ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
ZYZTM Research Division

Evidence Menu:

ZYZTM Research Division Index


Country: Germany
State:
Involved in hosting several known spammers & cybercriminals. Claims to be in the Netherlands, but traces to Germany. Reported using the name/alias "Jose Obrien".


ZYZTM Research Division SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info


For many years, this person seems to be involved in providing IP address space and network access for spammers & cybercriminals. Full spam support under ROKSO policy.

______________

Contacts used at former hosting providers:

First Name Jose
Last Name Obrien
Company Name ZYZTM Research Division #10 B.V
Email Address jose@zyztm.com
Address 1 Apeldoornseweg 53
Address 2
City Vaassen
State/Region Gelderland
Postcode 8172 EH
Country NL - Netherlands
Phone Number 0031630016160
__________

Name: Jose Obrien
Email: jose@zyztm.com
Address: Apeldoornseweg 53
City: Vaassen
State/Region: Gerlderlan
Postcode: 8172 EH
Country: Netherlands
Phone number 0031630016160
IP Address: 87.185.4.113
Host: p57B90471.dip0.t-ipconnect.de <<<< Germany Jun/2014
__________

organisation: ORG-ICVB1-RIPE
org-name: Il Cupola Verboom B.V.
org-type: OTHER
address: 1e H v Alphenstr 43, 2806 PB, Gouda, The Netherlands
mnt-ref: ZYZTM-MNT
mnt-by: ZYZTM-MNT
source: RIPE # Filtered
_____________

Involved in all these SBL listings:

SBL225574 173.232.104.143 infinitie.net 2014-06-15 botmasterlabs.net spam gang DNS server
SBL218164 198.23.57.23 liquidnetlimited.com 2014-04-01 Dante Jimenez / Aiming Invest Botnet cybercriminal spammer: aiminginvest.com
SBL218163 198.23.57.23 liquidnetlimited.com 2014-04-01 Dante Jimenez / Aiming Invest Botnet cybercriminal spammer: aiminginvest.com
SBL218162 162.210.101.132 nozoneinc.com 2014-04-01 Dante Jimenez / Aiming Invest Botnet cybercriminal spammer: aiminginvest.com
SBL214441 46.244.18.115 a2b-internet.com 2014-02-28 Chuck An / iomega iomega1.com / iomegaone.com / omegaonemedia.com / servertronemailmarketing.co.uk
SBL204158 46.244.10.0/24 a2b-internet.com 2013-11-13 Spammer hosting (escalation)
SBL203551 91.209.12.114 a2b-internet.com 2013-11-09 Malware botnet controller @91.209.12.114
SBL202759 91.209.12.0/24 a2b-internet.com 2013-11-02 ZYZTM & BotmasterLabs.Net & other spammers
SBL202501 91.209.12.116 a2b-internet.com 2013-10-30 Malware botnet controller @91.209.12.116
SBL198074 91.209.12.79 a2b-internet.com 2013-09-20 Chuck An / iomega iomegaone.com
SBL151876 91.240.165.0/24 RIPE 2012-08-18 Dante Jimenez / Aiming Invest Dirty network: "Aiming Invest s.r.o." (AS199023)
SBL105803 91.209.12.0/24 cb3rob.net 2011-03-21 Suspect block, related to: AS34109/AS51787 (CB3ROB)
SBL99505 84.22.96.0/19 cb3rob.net 2010-12-01 Spammer & cybercriminal hosting (escalation)

_________________

SBL311876 185.35.137.203 zyztm.com 2016-09-05 Carding fraud site/forum: toystore.lol
SBL306774 185.35.138.120 zyztm.com 2016-07-28 Sparda-Bank phishing site @185.35.138.120
SBL306014 185.35.138.22 zyztm.com 2016-07-25 Citadel botnet controller @185.35.138.22
SBL305204 185.35.138.22 zyztm.com 2016-07-18 ISRStealer botnet controller @185.35.138.22
SBL303435 185.35.138.94 zyztm.com 2016-07-03 Carding fraud site/forum: rescator.cm / lampeduza.cm / omerta.cc
SBL303241 185.35.138.82 zyztm.com 2016-06-30 Phishing & malware hosting: itunes.onlineprizedraws-789.com on dirty host
SBL302384 185.35.138.80 zyztm.com 2016-06-18 Phishing & malware hosting: itunes.onlineprizedraws-789.com on dirty host
SBL297299 185.35.138.22 zyztm.com 2016-05-05 Downloader.Pony botnet controller @185.35.138.22
SBL294951 185.35.138.22 zyztm.com 2016-04-20 Downloader.Pony botnet controller @185.35.138.22
SBL290341 185.35.137.138 zyztm.com 2016-03-18 Carding fraud site/forum: toystore.lol

_________________

Other 2016 hosting:

185.35.138.94 2016-06-09 www.rescator.cm (well known stolen credit card website)

185.35.137.185 2016-06-11 refund.hmrc.gov.contact2.site (phishing hmrc.gov = british Tax Office)

185.35.137.140 2016-08-11 toystore.lol (stolen credit card website)

185.35.138.175 2016-08-13 www.maersk-cargo.com (phishing major Korean shipping company)

_________________

Some type of associate (known botnet spammer):

inetnum: 91.240.165.0 - 91.240.165.255
netname: Aiming-Invest-sro-net
descr: Il Cupola Verboom B.V.
country: NL
org: ORG-ICVB1-RIPE
admin-c: DJ1955-RIPE
tech-c: DJ1955-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: PI-AS-MNT
mnt-routes: Fajncom-mnt
remarks: FOR ABUSE noc@aiminginvest.com
source: RIPE # Filtered

organisation: ORG-ICVB1-RIPE
org-name: Il Cupola Verboom B.V.
org-type: OTHER
address: 1e H v Alphenstr 43, 2806 PB, Gouda, The Netherlands
mnt-ref: ZYZTM-MNT
mnt-by: ZYZTM-MNT
source: RIPE # Filtered

person: Dante Jimenez
address: Nerudova 1840 Pardubice Czech Republic
phone: +420 725 988 484
nic-hdl: DJ1955-RIPE
mnt-by: PI-AS-MNT
source: RIPE # Filtered

_________________________________

zyztm.abuse.1@gmail.com

_____________________________________

Types of associates and/or spam/cybercrime hosting-clients seen here:

Dante Jimenez / Aiming Invest (ROKSO)
yuqua.com (may be his)
botmasterlabs.net (may be his)
Chuck An / iomega (ROKSO)
Sven Olaf Kamphuis / CB3ROB / Cyberbunker

Related URLs

Related domains


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK10624/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy