FANDOM


Description of the RegistrarEdit

TRUNKOZ TECHNOLOGIES PVT LTD. doing business as OWNREGISTRAR.COM is a registrar in Mumbai, India.

From http://www.ownregistrar.com/aboutus/

OwnRegistrar is a complete Domain Solutions Provider which deals in registration of all the major TLDs and ccTLDs through its Channel Partners worldwide. OwnRegistrar is one of the few white-labeled domain registrars in the world. Since the inception of its domains and hosting provider company, OwnRegistrar boasts of being a complete Domain Solutions Provider. OwnRegistrar’s experience of the Domain Names market makes it an ideal choice for Domain Solutions. Unlike other Registrars, OwnRegistrar does not directly deal in domain names, but provides domain name solutions through its channel partners worldwide.

From http://www.linkedin.com/company/trunkoz

Trunkoz (formerly known as QuantumPages) is one of the leading IT Products & Services providers. The company has an experience of over 12 years in providing various services including Internet Data Center, Disaster Recovery, Mails & Messaging, Remote infrastructure management and monitoring, Domain Registration, Hosting Services and Web Services automation products etc. Trunkoz offers multiple IT brands each targeting the needs and preferences of different customers.


Anti-Spam PositionEdit

Official PositionEdit

From http://www.ownregistrar.com/legal/registrar_agreement.pdf

2. Terms of USAGE OF Domain Registration System

(1) Registrant, or its contractors, employees, directors, officers, representatives, agents and affiliates and Domain Registration System Users, either directly or indirectly, shall not use or permit use of the Domain Registration System, directly or indirectly, in violation of any federal, state or local rule, regulation or law, or for any unlawful purpose, or to promote adultoriented or "offensive" material, . . .

24. BREACH

In the event that Registrar suspects breach of any of the terms and conditions of this Agreement:

(1) Registrar can immediately, without any notification and without assigning any reasons, suspend / terminate the Registrants access to the Domain Registration System Server.

(2) The Registrant will be immediately liable for any damages caused by any breach of any of the terms and conditions of this Agreement.

(3) Registrar can immediately, without any notification and without assigning any reasons, delete / suspend / terminate / freeze the Order.

Actual BehaviorEdit

Trunkoz Technologies has been widely abused by the Russian EvaPharmacy fraud operation.

In the past, Trunkoz or Qualispace has acted to remove illegal sites. Trunkoz uses content filtering on email that often rejects complaints that contain illegal domain names. Qualispace is fast to act on complaints entered on their web page.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Russia's REG.RU REG.RU at over 25%

The next most abused registrar is GKG GKG at 4%.

The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.

These are followed by Russia's ARDIS, India's PublicDomainRegistry PDR, China's CNOBIN, Canada's Tucows, and Pakistan's PakNIC.


Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Examples of domains used for fraudEdit

By loading any of these, the registrar can verify the brand, then establish the fraudulent use of the domain name by viewing the evidence that has been prepared for registrars and law enforcement. Note that some of these will be switched from one fraud brand to another.

See Trunkoz_list



Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during August 2018 were located at these IPs, sequenced by frequency

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
179.43.149.28 185.225.16.241 185.225.16.243 185.36.81.72 185.36.81.78
185.59.103.17 188.68.248.94 195.12.190.198 195.12.190.199 195.12.190.200
195.12.190.9 212.34.158.133 212.34.158.134 5.101.180.152 64.251.10.228
78.107.235.212 78.24.221.206 81.177.3.162 90.139.131.132 91.233.116.20
92.38.149.10 92.63.87.106 95.165.149.124 95.84.156.166


Recent High use IP addresses from October 2018

IPcount

Where to send abuse complaintsEdit

abuse@ownregistrar.com support@ownregistrar.com (known to use content filtering for unlawful domain names)

Additional Contact InformationEdit

Postal addressEdit

Headquarters

Trunkoz Technologies Pvt. Ltd. 
B 9 Jyoti Bldg, 
Gokhale Road, 
Thane (West) Mumbai, 
MH 400602 
India

Registration InformationEdit

Telephone and FAXEdit

Telephone: +91 (22) 6781 6875 / +91 (22) 6142 6060
Fax: +91 (22) 6781 6610 / Fax: +91 (22) 6142 6061

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

Eva Pharmacy campaign

Rogues and Champions report

InterviewEdit

CorporateEdit

Facebook https://www.facebook.com/Trunkoz

LinkedIn http://www.linkedin.com/company/trunkoz

Company Homepages http://www.ownregistrar.com/aboutus/

http://www.trunkoz.com/