ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Yambo Financials

Evidence Menu:

Yambo Financials Index


Country: Ukraine
State:
Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank."


Yambo Financials SBL Listings History
Current SBL Listings
Archived SBL Listings

More Info - older


April 2007: See "pharmalert" link below for how to recover from a Yambo infection on a linux or BSD box. And remember to use strong passwords!

September 2006: NOTICE! For their pharma spam websites and nameservers, Yambo is using cracked servers as reverse proxies. They appear to be exploiting weak user/password combinations, for example "admin/admin". Most of the hijacked servers are embedded Linux devices such as firewalls and wi-fi routers. In addition to completely disinfecting the device and adding strong passwords, Spamhaus would also like to hear from system admins who have monitored the hijacked IP and tracked packets to the "back end" servers.
____________________________________________________________

Huge spamhaus tied into billing for child/animal/incest-porn spamming, pirated software spamming, credit-card "collection" sites.

Frequent visitors and advertisers in "secret" spammer chat forums.

Uses "affiliate" model extensively to distribute its spamming among various kiddiez, particularly for their "pharma" programs (pharmaceutical drugs). EVAPharmacy (EVA Pharmacy, EVABilling, EVA Billing), USDrugs (US Drugs), MyCanadian Pharmacy (My Canadian Pharmacy), and other recognizable spam brands are theirs.

Frequently tied to involvement in hijacking ownership of various ARIN netblocks from the rightful owners.

They try an look somewhat "legit" by using postal addresses at US and British "remailer" services and US/British forwarding-phone services.

The players are mostly Ukrainian and/or Russian, living in and around Seattle, WA and Gainesville, FL in the USA and in Russia/Ukraine. Also have ties in Paris, France.

Have ties to "Alex Blood", who ties to the RegPay child-porn spammers.

If all the info is correct, they are also one of the older spamhausen around.

Related to, or same as, Oxbill (and many other "___bill" domains) and possibly the samme gang as Pavka / Artofit
See ROK2432 for links to smartdns.com, which is a P-A domain.

http://groups.google.com/groups?selm=bp8lu4%241llavj%241%40ID-115151.news.uni-berlin.de

http://groups.google.com/groups?selm=rWvub.17440%24FkK1.15806%40twister01.bloor.is.net.cable.rogers.com

Subject: Yambo Financials - yambobank.com, yambo.biz, name15.com, ssl4all.com etc, etc....

--
Registrant:
Yambo Financials Ltd.
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Domain Name: YAMBO-GROUP.COM

Administrative Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Technical Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Record last updated 08-02-2004 04:06:31 PM
Record expires on 06-13-2005
Record created on 06-13-2003

Domain servers in listed order:
NS0.HQHOST.NET 64.237.37.72
NS1.HQHOST.NET 64.237.41.94




--
[whois.networksolutions.com]
Results:

Registrant:
Yambo Financials Ltd (FJWNQVESWD)
14 Hook Road, Epsom, Surrey
KT19 8TH, United Kingdom
Surrey, UK KT19 8TH
UK

Domain Name: YAMBOCARDS.COM

Administrative Contact:
Yambo Financials Ltd (YKGPBXLJNO) yambocards@hotmail.com
14 Hook Road, Epsom, Surrey
KT19 8TH, United Kingdom
Surrey, UK KT19 8TH
UK
+1-866-YAMBOCS

Technical Contact:
Network Solutions, Inc. (HOST-ORG) customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 04-Apr-2004.
Record created on 04-Apr-2003.
Database last updated on 3-Jan-2004 21:22:39 EST.

Domain servers in listed order:

NS1.SMARTDNS.ORG 64.49.244.204
NS2.SMARTDNS.ORG 209.51.142.198
NS1.SMARTNIC.ORG 207.44.143.227
NS2.SMARTNIC.ORG 66.111.52.49

__________


Registrant:
Yambo Financials Ltd.
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Domain Name: YAMBOBANK.COM

Administrative Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Technical Contact: Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668

Record last updated 07-31-2003 05:14:57 AM
Record expires on 07-07-2005
Record created on 07-07-2003

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 69.93.6.13


____________


Domain Name: YAMBO.BIZ
Domain ID: D2914606-BIZ
Sponsoring Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Domain Status: ok
Registrant ID: IMG-495311
Registrant Name: Customer Support
Registrant Organization: Yambo Financials Ltd.
Registrant Address1: 14 Hook Road
Registrant City: Epsom
Registrant State/Province: Not Applicable
Registrant Postal Code: 19KT 8TH
Registrant Country: Great Britain (UK)
Registrant Country Code: GB
Registrant Phone Number: +44.8719008667
Registrant Facsimile Number: +44.8719008668
Registrant Email: support@yambo.biz
...
Name Server: UDNS1.ULTRADNS.NET
Name Server: UDNS2.ULTRADNS.NET
Name Server: NS0.XNAME.ORG
Name Server: NS2.YAMBO.BIZ
Name Server: NS1.YAMBO.BIZ
Name Server: NS1.XNAME.ORG
Created by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Last Updated by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Domain Registration Date: Thu Apr 11 12:35:11 GMT 2002
Domain Expiration Date: Sat Apr 10 23:59:59 GMT 2004
Domain Last Updated Date: Sun Nov 16 09:40:14 GMT 2003

______________
(July, 2007) pio.yambo@gmail.com addition...

[whois.neulevel.biz]
Domain Name: YAMBO.BIZ
Registrant Name: Customer Support
Registrant Organization: Yambo Financials Ltd.
Registrant Address1: 14 Hook Road
Registrant City: Epsom
Registrant State/Province: Not Applicable
Registrant Postal Code: 19KT 8TH
Registrant Country: Great Britain (UK)
Registrant Country Code: GB
Registrant Phone Number: +44.8719008667
Registrant Facsimile Number: +44.8719008668
Registrant Email: pio.yambo@gmail.com

--
(July, 2007)
Yambo.biz. IN A 82.98.86.173
Yambo.biz. IN NS NS1.SEDOPARKING.COM.
Yambo.biz. IN NS NS2.SEDOPARKING.COM.
NS1.SEDOPARKING.COM. IN A 212.227.86.6
NS2.SEDOPARKING.COM. IN A 87.106.54.143


__________________
[whois.directi.com]
Results:

Domain Name: NAME15.COM

Registrant:
Yambo Financials Inc. (DE)
Anton Denysenko (ad@host2010.com)
1001 SW 16th Avenue, #103,
Gainesville
null,32601
US
Tel. +135.23789943
Creation Date: 16-May-2003
Expiration Date: 16-May-2004
Domain servers in listed order:
ns.host2010.com
ns2.host2010.com
Administrative Contact:
Yambo Financials Inc. (DE)
Anton Denysenko (ad@host2010.com)
1001 SW 16th Avenue, #103,
Gainesville
null,32601
US
Tel. +135.23789943
Status: ACTIVE


___________


Registrant:
Eva Payments Limited
20 Maidstone road
Kent
Borough green TN15 8BD
United Kingdom
Registered through: GoDaddy.com
Domain Name: EVAPHARMACY.COM
Created on: 03-Sep-03
Expires on: 03-Sep-06
Last Updated on: 16-Dec-03
Administrative Contact:
Bortnikov, Sergey evapayments@hotmail.com
Eva Payments Limited
20 Maidstone road
Kent
Borough green TN15 8BD
United Kingdom
8704581886 Fax -- 8704581887
Domain servers in listed order:
NS1.SMARTDNS.ORG
NS2.SMARTDNS.ORG
NS1.SMARTNIC.ORG

NS2.SMARTNIC.ORG

___________


> Yambo Financials Ltd.
> 14 Hook Road, Epsom, Surrey,
> KT19 8TH, United Kingdom
> 1.866.YAMBOCS
> (US and Canada)
> +1.212.301.7424

New York City area code.

Vegas World Casino - online gambling center!
Vegas World Casino is owned and operated by Eva Payments Ltd.
http://www.vegasworld.net/billingpolicy.shtml
- contains the same information as above



Companies House Britain

Name & Registered Office: EVA PAYMENTS LIMITED
20 MAIDSTONE ROAD <--- linkbill.com old address
BOROUGH GREEN
SEVENOAKS, KENT TN15 8BD
Status: Active
Company Type: Private Limited Company
Nature Of Business: None registered
Company No.: 04594965
Date of Incorporation: 19/11/2002
Country of Origin: United Kingdom



domain: vegasworld.net
status: production
organization: Eva Payments Limited
email: evapayments@hotmail.com <-- spam for EVAPHARMACY.COM
address: 20 Maidstone road
address: Borough green, Sevenoaks
city: Borough green
postal-code: Kent TN15 8BD
country: GB
admin-c: evapayments@hotmail.com#0
tech-c: evapayments@hotmail.com#0
billing-c: evapayments@hotmail.com#2
nserver: ns1.named1.net
nserver: ns2.named1.net
registrar: JORE-1
created: 2001-11-30 16:50:41 UTC cosmos
modified: 2003-08-15 09:12:57 UTC JORE-1
expires: 2006-11-30 16:50:41 UTC
source: joker.com

db-updated: 2004-01-04 02:21:43 UTC


_________


[whois.dotster.com]

Registrant:
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, De 19930
US

Registrar: DOTSTER
Domain Name: NAMED1.NET
Created on: 29-NOV-01
Expires on: 29-NOV-04
Last Updated on: 30-OCT-03

Administrative, Technical Contact:
Vic, Andy owner@named1.com
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, De 19930
US
270-637-4721
270-637-4721

Domain servers in listed order:
NS1.XTRAFF.COM
NS2.XTRAFF.COM


___________


[whois.dotster.com]

Registrant:
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, De 19930
US

Registrar: DOTSTER
Domain Name: NAMED1.NET
Created on: 29-NOV-01
Expires on: 29-NOV-04
Last Updated on: 30-OCT-03

Administrative, Technical Contact:
Vic, Andy owner@named1.com
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, De 19930
US
270-637-4721
270-637-4721

Domain servers in listed order:
NS1.XTRAFF.COM
NS2.XTRAFF.COM


__________


[whois.dotster.com]

Registrant:
Globetime Ltd.
788-790 Finchley Road
London, UK NW11 7TJ
GB

Registrar: DOTSTER
Domain Name: LINKBILL.COM
Created on: 16-JAN-01
Expires on: 16-JAN-05
Last Updated on: 15-NOV-02

Administrative Contact:
Melrow, Joel admin@linkbill.com
Globetime Ltd.
788-790 Finchley Road
London, UK NW11 7TJ
GB
+44 845 458 9654
+44 845 458 9653

Technical Contact:
Melrow, Joel admin@linkbill.com
Globetime Ltd.
788-790 Finchley Road
London, UK NW11 7TJ
GB
+44 845 458 9654
+44 845 458 9653

Domain servers in listed order:
NS1.LINKBILL.COM
NS2.LINKBILL.COM


_____________

There is indeed a Yambo Financials registered in the UK

Companies House Britain

Name & Registered Office: YAMBO FINANCIALS LIMITED
OCTAGON HOUSE, FIR ROAD
BRAMHALL, STOCKPORT

CHESHIRE SK7 2NP
Status: Active
Company No.: 04441960
Date of Incorporation: 20/05/2002
Country of Origin: United Kingdom
Company Type: Private Limited Company
Nature Of Business: 7484 - other business activities
Last Members List: 20/05/2003


There are a number of companies registered using that address. It appears to be the office of Davenport Company Services.


____________


[whois.net.ua]
Results:
% Ukrainian Whois server.
% Please visit http://whois.com.ua for more information.
% Rights restricted by copyright.

domain: million.dp.ua
nserver: ns.million.dp.ua 195.248.163.58
nserver: ns2.trifle.net 195.24.128.164
mnt-by: MILLION-MNT
source: APEX

__________


yambo.biz MX 30 gecko.yambo.biz
yambo.biz MX 10 million.dp.ua
yambo.biz MX 20 rara.yambo.biz
yambo.biz NS NS0.XNAME.ORG
yambo.biz NS NS1.XNAME.ORG
yambo.biz NS ns1.yambo.biz
yambo.biz NS NS2.yambo.biz
yambo.biz NS UDNS1.ULTRADNS.NET
yambo.biz NS UDNS2.ULTRADNS.NET
gecko.yambo.biz A 69.93.6.10
rara.yambo.biz A 66.111.36.80 [S333 - sago/unitedcolo]
NS0.XNAME.ORG A 195.20.105.149
NS1.XNAME.ORG A 213.133.115.5
ns1.yambo.biz A 66.111.36.80
NS2.yambo.biz A 69.93.6.13
UDNS1.ULTRADNS.NET A 204.69.234.1
UDNS2.ULTRADNS.NET A 204.74.101.1

million.dp.ua A 195.248.185.130
million.dp.ua A 195.248.163.58
million.dp.ua NS ns.million.dp.ua
million.dp.ua NS ns2.trifle.net
ns.million.dp.ua A 195.248.163.58
ns2.trifle.net A 195.24.128.164





named1.net NS ns2.xtraff.com
named1.net NS ns1.xtraff.com
ns2.xtraff.com A 69.31.87.2 [S2513]
ns1.xtraff.com A 69.31.86.14

________

Hosted at Russian lang hosts -

nLayer Communications, Inc. NLYR-ARIN-BLK2 (NET-69-31-0-0-1)
69.31.0.0 - 69.31.143.255
Pilosoft, Inc. NLYR-69-31-80-0-1 (NET-69-31-80-0-1)
69.31.80.0 - 69.31.87.255
KERNELNETWORKLLC KERNELNETWORKLLC-001 (NET-69-31-86-0-1)
69.31.86.0 - 69.31.86.255

OrgName: Pilosoft, Inc.
OrgID: PILOS
Address: 55 Broad St, 3rd Fl
City: New York
StateProv: NY
PostalCode: 10004
Country: US

NetRange: 69.31.80.0 - 69.31.87.255
CIDR: 69.31.80.0/21
NetName: NLYR-69-31-80-0-1
NetHandle: NET-69-31-80-0-1
Parent: NET-69-31-0-0-1
NetType: Reallocated
NameServer: NS5.PILOSOFT.COM
NameServer: NS6.PILOSOFT.COM
Comment:
RegDate: 2003-08-16
Updated: 2003-08-16

OrgTechHandle: ALEXP1-ARIN
OrgTechName: Pilosov, Alex
OrgTechPhone: +1-212-632-6123
OrgTechEmail: alex@pilosoft.com

OrgName: KERNELNETWORKLLC
OrgID: KERNE
Address: 5 Starboard Center Suite 20
City: Bethany Beach
StateProv: DE

PostalCode: 19930
Country: US

NetRange: 69.31.86.0 - 69.31.86.255
CIDR: 69.31.86.0/24
NetName: KERNELNETWORKLLC-001
NetHandle: NET-69-31-86-0-1
Parent: NET-69-31-80-0-1
NetType: Reallocated
NameServer: NS1.XTRAFF.COM
NameServer: NS2.XTRAFF.COM
Comment:
RegDate: 2003-08-26
Updated: 2003-08-26

OrgTechHandle: NOC1345-ARIN
OrgTechName: NOC
OrgTechPhone: +1-866-356-2437
OrgTechEmail: noc@host-system.com




[whois.dotster.com]
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, DE 19930
US

Registrar: DOTSTER
Domain Name: HOST-SYSTEM.COM
Created on: 30-JUN-01
Expires on: 30-JUN-04
Last Updated on: 16-OCT-03

Administrative, Technical Contact:
Vic, Andy owner@named1.com
Kernel Network LLC
5 Starboard Center Suite 20
Bethany Beach, DE 19930
US
270-637-4721
270-637-4721

Domain servers in listed order:
NS1.XTRAFF.COM
NS2.XTRAFF.COM
NS3.XTRAFF.COM

End of Whois Information

_______________

[whois.dotster.com]
Registrant:
Extreme Networks
88-331 Palm road
Sukhdrischinsk, Papua d3345
PG

Registrar: DOTSTER
Domain Name: BANNEDHOST.NET
Created on: 06-SEP-02
Expires on: 06-SEP-04
Last Updated on: 10-SEP-03

Administrative Contact:
Vic, Andy root@host-system.com
Host-System Backbone Ltd.
29 Brighton 8 street
Brooklyn, NY 11235
US
+1-702-554-64-66
+1-702-554-64-66

Technical Contact:
Vic, Andy root@host-system.com
Host-System Backbone Ltd.
29 Brighton 8 street
Brooklyn, NY 11235
US
+1-702-554-64-66
+1-702-554-64-66

Domain servers in listed order:
NS1.NAMED1.NET
NS2.NAMED1.NET

End of Whois Information


____________


220 server1.xtraff.com ESMTP Postfix
(69.31.86.14)
220 sex-pics-catalogue.com ESMTP Postfix
(69.31.86.32)
220 sebasta ESMTP
(69.31.86.2)
220 sebasta ESMTP
(69.31.86.3)
220 sebasta ESMTP
(69.31.86.4)
220 sebasta ESMTP
(69.31.86.5)
220 sebasta ESMTP
(69.31.86.6)
220 sebasta ESMTP
(69.31.86.7)
220 sebasta ESMTP
(69.31.86.8)
220 sebasta ESMTP
(69.31.86.9)
220 alex205 ESMTP
(69.31.86.10)
220 alex205 ESMTP
(69.31.86.11)
220 alex205 ESMTP
(69.31.86.12)
220 alex205 ESMTP
(69.31.86.13)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.16)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.17)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.18)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.19)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.20)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.21)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:52 -0500
(69.31.86.22)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.23)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.24)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.27)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.28)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.29)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:53 -0500
(69.31.86.30)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.43)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.44)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.42)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.46)
220 sex-pics-catalogue.com ESMTP Postfix
(69.31.86.47)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.98)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.103)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.104)
220 host001 ESMTP
(69.31.86.89)
220 host001 ESMTP
(69.31.86.95)
220 srv209.hcolo.com ESMTP Postfix

(69.31.86.105)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.106)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.107)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.109)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.108)
220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT
(69.31.86.80)
220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT
(69.31.86.81)
220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT
(69.31.86.82)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.111)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.110)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.112)
220 tentura212.named1.com ESMTP Sendmail 8.12.8p1/8.12.8; Sun, 4 Jan 2004 02:44:28 GMT
(69.31.86.83)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.113)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.134)
220 server31.xtraff.com ESMTP Postfix
(69.31.86.130)
220 server54.xtraff.com ESMTP Postfix
(69.31.86.131)
220 dahost213 ESMTP
(69.31.86.128)
220 dahost213 ESMTP
(69.31.86.129)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.114)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:32 -0500
(69.31.86.137)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.139)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.140)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:29 -0500
(69.31.86.132)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.138)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.141)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.142)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.147)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.144)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.145)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.143)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.146)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.148)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500
(69.31.86.26)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.149)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500
(69.31.86.25)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.151)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:33 -0500
(69.31.86.150)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:56 -0500
(69.31.86.31)
220 server56.xtraff.com ESMTP Postfix
(69.31.86.155)
220 server56.xtraff.com ESMTP Postfix
(69.31.86.156)
220 server56.xtraff.com ESMTP Postfix
(69.31.86.157)
220 server56.xtraff.com ESMTP Postfix
(69.31.86.158)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.45)
220 relay.mixmag.ru ESMTP
(69.31.86.78)
220 host001 ESMTP
(69.31.86.88)
220 relay.mixmag.ru ESMTP
(69.31.86.79)
220 host001 ESMTP
(69.31.86.93)
220 host001 ESMTP
(69.31.86.94)
220 host001 ESMTP
(69.31.86.91)
220 host001 ESMTP
(69.31.86.90)
220 gabber226 ESMTP
(69.31.86.176)
220 gabber226 ESMTP
(69.31.86.177)
220 gabber226 ESMTP
(69.31.86.178)
220 gabber226 ESMTP
(69.31.86.179)
220 sebasta ESMTP
(69.31.86.196)
220 sebasta ESMTP
(69.31.86.198)
220 sebasta ESMTP
(69.31.86.197)
[220 server59.xtraff.com ESMTP Postfix
(69.31.86.201)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.115)
220 bannedhost.net ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 22:43:35 -0500
(69.31.86.200)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.189)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.116)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.190)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.191)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.188)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.193)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.194)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.187)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.186)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.195)
220 302.bdsmprofit.com ESMTP Sendmail 8.11.6/8.11.6; Sat, 3 Jan 2004 22:47:19 -0800
(69.31.86.192)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.117)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.204)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.205)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.203)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.207)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.208)
incoming220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.209)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.210)
220 kosyan208.named1.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:41:55 GMT
(69.31.86.202)
220 host.incestmoney.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:52:32 -0500
(69.31.86.206)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.118)
[220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.215)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.216)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.217)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.214)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.219)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.220)
220 jps.ru ESMTP CommuniGate Pro 4.1.4
(69.31.86.218)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.119)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.224)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.120)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.121)
69.31.86.244
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.227)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.122)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.225)
69.31.86.253
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.226)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.228)
220 relay.mixmag.ru ESMTP
(69.31.86.180)
220 relay.mixmag.ru ESMTP
(69.31.86.181)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.230)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.231)
220 server1.xtraff.com ESMTP Postfix
(69.31.86.253)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.123)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.232)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500



(69.31.86.229)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.234)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.233)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:35:59 -0500
(69.31.86.236)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.124)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT
(69.31.86.245)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT
(69.31.86.246)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT
(69.31.86.247)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT
(69.31.86.248)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:54 GMT
(69.31.86.244)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.125)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.126)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.127)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.100)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.97)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500
(69.31.86.235)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.101)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500
(69.31.86.238)
220 server1.xtraff.com ESMTP Postfix

(69.31.86.250)
220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500
(69.31.86.237)
220 server19.xtraff.com ESMTP Sendmail 8.11.6/8.11.6; Sun, 4 Jan 2004 02:40:56 GMT
(69.31.86.249)
[220 localhost.localdomain ESMTP Sendmail 8.12.10/8.11.6; Sun, 4 Jan 2004 02:36:02 -0500
(69.31.86.239)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.99)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.102)
220 pornpic.org ESMTP Postfix
(69.31.86.86)
220 pornpic.org ESMTP Postfix
(69.31.86.84)
220 pornpic.org ESMTP Postfix
(69.31.86.87)
220 pornpic.org ESMTP Postfix
(69.31.86.85)
220 srv209.hcolo.com ESMTP Postfix
(69.31.86.96)
220 pornpic.org ESMTP Postfix
(69.31.86.240)

____________________________

More child porn...
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL13623


Brit info -

Yambo Financials Ltd.
14 Hook Road, Epsom, Surrey,
KT19 8TH, United Kingdom
tel: +44 (0) 871-9008-668
fax: +44 (0) 871-9008-668
tel.: +1-866-YAMBOCS
(toll-free for USA and Canada)
support@yambo.biz

Seen/checked out that address due to spam connections over a year ago, and it does exist - but it's listed as a residential area:

14 Hook Road, EPSOM, Surrey KT19 8TH,(KT19-8TH-1D9)
Registered Occupants: JUEL AHMED, MOJAHID ALI, ANWAR ISLAM, SALEHA KHATUN
No hits on British White Pages (Phone Book) for those names/that location

+44 871 is a UK rerouting code, with a premium price tag (15c/minute)
Rerouting meaning it probably ends up in Russia...

USA, WA state?
support@yambo.biz,
by mail: 16541 Redmond Way Ste 261-C,
Redmond WA 98052,

USA, NY state?
or by phone: 212-301-7424.

USA, Florida?!
Yambo Financials Inc.
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424

This address is an apartment complex.

Then the domains... note how they secondary on a free DNS service (XNAME)...

Registrant:
Yambo Financials Ltd.
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Domain Name: YAMBOCS.COM

Administrative Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Technical Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Record last updated 06-25-2003 03:49:22 AM
Record expires on 10-03-2008
Record created on 10-03-2002

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 69.93.6.13
NS0.XNAME.ORG 195.20.105.149
NS1.XNAME.ORG 213.133.115.5
UDNS1.ULTRADNS.NET 204.69.234.1
UDNS2.ULTRADNS.NET 204.74.101.1

_________

Registrant:
Yambo Financials Ltd.
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Domain Name: YAMBOBANK.COM

Administrative Contact:

Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB +44.8719008667
Fax:+44.8719008668


Technical Contact:
Support, Customer support@yambo.biz
14 Hook Road
Epsom, Not Applicable 19KT 8TH
GB
+44.8719008667
Fax:+44.8719008668


Record last updated 07-31-2003 05:14:57 AM
Record expires on 07-07-2005
Record created on 07-07-2003

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 69.93.6.13

____________

Domain Name: EXCHANGE-STORE.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.OnlineNIC.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS3.YDEDICATED.COM
Name Server: NS4.YDEDICATED.COM
Status: ACTIVE
Updated Date: 12-aug-2003
Creation Date: 12-aug-2003
Expiration Date: 12-aug-2004

Domain Name: YDEDICATED.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS0.XNAME.ORG
Name Server: NS1.YAMBO.BIZ
Name Server: NS2.YAMBO.BIZ
Name Server: NS1.XNAME.ORG
Status: ACTIVE
Updated Date: 14-jan-2004
Creation Date: 12-mar-2003
Expiration Date: 12-mar-2005

Registrant:
Yambo Financials Inc.
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424


Domain Name: YDEDICATED.COM

Administrative Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424


Technical Contact:
Service, Customer customerservice@yambo.biz
1001 SW 16th Avenue, #103
Gainesville, FL 32601
US
1.212.301.7424 Record last updated 11-02-2003 11:38:44 AM
Record expires on 03-12-2005
Record created on 03-12-2003

Domain servers in listed order:
NS1.YAMBO.BIZ 66.111.36.80
NS2.YAMBO.BIZ 69.93.6.13
NS0.XNAME.ORG 195.20.105.149
NS1.XNAME.ORG 213.133.115.5

domain: supportex.net
status: production
organization: IM
owner: Dmitry Tsokur
email: dmitry@imedia.ru
title: CTO
address: Vyborgskaya, 16
city: Moscow
state: RF
postal-code: 125212
country: RU
admin-c: dmitry@digitaldesign.ru#0
tech-c: dmitry@digitaldesign.ru#0
billing-c: dmitry@digitaldesign.ru#0
nserver: ns1.lowesthosting.com
nserver: ns2.lowesthosting.com
registrar: JORE-1
created: 2001-09-24 14:53:47 UTC JORE-1
modified: 2002-09-14 09:23:19 UTC JORE-1
expires: 2004-09-24 08:53:31 UTC
source: joker.com


db-updated: 2004-02-12 17:17:09 UTC


domain: DIGITALDESIGN.RU
type: CORPORATE
nserver: ns1.digitaldesign.ru. 66.111.44.190
nserver: ns2.digitaldesign.ru. 212.188.13.155
state: REGISTERED, DELEGATED
person: DMITRY A TSOKUR
phone: +7 095 2321795
e-mail: dmitry@supportex.net
registrar: RUCENTER-REG-RIPN
created: 2001.10.16
paid-till: 2004.10.16
source: RIPN


Last updated on 2004.02.12 19:03:41 MSK/MSD

__________

Hosted on Foonet criminal spam hoster.

--- looking up www.yambocs.com
--- performing WHOIS on "69.65.31.14", please wait...
--- contacting server whois.geektools.com

OrgName: CREATIVE INTERNET TECHNIQUES
OrgID: CRTV
Address: 3982 POWELL ROAD
Address: SUITE 225
City: POWELL
StateProv: OH
PostalCode: 43065
Country: US

NetRange: 69.65.0.0 - 69.65.63.255
CIDR: 69.65.0.0/18
NetName: CRTV
NetHandle: NET-69-65-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.FOONET.NET
NameServer: NS3.FOONET.NET
Comment: abuse@foonet.net or http://abuse.foonet.net to
Comment: report abuse
RegDate: 2003-07-30
Updated: 2003-07-30

TechHandle: CA544-ARIN
TechName: Admin, CIT
TechPhone: +1-740-881-0323
TechEmail: ip-admin@foonet.net

OrgTechHandle: CA544-ARIN
OrgTechName: Admin, CIT
OrgTechPhone: +1-740-881-0323
OrgTechEmail: ip-admin@foonet.net

_________

vpnsurf.com A 62.65.252.226
ssl4all.com A 62.65.252.226
euservers.net A 62.65.252.226
host2010.com A 62.65.252.226
bestteenstgp.com A 62.65.252.226

_________
--- looking up 62.65.252.227

NS.EUSERVERS.NET
NS.NAME14.COM
NS.HOST2010.COM

--- looking up 62.65.252.228

NS2.EUSERVERS.NET
NS2.NAME14.COM
NS2.HOST2010.COM
_________

At: http://ssl4all.com/contact.html

We also reachable online:
By Email info@ssl4all.com
(mailto:mailto:info@vpnsurf.com)
Using ICQ 129442917
(http://wwp.icq.com/scripts/contact.dll?msgto=274104701)

Virtual World Ltd. (c) 2003,All other trademarks and service marks are the properties of their respective owners.
Design by MaximatoR (c) 2003

_________

--- contacting nameserver: ns2.host2010.com [62.65.252.228]

ssl4all.com SOA
origin = ns.euservers.net
mail addr = info@ssl4all.com
serial = 2004051301
refresh = 14400 (4 hours)
retry = 7200 (2 hours)
expire = 3600000 (41 days 16 hours)
minimum ttl = 86400 ()
ssl4all.com NS ns.euservers.net
ssl4all.com NS ns2.euservers.net
ssl4all.com NS ns4.euservers.net
ssl4all.com A 62.65.252.226
ssl4all.com MX 0 ssl4all.com
ftp.ssl4all.com A 62.65.252.226
mail.ssl4all.com CNAME ssl4all.com
localhost.ssl4all.com A 127.0.0.1
www.ssl4all.com CNAME ssl4all.com

--- DNS Zone transfer completed

_______

SBL11410
62.65.252.64/26 @ starman.ee
2003-11-05 17:07:06
Pavka / Artofit / lolitas-art.net/MonsterHost
_______

Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: HOST2010.COM

Registrant:
Virtual World Ltd.
Andrey Burdin (client09@ssl4all.com)
313 Victoria House
Victoria
null,n/a
SC
Tel. +187.78542861

Creation Date: 23-Mar-2000
Expiration Date: 23-Mar-2005

Domain servers in listed order:
ns2.host2010.com
ns.host2010.com


Administrative Contact:
Virtual World Ltd.
Andrey Burdin (client09@ssl4all.com)
313 Victoria House
Victoria
null,n/a
SC
Tel. +187.78542861

Technical Contact:
Virtual World Ltd.
Andrey Burdin (client09@ssl4all.com)
313 Victoria House
Victoria
null,n/a
SC
Tel. +187.78542861

Billing Contact:
Virtual World Ltd.
Andrey Burdin (client09@ssl4all.com)
313 Victoria House
Victoria
null,n/a
SC
Tel. +187.78542861

Status:ACTIVE
_______

Note: Earlier in 2004, name15.com was registered directly by "Yambo Financials" as the registrant. The WHOIS has since been changed to:

Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: NAME15.COM

Registrant:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Creation Date: 16-May-2003
Expiration Date: 16-May-2006

Domain servers in listed order:
24572.dns1.myorderbox.com
24572.dns2.myorderbox.com
24572.dns3.myorderbox.com
24572.dns4.myorderbox.com


Administrative Contact:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Technical Contact:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Billing Contact:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Status:ACTIVE

_______

Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: EUSERVERS.NET

Registrant:
Exodus Hosting OU
Roman Cherkesov (info@euservers.net)
Karberi 4
Tallin
null,13812
EE
Tel. +372.53403952

Creation Date: 19-Oct-2003
Expiration Date: 19-Oct-2005

Domain servers in listed order:
ns.euservers.net
ns2.euservers.net


Administrative Contact:
Exodus Hosting OU
Roman Cherkesov (info@euservers.net)
Karberi 4
Tallin
null,13812
EE
Tel. +372.53403952

Technical Contact:
Exodus Hosting OU
Roman Cherkesov (info@euservers.net)
Karberi 4
Tallin
null,13812
EE
Tel. +372.53403952

Billing Contact:
Exodus Hosting OU
Roman Cherkesov (info@euservers.net)
Karberi 4
Tallin
null,13812
EE
Tel. +372.53403952

Status:ACTIVE

_______


Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: BESTTEENSTGP.COM

Registrant:
None
Tema (ataman@nekto.net)
mira 25 78
Moskow
null,118025
RU
Tel. +95.2598928

Creation Date: 28-Mar-2004
Expiration Date: 28-Mar-2005

Domain servers in listed order:
ns.euservers.net
ns2.euservers.net


Administrative Contact:
None
Tema (ataman@nekto.net)
mira 25 78
Moskow
null,118025
RU
Tel. +95.2598928

Technical Contact:
None
Tema (ataman@nekto.net)
mira 25 78
Moskow
null,118025
RU
Tel. +95.2598928

Billing Contact:
None
Tema (ataman@nekto.net)
mira 25 78
Moskow
null,118025
RU
Tel. +95.2598928

Status:ACTIVE

_______


Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: NAME14.COM

Registrant:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Creation Date: 11-Nov-2003
Expiration Date: 11-Nov-2004

Domain servers in listed order:
ns.host2010.com
ns2.host2010.com


Administrative Contact:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Technical Contact:

Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Billing Contact:
Individual
Andrey Burdin (ab@ssl4all.com)
Lyakisheva 9-169
Perm
,614051
RU
Tel. +791.27831530

Status:ACTIVE
_______

Their "about us" text from a Yambo Bank website:

About the Company

Yambo Financials Ltd. is a USA-based company with its main office located in Seattle, WA. Yambo.biz has appeared on the market of eCommerce at the beginning of 2001. It is a fast growing company that was founded as an online banking solution and is successfully developing as a platform for processing of all payment methods online. Yambo.biz lets any business or consumer with an email address to securely, conveniently, and cost-effectively send and receive payments online. Our network is built on the existing financial infrastructure of bank accounts and credit cards to create a global, real-time payment solution.

Yambo Financials Ltd. is a private company, where 100% of its stocks belong to employees and founders. We have worked with various clients from all over the world. And we have always shown the ability to meet their needs for the most affordable prices. The main business principle for us is giving our customers the fastest response and the best value for money. Our aim is to become a global standard for online payments, offering our service to users in many countries including the United States.

Yambo Financials Ltd. provides a unique service to its clients, called Online Y-Banking. Using Y-Banking services of Yambo.biz you can get a bank account, personal or business, in one of the biggest European banks and you can manage all the funds on your bank account from your browser through Yambo.biz Payment Gateway.

Our Team

We have about 30 people working in Yambo Financials Ltd. All our team members are young and full of energy. Their professionalism and commitment was what helped our company make headway. Our customer support team is dedicated to help you any time you need and can be reached online, by phone, regular mail or email.

Why work with us?

If you are interested in working with us, then our team of qualified specialists stands ready to provide you with expert advice and services. You can contact us any time by email.


==============================================
ICQ# 157-906-563 / 157906563 used in these russian forum posts:

http://luxuru.com/pbb/topic7680.html&sid=dacef621f951eee5a9ccecf93f44876b
and
http://www.master-x.com/forum/postings/188016/
and
http://209.25.213.58/forum/topics/30011/

(Babelfish translation)
[...]
In order to become a participant in the action, leave your contact information (ICQ, email) and number of your calculation in Yambo.biz here or send to us on email gifts@yambo.biz or ICQ # 157-906-563.

Related URLs

Pharmalert - how to clean your infected 'nix box!

Usenet search for: Yambo Financials

PARTNERS IN SPAM: Pavka / Artofit (or same as)

PARTNERS IN SPAM: Tripac International Limited / Laurence Fagan (removed)

PARTNER IN SPAM: Ruslan "Inkey" Hakimov / iNkus LTD (removed)

PARTNER IN SPAM: Eddie Davidson (based on shared hosting)

More links to Yambo Financials: Link #1 / Link #2 / Link #3 / Link #4 is 404

Spamtrackers Eu wiki: My Canadian Pharmacy


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK3095/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy