Netlynx is a registrar in India. The CEO on record is Pankaj Jaiswal (pictured)
- 1 Anti-Spam Position
- 2 Official Position
- 3 Actual Behavior
- 4 Registrar responsiveness
- 5 Sample illegal domains
- 6 Common IP addresses
- 7 Examples of fake registrant data
- 8 Description of the Registrar
- 9 Where to send abuse complaints
- 10 Additional Contact Information
- 11 Registration Information
- 12 Telephone and FAX
- 13 Sources for this article
Anti-Spam Position[edit | edit source]
Official Position[edit | edit source]
OBLIGATIONS OF THE CUSTOMER
Parent and Service Providers, in their sole discretion, expressly reserve the right to freeze, delete, suspend, deny, cancel, modify, take ownership of or transfer any Domain Order, in order to comply with any applicable Dispute policies, requests of law enforcement, or in compliance with any Court Orders, or if Parent or Service Providers in their sole discretion determine that the information associated with the Domain Order is inaccurate, or has been tampered with, or has been modified without authorization, or if Parent or Service Providers in their sole discretion determine that the Domain Order ownership should belong to another entity, or if Customer/Customer/Registrant does not comply with any applicable terms and conditions, standards, policies, procedures, and practices laid down by Parent, Service Providers, ICANN, the Registrar and the Registry Operator. The Customer agrees that Parent and Service Providers, and the contractors, employees, directors, officers, representatives, agents and affiliates, of Parent and Service Providers, are not liable for loss or damages that may result from any of the above.
Required to abide by the agreement with ICANN for accreditation.
From the ICANN Registration Accreditation Agreement (RAA):
184.108.40.206 The Registered Name Holder shall represent that, to the best of the Registered Name Holder's knowledge and belief, neither the registration of the Registered Name nor the manner in which it is directly or indirectly used infringes the legal rights of any third party.
1.13 "Illegal Activity" means conduct involving use of a Registered Name sponsored by Registrar that is prohibited by applicable law and/or exploitation of Registrar's domain name resolution or registration services in furtherance of conduct involving the use of a Registered Name sponsored by Registrar that is prohibited by applicable law.
5.5 Termination of Agreement by ICANN. This Agreement may be terminated ... [if the] Registrar .. is convicted by a court of competent jurisdiction of a felony or other serious offense related to financial activities, or is judged by a court of competent jurisdiction to have: ...
with actual knowledge (or through gross negligence) permitted Illegal Activity in the registration or use of domain names or in the provision to Registrar by any Registered Name Holder of inaccurate Whois information
Actual Behavior[edit | edit source]
Usually acts rapidly to remove illegal sites. But in 2014 this registrar failed to act on fraud domains. By August 2014 all detected sites were reported and suspended. In 2017-2018 Netlynx had rapidly suspended all fraud pharmacy domains reported.
Registrar responsiveness[edit source]
Piechart showing the crime sponsoring contribution by each registrar.
The comparison between this registrar and others can be seen on the graphs.
It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.
Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.
The second most abused registrar is Russia's REG.RU REG.RU at over 25%
The next most abused registrar is GKG GKG at 4%.
The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.
Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.
Sample illegal domains[edit | edit source]
These were all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy.
They were checked and found to be live on May 13, 2015. Domains had false registrant details, which breaks the above customer obligations, that the information associated with the Domain Order (must not be} inaccurate
The registrant details are generated using a well known fake identity generator. This has been the case for thousands of false registrants for other fraud domains.
curativecareelement.in (suspended) fastmedicatinggroup.in (suspended) firsthealthmart.in (suspended) goodcareexchange.com (suspended) homemedicalonlinereward.in (suspended) hothealingpurchase.in (suspended) magicdrugmart.in (suspended) magicnaturalmart.com (suspended) medicatingrxreward.in (suspended) onlineorganiceshop.in (suspended) cxtzhwqt.com (suspended) fastcarepurchase.in (suspended) firstherbassist.in (suspended) firstmedsservice.in (suspended) healingherbsservice.in (suspended) llfinfbe.in (suspended) luckynaturalvalue.in (suspended) perfectcuringmarket.com (suspended) smartremedialworth.in (suspended) bestandworstwwe.com (suspended) globalremedyassist.in (suspended) herbalprivategroup.in (suspended) mymedicinalstore.in (suspended) onlinecuringbargain.in (suspended) organicpillpurchase.in (suspended) theorganicherbstore.com (suspended) cwhbaejb.com (suspended) curativefastassist.com (suspended) globalcuringvalue.in (suspended) globalpillsservice.in (suspended) goodherbsdeal.in (suspended) herbaltabletbargain.in (suspended) hothealthcaremall.in (suspended) medicalsafetrade.in (suspended) mygenericbargain.in (suspended) smarthealingcompany.com (suspended) thecanadiandeal.in (suspended) thehealingquality.com (suspended) vslhnzlf.com (suspended) yourorganictrade.com (suspended) curingremedygroup.com (suspended) herbalpillmall.com (suspended) jhcurorf.com (suspended) luckymedsservice.com (suspended) naturaldrugassist.com (suspended) oliytabbi.com (suspended) securehealthexchange.com (suspended) tixnuofa.com (suspended) bamsxgsk.com (suspended) fastdrugsvalue.com (suspended) healingfasteshop.com (suspended) devicesmarket.com (suspended) genericherbsupply.com (suspended) securemedicareshop.com (suspended) curinghotdeal.com (suspended) fnfxbthv.com (suspended) fuhdqqdt.com (suspended) gkjhtxdb.com (suspended) gwmnbxwz.com (suspended) wqosfyxk.com (suspended)
medicativefastinc.in (suspended) naturalremedyshoponline.com (suspended) curingmedsbuy.com (suspended) fastcaremarket.com (suspended) magicgenericinc.com (suspended) safemedicinalgrouponline.com (suspended)
henriettacharlene.com (suspended) bonnylaurie.com (suspended) brennjacky.com (suspended) fasthealingeshop.com (suspended) kelseytrixie.com (suspended) kimberlynaleta.com (suspended) maiblereta.com (suspended) medicaldruginc.com (suspended) medicativefirstsale.com (suspended) remedialhotelement.com (suspended) willieabigail.com (suspended) hometabletmall.com (suspended) onlinepillvalue.com (suspended)
privateherbvalue.com (suspended) trustedherbquality.com (suspended)
luckyherbalelement.in (suspended) curingfamilymall.com (suspended) genericsafepurchase.com (suspended) homeherbalmall.com (suspended) hotpillsstore.com (suspended) hottabsservice.com (suspended) normansmart.com (suspended) newcanadianmart.com (suspended) privatemedicalinc.com (suspended) purepillsgroup.com (suspended)
genericherbstore.in (suspended) onlinepillinc.in (suspended) safemedicalgood.in (suspended) homemedsquality.in (suspended) luxuryhomeherbalassist.in (suspended)
Common IP addresses[edit source]
A quick way to verify these sites is to examine the hosting addresses. Note that * items have been removed. Many compromised hosts used for this operation during September 2020 - May 2021 were located at these IPs.
|- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - -|
Where to contact the compromised hosting ISP:
Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' (Removed) Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' (Removed) Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' (Removed) Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11/26' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com'
Examples of fake registrant data[edit | edit source]
|Domain||Registrant name||Registrant address||Registrant phone||False data|
|curingremedygroup.com||Selene Granado||Rua Sao Jorge 1739, Canoas, RS, 92030-660, BR||+55.5179365855||phone|
|herbalpillmall.com||Maria Carman||150 Winter Street, Mangapapa, Gisborne, 4010, NZ||+64.026101274||address & phone|
|ijvgafyl.com||Jamie Haynes||24 Rose Street, Whitby, Porirua, 5024, NZ||+64.022777048||address & phone|
|luckymedsservice.com||Amanda Heijne||Papiermolen 69, Maassluis, ZH, 3146 TD, NL||+31.0633702111||address|
|oliytabbi.com||Ryan Birge||156 Beverley Place, Shiel Hill, Dunedin, 9013, NZ||+64.020254893||address & phone|
|securehealthexchange.com||Sophia Egger||Holstenwall 57, Bad Schandau, SN, 1814, DE||+49.0350228480||phone|
|tixnuofa.com||Jana Bueno||41 Manu Tapu Drive, Mangere Bridge, Manukau, 2022, NZ||+64.020191951||address & phone|
|privatemedicalinc.com||Stefanie Braun||torkower Strasse 3, Neuwied Block, RP, 56566, DE||+49.02622951341||phone|
|curinghotdeal.com||Elizabeth Hall||183 Alexandra Street, Maori Park, Timaru, 7910, NZ||+64.028413347||address & phone|
|fnfxbthv.com||Liane Perillard||55 Rue Hubert de Lisle, Lunel, Lunel, 34400, FR||+33.0433966389||phone|
|fuhdqqdt.com||Reem Daoudi||Griend 22, Lelystad, FL, 8225 RC, NL||+31.0664369055||phone|
|gkjhtxdb.com||Flynn Aird||6 Acheron Road, Giffard, VIC, 3850, AU||+61.353582920||address|
|gwmnbxwz.com||Katariina Nurmi||Viinikantie 6, Petaskyla, Petaskyla, 75930, FI||+358.0421260504||address & phone|
|wqosfyxk.com||Louis Duclos||96 rue Porte dOrange, Castres, Castres, 81100, FR||+33.0533368047||address & phone|
|qdqfvssr.com||Armand Laux||43 rue Saint Germain, Gap, Gap, 5000, FR||33.0454723450||phone|
|organicbestdeal.com||Mercedes Medrano||Calle Canada del Rosal 38, Campofrio, Huelva, 21668, ES||+34.628355204||address|
|pillhealthgroup.com||Darcy Crowther||17 Boonah Qld, Mount Tarampa, QLD, 4311, AU||+61.745696831||address & phone|
|naturalorganicpharmacydeal.com||Battista Sabbatini||Via San Domenico Soriano 27, Castel Di Tusa, ME, 98070, IT||+39.03780684863||phone|
|vanyaandeee.in||Metehan Albert||Heggeroos 167,Zeewolde, FL, 3892 XR, NL||+31.0631843425||address|
|remedialhealthshop.com||Pauliina Harikkala||Kylpylaitoksentie 61, Roukalahti, Roukalahti, 83150, FI||+358.0501288347||address & phone|
|remedialhotoutlet.com||Nusi Sinka||Wesselenyi u. 25, Nemesker, 9471, HU||+36.99540158||address & phone|
|edivablakelee.in||Natasha Fetherston||44 Argyle Street,Mares Run, NSW, 2422, AU||+61.249803774||address & phone|
|jessalynericka.in||Jonathan Underwood||33 Patton Street,Kilsyth, VIC, 3137, AU||+61.398054133||address & phone|
|shanteetracey.in||Luisa Becher||1655 Tchesinkut Lake Rd,Hansard, BC, V0J 2Z0, CA||+1.2509661239||phone|
|audreytheo.in||Maika Logtenberg||Maarse Hof 72,Aalsmeer, NH, 1431 PC, NL||+31.0612338828||phone|
|cassondradebbi.in||Shayla Veenhuis||Havensingel 188,Eindhoven, NB, 5611 VS, NL||+31.0634206373||phone|
|silvanaerica.in||Ema Valenzuela||Estrela 66,Santa Cruz de Bezana, Cantabria, 39100, ES||+34.677518527||phone|
|galinachristal.in||Selene Castaneda||Calle Canada del Rosal 69,Villanueva de los Castillejos, Huelva, 21540, ES||+34.959437010||phone|
|myrleneherminia.in||Janice Gastelum||Calvo Sotelo 96,Alaejos, Valladolid, 47510, ES||+34.983610807||phone|
|coraliemadeleine.in||Angelina Fanucci||Via Nolana 44,La Spezia, SP, 19132, IT||+39.03332707177||phone|
|audiecahra.in||Nilde Lombardi||Via degli Aldobrandeschi 42,Marianopoli, CL, 93010, IT||+39.03392828680||phone|
|adriaensmelita.in||Fortunata Onio||Via del Pontiere 117,Villastellone, TO, 10029, IT||+39.03882760066||phone|
Description of the Registrar[edit | edit source]
Netlynx provides reliable, cost effective and high quality Domain Name Registration and Domain Transfer Services duly complemented with full technical and customer support.
Where to send abuse complaints[edit | edit source]
By email[edit | edit source]
By contact page[edit | edit source]
Report false registration details
Additional Contact Information[edit | edit source]
The CEO is Pankaj Jaiswal
- Twtter:[ https://twitter.com/Pankajjaiswal9 ]
- Home page: [ http://www.pankajjaiswal.com/ ]
- Email [ firstname.lastname@example.org ]
Postal address[edit | edit source]
Netlynx Technologies Pvt. Ltd.
103, Tirupati Udyog Premises, I. B. Patel Road,
Off. Western Express Highway,
Near HP Petrol Pump. Goregaon
East. Mumbai - 400063
Registration Information[edit | edit source]
Telephone and FAX[edit | edit source]
Tel: +91 22 40811144 / +91 22 40811133
Fax: +91 22 40811100
Related information[edit | edit source]
Pharmacy fraud operations
- Men Health
- OEM Software
Affiliate program coordinator employing spammers