Naunet

From Spamwiki
(Redirected from NAUNET-REG-RIPN)
Jump to: navigation, search

NAUNET is a registrar in Russia.

Description of the Registrar

It was established in 2005 to provide services in the field of information and communication technologies. The main specialization of "Naunet SP" is the production and delivery of integrated services to both end users and operators. The main objective of the company - is to ensure customers and partners effective tools for the management and development of their own business on the basis of modern information and communication technologies.

"Naunet SP" is a company that provides a full range of provision of services necessary for the improvement and development of our clients' businesses using Internet technologies. We do our best to provide high stability, reliability and good quality of service.

"Naunet JV" develops partnership programs . Thus, from November 2006 to actively develop partnerships in the registration of domain names offered by hosting reseller program, there is a regional program of the project SIPNAME. "Coordination Center for TLD"


The establishment of the Coordination Center for TLD in 2001 was a new milestone in the development of domain RU. In 2002, the Coordinating Center transferred the authority to develop rules for registration of domain names in RU, accreditation of registrars and the development of future projects related to the development of the Russian national domain. In order to preserve the stability of the domain RU to RIPN entrusted with the functions of the Technical Center for TLD RU.

Anti-Spam Position

Official Position

9. Cancellation of registration

9.1. Cancellation of registration of a domain name before the end of the registration period:

  • if rules of registration are violated;
  • on the basis of an enforceable court decision;
  • upon written request by the User.

Actual Behavior

NAUNET has been widely abused by the Russian EvaPharmacy fraud operation.

Until August 2014 NAUNET ignored all requests to suspend illegal domains. In late August, most of the live domains were put on NOT DELEGATED status, suspending them.

Registrar responsiveness

Click to enlarge

Click to enlarge

The comparison between this registrar and others can be seen on the graphs (click to enlarge).

It shows how many domains have not been suspended by various registrars over the past year.

The higher the column, the more domains are sponsored by the registrar.

Currently the most abused registrar is Russia's R01.ru.

This registrar sponsors the vast majority (over 95%) of the fraud domains used within the Eva Pharmacy group.

Other registrars have been quick to terminate the service contracts with these cyber-criminals upon seeing the obvious evidence of fraud.

Click on the graph to enlarge it.



Examples of domains used for fraud

A quick way to verify these sites is to examine the hosting addresses. Many compromised hosts used for this operation are located at

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
94.177.99.232 173.242.116.247 173.242.116.249 192.69.90.42 91.185.215.149 95.84.156.43
185.75.56.106 185.75.56.118 173.242.116.246 188.126.77.29 176.56.173.163 84.200.17.124
37.247.108.216 95.31.192.232 173.242.116.248 84.22.62.254 84.22.62.253 185.75.56.108
84.22.50.253 84.22.50.254 123.63.204.183 146.0.78.189 176.99.10.67 85.31.101.203
93.186.196.12 91.200.12.17 81.0.124.75 212.83.177.138 193.124.18.140 193.189.116.230
192.69.92.13 178.89.191.79 193.189.116.231 194.58.42.123 84.45.55.75 103.22.181.190
103.233.24.15 221.207.50.84 37.221.168.43 188.68.252.33 88.198.50.181 81.21.193.71
213.155.190.76 88.198.50.171 91.121.216.1 188.190.119.60 192.69.92.11 46.22.166.32
188.190.119.59 88.198.50.179 46.165.219.14 46.22.166.33 85.31.101.202 84.22.62.252
95.167.26.154 77.87.78.250 5.39.218.220 81.4.110.230 178.239.55.123 193.227.240.131
87.98.246.231 188.190.119.58 93.115.210.16 95.215.63.114 93.184.66.237 88.80.4.62
84.200.77.180 208.92.118.5 185.75.56.107 192.99.9.183 185.14.31.123 208.91.197.125
188.126.77.29 108.171.205.104 91.216.163.227 89.248.162.150 88.150.227.68 104.194.17.178
67.212.83.234 67.210.105.124 67.210.105.103 62.76.184.190 62.152.35.154 109.235.49.195
5.45.70.62 5.45.64.138 5.149.252.2 46.161.41.49 213.155.27.198 209.44.109.166
185.11.244.224 141.255.166.155 213.155.190.74 198.27.110.86

Snapshot: Pie chart showing the highest used IP addresses. (Nov 16, 2014) IP 94.177.99.232 was swapped out for 37.247.108.216 or (Nov 22, 2014) 123.63.204.183 or (Nov 30, 2014) 103.22.181.190

IP.Pie.jpg

Click on any heading for evidence of fraud.

These were all failing when tested on October 19, 2014.

Canadian Health&Care Mall

pharmacistmedical.ru
toing.ru

Where to send abuse complaints

Additional Contact Information

Postal address

125040, Moscow, 1st Yamskogo fields, 19, p.1., LLC "Naunet joint venture."

Registration Information

Telephone and FAX

  • General +7 (495) 745-20-36
  • Technical +7 (495) 745-20-34
  • Billing +7 (495) 745-20-36
  • Domain registrations +7 (495) 745-20-36


Related information

Pharmacy fraud operations

Affiliate program coordinator employing spammers

Sources for this article

Independent

InBoxRevenge Eva Pharmacy campaign

Rogues and Champions report

Interview

Corporate

http://naunet.ru