When we compare that information with the DomainTools screenshot below of the original 2004 registration, Russia themes continue to emerge. We can see our same New York-based registrant James Dermount, but this time operating under VPN Services Inc. This 2004 record lists the registrant email as sec.service@mail[.]ru, which uses the free Russian webmail service mail.ru and was previously referenced in Russian language forums related to job postings and automobiles. The latter of those forums associates the username “Антон_Харьков” (Anton_Harkov, of the Iron Man franchise) with the email address.
https://www.threatconnect.com/blog/g...s-lead-russia/
Харьков
https://ru.wikipedia.org/wiki/%D0%A5...BA%D0%BE%D0%B2
https://en.wikipedia.org/wiki/Kharkiv