ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov

Evidence Menu:

Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov Index


Country: Ukraine
State:
So many Alex & Alexey spamming! Alex Blood tied to Pilot Holding & bbasafehosting.com long ago, then Alex Polyakov posted he owned them. Massive botnet and child-porn spam ring, also pharma, mortgage, and more. May work with Kuvayev and Yambo.


Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov SBL Listings History
Current SBL Listings
Archived SBL Listings

exquisitereplicas.com


Bulletproof hosting for a throwaway domain on CNCGroup-HL:


$ dig @221.206.5.43 urwatchktime.com ns

; <<>> DiG 9.2.4 <<>> @221.206.5.43 urwatchktime.com ns
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57838
;; flags: qr aa rd; QUERY: 1, ANSWER: 22, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;urwatchktime.com. IN NS

;; ANSWER SECTION:
urwatchktime.com. 86400 IN NS ns2.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns2.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns2.goodinteresting.com.
urwatchktime.com. 86400 IN NS ns2.whoisinfoaccurate.com.
urwatchktime.com. 86400 IN NS ns3.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns3.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns4.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns4.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns5.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns5.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns6.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns6.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns7.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns7.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns8.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns8.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns9.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns9.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns1.dnsqwick.com.
urwatchktime.com. 86400 IN NS ns1.firstdnsdomain.com.
urwatchktime.com. 86400 IN NS ns1.goodinteresting.com.
urwatchktime.com. 86400 IN NS ns1.whoisinfoaccurate.com.

;; ADDITIONAL SECTION:
ns1.dnsqwick.com. 3600 IN A 221.206.5.36

;; Query time: 299 msec
;; SERVER: 221.206.5.43#53(221.206.5.43)
;; WHEN: Thu Aug 3 xx:xx:xx 2006
;; MSG SIZE rcvd: 504



--- reading URL http://www.urwatchktime.com/
--- contacting host www.urwatchktime.com [221.206.5.43] on port 80

HTTP/1.1 200 OK
Date: Thu, 03 Aug 2006 x GMT
Server: Sun-Java-System-Web-Server/6.1
X-Powered-By: PHP/4.4.2
P3P: CP="ALL DSP COR NID CURa OUR STP PUR"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Set-Cookie: PHPSESSID=x; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

d82
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<meta name="author" content="exquisitereplicas.com" />
<meta name="copyright" content="Copyright 2006 - exquisitereplicas.com" />
<meta name="Description" content="rolex replicas, replica reviews, fake rolex, fake rolex watches, replica rolex, replica watches,replica watch,watch,watches,replica,high quality replica watch,high quality replica watches,quality watch replica,quality replica watches,quality watch,quaity watches,high quality,panerai,cartier,alain silberstain,audemars piguet,breitling,chopard,locman,corum,chronoSwiss,omega,ikepod,tag heuer,technomarine,swiss watch" />






[whois.godaddy.com]

Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: EXQUISITEREPLICAS.COM
Created on: 16-Dec-01
Expires on: 16-Dec-06
Last Updated on: 11-Nov-04

Administrative Contact:
Private, Registration EXQUISITEREPLICAS.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599

Technical Contact:
Private, Registration EXQUISITEREPLICAS.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599

Domain servers in listed order:
NS1.NAC.NET
NS2.NAC.NET






The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK6945/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy