ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Pavka / Artofit

Evidence Menu:

Pavka / Artofit Index


Country: Russian Federation
State:
A Russian gang who have been spamming for years. Started with porn, now into many types of spam, always via hijacked PCs. Part of a large criminal group involving ROKSO spammers Leo Kuvayev & Alex Blood. Also see "Yambo Financials" ROKSO.


Pavka / Artofit SBL Listings History
Current SBL Listings
Archived SBL Listings

netblocks, domain, and DNS


Nov 2003

Registrant:
Eva Payments Limited
20 Maidstone road
Kent
Borough green TN15 8BD
United Kingdom
Registered through: GoDaddy.com
Domain Name: EVAPHARMACY.COM
Created on: 03-Sep-03
Expires on: 03-Sep-04
Last Updated on: 28-Oct-03
Administrative Contact:
Bortnikov, Sergey evapayments@hotmail.com
Eva Payments Limited
20 Maidstone road
Kent
Borough green TN15 8BD
United Kingdom
8704581886 Fax -- 8704581887
Domain servers in listed order:
NS1.TUTSEKSA.NET
NS1.NAMED1.NET
NS1.SMARTDNS.ORG
NS2.SMARTDNS.ORG
NS1.SMARTNIC.ORG
NS2.SMARTNIC.ORG




Domain Name: TUTSEKSA.NET

whois tutseksa.net

Registrant:
JSC Region-Inform
Dmitry Bobrov (wuxidyhyl@bkkmail.com)
Malisheva 116
Ekaterinburg
null,464123
RU
Tel. +734.32563728
Creation Date: 24-Sep-2003
Expiration Date: 24-Sep-2004
Domain servers in listed order:
ns1.tutseksa.net
ns2.tutseksa.net

____________________________________________________________

ns-hoster.com is an Artofit DNS hallmark:

Registrant:
Kolin Parker
Ns-HOSTER
Kolina st., 5-43
Kiev, 453433
Ukraine
Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: NS-HOSTER.COM
Created on: 27-Sep-02
Expires on: 27-Sep-03
Last Updated on: 30-Sep-02
Administrative Contact:
Parker, Kolin hosting@pavka.net
Ns-HOSTER
Kolina st., 5-43
Kiev, 453433
Ukraine
+345 43985734 Fax --
Technical Contact:
Parker, Kolin hosting@pavka.net
Ns-HOSTER
Kolina st., 5-43
Kiev, 453433
Ukraine
+345 43985734 Fax --
Domain servers in listed order:
NS1.NS-HOSTER.COM
NS2.NS-HOSTER.COM

ns-hoster.com NS ns1.ns-hoster.com
ns-hoster.com NS ns2.ns-hoster.com
ns1.ns-hoster.com A 81.9.0.35 (eltel.net)
ns2.ns-hoster.com A 66.114.73.61 (no response)

domain: pavka.org
status: production
origin-c: pavkateam@mail.com#0
organization: Pavka Team LLC
owner: Pavel Korchagin
email: pavkateam@mail.com#0
address: Krasnya str. 452
city: Kiev
postal-code: ukr234
country: UA
admin-c: pavkateam@mail.com#0
tech-c: pavkateam@mail.com#0
billing-c: pavkateam@mail.com#0
nserver: ns1.ns-hoster.com
nserver: ns2.ns-hoster.com
registrar: JORE-1
created: 2002-10-22 16:53:16 UTC JORE-1
expires: 2003-10-22 10:53:00 UTC
source: joker.com

mail.pavka.org A 81.9.0.36

artofit.com NS elizabet.artofit.com
artofit.com NS ns2.artofit.com
elizabet.artofit.com A 66.114.73.58
elizabet.artofit.com A 66.114.73.58
artofit.com MX 10 mail.artofit.com
mail.artofit.com A 66.114.73.58

220 elizabet.artofit.com ESMTP
(66.114.73.61)
220 yehoodi.com ESMTP Sendmail 8.11.6/8.11.6; Wed, 5 Feb 2003 17:01:03 -0500 (EST)
(66.114.73.50)
(also other IPs banner for elizabet.artofit.com)

(note: yehoodi.com appears to be a music club in New York City, possibly a side-line of the spammers)

inetnum: 81.9.0.0 - 81.9.0.255
netname: Pavka
descr: PAVKA LLC
country: RU
admin-c: PAVK999-RIPE
tech-c: PAVK999-RIPE
status: ASSIGNED PA
notify: noc@eltel.net
mnt-by: ELTEL-RIPE-MNT
changed: ustas@eltel.net 20030305
source: RIPE

route: 81.9.0.0/20
descr: ELTEL.net
origin: AS20597
mnt-by: ELTEL-RIPE-MNT
changed: registry@eltel.net 20020428
source: RIPE



whois.dotster.com e-hash.com
Konzdrapenkos
1220 World city dr
New York, NY 190021 US
Registrar: DOTSTER
Domain Name: E-HASH.COM
Created on: 09-MAY-02
Expires on: 09-MAY-03
Last Updated on: 10-DEC-02
Administrative, Technical Contact:
, Olaf reger@artofit.com
Konzdrapenkos
1220 World city dr
New York, NY 190021
US
2123900011
Domain servers in listed order:
NS1.NS-HOSTER.COM
NS2.NS-HOSTER.COM





example of spamvertised URL: http://teenz-baby.com/rapemix/

teenz-baby.com A 212.33.224.131
teenz-baby.com NS ns1.ns-hoster.com
teenz-baby.com NS ns2.ns-hoster.com
ns1.ns-hoster.com A 81.9.0.35
ns2.ns-hoster.com A 66.118.165.100

domain: teenz-baby.com
status: production
origin-c: pavkamail@email.com#0
organization: TiToGroup LLC
owner: Anatoliy Antoshkin
email: pavkamail@email.com#0
address: timoshenko str 43-h54
city: Odessa
postal-code: 342342
country: UA
admin-c: pavkamail@email.com#0
tech-c: pavkamail@email.com#0
billing-c: pavkamail@email.com#0
nserver: ns1.ns-hoster.com
registrar: JORE-1
created: 2002-12-11 05:11:14 UTC JORE-1
expires: 2003-12-10 23:10:54 UTC
source: joker.com
db-updated: 2003-02-05 19:07:52 UTC




220 www.adultfreehost.info ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.20)
220 www.boyshost.net ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.21)
220 teenshost.net ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.22)
220 tgpfree.net ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.23)
220 pussy2k.com ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.25)
220 lesbianhome.net ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.26)
220 babesorgy.net ESMTP Sendmail 8.10.2/8.10.2; Wed, 5 Feb 2003 18:44:52 -0800
(66.118.165.27)

66.118.165.16/28

whois.ItsYourDomain.com
Domain: pussy2k.com
Registrant (JH1170-IYD-REG)
Jim Holder
Barbados
xxxmas@pussy2k.com
145 Greds str
Amsterdam, no 2362 BB
+4.6212122121
Administrative (JH1627-IYD)
Jim Holder
Barbados
xxxmas@pussy2k.com
145 Greds str
Amsterdam, no 2362 BB
+4.6212122121
Billing (JH1627-IYD)
Jim Holder
Barbados
xxxmas@pussy2k.com
145 Greds str
Amsterdam, no 2362 BB
+4.6212122121
Technical (JH1627-IYD)
Jim Holder
Barbados
xxxmas@pussy2k.com
145 Greds str
Amsterdam, no 2362 BB
+4.6212122121
Record created on July 17, 2002
Record last updated on July 24, 2002
Record expires on July 17, 2003
Domain Name Servers:
NS.TEENSPUSSY.NET
NS2.TEENSPUSSY.NET

teenspussy.net NS ns.teenspussy.net
teenspussy.net NS ns2.teenspussy.net
ns.teenspussy.net A 66.118.165.25
ns2.teenspussy.net A 66.118.165.26





One their dialer.exe domains:

whois.afilias.info
Domain ID:D2006654-LRMS
Domain Name:ADULTFREEHOST.INFO
Created On:29-Apr-2002 09:30:04 UTC
Last Updated On:17-Jul-2002 11:17:15 UTC
Expiration Date:29-Apr-2004 09:30:04 UTC
Sponsoring Registrar:R178-LRMS
Status:ACTIVE
Status:OK
Registrant ID:C2201694-LRMS
Registrant Name:Alex Brown
Registrant Organization:Alex Brown
Registrant Street1:145 Greds str
Registrant City:Riga
Registrant State/Province:no
Registrant Postal Code:2362
Registrant Country:LV
Registrant Phone:+3.7112122121
Registrant Email:inetdialer@yahoo.com
Admin ID:C2201695-LRMS
Admin Name:Alex Brown
Admin Organization:Alex Brown
Admin Street1:145 Greds str
Admin City:Riga
Admin State/Province:no
Admin Postal Code:2362
Admin Country:LV
Admin Phone:+3.7112122121
Admin Email:inetdialer@yahoo.com
Billing ID:C2201695-LRMS
Billing Name:Alex Brown
Billing Organization:Alex Brown
Billing Street1:145 Greds str
Billing City:Riga
Billing State/Province:no
Billing Postal Code:2362
Billing Country:LV
Billing Phone:+3.7112122121
Billing Email:inetdialer@yahoo.com
Tech ID:C2201695-LRMS
Tech Name:Alex Brown
Tech Organization:Alex Brown
Tech Street1:145 Greds str
Tech City:Riga
Tech State/Province:no
Tech Postal Code:2362
Tech Country:LV
Tech Phone:+3.7112122121
Tech Email:inetdialer@yahoo.com
Name Server:NS.BOYSHOST.NET
Name Server:NS1.BOYSHOST.NET





Other domains that appear in searches related to Pavka/Artofit:
gameabyss.com
hrwebservices.net
gpisoft.com
adultfreehost.info
www.boyshost.net
teenshost.net
tgpfree.net
pussy2k.com
lesbianhome.net
babesorgy.net
teenspussy.net
e-hash.com
lolaextrim.com
loextrim.com
antispamcenter.org
hardteenz.net
lo-series.com
bestlola.com
babyteenz.com
teenz-baby.com
go4teenz.com
go4lolita.com
baby-lolitaz.com



[whois.parava.net]
Results:
Domain name: daneon.net

registered by complete-internet-solutions.com

Registrant:
Mel S
Erica Str.,48-1-45
Samara NA 125412
US
MTG
gibbis@nm.ru
+7.7882634588

Administrative Contact:
Name: Mel
Last Name: S
Address: Erica Str.,48-1-45
City: Samara
State: xx
Zip Code: 125412
Country: RU
Company: MTG
Email: gibbis@nm.ru
Telephone: +7.7882634588
Fax: +7.7882634588
...
Domain Name Created On: 2003-01-10 00:00:00.0
Domain Name Expires On: 2004-01-10 00:00:00.0

Name Servers:
Name Server 1: NS1.SMARTNIC.ORG
Name Server 2: NS2.SMARTNIC.ORG




[whois.publicinterestregistry.net]
Domain ID:D81700694-LROR
Domain Name:SMARTNIC.ORG
Created On:28-Dec-2001 13:27:39 UTC
Last Updated On:21-Jun-2003 22:49:17 UTC
Expiration Date:28-Dec-2004 13:27:39 UTC
Sponsoring Registrar:R91-LROR
Status:OK
Registrant ID:GODA-01541525
Registrant Name:Justin William
Registrant Street1:8758 BROOK RD
Registrant City:MC LEAN
Registrant State/Province:Virginia
Registrant Postal Code:22102-1541
Registrant Country:US
Registrant Phone:+1.18002553221
Registrant Email:hostmaster@smartnic.org
...
Name Server:NS1.SMARTDNS.ORG
Name Server:NS2.SMARTDNS.ORG
Name Server:NS1.SMARTNIC.ORG
Name Server:NS2.SMARTNIC.ORG




[whois.publicinterestregistry.net]
Checking server [whois.directnic.com]

Registrant:
Siarhei Smolski
Kolasa str. 28
Minsk, Not Applicable 220013
BY
375296561828

Domain Name: SMARTDNS.ORG
...
Record last updated 11-25-2002 12:25:47 PM
Record expires on 02-06-2007
Record created on 02-06-2001

Domain servers in listed order:
NS1.SMARTDNS.ORG 80.232.100.192
NS2.SMARTDNS.ORG 213.159.117.225
NS1.SMARTNIC.ORG 66.216.126.74
NS2.SMARTNIC.ORG 66.111.52.49

Related URLs

Google search for NS-HOSTER.COM


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK2432/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy