Introduction

We can’t say more or better than what organizations like Qurium and Correctiv (Doppelganger investigation) have already said, but we can try once again to structure this data and add what happened during the end of 2024 and beginning of 2025.
At the moment (09.04.2025) the main members of the criminal syndicate Aeza (AEZA GROUP LLC, TIN 7813654490 / AEZA GROUP LIMITED 15065828, UK) – its founders “Bozoyan Yuriy Meruzhanovich” and “Penzev Arseniy Alexandrovich” are in pre-trial detention center in Moscow and within the next 2 months they will appear in court where they will be charged with criminal syndicate organization, patronage of the drug market “blacksprut”, money laundering and tax evasion.

Yuri Bozoyan, CEO of St. Petersburg-based Aeza Group, and the 21-year-old founder of the company Penzev Arseniy were arrested for running the famous #BlackSprut drug store. For more than two years they provided the technical base for the operation of the store.

According to Mash, the men became friends six years ago(2018-2019), when 16-year-old Arseny offered 27-year-old Yuri to invest in the theme of renting servers – they agreed on 400k rubles. This is how Aeza Group LLC came into being. (previously MskHost)

In 2023, the men went to BlackSprut: they began to ensure the work of the store selling drugs. Plus protect against DDoS attacks. All expenses for office rent, machinery and equipment were taken care of. The money was received through cryptocurrency wallets and divided among themselves.

The drug businessmen were caught in February 2025. After a pawnbroker sold 4.19 grams of mephedrone to undercover Moscow police officers. Two days ago, the offices of the Aeza Group were searched. Yuri and Arseny were prosecuted under Articles 210 (organized crime group) and 228.1 (drug trafficking) – they face up to 20 years. Together with them were arrested executors Penzev A. A., Gast V. V., Lavrukhin G. A. and two businessmen: T.V. Zubov and M.A. Orlov

MskHost, Pre-Aeza

2019-2021

Owner – Yuri Meruzhanovich Bozoyan
Short history – founded in 2019 by Bozoyan. Taken down in 2021
From the news : Bulletproof Russian hosting provider was eventually taken down by hacktivists who had enough

Bulletproof hosting that DDosed it’s opponents/rivals (other hostings) on daily basis hacked by white hackers.

Later same year same people started Aeza Group (17 June 2021)

Aeza Group, Structure and subsidiaries

2021-2025

Parent organization – AEZA GROUP LLC, Russia TIN 7813654490 – ASN216246
Owners

• Yuri Meruzhanovich Bozoyan
  

• Penzev Arseny Alexandrovich
  
• Knyazev Igor Anatolievich

International company – AEZA INTERNATIONAL LTD, UK, company number 15109642. – ASN210644
Owners (front person)

• Marat Timurov (Uralsk, M.Ihsanov str. 45, Uralsk, Kazakhstan).

Datacenter where all AEZA’s servers in Europe are located –
Aurologic GmbH – Robert-Bosch-Str. 25 – 63225 Langen – Germany

Cloud Solutions and MskHost are once closed and revived projects
specializing in cyber terrorism and bulletproof hosting (owner Bozoyan)

Associated Autonomous Systems:

AS210352 Partner LLC
AS210644 AEZA INTERNATIONAL LTD
AS211409 Shelter LLC
AS209224 CYBERHUB-AS
AS216319 CHROMIS IT LTD

DDoS wing of Aeza

From the very beginning of its existence MSK.host and Aeza Group have been terrorizing government sites, telecom companies and other hosting providers with DDoS attacks.

The key link in these DDoS attacks is Gast Vladimir Vyacheslavovich.
Together with Penznev, they created and use botnets to organize DDoS attacks.
Even after Gast Vladimir was put in jail DDoS attacks organized by Aeza continue, it shows that his accomplices are still on the run.

Other “honorable” mentions

1. SHELTER LLC – TIN 5049025855
   Details : Hosting the command and control of several families of malware including Mystic, Lumma or Meduza Stealers.
2. AEZATRADE LIMITED, UK – 15172068 – another fake.
3. QWINS LTD, 16072422
   Details : another hosting from Aeza
4. LIBER SYSTEMS, UK – 11405895
   Details : Managing 2nd level domain names used by the Doppelgänger network
5. Hostinger UAB
   Details : Provides DNS parking services for malicious Doppelgänger network domains. As well as hosting Doppelganger websites on their servers in Singapore.
6. TNSECURITY LTD, UK 15103352
   Details : Prefix swapping with AEZA and other collaborators, bulletproof hosting, Provides hosting to malicious parties, engaged in cybercrime.
   Owner : ANASTASIJA, Berezina, Latvia.

Blackspurt ([bs]2site.at) hosting at aeza