ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Pavka / Artofit

Evidence Menu:

Pavka / Artofit Index


Country: Russian Federation
State:
A Russian gang who have been spamming for years. Started with porn, now into many types of spam, always via hijacked PCs. Part of a large criminal group involving ROKSO spammers Leo Kuvayev & Alex Blood. Also see "Yambo Financials" ROKSO.


Pavka / Artofit SBL Listings History
Current SBL Listings
Archived SBL Listings

Fake banks? GAPHOST.COM / Pricewert LLC


oregon address leads to -

http://www.cbs.state.or.us/external/dfcs/enforce/ub.htm

Mar. 30, 2001
RB Bank Corporation
8130 SW Beaverton-Hillsdale Hwy., Portland, OR 97225
Incorporating Services Ltd., 15 E North St., Dover, DE 19901
__

Nov. 17, 2000
Silver Line Bank LLC
8130 SW Beaverton-Hillsdale Hwy., Portland, OR 97225
__

Mar. 5, 2003
Transinvest Bank LLC
Ste. 302 E Bldg., No 34/20 Cuba Ave. & 34th St., Panama City, Panama
8130 SW Beaverton Hillsdale Hwy., Portland, OR
__

Aug. 6, 2002
Vega Commercial Bank LLC
Ste. 302 E, Bldg. #34-20, Cuba Ave., and 34th St., Panama City, 5, Panama
__

June 1, 2000
Saturn Investment Group, SA
Ste. 302 E, Bldg. #34-20, Cuba Ave., and 34th St., Panama City, 5, Panama
79 Prpadska, Zagreb 4543 Croatia
__

June 1, 2000
Pacific Bank LLC
Ste. 302 E, Bldg. #34-20, Cuba Ave., and 34th St., Panama City, 5, Panama
__
_________________________

SBL32367

http://pricewert.com/contact.html

IP: 209.66.123.187
Server: Apache/1.3.33 (Unix)

Address: 37, Ghar-ld-Dud, Sliema, SLM 08, Malta.
Direct US number: +1-866-640-0126
All rights reserved in the United States and other countries. © 2003 PRICEWERT LLC.

spamming a discussion list:
http://www.meautomobile.com/archives/honda-vehicles/honda-vehicles-p-4275.htm

Whois: advanced-dns1.com
Registrant: Pricewert LLC
37 Ghar-ld-Dud
Sliema, Sliema SLM 08 MT <---- Malta
+356.21330190 Fax:+356.25401103
Administrative and Technical Contact:
Medvedeva, Ioulia cs@pricewert.com
37 Ghar-ld-Dud
Sliema, Sliema SLM 08 MT
+356.21330190 Fax:+356.25401103
Record expires on 12-04-2004
Record created on 12-04-2003
Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 209.66.122.11

"Proscribed.com is a website owned and provided by Blue Apple Media Ltd UK, 2005"

[whois.directi.com]
Registration Service Provided By: OPEN SOURCES
Contact: +372.53905504
Domain Name: PROSCRIBED.COM
Registrant:
Jakub Teshinski (jakub@toonszilla.com)
Korte Leidsedwarsstraat 145
Amsterdam
null,1017 NL
Tel. +31.20639097
Creation Date: 21-Oct-2002
Expiration Date: 21-Oct-2006
Domain servers in listed order:
ns1.gaphost.com
ns2.gaphost.com
Status:ACTIVE

[whois.directnic.com]
Toonszilla
Korte Leidsedwarsstraat 145
Amsterdam, Not Applicable 1017 NL
+31.20639097
Domain Name: TOONSZILLA.COM
Administrative Contact:
Teshinski, Jakub jakub@toonszilla.com
Record last updated 05-31-2004 10:41:31 AM
Record expires on 07-14-2006
Record created on 07-14-2003
Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 216.195.48.10

_________________________

Petersburg10-F0-0-0.RoSprint.net (212.176.255.41) [AS 2854] 168 msec
LINKEY-gw.rosprint.net (195.151.242.185) [AS 2854] 164 msec
96.46.linkey.ru (213.159.96.46) [AS 13302] 168 msec
82.115.209.105 [AS 31063] 164 msec

p0rn spam hosting.

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL21828
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL15995

SECURE2.NET
>>>0AD.NET
->>>PRICEWERT.COM
-->>>OPEN SOURCES - mail@0ad.net
--->>>3FN.NET
---->>>TOONSZILLA.COM

http://bgp.telstra.net/cgi-bin/as-report?as=AS31063


aut-num: AS31063
as-name: SECURE2-AS
descr: Internet Solutions Ltd
descr: Secure2 project
import: from AS13075 accept ANY
import: from AS13302 accept ANY
export: to AS13075 announce AS31063
export: to AS13302 announce AS31063
admin-c: SNOT1-RIPE
tech-c: SNOT1-RIPE
mnt-by: SECURE2-MNT
mnt-routes: SECURE2-MNT
changed: noc@secure2.net 20040929
source: RIPE

role: SECURE2 Network Operation Team
address: Secure2.Net/Internet Network Operations
e-mail: noc@secure2.net
trouble: Points of contact for SECURE-2-NETWORK Operations
trouble: ---------------------------------------------------
trouble: Routing and peering issues: noc@secure2.net
trouble: SPAM issues: abuse@secure2.net
trouble: Network security issues: network@secure2.net
trouble: Mail and News issues: postmaster@secure2.net
trouble: Customer support: support@secure2.net
trouble: General information: info@secure2.net
trouble: ---------------------------------------------------
admin-c: VB788-RIPE
tech-c: VB788-RIPE
nic-hdl: SNOT1-RIPE
mnt-by: SECURE2-MNT
notify: noc@secure2.net
changed: noc@secure2.net 20031210
source: RIPE


AS Adjancency Report

16854 AS31063 SECURE2-AS Internet Solutions Ltd
Adjacency: 1 Upstream: 1 Downstream: 0
Upstream Adjacent AS list
AS13302 ASN-LINKEY Linkey Autonomous System

Announced Prefixes

Rank AS Type Originate Addr Space (pfx) Transit Addr space (pfx) Description
8833 AS31063 ORIGIN Originate: 4096 /20.00 Transit: 0 /0.00 SECURE2-AS Internet Solutions Ltd

AS31063: SECURE2-AS Internet Solutions Ltd
Prefix (AS Path) Aggregation Action
82.115.208.0/20 4637 1239 1299 2874 2854 13302 31063


____________

Domain Name: SECURE2.NET
Registrar: BULKREGISTER, LLC.
Whois Server: whois.bulkregister.com
Referral URL: http://www.bulkregister.com
Name Server: NS1.SECURE2.NET
Name Server: NS2.SECURE2.NET
Status: ACTIVE
Updated Date: 09-dec-2004
Creation Date: 27-dec-2002
Expiration Date: 27-dec-2005


Secure2 Network
Nekrasova st. 16
St. Petersburg, RU 19000
RU

Domain Name: SECURE2.NET

Administrative Contact:
Vladimir Belkin admin@secure2.net
Secure 2 Network
Nekrasova st. 16
St. Petersburg, 190000
RU
Phone: 7 812 9063223
Fax: 7 812 9063223
Technical Contact:
Vladimir Belkin admin@secure2.net
Secure 2 Network
Nekrasova st. 16
St. Petersburg, 190000
RU
Phone: 7 812 9063223
Fax: 7 812 9063223
Billing Contact:
Vladimir Belkin admin@secure2.net
Secure 2 Network
Nekrasova st. 16
St. Petersburg, 190000
RU
Phone: 7 812 9063223
Fax: 7 812 9063223

Record updated on 2004-12-09 06:32:14
Record created on 2002-12-27
Record expires on 2005-12-27
Database last updated on 2005-01-22 04:22:58 EST

Domain servers in listed order:

NS1.SECURE2.NET 217.198.188.1
NS2.SECURE2.NET 216.200.3.190

TransferGuard LOCK Status => ENABLED

_________

Domain Name: 0AD.NET
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS2.GAPHOST.COM
Name Server: NS1.GAPHOST.COM
Status: REGISTRAR-LOCK
Updated Date: 11-nov-2004
Creation Date: 02-nov-2002
Expiration Date: 02-nov-2005

Registrant:
Pricewert LLC
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Domain Name: 0AD.NET

Administrative Contact:
Medvedeva, Ioulia cs@pricewert.com
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Technical Contact:
Medvedeva, Ioulia cs@pricewert.com
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Record last updated 01-27-2003 03:27:37 PM
Record expires on 11-02-2005
Record created on 11-02-2002

Domain servers in listed order:
NS1.GAPHOST.COM 64.124.222.190
NS2.GAPHOST.COM 209.66.122.11
_____________

Domain Name: PRICEWERT.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS2.3FN.NET
Name Server: DNS30.3FN.NET
Status: REGISTRAR-LOCK
Updated Date: 04-jan-2005
Creation Date: 06-jan-2004
Expiration Date: 06-jan-2006

Registrant:
Pricewert LLC
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Domain Name: PRICEWERT.COM

Administrative Contact:
Medvedeva, Ioulia cs@pricewert.com
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Technical Contact:
Medvedeva, Ioulia cs@pricewert.com
8130 SW Beaverton-Hillsdale
Portland, OR 97225
US
8666400126


Record last updated 01-20-2004 07:35:22 AM
Record expires on 01-06-2006
Record created on 01-06-2004

Domain servers in listed order:
DNS30.3FN.NET 209.66.123.12
NS2.3FN.NET 209.66.122.11
_____________

Domain Name: GAPHOST.COM
Registrar: DIRECT INFORMATION PVT. LTD., DBA DIRECTI.COM
Whois Server: whois.directi.com
Referral URL: http://www.directi.com
Name Server: NS2.GAPHOST.COM
Name Server: NS1.GAPHOST.COM
Status: ACTIVE
Updated Date: 04-oct-2004
Creation Date: 12-oct-2001
Expiration Date: 12-oct-2005

Registration Service Provided By: OPEN SOURCES
Contact: mail@0ad.net
Abuse Desk Email Address: mail@0ad.net

Domain Name: GAPHOST.COM

Registrant:
Toonszilla
Jakub Teshinski (jakub@toonszilla.com)
Korte Leidsedwarsstraat 145
Amsterdam
Sliema,1017
NL
Tel. +31.20639097

Creation Date: 12-Oct-2001
Expiration Date: 12-Oct-2005

Domain servers in listed order:
ns1.gaphost.com
ns2.gaphost.com


Administrative Contact:
Toonszilla
Jakub Teshinski (jakub@toonszilla.com)
Korte Leidsedwarsstraat 145
Amsterdam
Sliema,1017
NL
Tel. +31.20639097

Technical Contact:
Toonszilla
Jakub Teshinski (jakub@toonszilla.com)
Korte Leidsedwarsstraat 145
Amsterdam
Sliema,1017
NL
Tel. +31.20639097

Billing Contact:
Toonszilla
Jakub Teshinski (jakub@toonszilla.com)
Korte Leidsedwarsstraat 145
Amsterdam
Sliema,1017
NL
Tel. +31.20639097

Status:ACTIVE

___________

Domain Name: TOONSZILLA.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS1.3FN.NET
Name Server: NS2.3FN.NET
Status: REGISTRAR-LOCK
Updated Date: 11-nov-2004
Creation Date: 14-jul-2003
Expiration Date: 14-jul-2005


Registrant:
Toonszilla
Korte Leidsedwarsstraat 145
Amsterdam, Not Applicable 1017
NL
+31.20639097


Domain Name: TOONSZILLA.COM

Administrative Contact:
Teshinski, Jakub jakub@toonszilla.com
Korte Leidsedwarsstraat 145
Amsterdam, Not Applicable 1017
NL
+31.20639097


Technical Contact:
Teshinski, Jakub jakub@toonszilla.com
Korte Leidsedwarsstraat 145
Amsterdam, Not Applicable 1017
NL
+31.20639097


Record last updated 05-31-2004 10:41:31 AM
Record expires on 07-14-2005
Record created on 07-14-2003

Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 209.66.122.11

________

CustName: APS COMMUNICATION
Address: 2330 Kruse drive
City: San Jose
StateProv: CA
PostalCode: 00000
Country: US
RegDate: 2004-03-23
Updated: 2004-03-23

NetRange: 216.200.3.0 - 216.200.3.255
CIDR: 216.200.3.0/24
NetName: ABOV-C231-216-200-3-0-24
NetHandle: NET-216-200-3-0-1
Parent: NET-216-200-0-0-1
NetType: Reassigned
Comment: Abuse Contact Nash Swen noc@0as.net 372-6115-123
RegDate: 2004-03-23
Updated: 2004-03-23

TechHandle: NOC41-ORG-ARIN
TechName: AboveNet NOC
TechPhone: +1-877-479-7378
TechEmail: noc@above.net

OrgAbuseHandle: ABOVE-ARIN
OrgAbuseName: AboveNet Abuse
OrgAbusePhone: +1-877-479-7378
OrgAbuseEmail: abuse@above.net

OrgNOCHandle: NOC41-ORG-ARIN
OrgNOCName: AboveNet NOC
OrgNOCPhone: +1-877-479-7378
OrgNOCEmail: noc@above.net

OrgTechHandle: ABOVE1-ARIN
OrgTechName: AboveNet Engineering
OrgTechPhone: +1-877-479-7378
OrgTechEmail: arin@above.net

___________

[whois.enom.com]

Registration Service Provided By: eNom, Inc.
Contact: info2@eNom.com

Domain name: 0ad.com

Administrative Contact:
Bill Hunter
Bill Hunter (5@8ix.com)
+1.1111111111
Fax: +1.1111111111
P. O. Box 4496
Clearwater, FL 33758-4496
US

Technical Contact:
Bill Hunter
Bill Hunter (5@8ix.com)
+1.1111111111
Fax: +1.1111111111
P. O. Box 4496
Clearwater, FL 33758-4496
US

Registrant Contact:
Bill Hunter
Bill Hunter (5@8ix.com)
+1.1111111111
Fax: +1.1111111111
P. O. Box 4496
Clearwater, FL 33758-4496
US

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 07 Aug 2001 14:25:27
Expiration date: 07 Aug 2010 14:25:27



$ dig 0ad.net mx

; <<>> DiG 9.2.4 <<>> 0ad.net mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20032
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;0ad.net. IN MX

;; ANSWER SECTION:
0ad.net. 3600 IN MX 10 relay.0ad.net.

;; AUTHORITY SECTION:
0ad.net. 3600 IN NS ns1.gaphost.com.
0ad.net. 3600 IN NS ns2.gaphost.com.

;; ADDITIONAL SECTION:
relay.0ad.net. 3600 IN A 64.124.222.131
ns1.gaphost.com. 3600 IN A 64.124.222.190
ns2.gaphost.com. 3600 IN A 209.66.122.11

;; Query time: 122 msec
;; SERVER: default
;; WHEN: Wed Nov 30 03:31:24 2005
;; MSG SIZE rcvd: 142



$ telnet relay.0ad.net 25
Trying 64.124.222.131...
Connected to relay.0ad.net (64.124.222.131).
Escape character is '^]'.
220 sys2.3fn.net ESMTP Sendmail 8.12.3p2/8.12.3; Wed, 30 Nov 2005 __:__:__ +0300 (MSK)

-----------------------------------------------------------

October 4 2006, 'whois' update:

[Querying whois.directnic.com]

Registrant:
Triple Fiber Network
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812

Domain Name: APXTELECOM.COM

Administrative Contact:
Medvedeva, Ioulia aps.domains@0ad.net
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812
...
Record last updated 12-26-2002 09:42:46 AM
Record expires on 11-04-2007
Record created on 11-04-2002

Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 216.195.48.10


[whois.directnic.com]

Registrant:
Triple Fiber Network
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812

Domain Name: 0AD.NET

Administrative Contact:
Medvedeva, Ioulia aps.domains@0ad.net
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812
...
Record last updated 09-12-2006 02:35:12 PM
Record expires on 11-02-2007
Record created on 11-02-2002

Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 216.195.48.10



[whois.directnic.com]

Registrant:
Triple Fiber Network
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812

Domain Name: 3FN.NET

Administrative Contact:
Medvedeva, Ioulia aps.domains@0ad.net
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812
...
Record last updated 08-09-2006 03:34:24 AM
Record expires on 11-02-2012
Record created on 11-02-2002

Domain servers in listed order:
NS5.3FN.NET 64.124.222.183
NS3.3FN.NET 216.195.52.27



[whois.directnic.com]
Registrant:
Triple Fiber Network
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812

Domain Name: PRICEWERT.COM

Administrative Contact:
Medvedeva, Ioulia aps.domains@0ad.net
50 West San Fernando
San Jose, CA 95112
US
+1.8882106539
Fax:+1.8887303812
...
Record last updated 02-09-2005 09:57:52 AM
Record expires on 01-06-2007
Record created on 01-06-2004

Domain servers in listed order:
NS1.3FN.NET 64.124.222.190
NS2.3FN.NET 216.195.48.10








The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK4567/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy