FANDOM


TucowsEdit

Tucows is a registrar in Canada.

Tucows.logo

Description of the RegistrarEdit

We offer Internet services to thousands of business partners and millions of end users around the world, including:

  • The first and best wholesale platform for selling and integrating domain names. (OpenSRS)
  • The simplest way for businesses and individuals to manage their domain names. (Hover)
  • A mobile phone service that makes shockingly good sense for US families and businesses (Ting)


Anti-Fraud PositionEdit

To submit a report of illegal activity related to a domain name or abuse, please contact legal@tucows.com. You can also reach us by telephone at +1.416.535.0123. Tucows reviews and responds to all reports received. Reports are tracked and logged through a hosted ticketing system managed by Tucows. We will subsequently take action if deemed appropriate.

Official PositionEdit

Actual BehaviorEdit

Tucows is slow to respond to requests for suspension of domains used for illegal activity. This is in contrast to other domain name service providers, some of whom have a one-day response to reports. In October 2016, Tucows was number 2 on the list of registrars sponsoring pharmaceutical frauds and cyber-crime, surpassed only by the Russians.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.

RegPie

The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 85%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Public Domain Registry PDR at 3%.

The next most abused registrar is China's Bizcn at 2%.

The next most abused registrar is Germany's Key-Systems at 2%.

The next most abused registrar is Canada's Tucows at 2%.

Next is Endurance at 2%.

Most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.



Examples of domains used for fraudEdit

These domains were tested on November 19, 2016 and were found to be live. Each heading links to evidence that the domain is being used for fraud.

See also Tucows_list

Awaiting actionEdit

Tested and verified from an unblocked proxy on December 23, 2016


Canadian Neighbor PharmacyEdit

firstrxprogram.com


Previously SuspendedEdit

Canadian Family PharmacyEdit

myherbstrade.com

Canadian Health&Care MallEdit

goodtabletdeal.com
homepilleshop.com
kyfhembz.com
luckyfaststore.com
naturalbestmall.com
secureaidinc.com
* bestcarereward.com
* bestcuringshop.com
* familytabsvalue.com
* pegeennisse.com
* privatepillpurchase.com
* pureprivatesale.com
* puresmartsupply.com

CanadianPharmacyEdit

babbhanalisa.com
bernicetiffie.com
bobbywilli.com
calleykaty.com
cynthiesiobhan.com
erminasheba.com
ernestabetta.com
familypillsmart.com
fastaidstore.com
gerritarynkip.com
goodfastquality.com
jorryjacqui.com
martijobey.com
michelejosi.com
noreenaddia.com
perfecttabssale.com
raychellynnet.com
rebekahkare.com
sarajanehanny.com
tedilauraine.com
xavieragale.com
yoshiflorentia.com
* bestfirstmarket.com
* bestprivatedeal.com
* firsthoteshop.com
* globalpillmart.com
* hotdrugsassist.com
* jayneeveleen.com
* magicherbmart.com
* perfectmedicareservice.com
* smartremedymart.com
* smartrxmart.com
* yourrxmall.com
* yourwelnessinc.com

Healthy LifeEdit

* smartmedsmarket.com

Herbal StoreEdit

* besthotstore.com
* myherbselement.com

My Canadian PharmacyEdit

lisakarmen.com
mycanadianinc.com
yourmedicalmart.com
* bestsecuremall.com
* safeherbinc.com
* thesmartvalue.com
* youraidservices.com
* yourwelnessdeal.com

RxExpressOnlineEdit

amecornelia.com
carmelitanissie.com
jessalynfran.com
jodyemmaline.com
katharynbren.com
magdalenesibylla.com
marilynailene.com
rozamondflorry.com
tarrahjoycelin.com
* charmanetherine.com
* heddijacintha.com
* jewelleranee.com
* kelilagrazia.com
* mellydodi.com
* myaidgroup.com
* newpharmaceuticsale.com

RxMedicationsEdit

  • dredijocelyn.com

Toronto DrugstoreEdit

safehotservices.com
* firstmedsgroup.com
* magicherbshop.com

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during May 2017 were located at these IPs, primarily Russia, Turkey, Latvia and the Seychelles.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
91.242.163.166 95.84.156.43 217.195.60.211 46.29.2.193 62.112.8.135
51.15.145.121 46.29.2.192 1 77.81.111.122 175.45.128.19 75.98.230.254
88.150.227.68 94.199.48.30 81.171.7.156 91.230.121.99 31.31.204.161

Recent High use IP addresses from April 2017

IP.Pie

Where to send abuse complaintsEdit

To submit a report of illegal activity related to a domain name or abuse, please contact legal@tucows.com. You can also reach us by telephone at +1.416.535.0123.


Web site http://tucows.com

http://www.tucowsdomains.com

Additional Contact InformationEdit

General email: (nowiki>info@tucows.com</nowiki>

help@opensrs.com

Postal addressEdit

Tucows Inc.
Toronto Headquarters
96 Mowat Avenue
Toronto, ON M6K 3M1
Canada

Telephone and FAXEdit

Main telephone: 416-535-0123
Main fax: 416-531-5584
Toll-free North America: 1-800-371-6992
Toll-free international: +800-371-69922

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit

IndependentEdit

InterviewEdit

CorporateEdit

http://www.tucows.com/

http://www.tucowsdomains.com/

https://www.internic.net/registrars/registrar-69.html

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.