ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Ruslan Ibragimov / send-safe.com

Evidence Menu:

Ruslan Ibragimov / send-safe.com Index


Country: Russian Federation
State:
Stealth spamware creator. One of the larger criminal spamming operations around. Runs a CGI mailer on machines in Russia and uses hijacked open proxies and virus infected PCs to flood the world with spam.


Ruslan Ibragimov / send-safe.com SBL Listings History
Current SBL Listings
Archived SBL Listings

football-club5.com


Fast flux hosting, A and NS all on zombie computers...a fugitive on the run!



[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : football-club5.com

::Registrant::
Name : Lisa Rennolds
Email : kaczador@web2mail.com
Address : 97, Friary Grange Park
Zipcode : BS36 1ND
Nation : UK
Tel : +44.800 783 785 00
Fax :

::Administrative Contact::
Name : Lisa Rennolds
Email : kaczador@web2mail.com
Address : 97, Friary Grange Park
Zipcode : BS36 1ND
Nation : UK
Tel : +44.800 783 785 00
Fax :

::Technical Contact::
Name : Lisa Rennolds
Email : kaczador@web2mail.com
Address : 97, Friary Grange Park
Zipcode : BS36 1ND
Nation : UK
Tel : +44.800 783 785 00
Fax :

::Name Servers::
nszx1.football-club5.com 200.200.200.200
nszx2.football-club5.com 200.200.200.200
nszx3.football-club5.com 200.200.200.200
nszx4.football-club5.com 200.200.200.200
nszx5.football-club5.com 200.200.200.200

::Dates & Status::
Created Date 2006-09-24 17:41:15 EDT
Updated Date 2006-09-24 17:41:15 EDT
Valid Date 2007-09-24 17:41:15 EDT
Status ACTIVE



[whois.joker.com]
domain: send-safe.com
origin-c: JOCO-942786
organization: Ibragimov Ruslan
email: ssdomain@rambler.ru
address: Kulikovskaya st. 9, korp. 2, kv. 155
city: Moscow
state: --
postal-code: 117628
country: RU
phone: +7.9177509211
admin-c: ssdomain@rambler.ru#0
tech-c: ssdomain@rambler.ru#0
billing-c: basaev@gmail.com#0
nserver: nszx1.football-club5.com
nserver: nszx2.football-club5.com
nserver: nszx3.football-club5.com
nserver: nszx4.football-club5.com
status: lock
created: 2001-11-14 04:31:54 UTC
modified: 2006-10-20 15:48:48 UTC
expires: 2008-11-14 04:31:54 UTC

contact-hdl: ssdomain@rambler.ru#0
organization: Ibragimov Ruslan
email: ssdomain@rambler.ru
address: 12 Krasnokazarmennaya
city: Moscow
state: --
postal-code: 111250
country: RU
phone: +7.0953632111

contact-hdl: basaev@gmail.com#0
person: Ruslan Ibragimov
email: basaev@gmail.com
address: 12 Krasnokazarmennaya
city: Moscow
state: --
postal-code: 111250
country: RU
phone: +79177509211

source: joker.com live whois service
query-time: 0.032173
db-updated: 2006-10-21 09:21:48




$ dig @nszx4.football-club5.com www.send-safe.com

; <<>> DiG 9.2.4 <<>> @nszx4.football-club5.com www.send-safe.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23674
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;www.send-safe.com. IN A

;; ANSWER SECTION:
www.send-safe.com. 0 IN CNAME send-safe.com.
send-safe.com. 0 IN A 200.82.43.235
send-safe.com. 0 IN A 64.185.4.154
send-safe.com. 0 IN A 68.147.206.63
send-safe.com. 0 IN A 81.246.216.92
send-safe.com. 0 IN A 83.22.56.154

;; AUTHORITY SECTION:
send-safe.com. 0 IN NS nszx1.football-club5.com.
send-safe.com. 0 IN NS nszx2.football-club5.com.

;; ADDITIONAL SECTION:
nszx1.football-club5.com. 29576 IN A 90.6.50.248
nszx1.football-club5.com. 29576 IN A 67.191.245.5
nszx2.football-club5.com. 29576 IN A 24.12.165.82

;; Query time: 572 msec
;; SERVER: 68.202.178.221#53(68.202.178.221)
;; WHEN: Sat Oct 21 2006



$ dig @68.202.178.221 secure.send-safe.com

; <<>> DiG 9.2.4 <<>> @68.202.178.221 secure.send-safe.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20801
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;secure.send-safe.com. IN A

;; ANSWER SECTION:
secure.send-safe.com. 0 IN A 61.173.43.83

;; AUTHORITY SECTION:
send-safe.com. 0 IN NS nszx1.football-club5.com.
send-safe.com. 0 IN NS nszx2.football-club5.com.

;; ADDITIONAL SECTION:
nszx1.football-club5.com. 29358 IN A 90.6.50.248
nszx1.football-club5.com. 29358 IN A 67.191.245.5
nszx2.football-club5.com. 29358 IN A 24.12.165.82

;; Query time: 98 msec
;; SERVER: 68.202.178.221#53(68.202.178.221)
;; WHEN: Sat Oct 21 2006
;; MSG SIZE rcvd: 157




URL: http://68.202.178.221 [221.178.202.68.cfl.res.rr.com]

Server IP address is 68.202.178.221

HTTP/1.0 502 Bad Gateway
Content-Length: 210
Content-Type: text/html
Proxy-Connection: close

<html>
<head><title>Bad address!</title></head>
<body>
<H1> 68.202.178.221 Bad address!</H1>
<P>
Requested address is bad, or server is not accessible now.
<P>
<H2>Error 502</H2>
<P>
</body>
</html>




Also on that NS:

main-hostings.net
homebusmag.org
inbusinessmag.org
topmagsite.org
djhnxd.com
superbahamas.com
tgpie.com
tjforex.com
theaimonline.com
success-stocks.com
stocks-insiders.com
intraday-stocks.com
buynow-fixprofit-tomorrow.com
50percent-daily.com
join-this-rally.com
stocks-without-risk.com
enjoy-your-profit.com
insidethestock.com
stockpowerguaranteed.com
football-club5.com
onmedsforu.com
50gbit.com
newstoresite.com
onlineauth.com
clarkssa.com
ag1t.info
alert48.info
ba3w.info
bestbuytech.info
bestmaging.info
breshotaho.info
gertfonak.info
greatwertre.info
guatranworld.info
gurdanos.info
huyase.info
imwon.info
jubilenkas.info
jukadronas.info
kabaratos.info
lifemagworld.info
limsite.info
luipolka.info
moldavian.info
mortamosin.info
nuaberton.info
officiallim.info
onlinelim.info
perfectgreatest.info
premierrit.info
superbestwestern.info
supermagice.info
theresor.info
ukrainiannymph.info
wantbestsite.info



The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK7095/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy