Todaynic is a registrar in China.

Anti-Spam PositionEdit

Official PositionEdit

http://www.todaynic.com/doc/agreement.php
Sections 18, 22, 24, 25, 26

Actual BehaviorEdit

In 2008 acted quickly and decisively to remove illegal sites. Providing evidence speeds the process.

Over a period of 2 weeks in late May, 2008, Todaynic acted decisively to clear a backlog of complaints.

An estimated 8,100 live spammed sites were rapidly removed across several different spam brands. In 2013 and 2014 this registrar has been unresponsive.

Registrar responsivenessEdit

Showing all registrars including R01.RU

Showing all registrars excluding R01.RU

Piechart showing the crime sponsoring contribution by each registrar.

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Russia's REG.RU REG.RU at over 25%

The next most abused registrar is GKG GKG at 4%.

The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.

These are followed by Russia's ARDIS, India's PublicDomainRegistry PDR, China's CNOBIN, Canada's Tucows, and Pakistan's PakNIC.

Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.

Description of the RegistrarEdit

Sample illegal domainsEdit

These domains listed below are all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy. They were all live at March 26, 2015.

Click on any heading to see the evidence relating to each fraud.

Canadian Health&Care MallEdit

drugstoreonline24h.com
refillnovember.com
healthcaremallcanada.net

Trusted TabsEdit

drugstoreonline24.com

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during August 2018 were located at these IPs, sequenced by frequency

- - - - - - - - - - - - - - -	- - - - - - - - - - - - - - -	- - - - - - - - - - - - - - -	- - - - - - - - - - - - - - -	- - - - - - - - - - - - - - -
179.43.149.28	185.225.16.241	185.225.16.243	185.36.81.72	185.36.81.78
185.59.103.17	188.68.248.94	195.12.190.198	195.12.190.199	195.12.190.200
195.12.190.9	212.34.158.133	212.34.158.134	5.101.180.152	64.251.10.228
78.107.235.212	78.24.221.206	81.177.3.162	90.139.131.132	91.233.116.20
92.38.149.10	92.63.87.106	95.165.149.124	95.84.156.166

Recent High use IP addresses from October 2018

Where to send abuse complaintsEdit

info@todaynic.com, service@todaynic.com

Additional Contact InformationEdit

Postal addressEdit

Address:

02 7/F TRANS ASIA CENTRE
18 KIN HONG STREET
KWAI CHUNG N.T

Registration InformationEdit

Telephone and FAXEdit

Department:

+852-35685366  (Sale Advisory)     
+852-35680970  (Technical support)      
+852-35685366  (Complaint and suggestion)
Fax: 	+852-26120931

FANDOM

Todaynic