ROKSO: BadCow / mAiLIEN - The Spamhaus Project

ROKSO Home | ROKSO FAQs & Policies | About Spamhaus | FAQs

BadCow / mAiLIEN

Evidence Menu:

BadCow / mAiLIEN Index

Country: Russian Federation
State:

*** Leo Kuvayev now in prison ***

Founded by Russian/American criminal Leo Kuvayev. Now all in Russia. Spamming "OEM CD" pirated software scams, fake pharmaceuticals, porn spam, porn payment collection, etc. Spam using virus-created botnets and seems to be involved in virus distribution. Partnered with Vladislav Khokholkov - aka "Mr. Green".

BadCow / mAiLIEN SBL Listings History

Current SBL Listings

Archived SBL Listings

Yesnic and Joker registration overlap

[whois.joker.com]
domain: onlinecassarimini.com
owner: Sharon Rowell
organization: OnlineCassarimi
email: shrnrowell@yahoo.co.uk
address: 1 clifton court,
city: leicestershire
state: --
postal-code: le10 0xq
country: GB
phone: 01455 891250
admin-c: shrnrowell@yahoo.co.uk0
tech-c: shrnrowell@yahoo.co.uk0
billing-c: shrnrowell@yahoo.co.uk0
nserver: nsa7.sx2xp.com <<< Yesnic reg.
nserver: ns6.jkahosting.com <<< legit & lame
status: lock
created: 2005-08-10 16:46:43 UTC
modified: 2005-08-11 13:44:10 UTC
expires: 2006-08-10 12:46:41 UTC
source: joker.com live whois service
query-time: 0.100082
db-updated: 2005-08-30 13:04:06

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : sx2xp.com

::Registrant::
Name : James Harris
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Administrative Contact::
Name : James Harris
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Technical Contact::
Name : James Harris
Email : leimomi01@tom.com
Address : 27 Nottingham Road, Eastwood, Nottingham
Zipcode : NG16 3AD
Nation : UK
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Name Servers::
nsa23.serverbackup64.com 211.192.25.40
nsa20.serverbackup64.com 211.90.115.69

::Dates & Status::
Created Date 2005-06-09 15:06:43 EDT
Updated Date 2005-06-09 15:06:43 EDT
Valid Date 2006-06-09 15:06:43 EDT
Status REGISTRAR-HOLD

Related domains (phishing?):

serverbackup77.com
backmeinedeutsche.com
cassarimini.com
cassarinini.com
online-cassarimini.com
online-cassarimini.net
onlinecassarimini.com
onlinecassarmini.com
yahooautorization.com

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : deutschi-bank.net

::Registrant::
Name : Foundation Men On Line
Email : domainsupport@sent.com
Address : PO Box 76613, AMSTERDAM, NH
Zipcode : 1070 HE
Nation : NL
Tel : +31206791556
Fax : +31206627572

::Administrative Contact::
Name : Foundation Men On Line
Email : domainsupport@sent.com
Address : PO Box 76613, AMSTERDAM, NH
Zipcode : 1070 HE
Nation : NL
Tel : +31206791556
Fax : +31206627572

::Technical Contact::
Name : Foundation Men On Line
Email : domainsupport@sent.com
Address : PO Box 76613, AMSTERDAM, NH
Zipcode : 1070 HE
Nation : NL
Tel : +31206791556
Fax : +31206627572

::Name Servers::
nsa7.sx2xp.com 202.30.175.243
nsa6.sx2xp.com 211.106.45.249

::Dates & Status::
Created Date 2005-07-19 17:15:01 EDT
Updated Date 2005-07-19 17:15:01 EDT
Valid Date 2006-07-19 17:15:01 EDT
Status ACTIVE

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : serverbackup77.com

::Registrant::
Name : Natalia Shayan
Email : windows2000@web2mail.com
Address : 2275, Westhill Dr
Zipcode : V7S 2Z2
Nation : NL
Tel : 184-188401
Fax :

::Administrative Contact::
Name : Natalia Shayan
Email : windows2000@web2mail.com
Address : 2275, Westhill Dr
Zipcode : V7S 2Z2
Nation : NL
Tel : 184-188401
Fax :

::Technical Contact::
Name : Natalia Shayan
Email : windows2000@web2mail.com
Address : 2275, Westhill Dr
Zipcode : V7S 2Z2
Nation : NL
Tel : 184-188401
Fax :

::Name Servers::
ns1565.serverbackup77.com 83.37.170.164
ns7061.serverbackup77.com 83.37.170.164

::Dates & Status::
Created Date 2005-07-30 12:43:04 EDT
Updated Date 2005-07-30 12:43:04 EDT
Valid Date 2006-07-30 12:43:04 EDT
Status ACTIVE

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : bp-dns.com

::Registrant::
Name : BP Domains Inc.
Email : domainsupport@sent.com
Address : P.O. Box 351019, Brooklyn
Zipcode : 11235
Nation : US
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Administrative Contact::
Name : BP Domains Inc.
Email : domainsupport@sent.com
Address : P.O. Box 351019, Brooklyn
Zipcode : 11235
Nation : US
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Technical Contact::
Name : BP Domains Inc.
Email : domainsupport@sent.com
Address : P.O. Box 351019, Brooklyn
Zipcode : 11235
Nation : US
Tel : +1.718-213-4074
Fax : +1.302-338-7956

::Name Servers::

::Dates & Status::
Created Date 2004-02-28 13:57:03 EST
Updated Date 2005-02-26 15:29:22 EST
Valid Date 2006-02-28 13:57:03 EST
Status REGISTRAR-HOLD

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.

The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK6298/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.