Netlynx is a registrar in India. The CEO on record is Pankaj Jaiswal (pictured)
- 1 Anti-Spam Position
- 2 Official Position
- 3 Actual Behavior
- 4 Registrar responsiveness
- 5 Sample illegal domains
- 6 Common IP addresses
- 7 Examples of fake registrant data
- 8 Description of the Registrar
- 9 Where to send abuse complaints
- 10 Additional Contact Information
- 11 Registration Information
- 12 Telephone and FAX
- 13 Sources for this article
OBLIGATIONS OF THE CUSTOMER
Parent and Service Providers, in their sole discretion, expressly reserve the right to freeze, delete, suspend, deny, cancel, modify, take ownership of or transfer any Domain Order, in order to comply with any applicable Dispute policies, requests of law enforcement, or in compliance with any Court Orders, or if Parent or Service Providers in their sole discretion determine that the information associated with the Domain Order is inaccurate, or has been tampered with, or has been modified without authorization, or if Parent or Service Providers in their sole discretion determine that the Domain Order ownership should belong to another entity, or if Customer/Customer/Registrant does not comply with any applicable terms and conditions, standards, policies, procedures, and practices laid down by Parent, Service Providers, ICANN, the Registrar and the Registry Operator. The Customer agrees that Parent and Service Providers, and the contractors, employees, directors, officers, representatives, agents and affiliates, of Parent and Service Providers, are not liable for loss or damages that may result from any of the above.
Required to abide by the agreement with ICANN for accreditation.
From the ICANN Registration Accreditation Agreement (RAA):
18.104.22.168 The Registered Name Holder shall represent that, to the best of the Registered Name Holder's knowledge and belief, neither the registration of the Registered Name nor the manner in which it is directly or indirectly used infringes the legal rights of any third party.
1.13 "Illegal Activity" means conduct involving use of a Registered Name sponsored by Registrar that is prohibited by applicable law and/or exploitation of Registrar's domain name resolution or registration services in furtherance of conduct involving the use of a Registered Name sponsored by Registrar that is prohibited by applicable law.
5.5 Termination of Agreement by ICANN. This Agreement may be terminated ... [if the] Registrar .. is convicted by a court of competent jurisdiction of a felony or other serious offense related to financial activities, or is judged by a court of competent jurisdiction to have: ...
with actual knowledge (or through gross negligence) permitted Illegal Activity in the registration or use of domain names or in the provision to Registrar by any Registered Name Holder of inaccurate Whois information
Usually acts rapidly to remove illegal sites. But in 2014 this registrar failed to act on fraud domains. By August 2014 all detected sites were reported and suspended. In 2017-2018 Netlynx had rapidly suspended all fraud pharmacy domains reported.
Piechart showing the crime sponsoring contribution by each registrar.
The comparison between this registrar and others can be seen on the graphs.
It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.
Currently the most abused registrar is Russia's R01.ru. This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.
The second most abused registrar is Russia's REG.RU REG.RU at over 25%
The next most abused registrar is GKG GKG at 4%.
The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.
Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.
Sample illegal domains
These were all part of the pharmacy fraud network centered in Russia, known as EvaPharmacy.
They were checked and found to be live on May 13, 2015. Domains had false registrant details, which breaks the above customer obligations, that the information associated with the Domain Order (must not be} inaccurate
The registrant details are generated using a well known fake identity generator. This has been the case for thousands of false registrants for other fraud domains.
curativecareelement.in (suspended) fastmedicatinggroup.in (suspended) firsthealthmart.in (suspended) goodcareexchange.com (suspended) homemedicalonlinereward.in (suspended) hothealingpurchase.in (suspended) magicdrugmart.in (suspended) magicnaturalmart.com (suspended) medicatingrxreward.in (suspended) onlineorganiceshop.in (suspended) cxtzhwqt.com (suspended) fastcarepurchase.in (suspended) firstherbassist.in (suspended) firstmedsservice.in (suspended) healingherbsservice.in (suspended) llfinfbe.in (suspended) luckynaturalvalue.in (suspended) perfectcuringmarket.com (suspended) smartremedialworth.in (suspended) bestandworstwwe.com (suspended) globalremedyassist.in (suspended) herbalprivategroup.in (suspended) mymedicinalstore.in (suspended) onlinecuringbargain.in (suspended) organicpillpurchase.in (suspended) theorganicherbstore.com (suspended) cwhbaejb.com (suspended) curativefastassist.com (suspended) globalcuringvalue.in (suspended) globalpillsservice.in (suspended) goodherbsdeal.in (suspended) herbaltabletbargain.in (suspended) hothealthcaremall.in (suspended) medicalsafetrade.in (suspended) mygenericbargain.in (suspended) smarthealingcompany.com (suspended) thecanadiandeal.in (suspended) thehealingquality.com (suspended) vslhnzlf.com (suspended) yourorganictrade.com (suspended) curingremedygroup.com (suspended) herbalpillmall.com (suspended) jhcurorf.com (suspended) luckymedsservice.com (suspended) naturaldrugassist.com (suspended) oliytabbi.com (suspended) securehealthexchange.com (suspended) tixnuofa.com (suspended) bamsxgsk.com (suspended) fastdrugsvalue.com (suspended) healingfasteshop.com (suspended) devicesmarket.com (suspended) genericherbsupply.com (suspended) securemedicareshop.com (suspended) curinghotdeal.com (suspended) fnfxbthv.com (suspended) fuhdqqdt.com (suspended) gkjhtxdb.com (suspended) gwmnbxwz.com (suspended) wqosfyxk.com (suspended)
medicativefastinc.in (suspended) naturalremedyshoponline.com (suspended) curingmedsbuy.com (suspended) fastcaremarket.com (suspended) magicgenericinc.com (suspended) safemedicinalgrouponline.com (suspended)
henriettacharlene.com (suspended) bonnylaurie.com (suspended) brennjacky.com (suspended) fasthealingeshop.com (suspended) kelseytrixie.com (suspended) kimberlynaleta.com (suspended) maiblereta.com (suspended) medicaldruginc.com (suspended) medicativefirstsale.com (suspended) remedialhotelement.com (suspended) willieabigail.com (suspended) hometabletmall.com (suspended) onlinepillvalue.com (suspended)
privateherbvalue.com (suspended) trustedherbquality.com (suspended)
luckyherbalelement.in (suspended) curingfamilymall.com (suspended) genericsafepurchase.com (suspended) homeherbalmall.com (suspended) hotpillsstore.com (suspended) hottabsservice.com (suspended) normansmart.com (suspended) newcanadianmart.com (suspended) privatemedicalinc.com (suspended) purepillsgroup.com (suspended)
genericherbstore.in (suspended) onlinepillinc.in (suspended) safemedicalgood.in (suspended) homemedsquality.in (suspended) luxuryhomeherbalassist.in (suspended)
Common IP addresses
A quick way to verify these sites is to examine the hosting addresses. Note that * items have been removed. Many compromised hosts used for this operation during September 2020 - May 2021 were located at these IPs.
|- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - - -||- - - - - - - - - -|
Where to contact the compromised hosting ISP:
Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' (Removed) Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' (Removed) Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' (Removed) Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'firstname.lastname@example.org' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' 'email@example.com' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'firstname.lastname@example.org' Abuse contact for '220.127.116.11 - 18.104.22.168' is 'email@example.com' Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52/26' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'email@example.com' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'firstname.lastname@example.org' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'email@example.com' Abuse contact for '18.104.22.168 - 22.214.171.124' is 'firstname.lastname@example.org' Abuse contact for '126.96.36.199 - 188.8.131.52' is 'email@example.com' Abuse contact for '184.108.40.206 - 220.127.116.11' is 'firstname.lastname@example.org' Abuse contact for '18.104.22.168' is 'email@example.com' syt.com web page Abuse contact for '22.214.171.124 - 126.96.36.199' is 'firstname.lastname@example.org' Abuse contact for '188.8.131.52 - 184.108.40.206' is 'email@example.com'
Examples of fake registrant data
|Domain||Registrant name||Registrant address||Registrant phone||False data|
|curingremedygroup.com||Selene Granado||Rua Sao Jorge 1739, Canoas, RS, 92030-660, BR||+55.5179365855||phone|
|herbalpillmall.com||Maria Carman||150 Winter Street, Mangapapa, Gisborne, 4010, NZ||+64.026101274||address & phone|
|ijvgafyl.com||Jamie Haynes||24 Rose Street, Whitby, Porirua, 5024, NZ||+64.022777048||address & phone|
|luckymedsservice.com||Amanda Heijne||Papiermolen 69, Maassluis, ZH, 3146 TD, NL||+31.0633702111||address|
|oliytabbi.com||Ryan Birge||156 Beverley Place, Shiel Hill, Dunedin, 9013, NZ||+64.020254893||address & phone|
|securehealthexchange.com||Sophia Egger||Holstenwall 57, Bad Schandau, SN, 1814, DE||+49.0350228480||phone|
|tixnuofa.com||Jana Bueno||41 Manu Tapu Drive, Mangere Bridge, Manukau, 2022, NZ||+64.020191951||address & phone|
|privatemedicalinc.com||Stefanie Braun||torkower Strasse 3, Neuwied Block, RP, 56566, DE||+49.02622951341||phone|
|curinghotdeal.com||Elizabeth Hall||183 Alexandra Street, Maori Park, Timaru, 7910, NZ||+64.028413347||address & phone|
|fnfxbthv.com||Liane Perillard||55 Rue Hubert de Lisle, Lunel, Lunel, 34400, FR||+33.0433966389||phone|
|fuhdqqdt.com||Reem Daoudi||Griend 22, Lelystad, FL, 8225 RC, NL||+31.0664369055||phone|
|gkjhtxdb.com||Flynn Aird||6 Acheron Road, Giffard, VIC, 3850, AU||+61.353582920||address|
|gwmnbxwz.com||Katariina Nurmi||Viinikantie 6, Petaskyla, Petaskyla, 75930, FI||+358.0421260504||address & phone|
|wqosfyxk.com||Louis Duclos||96 rue Porte dOrange, Castres, Castres, 81100, FR||+33.0533368047||address & phone|
|qdqfvssr.com||Armand Laux||43 rue Saint Germain, Gap, Gap, 5000, FR||33.0454723450||phone|
|organicbestdeal.com||Mercedes Medrano||Calle Canada del Rosal 38, Campofrio, Huelva, 21668, ES||+34.628355204||address|
|pillhealthgroup.com||Darcy Crowther||17 Boonah Qld, Mount Tarampa, QLD, 4311, AU||+61.745696831||address & phone|
|naturalorganicpharmacydeal.com||Battista Sabbatini||Via San Domenico Soriano 27, Castel Di Tusa, ME, 98070, IT||+39.03780684863||phone|
|vanyaandeee.in||Metehan Albert||Heggeroos 167,Zeewolde, FL, 3892 XR, NL||+31.0631843425||address|
|remedialhealthshop.com||Pauliina Harikkala||Kylpylaitoksentie 61, Roukalahti, Roukalahti, 83150, FI||+358.0501288347||address & phone|
|remedialhotoutlet.com||Nusi Sinka||Wesselenyi u. 25, Nemesker, 9471, HU||+36.99540158||address & phone|
|edivablakelee.in||Natasha Fetherston||44 Argyle Street,Mares Run, NSW, 2422, AU||+61.249803774||address & phone|
|jessalynericka.in||Jonathan Underwood||33 Patton Street,Kilsyth, VIC, 3137, AU||+61.398054133||address & phone|
|shanteetracey.in||Luisa Becher||1655 Tchesinkut Lake Rd,Hansard, BC, V0J 2Z0, CA||+1.2509661239||phone|
|audreytheo.in||Maika Logtenberg||Maarse Hof 72,Aalsmeer, NH, 1431 PC, NL||+31.0612338828||phone|
|cassondradebbi.in||Shayla Veenhuis||Havensingel 188,Eindhoven, NB, 5611 VS, NL||+31.0634206373||phone|
|silvanaerica.in||Ema Valenzuela||Estrela 66,Santa Cruz de Bezana, Cantabria, 39100, ES||+34.677518527||phone|
|galinachristal.in||Selene Castaneda||Calle Canada del Rosal 69,Villanueva de los Castillejos, Huelva, 21540, ES||+34.959437010||phone|
|myrleneherminia.in||Janice Gastelum||Calvo Sotelo 96,Alaejos, Valladolid, 47510, ES||+34.983610807||phone|
|coraliemadeleine.in||Angelina Fanucci||Via Nolana 44,La Spezia, SP, 19132, IT||+39.03332707177||phone|
|audiecahra.in||Nilde Lombardi||Via degli Aldobrandeschi 42,Marianopoli, CL, 93010, IT||+39.03392828680||phone|
|adriaensmelita.in||Fortunata Onio||Via del Pontiere 117,Villastellone, TO, 10029, IT||+39.03882760066||phone|
Description of the Registrar
Netlynx provides reliable, cost effective and high quality Domain Name Registration and Domain Transfer Services duly complemented with full technical and customer support.
Where to send abuse complaints
By contact page
Report false registration details
Additional Contact Information
The CEO is Pankaj Jaiswal
- Twtter:[ https://twitter.com/Pankajjaiswal9 ]
- Home page: [ http://www.pankajjaiswal.com/ ]
- Email [ firstname.lastname@example.org ]
Netlynx Technologies Pvt. Ltd.
103, Tirupati Udyog Premises, I. B. Patel Road,
Off. Western Express Highway,
Near HP Petrol Pump. Goregaon
East. Mumbai - 400063
Telephone and FAX
Tel: +91 22 40811144 / +91 22 40811133
Fax: +91 22 40811100
Pharmacy fraud operations
- Men Health
- OEM Software
Affiliate program coordinator employing spammers