ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Ruslan Ibragimov / send-safe.com

Evidence Menu:

Ruslan Ibragimov / send-safe.com Index


Country: Russian Federation
State:
Stealth spamware creator. One of the larger criminal spamming operations around. Runs a CGI mailer on machines in Russia and uses hijacked open proxies and virus infected PCs to flood the world with spam.


Ruslan Ibragimov / send-safe.com SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info


Stealth spamware creator. Author of mass-mailing worm Sobig, and subsequent malware distributions. One of the largest criminal-methods/botnet/proxy hijack spamming operations around.

A favorite of DHS Club spammers and many others.

mailto: sendsafenew@gmail.com
_________________________________________

[whois.joker.com]
domain: send-safe.com
owner: Ruslan Ibragimov
email: sendsafe2010@gmail.com
address: Udalcova 52 office 1002
city: Moscow
postal-code: 119607
country: RU
phone: +7.4952233536
admin-c: CCOM-1579617 sendsafe2010@gmail.com
tech-c: CCOM-1579617 sendsafe2010@gmail.com
billing-c: CCOM-1579617 sendsafe2010@gmail.com
nserver: dns.send-safe.com 72.67.79.82
nserver: dns2.send-safe.com 118.219.64.98
nserver: dns3.send-safe.com 211.117.29.2
status: lock
created: 2001-11-14 04:31:54 UTC
modified: 2010-05-04 21:05:35 UTC
expires: 2011-11-14 09:31:54 UTC

contact-hdl: CCOM-1579617
person: Ibragimov Ruslan
email: sendsafe2010@gmail.com
address: Udalcova 52 office 1002
city: Moscow
state: --
postal-code: 119607
country: RU
phone: +7.4952233536

source: joker.com live whois service
query-time: 0.000000
db-updated: 2010-05-18 20:00:00

_________________________________________

April 2005
>[whois.neulevel.biz]
>Results:
>Domain Name: SEND-SAFE.BIZ
>Domain ID: D9119864-BIZ
>Sponsoring Registrar: GO DADDY SOFTWARE, INC.
>Sponsoring Registrar IANA ID: 146
>Domain Status: ok
>Registrant ID: GODA-010467810
>Registrant Name: Ruslan Ibragimov
>Registrant Organization: Send-Safe
>Registrant Address1: 12 Krasnokazarmennaya
>Registrant City: Moscow
>Registrant State/Province: Moscow
>Registrant Postal Code: 111250
>Registrant Country: Russian Federation
>Registrant Country Code: RU
>Registrant Phone Number: +7.0953632111
>Registrant Email: basaev@gmail.com
>Name Server: NS1.SUSPENDED-FOR.SPAM-AND-ABUSE.COM
>Name Server: NS2.SUSPENDED-FOR.SPAM-AND-ABUSE.COM
>Created by Registrar: GO DADDY SOFTWARE, INC.

_______

Domain Name: SEND-SAFE.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS3.SOFTERIC.COM
Name Server: NS4.SOFTERIC.COM
Status: ACTIVE
Updated Date: 21-may-2005
Creation Date: 14-nov-2001
Expiration Date: 14-nov-2006

domain: send-safe.com
organization: Ibragimov Ruslan
email: ssdomain@rambler.ru
address: 12 Krasnokazarmennaya
city: Moscow
state: --
postal-code: 111250
country: RU
phone: +7.9177509211
admin-c: ssdomain@rambler.ru#0
tech-c: ssdomain@rambler.ru#0
billing-c: basaev@gmail.com#0
nserver: ns3.softeric.com
nserver: ns4.softeric.com
status: lock
created: 2001-11-14 04:31:54 UTC
modified: 2005-05-21 05:10:19 UTC
expires: 2006-11-14 04:31:54 UTC
source: joker.com live whois service


OLDER =

Domain Name: SEND-SAFE.COM
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: http://www.gandi.net
Name Server: FULL1.GANDI.NET
Name Server: FULL2.GANDI.NET
Status: REGISTRAR-HOLD
Updated Date: 01-mar-2005
Creation Date: 14-nov-2001
Expiration Date: 14-nov-2005

domain: SEND-SAFE.COM
owner-address: Ibragimov Ruslan
owner-address: 12 Krasnokazarmennaya
owner-address: 111250
owner-address: Moscow
owner-address: Russia
owner-phone: +7.9177509211
owner-e-mail: ssdomain@rambler.ru
admin-c: IR14-GANDI
tech-c: IR14-GANDI
bill-c: IR14-GANDI
nserver: full1.gandi.net 217.70.177.42
nserver: full2.gandi.net 217.70.179.34
reg_created: 2001-11-14 04:31:54
expires: 2005-11-14 04:31:54
created: 2001-11-14 10:31:55
changed: 2005-03-01 17:53:21

person: Ibragimov Ruslan
nic-hdl: IR14-GANDI
address: 12 Krasnokazarmennaya
address: 111250
address: Moscow
address: Russia
phone: +7.0953632111
e-mail: ssdomain@rambler.ru
lastupdated: 2004-06-22 12:45:18

OLDER =

domain: SEND-SAFE.COM
owner-address: Ibragimov Ruslan
owner-address: 12 Krasnokazarmennaya
owner-address: 111250
owner-address: Moscow
owner-address: Russia
admin-c: IR14-GANDI
tech-c: IR14-GANDI
bill-c: IR14-GANDI
nserver: dns.intragroup.net 217.107.162.25
nserver: dns2.send-safe.com 217.107.162.200
reg_created: 2001-11-14 04:31:54
expires: 2003-11-14 04:31:54
created: 2001-11-14 10:31:55
changed: 2003-03-04 05:46:35

person: Ibragimov Ruslan
nic-hdl: IR14-GANDI
address: 12 Krasnokazarmennaya
address: 111250
address: Moscow
address: Russia
phone: nophone
e-mail: rusoil@mail.ru
______________________________________

Domain ID:D105824165-LROR
Domain Name:SEND-SAFE.ORG
Created On:03-Mar-2005 19:35:40 UTC
Last Updated On:30-Jun-2005 17:47:30 UTC
Expiration Date:03-Mar-2006 19:35:40 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:CORG-115362
Registrant Name:Ruslan Ibragimov
Registrant Organization:
Registrant Street1:12 Krasnokazarmennaya
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:--
Registrant Postal Code:111250
Registrant Country:RU
Registrant Phone:+791.77509211
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:basaev@gmail.com
Admin ID:CORG-115361
Admin Name:Ruslan Ibragimov
Admin Organization:
Admin Street1:12 Krasnokazarmennaya
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:--
Admin Postal Code:111250
Admin Country:RU
Admin Phone:+709.53632111
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:basaev@gmail.com
Tech ID:CORG-115361
Tech Name:Ruslan Ibragimov
Tech Organization:
Tech Street1:12 Krasnokazarmennaya
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:--
Tech Postal Code:111250
Tech Country:RU
Tech Phone:+709.53632111
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:basaev@gmail.com
Name Server:A.NS.JOKER.COM
Name Server:B.NS.JOKER.COM
Name Server:C.NS.JOKER.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

OLDER =

Domain ID:D105824165-LROR
Domain Name:SEND-SAFE.ORG
Created On:03-Mar-2005 19:35:40 UTC
Last Updated On:11-Mar-2005 08:21:05 UTC
Expiration Date:03-Mar-2006 19:35:40 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CORG-115362
Registrant Name:Ruslan Ibragimov
Registrant Organization:
Registrant Street1:12 Krasnokazarmennaya
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:--
Registrant Postal Code:111250

Registrant Country:RU
Registrant Phone:+791.77509211
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:basaev@gmail.com
Admin ID:CORG-115361
Admin Name:Ruslan Ibragimov
Admin Organization:
Admin Street1:12 Krasnokazarmennaya
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:--
Admin Postal Code:111250
Admin Country:RU
Admin Phone:+709.53632111
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:basaev@gmail.com
Tech ID:CORG-115361
Tech Name:Ruslan Ibragimov
Tech Organization:
Tech Street1:12 Krasnokazarmennaya
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:--
Tech Postal Code:111250
Tech Country:RU
Tech Phone:+709.53632111
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:basaev@gmail.com
Name Server:NS3.JAGUARPC.NET
Name Server:NS4.JAGUARPC.NET
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

______________________________________

Domain Name: BULKIM.COM
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: http://www.gandi.net
Name Server: FULL1.GANDI.NET
Name Server: FULL2.GANDI.NET
Status: REGISTRAR-HOLD
Updated Date: 02-mar-2005
Creation Date: 26-aug-2002
Expiration Date: 26-aug-2005

domain: BULKIM.COM
owner-address: Ibragimov Ruslan
owner-address: 12 Krasnokazarmennaya
owner-address: 111250
owner-address: Moscow
owner-address: Russia
admin-c: IR14-GANDI
tech-c: AR41-GANDI
bill-c: IR14-GANDI
nserver: full1.gandi.net 217.70.177.42
nserver: full2.gandi.net 217.70.179.34
reg_created: 2002-08-26 15:02:25
expires: 2005-08-26 15:02:26
created: 2002-08-26 21:02:36
changed: 2005-03-02 14:06:30

person: Ibragimov Ruslan
nic-hdl: IR14-GANDI
address: 12 Krasnokazarmennaya
address: 111250
address: Moscow
address: Russia
phone: +7.0953632111
e-mail: ssdomain@rambler.ru
lastupdated: 2004-06-22 12:45:18

person: GANDI Auto Register 4.1
nic-hdl: AR41-GANDI
address: GANDI
address: 38 rue Notre-Dame de Nazareth
address: F-75003
address: Paris
address: France
phone: N/A
e-mail: support@gandi.net


OLDER =

domain: BULKIM.COM
owner-address: Ibragimov Ruslan
owner-address: 12 Krasnokazarmennaya
owner-address: 111250
owner-address: Moscow
owner-address: Russia
admin-c: IR14-GANDI
tech-c: IR14-GANDI
bill-c: IR14-GANDI
nserver: ns1.likewhoa.com 66.181.160.160
nserver: ns2.likewhoa.com 66.181.170.170
reg_created: 2002-08-26 15:02:25
expires: 2003-08-26 15:02:26
created: 2002-08-26 21:02:36
changed: 2002-08-29 07:57:11

person: Ibragimov Ruslan
nic-hdl: IR14-GANDI
address: 12 Krasnokazarmennaya
address: 111250
address: Moscow
address: Russia
phone: nophone
e-mail: rusoil@mail.ru
________________________________________________________________________


From: Darren Grabowski <firstinitiallastname@verio.net>
Newsgroups: news.admin.net-abuse.email
Subject: Spews S1062 send-safe.com
Date: Mon, 10 Mar 2003 12:06:39 -0600

Send-safe.com was terminated.

2, 161.58.219.36, send-safe.com / Ibragimov Ruslan

darren
--
Darren Grabowski
Verio Security & Abuse Team

Related URLs

Who wrote Sobig? is 404 6 Conclusions
"Based on our findings and the items we have identified within the scope of this document, we strongly believe that Ruslan Ibragimov of Russia, and/or Ibragimov's development team, authored Sobig. Ibragimov has demonstrated an advanced knowledge of Sobig outbreaks, the skills necessary for developing Sobig, access to the source code base used to develop Sobig, and a clear motive for creating the Sobig malware."

Partner-In-Spam: Leo Kuvayev
Partner-In-Spam: Brent Hunter - hostingpower.ca

Also see Alexey Panov in ROKSO, hosted by Rostelecom, too, but now living in Germany instead of Russia.




The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK2400/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy