FANDOM


Description of the RegistrarEdit

TRUNKOZ TECHNOLOGIES PVT LTD. doing business as OWNREGISTRAR.COM is a registrar in Mumbai, India.

From http://www.ownregistrar.com/aboutus/

OwnRegistrar is a complete Domain Solutions Provider which deals in registration of all the major TLDs and ccTLDs through its Channel Partners worldwide. OwnRegistrar is one of the few white-labeled domain registrars in the world. Since the inception of its domains and hosting provider company, OwnRegistrar boasts of being a complete Domain Solutions Provider. OwnRegistrar’s experience of the Domain Names market makes it an ideal choice for Domain Solutions. Unlike other Registrars, OwnRegistrar does not directly deal in domain names, but provides domain name solutions through its channel partners worldwide.

From http://www.linkedin.com/company/trunkoz

Trunkoz (formerly known as QuantumPages) is one of the leading IT Products & Services providers. The company has an experience of over 12 years in providing various services including Internet Data Center, Disaster Recovery, Mails & Messaging, Remote infrastructure management and monitoring, Domain Registration, Hosting Services and Web Services automation products etc. Trunkoz offers multiple IT brands each targeting the needs and preferences of different customers.


Anti-Spam PositionEdit

Official PositionEdit

From http://www.ownregistrar.com/legal/registrar_agreement.pdf

2. Terms of USAGE OF Domain Registration System

(1) Registrant, or its contractors, employees, directors, officers, representatives, agents and affiliates and Domain Registration System Users, either directly or indirectly, shall not use or permit use of the Domain Registration System, directly or indirectly, in violation of any federal, state or local rule, regulation or law, or for any unlawful purpose, or to promote adultoriented or "offensive" material, . . .

24. BREACH

In the event that Registrar suspects breach of any of the terms and conditions of this Agreement:

(1) Registrar can immediately, without any notification and without assigning any reasons, suspend / terminate the Registrants access to the Domain Registration System Server.

(2) The Registrant will be immediately liable for any damages caused by any breach of any of the terms and conditions of this Agreement.

(3) Registrar can immediately, without any notification and without assigning any reasons, delete / suspend / terminate / freeze the Order.

Actual BehaviorEdit

Trunkoz Technologies has been widely abused by the Russian EvaPharmacy fraud operation.

In the past, Trunkoz or Qualispace has acted to remove illegal sites. Trunkoz uses content filtering on email that often rejects complaints that contain illegal domain names. Qualispace is fast to act on complaints entered on their web page.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 85%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Public Domain Registry PDR at 3%.

The next most abused registrar is China's Bizcn at 2%.

The next most abused registrar is Germany's Key-Systems at 2%.

The next most abused registrar is Canada's Tucows at 2%.

Next is Endurance at 2%.

Most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Examples of domains used for fraudEdit

By loading any of these, the registrar can verify the brand, then establish the fraudulent use of the domain name by viewing the evidence that has been prepared for registrars and law enforcement. Note that some of these will be switched from one fraud brand to another.

See Trunkoz_list



Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during May 2017 were located at these IPs, primarily Russia, Turkey, Latvia and the Seychelles.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
91.242.163.166 95.84.156.43 217.195.60.211 46.29.2.193 62.112.8.135
51.15.145.121 46.29.2.192 1 77.81.111.122 175.45.128.19 75.98.230.254
88.150.227.68 94.199.48.30 81.171.7.156 91.230.121.99 31.31.204.161

Recent High use IP addresses from April 2017

IP.Pie

Where to send abuse complaintsEdit

abuse@ownregistrar.com support@ownregistrar.com (known to use content filtering for unlawful domain names)

Additional Contact InformationEdit

Postal addressEdit

Headquarters

Trunkoz Technologies Pvt. Ltd. 
B 9 Jyoti Bldg, 
Gokhale Road, 
Thane (West) Mumbai, 
MH 400602 
India

Registration InformationEdit

Telephone and FAXEdit

Telephone: +91 (22) 6781 6875 / +91 (22) 6142 6060
Fax: +91 (22) 6781 6610 / Fax: +91 (22) 6142 6061

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

InBoxRevenge Eva Pharmacy campaign

InterviewEdit

CorporateEdit

Facebook https://www.facebook.com/Trunkoz

LinkedIn http://www.linkedin.com/company/trunkoz

Company Homepages http://www.ownregistrar.com/aboutus/

http://www.trunkoz.com/

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.