Naunet

From Spamwiki
(Redirected from NAUNET-REG-RIPN)
Jump to: navigation, search

NAUNET is a registrar in Russia.

Description of the Registrar

It was established in 2005 to provide services in the field of information and communication technologies. The main specialization of "Naunet SP" is the production and delivery of integrated services to both end users and operators. The main objective of the company - is to ensure customers and partners effective tools for the management and development of their own business on the basis of modern information and communication technologies.

"Naunet SP" is a company that provides a full range of provision of services necessary for the improvement and development of our clients' businesses using Internet technologies. We do our best to provide high stability, reliability and good quality of service.

"Naunet JV" develops partnership programs . Thus, from November 2006 to actively develop partnerships in the registration of domain names offered by hosting reseller program, there is a regional program of the project SIPNAME. "Coordination Center for TLD"


The establishment of the Coordination Center for TLD in 2001 was a new milestone in the development of domain RU. In 2002, the Coordinating Center transferred the authority to develop rules for registration of domain names in RU, accreditation of registrars and the development of future projects related to the development of the Russian national domain. In order to preserve the stability of the domain RU to RIPN entrusted with the functions of the Technical Center for TLD RU.

Anti-Spam Position

Official Position

9. Cancellation of registration

9.1. Cancellation of registration of a domain name before the end of the registration period:

  • if rules of registration are violated;
  • on the basis of an enforceable court decision;
  • upon written request by the User.

Actual Behavior

NAUNET has been widely abused by the Russian EvaPharmacy fraud operation.

Until August 2014 NAUNET ignored all requests to suspend illegal domains. In late August, most of the live domains were put on NOT DELEGATED status, suspending them.

Registrar responsiveness

Click to enlarge

Click to enlarge

The comparison between this registrar and others can be seen on the graphs (click to enlarge).

It shows how many domains have not been suspended by various registrars over the past year.

The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru.

This registrar sponsors the vast majority (over 95%) of the fraud domains used within the Eva Pharmacy group.

Other registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.

Click on the graph to enlarge it.



Examples of domains used for fraud

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation are located at

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
94.177.99.232 95.31.192.232 193.124.18.140 84.22.62.254 84.22.62.253 208.91.197.125
84.22.50.253 93.115.210.16 84.200.77.180 146.0.78.189 176.99.10.67 85.31.101.203
93.186.196.12 37.247.108.216 81.0.124.75 212.83.177.138 91.200.12.17 91.185.215.149
95.84.156.43 193.189.116.230 193.189.116.231 194.58.42.123 84.45.55.75 103.22.181.190
103.233.24.15 221.207.50.84 37.221.168.43 188.68.252.33 88.198.50.181 81.21.193.71
213.155.190.76 88.198.50.171 91.121.216.1 188.190.119.60 192.69.92.11 46.22.166.32
188.190.119.59 88.198.50.179 46.165.219.14 46.22.166.33 85.31.101.202 84.22.62.252
95.167.26.154 77.87.78.250 5.39.218.220 81.4.110.230 178.239.55.123 193.227.240.131
87.98.246.231 188.190.119.58 178.89.191.79 192.69.92.13

Snapshot: Pie chart showing the highest used IP addresses. Recently (Sept 24, 2014) IP 94.177.99.232 was swapped out for 103.233.24.15 in Mumbai

IP.Pie.jpg

Click on any heading for evidence of fraud.

These were all failing when tested on October 19, 2014.

Canadian Health&Care Mall

pharmacistmedical.ru
toing.ru

Where to send abuse complaints

Additional Contact Information

Postal address

125040, Moscow, 1st Yamskogo fields, 19, p.1., LLC "Naunet joint venture."

Registration Information

Telephone and FAX

  • General +7 (495) 745-20-36
  • Technical +7 (495) 745-20-34
  • Billing +7 (495) 745-20-36
  • Domain registrations +7 (495) 745-20-36


Related information

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this article

Independent

InBoxRevenge Eva Pharmacy campaign

Rogues and Champions report

Interview

Corporate

http://naunet.ru