ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Yambo Financials

Evidence Menu:

Yambo Financials Index


Country: Ukraine
State:
Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank."


Yambo Financials SBL Listings History
Current SBL Listings
Archived SBL Listings

staminadrugs.com ; hecanhelp.net ; drproof.net


Posting with info on drug spam -

Subject: [email] [spam] CIALIS - 94560097
Date: 2004-06-25 04:32:35 PST

Spammed from Singapore, advertising the following sites which sell prescription-controlled pharmaceuticals without proper licenses and without requiring prescriptions.

drmeds.info A 202.106.127.228
justrecommendation.info A 202.106.127.228
staminadrugs.com A 202.106.127.228
hecanhelp.net A 202.106.127.228
24phd.biz A 219.148.62.228
mfav.biz A 219.148.62.228
drproof.net A 219.148.62.228
phdmeds.net A 219.148.62.228

202.106.127.228: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15460

219.148.62.228: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL17386
-------------------------------------------------------------------------------
inetnum: 202.106.127.0 - 202.106.127.255
netname: IDC-HOSTNODE
descr: idc-hostnode
descr: Idc
descr: beijing
country: CN
admin-c: LL212-AP
tech-c: LL212-AP
mnt-by: MAINT-CHINANET-BJ
changed: llz@srit.com.cn 20020510
status: ASSIGNED NON-PORTABLE
source: APNIC
changed: hostmast@publicf.bta.net.cn 20031111

person: lizhang li
nic-hdl: LL212-AP
e-mail: as9811@srit.com.cn
address: No.225 Chaonei Street Dongcheng District Beijing China
phone: +86-10-65253831
fax-no: +86-10-65244907
country: CN
changed: ipas@cnnic.net.cn 20030318
mnt-by: MAINT-CNNIC-AP
source: APNIC
-------------------------------------------------------------------------------
inetnum: 219.148.62.192 - 219.148.62.255
netname: SJZ-HEVNET-PLATFORM
descr: HULIANXINGKONG information platform of HEBEI province
country: CN
admin-c: BR3-AP
tech-c: BR3-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-CHINATELECOM-HE
changed: renbin@hbtele.com 20031218
source: APNIC

person: Bin Ren
nic-hdl: BR3-AP
e-mail: renbin@mail.he.cn
address: 10F Ximei Building NO.6 Jianshe South Street
address: Shijiazhuang 050011 China
phone: +86-311-5211551
fax-no: +86-311-5211578
country: CN
changed: renbin@mail.he.cn 20040430
mnt-by: MAINT-CHINATELECOM-HE
source: APNIC
-------------------------------------------------------------------------------
Domain ID:D5996602-LRMS
Domain Name:DRMEDS.INFO
Created On:16-Jun-2004 09:59:38 UTC
Last Updated On:19-Jun-2004 18:22:42 UTC
Expiration Date:16-Jun-2005 09:59:38 UTC
Sponsoring Registrar:R159-LRMS
Status:ACTIVE
Status:OK
Registrant ID:C4846801-LRMS
Registrant Name:Bruce Willing
Registrant Organization:Private Imaging
Registrant Street1:128 ventura blvd #212
Registrant City:Englewood
Registrant State/Province:CO
Registrant Postal Code:48310
Registrant Country:US
Registrant Phone:+1.3526792560
Registrant Email:mycomp4ever@yahoo.com
...
Name Server:NS1.3070.BIZ
Name Server:NS2.3070.BIZ
Name Server:NS3.3070.BIZ
-------------------------------------------------------------------------------
ns1.3070.biz A 201.100.100.3
ns2.3070.biz A 201.3.240.133
ns3.3070.biz A 202.106.127.235

201.3.240.133: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL17407
202.106.127.235: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15460


Domain Name: 3070.BIZ
Domain ID: D6940947-BIZ
Sponsoring Registrar: ENOM, INC.
Domain Status: ok
Registrant ID: ADAE8E9B5E31F500
Registrant Name: francisco moreno
Registrant Organization: na
Registrant Address1: rua 12
Registrant City: Toledo
Registrant Postal Code: 80420
Registrant Country: Spain
Registrant Country Code: ES
Registrant Email: 3070d@terra.com.mx
...
Name Server: NS2.3070.BIZ
Name Server: NS3.3070.BIZ
Name Server: NS1.3070.BIZ
Created by Registrar: ENOM, INC.
Last Updated by Registrar: ENOM, INC.
Domain Registration Date: Mon May 17 15:22:07 GMT 2004
Domain Expiration Date: Mon May 16 23:59:59 GMT 2005
Domain Last Updated Date: Tue May 18 01:52:08 GMT 2004
-------------------------------------------------------------------------------
Domain ID:D5996603-LRMS
Domain Name:JUSTRECOMMENDATION.INFO
Created On:16-Jun-2004 09:59:57 UTC
Last Updated On:19-Jun-2004 18:23:29 UTC
Expiration Date:16-Jun-2005 09:59:57 UTC
Sponsoring Registrar:R159-LRMS
Status:ACTIVE
Status:OK
Registrant ID:C4846801-LRMS
Registrant Name:Bruce Willing
Registrant Organization:Private Imaging
Registrant Street1:128 ventura blvd #212
Registrant City:Englewood
Registrant State/Province:CO
Registrant Postal Code:48310
Registrant Country:US
Registrant Phone:+1.3526792560
Registrant Email:mycomp4ever@yahoo.com
...
Name Server:NS1.3070.BIZ
Name Server:NS2.3070.BIZ
Name Server:NS3.3070.BIZ
-------------------------------------------------------------------------------
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: STAMINADRUGS.COM

Registrant:
Private Imaging
Bruce Willing (mycomp4ever@yahoo.com)
128 ventura blvd #212
Englewood
CO,48310
US
Tel. +1.3526792560

Creation Date: 16-Jun-2004
Expiration Date: 16-Jun-2005

Domain servers in listed order:
ns1.3070.biz
ns2.3070.biz
ns3.3070.biz
-------------------------------------------------------------------------------
Query: ssl4all.com
Registry: whois.stargateinc.com
Results:
Domain Name: ssl4all.com

Name Servers
ns.host2010.com
62.65.252.227

ns2.host2010.com
62.65.252.228

Domain Created: 2/26/2003
Domain Expires: 2/25/2005

Registrant
Yambo Financials Inc. (DE)
1001 SW 16th Avenue, 103,
Gainesville, FL 32601
United States -- US
email: ssl@host2010.com
phone: 8778542861
fax: 8778542861
-------------------------------------------------------------------------------
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: HOST2010.COM

Registrant:
Virtual World Ltd.
Andrey Burdin (client09@ssl4all.com)
313 Victoria House
Victoria
null,n/a
SC
Tel. +187.78542861

Creation Date: 23-Mar-2000
Expiration Date: 23-Mar-2005

Domain servers in listed order:
ns2.host2010.com
ns.host2010.com
-------------------------------------------------------------------------------
Why are they hosting in Estonia? Connectivity to Starman is provided by GBLX.

inetnum: 62.65.252.224 - 62.65.252.239
netname: EE-EXODUS
descr: Exodus Hosting OY
descr: server-housing
country: EE
admin-c: RT974-RIPE
tech-c: RT974-RIPE
status: ASSIGNED PA
notify: ripe@starman.ee
mnt-by: AS13272-MNT
changed: ripe@starman.ee 20031124
source: RIPE


route: 62.65.192.0/18
descr: Starman Internet AS
origin: AS13272
notify: ripe@starman.ee
mnt-by: AS13272-MNT
changed: ripe@starman.ee 20020620
source: RIPE

person: Roman Tserkesov
address: K.rberi 4-212
address: 13812 Tallinn
address: Estonia
phone: +37255954712
e-mail: goodies@elf.exodus.ro
nic-hdl: RT974-RIPE
notify: ripe@starman.ee
changed: ripe@starman.ee 20031112
source: RIPE

Why does Mr. Tserkesov have a contact address that appears to be in
Romania? (elf.exodus.ro is 212.7.7.58 in Tallinn, Estonia.)

-------------------------------------------------------------------------------
domain-name: exodus.ro
description: [PI Removed]
description: [PI Removed]
description: [PI Removed]
description: [PI Removed]
description: Suceava
description: RO
description: Postal Code: [PI Removed]
description: Phone: [PI Removed]
description: Email: narcis@warpnet.ro
admin-contact: BL27-ROTLD
technical-contact: BL27-ROTLD
zone-contact: BL27-ROTLD
billing-contact: BL27-ROTLD
nameserver: ns1.exodus.ro 82.211.36.130
nameserver: ns2.exodus.ro 62.65.252.137
nameserver: ns1.procopter.com 69.36.7.247
nameserver: ns2.procopter.com 69.36.7.248
-------------------------------------------------------------------------------
inetnum: 82.211.36.128 - 82.211.36.255
netname: DE-INTERNET-HOMING-GMBH-20040206
descr: Internet-Homing GmbH
country: DE
-------------------------------------------------------------------------------
inetnum: 62.65.252.128 - 62.65.252.191
netname: EE-EXODUS
descr: Exodus Hosting OÜ
country: EE
-------------------------------------------------------------------------------
OrgName: JTL Networks Inc.
OrgID: JTLNE
Address: 240 N Fifth Street
Address: Suite 210
City: Columbus
StateProv: OH
PostalCode: 43215
Country: US

NetRange: 69.36.0.0 - 69.36.15.255
CIDR: 69.36.0.0/20
-------------------------------------------------------------------------------
Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: procopter.com

Registrant Contact:
C
Ionut Vatavu (grimshrat@yahoo.com)
+1.5555555555
Fax: +1.5555555555
Filimon 22
Solca, MD 6800
UK

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 26 Apr 2004 07:15:39
Expiration date: 26 Apr 2005 07:15:39
-------------------------------------------------------------------------------
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: HECANHELP.NET

Registrant:
Private Imaging
Bruce Willing (mycomp4ever@yahoo.com)
128 ventura blvd #212
Englewood
CO,48310
US
Tel. +1.3526792560

Creation Date: 16-Jun-2004
Expiration Date: 16-Jun-2005

Domain servers in listed order:
ns1.3070.biz
ns2.3070.biz
ns3.3070.biz
-------------------------------------------------------------------------------
Domain Name: 24PHD.BIZ
Domain ID: D7185482-BIZ
Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Domain Status: clientTransferProhibited
Registrant ID: DI_450997
Registrant Name: Allen Tran
Registrant Organization: ChocoPower
Registrant Address1: 1871 McLaughlin Street
Registrant City: San Jose
Registrant State/Province: CA
Registrant Postal Code: 95121
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.9259809320
Registrant Email: masterofchocolate2000@yahoo.com
...
Name Server: NS1.24PHD.BIZ
Name Server: NS2.24PHD.BIZ
Created by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Last Updated by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Domain Registration Date: Tue Jun 15 08:38:28 GMT 2004
Domain Expiration Date: Tue Jun 14 23:59:59 GMT 2005
Domain Last Updated Date: Wed Jun 16 09:16:57 GMT 2004
-------------------------------------------------------------------------------
ns1.24phd.biz A 219.148.62.228
ns2.24phd.biz A 219.148.62.228
-------------------------------------------------------------------------------
Domain Name: MFAV.BIZ
Domain ID: D7185483-BIZ
Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Domain Status: clientTransferProhibited
Registrant ID: DI_450997
Registrant Name: Allen Tran
Registrant Organization: ChocoPower
Registrant Address1: 1871 McLaughlin Street
Registrant City: San Jose
Registrant State/Province: CA
Registrant Postal Code: 95121
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.9259809320
Registrant Email: masterofchocolate2000@yahoo.com
...
Name Server: NS1.MFAV.BIZ
Name Server: NS2.MFAV.BIZ
Created by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Last Updated by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM)
Domain Registration Date: Tue Jun 15 08:38:33 GMT 2004
Domain Expiration Date: Tue Jun 14 23:59:59 GMT 2005
Domain Last Updated Date: Wed Jun 16 09:13:25 GMT 2004
-------------------------------------------------------------------------------
ns1.mfav.biz A 219.148.62.228
ns2.mfav.biz A 219.148.62.228
-------------------------------------------------------------------------------
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: DRPROOF.NET

Registrant:
ChocoPower
Allen Tran (masterofchocolate2000@yahoo.com)
1871 McLaughlin Street
San Jose
CA,95121
US
Tel. +1.9259809320

Creation Date: 15-Jun-2004
Expiration Date: 15-Jun-2005

Domain servers in listed order:
ns1.drproof.net
ns2.drproof.net
-------------------------------------------------------------------------------
ns1.drproof.net A 219.148.62.228
ns2.drproof.net A 219.148.62.228
-------------------------------------------------------------------------------
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com

Domain Name: PHDMEDS.NET

Registrant:
ChocoPower
Allen Tran (masterofchocolate2000@yahoo.com)
1871 McLaughlin Street
San Jose
CA,95121
US
Tel. +1.9259809320

Creation Date: 15-Jun-2004
Expiration Date: 15-Jun-2005

Domain servers in listed order:
ns1.phdmeds.net
ns2.phdmeds.net
-------------------------------------------------------------------------------
ns1.phdmeds.net A 219.148.62.228
ns2.phdmeds.net A 219.148.62.228

--------forwarded message--------
>From andre@auctionwatch.com Tue Jun 22 21:00:27 2004
Received: from bb220-255-59-201.singnet.com.sg (bb220-255-59-201.singnet.com.sg [220.255.59.201])
by send.it.helsinki.fi (8.12.11/8.12.11) with SMTP id i5MI09o5028382
for <-removed->; Tue, 22 Jun 2004 21:00:14 +0300 (EEST)
Message-Id: <200406221800.i5MI09o5028382@send.it.helsinki.fi>
From: don <andre@auctionwatch.com>
To: -removed-
Subject: CIALIS - 94560097
Date: Tue, 22 Jun 2004 17:53:03 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0000_BC2B0905.C0F4A4FC"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-HY-Spam-Status: HIGH ; 123
X-HY-Spam-Level: ************+++
X-Status:
Status: O

This is a multi-part message in MIME format.

------=_NextPart_000_0000_BC2B0905.C0F4A4FC
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0001_640FB053.B5CB7D3F"


------=_NextPart_001_0001_640FB053.B5CB7D3F
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit


CIALIS
or Super Viagra

* the effect lasts 36 hours!
* you are ready to start within just 10 minutes!
* you can mix it with alcohol!

For more info and order:
http://drmeds.info/sv/index.php?pid=eph6929
http://justrecommendation.info/sv/index.php?pid=eph6929
http://staminadrugs.com/sv/index.php?pid=eph6929
http://hecanhelp.net/sv/index.php?pid=eph6929
http://24phd.biz/sv/index.php?pid=eph6929
http://mfav.biz/sv/index.php?pid=eph6929
http://drproof.net/sv/index.php?pid=eph6929
http://phdmeds.net/sv/index.php?pid=eph6929

Check also "Maxaman", "Fat Blast", "Human Growth Hormone", . . .






------=_NextPart_001_0001_640FB053.B5CB7D3F
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<table width="500" border="1" align="center" cellpadding="5" cellspacing="0" bordercolor="#000000">
<tr>
<td><div align="center"><font face="Arial, Helvetica, sans-serif"><b><font size="+2">CIALIS <font size="2">(Super Viagra)</font></font></b></font></div></td>
</tr>
<tr>
<td><ul>
<li>
<div align="left"><font face="Arial, Helvetica, sans-serif"><b>the effect lasts 36 hours !</b></font></div>
</li>
<li>
<div align="left"><font face="Arial, Helvetica, sans-serif"><b>you are ready to start within just 10 minutes !</b></font></div>
</li>
<li>
<div align="left"><font face="Arial, Helvetica, sans-serif"><b>you can mix it with alcohol !</b></font></div>
</li>
</ul></td>
</tr>
<tr>
<td bgcolor="#CCCC33"><div align="center"><font color="#FFFFFF" face="Arial, Helvetica, sans-serif"><b>For more info and order click here <a href="http://phdmeds.net/sv/index.php?pid=eph6929"><font color="#FFFFFF" face="Arial, Helvetica, sans-serif"><b>&gt;&gt;&gt;</b></font></a></b></font></div></td>
</tr>
<tr>
<td bgcolor="#FF9900"><div align="center"><b><font size="-1" face="Arial, Helvetica, sans-serif">Check also "Maxaman", "Fat Blast", "Human Growth Hormone", . . .</font></b></div></td>
</tr>
<tr>
<td bgcolor="#FF9900">
<center>
<a href="http://drmeds.info/sv/index.php?pid=eph6929"><font color="#FFFFFF" size="1" face="Arial, Helvetica, sans-serif"><font size="2"><b>mirror #1</b></font></font></a><b><font size="2"><font face="Arial, Helvetica, sans-serif"> <font color="#FFFFFF">|</font> <a href="http://justrecommendation.info/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #2</font></a> <font color="#FFFFFF">|</font> <a href="http://staminadrugs.com/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #3</font></a> <font color="#FFFFFF">|</font> <a href="http://hecanhelp.net/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #4</font></a> <font color="#FFFFFF">|</font> <a href="http://24phd.biz/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #5</font></a> <font color="#FFFFFF">|</font> <a href="http://mfav.biz/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #6</font></a> <font color="#FFFFFF">|</font> <a href="http://drproof.net/sv/index.php?pid=eph6929"><font color="#FFF!
FFF">mirror #7</font></a></font></font><font size="1" face="Arial, Helvetica, sans-serif"></font></b>
</center></td>
</tr>
</table>
</body>
</html>


------=_NextPart_001_0001_640FB053.B5CB7D3F--



------=_NextPart_000_0000_BC2B0905.C0F4A4FC--
-----end of forwarded message-----

Related URLs

Link to posting


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK3959/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy