API tools faq
paste
MalwareMustDie

NAUNET(RU) The Credential Stealer Affiliate Registrar!

MalwareMustDie
Feb 20th, 2013
1,489
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.74 KB | None | 0 0
raw download clone embed print report
  1. ==================================
  2. #MalwareMustDie
  3. NAUNET RU - Malware infector affiliate
  4. .RU Registrar
  5. ==================================
  6. $ whois fzukungda.ru
  7. % By submitting a query to RIPN's Whois Service
  8. % you agree to abide by the following terms of use:
  9. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  10. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  11.  
  12. domain: FZUKUNGDA.RU
  13. nserver: ns1.fzukungda.ru. 41.168.5.140
  14. nserver: ns2.fzukungda.ru. 110.164.58.250
  15. nserver: ns3.fzukungda.ru. 210.71.250.131
  16. nserver: ns4.fzukungda.ru. 203.171.234.53
  17. nserver: ns5.fzukungda.ru. 184.106.195.200
  18. state: REGISTERED, DELEGATED, UNVERIFIED
  19. person: Private Person
  20. registrar: NAUNET-REG-RIPN
  21. admin-contact: https://client.naunet.ru/c/whoiscontact
  22. created: 2013.02.17
  23. paid-till: 2014.02.17
  24. free-date: 2014.03.20
  25. source: TCI
  26. Last updated on 2013.02.21 08:26:33 MSK
  27.  
  28. $ whois famagatra.ru
  29. % By submitting a query to RIPN's Whois Service
  30. % you agree to abide by the following terms of use:
  31. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  32. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  33.  
  34. domain: FAMAGATRA.RU
  35. nserver: ns1.famagatra.ru. 41.168.5.140
  36. nserver: ns2.famagatra.ru. 110.164.58.250
  37. nserver: ns3.famagatra.ru. 210.71.250.131
  38. nserver: ns4.famagatra.ru. 203.171.234.53
  39. nserver: ns5.famagatra.ru. 184.106.195.200
  40. state: REGISTERED, DELEGATED, UNVERIFIED
  41. person: Private Person
  42. registrar: NAUNET-REG-RIPN
  43. admin-contact: https://client.naunet.ru/c/whoiscontact
  44. created: 2013.02.17
  45. paid-till: 2014.02.17
  46. free-date: 2014.03.20
  47. source: TCI
  48. Last updated on 2013.02.21 08:26:33 MSK
  49.  
  50. $ whois fulinaohps.ru
  51. % By submitting a query to RIPN's Whois Service
  52. % you agree to abide by the following terms of use:
  53. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  54. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  55.  
  56. domain: FULINAOHPS.RU
  57. nserver: ns1.fulinaohps.ru. 41.168.5.140
  58. nserver: ns2.fulinaohps.ru. 110.164.58.250
  59. nserver: ns3.fulinaohps.ru. 210.71.250.131
  60. nserver: ns4.fulinaohps.ru. 203.171.234.53
  61. nserver: ns5.fulinaohps.ru. 184.106.195.200
  62. state: REGISTERED, DELEGATED, UNVERIFIED
  63. person: Private Person
  64. registrar: NAUNET-REG-RIPN
  65. admin-contact: https://client.naunet.ru/c/whoiscontact
  66. created: 2013.02.17
  67. paid-till: 2014.02.17
  68. free-date: 2014.03.20
  69. source: TCI
  70. Last updated on 2013.02.21 08:26:33 MSK
  71.  
  72. $ whois finalions.ru
  73. % By submitting a query to RIPN's Whois Service
  74. % you agree to abide by the following terms of use:
  75. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  76. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  77.  
  78. domain: FINALIONS.RU
  79. nserver: ns1.finalions.ru. 41.168.5.140
  80. nserver: ns2.finalions.ru. 110.164.58.250
  81. nserver: ns3.finalions.ru. 210.71.250.131
  82. nserver: ns4.finalions.ru. 203.171.234.53
  83. nserver: ns5.finalions.ru. 184.106.195.200
  84. state: REGISTERED, DELEGATED, UNVERIFIED
  85. person: Private Person
  86. registrar: NAUNET-REG-RIPN
  87. admin-contact: https://client.naunet.ru/c/whoiscontact
  88. created: 2013.02.17
  89. paid-till: 2014.02.17
  90. free-date: 2014.03.20
  91. source: TCI
  92. Last updated on 2013.02.21 08:26:33 MSK
  93.  
  94. $ whois emmmhhh.ru
  95. % By submitting a query to RIPN's Whois Service
  96. % you agree to abide by the following terms of use:
  97. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  98. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  99.  
  100. domain: EMMMHHH.RU
  101. nserver: ns1.emmmhhh.ru. 41.168.5.140
  102. nserver: ns2.emmmhhh.ru. 110.164.58.250
  103. nserver: ns3.emmmhhh.ru. 210.71.250.131
  104. nserver: ns4.emmmhhh.ru. 203.171.234.53
  105. nserver: ns5.emmmhhh.ru. 184.106.195.200
  106. state: REGISTERED, DELEGATED, UNVERIFIED
  107. person: Private Person
  108. registrar: NAUNET-REG-RIPN
  109. admin-contact: https://client.naunet.ru/c/whoiscontact
  110. created: 2013.02.11
  111. paid-till: 2014.02.11
  112. free-date: 2014.03.14
  113. source: TCI
  114. Last updated on 2013.02.20 17:46:36 MSK
  115.  
  116. $ whois errriiiijjjj.ru
  117. % By submitting a query to RIPN's Whois Service
  118. % you agree to abide by the following terms of use:
  119. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  120. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  121.  
  122. domain: ERRRIIIIJJJJ.RU
  123. nserver: ns1.errriiiijjjj.ru. 41.168.5.140
  124. nserver: ns2.errriiiijjjj.ru. 110.164.58.250
  125. nserver: ns3.errriiiijjjj.ru. 210.71.250.131
  126. nserver: ns4.errriiiijjjj.ru. 203.171.234.53
  127. nserver: ns5.errriiiijjjj.ru. 184.106.195.200
  128. state: REGISTERED, DELEGATED, UNVERIFIED
  129. person: Private Person
  130. registrar: NAUNET-REG-RIPN
  131. admin-contact: https://client.naunet.ru/c/whoiscontact
  132. created: 2013.02.11
  133. paid-till: 2014.02.11
  134. free-date: 2014.03.14
  135. source: TCI
  136. Last updated on 2013.02.20 17:46:36 MSK
  137.  
  138. $ whois ejjiipprr.ru
  139. % By submitting a query to RIPN's Whois Service
  140. % you agree to abide by the following terms of use:
  141. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  142. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  143.  
  144. domain: EJJIIPPRR.RU
  145. nserver: ns1.ejjiipprr.ru. 41.168.5.140
  146. nserver: ns2.ejjiipprr.ru. 110.164.58.250
  147. nserver: ns3.ejjiipprr.ru. 210.71.250.131
  148. nserver: ns4.ejjiipprr.ru. 203.171.234.53
  149. state: REGISTERED, DELEGATED, UNVERIFIED
  150. person: Private Person
  151. registrar: NAUNET-REG-RIPN
  152. admin-contact: https://client.naunet.ru/c/whoiscontact
  153. created: 2013.02.11
  154. paid-till: 2014.02.11
  155. free-date: 2014.03.14
  156. source: TCI
  157. Last updated on 2013.02.20 17:51:36 MSK
  158.  
  159. $ whois eiiiioovvv.ru
  160. % By submitting a query to RIPN's Whois Service
  161. % you agree to abide by the following terms of use:
  162. % http://www.ripn.net/about/servpol.html#3.2 (in Russian)
  163. % http://www.ripn.net/about/en/servpol.html#3.2 (in English).
  164.  
  165. domain: EIIIIOOVVV.RU
  166. nserver: ns1.eiiiioovvv.ru. 41.168.5.140
  167. nserver: ns2.eiiiioovvv.ru. 110.164.58.250
  168. nserver: ns3.eiiiioovvv.ru. 210.71.250.131
  169. nserver: ns4.eiiiioovvv.ru. 203.171.234.53
  170. state: REGISTERED, DELEGATED, UNVERIFIED
  171. person: Private Person
  172. registrar: NAUNET-REG-RIPN
  173. admin-contact: https://client.naunet.ru/c/whoiscontact
  174. created: 2013.02.11
  175. paid-till: 2014.02.11
  176. free-date: 2014.03.14
  177. source: TCI
  178. Last updated on 2013.02.20 17:51:36 MSK
  179.  
  180. *) Why all we can do is watching these moronz steal our credential in daily basis?
  181. *) Who will be brave enough to bring these scums to justice?
  182. ----
  183. #MalwareMustDie
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!