefronts. Gone.
Telegram groups. Gone.
WhatsApp distribution channels. Gone.

Semaglutide, Tirzepatide and Retatrutide sold without prescription, without MHRA authorisation, without pharmacy oversight and without any quality control.

Every registrar notified. Every hosting provider contacted. Every social platform reported. Every payment processor flagged.

They set up. We take down. They move. We follow.

If you are selling unlicensed GLP-1 injectables to UK consumers, your site is already on our list. Your registrar will hear from us. Your host will hear from us. Your payment provider will hear from us.

If you have been sold unlicensed GLP-1 products online, report it to us via DM. Your information will be treated confidentially.

@EliLillyandCo @novonordisk

[Namecheap.com @Namecheap]

@DrugControlAuth Hello. Thank you for your patience.
We have suspended the abusive service

[Drug Control Authority @DrugControlAuth]

@squarespace Yo Squarespace.

Since when did you guys allow illegal pharmaceuticals to be sold on your platform? Specifically GLP1s such as tirzepatide, Retatrutide and Human growth hormone.

https://t.co/9ofuFRFym7

We've also filed with your abuse team but as always with you, never hear anything back.

@MHRAgovuk @EliLillyandCo

[Drug Control Authority @DrugControlAuth]

@namesilo @ICANN @namesilo Updates please

[Drug Control Authority @DrugControlAuth]

@namesilo do you guys now accept illegal pharmaceutical operators to use your domain services for selling class B and C unlicensed pharma and anabolic steroids? We’re seeing a lot of pop up sites with you as registrar but after comprehensive abuse report filings they still exist?

[Drug Control Authority @DrugControlAuth]

.@namesilo two domains still live (we won’t post here for obvious reasons). Still selling Class C controlled substances and unlicensed GLP-1 injectables. Abuse tickets filed weeks ago. Still unanswered.

@ICANN another accredited registrar failing to meet its obligations under the RAA. Two domains. Two failed Nominet data validations. Zero action.

At what point does "accredited" start meaning something?

[Drug Control Authority @DrugControlAuth]

@Namecheap @pidy00n3 Fascinating triage system you've got. Vietnamese casino: suspended in 27 minutes. 8 detailed reports on unlicensed pharmaceuticals with WHOIS, screenshots and statute references: "please contact law enforcement." Good to know where the bar is. Do I need to post in Vietnamese?

[Drug Control Authority @DrugControlAuth]

8 abuse reports submitted by email to date (and latest one in your DM). Each sets out the ToS clauses breached, the laws broken and the supporting evidence. We have effectively done your abuse team's work for you and had no action in return. Happy to DM the ticket IDs, but the next step on our side is ICANN Contractual Compliance.

[Drug Control Authority @DrugControlAuth]

@Namecheap thank you for finally suspending one after we had to publicly shame you into clicking a link.

Now do it again. Same controlled substances. Same no pharmacy licence. Same you as registrar. Same "we couldn't validate your claims" response from your abuse team. Same us proving you wrong. Third time now.

At what point does your abuse department actually open a URL before hitting the "unable to validate" template?

Screenshots and WHOIS enclosed in your DMs. Again.

@ICANN how many times does an ICANN-accredited registrar get to say "we couldn't validate" a site openly selling Class C controlled substances before it becomes a Section 3.18 compliance issue? Asking for everyone who files abuse reports.

[Drug Control Authority @DrugControlAuth]

.@Namecheap "inconvenience or distress." People are injecting unlicensed Human Growth Hormone and GLP-1 compounds bought through a domain you registered and refuse to suspend. This is not an inconvenience. It is a public health issue.

You have now publicly stated four times that you will not act. Each time we provided evidence. Each time your abuse team said they "couldn't validate." Each time we proved them wrong. You even suspended one domain after we had to shame you into clicking a link.

"Work with the relevant authorities." We have. MHRA. Nominet. ICANN. And now we are working with the public, because apparently that is the only way to get your abuse team to open a URL.

You are an ICANN-accredited registrar. You are not a neutral bystander. Your Terms of Service prohibit illegal activity. Your RAA requires you to act. Telling reporters to go away and come back with a police officer is not compliance.

The domain is still live. The HGH is still listed. The Add to Cart button still works.

@ICANN @US_FDA @MHRAgovuk @EliLillyandCo @novonordisk

[Drug Control Authority @DrugControlAuth]

.@Namecheap nobody is asking you to be an arbiter. We're asking you to open a URL registered through YOUR platform and see Human Growth Hormone listed at GBP 150 with an Add to Cart button.

You don't need to arbitrate anything. HGH is a Class C controlled substance in the UK and a Schedule III controlled substance in the US. (Not to mention the anabolic steroids and class B meds on this site) That's not an opinion. That's federal and criminal law in both countries.

You ARE the domain provider. You accepted the registration. Your Terms of Service prohibit illegal activity. Your RAA obligations require you to act on credible abuse reports.

"Report it to the hosting provider" is not a compliance strategy. It's a deflection. @ICANN

[Drug Control Authority @DrugControlAuth]

@namesilo Already done. Multiple times. Via [email protected], formatted per your requirements, with full evidence, legislation cited and product listings documented.

Ref: DCA/ENF/2026/0201
Ref: DCA/ENF/2026/0247

Both filed correctly. Both met with automated responses. Both domains still live, still selling Class C controlled substances to UK consumers right now. Both still selling GLP1s Retatrutide and Tirzepatide @EliLillyandCo

We file abuse reports with registrars, hosting providers, registries and law enforcement across the UK, US and EU every week. Most act. You send us to a phishing form.

These are not phishing sites. They are unlicensed pharmacies selling Anabolic steroids, meds, Retatrutide and Tirzepatide with no prescription and no MHRA licence. Open either URL. It takes seconds.

Happy to resubmit via your preferred form for the third time if that helps, but the evidence hasn't changed since the first report.

[Drug Control Authority @DrugControlAuth]

@Namecheap Thank you, another one bites the dust ✅

[Drug Control Authority @DrugControlAuth]

.@Namecheap your abuse team says they "thoroughly investigated" and "couldn't validate" the sites we sent is selling controlled substances.

Here's how to validate it: open the URL. Click "Shop." You'll see Testosterone, Trenbolone, Semaglutide and Tirzepatide listed with prices and an Add to Cart button. Investigation complete. Took about 8 seconds.

Either your abuse team didn't open the website, or they don't consider the open sale of Class C controlled substances and unlicensed GLP-1 injectables to be a problem. (Although their TOS says otherwise)

Which is it? 🤦‍♂️

@MHaborstich @MHRAgovuk @US_FDA @EliLillyandCo @novonordisk

[Drug Control Authority @DrugControlAuth]

@Namecheap 🤦‍♂️🤦‍♂️🤦‍♂️

[Drug Control Authority @DrugControlAuth]

.@Namecheap @NamecheapCEO we have filed multiple abuse reports for domains registered through your platform that are openly selling Class C controlled anabolic steroids, unlicensed GLP-1 injectables including Semaglutide and Tirzepatide, and prescription-only medicines to UK consumers. No pharmacy licence. No MHRA authorisation. Consumer fraud confirmed.

Your abuse team has not responded.

Registered through Namecheap. Both live right now. Selling Testosterone, Trenbolone, Nandrolone, Masteron, Semaglutide, Tirzepatide, Retatrutide and more. All illegal under the Misuse of Drugs Act 1971 and Human Medicines Regulations 2012.

UK consumers are injecting unlicensed GLP-1 products bought through domains you are providing.

@LillyPad @EliLillyandCo @novaborsk your products are being sold illegally through Namecheap-registered domains with no prescription, no pharmacy licence and no quality control. Your brand protection teams may want to take a look.

How many reports does it take @Namecheap?

ICANN Contractual Compliance filing is next.

[Drug Control Authority @DrugControlAuth]

Reports were submitted via [email protected] and [email protected] with full domain details, IP addresses, product listings, pricing, applicable UK legislation and evidence URLs, all formatted per your standard abuse filing requirements. Multiple emails sent across multiple weeks for both several sites. Happy to DM the dates and subjects but the reports are in your system. Both sites remain live and selling Class C controlled substances right now.

[Drug Control Authority @DrugControlAuth]

Reminder to UK consumers: if a website is selling injectable steroids, GLP-1 medications or prescription drugs without asking for a prescription, it is operating illegally.

No MHRA licence = no quality control, no batch testing, no accountability.

You are injecting products from anonymous operators who use fake registration data and DDoS-protected hosting to avoid detection.

Report these sites to us via DM.

[Drug Control Authority @DrugControlAuth]

We are currently tracking a network of illegal pharmaceutical websites registered across @namesilo @namecheap and Key-Systems GmbH that are openly selling anabolic steroids, Semaglutide, Tirzepatide and other controlled substances to UK consumers with no pharmacy licence.

Multiple abuse reports filed. Some registrars are responsive. Others are not.

We will be naming them.