Looking up records for AS46636, I noticed something interesting. The Netblock WhoIs showed a reference to "uaonline", but the AS was saying it belonged to NatCoWeb, clearly something was amiss here, as I remember this as being Real International Business Corp just a few months ago.
I decided to look further, and got clarification that Real International Business Corp, are indeed NatCoWeb, thanks to WhoIs records for both natcoweb.com (184.108.40.206) and gosecure.eu (220.127.116.11) (owned by RIBC).
"Navilive Private Limited", incase you're wondering, have already previously been implicated in a number of malicious activities, including Asprox for example;
And appear to be related, or have ties to, Bigness Group Limited;
And just for further clarification, you'll no doubt have noticed that NatCoWeb are down as owning 18.104.22.168/24, and no doubt have noticed the @ipipe.net e-mail address in the net-block records? Well, lets see who owns ipipe.net (hosted at 22.214.171.124) shall we?
And who owns 126.96.36.199?
If they were trying to re-brand themselves without anyone noticing, they've certainly done a very poor job of it. Navilive Private Limited = Real International Business Corp = NatCoWeb and (hqhost.net = ipipe.net) = Real International Business Corp.