ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Yambo Financials

Evidence Menu:

Yambo Financials Index


Country: Ukraine
State:
Huge spamhaus tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card "collection" sites) set up as a fake "bank."


Yambo Financials SBL Listings History
Current SBL Listings
Archived SBL Listings

nanobill.com - lots of connections to other tentacles


> >> domain: nanobill.com
> >> owner-address: BVRP Software USA
> >> owner-address: 1333 West 120th Ave Suite 314
> >> owner-address: 80234
> >> owner-address: Westminster
> >> owner-address: Colorado
> >> owner-address: United States of America
> >> owner-phone: +1.7203301451
> >>

BTW, don't know if you noticed this. <http://nanobill.com/> starts with:

<HTML>
<HEAD>
<TITLE>--- Omega Bill ---</TITLE>

And further down the page, the "webmasters" link is to:

"http://omegabill.com/cgi-bin/webmaster.cgi"

Trying to poke the images directory at <nanobill.com/imgs/> gives:

<TITLE>ERROR 403 - Forbidden</TITLE>
<!--DoctorPleasure.com - Adult Index Page-->

plus an iframe from

src="http://nanobill.com/allmodel/"

that advertises other kiddie pr0n sites, including

http://modelboysfoto.com/tgp/index.htm and
http://kidmodelphoto.com

(I guess these are pr0n sites - the teaser photo's show kids with some clothes on, however).

It delivers the site priviews by a cgi, e.g.

http://nanobill.com/cgi-bin/showsite.cgi?id=00000005030000000016

You can substitute different right-most two digits for other sites beyond the ones listed on the /allmodel/ page. For instance,

http://nanobill.com/cgi-bin/showsite.cgi?id=00000005030000000002

gives a pr0n site that uses 3d-rendering of child-adult sex to make it
legal. ...0008 gives a redirect to kidmodelphoto.com/bambi/ but most
just give Internal Server Error's (500). 00014 goes to "kimmi" while
00016 is sammijo, 00017 is "3dorgies.com". 00021 is sammijo again. etc.

The Internal Server Error page has a link to

http://doctorpleasure.com/all_links.htm

which has these kind of links:

"http://plasmabill.biz/cgi-bin/showsite.cgi?id=00000002110000000048"

and includes software ads for "RYSO Handy Look (v3.0)", "RYSO Easy
Thumbs" and "RYSO Cleaner", as well as a plug for mediaencrypt.com
(encryptor for "safely" storing dodgy material on your pc) and
anonymprom.com (apparently, an anonymizer, and the actual link is to
"anonympro.com" - note spelling change)). A full-service site for
pedophiles, huh?


//---------------------
doctorpleasure.com 64.71.157.2 IP hosts 1 domain

Registrant:
Harvey's Production Corporation (DOCTORPLEASURE4-DOM)
Suite309-101Bryan Bldg,4537CasinoStreet
Palanan, Makati City, Metro Manila 1200
PH

Domain Name: DOCTORPLEASURE.COM

Administrative Contact, Technical Contact:
Stiv, Kampos (15695096I)
Suite 309-101 Bryan Bldg
4537 Casino Street
Palanan, Makati City, Metro Manila 1200
PH
+1-877-8757612 fax: +1-801-4061364

Record expires on 03-Jun-2005.
Record created on 03-Jun-2000.
Database last updated on 24-Dec-2004 18:50:44 EST.

Domain servers in listed order:

NS1.ALTROMAT.COM 64.71.157.3
NS2.ELMORAS.COM 64.71.157.4


//---------------------
plasmabill.biz 64.71.157.11 IP hosts 1 domain

Domain Name: PLASMABILL.BIZ
Domain ID: D8290438-BIZ
Sponsoring Registrar: GANDI SARL
Sponsoring Registrar IANA ID: 81
Domain Status: ok
Registrant ID: O-880449-GANDI
Registrant Name: HOLCOMB VENTURES LLC
Registrant Organization: HOLCOMB VENTURES LLC
Registrant Address1: 200 Wilmot Road, Mail Stop
#2273
Registrant City: Deerfield
Registrant State/Province: IL
Registrant Postal Code: 60015
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8002892278
Registrant Email:
Administrative Contact ID: HVL5-GANDI
Administrative Contact Name: HOLCOMB VENTURES LLC
Administrative Contact Organization: HOLCOMB VENTURES LLC
Administrative Contact Address1: 200 Wilmot Road, Mail Stop
#2273
Administrative Contact City: Deerfield
Administrative Contact Postal Code: 60015
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8002892278
Administrative Contact Facsimile Number: +33.1
Administrative Contact Email:
Billing Contact ID: HVL5-GANDI
Billing Contact Name: HOLCOMB VENTURES LLC
Billing Contact Organization: HOLCOMB VENTURES LLC
Billing Contact Address1: 200 Wilmot Road, Mail Stop
#2273
Billing Contact City: Deerfield
Billing Contact Postal Code: 60015
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8002892278
Billing Contact Facsimile Number: +33.1
Billing Contact Email:
Technical Contact ID: HVL5-GANDI
Technical Contact Name: HOLCOMB VENTURES LLC
Technical Contact Organization: HOLCOMB VENTURES LLC
Technical Contact Address1: 200 Wilmot Road, Mail Stop
#2273
Technical Contact City: Deerfield
Technical Contact Postal Code: 60015
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8002892278
Technical Contact Facsimile Number: +33.1
Technical Contact Email:
Name Server: NS1.PLASMADNS.COM
Name Server: NS2.PLASMAMOTOR.COM
Created by Registrar: GANDI SARL
Last Updated by Registrar: GANDI SARL
Domain Registration Date: Wed Nov 24 14:37:39 GMT
2004
Domain Expiration Date: Wed Nov 23 23:59:59 GMT
2005
Domain Last Updated Date: Thu Nov 25 15:51:14 GMT
2004

//-------------------
anonympro.com 64.71.157.10 IP hosts 48 domains
(among them, omegahost.org and omegab.org which are suspicious names)

domain: ANONYMPRO.COM
owner-address: Digital Elephant LLC
owner-address: 119 Greystone Manor
owner-address: 17858
owner-address: Lewes
owner-address: Delaware
owner-address: United States of America
owner-phone: 1.8131323226
67c1fc352334d1876c15f3166f022f74-671195@owner.gandi.net

admin-c: DEL6-GANDI
tech-c: ATL8-GANDI
bill-c: DEL6-GANDI
nserver: NS1.ALTROMAT.COM 64.71.157.3
nserver: NS2.ELMORAS.COM 64.71.157.4
reg_created: 2002-11-21 10: 44: 24
expires: 2005-11-21 10: 44: 24
created: 2002-11-21 16: 44: 26
changed: 2004-11-30 01: 01: 21
person: Digital Elephant LLC
nic-hdl: DEL6-GANDI
address: Digital Elephant LLC
address: 25 Greystone Manor
address: 17858
address: Lewes
address: Delaware
address: United States of America
phone: 1.8131323226
48ae669682a1ee1c2ff715f7f406cbca-del6@contact.gandi.net

lastupdated: 2004-12-06 19: 54: 07
person: ACA Technologies LLC
nic-hdl: ATL8-GANDI
address: ACA Technologies LLC
address: 5325 Elkhorn Blvd. PMB 9002
address: 95842
address: Sacramento
address: California
address: United States of America
phone: 1-916-313-3722
fax: 1-916-313-3722
aca@hpro.org




The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK4468/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy