ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
BadCow / mAiLIEN

Evidence Menu:

BadCow / mAiLIEN Index


Country: Russian Federation
State:
*** Leo Kuvayev now in prison ***

Founded by Russian/American criminal Leo Kuvayev. Now all in Russia. Spamming "OEM CD" pirated software scams, fake pharmaceuticals, porn spam, porn payment collection, etc. Spam using virus-created botnets and seems to be involved in virus distribution. Partnered with Vladislav Khokholkov - aka "Mr. Green".


BadCow / mAiLIEN SBL Listings History
Current SBL Listings
Archived SBL Listings

oemguy.com


>--- reading URL http://new.udmurtiaware.com/
>--- contacting host new.udmurtiaware.com [194.135.103.24] on port 80
>
>HTTP/1.1 200 OK
>Date: Wed, 05 Apr 2006 x GMT
>Server: Apache/1.3.34 (Unix) PHP/4.4.2
>X-Powered-By: PHP/4.4.2
>Set-Cookie: PHPSESSID=x; path=/
>Expires: Thu, 19 Nov 1981 08:52:00 GMT
>Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
>Pragma: no-cache
>Connection: close
>Transfer-Encoding: chunked
>Content-Type: text/html
>
>d0d
>
>
>
>
>
>
><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
><html>
><head>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
><title>Downloadable Software</title>



[whois.pacnames.com]

PacNames Whois Server Version 1.1.0

Domain name: UDMURTIAWARE.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/

Domain Registrant: TOTALNIC-127503 (XSALSA@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSALSA@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS1.OEMGUY.COM
Name Server: NS2.OEMGUY.COM

Domain creation date: 2006-02-18 23:40:09.0
Domain expiration date: 2007-02-19 00:17:58.0



[whois.pacnames.com]

PacNames Whois Server Version 1.1.0

Domain name: OEMGUY.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/

Domain Registrant: TOTALNIC-127503 (XSALSA@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSALSA@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS1.OEM-ADD.BIZ
Name Server: NS1.OEMGUY.COM
Name Server: NS2.OEMGUY.COM

Domain creation date: 2006-03-06 22:45:43.0
Domain expiration date: 2007-03-06 23:22:09.0



[whois.neulevel.biz]
Domain Name: OEM-ADD.BIZ
Domain ID: D7667963-BIZ
Sponsoring Registrar: ESTDOMAINS INC
Sponsoring Registrar IANA ID: 832
Domain Status: ok
Registrant ID: DI_1329867
Registrant Name: anatolly vasin
Registrant Organization: VioSoftware Corporation
Registrant Address1: 5723 Arapahoe Ave. Suite 1-A
Registrant City: Boulder
Registrant State/Province: CO
Registrant Postal Code: 80303
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.304481105
Registrant Email: anat_671@yahoo.com
Administrative Contact ID: DI_1329867
Administrative Contact Name: anatolly vasin
Administrative Contact Organization: VioSoftware Corporation
Administrative Contact Address1: 5723 Arapahoe Ave. Suite 1-A
Administrative Contact City: Boulder
Administrative Contact State/Province: CO
Administrative Contact Postal Code: 80303
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.304481105
Administrative Contact Email: anat_671@yahoo.com
Billing Contact ID: DI_1329867
Billing Contact Name: anatolly vasin
Billing Contact Organization: VioSoftware Corporation
Billing Contact Address1: 5723 Arapahoe Ave. Suite 1-A
Billing Contact City: Boulder
Billing Contact State/Province: CO
Billing Contact Postal Code: 80303
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.304481105
Billing Contact Email: anat_671@yahoo.com
Technical Contact ID: DI_1329867
Technical Contact Name: anatolly vasin
Technical Contact Organization: VioSoftware Corporation
Technical Contact Address1: 5723 Arapahoe Ave. Suite 1-A
Technical Contact City: Boulder
Technical Contact State/Province: CO
Technical Contact Postal Code: 80303
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.304481105
Technical Contact Email: anat_671@yahoo.com
Name Server: NS1.OEM-ADD.BIZ
Name Server: NS2.OEM-ADD.BIZ
Created by Registrar: DIRECT INFORMATION PVT LTD DBA PUBLICDOMAINREGISTRY.COM
Last Updated by Registrar: ESTDOMAINS INC
Last Transferred Date: Wed Sep 07 12:11:51 GMT 2005
Domain Registration Date: Wed Sep 01 20:38:27 GMT 2004
Domain Expiration Date: Thu Aug 31 23:59:59 GMT 2006
Domain Last Updated Date: Wed Sep 07 12:11:55 GMT 2005


$ host NS1.OEM-ADD.BIZ
NS1.OEM-ADD.BIZ has address 195.206.123.50
$ host ns2.oem-add.biz
ns2.oem-add.biz has address 195.206.123.51



[whois.ripe.net]

inetnum: 195.206.120.0 - 195.206.123.255
netname: telecompoint-net
descr: telecompoint.net network
country: RU
org: ORG-TP15-RIPE
admin-c: KM111
tech-c: KM111
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: TELECOMPOINT-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: TELECOMPOINT-MNT
mnt-domains: TELECOMPOINT-MNT
source: RIPE # Filtered

organisation: ORG-TP15-RIPE
org-name: Telecom Point Company JSC
org-type: NON-REGISTRY
address: Moscow, 109029 RU
address: Nizhegorodskaya str., 10
e-mail: noc@telecompoint.net
mnt-ref: telecompoint-mnt
mnt-by: telecompoint-mnt
source: RIPE # Filtered

person: Konstantin Melnikov
address: Oruzeinika Fedorova str., 5A
address: St.Petersburg, 191187
address: RU
mnt-by: TELECOMPOINT-MNT
phone: +7 812 4681177
nic-hdl: KM111
source: RIPE # Filtered

% Information related to '195.206.123.0/24AS34373'

route: 195.206.123.0/24
descr: Telecom Point Company JSC
origin: AS34373
mnt-by: telecompoint-mnt
source: RIPE # Filtered





The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK6493/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy