ROKSO: Yambo Financials - The Spamhaus Project

ROKSO Home | ROKSO FAQs & Policies | About Spamhaus | FAQs

Yambo Financials

Evidence Menu:

Yambo Financials Index

Country: Ukraine
State:

Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank."

Yambo Financials SBL Listings History

Current SBL Listings

Archived SBL Listings

Child Porn spamming: obill.biz

Distributed via Australia hacked box:

Received: from adams (89-20.dial.connexus.net.au [203.222.89.20])
by yyyyyyyyyyyyyyyyyyyyyy;
Thu, 9 Sep 2004 21:27:45 -0400

This Porn is hosted at
http://obill.biz/451/ - 202.104.242.154 - China Telecom.

Money laundering ??

http://obill.biz/ is written in Russian and appears to be
a billing site.

Website is calling itself: --- Omega Bill ---:
©2004 Icomservice LLC. All rights reserved

In the FAQ section it has a link to http://www.webmoney.ru

<Quote>
Contact information

Icomservice LLC
25 Greystone Manor
Lewes, DE 19958
US
Phone: 443-342-2504

e-mail: support support@megabill.org
</Quote>
Reference: http://obill.biz/contacts.htm

==============

- From a spam complaint in Feb 2004
<Quote>
Registrant:
Icomservice LLC (KPOUTOVAGD)
25 Greystone Manor
Lewes, DE 19958
US

Domain Name: OMEGABILL.COM

Administrative Contact:
Dinsmore, Peter (36002762P) peterd@hpro.org
25 Greystone Manor
Lewes, DE 19958
US
443-342-2504
</Quote>
Reference:
http://groups.google.ca/groups?selm=4041E05F.5040305%40rambler.ru

Also Dec 2003
http://groups.google.ca/groups?selm=9al2tvojaf9s9ateouinn7s2uhpp6hubki%404ax.com
===================

NameServer used for query: yo.habahaba.biz

Answer records
obill.biz 1 NS ee.habahaba.biz 595s
obill.biz 1 NS yo.habahaba.biz 595s

Authority records

Additional records
yo.habahaba.biz 1 A 202.104.242.154 900s <-- Hmmm
====================

<Quote>
This is the Plesk default page.

If you see this page it means:

1) hosting for this domain is not configured
or
2) there's no such domain registered in Plesk.

For more information please contact admin@zanza.biz <-- ?
</Quote>
Reference: http://202.104.242.154/

___________

Related?

domain: WEBMONEY.RU
type: CORPORATE
nserver: ns.molot.ru.
nserver: ns.relsoftcom.ru
nserver: ns.relsoft.ru
state: REGISTERED, DELEGATED
org: Joint Stock Company "Computing Forces"
phone: +7 095 9513938
phone: +7 095 9518882
fax-no: +7 095 9513344
e-mail: shalopin@webmoney.ru
created: 2002.03.14
paid-till: 2005.05.01
source: RU-CENTER

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.

The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK4077/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.