FANDOM


Todaynic is a registrar in China.

Anti-Spam PositionEdit

Official PositionEdit

http://www.todaynic.com/doc/agreement.php
Sections 18, 22, 24, 25, 26

Actual BehaviorEdit

In 2008 acted quickly and decisively to remove illegal sites. Providing evidence speeds the process.

Over a period of 2 weeks in late May, 2008, Todaynic acted decisively to clear a backlog of complaints.

An estimated 8,100 live spammed sites were rapidly removed across several different spam brands. In 2013 and 2014 this registrar has been unresponsive.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Russia's REG.RU REG.RU at over 25%

The next most abused registrar is GKG GKG at 4%.

The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.

These are followed by Russia's ARDIS, India's PublicDomainRegistry PDR, China's CNOBIN, Canada's Tucows, and Pakistan's PakNIC.


Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Description of the RegistrarEdit

Sample illegal domainsEdit

These domains listed below are all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy. They were all live at March 26, 2015.


Click on any heading to see the evidence relating to each fraud.

Canadian Health&Care MallEdit

drugstoreonline24h.com
refillnovember.com
healthcaremallcanada.net

Trusted TabsEdit

drugstoreonline24.com
 

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during October 2018 were located at these IPs.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
64.251.10.228 90.139.255.232 95.165.149.124 95.211.217.210 95.211.217.212
95.84.156.166 179.43.149.28 185.225.16.241 185.225.16.242 185.225.16.243
185.225.16.244 185.36.81.73 185.36.81.82 188.68.248.94 212.34.158.133
212.34.158.134


Recent High use IP addresses from October 2018

IPcount

Where to send abuse complaintsEdit

info@todaynic.com, service@todaynic.com

Additional Contact InformationEdit

Postal addressEdit

Address:

02 7/F TRANS ASIA CENTRE
18 KIN HONG STREET
KWAI CHUNG N.T 

Registration InformationEdit

Telephone and FAXEdit

Department:

+852-35685366  (Sale Advisory)     
+852-35680970  (Technical support)      
+852-35685366  (Complaint and suggestion)
Fax: 	+852-26120931

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

InterviewEdit

CorporateEdit