FANDOM


Bizcn is a registrar in China.

Anti-Spam PositionEdit

ICANN accredited registrar who are subject to the terms of the ICANN RAA agreement.

Official PositionEdit

Required to abide by the agreement with ICANN for accreditation.

From the ICANN Registration Accreditation Agreement (RAA):
3.7.7.9 The Registered Name Holder shall represent that, to the best of the Registered Name Holder's knowledge and belief, neither the registration of the Registered Name nor the manner in which it is directly or indirectly used infringes the legal rights of any third party.

1.13 "Illegal Activity" means conduct involving use of a Registered Name sponsored by Registrar that is prohibited by applicable law and/or exploitation of Registrar's domain name resolution or registration services in furtherance of conduct involving the use of a Registered Name sponsored by Registrar that is prohibited by applicable law.

5.5 Termination of Agreement by ICANN. This Agreement may be terminated ... [if the] Registrar .. is convicted by a court of competent jurisdiction of a felony or other serious offense related to financial activities, or is judged by a court of competent jurisdiction to have: ...

with actual knowledge (or through gross negligence) permitted Illegal Activity in the registration or use of domain names or in the provision to Registrar by any Registered Name Holder of inaccurate Whois information


From the CNobin / Bizcn Domain REGISTRATION AGREEMENT
By registering a name or applying for services you also represent that the statements in its application are true and you also represent that the Domain Name is not being registered for any unlawful purpose.

Actual BehaviorEdit

Ignores requests to suspend domains used for fraud. Cnobin refuses to accept that there is sufficient evidence to suspend their rogue pharmacy domains.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 85%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Public Domain Registry PDR at 3%.

The next most abused registrar is China's Bizcn at 2%.

The next most abused registrar is Germany's Key-Systems at 2%.

The next most abused registrar is Canada's Tucows at 2%.

Next is Endurance at 2%.

Most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Blacklisted nameservers over 5-day periodEdit

Source: URIBL http://rss.uribl.com/nic/BIZCN_COM_INC_.html

Description of the RegistrarEdit

Web sites are in Chinese, except for Cnobin in English.

Sample illegal domainsEdit

See BIZCN_list

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during May 2017 were located at these IPs, primarily Russia, Turkey, Latvia and the Seychelles.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
91.242.163.166 95.84.156.43 217.195.60.211 46.29.2.193 62.112.8.135
51.15.145.121 46.29.2.192 1 77.81.111.122 175.45.128.19 75.98.230.254
88.150.227.68 94.199.48.30 81.171.7.156 91.230.121.99 31.31.204.161

Recent High use IP addresses from April 2017

IP.Pie

Invalid registrant informationEdit

Previous historyEdit

bevvybunny.com  	invalid phone number +64.029211111 
theodoramira.com	invalid phone number +39.03573026876 
emilyursa.com   	invalid phone number +31.0664642780 
kristicharlot.com	invalid phone number +64.027446014 
ladonnaethyl.com	invalid phone number +64.026370886 
maryloufelita.com	invalid phone number +61.240782171 
rosmundaglenn.com	invalid phone number +36.1137502

The following fakes were reported in October 2013, and the miscreants changed the phone numbers and addresses to Russian ones, demonstrating further evidence of fraud, and revealing the true country of origin

drugslevitrapills.com	invalid phone number  +48.883340764
prescriptioncareproducts.com	invalid phone number +36.73327156
vasomaxgenerics.com	invalid address and phone number 20 Lapko Road Pingrup WA 6343, +61.890192065
androidherbal.com	invalid phone number  +358.0442621106
arabelacicily.com	invalid address 4047 Holden Street, San Diego CA 92101
bioportfoliotabhealthcare.com	invalid address Kirchenallee 90, Teisnach BY 94241
bplispills.com   	invalid phone number +36.92106393
caremedspatients.com	invalid phone number +64.027817478
constantalita.com	invalid phone number +358.0404297893
drugstorepharmetro.com	invalid phone number +55.1143158979
elnapegbecca.com	invalid phone number +33.0547225014
garagesalerx.com	invalid phone number +31.0698761694
gothamisttratab.com	invalid phone number +358.0410974825
marijuanamedicaltab.com	invalid address Via Sedile di Porto 22, Monselice PD 35043
maureenepatrice.com	invalid phone number +55.4874427250
medicalprescriptionpatients.com	invalid phone number +64.027857843
medicarecbo.com 	invalid phone number +33.0285927313
milenamalinde.com	not at that number +358.0500284608
mymedicalprescription.com	invalid phone number +33.0274519196
myviagralevitra.com	invalid address 59 Point Walter Road, Postans WA 6167 
neddamyrta.com  	invalid phone number +33.0426348826
pillsbioportfolio.com	invalid phone number +34.923649478
rxjeanstra.com  	invalid phone number 0484238747
salepharmacyprescription.com	invalid phone number +49.07021498175
salewelnessmartrend.com	invalid phone number +36.92409142
stellaholly.com 	invalid phone number +64.029576000
tabhumana.com   	invalid phone number +55.8522323096
themedsdiet.com 	invalid phone number +358.0445625691
welnessdrugstoreprescription.com	not at that number +64.021781375 Invalid address 
                                       - 74 55 Arcade, Glengarry Invercargill 9810
wineslnessherbal.com	invalid phone number +358.0421372078
billyeleoine.com	invalid phone number +36.60318530
carneycanada.com	invalid phone number +61.267118157
dietpharmediterranean.com	invalid phone number +64.028886786
dietviagraweight.com	invalid phone number +33.0580116373
ginnyalejandrina.com	not at this phone number +55.2187583112
juninajenifer.com	invalid phone number +36.92112512
medsdrugeneric.com	invalid phone number +39.03386696595
mysalerx.com     	invalid phone number +1.7084407261
nikitapillevitra.com	invalid phone number +31.0666313558
tabdietfat.com   	invalid phone number +61.737676698
tabletmedicalcenter.com	invalid address Billwerder Neuer Deich 56 Sonnefeld BY 96242 
thecaremeds.com  	invalid address 2233 Wellington Street Toronto ON M9C 3J5 
vottorx.com      	invalid phone number +64.027751480
janellaclaude.com	invalid phone number +55.1953762009
nissiethelma.com	invalid phone number +39.03511704302

The false phone numbers were changed to one of these 4 in Russia

+7.4952255495
+7.4956211281
+7.4957452002
+7.4957850390

The false street addresses were changed to one of these 4 in Moscow

Pyatnitskoe sh. 6-4 kv.140 Moscow 125430
Schelkovsky pr-s 11-1-3 Moscow 105425
ulitsa Pokryshkina d.36 korp.2 kv.36 Moscow 119602
ulitsa Privolnaya d.71 k.1 kv.19 Moscow 109153

The registrant email addresses were set to one of these 4 in Russia

canar@bz3.ru
kerry@yourisp.ru
tdd@free-id.ru
wellas@ca4.ru

Current processEdit

Now the registrar has set up privacy protection for the registrants of fraud domains.

Registrant Name: Wuxi Yilian LLC
Registrant Organization: Wuxi Yilian LLC
Registrant Street: No.1001 Anling Road
Registrant City: Xiamen
Registrant State/Province: Fujian
Registrant Postal Code: 361008
Registrant Country: cn
Registrant Phone: +86.5922577888
Registrant Phone Ext:
Registrant Fax: +86.5922179606
Registrant Fax Ext:
Registrant Email: whoisprivacyprotect@whoisservices.cn

The contact for this whoisservices.cn is

Registrant Contact Email: hpyi@bizcn.net


Where to send abuse complaintsEdit

  • huiping yi hpyi@bizcn.net
  • support@cnobin.com

Additional Contact InformationEdit

Postal addressEdit

  • 702C NO.59, WangHai Road, Xiamen Software Park, Xiamen, Fujian 361008, China.

Xiamen Fujian 361004

  • 1F - 4F, Software Technology Service Builing, Xiamen Software Park

Xiamen Fujian 361004

Registration InformationEdit

Telephone and FAXEdit

phone: +86.5922577888
fax: +86.5922179606

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

InterviewEdit

CorporateEdit

http://who.is/whois-com/ip-address/bizcn.com/

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.