ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Ruslan Ibragimov / send-safe.com

Evidence Menu:

Ruslan Ibragimov / send-safe.com Index


Country: Russian Federation
State:
Stealth spamware creator. One of the larger criminal spamming operations around. Runs a CGI mailer on machines in Russia and uses hijacked open proxies and virus infected PCs to flood the world with spam.


Ruslan Ibragimov / send-safe.com SBL Listings History
Current SBL Listings
Archived SBL Listings

Partner-In-Spam: Alex Blood


Afraid.org is simply a DNS host abused by this spamgang; these outfits will not stay hosted there for very long. The notable part is the connection between Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov and Ibragimov. There are also various phishing templates and infectious malware located on the same IP.



$ dig @ns1.afraid.org slowboxhosting.com ns

; <<>> DiG 9.2.4 <<>> @ns1.afraid.org slowboxhosting.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28150
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:
;slowboxhosting.com. IN NS

;; ANSWER SECTION:
slowboxhosting.com. 86400 IN NS ns2.afraid.org.
slowboxhosting.com. 86400 IN NS ns3.afraid.org.
slowboxhosting.com. 86400 IN NS ns4.afraid.org.
slowboxhosting.com. 86400 IN NS ns1.afraid.org.

;; ADDITIONAL SECTION:
ns1.afraid.org. 1800 IN A 70.84.177.198
ns2.afraid.org. 1800 IN A 204.11.167.30
ns3.afraid.org. 1800 IN A 69.28.135.46
ns4.afraid.org. 1800 IN A 70.86.10.35

;; Query time: 11 msec
;; SERVER: 70.84.177.198#53(ns1.afraid.org)
;; WHEN: Fri Nov 11 2005
;; MSG SIZE rcvd: 182




[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : fastboxhosting.com

::Registrant::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Administrative Contact::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Technical Contact::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Name Servers::
NS1.AFRAID.ORG
NS2.AFRAID.ORG

::Dates & Status::
Created Date 2005-04-21 03:29:30 EDT
Updated Date 2005-04-21 03:29:30 EDT
Valid Date 2006-04-21 03:29:30 EDT
Status ACTIVE





[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : slowboxhosting.com

::Registrant::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Administrative Contact::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Technical Contact::
Name : William Janss
Email : kitwalker53@yahoo.com
Address : 2031 fm 2136
Zipcode : 76634
Nation : US
Tel : 567-235-9363
Fax : 567-235-9363

::Name Servers::
NS1.AFRAID.ORG
NS2.AFRAID.ORG

::Dates & Status::
Created Date 2005-04-21 10:41:31 EDT
Updated Date 2005-04-21 10:41:31 EDT
Valid Date 2006-04-21 10:41:31 EDT
Status ACTIVE






[whois.joker.com]
domain: send-safe.com
organization: Ibragimov Ruslan
email: ssdomain@rambler.ru
address: Akademika Volgina 8, korp. 2, kv. 5
city: Moscow
state: --
postal-code: 117485
country: RU
phone: +7.9177509211
admin-c: ssdomain@rambler.ru#0
tech-c: ssdomain@rambler.ru#0
billing-c: basaev@gmail.com#0
nserver: ns1.gooogogl.com
nserver: ns2.gooogogl.com
status: lock
created: 2001-11-14 04:31:54 UTC
modified: 2005-10-27 08:23:09 UTC
expires: 2006-11-14 04:31:54 UTC
source: joker.com live whois service
query-time: 0.016069
db-updated: 2005-11-12 00:38:58





[whois.nicline.com]

Registered through YourDomainsHere.com
Your first offshore domain registar
Belize,Belize City,99 Albert Street
Forward abuses to http://yourdomainshere.com

Domain name: gooogogl.com

Registrant:
Ryan Kelly (SROW-254191)
abuse@yourdomainshere.com
99 Albert Street
Belize City Belize
3981 BZ
+1 909498042 fax: +1 909498042

Administrative contact:
Ryan Kelly (SRCO-392651)
Jungle Ventures inc.
ryankelly@popaccount.com
99 Albert Street
Belize City Belize
4591 BZ
+1 909498042 fax: +1 909498042

Technical contact:
Ryan Kelly (SRCO-392651)
Jungle Ventures inc.
ryankelly@popaccount.com
99 Albert Street
Belize City Belize
4591 BZ
+1 909498042 fax:+1 909498042

Domain servers in listed order:
ns1.gooogogl.com 69.255.69.62
ns2.gooogogl.com 69.255.69.62

Created: 25 Oct 2005 21:20:43 UTC
Expires: 25 Oct 2006 21:20:43 UTC
Last updated: 31 Oct 2005 18:19:54 UTC






[whois.nicline.com]

Registered through YourDomainsHere.com
Your first offshore domain registar
Belize,Belize City,99 Albert Street
Forward abuses to http://yourdomainshere.com

Domain name: yourdomainshere.com

Registrant:
Ryan Kelly (SROW-254191)
abuse@yourdomainshere.com
99 Albert Street
Belize City Belize
3981 BZ
+1 909498042 fax: +1 909498042

Administrative contact:
Ryan Kelly (SRCO-392651)
Jungle Ventures inc.
ryankelly@popaccount.com
99 Albert Street
Belize City Belize
4591 BZ
+1 909498042 fax: +1 909498042

Technical contact:
Ryan Kelly (SRCO-392651)
Jungle Ventures inc.
ryankelly@popaccount.com
99 Albert Street
Belize City Belize
4591 BZ
+1 909498042 fax:+1 909498042

Domain servers in listed order:
ns1.yourdomainshere.com 85.65.65.154
ns2.yourdomainshere.com 85.65.65.154

Created: 26 Oct 2005 20:09:36 UTC
Expires: 26 Oct 2006 20:09:36 UTC
Last updated: 31 Oct 2005 17:52:32 UTC





[whois.opensrs.net]
Registrant:
Subhendu Sen
B24 Suryakiran Society
368 Senapati Bapat Marg
Mahim (W)
Mumbai, MS 400016
IN

Domain name: POPACCOUNT.COM

Administrative Contact:
Sen, Subhendu wearetherewithyou@yahoo.com
B24 Suryakiran Society
368 Senapati Bapat Marg
Mahim (W)
Mumbai, MS 400016
IN
91-22-24380433 Fax: 91-22-24380433

Technical Contact:
Sen, Subhendu wearetherewithyou@yahoo.com
B24 Suryakiran Society
368 Senapati Bapat Marg
Mahim (W)
Mumbai, MS 400016
IN
91-22-24380433 Fax: 91-22-24380433

Registrar of Record: TUCOWS, INC.
Record last updated on 27-Sep-2005.
Record expires on 28-Sep-2006.
Record created on 29-Sep-1998.

Domain servers in listed order:
DNS1.OWNNS.COM 67.43.10.34
DNS2.OWNNS.COM 67.43.10.35

Domain status: REGISTRAR-LOCK






[whois.publicinterestregistry.net]

Domain ID:D10514475-LROR
Domain Name:AFRAID.ORG
Created On:21-Sep-1999 22:14:24 UTC
Last Updated On:29-Jun-2005 20:03:31 UTC
Expiration Date:21-Sep-2007 22:14:24 UTC
Sponsoring Registrar:Dotster, Inc. (R34-LROR)
Status:OK
Registrant ID:DOT-XPNNZHZERKDX
Registrant Name:Joshua Anderson
Registrant Organization:Socket Fire
Registrant Street1:8800 Sierra College Blvd
Registrant Street2:Apt 712
Registrant Street3:
Registrant City:Roseville
Registrant State/Province:CA
Registrant Postal Code:95661
Registrant Country:US
Registrant Phone:+1.9167057835
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:hostmaster@afraid.org
Admin ID:DOT-APRZFSBIRQZX
Admin Name:Joshua Anderson
Admin Organization:Socket Fire
Admin Street1:8800 Sierra College Blvd
Admin Street2:Apt 712
Admin Street3:
Admin City:Roseville
Admin State/Province:CA
Admin Postal Code:95661
Admin Country:US
Admin Phone:+1.9167057835
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:hostmaster@afraid.org
Tech ID:DOT-CMHOF2RGOYJ5
Tech Name:Joshua Anderson
Tech Organization:Socket Fire
Tech Street1:8800 Sierra College Blvd
Tech Street2:Apt 712
Tech Street3:
Tech City:Roseville
Tech State/Province:CA
Tech Postal Code:95661
Tech Country:US
Tech Phone:+1.9167057835
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:hostmaster@afraid.org
Name Server:NS1.AFRAID.ORG
Name Server:NS2.AFRAID.ORG
Name Server:NS3.AFRAID.ORG
Name Server:NS4.AFRAID.ORG
Name Server:NS5.AFRAID.ORG
Name Server:NS6.AFRAID.ORG
Name Server:NS7.AFRAID.ORG




Related URLs

ROKSO: Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK5880/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy