ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
The Register of Known Spam Operations
BadCow / mAiLIEN

Evidence Menu:

BadCow / mAiLIEN Index

Country: Russian Federation
*** Leo Kuvayev now in prison ***

Founded by Russian/American criminal Leo Kuvayev. Now all in Russia. Spamming "OEM CD" pirated software scams, fake pharmaceuticals, porn spam, porn payment collection, etc. Spam using virus-created botnets and seems to be involved in virus distribution. Partnered with Vladislav Khokholkov - aka "Mr. Green".

BadCow / mAiLIEN SBL Listings History
Current SBL Listings
Archived SBL Listings

MEDIA: Spam King Leo Kuvayev Jailed on Child Sex Charges

A man known as one of the world's top purveyors of junk e-mail has been imprisoned in Russia for allegedly molesting underage girls from a Moscow orphanage, has learned.

According to multiple sources, Leonid "Leo" Aleksandorovich Kuvayev, 38, is being held in a Russian prison awaiting trial on multiple child molestation charges.

Sources in the United States and Russia said that Kuvayev, who holds dual Russian-American citizenship, was alleged to have molested more than 50 young girls he had lured away from one or more local orphanages. He was brought in for questioning after one of the girls reported the incident to Russian police, who reportedly found videotaped evidence of the incidents.

Brandon A. Montgomery, a spokesman for the Immigration and Customs Enforcement (ICE) division at the U.S. Department of Homeland Security, confirmed that Kuvayev was indicted on Aug. 3, 2009, and arrested on Sept. 15 in Moscow for child molestation charges.

"Our attaché in Moscow is working with the criminal investigative team in Russia, and the investigation is ongoing," Montgomery said.

The Russian criminal case against Kuvayev, Case. No. 378243, charges him with violations of Russian Criminal Code 134, which prohibits "crimes against sexual inviolability and sexual freedom of the person." According to sources in Russia familiar with the case but who asked not to be named, Kuvayev is being held in a Moscow jail awaiting trial, which is currently scheduled to start 10 months from the date of his incarceration on Dec. 22, 2009.

Kuvayev is widely considered one of the world's most notorious spammers. Anti-spam group currently features Kuvayev as #2 on its Top 10 worst spammers list.

In 2005, the attorney general of Massachusetts successfully sued Kuvayev for violations of the CAN-SPAM Act, a law that prohibits the sending of e-mail that includes false or misleading information about the origins of the message, among other restrictions. Armed with a massive trove of spam evidence gathered largely by lawyers and security experts at Microsoft Corp., the state showed that Kuvayev's operation, an affiliate program known as BadCow, was responsible for blasting tens of millions of junk e-mails peddling everything from pirated software to counterfeit pharmaceuticals and porn.

Massachusetts was able to sue Kuvayev because he once held a driver's license in the state and had rented a mailbox there for his business (two of Kuvayev's younger sisters live in the Boston area, but did not respond to requests for comment).

In an apparent bid to sidestep those charges, Kuvayev fled the United States for Russia. A Massachusetts judge later convicted Kuvayev of CAN-SPAM violations, and ordered him to pay $37 million in civil penalties. FBI officials say BadCow was raking in more than $30 million each year at the time.

Spamhaus credits Kuvayev as being first mass-spammer to send junk e-mail messages as image files in order to evade text-based spam filters. In addition, Spamhaus says Kuvayev kept close relationships with individuals who maintained large botnets, or groupings of hacked PCs that are typically used to relay junk e-mail, and that he may be the person known online as "Pharmamaster," the individual who claimed responsibility for massive online attacks in 2006 that drove anti-spam provider BlueSecurity out of business.

According to Spamhaus, if Kuvayev is not Pharmamaster, then that moniker belongs to his former business partner, a 37-year-old Russian named Vlad Khokholkov. Sources say Khokholkov is now operating the affiliate program Kuvayev used to run -- called "Mailien" -- which appears still to be running at full steam and soliciting new spammers, despite Kuvayev's incarceration. Mailien offers affiliates 40-50 percent of each sale, and some of its "Pharmacy Express" brand partner spam sites currently incorporate familiar trademarks in their domain names, including,, and, to name just a few. A person answering the ICQ number associated with Mailien's support desk claimed not to know anyone by the name Khokholkov, but when asked about Kuvayev said that the information could not be provided because it was confidential.

Related URLs

Link to full Brian Krebs article with additional comments

Partner-In-Spam: Vladislav "Vlad" Khokholkov

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is:

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy