FANDOM


Todaynic is a registrar in China.

Anti-Spam PositionEdit

Official PositionEdit

http://www.todaynic.com/doc/agreement.php
Sections 18, 22, 24, 25, 26

Actual BehaviorEdit

In 2008 acted quickly and decisively to remove illegal sites. Providing evidence speeds the process.

Over a period of 2 weeks in late May, 2008, Todaynic acted decisively to clear a backlog of complaints.

An estimated 8,100 live spammed sites were rapidly removed across several different spam brands. In 2013 and 2014 this registrar has been unresponsive.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 85%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Public Domain Registry PDR at 3%.

The next most abused registrar is China's Bizcn at 2%.

The next most abused registrar is Germany's Key-Systems at 2%.

The next most abused registrar is Canada's Tucows at 2%.

Next is Endurance at 2%.

Most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Description of the RegistrarEdit

Sample illegal domainsEdit

These domains listed below are all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy. They were all live at March 26, 2015.


Click on any heading to see the evidence relating to each fraud.

Canadian Health&Care MallEdit

drugstoreonline24h.com
refillnovember.com
healthcaremallcanada.net

Trusted TabsEdit

drugstoreonline24.com
 

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during May 2017 were located at these IPs, primarily Russia, Turkey, Latvia and the Seychelles.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
91.242.163.166 95.84.156.43 217.195.60.211 46.29.2.193 62.112.8.135
51.15.145.121 46.29.2.192 1 77.81.111.122 175.45.128.19 75.98.230.254
88.150.227.68 94.199.48.30 81.171.7.156 91.230.121.99 31.31.204.161

Recent High use IP addresses from April 2017

IP.Pie

Where to send abuse complaintsEdit

info@todaynic.com, service@todaynic.com

Additional Contact InformationEdit

Postal addressEdit

Address:

02 7/F TRANS ASIA CENTRE
18 KIN HONG STREET
KWAI CHUNG N.T 

Registration InformationEdit

Telephone and FAXEdit

Department:

+852-35685366  (Sale Advisory)     
+852-35680970  (Technical support)      
+852-35685366  (Complaint and suggestion)
Fax: 	+852-26120931

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

InterviewEdit

CorporateEdit

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.