ROKSO: BadCow / mAiLIEN - The Spamhaus Project

ROKSO Home | ROKSO FAQs & Policies | About Spamhaus | FAQs

BadCow / mAiLIEN

Evidence Menu:

BadCow / mAiLIEN Index

Country: Russian Federation
State:

*** Leo Kuvayev now in prison ***

Founded by Russian/American criminal Leo Kuvayev. Now all in Russia. Spamming "OEM CD" pirated software scams, fake pharmaceuticals, porn spam, porn payment collection, etc. Spam using virus-created botnets and seems to be involved in virus distribution. Partnered with Vladislav Khokholkov - aka "Mr. Green".

BadCow / mAiLIEN SBL Listings History

Current SBL Listings

Archived SBL Listings

domain July 2005 (child porn)

leimomi01@tom.com has been nuked.

partied.net, streph.net, obstructed.net, cordoned.net, and others all had that contact.

Final-Recipient: RFC822; leimomi01@tom.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; tommx.163.net
Diagnostic-Code: SMTP; 550 <leimomi01@tom.com>: Invalid User
Last-Attempt-Date: Mon, 4 Jul 2005 21:36:52 -0700 (PDT)

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : bestkingplace.net

::Registrant::
Name : Jeffrey Metzinger
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Administrative Contact::
Name : Jeffrey Metzinger
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Technical Contact::
Name : Jeffrey Metzinger
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Name Servers::
nsa8.spx-dns.net
nsa7.spx-dns.net

::Dates & Status::
Created Date 2005-06-27 10:15:37 EDT
Updated Date 2005-06-27 10:15:37 EDT
Valid Date 2006-06-27 10:15:37 EDT
Status ACTIVE

Return-Path: <ajapted@cocolee.net>
Received: from _______.broadband.ctm.net ([202.175.169.175])
by x with ESMTP id 1dPRiK6sT3Nl34q0
for <victim@domain>; Tue, 5 Jul 2005 x
Received: from cocolee.net (cocolee-net-bk.mr.outblaze.com [208.36.123.75])
by x.broadband.ctm.net with esmtp
id x for <victim@domain>; Tue, 05 Jul 2005 x -0700
Message-ID: <6.0.0.22.1.20050705_____.________@cocolee.net>
X-Sender: upraises@cocolee-net-bk.mr.outblaze.com
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Date: Tue, 05 Jul 2005 x -0700
To: Victim <victim@domain>
From: "Toiletry V. Gimmicky" <ajapted@cocolee.net>
Subject: Boysplace and lolita pix
MIME-Version: 1.0
Content-Type: text/plain; format=flowed
Content-Transfer-Encoding: 7bit

Hi!
Never seen before Nymphets of pics galleries!

pics sets

http://bestkingplace.net/lolitas/

Sensual materials of
very young hot nymphets playing with your desires:

* large free tour
* weekly updates
* full confidentiality

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.

The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK5294/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.