|
 |
|||||||
|
April 2007: See "pharmalert" link below for how to recover from a Yambo infection on a linux or BSD box. And remember to use strong passwords! September 2006: NOTICE! For their pharma spam websites and nameservers, Yambo is using cracked servers as reverse proxies. They appear to be exploiting weak user/password combinations, for example "admin/admin". Most of the hijacked servers are embedded Linux devices such as firewalls and wi-fi routers. In addition to completely disinfecting the device and adding strong passwords, Spamhaus would also like to hear from system admins who have monitored the hijacked IP and tracked packets to the "back end" servers. ____________________________________________________________ Huge spamhaus tied into billing for child/animal/incest-porn spamming, pirated software spamming, credit-card "collection" sites. Frequent visitors and advertisers in "secret" spammer chat forums. Uses "affiliate" model extensively to distribute its spamming among various kiddiez, particularly for their "pharma" programs (pharmaceutical drugs). EVAPharmacy (EVA Pharmacy, EVABilling, EVA Billing), USDrugs (US Drugs), MyCanadian Pharmacy (My Canadian Pharmacy), and other recognizable spam brands are theirs. Frequently tied to involvement in hijacking ownership of various ARIN netblocks from the rightful owners. They try an look somewhat "legit" by using postal addresses at US and British "remailer" services and US/British forwarding-phone services. The players are mostly Ukrainian and/or Russian, living in and around Seattle, WA and Gainesville, FL in the USA and in Russia/Ukraine. Also have ties in Paris, France. Have ties to "Alex Blood", who ties to the RegPay child-porn spammers. If all the info is correct, they are also one of the older spamhausen around. Related to, or same as, Oxbill (and many other "___bill" domains) and possibly the samme gang as Pavka / Artofit See ROK2432 for links to smartdns.com, which is a P-A domain. http://groups.google.com/groups?selm=bp8lu4%241llavj%241%40ID-115151.news.uni-berlin.de http://groups.google.com/groups?selm=rWvub.17440%24FkK1.15806%40twister01.bloor.is.net.cable.rogers.com Subject: Yambo Financials - yambobank.com, yambo.biz, name15.com, ssl4all.com etc, etc.... -- Registrant: Yambo Financials Ltd. 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Domain Name: YAMBO-GROUP.COM Administrative Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Technical Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Record last updated 08-02-2004 04:06:31 PM Record expires on 06-13-2005 Record created on 06-13-2003 Domain servers in listed order: NS0.HQHOST.NET 64.237.37.72 NS1.HQHOST.NET 64.237.41.94 -- [whois.networksolutions.com] Results: Registrant: Yambo Financials Ltd (FJWNQVESWD) 14 Hook Road, Epsom, Surrey KT19 8TH, United Kingdom Surrey, UK KT19 8TH UK Domain Name: YAMBOCARDS.COM Administrative Contact: Yambo Financials Ltd (YKGPBXLJNO) yambocards@hotmail.com 14 Hook Road, Epsom, Surrey KT19 8TH, United Kingdom Surrey, UK KT19 8TH UK +1-866-YAMBOCS Technical Contact: Network Solutions, Inc. (HOST-ORG) customerservice@networksolutions.com 13200 Woodland Park Drive Herndon, VA 20171-3025 US 1-888-642-9675 fax: 571-434-4620 Record expires on 04-Apr-2004. Record created on 04-Apr-2003. Database last updated on 3-Jan-2004 21:22:39 EST. Domain servers in listed order: NS1.SMARTDNS.ORG 64.49.244.204 NS2.SMARTDNS.ORG 209.51.142.198 NS1.SMARTNIC.ORG 207.44.143.227 NS2.SMARTNIC.ORG 66.111.52.49 __________ Registrant: Yambo Financials Ltd. 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Domain Name: YAMBOBANK.COM Administrative Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Technical Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Record last updated 07-31-2003 05:14:57 AM Record expires on 07-07-2005 Record created on 07-07-2003 Domain servers in listed order: NS1.YAMBO.BIZ 66.111.36.80 NS2.YAMBO.BIZ 69.93.6.13 ____________ Domain Name: YAMBO.BIZ Domain ID: D2914606-BIZ Sponsoring Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM Domain Status: ok Registrant ID: IMG-495311 Registrant Name: Customer Support Registrant Organization: Yambo Financials Ltd. Registrant Address1: 14 Hook Road Registrant City: Epsom Registrant State/Province: Not Applicable Registrant Postal Code: 19KT 8TH Registrant Country: Great Britain (UK) Registrant Country Code: GB Registrant Phone Number: +44.8719008667 Registrant Facsimile Number: +44.8719008668 Registrant Email: support@yambo.biz ... Name Server: UDNS1.ULTRADNS.NET Name Server: UDNS2.ULTRADNS.NET Name Server: NS0.XNAME.ORG Name Server: NS2.YAMBO.BIZ Name Server: NS1.YAMBO.BIZ Name Server: NS1.XNAME.ORG Created by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM Last Updated by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM Domain Registration Date: Thu Apr 11 12:35:11 GMT 2002 Domain Expiration Date: Sat Apr 10 23:59:59 GMT 2004 Domain Last Updated Date: Sun Nov 16 09:40:14 GMT 2003 ______________ (July, 2007) pio.yambo@gmail.com addition... [whois.neulevel.biz] Domain Name: YAMBO.BIZ Registrant Name: Customer Support Registrant Organization: Yambo Financials Ltd. Registrant Address1: 14 Hook Road Registrant City: Epsom Registrant State/Province: Not Applicable Registrant Postal Code: 19KT 8TH Registrant Country: Great Britain (UK) Registrant Country Code: GB Registrant Phone Number: +44.8719008667 Registrant Facsimile Number: +44.8719008668 Registrant Email: pio.yambo@gmail.com -- (July, 2007) Yambo.biz. IN A 82.98.86.173 Yambo.biz. IN NS NS1.SEDOPARKING.COM. Yambo.biz. IN NS NS2.SEDOPARKING.COM. NS1.SEDOPARKING.COM. IN A 212.227.86.6 NS2.SEDOPARKING.COM. IN A 87.106.54.143 __________________ [whois.directi.com] Results: Domain Name: NAME15.COM Registrant: Yambo Financials Inc. (DE) Anton Denysenko (ad@host2010.com) 1001 SW 16th Avenue, #103, Gainesville null,32601 US Tel. +135.23789943 Creation Date: 16-May-2003 Expiration Date: 16-May-2004 Domain servers in listed order: ns.host2010.com ns2.host2010.com Administrative Contact: Yambo Financials Inc. (DE) Anton Denysenko (ad@host2010.com) 1001 SW 16th Avenue, #103, Gainesville null,32601 US Tel. +135.23789943 Status: ACTIVE ___________ Registrant: Eva Payments Limited 20 Maidstone road Kent Borough green TN15 8BD United Kingdom Registered through: GoDaddy.com Domain Name: EVAPHARMACY.COM Created on: 03-Sep-03 Expires on: 03-Sep-06 Last Updated on: 16-Dec-03 Administrative Contact: Bortnikov, Sergey evapayments@hotmail.com Eva Payments Limited 20 Maidstone road Kent Borough green TN15 8BD United Kingdom 8704581886 Fax -- 8704581887 Domain servers in listed order: NS1.SMARTDNS.ORG NS2.SMARTDNS.ORG NS1.SMARTNIC.ORG NS2.SMARTNIC.ORG ___________ > Yambo Financials Ltd. > 14 Hook Road, Epsom, Surrey, > KT19 8TH, United Kingdom > 1.866.YAMBOCS > (US and Canada) > +1.212.301.7424 New York City area code. Vegas World Casino - online gambling center! Vegas World Casino is owned and operated by Eva Payments Ltd. http://www.vegasworld.net/billingpolicy.shtml - contains the same information as above Companies House Britain Name & Registered Office: EVA PAYMENTS LIMITED 20 MAIDSTONE ROAD <--- linkbill.com old address BOROUGH GREEN SEVENOAKS, KENT TN15 8BD Status: Active Company Type: Private Limited Company Nature Of Business: None registered Company No.: 04594965 Date of Incorporation: 19/11/2002 Country of Origin: United Kingdom domain: vegasworld.net status: production organization: Eva Payments Limited email: evapayments@hotmail.com <-- spam for EVAPHARMACY.COM address: 20 Maidstone road address: Borough green, Sevenoaks city: Borough green postal-code: Kent TN15 8BD country: GB admin-c: evapayments@hotmail.com#0 tech-c: evapayments@hotmail.com#0 billing-c: evapayments@hotmail.com#2 nserver: ns1.named1.net nserver: ns2.named1.net registrar: JORE-1 created: 2001-11-30 16:50:41 UTC cosmos modified: 2003-08-15 09:12:57 UTC JORE-1 expires: 2006-11-30 16:50:41 UTC source: joker.com db-updated: 2004-01-04 02:21:43 UTC _________ [whois.dotster.com] Registrant: Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, De 19930 US Registrar: DOTSTER Domain Name: NAMED1.NET Created on: 29-NOV-01 Expires on: 29-NOV-04 Last Updated on: 30-OCT-03 Administrative, Technical Contact: Vic, Andy owner@named1.com Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, De 19930 US 270-637-4721 270-637-4721 Domain servers in listed order: NS1.XTRAFF.COM NS2.XTRAFF.COM ___________ [whois.dotster.com] Registrant: Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, De 19930 US Registrar: DOTSTER Domain Name: NAMED1.NET Created on: 29-NOV-01 Expires on: 29-NOV-04 Last Updated on: 30-OCT-03 Administrative, Technical Contact: Vic, Andy owner@named1.com Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, De 19930 US 270-637-4721 270-637-4721 Domain servers in listed order: NS1.XTRAFF.COM NS2.XTRAFF.COM __________ [whois.dotster.com] Registrant: Globetime Ltd. 788-790 Finchley Road London, UK NW11 7TJ GB Registrar: DOTSTER Domain Name: LINKBILL.COM Created on: 16-JAN-01 Expires on: 16-JAN-05 Last Updated on: 15-NOV-02 Administrative Contact: Melrow, Joel admin@linkbill.com Globetime Ltd. 788-790 Finchley Road London, UK NW11 7TJ GB +44 845 458 9654 +44 845 458 9653 Technical Contact: Melrow, Joel admin@linkbill.com Globetime Ltd. 788-790 Finchley Road London, UK NW11 7TJ GB +44 845 458 9654 +44 845 458 9653 Domain servers in listed order: NS1.LINKBILL.COM NS2.LINKBILL.COM _____________ There is indeed a Yambo Financials registered in the UK Companies House Britain Name & Registered Office: YAMBO FINANCIALS LIMITED OCTAGON HOUSE, FIR ROAD BRAMHALL, STOCKPORT CHESHIRE SK7 2NP Status: Active Company No.: 04441960 Date of Incorporation: 20/05/2002 Country of Origin: United Kingdom Company Type: Private Limited Company Nature Of Business: 7484 - other business activities Last Members List: 20/05/2003 There are a number of companies registered using that address. It appears to be the office of Davenport Company Services. ____________ [whois.net.ua] Results: % Ukrainian Whois server. % Please visit http://whois.com.ua for more information. % Rights restricted by copyright. domain: million.dp.ua nserver: ns.million.dp.ua 195.248.163.58 nserver: ns2.trifle.net 195.24.128.164 mnt-by: MILLION-MNT source: APEX __________ yambo.biz MX 30 gecko.yambo.biz yambo.biz MX 10 million.dp.ua yambo.biz MX 20 rara.yambo.biz yambo.biz NS NS0.XNAME.ORG yambo.biz NS NS1.XNAME.ORG yambo.biz NS ns1.yambo.biz yambo.biz NS NS2.yambo.biz yambo.biz NS UDNS1.ULTRADNS.NET yambo.biz NS UDNS2.ULTRADNS.NET gecko.yambo.biz A 69.93.6.10 rara.yambo.biz A 66.111.36.80 [S333 - sago/unitedcolo] NS0.XNAME.ORG A 195.20.105.149 NS1.XNAME.ORG A 213.133.115.5 ns1.yambo.biz A 66.111.36.80 NS2.yambo.biz A 69.93.6.13 UDNS1.ULTRADNS.NET A 204.69.234.1 UDNS2.ULTRADNS.NET A 204.74.101.1 million.dp.ua A 195.248.185.130 million.dp.ua A 195.248.163.58 million.dp.ua NS ns.million.dp.ua million.dp.ua NS ns2.trifle.net ns.million.dp.ua A 195.248.163.58 ns2.trifle.net A 195.24.128.164 named1.net NS ns2.xtraff.com named1.net NS ns1.xtraff.com ns2.xtraff.com A 69.31.87.2 [S2513] ns1.xtraff.com A 69.31.86.14 ________ Hosted at Russian lang hosts - nLayer Communications, Inc. NLYR-ARIN-BLK2 (NET-69-31-0-0-1) 69.31.0.0 - 69.31.143.255 Pilosoft, Inc. NLYR-69-31-80-0-1 (NET-69-31-80-0-1) 69.31.80.0 - 69.31.87.255 KERNELNETWORKLLC KERNELNETWORKLLC-001 (NET-69-31-86-0-1) 69.31.86.0 - 69.31.86.255 OrgName: Pilosoft, Inc. OrgID: PILOS Address: 55 Broad St, 3rd Fl City: New York StateProv: NY PostalCode: 10004 Country: US NetRange: 69.31.80.0 - 69.31.87.255 CIDR: 69.31.80.0/21 NetName: NLYR-69-31-80-0-1 NetHandle: NET-69-31-80-0-1 Parent: NET-69-31-0-0-1 NetType: Reallocated NameServer: NS5.PILOSOFT.COM NameServer: NS6.PILOSOFT.COM Comment: RegDate: 2003-08-16 Updated: 2003-08-16 OrgTechHandle: ALEXP1-ARIN OrgTechName: Pilosov, Alex OrgTechPhone: +1-212-632-6123 OrgTechEmail: alex@pilosoft.com OrgName: KERNELNETWORKLLC OrgID: KERNE Address: 5 Starboard Center Suite 20 City: Bethany Beach StateProv: DE PostalCode: 19930 Country: US NetRange: 69.31.86.0 - 69.31.86.255 CIDR: 69.31.86.0/24 NetName: KERNELNETWORKLLC-001 NetHandle: NET-69-31-86-0-1 Parent: NET-69-31-80-0-1 NetType: Reallocated NameServer: NS1.XTRAFF.COM NameServer: NS2.XTRAFF.COM Comment: RegDate: 2003-08-26 Updated: 2003-08-26 OrgTechHandle: NOC1345-ARIN OrgTechName: NOC OrgTechPhone: +1-866-356-2437 OrgTechEmail: noc@host-system.com [whois.dotster.com] Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, DE 19930 US Registrar: DOTSTER Domain Name: HOST-SYSTEM.COM Created on: 30-JUN-01 Expires on: 30-JUN-04 Last Updated on: 16-OCT-03 Administrative, Technical Contact: Vic, Andy owner@named1.com Kernel Network LLC 5 Starboard Center Suite 20 Bethany Beach, DE 19930 US 270-637-4721 270-637-4721 Domain servers in listed order: NS1.XTRAFF.COM NS2.XTRAFF.COM NS3.XTRAFF.COM End of Whois Information _______________ [whois.dotster.com] Registrant: Extreme Networks 88-331 Palm road Sukhdrischinsk, Papua d3345 PG Registrar: DOTSTER Domain Name: BANNEDHOST.NET Created on: 06-SEP-02 Expires on: 06-SEP-04 Last Updated on: 10-SEP-03 Administrative Contact: Vic, Andy root@host-system.com Host-System Backbone Ltd. 29 Brighton 8 street Brooklyn, NY 11235 US +1-702-554-64-66 +1-702-554-64-66 Technical Contact: Vic, Andy root@host-system.com Host-System Backbone Ltd. 29 Brighton 8 street Brooklyn, NY 11235 US +1-702-554-64-66 +1-702-554-64-66 Domain servers in listed order: NS1.NAMED1.NET NS2.NAMED1.NET End of Whois Information ____________ 220 server1.xtraff.com ESMTP Postfix (69.31.86.14) 220 sex-pics-catalogue.com ESMTP Postfix (69.31.86.32) 220 sebasta ESMTP (69.31.86.2) 220 sebasta ESMTP (69.31.86.3) 220 sebasta ESMTP (69.31.86.4) 220 sebasta ESMTP (69.31.86.5) 220 sebasta ESMTP (69.31.86.6) 220 sebasta ESMTP (69.31.86.7) 220 sebasta ESMTP (69.31.86.8) 220 sebasta ESMTP (69.31.86.9) 220 alex205 ESMTP (69.31.86.10) 220 alex205 ESMTP (69.31.86.11) 220 alex205 ESMTP (69.31.86.12) 220 alex205 ESMTP (69.31.86.13) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.16) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.17) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.18) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.19) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.20) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.21) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500 (69.31.86.22) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.23) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.24) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.27) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.28) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.29) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500 (69.31.86.30) 220 server1.xtraff.com ESMTP Postfix (69.31.86.43) 220 server1.xtraff.com ESMTP Postfix (69.31.86.44) 220 server1.xtraff.com ESMTP Postfix (69.31.86.42) 220 server1.xtraff.com ESMTP Postfix (69.31.86.46) 220 sex-pics-catalogue.com ESMTP Postfix (69.31.86.47) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.98) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.103) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.104) 220 host001 ESMTP (69.31.86.89) 220 host001 ESMTP (69.31.86.95) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.105) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.106) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.107) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.109) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.108) 220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT (69.31.86.80) 220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT (69.31.86.81) 220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT (69.31.86.82) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.111) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.110) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.112) 220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT (69.31.86.83) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.113) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.134) 220 server31.xtraff.com ESMTP Postfix (69.31.86.130) 220 server54.xtraff.com ESMTP Postfix (69.31.86.131) 220 dahost213 ESMTP (69.31.86.128) 220 dahost213 ESMTP (69.31.86.129) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.114) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:32 -0500 (69.31.86.137) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.139) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.140) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:29 -0500 (69.31.86.132) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.138) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.141) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.142) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.147) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.144) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.145) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.143) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.146) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.148) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500 (69.31.86.26) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.149) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500 (69.31.86.25) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.151) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500 (69.31.86.150) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500 (69.31.86.31) 220 server56.xtraff.com ESMTP Postfix (69.31.86.155) 220 server56.xtraff.com ESMTP Postfix (69.31.86.156) 220 server56.xtraff.com ESMTP Postfix (69.31.86.157) 220 server56.xtraff.com ESMTP Postfix (69.31.86.158) 220 server1.xtraff.com ESMTP Postfix (69.31.86.45) 220 relay.mixmag.ru ESMTP (69.31.86.78) 220 host001 ESMTP (69.31.86.88) 220 relay.mixmag.ru ESMTP (69.31.86.79) 220 host001 ESMTP (69.31.86.93) 220 host001 ESMTP (69.31.86.94) 220 host001 ESMTP (69.31.86.91) 220 host001 ESMTP (69.31.86.90) 220 gabber226 ESMTP (69.31.86.176) 220 gabber226 ESMTP (69.31.86.177) 220 gabber226 ESMTP (69.31.86.178) 220 gabber226 ESMTP (69.31.86.179) 220 sebasta ESMTP (69.31.86.196) 220 sebasta ESMTP (69.31.86.198) 220 sebasta ESMTP (69.31.86.197) [220 server59.xtraff.com ESMTP Postfix (69.31.86.201) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.115) 220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:35 -0500 (69.31.86.200) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.189) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.116) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.190) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.191) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.188) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.193) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.194) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.187) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.186) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.195) 220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800 (69.31.86.192) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.117) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.204) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.205) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.203) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.207) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.208) incoming220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.209) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.210) 220 kosyan208.named1.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:41:55 GMT (69.31.86.202) 220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500 (69.31.86.206) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.118) [220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.215) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.216) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.217) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.214) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.219) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.220) 220 jps.ru ESMTP CommuniGate Pro 4.1.4 (69.31.86.218) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.119) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.224) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.120) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.121) 69.31.86.244 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.227) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.122) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.225) 69.31.86.253 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.226) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.228) 220 relay.mixmag.ru ESMTP (69.31.86.180) 220 relay.mixmag.ru ESMTP (69.31.86.181) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.230) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.231) 220 server1.xtraff.com ESMTP Postfix (69.31.86.253) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.123) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.232) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.229) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.234) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.233) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500 (69.31.86.236) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.124) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT (69.31.86.245) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT (69.31.86.246) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT (69.31.86.247) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT (69.31.86.248) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT (69.31.86.244) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.125) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.126) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.127) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.100) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.97) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500 (69.31.86.235) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.101) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500 (69.31.86.238) 220 server1.xtraff.com ESMTP Postfix (69.31.86.250) 220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500 (69.31.86.237) 220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:56 GMT (69.31.86.249) [220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500 (69.31.86.239) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.99) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.102) 220 pornpic.org ESMTP Postfix (69.31.86.86) 220 pornpic.org ESMTP Postfix (69.31.86.84) 220 pornpic.org ESMTP Postfix (69.31.86.87) 220 pornpic.org ESMTP Postfix (69.31.86.85) 220 srv209.hcolo.com ESMTP Postfix (69.31.86.96) 220 pornpic.org ESMTP Postfix (69.31.86.240) ____________________________ More child porn... http://www.spamhaus.org/sbl/sbl.lasso?query=SBL13623 Brit info - Yambo Financials Ltd. 14 Hook Road, Epsom, Surrey, KT19 8TH, United Kingdom tel: +44 (0) 871-9008-668 fax: +44 (0) 871-9008-668 tel.: +1-866-YAMBOCS (toll-free for USA and Canada) support@yambo.biz Seen/checked out that address due to spam connections over a year ago, and it does exist - but it's listed as a residential area: 14 Hook Road, EPSOM, Surrey KT19 8TH,(KT19-8TH-1D9) Registered Occupants: JUEL AHMED, MOJAHID ALI, ANWAR ISLAM, SALEHA KHATUN No hits on British White Pages (Phone Book) for those names/that location +44 871 is a UK rerouting code, with a premium price tag (15c/minute) Rerouting meaning it probably ends up in Russia... USA, WA state? support@yambo.biz, by mail: 16541 Redmond Way Ste 261-C, Redmond WA 98052, USA, NY state? or by phone: 212-301-7424. USA, Florida?! Yambo Financials Inc. 1001 SW 16th Avenue, #103 Gainesville, FL 32601 US 1.212.301.7424 This address is an apartment complex. Then the domains... note how they secondary on a free DNS service (XNAME)... Registrant: Yambo Financials Ltd. 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Domain Name: YAMBOCS.COM Administrative Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Technical Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Record last updated 06-25-2003 03:49:22 AM Record expires on 10-03-2008 Record created on 10-03-2002 Domain servers in listed order: NS1.YAMBO.BIZ 66.111.36.80 NS2.YAMBO.BIZ 69.93.6.13 NS0.XNAME.ORG 195.20.105.149 NS1.XNAME.ORG 213.133.115.5 UDNS1.ULTRADNS.NET 204.69.234.1 UDNS2.ULTRADNS.NET 204.74.101.1 _________ Registrant: Yambo Financials Ltd. 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Domain Name: YAMBOBANK.COM Administrative Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Technical Contact: Support, Customer support@yambo.biz 14 Hook Road Epsom, Not Applicable 19KT 8TH GB +44.8719008667 Fax:+44.8719008668 Record last updated 07-31-2003 05:14:57 AM Record expires on 07-07-2005 Record created on 07-07-2003 Domain servers in listed order: NS1.YAMBO.BIZ 66.111.36.80 NS2.YAMBO.BIZ 69.93.6.13 ____________ Domain Name: EXCHANGE-STORE.COM Registrar: ONLINENIC, INC. Whois Server: whois.OnlineNIC.com Referral URL: http://www.OnlineNIC.com Name Server: NS3.YDEDICATED.COM Name Server: NS4.YDEDICATED.COM Status: ACTIVE Updated Date: 12-aug-2003 Creation Date: 12-aug-2003 Expiration Date: 12-aug-2004 Domain Name: YDEDICATED.COM Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM Whois Server: whois.directnic.com Referral URL: http://www.directnic.com Name Server: NS0.XNAME.ORG Name Server: NS1.YAMBO.BIZ Name Server: NS2.YAMBO.BIZ Name Server: NS1.XNAME.ORG Status: ACTIVE Updated Date: 14-jan-2004 Creation Date: 12-mar-2003 Expiration Date: 12-mar-2005 Registrant: Yambo Financials Inc. 1001 SW 16th Avenue, #103 Gainesville, FL 32601 US 1.212.301.7424 Domain Name: YDEDICATED.COM Administrative Contact: Service, Customer customerservice@yambo.biz 1001 SW 16th Avenue, #103 Gainesville, FL 32601 US 1.212.301.7424 Technical Contact: Service, Customer customerservice@yambo.biz 1001 SW 16th Avenue, #103 Gainesville, FL 32601 US 1.212.301.7424 Record last updated 11-02-2003 11:38:44 AM Record expires on 03-12-2005 Record created on 03-12-2003 Domain servers in listed order: NS1.YAMBO.BIZ 66.111.36.80 NS2.YAMBO.BIZ 69.93.6.13 NS0.XNAME.ORG 195.20.105.149 NS1.XNAME.ORG 213.133.115.5 domain: supportex.net status: production organization: IM owner: Dmitry Tsokur email: dmitry@imedia.ru title: CTO address: Vyborgskaya, 16 city: Moscow state: RF postal-code: 125212 country: RU admin-c: dmitry@digitaldesign.ru#0 tech-c: dmitry@digitaldesign.ru#0 billing-c: dmitry@digitaldesign.ru#0 nserver: ns1.lowesthosting.com nserver: ns2.lowesthosting.com registrar: JORE-1 created: 2001-09-24 14:53:47 UTC JORE-1 modified: 2002-09-14 09:23:19 UTC JORE-1 expires: 2004-09-24 08:53:31 UTC source: joker.com db-updated: 2004-02-12 17:17:09 UTC domain: DIGITALDESIGN.RU type: CORPORATE nserver: ns1.digitaldesign.ru. 66.111.44.190 nserver: ns2.digitaldesign.ru. 212.188.13.155 state: REGISTERED, DELEGATED person: DMITRY A TSOKUR phone: +7 095 2321795 e-mail: dmitry@supportex.net registrar: RUCENTER-REG-RIPN created: 2001.10.16 paid-till: 2004.10.16 source: RIPN Last updated on 2004.02.12 19:03:41 MSK/MSD __________ Hosted on Foonet criminal spam hoster. --- looking up www.yambocs.com --- performing WHOIS on "69.65.31.14", please wait... --- contacting server whois.geektools.com OrgName: CREATIVE INTERNET TECHNIQUES OrgID: CRTV Address: 3982 POWELL ROAD Address: SUITE 225 City: POWELL StateProv: OH PostalCode: 43065 Country: US NetRange: 69.65.0.0 - 69.65.63.255 CIDR: 69.65.0.0/18 NetName: CRTV NetHandle: NET-69-65-0-0-1 Parent: NET-69-0-0-0-0 NetType: Direct Allocation NameServer: NS1.FOONET.NET NameServer: NS3.FOONET.NET Comment: abuse@foonet.net or http://abuse.foonet.net to Comment: report abuse RegDate: 2003-07-30 Updated: 2003-07-30 TechHandle: CA544-ARIN TechName: Admin, CIT TechPhone: +1-740-881-0323 TechEmail: ip-admin@foonet.net OrgTechHandle: CA544-ARIN OrgTechName: Admin, CIT OrgTechPhone: +1-740-881-0323 OrgTechEmail: ip-admin@foonet.net _________ vpnsurf.com A 62.65.252.226 ssl4all.com A 62.65.252.226 euservers.net A 62.65.252.226 host2010.com A 62.65.252.226 bestteenstgp.com A 62.65.252.226 _________ --- looking up 62.65.252.227 NS.EUSERVERS.NET NS.NAME14.COM NS.HOST2010.COM --- looking up 62.65.252.228 NS2.EUSERVERS.NET NS2.NAME14.COM NS2.HOST2010.COM _________ At: http://ssl4all.com/contact.html We also reachable online: By Email info@ssl4all.com (mailto:mailto:info@vpnsurf.com) Using ICQ 129442917 (http://wwp.icq.com/scripts/contact.dll?msgto=274104701) Virtual World Ltd. (c) 2003,All other trademarks and service marks are the properties of their respective owners. Design by MaximatoR (c) 2003 _________ --- contacting nameserver: ns2.host2010.com [62.65.252.228] ssl4all.com SOA origin = ns.euservers.net mail addr = info@ssl4all.com serial = 2004051301 refresh = 14400 (4 hours) retry = 7200 (2 hours) expire = 3600000 (41 days 16 hours) minimum ttl = 86400 () ssl4all.com NS ns.euservers.net ssl4all.com NS ns2.euservers.net ssl4all.com NS ns4.euservers.net ssl4all.com A 62.65.252.226 ssl4all.com MX 0 ssl4all.com ftp.ssl4all.com A 62.65.252.226 mail.ssl4all.com CNAME ssl4all.com localhost.ssl4all.com A 127.0.0.1 www.ssl4all.com CNAME ssl4all.com --- DNS Zone transfer completed _______ SBL11410 62.65.252.64/26 @ starman.ee 2003-11-05 17:07:06 Pavka / Artofit / lolitas-art.net/MonsterHost _______ Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: HOST2010.COM Registrant: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Creation Date: 23-Mar-2000 Expiration Date: 23-Mar-2005 Domain servers in listed order: ns2.host2010.com ns.host2010.com Administrative Contact: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Technical Contact: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Billing Contact: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Status:ACTIVE _______ Note: Earlier in 2004, name15.com was registered directly by "Yambo Financials" as the registrant. The WHOIS has since been changed to: Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: NAME15.COM Registrant: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Creation Date: 16-May-2003 Expiration Date: 16-May-2006 Domain servers in listed order: 24572.dns1.myorderbox.com 24572.dns2.myorderbox.com 24572.dns3.myorderbox.com 24572.dns4.myorderbox.com Administrative Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Technical Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Billing Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Status:ACTIVE _______ Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: EUSERVERS.NET Registrant: Exodus Hosting OU Roman Cherkesov (info@euservers.net) Karberi 4 Tallin null,13812 EE Tel. +372.53403952 Creation Date: 19-Oct-2003 Expiration Date: 19-Oct-2005 Domain servers in listed order: ns.euservers.net ns2.euservers.net Administrative Contact: Exodus Hosting OU Roman Cherkesov (info@euservers.net) Karberi 4 Tallin null,13812 EE Tel. +372.53403952 Technical Contact: Exodus Hosting OU Roman Cherkesov (info@euservers.net) Karberi 4 Tallin null,13812 EE Tel. +372.53403952 Billing Contact: Exodus Hosting OU Roman Cherkesov (info@euservers.net) Karberi 4 Tallin null,13812 EE Tel. +372.53403952 Status:ACTIVE _______ Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: BESTTEENSTGP.COM Registrant: None Tema (ataman@nekto.net) mira 25 78 Moskow null,118025 RU Tel. +95.2598928 Creation Date: 28-Mar-2004 Expiration Date: 28-Mar-2005 Domain servers in listed order: ns.euservers.net ns2.euservers.net Administrative Contact: None Tema (ataman@nekto.net) mira 25 78 Moskow null,118025 RU Tel. +95.2598928 Technical Contact: None Tema (ataman@nekto.net) mira 25 78 Moskow null,118025 RU Tel. +95.2598928 Billing Contact: None Tema (ataman@nekto.net) mira 25 78 Moskow null,118025 RU Tel. +95.2598928 Status:ACTIVE _______ Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: NAME14.COM Registrant: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Creation Date: 11-Nov-2003 Expiration Date: 11-Nov-2004 Domain servers in listed order: ns.host2010.com ns2.host2010.com Administrative Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Technical Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Billing Contact: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Status:ACTIVE _______ Their "about us" text from a Yambo Bank website: About the Company Yambo Financials Ltd. is a USA-based company with its main office located in Seattle, WA. Yambo.biz has appeared on the market of eCommerce at the beginning of 2001. It is a fast growing company that was founded as an online banking solution and is successfully developing as a platform for processing of all payment methods online. Yambo.biz lets any business or consumer with an email address to securely, conveniently, and cost-effectively send and receive payments online. Our network is built on the existing financial infrastructure of bank accounts and credit cards to create a global, real-time payment solution. Yambo Financials Ltd. is a private company, where 100% of its stocks belong to employees and founders. We have worked with various clients from all over the world. And we have always shown the ability to meet their needs for the most affordable prices. The main business principle for us is giving our customers the fastest response and the best value for money. Our aim is to become a global standard for online payments, offering our service to users in many countries including the United States. Yambo Financials Ltd. provides a unique service to its clients, called Online Y-Banking. Using Y-Banking services of Yambo.biz you can get a bank account, personal or business, in one of the biggest European banks and you can manage all the funds on your bank account from your browser through Yambo.biz Payment Gateway. Our Team We have about 30 people working in Yambo Financials Ltd. All our team members are young and full of energy. Their professionalism and commitment was what helped our company make headway. Our customer support team is dedicated to help you any time you need and can be reached online, by phone, regular mail or email. Why work with us? If you are interested in working with us, then our team of qualified specialists stands ready to provide you with expert advice and services. You can contact us any time by email. ============================================== ICQ# 157-906-563 / 157906563 used in these russian forum posts: http://luxuru.com/pbb/topic7680.html&sid=dacef621f951eee5a9ccecf93f44876b and http://www.master-x.com/forum/postings/188016/ and http://209.25.213.58/forum/topics/30011/ (Babelfish translation) [...] In order to become a participant in the action, leave your contact information (ICQ, email) and number of your calculation in Yambo.biz here or send to us on email gifts@yambo.biz or ICQ # 157-906-563. 
Related URLsPharmalert - how to clean your infected 'nix box! Usenet search for: Yambo Financials PARTNERS IN SPAM: Pavka / Artofit (or same as)
PARTNER IN SPAM: Eddie Davidson (based on shared hosting)
More links to Yambo Financials:
Link #1 /
Link #2 /
Link #3 /
Spamtrackers Eu wiki: My Canadian Pharmacy |
||||||
The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies. |
|
Yambo Financials Index
|