FANDOM


R01 is a registrar in Russia. Регистратор R01

R01.logo

Description of the RegistrarEdit

Registrar R01 - domain name registrar belonging to the group of companies "Hosting Community". The company became the first accredited registrar in the RU national domain and today offers a wide range of professional services, being one of the leaders in terms of the number of registered domains for .RU .SU and .рф.

Регистратор R01 — регистратор доменных имен, входящий в группу компаний Hosting Community. Компания стала первым аккредитованным регистратором в национальном домене RU и сегодня предоставляет широкий спектр профессиональных услуг, являясь одним из лидеров по количеству регистрируемых доменов .RU, .SU и .РФ.


Anti-Spam PositionEdit

Not defined

Official PositionEdit

Not defined

Actual BehaviorEdit

R01 is widely abused by the Russian EvaPharmacy fraud operation.

R01 usually ignores all requests to suspend illegal domains. Domains are usually only suspended at the expiry date. However, in April, May June and July 2017, half of the fraud domains were suddenly suspended (put in "NOT DELEGATED" status).

R01 широко злоупотребляли Российской EvaPharmacy мошеннической операции.

R01 игнорирует все просьбы приостановить незаконные доменов. Домены только приостанавливается на срок годности.


Examples of domains used for fraudEdit

Click on any heading for evidence of fraud. The list is held at [List of R01.RU sponsored fraud domains]

There are over 400 listed pharmacy fraud domains. These were all live when tested on July 20, 2017.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 85%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Public Domain Registry PDR at 3%.

The next most abused registrar is China's Bizcn at 2%.

The next most abused registrar is Germany's Key-Systems at 2%.

The next most abused registrar is Canada's Tucows at 2%.

Next is Endurance at 2%.

Most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Сравнение этого регистратора с другими можно увидеть на графике.

Он показывает, сколько доменов не было приостановлено для разных регистраторов за последний год.

Чем выше столбец, тем больше доменов спонсирует регистратор.

В настоящее время наиболее злоупотребляемый регистратор находится в России R01.ru

Этот регистратор поддерживает подавляющее большинство мошеннических доменов, используемых в Eva Pharmacy

Другие регистраторы быстро прекратили контракты на обслуживание с этими кибер-преступниками, когда они увидели очевидные доказательства мошенничества.


Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during May 2017 were located at these IPs, primarily Russia, Turkey, Latvia and the Seychelles.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
91.242.163.166 95.84.156.43 217.195.60.211 46.29.2.193 62.112.8.135
51.15.145.121 46.29.2.192 1 77.81.111.122 175.45.128.19 75.98.230.254
88.150.227.68 94.199.48.30 81.171.7.156 91.230.121.99 31.31.204.161

Recent High use IP addresses from April 2017

IP.Pie

Where to send abuse complaintsEdit

  • Customer Information: +7 (495) 783-3-783; info@r01.ru
  • Technical support: +7 (495) 783-3-783; support@r01.ru
  • response@cert-gib.ru
  • Web site https://partner.r01.ru/contact_admin.khtml?SID (but sends the complaint to the registrant)

Additional Contact InformationEdit

Applications, which can seriously affect the functionality of your services, are performed only by an authorized request. You can send an authorized request through section https://partner.r01.ru "Contact Us".

Sincerely, Department of Customer R01
(RU-CENTER Group)
Phone: +7 495 783-3-783
8800 775-37-83 (for Russian regions)
Fax: +7 (495) 930-88-00

Postal addressEdit

Headquarters: Moscow, Leningrad Prospect, 74, Building 4

Registration InformationEdit

Telephone and FAXEdit

  • General +7 (495) 783-3-783
  • Regions 8 (800) 775-3-783


Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Suspensions in May 2017Edit

In April and May 2017, R01 has shown a willingness to suspend fraud pharmacy domains. This is a list of 147 domains suspended in May.


Canadian Family PharmacyEdit

privateherbeshop.su
perfectsafeshop.ru
ythzigxq.su

Canadian Health&Care MallEdit

canadianhotmart.su
medicinalhotshop.su
trustedsmartinc.su
lprquihp.ru
luckymedssupply.ru
mbvionhe.ru
medicalherbinc.ru
medicalpillmart.ru
moyeksaj.ru
mydrugsassist.ru
mypharminc.ru
myprivateassist.ru
myremedialreward.ru
myremedialshop.ru
mysafeinvestment.ru
mytabsgroup.ru
mytabsstore.ru
naturalaidmarket.ru
naturalsafetrade.ru
ndmhzgyg.ru
newbestquality.ru
newfastsale.ru
newfirstelement.ru
newmedicareinc.ru
obaxvflb.ru
onlinedrugoutlet.ru
organicdrugssale.ru
perfectmedseshop.ru
perfecttabletinc.ru
plsvzoyr.ru
ppiyhohe.ru
privatedrugsshop.ru
privatehotgroup.ru
privateremedyinc.ru
pspqsoqu.ru
purebesttrade.ru
pureherbpurchase.ru
remedialmedsmart.ru
safeglobalstore.ru
safeherbseshop.ru
safepillsmarket.ru
safepillsquality.ru
sgxzhzlu.ru
smartaidsupply.ru
smartdrugmart.ru
tcwutfxr.ru
thehealthgroup.ru
thesafevalue.ru
thesecuremarket.ru
thvdhawt.ru
trustedherbshop.ru
ttzkpkxo.ru
tupyrrvl.ru
twuafieu.ru
tyhghfnt.ru
ufbpypau.ru
urujivsq.ru
useqmbqd.ru
uubfhetc.ru
vdicoyup.ru
yitmrfqy.ru
yourcurativemall.ru
yourdrugsmart.ru
yourfirstvalue.ru
yourherbbargain.ru
yourremedygroup.ru
yourtabsassist.ru
ytpvvben.ru
zucdlzkz.ru
wxikxdbh.su

Canadian Neighbor PharmacyEdit

kuwtjjxv.ru
opulknyh.ru
organicsafemart.ru
purepharmgroup.ru
rebzmbhk.ru
vbadhyle.ru
wgoaubla.ru
xsktvjpw.ru
yoursmartcompany.ru
zyjjyocm.ru
zyrqehpq.ru

Canadian PharmacyEdit

yourcuringvalue.ru

CanadianPharmacyEdit

luckybestservice.ru
luckyonlinedeal.ru
luckyrxgroup.ru
newtabsservices.ru
pureherbeshop.ru
puretabletshop.ru
puretabsquality.ru
safebestreward.ru
safecanadiandeal.ru
safedrugsgroup.ru
safefastreward.ru
themedsmarket.ru
thesmartinc.ru
trustedsafegroup.ru
yoursmartshop.ru
newwelnessshop.su
thefirstpurchase.su
trustedfirstmall.su
trustedherbshop.su

Men's HealthEdit

secureherbsdeal.ru
themedicinaldeal.ru

My Canadian PharmacyEdit

luckytabsshop.ru
magicsafegroup.ru
mygenericstrade.ru
myhotwebmart.ru
myprivateeshop.ru
onlinepilltrade.ru
onlinesafemarket.ru
organicaidshop.ru
organicpillsmall.ru
organictabseshop.ru
puredrugseshop.ru
puredrugsprogram.ru
purepillsupply.ru
puretabssupply.ru
safecarereward.ru
safecareservice.ru
safedrugsvalue.ru
safeonlineassist.ru
smartherbprogram.ru
smartnaturalsale.ru
smartonlinemall.ru
smartprivatemart.ru
yourhealinginc.ru
yourherbsupply.ru
yourpharmcompany.ru
yoursafepurchase.ru
smartpillmart.su
thehealtheshop.su
trustedpharmdeal.su
trustedtabletinc.su
yourherbsassist.su

RxExpressOnlineEdit

joleendorolisa.ru
kaileydaniella.ru
laviniebritteny.ru
lyssaeunice.ru
maudekarlie.ru
rebekaverena.ru
lornecrista.su
salleejoann.su

Toronto DrugstoreEdit

mypillsmart.ru

US DrugsEdit

smartsafeservice.ru


Illegal domains suspended before May 2017Edit

Canadian Family PharmacyEdit

hothealingsupply.ru
puremedsprogram.ru

Canadian Health&Care MallEdit

bestwelnesstrade.ru
boemhcul.ru
bulzwxka.ru
cgpffwdz.ru
curinghoteshop.ru
eghaqztr.ru
etjpuwtn.ru
familyaidelement.ru
familyfastmarket.ru
fastbestpurchase.ru
fastrxmall.ru
fastsmarteshop.ru
firstaidgroup.ru
genericsafestore.ru
ghalnxsj.ru
goodsmartquality.ru
gsuttgnp.ru
healingsafeshop.ru
herbalmedsoutlet.ru
homeaidpurchase.ru
hotmedicalinc.ru
htcqwmdm.ru
idmkvvpf.ru
jommefds.ru
keelywanids.ru
kncezzfg.ru
krystlecherye.ru
kzzsurpx.ru
lekqvlbo.ru
medicalfastinc.ru
myherbsale.ru
ncmsejcc.ru
newbestcompany.ru
nuaatnqc.ru
onlinepilleshop.ru
oueiwwhi.ru
pamelamorena.ru
ptnucrmw.ru
puredrugsstore.ru
purehotshop.ru
remedialdrugsinc.ru
saferemedyreward.ru
secureherbsale.ru
securehotoutlet.ru
securepillsupply.ru
securerxinc.ru
smartfirstsupply.ru
themedicaleshop.ru
vbdssqsx.ru
xkaaqxol.ru
xniqqotd.ru
yourbestservice.ru
zgmvnbam.ru
zonnyawilli.ru
zxsipnya.ru

Canadian Neighbor PharmacyEdit

onlinehotinc.ru

Canadian PharmacyEdit

fasttabletgroup.ru
thefamilyvalue.ru

CanadianPharmacyEdit

homepilleshop.ru
hotsafewebmart.ru
mytabscompany.ru

My Canadian PharmacyEdit

canadianfastdeal.ru
curingsecurequality.ru
fastonlinesale.ru
firstcarebargain.ru
firstdruginc.ru
globalsecuremall.ru
herbaldrugmart.ru
homedrugpurchase.ru
homehealingshop.ru
homemedicalshop.ru
hotsmartelement.ru
mytabsassist.ru
newfastreward.ru
newonlinemall.ru
onlinemedssupply.ru
perfectherbsdeal.ru
perfectmedsshop.ru
purefamilyeshop.ru
pureherbreward.ru
purerxbargain.ru
remedialherbmart.ru
remedialhotstore.ru
theaidpurchase.ru
yelenachrysa.ru

RxExpressOnlineEdit

adriamichaelina.ru
aletavinni.ru
aletavinni.ru
amberlytessy.ru
bestmedswebmart.ru
deboralaurice.ru
edithayasmin.ru
ednajonicordy.ru
freddyheathlin.ru
gueneverekirbie.ru
nealasophey.ru
rivkahkellsie.ru
validademetria.ru
yvonnecarlina.ru
zorinahoney.ru
zorineaidan.ru

RxMedicationsEdit

allixcristen.ru
meredithlelia.ru

Toronto DrugstoreEdit

magicrxassist.ru
purepillservices.ru

US DrugsEdit

curingdrugstrade.ru


Sources for this articleEdit

IndependentEdit

InBoxRevenge Eva Pharmacy campaign

Rogues and Champions report

InterviewEdit

CorporateEdit

http://r01.ru/

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.