Updated: An Internet security firm has accused eNom — a subsidiary of Demand Media and one of the world’s largest domain registrars — of knowingly profiting from the sale of domain names to distributors of illegal pharmaceuticals. KnujOn (whose name spells “no junk” backwards) today released an Internet security report which the company says tracked illegal behavior involving domain registration around the world. According to the firm, eNom “may be knowingly facilitating the illicit traffic of rogue pharmaceuticals” by issuing domains to criminal networks and other entities that distribute fraudulent medication. We have contacted both Demand Media and eNom with a request for comment, and will update this post when we get a response.
According to KnujOn’s report (the full text of which is embedded below), eNom is known to be “sponsoring fraudulent pharmacy networks and are in violation [of the] standards set by the National Association of Boards of Pharmacy. One network in particular is the GlavMed network, a criminal group that uses spam to advertise illicit sites.” The firm also said that domain registrars such as eNom “supply critical backbone services to illicit pharmacies, the back-end payment processing and network services required to keep the operations continuous and nearly undetectable.”
Should domain registrars be held liable for fraud or criminal activity that occurs through domains that they license? Some would argue that they should not, but the ICANN registration system does place certain responsibilities on registrars to verify that they are dealing with legitimate companies (although some argue the agency doesn’t do enough). KnujOn also says that the company has been notified multiple times by pharmaceutical industry regulators but has done nothing to remove domains that are based on fraudulent or criminal activity. The firm alleges that eNom has “transitioned from being a passive service provider to become an active facilitator of illicit criminal traffic, and possibly a knowing accessory.” The report states:
eNom did receive instructions from the National Association of Boards of Pharmacy (NABP) on December 23, 2009 requesting they cooperate with LegitScript and respond to consumer complaints about rogue Internet pharmacies sponsored by eNom. The letter clearly indicated what constitutes a rogue Internet pharmacy and summarized eNom’s involvement in this activity.
Registrars should not be expected to monitor every website, KnujOn says, but “it is also well-established that third parties cannot turn a blind eye to their own facilitation of criminal activity by others.” The report notes that more than 4,000 “rogue Internet pharmacies” use eNom’s registration services, which the firm says is seven times as many as use any other registrar. According to KnujOn, “eNom has become an accessory to violation of the criminal statutes listed above, by virtue of knowingly continuing to permit registration of these sites, and refusing to suspend the domains once being put on notice.” In other words, the firm says, “eNom has become an arm of illicit international drug traffic.”
According to an earlier report by KnujOn founder Garth Bruen, eNom has continued to deal with one of “the world’s largest online criminal pharmacy networks,” known as EvaPharmacy, which KnujOn claims is run from Russia and “uses multiple layers of fraud to mask its illegitimacy.” The security firm says that this has been clearly documented by another security agency called LegitScript, as well as by drug industry regulators in Manitoba, Minnesota, Ontario and Quebec, all of whom issued letters to domain registrars notifying them of the activity. According to KnujOn, most registrars shut the networks down, but “five others, including eNom, still sponsor these sites.”
Update: Quinn Daly, a spokesman for Demand Media, responded to our request for a comment with the following statement: “eNom is the largest domain name wholesaler and we take this responsibility very seriously. We cooperate with multiple law enforcement agencies, as this is our policy and meets ICANN requirements. Customers suspected of using eNom products and services for illegal purposes are investigated and appropriate action is taken. In this case, LegitScript and KnujOn do not represent law enforcement. LegitScript is a pharmacy trade organization, and KnujOn is an individual whose research has been called into question in the past. We can confirm that we received the complaint issued by LegitScript and KnujOn, and the complaint is currently under review.”
KnujOn is an independent Internet policy and security research group located in Boston and Vermont, run by programmer Garth Bruen and his father Dr. Robert Bruen.