Todaynic is a registrar in China.
Anti-Spam Position
Edit
Official Position
Edit
http://www.todaynic.com/doc/agreement.php
Sections 18, 22, 24, 25, 26
Actual Behavior
Edit
In 2008 acted quickly and decisively to remove illegal sites. Providing evidence speeds the process.
Over a period of 2 weeks in late May, 2008, Todaynic acted decisively to clear a backlog of complaints.
An estimated 8,100 live spammed sites were rapidly removed across several different spam brands. In 2013 and 2014 this registrar has been unresponsive.
Registrar responsiveness
Edit
Showing all registrars including R01.RU
Showing all registrars excluding R01.RU
Piechart showing the crime sponsoring contribution by each registrar.
The comparison between this registrar and others can be seen on the graphs.
It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.
Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.
The second most abused registrar is Russia's REG.RU REG.RU at over 25%
The next most abused registrar is GKG GKG at 4%.
The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.
These are followed by Russia's ARDIS, India's PublicDomainRegistry PDR, China's CNOBIN, Canada's Tucows, and Pakistan's PakNIC.
Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.
Description of the Registrar
Edit
Sample illegal domains
Edit
These domains listed below are all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy. They were all live at March 26, 2015.
Click on any heading to see the evidence relating to each fraud.
Canadian Health&Care Mall
Edit
drugstoreonline24h.com refillnovember.com healthcaremallcanada.net
Trusted Tabs
Edit
drugstoreonline24.com
Common IP addresses
Edit
A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during January 2019 were located at these IPs.
- - - - - - - - - - - - - - - | - - - - - - - - - - - - - - - | - - - - - - - - - - - - - - - | - - - - - - - - - - - - - - - | - - - - - - - - - - - - - - - |
---|---|---|---|---|
179.43.149.28 | 185.219.135.38 | 185.225.16.241 | 185.225.16.242 | 185.225.16.243 |
185.225.16.244 | 185.36.81.71 | 185.36.81.73 | 185.36.81.82 | 188.68.248.94 |
195.123.240.55 | 212.34.158.133 | 212.34.158.134 | 43.230.131.22 | 64.251.10.228 |
90.139.255.232 | 91.211.247.241 | 94.186.109.106 | 95.165.149.124 | 95.211.217.210 |
95.211.217.212 | 95.84.156.166 |
Recent High use IP addresses from October 2018
Where to send abuse complaints
Edit
info@todaynic.com, service@todaynic.com
Additional Contact Information
Edit
Postal address
Edit
Address:
02 7/F TRANS ASIA CENTRE 18 KIN HONG STREET KWAI CHUNG N.T
Registration Information
Edit
Telephone and FAX
Edit
Department:
+852-35685366 (Sale Advisory) +852-35680970 (Technical support) +852-35685366 (Complaint and suggestion) Fax: +852-26120931
Related information
Edit
Pharmacy fraud operations
- Canadian_Health&Care_Mall
- Canadian_Neighbor_Pharmacy
- My_Canadian_Pharmacy
- Toronto_Drug_Store
- Canadian_Family_Pharmacy
- RxMedications
- RxExpressOnline
- WikiPharmacy
- International_Legal_RX
- US_Drugs
- Men Health
- OEM Software
Affiliate program coordinator employing spammers