R01R01 is a registrar in Russia. Регистратор R01


Description of the RegistrarEdit

Registrar R01 - domain name registrar belonging to the group of companies "Hosting Community". The company became the first accredited registrar in the RU national domain and today offers a wide range of professional services, being one of the leaders in terms of the number of registered domains for .RU .SU and .рф.

Регистратор R01 — регистратор доменных имен, входящий в группу компаний Hosting Community. Компания стала первым аккредитованным регистратором в национальном домене RU и сегодня предоставляет широкий спектр профессиональных услуг, являясь одним из лидеров по количеству регистрируемых доменов .RU, .SU и .РФ.

Anti-Spam PositionEdit

Not defined

Official PositionEdit

Not defined

Actual BehaviorEdit

R01 is widely abused by the Russian EvaPharmacy fraud operation.

R01 ignores all requests to suspend illegal domains. Domains are only suspended at the expiry date.

R01 широко злоупотребляли Российской EvaPharmacy мошеннической операции.

R01 игнорирует все просьбы приостановить незаконные доменов. Домены только приостанавливается на срок годности.

Registrar responsivenessEdit

Showing all registrars including R01.RU LiveSite2014

Showing all registrars excluding R01.RU LiveMinors

Piechart showing the crime sponsoring contribution by each registrar.


The comparison between this registrar and others can be seen on the graphs.

It shows how many domains have not been suspended by various registrars over the past year. The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's This registrar sponsors the vast majority (often over 60%) of the fraud domains used within the Eva Pharmacy group.

The second most abused registrar is Russia's REG.RU REG.RU at over 25%

The next most abused registrar is GKG GKG at 4%.

The next most abused registrar is The Netherlands' Hosting Concepts aka OpenProvider at 3%.

These are followed by Russia's ARDIS, India's PublicDomainRegistry PDR, China's CNOBIN, Canada's Tucows, and Pakistan's PakNIC.

Outside of Russia, most registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.

Сравнение между этим регистратором и другие можно увидеть на графике.

Она показывает, сколько доменов не были приостановлены по различным регистраторам за прошедший год.

Чем выше столбец, тем больше доменов спонсируются регистратора.

В настоящее время наиболее распространенным регистраторы Индии Netlynx и России и Naunet

Этих трех регистраторов спонсор подавляющее большинство мошеннических доменов, используемых в рамках Eva Pharmacy

Другие регистраторы были быстры, чтобы расторгнуть договоры на обслуживание с эти кибер-преступники, видя очевидные факты фальсификаций.

Нажмите на график чтобы увеличить ее.

Examples of domains used for fraudEdit

Click on any heading for evidence of fraud.

Over 1,000 domains with false registrant information is listed at R01-RU_list

Common IP addressesEdit

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation during January 2019 were located at these IPs.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Recent High use IP addresses from October 2018


Where to send abuse complaintsEdit

  • Customer Information: +7 (495) 783-3-783;
  • Technical support: +7 (495) 783-3-783;
  • Web site (but sends the complaint to the registrant)

Additional Contact InformationEdit

Applications, which can seriously affect the functionality of your services, are performed only by an authorized request. You can send an authorized request through section "Contact Us".

Sincerely, Department of Customer R01
Phone: +7 495 783-3-783
8800 775-37-83 (for Russian regions)
Fax: +7 (495) 930-88-00

Postal addressEdit

Headquarters: Moscow, Leningrad Prospect, 74, Building 4

Registration InformationEdit

Telephone and FAXEdit

  • General +7 (495) 783-3-783
  • Regions 8 (800) 775-3-783

Related informationEdit

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this articleEdit


InBoxRevenge Eva Pharmacy campaign

Rogues and Champions report