ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Quick Cart Pro

Evidence Menu:

Quick Cart Pro Index


Country: United States
State:
American operation with Philippines, Russian and Canadian connections, this large spam operation mostly promotes fake pharmaceuticals using classic "snowshoe" methods with countless IP ranges and domains. Many fictitious identities and aliases. They own at least two ICANN registrars (!) and use them to obtain an unlimited stream of domains for spamming.


Quick Cart Pro SBL Listings History
Current SBL Listings
Archived SBL Listings

Russian connection


Interesting to find a Russian domain hosted along with other domains used the this spam gang on an IP block they own.

domain: COOFFICE.RU
nserver: dns1.naunet.ru.
nserver: dns2.naunet.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2009.10.31
paid-till: 2012.10.31
free-date: 2012.12.01
source: TCI

___________________

cooffice.ru
Domain Owner: Private Person
Tel.: +7 999 3333333
Fax:
Email: 3423@1res.ru
DNS server: dns1.naunet.ru.; dns2.naunet.ru.
Registration Date: 2009.10.31
Domain paid till: 2010.10.31

__________________

domain: 1RES.RU
nserver: dns1.naunet.ru.
nserver: dns2.naunet.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2009.10.31
paid-till: 2012.10.31
free-date: 2012.12.01
source: TCI

__________________

[62.109.10.214]
1res.ru
meddiscount.ru
minicentre.ru
sellmed.ru
worldmini.ru

[62.109.10.215]
meddiscount.ru
sellmed.ru

___________________


inetnum: 87.118.69.0 - 87.118.69.255
netname: DE-KEYWEB-MORDECHAI-AILOS
descr: Mordechai Ailos IP Network
country: DE
admin-c: MA11709-RIPE
tech-c: MA11709-RIPE
status: ASSIGNED PA
mnt-by: KEYWEB-MNT
source: RIPE # Filtered

person: Mordechai Ailos
address: East Flagler Street 223
address: 33131 Miami, Florida
address: USA
phone: +1 877 7922969
e-mail: marathonsupplements@yahoo.com
nic-hdl: MA11709-RIPE
mnt-by: KEYWEB-MNT
source: RIPE # Filtered

% Information related to '87.118.64.0/18AS31103'

route: 87.118.64.0/18
descr: Keyweb AG IP Network
origin: AS31103
mnt-by: KEYWEB-MNT
source: RIPE # Filtered

_________________

https://encrypted.google.com/search?q=marathonsupplements%40yahoo.com

_________________

Domain Name: COUNTRYGARDENSOD.COM
Registrar: ACTIVE REGISTRAR, INC.
Whois Server: whois.activeregistrar.com
Referral URL: http://www.activeregistrar.com
Name Server: NS1.COUNTRYGARDENSOD.COM
Name Server: NS2.COUNTRYGARDENSOD.COM
Status: clientTransferProhibited
Updated Date: 22-nov-2011
Creation Date: 27-sep-2011
Expiration Date: 27-sep-2012

Registration Service Provided By: Active-Domain LLC
Contact: http://www.active-domain.com

Domain Name: countrygardensod.com
Expiry Date: 27-Sep-2012
Creation Date: 27-Sep-2011

Name servers:
ns1.countrygardensod.com
ns2.countrygardensod.com

Registrant Name: Letavious Bosworth
Registrant Company: countrygardensod.com
Registrant Email Address: bosworth176@earthlink.net
Registrant Address: 4312 EAST WASHINGTON STREET
Registrant City: Indianapolis
Registrant State/Region/Province: IN
Registrant Postal Code: 46201
Registrant Country: US
Registrant Tel No: +1.3173752522
Registrant Fax No:

Admin Name: Letavious Bosworth
Admin Company: countrygardensod.com
Admin Email Address: bosworth176@earthlink.net
Admin Address: 4312 EAST WASHINGTON STREET
Admin City: Indianapolis
Admin State/Region/Province: IN
Admin Postal Code: 46201
Admin Country: US
Admin Tel No: +1.3173752522
Admin Fax No:

Tech Name: Letavious Bosworth
Tech Company: countrygardensod.com
Tech Email Address: bosworth176@earthlink.net
Tech Address: 4312 EAST WASHINGTON STREET
Tech City: Indianapolis
Tech State/Region/Province: IN
Tech Postal Code: 46201
Tech Country: US
Tech Tel No: +1.3173752522
Tech Fax No:
____________________

87.118.69.220 boeketbloemenbezorgen.com
87.118.69.221 boeketbloemenbezorgen.com
87.118.69.136 centurycellcom.com
87.118.69.137 centurycellcom.com
87.118.69.129 circlesquartech.com
87.118.69.130 circlesquartech.com
87.118.69.192 clickforbooking.com
87.118.69.193 clickforbooking.com
87.118.69.226 cooffice.ru <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
87.118.69.2 countrygardensod.com
87.118.69.17 cwfclothing.com
87.118.69.18 cwfclothing.com
87.118.69.73 debtbellows.com
87.118.69.74 debtbellows.com
87.118.69.10 discopoint.com
87.118.69.11 discopoint.com
87.118.69.115 dowlingaboutus.com
87.118.69.116 dowlingaboutus.com
87.118.69.3 entirehomesolutions.com
87.118.69.4 entirehomesolutions.com
87.118.69.171 ezguideworld.com
87.118.69.172 ezguideworld.com
87.118.69.122 gibsonvillesingles.com
87.118.69.123 gibsonvillesingles.com
87.118.69.185 grandbobsbarbeque.com
87.118.69.186 grandbobsbarbeque.com
87.118.69.38 haydibize.com
87.118.69.39 haydibize.com
87.118.69.248 lamegagratis.com
87.118.69.249 lamegagratis.com
87.118.69.213 laplatabedrace.com
87.118.69.214 laplatabedrace.com
87.118.69.94 linkedsurvivor.com
87.118.69.95 linkedsurvivor.com
87.118.69.164 liquidmultivitaminwater.com
87.118.69.165 liquidmultivitaminwater.com
87.118.69.66 louisguzman.com
87.118.69.67 louisguzman.com
87.118.69.241 malanofinancial.com
87.118.69.242 malanofinancial.com
87.118.69.227 margheritamusic.com
87.118.69.228 margheritamusic.com
87.118.69.178 maskulintinitiativ.com
87.118.69.179 maskulintinitiativ.com
87.118.69.45 miladvalve.com
87.118.69.46 miladvalve.com
87.118.69.52 myreptilehome.com
87.118.69.53 myreptilehome.com
87.118.69.31 oneseasonbroker.com
87.118.69.32 oneseasonbroker.com
87.118.69.80 pantomimesa.com
87.118.69.81 pantomimesa.com
87.118.69.150 peekskillsingles.com
87.118.69.151 peekskillsingles.com
87.118.69.143 quartetjo.com
87.118.69.144 quartetjo.com
87.118.69.206 realnorthtradecapsules.com
87.118.69.207 realnorthtradecapsules.com
87.118.69.24 richardforoksenate.com
87.118.69.25 richardforoksenate.com
87.118.69.157 sissiyang.com
87.118.69.158 sissiyang.com
87.118.69.59 sixpracticalstrategies.com
87.118.69.60 sixpracticalstrategies.com
87.118.69.87 telavivboats.com
87.118.69.88 telavivboats.com
87.118.69.101 thirtypercentannualreturn.com
87.118.69.102 thirtypercentannualreturn.com
87.118.69.108 tricorntrade.com
87.118.69.109 tricorntrade.com
87.118.69.234 ubexacthomealarmsystems.com
87.118.69.235 ubexacthomealarmsystems.com
87.118.69.199 viklerart.com
87.118.69.200 viklerart.com

____________________


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK9634/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy