NameSilo is a registrar in Phoenix, Arizona.
Description of the Registrar[edit | edit source]
Michael McCallister and Michael Goldfarb in 2009.
NameSilo.com launched in October 2010 in Phoenix with the goal of providing low-cost website purchases.
Goldfarb is a successful entrepreneur who in 2009 sold his web design firm, Contact Designs, to Chris McMurry. McMurry (http://mcmurrytmg.com), owns one of the largest content marketing firms in the United States.
Contact Designs co-owners Michael Goldfarb and Michael McCallister serve as senior vice presidents of online services, managing the interactive business unit. The CEO of Contact Designs is Chris McMurry.
We created NameSilo with the goal of offering a new type of registrar that appeals to people looking for a simpler, cheaper and better alternative to the companies already in the industry. As people with domain portfolios of our own, and having used many registrars ourselves, we believed that there was enough room for improvement to throw our hat into the ring.
Our fundamental approach is to offer domains and domain-related management for the cheapest prices possible, while not sacrificing quality, customer support or ease-of-use. We maintain an unwavering focus on domains and do not venture out into other verticals such as hosting, email support, web design, search engine marketing, or any other services that could impact our ability to offer the cheapest prices on the Internet.
Michael Goldfarb, Managing Member
Michael McCallister, Managing Member
Chris McMurry, Managing Member
- 1 Description of the Registrar
- 2 Anti-Spam Position
- 3 Official Position
- 4 Actual Behavior
- 5 Registrar responsiveness
- 6 Sample illegal domains
- 7 Suspended Domains
- 8 Common IP addresses
- 9 Where to send abuse complaints
- 10 Additional Contact Information
- 11 Registration Information
- 12 Telephone and FAX
- 13 Related information
- 14 Sources for this article
Anti-Spam Position[edit | edit source]
Official Position[edit | edit source]
From the Terms and Conditions, section 3. b. ii.
You represent and warrant that the statements in your application are true and that no Services are being procured for any unlawful purpose, including but not limited to the infringement of any intellectual property right, the unauthorized transfer to yourself or any other party of any domain name or Services, or the violation of any laws, rules, or regulations (the"Illegal Uses").
From section 4. c. vi.
We reserve the right in our sole judgment to suspend, terminate and/or disclose your personal information in the event that any of the following occur:
a. Any provision of this Agreement is breached
One of the other big ones is just the sheer volume of potential fraudulent – I shouldn’t say fraudulent, but misuse of domains. People trying to distribute malware. Using them for spam. I mean, so on and so forth. It’s a lot and that’s something we don’t actively monitor as registrations and transfer come in, but as a discount domain provider offering free WhoIS privacy, we’ve definitely been targeted by people using domains for nefarious purposes. So, creating system to keep that at bay. We’ve tried to take a pretty harsh stance that, if somebody has a number of trademark and copyright violations for obvious infringements, we make them leave. And this is one of the things, again, that I’d like to draw a distinction between ourselves and most other registrars is that we don’t welcome these people with open arms. Again, it’s a fine line because we won’t (sic) to advocate for our customers. We don’t want to be overly aggressive, and we’re not, but if there’s a repeated offense, I don’t care if this person spent registering a hundred domains a day to support their spam network. We will either shut the domains down, or, in most cases, we will tell them, ‘you have thirty days to move to a different registrar’
Finally, please note that if the domain registrant fails to get back to us regarding the alleged Terms violation notification, we take that very seriously. Our Terms specifically require the registrant to get back to us regarding these matters in a timely manner and failure to do so can result in domain suspension. We use all forms of available contact information to contact the registrant and their failure to respond typically results in either revealing the contact information they have provided or domain suspension.
Actual Behavior[edit | edit source]
Acts to remove illegal sites.
Registrar responsiveness[edit source]
Piechart showing the crime sponsoring contribution by each registrar.
The comparison between this registrar and others can be seen on the graphs.
It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.
Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.
The second most abused registrar is Russia's REG.RU REG.RU at over 25%
The next most abused registrar is GKG GKG at 4%.
The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.
Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.
Sample illegal domains[edit | edit source]
These domains listed below are all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy. They were all live at September 27, 2016. They were all suspended at September 29, 2016
See also NameSilo_list
bestsmartreward.com (suspended) fastcareoutlet.com (suspended) opalmillisent.com (suspended)
dprltmhx.com (suspended) secureremedialgroup.com (suspended)
isabellamellisa.com (suspended) marleahcaralie.com (suspended)
ionalanita.com (suspended) loiseoneida.com (suspended)
Suspended Domains[edit | edit source]
herbalfamilyservice.com (suspended) rcjksdbz.com (suspended) besthealingcompany.com (suspended) genericpharmacymart.com (suspended) jvqjeeqn.com (suspended) nxmvrkcj.com (suspended) ohunqyzk.com (suspended) remedialbestelement.com (suspended) reportbyglobalindustry.com (suspended) thepharmacyquality.com (suspended) viagracaregroup.com (suspended) vqdcuxfl.com (suspended) ftwwmkfg.com (suspended) mymedicationdeal.com (suspended) qzfiyicb.com (suspended) safepillssupply.com (suspended) securepillqualitygroup.com (suspended)
securetabletelement.com (suspended) theremedyquality.com (suspended) yourtableteshop.com (suspended)
healingdrugshop.comm (suspended) luckymedicaltrade.comm (suspended) mymedicativeassist.comm (suspended) amityatlante.com (suspended) familygenericsmall.com (suspended) herbaldrugsmarketresearch.com (suspended) joiceenrika.com (suspended) magicmedicamentshop.com (suspended)
smartdrugdeal.com (suspended) aliciaharriott.com (suspended) alvinialorette.com (suspended) calleycherise.com (suspended) chrissyjuliet.com (suspended) georgeemmaline.com (suspended) honorialeonelle.com (suspended) kylealexa.com (suspended) larisadiannne.com (suspended) lavenakristyn.com (suspended) myhealingtrade.com (suspended) naturalpharmshop.com (suspended) pureherbalquality.com (suspended) puretreatmentdeal.com (suspended) remedialfirsttrade.com (suspended) shariasheeree.com (suspended) starlenejobye.com (suspended)
dottishela.com (suspended) excellentpharmvalue.com (suspended) genericsmartassist.com (suspended) joelajoyamie.com (suspended) newbiologicalmarket.com (suspended)
Common IP addresses[edit source]
A quick way to verify these sites is to examine the hosting addresses. Note that * items have been removed. Many compromised hosts used for this operation during September 2020 - May 2021 were located at these IPs.
|- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - -|
Where to contact the compromised hosting ISP:
Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' (Removed) Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' (Removed) Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' (Removed) Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199/26' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org'
Where to send abuse complaints[edit | edit source]
email@example.com but domain names would need to be obfuscated http://www.namesilo.com/contact_us.php
Additional Contact Information[edit | edit source]
Postal address[edit | edit source]
1010 E. Missouri Avenue
Phoenix, AZ 85014
Registration Information[edit | edit source]
Telephone and FAX[edit | edit source]
Phone Support: We can be reached during normal business hours at 602-492-8198.
Related information[edit | edit source]
Pharmacy fraud operations
- Men Health
- OEM Software
Affiliate program coordinator employing spammers
Sources for this article[edit | edit source]
Independent[edit | edit source]
Phoenix Business Journal Articles on Michael Goldsmith