ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Pavka / Artofit

Evidence Menu:

Pavka / Artofit Index


Country: Russian Federation
State:
A Russian gang who have been spamming for years. Started with porn, now into many types of spam, always via hijacked PCs. Part of a large criminal group involving ROKSO spammers Leo Kuvayev & Alex Blood. Also see "Yambo Financials" ROKSO.


Pavka / Artofit SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info


Pavka / Artofit are a Russian spam gang who's been spamming for years. Started with porn, now into many other types of spam. They go through spamvertised domains very quickly, often spamvertise dialer executables (more viruses to infect PCs?), and use hijacked PC delivery methods to avoid filters and DNS blocking lists. Spam-source machines often show no open relay and no obviously open proxy; possibly cracked or trojaned, or else dedicated spam sources under their direct control or contracted to underlings.

Part of a criminal group known as the "Syndicate" with ROKSO spammer Leo Kuvayev. May also have AKAs of "Seanamedia", "top555", "vxhosting" and "Svetlana Agency".

Their MO includes:

o spam from freshly infected machines
o international hosting (China, Korea, S. America)
o bogus 'whois' info
o fake PGP signatures to evade content filters
o porn (child/animal), pills, "OEM" pirated software

_____________

An address used:

192 Kinwarton Road
Alcester, Warwickshire B49 6PB
Great Britain

_____________

whois.dotster.com
Registrant:
artofit.com
350 Fifth Ave
Suite 6908
New York, NY 10118
US
Registrar: DOTSTER
Domain Name: ARTOFIT.COM
Created on: 19-JAN-00
Expires on: 19-JAN-04
Last Updated on: 21-JAN-03
Administrative Contact:
Administrator, Domain domains@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683
Technical Contact:
Administrator, Domain domains@artofit.com
ARTofIT LLC.
350 Fifth Ave
Suite 6908
New York, NY 10118
US
212-465-9683
Domain servers in listed order:
NS1.ARTOFIT.COM
NS2.ARTOFIT.COM





whois.enom.com
Domain name: pavka.net
Registrant Info:
GameAbyss.com Corp.
Admin Contact (admin@gameabyss.com)
208-330-3014
FAX: none
11654 Plaza America Drive
PMB 295
Reston, VA 20190
US
Administrative Info:
GameAbyss.com Corp.
Admin Contact (admin@gameabyss.com)
208-330-3014
FAX: none
11654 Plaza America Drive
PMB 295
Reston, VA 20190
US
Billing Info:
GameAbyss.com Corp.
Admin Contact (admin@gameabyss.com)
208-330-3014
FAX: none
11654 Plaza America Drive
PMB 295
Reston, VA 20190
US
Technical Info:
GameAbyss.com Corp.
Admin Contact (admin@gameabyss.com)
208-330-3014
FAX: none
11654 Plaza America Drive
PMB 295
Reston, VA 20190
US
DNS servers:
DNS1.NAME-SERVICES.COM
DNS2.NAME-SERVICES.COM
DNS3.NAME-SERVICES.COM
DNS4.NAME-SERVICES.COM
DNS5.NAME-SERVICES.COM
Created: 10/27/2002 00:00:00
Expires: 10/27/2003 00:00:00



2006-06-09
[whois.godaddy.com]
Registrant:
artofit.com
350 Fifth Ave
Suite 6908
New York, New York 10118
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: ARTOFIT.COM
Created on: 19-Jan-00
Expires on: 19-Jan-08
Last Updated on: 15-Jan-06

Administrative Contact:
Administrator, Domain domains@artofit.com
ARTofIT LLC.
350 Fifth Ave
, Yukon Territory 6908
Zimbabwe
US Fax -- 212-465-9683

Technical Contact:
Administrator, Domain domains@artofit.com
ARTofIT LLC.
350 Fifth Ave
, Yukon Territory 6908
Zimbabwe
US Fax -- 212-465-9683

Domain servers in listed order:
NS2.ARTOFIT.COM
NS1.ARTOFIT.COM



2006-06-12 ... Oh, look a the sudden update after SBL43186:

[whois.godaddy.com]
Registrant:
ArtofIT LLC.
2185 Lemoine Ave
Fort Lee, New Jersey 07024
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: ARTOFIT.COM
Created on: 19-Jan-00
Expires on: 19-Jan-08
Last Updated on: 15-Jan-06

Administrative Contact:
Department, IT domains@artofit.com
ArtofIT LLC.
2185 Lemoine Ave
Fort Lee, New Jersey 07024
United States
2017540200 Fax --

Technical Contact:
Department, IT domains@artofit.com
ArtofIT LLC.
2185 Lemoine Ave
Fort Lee, New Jersey 07024
United States
2017540200 Fax --

Domain servers in listed order:
NS2.ARTOFIT.COM
NS1.ARTOFIT.COM





Related URLs


Spam sample searches for Pavka or Artofit.


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK2431/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy