#Nuclear Pack goes down. #Here's the Tango Check Notes #MalwareMustDie | @unixfreajp # credits: Dhia, Sachin, Frank Denis, Conrad Longmore (bad guy's nightmares) $ cat domains.txt|bash nscheck.sh NS FastCheck by @unixfreaxjp Fri Feb 28 03:33:46 JST 2014 >>> canalfield.biz|Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Status: clientTransferProhibited Registrant Email: contact@privacyprotect.org Administrative Contact Email: contact@privacyprotect.org Billing Contact Email: contact@privacyprotect.org Technical Contact Email: contact@privacyprotect.org Name Server: DNS1.GREENHOLED.NET Name Server: DNS2.GREENHOLED.NET Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Registration Date: Thu Feb 27 15:25:48 GMT 2014 Domain Expiration Date: Thu Feb 26 23:59:59 GMT 2015 Domain Last Updated Date: Thu Feb 27 15:25:48 GMT 2014 >>>> Whois database was last updated on: Thu Feb 27 18:31:18 GMT 2014 <<<< >>> craterlagoon.biz|Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Status: clientTransferProhibited Registrant Email: contact@privacyprotect.org Administrative Contact Email: contact@privacyprotect.org Billing Contact Email: contact@privacyprotect.org Technical Contact Email: contact@privacyprotect.org Name Server: DNS1.GREENHOLED.NET Name Server: DNS2.GREENHOLED.NET Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Registration Date: Thu Feb 27 15:25:53 GMT 2014 Domain Expiration Date: Thu Feb 26 23:59:59 GMT 2015 Domain Last Updated Date: Thu Feb 27 15:25:53 GMT 2014 >>>> Whois database was last updated on: Thu Feb 27 18:29:14 GMT 2014 <<<< >>> fieldbeach.biz|Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Status: clientTransferProhibited Registrant Email: contact@privacyprotect.org Administrative Contact Email: contact@privacyprotect.org Billing Contact Email: contact@privacyprotect.org Technical Contact Email: contact@privacyprotect.org Name Server: DNS1.GREENHOLED.NET Name Server: DNS2.GREENHOLED.NET Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Registration Date: Wed Feb 26 23:14:18 GMT 2014 Domain Expiration Date: Wed Feb 25 23:59:59 GMT 2015 Domain Last Updated Date: Wed Feb 26 23:14:19 GMT 2014 >>>> Whois database was last updated on: Thu Feb 27 18:31:18 GMT 2014 <<<< >>> geologysandbar.biz|Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Status: clientTransferProhibited Registrant Email: contact@privacyprotect.org Administrative Contact Email: contact@privacyprotect.org Billing Contact Email: contact@privacyprotect.org Technical Contact Email: contact@privacyprotect.org Name Server: DNS1.GREENHOLED.NET Name Server: DNS2.GREENHOLED.NET Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Registration Date: Thu Feb 27 12:37:00 GMT 2014 Domain Expiration Date: Thu Feb 26 23:59:59 GMT 2015 Domain Last Updated Date: Thu Feb 27 12:37:00 GMT 2014 >>>> Whois database was last updated on: Thu Feb 27 18:29:44 GMT 2014 <<<< >>> bayouatoll.biz|Sponsoring Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Status: clientTransferProhibited Registrant Email: contact@privacyprotect.org Administrative Contact Email: contact@privacyprotect.org Billing Contact Email: contact@privacyprotect.org Technical Contact Email: contact@privacyprotect.org Name Server: DNS1.GREENHOLED.NET Name Server: DNS2.GREENHOLED.NET Created by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM Domain Registration Date: Thu Feb 27 12:36:55 GMT 2014 Domain Expiration Date: Thu Feb 26 23:59:59 GMT 2015 Domain Last Updated Date: Thu Feb 27 12:36:56 GMT 2014 >>>> Whois database was last updated on: Thu Feb 27 18:31:18 GMT 2014 <<<< >>> colfjord.in.net|>>> Last update of whois database: Thu, 27 Feb 2014 18:33:17 UTC <<< >>> coralreefpoint.in.net|>>> Last update of whois database: Thu, 27 Feb 2014 18:33:17 UTC <<< >>> geysercave.in.net|>>> Last update of whois database: Thu, 27 Feb 2014 18:33:17 UTC <<< >>> ravinehillside.in.net|>>> Last update of whois database: Thu, 27 Feb 2014 18:33:17 UTC <<< >>> shoalgorge.in.net|>>> Last update of whois database: Thu, 27 Feb 2014 18:33:17 UTC <<< #MalwareMustDie!!