Introduction
Video interview
Success Stories
Charity success
The rogue
About the spammer
Bob's mental wellbeing
dmca theft
smd 'link'
(spam of mass destruction)



Court Proceedings 2008
Federal Trial coming soon

Politics
2008 Elections (WA)

Technical
The spam package
in detail

Suspected operation
Domain list
SEO pollution (NEW)

Know something ?
tell me

Spamcop sightings
Roberts home isp
Some Maps
of the above
in a new window.

Current
Recent activity
Hosting with

Fun
A Bob Soloway
spam song to sing.


Community zone
Meet Fellow 'fans'.
I post here its a
public zone instead
of my private contact
'feature' below


.
Housekeeping
How to use this page
Contact Us.
for
Media 'Professionals'
section.

Copies of this page

Welcome to the 2006
redesign of this page
the old page is still
here This page is
very large mirror and
subject to ddos attacks.
it is originally hosted here
original mirror

Welcome to the
Bob Soloway universe!
Its great fun.

I have 'migrated' from yahoo.

Enable or disable the
Search and translate
tools
.

. clicking this
this can take some
time to work.



































Change Text size: - +

Search engine visitors:
This page has
lots of other junk on it
if you typed in
some vague keyword
or ip address please
use your 'find
feature' for that phrase.

So please meet
my (and probably yours too)
most prolific spammer
who does not understand
the concept of 'no'

Most links on this page
are internal - to visit
Bob Soloway site you will
have to type it in yourself.

This page documents
activities seen
in a concise* form
*in one page.

Google


notice: Meebo has been removed

Translate this site:

or Translate words

[ hide this menu]
It can be re-displayed
again via the bottom
on the left hand menu.
This takes some
time to work.

note: BIG PAGE - can be slow to load, about 368+ a4 portrait pages to print, or 524+ landscape (a4 paper size) - excluding the pdf documents hosted here which can also be printed out if your in the mood.

Notice: This page monitors Bob Soloway, and is VERY BORING/DULL if your not an uber i.t nerd; but such is the nature of the subject. It's not a media 'powerpoint friendly' presentation*.

* Journalists interested in the matter should pass this to somebody more experienced rather than deal with it being that converting press releases into newspaper copy means you probably don't have the skills or the time to 'get' what is contained in this page.

On the 24th February 2011, Robert Soloway left Federal Camp, and returned to Seattle, Washington State (near Canada on the Pacific side). His motives have yet to be determined.

Robert Soloway attending Federal court at Seatle 11 July 2008.Updates:
Court Sentencing (all day) is set for Seattle on Friday the 11 of July 2008. On the 14th of March 2008 Robert Soloway admitted three charges of guilt and in a deal with the us authorites had the other 37 charges droped. Sentencing with at least five years of jail time, and $ us 500,000.00 in fines is the issue for the Judge on the three counts admitted to.


Sentence is set at 47 months (about four years) and fine of $ 700,000.00 (Sterling £ 350,000.00,euro 443,044.00) more when i have court docs.

It is over!, for now. But I will continue to monitor our pest. See the date entry for more information.

Robert Soloway was released from prison until his trial on 20 September 2007, If you spot him (online or in person) please drop us a note as documents have been sealed.

Federal (usa) Trial was set for 24 march 2008, first delay was 7 January 2008 (it was orginally set for 6 August 2007). Lets hope Robert does not go to Sweden while 'free'. New Lawyer appointed 'Carl A. Tony Capozzola' existing lawyer Trobermann to take a backseat ?

MAY 31 2007 Robert Soloway (federal prisioner id 37427-086) and in the Care of Six US Governmental agencies details.

I feel your pain if you are being Joe jobbed/or where. However you can read about the Spammer below and his 'progress' through the court.

NEW HOSTING ANNOUNCEMENT: A big thank you to Andy for the new home and domain name thisfool.com and hosting for it. Note I will also continue to maintain the existing googlepages site.

Lets get started.

This page is not 'fan' literature, but an attempt to put together the facts of how Robert spams you and me. - it is not all of my own work. But an attempt to get people who are thinking of using Roberts 'services' as counter to his claims which a court has as part of the evidence against him. I've never met Robert, or used his 'service' etc - but a lot people including Microsoft (of which I'm sure you have heard of) consider him a problem. So if you thinking about taking Robert up on his offer consider this.

  1. His list was not used when he spams
  2. I never requested mailings from Robert - but I got them.
  3. I have no idea if I am still on his list or not after opting out - its an academic point now
  4. I include actual 'testimonials' from people who signed up for Roberts offer
  5. Robert is using spamware to mail his junk.
  6. And spamware that appears to use windows trojan; pc's
  7. He hosts in China - who it appears don't mind spammers.
  8. It it doubtfull that the 478 clients (not the thousands claimed) of Robert got the million plus mailings - Robert could not tell
Robert Soloway myspace image.Lets summarise, He spams, his mailings are not 'can-spam' compliant,and this

is not me making these claims this information can be found throughout this document For the record - I just list the spams that my Domain owner email gets. Robert for some strange reason kept appearing in my inbox. So this is a 'homage' to his business operation. Should you think this just 'sour grapes' then I suggest you email some of the clients who having taken up Robert and paid him and discovered the truth. So before you send Robert money to his 'paypal' account - please read the experience of 'clients', court documents and so on. Once equipped with the facts I hope you will 'do the right thing'.

A wiki entry on Bob for those of you who like extra sources of information.

From another wikipedia contributor (June/2006):

Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may call 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

outside Blue folder - American paper size. Exclusive !!! The Spam package under the hood look at the spamware, complete with photo's.

inside Blue folder - American letter paper size.card.
CD disks1 and 2 .CD disk3,
note.the spam guide.what to spam guide.

A visit is recommended (links back to this page).

Bobs 'Its not Spam' phase What about this spamis nonsense ? Those of you lucky enough to get a spamis spam (I was lucky) will know that Robert is having a go at the people who are taking him to court. I have no idea of what Bob is on but it is weird stuff. Many 'spammers' become anti-spammers when they are rumbled. Bob is still Bob - so he is still a spammer. As to Bob being 'persecuted' well if Bob thinks that way - then his 'stupidity' helped started it. That I think is a fair assessment on Spamis which a domain registrar has now terminated for breaking some rules set out in their terms and conditions.

Meeting Bob

The text below explains how I was introduced to Bob Soloway and how this page was eventually created. If you came from my spamming the domain owner (web archived now) page then you know the background. otherwise let me recap. Spammy's house (see address below)  credit Thank you to the Roadie for the picture.As a domain owner In 2002 a couple of domains I look after changed registrar, so this meant the all contacts in the whois database changed.

The whois lists information about the owner and the technical contacts various internet rfc's (who the internet is ideally run) require you have these so people can contact you.

The downside of this ideal system is that spammers can also spam you as most domains not owned by spammers follow the rules. Since spammers can joe-job you it is best not to have filters on these email accounts as it might be a another domain warning you that a spammer is using your domain name (if you don't know it already) So the billing, technical, and administrator plus the owner contacts changed in the year 2002 - for good measure a web page was setup advising persons of this. In June 2004 Bob who was then using 'Broadcastingtoday.biz' raided the whois by some means and decided to send me spam, then to all of the accounts I created in 2002. which is nice of them since these accounts don't send email. Enough history - lets move to 2004.So in June 2004 I got spammed via my whois entries so I renamed a few things and started my experiment. I then also renamed the billing and technical contacts. they have since rescanned the whois and have sent spam to these new names this has become experiment 2 (also web archived). No web page was put up with the changes so they are definitely raiding the whois for there claimed and 28 million email addresses. That's how Bob Soloway introduced himself. with this (archive link)

Email Advertise to 28 Million People Free

http://www.broadcastingtoday.biz emailing is only zero amount if you are a non profit organization
that aids low income individuals gain access to the internet.
at web site, contact us by mail for further details.

unsubscribe from our non-commercial/non-profit newsletter database:
http://www.broadcastingtoday.biz/unsub.html

po box 1259, seattle, wa 98111

The 'love affair' of tracing Bob's spam started back then - thus this page of love was born.

Bob reciprocated my love my sending me more spam (see the link). and before one knew it I had a lovers crush - I've yet to do the Glen Close - Fatal Attraction 'bunny boiling' stage. - I would not want to be Bob's boyfriend or girlfriend (whatever his sexual orientation) when the Bunny Boiler state comes.

The more you know the funnier Bob gets - his claim to 'protecting american jobs' is code for using anything but americans in his operations, the Charities success rate from what I can gather is a complete failure and may be mostly lies.

A Spam

What does a Bob Soloway spam look like ? - well you seen one, and more importantly where might it come from ?

Most 'normal' internet citizens live in a neighbourhood e.g. 24. is america 211. is Korea etc etc, Bob is international in fact if you look at my lists you will see computers in many nations unwittingly working for Bob.

The spams to the domain aliases are similar to the experiment (see link) I am running this is the 'body' of a freshly subscribed address from my whois entry - a later spam example from the 15th September 2004.

message: 

email like this to 28 million people for free...

http://www.broadcastingtoday.biz



----------------

this email was sent to gain attention to non-profit
organizations that aid low-income individuals gain
access to the internet and technology looking for
immediate exposure. we make no profit on any of
these services, and we offer this service to help
organizations benefiting impoverished individuals
gain access to the internet throughout the world.

emailing is only zero amount if you are a non-profit
organization that aids low-income individuals gain
access to the internet. at our web site above, simply
contact us by mail for further details.

the primary purpose of this email is directed at non-profit
organizations that benefit low income individuals gain access
to the internet and technology in all countries worldwide.

several organizations worldwide have already taken
advantage of our free offer, and we look forward to
benefiting many more in the future.

if you are not a non-profit organization interested in our
non-commercial/non-profit email notifications that benefit
various world causes, please unsubscribe at:

contact us at: po box 1259, seattle, wa 98111

(look familiar?) - you now seen two spams. They are consistent in there attempts to spam me, since i have not unopted from the billing and technical contacts the spam is less than from the owner email which has had 30 ish spams after opting out of the Broadcastingtoday.biz list. Surprisingly Robert does not appear to spam webmaster or postmaster accounts - but I'm sure that will change one day.

Over time that number has dwindled to only 8 million this is a recent example of the current text forwarded by a fellow domain owner, the domain below was shut down in 2 days after being activated.

wow...

email advertise like this to 8,000,000 people this week for free...

http://www.ebroadcastcorporation.com/






the above non commercial offer is directed at non commercial
charities only.  push charity info on site for details. this offer is
not a commercial service that is absolutely not at all available
for sale or lease or trade of any kind.

That last paragraph is humorous - so my domain owner friend according to Bob is a charity, however Bob will sell the list to anybody including pet companies and it related products (see below), No endorsements by charities is implied either it appears if you read the appropriate section of this file.

One can infer.

Success Stories

Read some quotes from dissatisfied customers. None of these are made up. Roberts clients apparently include these highly reputable areas of trading in:

Robert's 'Clients' also seem to include
http://success-4-u.biz/?refid=BcastEmail-123456789 affiliate: Helen Allen, Hamilton Island, Queensland, Australia and Poochieheaven.com (real) recommends Bob

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. Well now I have nothing but complaints about spam and am receiving virus' in my email all the time. 

I asked for a refund but they said no. Still I get complaints about emails being sent out after I told them to stop sending them. So I wonder what can we do about this.
My business has slowed so much and I think my site's reputation is at stake.
Of Interest:
US COURT document pdf link
US Court
document copy
Clients experience with Bod as pdf document
Contentseed client experience
pdf document.
Print to discover what a Bob Soloway client found out, and that the American Judge thought print a copy / browse for your amusement. Pdf documents do not need the latest acrobat driver (old style pdf). Any Lawyers (legal people) whom be reading this and are still thinking c**** action should read Bob response to such things on newsnet. I'm not giving it anymore propaganda. So go chase ambulances that is more profitable from what i know of the american legal profession.

Its not only me (wiki quote from the past):

The most recent incarnation of this Spammer's website has now moved to http://www.web-dateset.com/ - and they are once again forging headers to make it appear as though legitimate business websites are responsible for their SPAM messages. The author of this update, wishing to draw no further attention from the SPAMMER, will remain anonymous, but we have received about 200 messages in the last 2 days, supposedly from over 200 of our own domain names Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may calll 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

Broadcastemail advertising is a failure. says yet another client

Karma There are other problems that Mr Soloway will encounter, he has interested me in 'how does he do it'. This page regardless of your view of 'spam' links Mr Soloway to many domains (joe jobs) and providers of it services (mostly Chinese).

So should somebody else do something 'bad' - and google and see that Bob has used it - one might come to the conclusion that Bob is one very bad apple. take an email i received about a Nigerian in October 2006 - let me explain.

A Nigerian named Ghenga Olanrewaju of 11 Odeku Close, Surulere, Lagos 23401 used a domain that Bob Soloway used. An inference by somebody else assumed that he was 'Bob' was made. So is Bob 'Ghenga'? I don't think so, but if you play loose with things like has been observed and documented with Mr Soloway then our Robert it appears also takes the rap for another crook apparently named: 'Ghenga Olanrewaju'.

That's sort of 'karmic'. Also moral in there. Something along the lines of 'responsibility' see if you can find it.

Charity work

Charity Time boys and girls, for those of you who really 'read' the Soloway spams will notice that there are a lot of charities listed. So does his charity spam work ? - it seems not. Bob was also Tsuna-ming too at the time.

For your benefit I have gone and done some 'Googling' and put in the the urls, these are perhaps charities you might like to avoid donating to, Some of these are large organisations. A lot of these take credit cards via websites for what its worth, so it may mean that the donation was for not a lot and the charity mention Bob claims means absolutely nothing as well.

Questions I like to know include:

  1. how large the donation was
  2. or if Bob really donated to them
  3. and do they approve of being listed in a Bob Soloway spam

I have asked each charity listed in the Bob Soloway spam that exists. Strangely none of these esteemed organisations answered my questions about Bob if you can find out as well so much the the better

Charities 'Claimed' he Helped ? with a $1 dollar donation ?

Charities Spammed using Bob services
- some of these are plain weird

adventist develop & relief agency international,
child help usa,
direct relief international,
doctors without borders
episcopal relief and development, international medical corps,
mercy corps,
operation usa,
red cross hurricane relief division,
red cross
washington state chapter, the salvation army,

among "countless" others in need of global assistance.

america remembers: killed in action -
notes: think is http://usakia.org/

foundation, his grace: evangelistic ministries
notes: ?

north valley aikikai: aikido education academy
notes: ? Information: (760) 788-3267
or www.ramona-aikikai.com (dead url)


lars ranch: abused children's sanctuary
notes: ? the neverland moonwalking dance school ?

musici europae: classic music foundation,
notes: ? husband and wife duo of Tony Brychta and
Marianna Alaberdova ? from Google cache


coleman broadcasting: youth education network .

notes: Kansas somewhere, can only find a address,
Coleman Broadcasting Network Po Box 300165,
Kansas City, MO 64130 no url a phone of (816) 861-378seven

- whom sell a 'Pray TV dvd' Not wishing to 'promote'
Bob or Coleman bc. Quite how a dvd is a 'charity' is
a issue that others can ponder

More recently - Sky (opsan december 2006) reports savechilds.net being spammed.

The Rogue
Bob Soloway inhabits a strange universe of which i have spent much time writing (8000 lines in this file) down/finding out. My aim is to present a picture which Bob would rather you not see.

Bob causes problems - through annoyance to the downright illegal, when these issue arise The fun begins. Under a couple of hours for a web host says much.

has more detail and graphic examples from isp's that say more just words.

The Spam Operation
Pure speculation on the basis of the facts seen from this page you can assume quite a lot/

Being subscribed:
1, Spam Victim: registers an internet domain
2, Bob Soloway: Hires help, or looks up what was entered in step 1, either using a mining tool, or a box of spyware/virus spybots pc that mask the number of requests for ahem 'sales leads' like email addresses.

Being spammed:
1, Bob Using non american internet companies (normally Korea, or China) Bob sets up the same website over and over again.
2, Bob uses/or employs help or his own.
1 Spybot network - example (bbc) or 2 open proxy Microsoft windows exchange servers to send (example ip addresses here)

Internet Mail Service (5.5.2650.21) from here - seems to be classed as an 'Exchange Open Proxy' abuse in Google - Never used a exchange server as an production mail server for obvious reasons. If true then its an illegal use of somebody else's server, and Bob loves Billy Gates products to spam spybots which is funny since the 'spamis' debacle done by Bob and covered here in this page.

The other query I had was for %XMAILER - is ?

xmailer - xmailer.exe - Process Information

Process File: xmailer.exe
Process Name: 123 hidden sender


Description: xmailer.exe is an advertising program by 123 hidden sender. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.


A further search in Google reveals

Anonymous bulk email software for email marketing, 123 Hidden Sender Real anonymous bulk email software, Super Email Harvester, extractor, harvester for online advertising, marketing. www.123hiddensender.com/

Download 123 Hidden Sender 3.40 Free Trial - 123 Hidden Sender ... Download 123 Hidden Sender 3.40 for free - 123 Hidden Sender ends real ANONYMOUS bulk emails.

Comrades search on "123 hidden sender" I rest my case. with this

" Sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP will will never be shown in the email headers.

Description

123 Hidden Sender Screenshot
View full-size screenshot


123 Hidden Sender sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP address will not be shown in the email headers! All you do is input your message, subject, and email addresses, and then 123 Hidden Sender does all the rest. No relays to deal with anymore. No need for expensive bulk ISPs. Port 25 is not a problem.

123 Hidden Sender is a anonymous bulk email software program based on a unique know-how sending technology. It provides real anonymous instant delivery - you can use your regular Internet connection because your IP address will never be shown in the email headers.

Feature and Benefits

Send absolute ANONYMOUS bulk emails. Real anonymous (using proprietary proxy routing - the next wave in bulk email stealth technology, New technology, not a conventional port 25 mailer). You will not lose your ISP service. Your IP will will never be shown in the email headers. Sending speed depends on your connection only (thread count control - up to 500).

Lowest prices.
Free client software.
All required data client software retrieves from our center automatically (no more hunting for relays or paying hundreds ofdollars for open relays). No port 25 needed (not affected by port 25 blocking ISPs). No SMTP servers needed.
Free support, Free upgrade. "


The pot calls the kettle black. From a list of emails for Bobs list and the emailer iding itself as MIME-tools 5.503 (Entity 5.501)
Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)


his spam using Darkmailer.

Trying to unsubscribe: 1, Means you get even more spam - a 'feature' yet to developed by Bob - well you wanted spam didn't you ? or a misunderstanding of the word 'no' really means 'yes'

Other things Bob does well:

1. Autocreation of yahoo geocities (free webspace) aliases/accounts that link to websites if Bob is having problems (I am only using for Bob dataset examples only here, other spam that employs the geocities redirect I would not make the call about) I assume a script of some kind is run

If you think I'm being unfair Going back to broadcastingtoday.biz (old) Bob is known to 'lose' half million email addresses in his latest spam (experiment 1 item 75) but I'm afraid I'm not one of them. Then (on the 1st October) However good news he's back to 28 million addresses. So it seems one can never 'get off'

Lets be 'Geeky' and take a look at the mail.log file:

01/10/2004 03:11:54 PM  pD9E51757.dip.t-dialin.net (217.229.23.87) connected
01/10/2004 03:11:59 PM  Message 004E0061 (MessageID:
<JIUQTKJMWASOTLWYPXCURQ@fastestresponse.net >) received from
pD9E51757.dip.t-dialin.net (217.229.23.87) size 2466 bytes

01/10/2004 03:11:59 PM  SMTP Server: pD9E51757.dip.t-dialin.net
(217.229.23.87) disconnected. 1 message[s] received

01/10/2004 03:11:59 PM  Attempting delivery to: User
billing@Domain.name, admin@Domain.name admin@Domain.name from
donc@boardermail.com


Notice that broadcastingtoday.biz is nowhere to be found in in the headers but 'boardermail.com' or 'fastestresponse.net' and instead of sending his junk from Korea Robert is now sending it from 217.229.23.87 which is somewhere in Germany Which is not quite how Robert 'advertises' his package on his website as apparently they all have broadcastingtoday.biz in the headers. Sorry to say i cannot see it - can you ?.

RANGE 217.224.0.0 - 217.237.161.47
netname: DTAG-DIAL15
descr: Deutsche Telekom AG
country: DE
remarks: ******************************************************************
remarks: * Abuse Contact: http://www.t-com.de/ip-abuse in case of Spam, *
remarks: * Hack Attacks, Illegal Activity, Violation, Scans, Probes, etc. *
remarks: ******************************************************************
source: RIPE
details about them
route: 217.224.0.0/11
descr: Deutsche Telekom AG, Internet service provider
address: Deutsche Telekom AG D-90492 Nuernberg Germany
phone: +49 180 5334332, fax-no: +49 180 5334252
e-mail: abuse@t-ipnet.de


So it appears he is using hacked windows pc's to send his email You see this email marketing business is very legitimate indeed. Lets be charitable and try another being the 4th October
04/10/2004 10:46:40 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) connected
04/10/2004 10:46:50 AM SMTP Server: Message 0035B9F2 (MessageID: <15910kqk7432peji$23698272w846$053kt177thb720@pituitary>) received from 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) size 2434 bytesbeing cheap

details about them

04/10/2004 10:46:51 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) disconnected. 1 message[s] received


Now thats coming from Taiwan, which certainly is not part of Korea, The next comes again from Germany and pD95D7049.dip.t-dialin.net (217.93.112.73)

So how can i say Bob Soloway (or his associates (see pdf court document)) use trojan pc's, why because I save my Bob spam, and spend some time looking at Spamcop reports.
Our Bob Soloway Spam
Date (each entry denotes a spam) 'Published'
method
Sent IP (confirmed) Origination ? (not confirmed) email it was claimed from eg is it from
BROADCASTINGTODAY.BIZ etc in the headers ?

























































































23 September 2006 196.Red-88-7-154.staticIP.rima-tde.net [88.7.154.196]) ? bogon ? AFRINIC,03B3,3rd Floor,Ebene Cyber Tower,Cyber City,Ebene,Mauritius,0001 MU Return-Path: me
6 September 2006 196.Red-88-7-154.staticIP.rima-tde.net [88.7.154.196]) neutral (gmail.com: 88.7.154.196 is neither permitted nor denied by domain of user @gmail.com) Return-Path: me
11 Jul 2006 adsl-68-88-212-155.dsl.rcsntx.swbell.net [68.88.212.155]) SPF: neutral (gmail.com: 68.88.212.155 is neither permitted nor denied by domain of user @gmail.com) Received: from hf2.freenet.de (168.104.239.56) by qzo251-p.inet.com.ua with Microsoft SMTPSVC(5.0.2195.6824); Tue, 11 Jul 2006 20:09:04 +0400 Received: from inclusivesculpttvv500 (bouffant108.154.239.136) by sunpoint.net (bgsetw246) with SMTP id <123175477641887w0prg> (Authid: BillyPlatt); Tue, 11 Jul 2006 15:16:04 -0100 From: "me @gmail.com" < me @gmail.com> To: "me " < me @gmail.com> Subject: me
n/a Listwashed it appears Sob!
31 Jan BSN-210-250-53.dial-up.dsl.siol.net (BSN-210-250-53.dial-up.dsl.siol.net [195.210.250.53]) ifkzdbsm5.eon.net.au (0.12.140.61) by tz2-jre46.interfree.it
Received: from Tykd2rkl770pg52iq (203.55.34.112)
by ztonhmvbamu870.mweb.co.zw
id <*.*.gypwgo93.mweb.co.zw @sovkhozssz7q895xxo6g>
Mason Townsend ebatlaster@uymail.com
27 January x 7 need I say more Received: from pool-70-16-232-93.rich.east.verizon.net (pool-70-16-232-93.rich.east.verizon.net [70.16.232.93])

Reply-To: "Blake Thorne" <restonparker@coolgoose.com>
From: "Blake Thorne" <monksj@fastermail.com>
2006
25 December from HSE-Ottawa-ppp157893.sympatico.ca (HSE-Ottawa-ppp157893.sympatico.ca [64.229.132.56]) mail13.mdlc.shaw.ca (138.40.128.105) by z1-jco775.valentini.net.ar
with Microsoft SMTPSVC(5.0.2195.6824);
Sun, 25 Dec 2005 01:33:52 +0100
from Y2 (xi24.200.33.185.p0.o.sxhealth.co.nz 78.57.217.168)
by mail20.z.shaw.ca (51.830.7jw3/86.25.66)
Daisy Chung rollandkrisp @fishhoo.com
4th December (3)
from pool-71-254-43-40.roa.east.verizon.net (pool-71-254-43-40.roa.east.verizon.net [71.254.43.40])

01.172.149.24 by bqpbz949-ji16.z9.pwgsc.gc.ca with DAV;
Sun, 04 Dec 2005 20:09:49 -0700
Brandon Doherty timrolland @care2.com or
tomaskoock @ cheshiremail.com
1 December (2)
from 200-122-115-170.dsl.prima.net.ar (unknown [200.122.115.170]) dns1interfree.it (150.192.91.240) by fzz5-sg42.umontreal.ca
from bednbreakfast.nu (127.0.0.1) by dnsopenface.ca
new members of staff !
Solomon@ us
Yazzie@ us
1 December (2) from h196.166.141.67.ip.alltel.net (h196.166.141.67.ip.alltel.net [67.141.166.196]) from slump (50.222.12.208) by ko4.downpour.draco.daly.adv.es
??.mnhs5-mail.peak.ditch.net.cable.rogers.com@grandeur>
Melody Hooper
24 November from 26-49-112.adsl.terra.cl (26-49-112.adsl.terra.cl [200.112.49.26])
rom week (154.232.64.159)
by jg5.mockernut.abuilding.captain.umontreal.ca
id <???.ixt767-mail.reserve.slug.net.cable.rogers.com@curiosity>
Becky Erwin donaldcrisp @ boardermail. com
24 November 26-49-112.adsl.terra.cl (26-49-112.adsl.terra.cl [200.112.49.26])
from week (154.232.64.159)
by jg5.mockernut.abuilding.captain.umontreal.ca
<?767-mail.reserve.slug.net.cable.rogers.com@curiosity>
Becky
19 November sl51B6348C.pool.t-online.hu (dsl51B6348C.pool.t-online.hu [81.182.52.140]) adv.es (115.172.122.172) by zi4-q07.interfree.it
with Microsoft SMTPSVC(6.0.1024.9818);
umontreal.ca (wzcmariahuis.be 147.205.109.90)
by sxhealth.co.nz (8.12.10/8.12.9)
WL272694 (modemcable52.76-22.ig.aaki.dk 84.42.219.182)
(authenticated bits=2)by ghi.org.il (8.12.10/8.12.9)
me !
9 November dialpool-210-214-204-58.maa.sify.net (dialpool-210-214-204-58.maa.sify.net [210.214.204.58]) ns3deacons.com.hk (35.108.67.198)
by jk3-mn05.wzcmariahuis.be
from inphomatch.com.br (127.0.0.1) by dnssympatico.ca
why i am sending spam to myself again?
8 November from host123.200-82-88.telecom.net.ar (host123.200-82-88.telecom.net.ar [200.82.88.123])from xpflwn24.web.de (4.38.5.7) by fa898-dhc.etnic.be
from dealtboyuw06 (avow96.210.127.24)
why I sent it
3 November, to 'Billing' from 200-233-176-225.xd-dynamic.ctbcnetsuper.com.br (200-233-176-225.xd-dynamic.ctbcnetsuper.com.br [200.233.176.225]) arboreal-dns.mweb.co.zw (208.48.66.146)
by aha52-i385.sxhealth.co.nz
us
16 October, I say I say I need that Japanese phase book for 'fuck off bob'. from zaqdb737afe.zaq.ne.jp (zaqdb737afe.zaq.ne.jp [219.115.122.254]) no crap Cullen, Gerry <charityinfo @coolgoose.com>
5 October, Bobs been hitting the spam filter im told, but this made it through, so yep Bobs still spamming. from OUR IP ADDRESS (unknown [202.158.187.170])
interesting ... but its really
no crap - "Mrs. Lusk" <charityinfo@ m a i l .c o m >
26 August Trojan.Spybot
domain
200216103247.user.veloxzone.com.br (200216103247.user.veloxzone.com.br [200.216.103.247]) localhost.localdomain (HELO localhost.localdomain [127.0.0.1])
by assailant.allsaintsfan.com (Mostfix) with ESMTP
billing @ 'me'
26 August hayate.inuta.ecei.tohoku.ac.jp (hayate.inuta.ecei.tohoku.ac.jp [130.34.198.77]) localhost.localdomain (HELO localhost.localdomain [127.0.0.1])
by pompous.sacmail.com (Mostfix)
me
23 August cm6.gamma40.maxonline.com.sg (cm6.gamma40.maxonline.com.sg [202.156.40.6]) 64 by zab3-aek95.vnmnh7.graffiti.net with DAV; me again, but I 'love' Robert Spam
19 August from sub51-128.uhh.hawaii.edu (sub51-128.uhh.hawaii.edu [132.160.51.128] from 72 by fjy04-l7.cfupm7.yyhmail.com with DAV; me but im apparently sending it from
hawaii.
18 August from rndf-146-55-196.telkomadsl.co.za (rndf-146-55-196.telkomadsl.co.za [165.146.55.196]) none apparently im sending his spam to myself via south africa
9 August stjhnf0123w-142163145101.nl.aliant.net (unknown [142.163.145.101])
details about them
(from qrb258cowbell@localhost)
by nj437-traceable822.pc886dcy.mailpanda.com
X-Authentication-Warning: g49-bristle04.rr516t.mailpanda.com:
Tomas Gunter
8 August hlfxns0145w-142167143103.ns.aliant.net (hlfxns0145w-142167143103.ns.aliant.net [142.167.143.103]) osvg514.inmail24.com (106) by vl4-iy831.138mail.com
from Darylyrx58f3es90ong (15) by bdugnsx473.outgun.com
Demetrius Engle xrs.net
31 July SHASTA189200.ig.com.br
(unknown [200.151.189.200])
174 by yj73-tq919.fn2.yyhmail.com with DAV;
Wed, 11 May 2005 16:43:55 -0500
graffiti.net
30 July USER.36.178.5.201.dial-ip.telemar.net.br (unknown [201.5.178.36]) from nomogram (120)
by nir397.coop.prorogue.chameleon.collegeclub.com
(InterMail vK.3.83.97.12 2-0092-283-7259-46-363936644)
with ESMTP id
<*.*.e7-mail.confluent.egg.net.cable.rogers.com@imperative>
gawab.com
29 July ppp-0-110.dts.mg (ppp-0-110.dts.mg [193.251.140.110]) cns848mcnaughton@localhost
by xmc451-immoderate969.e89ctb.spamis.net (7.68.02/3.68.81)
id d167YS66la05419
oh guess
8 July BSN-210-230-216.dsl.siol.net (BSN-210-230-216.dsl.siol.net [195.210.230.216]) mail5085.otp.merseymail.com (234) by w9-f5.merseymail.com
with Microsoft SMTPSVC(5.0.2195.6824);
Thu, 28 Jul 2005 22:28:29 +0600
Received: from GK40 (lo160.kl71.m.merseymail.com 112) by mail547.a.merseymail.com (51.4.524nqr4/0.392.081)
casino.com (spot a pattern yet?)
25 July ppp1349.va-east.my-users.ne.jp (ppp1349.va-eas 69.46.224t.my-users.ne.jp [219.100.144.49]) khzgpc3.fresnomail.com (220) by d58-b.fresnomail.com
with Microsoft SMTPSVC(5.0.2195.6824)
chloroplastfcn064 (booky144)
by fresnomail.com (sae4) with SMTP
id <181873747ta133a>
(Authid: EstherHorne);
Mon, 25 Jul 2005 11:15:37 +0300
lissamail.com
25 July pool-141-153-229-140.nwrk.east.verizon.net (pool-141-153-229-140.nwrk.east.verizon.net 92 by exdhf0-lz0.q57.xmail.net with DAV;
Mon, 25 Jul 2005 08:01:51 +0600
asheville.com
25 July pool-138-88-176-85.res.east.verizon.net (pool-138-88-176-85.res.east.verizon.net [138.88.176.85]) from 118 by vz651-r6.rllx4.myway.com with DAV;
Fri, 22 Jul 2005 18:41:57 -0400
graffiti.net
20 July pool-138-89-212-150.atc.east.verizon.net (pool-138-89-212-150.atc.east.verizon.net [138.89.212.150]) rom boyhood (12) by x7.emendable.inoffensive.belies.joinme.com
(InterMail vG.1.40.54.72 8-27735-18-701-46-05016) with ESMTP
id <*.*.nvgu5-mail.cromwell.jitter.net.cable.rogers.com@abovementioned>
lycos.com
20 July 207-18-135-4.flex.net (unknown [207.18.135.4]) assimilable-dns.doramail.com (72) by xn8-k89.doramail.com with Microsoft SMTPSVC(5.0.2195.6824);
Tue, 19 Jul 2005 20:44:20 -0700
fresnomail.com
18 July Not yet convinced about Bob ? see this
17 July 201-011-224-137.cslce7007.
dsl.brasiltelecom.net.br
(unknown [201.11.224.137])
koreamail.com
17 July Trojan.Spybot
domain
a84-0-197-145.adsl-pool.axelero.hu (a84-0-197-145.adsl-pool.axelero.hu
[84.0.197.145])
talcum-dns.allsaintsfan.com (68) by kod81-sr23.graffiti.net with Microsoft SMTPSVC(5.0.2195.6824);
Fri, 15 Jul 2005 21:46:03 -0700
canada-11.com
17 July 200-126-91-229.bk6-dsl.surnet.cl (200-126-91-229.bk6-dsl.surnet.cl [200.126.91.229])
BAD HEADER MIME error:
error: unexpected end of preamble
Received: from mailpanda.com (20) by f64-u749.usa-11.com with Microsoft SMTPSVC(8.4.3737.5659);
Sun, 17 Jul 2005 01:41:45 +0600
Received: from merseymail.com (outgun.com 112)
by keromail.com (8.12.10/8.12.9) with ESMTP id n09OLZ147
for <?@?.?>; Sat, 16 Jul 2005 20:43:45 +0100 (EST)
(envelope-from freddarlong@joinme.com)
Received:
from ZSS2449211974 (modemcable3.8-717.dy.linuxmail.org 216)
(authenticated bits=9)
by marketweighton.com
grafiti.net
16 July rom mail4934.oxfrd.mailpanda.com (176) by q931-h91.mailpanda.com with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 16 Jul 2005 00:36:27 -0500
Received: from D84 (h197.gdy52.rm.mailpanda.com 31)
by mail28.mbc.mailpanda.com (2.31.52ae290/6.833.781)
with SMTP id iiz8U3MBnj1;
Sat, 16 Jul 2005 01:35:27 -0400
outgun.com
10 July from pool-138-88-90-162.res.east.verizon.net (pool-138-88-90-162.res.east.verizon.net [138.88.90.162]) from cochrane-gp454.credent.koreamail.com (230)
by p8-pqd677.koreamail.com with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 09 Jul 2005 21:02:33 -0300
" Tracey Potts " <billpaxton@casino.com>
2 July 85-49-161-26.mad2.adsl.uni2.es (85-49-161-26.mad2.adsl.uni2.es [85.49.161.26] mail360.gdoo.spamis.biz (177) by je4-lz4.spamis.cc
with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 02 Jul 2005 07:39:06 +0300
Received: from MZ13 (maf207.vd639.rt.spamis.cc 95)
30 June 12-215-214-8.client.mchsi.com
(12-215-214-8.client.mchsi.com [12.215.214.8])
Received:from swish (112)
by ts17.ahmedabad.congressional.weave.spamis.biz
(InterMail vZ.4.12.63.75 2-2362-9-5-6-0518116160) <***-mail.befell.respire.net.cable.rogers.com@womanhood>
14 June 61-230-132-106.dynamic.hinet.net (61-230-132-106.dynamic.hinet.net [61.230.132.106]) from sq8bedraggle@localhost)
by ebz496-duncan073.b181ui.spamis.org (6.44.34/7.29.23)
id gzk33BU78emb71;
Mon, 13 Jun 2005 18:22:01 -0700 GMT
X-Authentication-Warning: hny26-decompression8.hu819siy.spamis.org:
u1electret set sender to contact@spamis.org using -j

no
6 June Received: from 22 details about them 0-133-87-182.HINET-IP.hinet.net (220-133-87-182.HINET-IP.hinet.net [220.133.87.182]) Received: from xih7.cashette.com (91)
by bqm636-kyy.lissamail.com with Microsoft SMTPSVC(5.0.2195.6824);
Received: from treasonouspathogenicx1 (swaziland148)
by ureach.com (dvv8) with SMTP
id <5753464wls91209lj>
(Authid: JacobJohnson);
no
31 March unknown [61.68.161.165] cypcsiz7.centralpets.com (254.132.0.249) by i362-dni.care2.com
cuttlefishwakeupvh96 (countenance112.192.108.162)
by marchmail.com (ams7) (Authid: MercedesDuncan);
No and im not telliing you
19 March * Back in business !
p3020-ipad04sinnagasak.nagasaki.ocn.ne.jp (p3020-ipad04sinnagasak.nagasaki.ocn.ne.jp [220.107.80.20])
224.155.244.156 by dj95-v53.uaeq570.bolt.com with DAV >No it was not and I am not telling you anymore
Status: Listwashed (no I did not opt out)
This section is now 'history' *
* unless Robert starts spamming the technical contacts
when he rotates his domain name to something other
than broadcastemail.us
26 February 201-255-30-155.mrse.com.ar ([201.255.30.155]) xhufgn682.bluebottle.com (189.163.92.27) by v5-vvx10.bluebottle.com
from Miawvt09g850de69cax (50.55.24.125) by wpm10.bluebottle.com
Siegel <rfrasier0@lycos.com>
15 February Trojan.Spybot
domain
[200.11.78.138] from jppxyvrzp3.bolt.com (62.36.232.228) by hvy5-qx50.boardermail.com
from Todx0bgs557h2grb (128.47.76.80) by swksfr019.bolt.com
shawnm@surfy.net
13 February 83.151.137.114 from bst4.bolt.com (84.182.60.76) by ek925-o42.boardermail.com
Dougrb0jve53zos056fwx (58.150.236.216) by ifnlsmsgo604.boardermail.com
Doug Heller roddy@bolt.com
12 February adsl-69-209-114-1details about them 69.dsl.klmzmi.ameritech.net [69.209.114.169] from badland-dns.bolt.com (192.74.0.223) by du6-hu2.boardermail.com Clifford Boone <patknowles@collegeclub.com>
10 February [201.10.157.213] from gilkfibewgmf026.bluebottle.com (192.179.137.224) by b6-z60.boardermail.com
from Earnestinevse373xrz183dlr4il (99.60.64.88) by wylvrszhm333.bolt.com
Earnestine Land <monksj@fastermail.com>
8 February [211.211.41.168] from bluebottle.com (6.64.71.72) by np7-duy81.bolt.com
from boardermail.com (bluebottle.com 30.206.102.196) by boardermail.com
(modemcable89.0-9.bh.bluebottle.com 216.192.123.177) by bluebottle.com
(envelope-from perryedwards@iamit.com)"
Delmer Grant <mikebono@myway.com>
3 February CPQ13941688621 ([4.31.111.51] from dns72boardermail.com (182.234.241.234) by hd02-lpu48.bolt.com
from bolt.com (127.0.0.1) by dnsboardermail.com
3 February ACD48E37.ipt.aol.com ([172.212.142.55]) from boujko6.bluebottle.com (151.136.192.89) by b32-am.bluebottle.com
from riemannrestrooml755 (katie243.254.44.64) by boardermail.com (dy7)
Guy Shipley annalee@blazemail.com
1 February ? Trojan.Spybot
domain
56.137.99-84.rev.gaoland.net [84.99.137.56] from bolt.com (240.50.226.183) by rj4-syj740.boardermail.com
from boardermail.com (bolt.com 208.20.136.188) by bolt.com
from SD793154391534452 (modemcable360.4208-9.ya.bluebottle.com 50.240.80.9) (authenticated bits=6) by bolt.com (envelope-from shawnm@surfy.net)"
Omar Conner <mikegraves@138mail.com>
31 January dilayt.customers.pfts.com
[213.133.161.226]
dns312boardermail.com (58.156.249.44) by odf6-p78.bluebottle.com
from boardermail.com (127.0.0.1) by dnsboardermail.com
Ian Dickson stevelitz@fastermail.com
31 January 200-147-136-99.tlm.dialuol.com.br ([200.147.136.99]) dns312boardermail.com (58.156.249.44) by odf6-p78.bluebottle.com
"from boardermail.com (127.0.0.1) by dnsboardermail.com
Ian Dickson stevelitz@fastermail.com
31 January [63.170.38.115] wmzhmbzts36.boardermail.com (168.243.32.208) by id438-a.boardermail.com
benefactorbrigq3 (bid226.180.19.232) by bluebottle.com (ljvoa625)
(Authid: PercyChung)
Percy Chung christel@dbzmail.com
30 January 202.97.143.253 mail3691.fnsy.boardermail.com (155.108.135.40) by f71-vw048.boardermail.com
from PTIBM52 (gfz8.173.164.64.afb167.zcp.bolt.com 96.137.96.124) by mail775.jn.boardermail.com
Troy Reyna" <todd82@bolt.com>
29 January 182.red-217-217-138.user.auna.net ([217.217.138.182] from dingy (16.219.44.19) by st114.dave.avenge.diffractometer.boardermail.com
. <*.*.vrux0-mail.apposite.courtroom.net.cable.rogers.com@anomalous>
Glenn Garrett harveypar@yyhmail.com
29 January from F3P1L3 ([80.218.124.42]) >from sdp856.bluebottle.com (38.164.30.184) by gy3-di68.bluebottle.com
from Janetyv429h41zv571ywi (160.208.173.79) by svqvcntqygfac410.boardermail.com
Janet Land oharam@asianavenue.com
28 January 213.37.113.156 mz35.bolt.com 181.200.152.116 by ot40-i.bolt.com
from bandwidthcarsonre239 (bench80.47.19.141) by bluebottle.com (hriie8)
Craig Hathaway mikebono@myway.com
28 January 80.97.138.1602/07 176.16.24.157 by ug2-p7.y5.boardermail.com with DAV Mrs Goldstein robliv@snail-mail.net
22 Janaury host74-57.pool80182.interbusiness.it 80.182.57.74 dns744bolt.com (208.56.236.172) by qc3-bf70.bolt.com
from bolt.com (127.0.0.1) by dnsboardermail.com
Kate Maddox barryfitz@catholic.org
21 January 42.85.97-84.rev.gaoland.net 84.97.85.42 basidiomycetes-g908.extendible.bolt.com (192.128.8.248) by ty65-xf452.bolt.com Guadalupe Medina <lonnie@mail2artist.com>
21 January 42.85.97-84.rev.gaoland.net 84.97.85.42 180.83.244.64 by owogk30-xc7.uvkc2.boardermail.com with DAV Jane Solomon" <oharam@asianavenue.com>
21 Janaury 0-177-130.onocable.ono.com 84.120.177.130 dns09bolt.com (169.198.209.116) by q797-t47.boardermail.com Randell Shirley
18 January 195.146.59.57 from plcqloh3.bolt.com (84.0.40.64) by phq8-jrb.bluebottle.com
rubberyautomobilevgr8 (beauteous118.184.198.90) by boardermail.com (pbsir72)
Judith " <jonlowry@asiamail.com>
18 January 82.101.184.32 taus353.bluebottle.com (226.102.86.240) by nnz0-ro6.boardermail.com
(132.112.128.187) by iuavnfnpfgdi12.bluebottle.com
Mandy " <scottroeder@budweiser.com>
17 January (1) Trojan.Spybot
domain
62.59.34.226 mail9000.mjtox.boardermail.com (243.64.0.212) by o371-np9.boardermail.com
KFK7 (ptm37.192.8.206.xwuki43.f.bluebottle.com 172.247.110.221) by mail2.pg.boardermail.com (91.251.285r554/10.0.67)
Melisa Sanders" <shawnm@surfy.net>
16 January (1) 172.182.12.83 250.209.48.199 by qiq6-s604.hurz6.bolt.com with DAV; Beatriz Paige <marykotch@outgun.com>
15 January (1) [80.117.93.169] from czarina (30.32.120.148) by sl399.guise.monad.know.bluebottle.com Preston Metcalf <tomay@outgun.com>
14 January (1) wll-16-pppoe033.t-net.net.ve ([200.31.129.33]) (from 63inaudible@localhost) by 15-cataclysmic99.601.bolt.com Ignacio <allgoods@cardtown.com>
14 January (1) 202-63-181-63.broadband.isp.exatt.net ([202.63.181.63]) yearn (206.237.88.1) by 07.counterproposal.meadowland.holman.boardermail.com Sheila " <davidploy@marchmail.com>"
13 January
(1)
200.31.151.11 (187.16.164.29) by 392.declare.reformatory.panjandrum.bluebottle.com Connie " <rfrasier0@lycos.com>"
10 January dup-200-65-205-4.prodigy.net.mx [200.65.205.4] 45.104.37.240 by 200.65.205.4 Ernest Braun <timdommer@collegeclub.com>
5 January 2005 (1) client-200.121.251.53.speedy.net.pe ([200.121.251.53])? mail492.xs.boardermail.com (144.88.192.144) by sh686-qv1.bolt.com
(ob62.93.216.154.qfgwp590.t.bolt.com 142.117.160.184) by mail5.q.bluebottle.com
Edwin Bond" <jaredb@graffiti.net>
5 January 2005 (1) [200.208.143.64] orig 72.190.186.160 by 200.208.14mixailovich@tekcom.ru3.64 Morgan Santiago" <joeblake@emailaccount.com>
5 January 2005 (1) WLL-66-pppoe073.t-net.net.ve ([200.35.72.73]) 236.184.234.144 by 200.35.72.73 Valentin Palacios" <jongotti@shadango.com>
31 December (1) 222220.bsb.virtua.com.br ([200.167.222.220]) depressible-z36.cuprous.bolt.com (162.156.110.252) by x289-pd875.boardermail.com "Cherie Johnston <jimmack@marchmail.com>"
31 December (1) from d012181.adsl.hansenet.de224.155.244.156 by dj95-v53.uaeq570.bolt.com with DAV ([80.171.12.181] from serology-dns.bolt.com (251.38.97.9) by lq7-yey0.bolt.com "Tia Varner <herbertevans@hamptonroads.com>"
31 December (1) dialin-212-144-190-010.arcor-ip.net ([212.144.190.10]) from gw27revert@localhost) by e56-tananarive09.my09qtf.boardermail.com Karen Sams <jaredb@graffiti.net>"
9 December
(all three)
([164.77.173.11]) from cervix (140.216.45.43) by ku235.rainfall.timothy.liquefaction.bolt.com "Leta Purcell" <donaldcrisp@boardermail.com>"
29 December (all three) from CEMAG-SERVER ([200.255.104.6]) "from 198.110.36.172 by 217.253.207.181" mixailovich@tekcom.ru No but its both a boy and a girl say hi to "Jami Simons" and <timdommer@collegeclub.com>"
25 December
(all three - somebody always 'works' on xmas)
Static-IP-cr200118116224.cable.net.co ([200.118.116.224]) 200.118.116.224 No its - " Mckinney" <tomprowe@graffiti.net>"
22 December (all three) 112-52-89.adsl.terra.cl ([200.89.52.112]) behind.doit.org ([250.50.248.144] helo=infamous.ostracism.doit.org Try "Tricia Darling" <evansjayme@kittymail.com>"
>21 December
(all three)
Trojan.Spybot
domain
from 202-149-43-251.broadband.isp.exatt.net ([202.149.43.251] mta1.uhyjqgo.ssl.bluebottle.com) by mta649.mail.swl.boardermail.com by mta031.mail.comfort.boardermail.com Well we are getting warmer its - "Denise Duncan" <jesscollins@surfy.net>"
21 December
(all three)
host122-154.pool80181.interbusiness.it 80.181.154.122 from (mta1.pijvmfw.ssl.snail-mail.net) by mta649.mail.swl.netster.com by mta272.mail.protein.antisocial.com " Talbot" <katief@mail2katie.com>
21 December (all three) 17924635.rjo.virtua.com.br (200.179.246.35) from yeah.doit.org 50.216.240.120 No its "Odell Hubbard" <bakerf@fishhoo.com>"
15 December (all three) usr092.pial056-01.wpc.im.wakwak.ne.jp ([211.132.180.92]) from huckster.striker.cl ([93.72.200.44] helo=mail.uccangel.org)
by smtp0.esmp.cl
No its - Mai Walters" <rawlings@postmark.net>
10 December 2004 203-173-51-128.dyn.iinet.net.au ([203.173.51.128]) iy13.outgun.com (139.16.90.52) by iwv72-use.bolt.com This column was added for the fun of it.
10 December 2004 202-74-218-156.ue.woosh.co.nz ([202.74.218.156]) iy13.outgun.com (139.16.90.52) by iwv72-use.bolt.com
10 December 2004 pm3-4-7.hillsboro.mwt.net ([207.190.85.7]) uf7-stir2.b50wul.blazemail.com
10 December 2004 202-74-218-156.ue.woosh.co.nz ([202.74.218.156]) uf7-stir2.b50wul.blazemail.com

I will update this when new Junk from Robert comes in - Just that he loves sending me this 'gold'. Further proper examples of Roberts spams (and to view his 'fortune 100 client' list) can be seen in experiment 1 , and experiment 2.

Domain Owner spam,

I've done some fun stuff with spam they get, but its time to stop but i will continue to list Bobs spam here

Bob Soloway Domain Owner spam Analysis
6 September -text only
nice... 

email advertise like this to 8,000,000 people this week for free..

http://www.broadcastemailinc.com/






the above noncommercial offer is only for noncommercial
charities only.  press on charity info on our web site for full
and complete details. this offer is not a commercial service 
and is not at all for sale or lease or trade of any kind.
11 July
    ??-Received: f338169d6d4450e3f72c2fa47c4e86b6ecf9322e
Delivered-To: ?@gmail.com
Received: by 10.78.123.3 with SMTP id v3cs31932huc;
        Tue, 11 Jul 2006 08:17:10 -0700 (PDT)
Received: by 10.36.118.8 with SMTP id q8mr7333176nzc;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Return-Path: < me @gmail.com>
Received: from adsl-68-88-212-155.dsl.rcsntx.swbell.net (adsl-68-88-212-155.dsl.rcsntx.swbell.net [68.88.212.155])
        by mx.gmail.com with SMTP id c12si2063739nzc.2006.07.11.08.17.08;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Received-SPF: neutral (gmail.com: 68.88.212.155 is neither permitted nor denied by domain of gmail.com)
X-Message-Info: ONZUqZXI77morFicuQZzx921iwq489JQW73QZXpcyMc
Received: from hf2.freenet.de (168.104.239.56) by qzo251-p.inet.com.ua with Microsoft SMTPSVC(5.0.2195.6824);
	 Tue, 11 Jul 2006 20:09:04 +0400
Received: from inclusivesculpttvv500 (bouffant108.154.239.136)
          by sunpoint.net (bgsetw246) with SMTP
          id <123175477641887w0prg>
          (Authid: BillyPlatt);
          Tue, 11 Jul 2006 15:16:04 -0100
From: "me @gmail.com" <me @gmail.com>
To: "me " <me @gmail.com>
Subject: me
Date: Tue, 11 Jul 2006 11:11:04 -0500
Message-ID: <327f214vr629$44cio50f399$524sj88eazg@mediterraneandao699>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--30278814625304915155"

----30278814625304915155
Content-Transfer-Encoding: quoted-printable

<HTML>
<HEAD> STYLEBODY {FONT-FAMILY: "Arial"}TT {FONT-FAMILY: "Courier New"}BLO=
CKQUOTE.CITE {PADDING-LEFT: 2.6em; MARGIN: 0px; BORDER-LEFT: 0px solid}
SPAN.TABOOHEADER {DISPLAY: none} </STYLE> <META content=3D"MSHTML 6.00.2712.=
300" name=3DGENERATOR </HEAD> <BR> <BR>
<body bgcolor=3D#6666FF> <table bordercolor=3Dwhite cellSpacing=3D0 cellpad=
ding=3D0 width=3D750 align=3Dcenter bgcolor=3D#ffffff border=3D2 tbody t=
r td bgcolor=3D#003399 div align=3Dcenter table cellspacing=3D0 cellpad=
ding=3D10 width=3D"100%" border=3D0 tbody tr> td bgcolor=3D#000000>div =
align=3Dcenter> <B 
BR> <a href=3D"http://www.emarketingcorp.cn/"> <img src=3D"http://static.fl=
ickr.com/46/124948285_d9671caeb7_m.jpg"> /I
font face=3D"arial, helvetica, sans-serif" font size=3D2 color=3Dgray B=
R> BR I Charity/Non-Profit Organization Contact Only:br font color=3Dwh=
ite size=3D4>font color=3DwhiteLet The World Know About Your Organizatio=
n...BRa href=3D"http://www.emarketingcorp.cn/"></I><font color=3Dyellow=
><BR><font size=3D10>Click to Advertise Your Site toBR8,000,000 Internet=
 Users/Afont color=3Dwhite>
<font size=3D5><font color=3Dwhite><br>...Starting Within 24 Hours!<br>
<br>font color=3Dred> b>font color=3Dyellow>=3D> u>a href=3D"http://w=
ww.emarketingcorp.cn/">font color=3Dred> F-R-E-E TODAY ONLY/A>/U> font=
 color=3Dyellow><=3DBRBRfont color=3Dgray>font size=3D1>/U>ICLICK=
 ON "CHARITY INFO" ON OUR CORPORATE WEB SITE FOR FULL DETAILS ON THIS NON-=
COMMERCIAL OFFER.BR/UThis Non-Commercial Email and Non-Commercial Emai=
l Offer Have a Primary Sole Purpose to Assist Charity & Non-Profit Organiz=
ations Only.BR
/body /html
----30278814625304915155--

Notice the girly picture on flickr

date: 29 March 2006
Return-Path: <JanellWeeks3@montevideo.com.uy>
Received: from Q-SI3TG06W0SN5N (eu100-163-8.clientes.euskaltel.es [82.130.163.8])
Received-SPF: fail (gmail.com: domain of JanellWeeks3@montevideo.com.uy does not designate 82.130.163.8 as permitted sender)
Received: from wrneer4.atlas.cz (211.88.172.41) by ox3-ckl.zmail.ru with Microsoft SMTPSVC(5.0.2195.6824);
From: "Customer Support Department" <JanellWeeks3@montevideo.com.uy>

Notes:
Bob Soloway is called JanellWeeks3 somewhere in south america (if my geography is up to speed)
It was sent from spain (unchecked)
It failed SPF
the cz line looks like garbage - looks like China
Looks like an microsoft exchange open proxy (no mailer id though)

This is the world of Bob Soloway three continents in one email - full spam is numbered 1418 on the web pages listed and linked to elsewhere.

next ...
Recent spamcop reports.

some recent spamcop reports with headers in (stored to) - I am parsing what i can since these are Bobs spams its interesting to note how there geting delivered, my lack of recent Bob specific spam means this is something you can do to and submit for entry to this page - yes you too can help.
Spam Cop reports seen
Date From IP Where.... Has
28 May 2007 cc Spamcop report(s) 71-94-129-71.static.mtpk.ca.charter.com ([71.94.129.71])
cm51-55.liwest.at ([212.33.51.55])
static-76-160-230-85.dsl.cavtel.net ([76.160.230.85])
[201.116.95.99] (helo=customer-201-116-95-99.uninet-ide.com.mx)
usa x2, austria,mexico
28 May 2007 cc Spamcop report(s) 74-133-25-74.dhcp.insightbb.com ([74.133.25.74])usa
26 May 2007 cc Spamcop report(s) static-76-160-233-86.dsl.cavtel.net ([76.160.233.86])
catv-50639b78.catv.broadband.hu ([80.99.155.120])
usa,hungary
26 May 2007 cc Spamcop report(s) 89.0.77.203.dynamic.barak-online.net ([89.0.77.203])
blk-222-38-119.eastlink.ca ([24.222.38.119])
cepci-02p24-160.ppp18.odn.ad.jp ([210.188.43.160])
Isreal,Canada and Japan Thank you ! map4.html.
25 May 2007 cc Spamcop report(s) 66-215-243-156.dhcp.rvsd.ca.charter.com ([66.215.243.156])
72-161-137-155.dyn.centurytel.net ([72.161.137.155])
Usa x 2
23 May 2007 cc Spamcop report(s) afontenayssb-153-1-52-104.w86-198.abo.wanadoo.fr ([86.198.3.104])
c-67-188-63-88.hsd1.ca.comcast.net ([67.188.63.88])
cgy183.neoplus.adsl.tpnet.pl ([83.30.252.183])
24-183-208-162.dhcp.jcsn.tn.charter.com ([24.183.208.162])
232-169.dorm.ccu.edu.tw ([140.123.232.169]) x 2
74-139-241-79.dhcp.insightbb.com ([74.139.241.79])
France,USA,Poland,USA,Taiwan,usa Thank you.
22 May 2007 cc Spamcop report(s) wireless138-40.crosswind.net ([12.183.138.40]) usa (at&t NJ).
21 May 2007 cc Spamcop report(s) cpe-24-210-211-72.woh.res.rr.com ([24.210.211.72])
87-205-46-0.adsl.inetia.pl ([87.205.46.0])
catv-566516dc.catv.broadband.hu ([86.101.22.220])
usa (roach runner),poland,hungary Thank you !.
18 May 2007 cc Spamcop report(s) 88-139-175-102.adslgp.cegetel.net ([88.139.175.102])
66-215-252-43.dhcp.rvsd.ca.charter.com ([66.215.252.43])
p3232-ipad201niho.hiroshima.ocn.ne.jp ([58.90.9.232])
p3126-ipbf13fukuhanazo.fukushima.ocn.ne.jp ([124.85.245.126])
france,usa,japan,japan Thank you ! map4.html.
15 May 2007 cc Spamcop report(s) dyn-89.136.24.214.nt.upcnet.ro ([89.136.24.214])
89-219-45-62.wx.norby.ee ([89.219.45.62])
Romania and Estonia Thank you ! map4.html.
15 May 2007 cc Spamcop report(s) cpe-121-210-178-76.nsw.bigpond.net.au ([121.210.178.76])
aplessis-bouchard-151-1-25-230.w82-121.abo.wanadoo.fr ([82.121.183.230])
Australia,France x2
14 May 2007 cc Spamcop report(s) [64.253.12.206] (helo=64.253.12.206.dyn-cm-pool82.pool.pool.hargray.net)
static-66-16-143-245.dsl.cavtel.net ([66.16.143.245])
cpe-65-185-143-3.indy.res.rr.com ([65.185.143.3])
eu83-213-142-218.clientes.euskaltel.es ([83.213.142.218])
68-185-179-11.dhcp.mdsn.wi.charter.com ([68.185.179.11])
adsl-64-169-186-231.dsl.snfc21.pacbell.net ([64.169.186.231])
Mostly american usa,usa,usa (roach runner),spain,usa,usa - Thank you ! map4.html.
13 May 2007 cc Spamcop report(s) 66-169-109-186.dhcp.ftwo.tx.charter.com ([66.169.109.186])
static-76-160-230-85.dsl.cavtel.net ([76.160.230.85])
cable-1835.ctcinet.com ([72.20.87.44])
Three from the usa Thank you !
11 May 2007 cc Spamcop report(s) 148.21.57.59.broad.qz.fj.dynamic.163data.com.cn ([59.57.21.148])
pc-147-84-44-190.cm.vtr.net ([190.44.84.147])
hps550.kodunet.webs.ee ([212.27.234.45])
cable-1835.ctcinet.com ([72.20.87.44])
China,Chile,Estonia,USA map4.html Thank you !
8 May 2007 cc Spamcop report(s) host-85-27-94-181.brutele.be ([85.27.94.181])
catv-56651523.catv.broadband.hu ([86.101.21.35])
Belgium (great food) and Hungary map4.html Thank you ! more spamcop reports always welcome.
6 May 2007 cc Spamcop report(s) [221.143.40.133] (helo=ns.nsumbiz.com)
213-216-234-88-tuira-tr1.suomi.net ([213.216.234.88])
221x241x48x237.ap221.ftth.ucom.ne.jp ([221.241.48.237])
rbi0304.giga-dns.com ([193.37.152.114])
Korea,Finland,(Tioko)Japan,(Munchen) Germany map4.html Thank you ! more spamcop reports always welcome.
4 May 2007 cc Spamcop report(s) cmu-24-35-35-34.mivlmd.cablespeed.com ([24.35.35.34])
pc-65-33-120-200.cm.vtr.net ([200.120.33.65])
[69.77.192.162] (helo=69-77-192-162.dhcp-dsl.d1.wall.gwtc.net)
[202.42.49.194] (helo=49-42-202.rev.pacific.net.sg)
host-223-66-107-208.midco.net ([208.107.66.223])
static-76-160-238-52.dsl.cavtel.net ([76.160.238.52])
80-218-87-194.dclient.hispeed.ch ([80.218.87.194])
061238149085.ctinets.com ([61.238.149.85])
wimax237.telbeskid.com.pl ([89.174.30.237])
202.141.145.242] (helo=delhi-203.197.220-238.vsnl.net.in)
p6109-ipad26souka.saitama.ocn.ne.jp ([220.104.68.109])
auj66.internetdsl.tpnet.pl ([83.18.9.66])
24-205-117-238.dhcp.hspr.ca.charter.com ([24.205.117.238])
Maryland USA,Chile,SD USA,Singapoure,USA 'mid' somewhere,VA - USA. Swiss,Hong Kong (china),Poland,India,Japan,Poland,USA Thank you ! more spamcop reports always welcome.
1 May 2007 cc Spamcop report(s) [202.164.180.140] (helo=mail.globaltranssolutions.com)Philippines
30 April 2007 cc Spamcop report(s) d211-116-254-203.rev.krline.net ([211.116.254.203])
chello087207240021.chello.pl ([87.207.240.21])
cpe-76-174-168-84.socal.res.rr.com ([76.174.168.84])
Korea,Poland and USA thank you
29 April 2007 cc Spamcop report(s) adsl-75-36-5-127.dsl.bcvloh.sbcglobal.net ([75.36.5.127])USA thank you !
28 April 2007 cc Spamcop report(s) c934f0bb.virtua.com.br ([201.52.240.187])
74-139-213-225.dhcp.insightbb.com ([74.139.213.225])
ns1.simba.nl ([195.140.241.2]),
[203.197.138.189] (helo=illchn-static-203.197.138.189.vsnl.net.in)
Brazil,USA,Netherlands and India. map4.html thank you for spamcop reports.
25 April 2007 cc Spamcop report(s) host241-143-static.115-81-b.business.telecomitalia.it
s01060019660a1c36.cg.shawcable.net ([70.73.145.194])
Itally, and USA. map4.html thank you for spamcop reports.
23 April 2007 cc Spamcop report(s) 239-179-235-201.fibertel.com.ar ([201.235.179.239])
[194.126.193.79] (helo=hosted-by.adulteuhost.com)
222.160.209.210.static.tcol.com.tw ([210.209.160.222])
202.61.28.106.static.zoot.jp ([202.61.28.106])
Argentina,Netherlands (nl) - been here before and Tiawan, more Japan. thank you for spamcop reports.
22 April 2007 cc Spamcop report(s) softbank219210248018.bbtec.net ([219.210.248.18])
cpe-72-224-46-40.nycap.res.rr.com ([72.224.46.40])
200-210-104-204.powerhosting.com.br ([200.210.104.204])
Japan,USA,Brazil thank you for spamcop reports.
21 April 2007 cc Spamcop report(s) eu85-85-66-75.clientes.euskaltel.es ([85.85.66.75])Spain thank you for spamcop reports.
20 April 2007 cc Spamcop report(s) 058177198141.ctinets.com ([58.177.198.141])
static-68-162-94-236.phil.east.verizon.net ([68.162.94.236])
p1238-ipbf202kyoto.kyoto.ocn.ne.jp ([221.188.245.238])
59-124-88-201.hinet-ip.hinet.net ([59.124.88.201])
[195.214.44.30] (helo=control.primustel.es)
Hong Kong (China),usa,Japan,Taiwan,Spain map4.html
18 April 2007 cc Spamcop report(s) c-67-184-143-33.hsd1.il.comcast.net ([67.184.143.33]) Comcast (usa) Thank you for Spam cop reports
17 April 2007 cc Spamcop report(s) p4123-ipbf2304marunouchi.tokyo.ocn.ne.jp ([122.17.182.123])
cpc5-ipsw2-0-0-cust692.colc.cable.ntl.com ([86.3.202.181])
Japan, and England. map4.html Thank you for Spam cop reports
16 April 2007 cc Spamcop report(s) s010600c04f73e474.ok.shawcable.net ([24.70.138.90])
[194.126.193.79] (helo=hosted-by.adulteuhost.com)
85-210-226-165.dsl.pipex.com ([85.210.226.165])
adsl-70-238-37-145.dsl.irvnca.sbcglobal.net ([70.238.37.145])
24-196-93-198.dhcp.mdsn.wi.charter.com ([24.196.93.198])
69-dzi-2.acn.waw.pl ([62.121.65.69])
122x211x57x56.ap122.ftth.ucom.ne.jp ([122.211.57.56])
usa shawcable, lots of america, England, Netherlands (adult hosting), Poland, and Japanmap4.html Thank you for Spam cop reports
13 April 2007 cc Spamcop report(s) 088156103113.stk.vectranet.pl ([88.156.103.113])
24-196-86-114.dhcp.mdsn.wi.charter.com ([24.196.86.114])
Poland and USA (charter)map4.html Thank you for Spam cop reports
11 April 2007 cc Spamcop report(s) [86.73.217.213] (helo=213.217.73-86.rev.gaoland.net)
adsl-074-228-246-254.sip.mem.bellsouth.net ([74.228.246.254])
France, Bellsouth (usa)map4.html Thank you for Spam cop reports
8 April 2007 cc Spamcop report(s) p1116-ipbf906osakakita.osaka.ocn.ne.jp ([58.90.246.116]) Japan (no precise map location available) Thank you for Spam cop reports
5 April 2007 cc Spamcop report(s) rrcs-65-31-75-30.central.biz.rr.com ([65.31.75.30])
24.115.211.0.res-cmts.sth.ptd.net ([24.115.211.0])
s010600a0833725e7.ca.shawcable.net ([70.77.84.12])
cm-85-152-224-50.telecable.es ([85.152.224.50])
221x251x241x156.ap221.ftth.ucom.ne.jp ([221.251.241.156])
h460aeb11.area7.spcsdns.net ([70.10.235.17])
68-114-34-182.dhcp.gwnt.ga.charter.com ([68.114.34.182])
usa x 2, canada, spain, japan, usa, usa (charter.com) map4.html Thank you for Spam cop reports
3 April 2007 Domain owner friend cc us Bobs spam n219076187246.netvigator.com ([219.76.187.246]) USA, Hong Kong (China). map4.html
2 April 2007 cc Spamcop report(s) 200-161-67-61.dsl.telesp.net.br ([200.161.67.61])
193.red-62-57-7.user.auna.net ([62.57.7.193])
68-184-132-220.dhcp.stbr.ga.charter.com
dsl54028582.pool.t-online.hu ([84.2.133.130])
Brazil, Spain or the Catalunya region (go poum), Charter.com usa, Hungary
Thank you for the spamcop reports. map4.html
31 March 2007 cc Spamcop report(s) 200-207-58-251.dsl.telesp.net.br ([200.207.58.251] Brazil
Thank you for the spamcop reports.
31 March 2007 Domain owner friend cc us Bobs spam 200-127-43-32.cab.prima.net.ar ([200.127.43.32]) see map4.html Argentina
.
30 March 2007 cc Spamcop report(s) 82.8.5546.static.theplanet.com ([70.85.8.130])
vfc69-2-82-244-155-179.fbx.proxad.net ([82.244.155.179])
bsn-142-59-112.dial-up.dsl.siol.net ([89.142.59.112])
66-190-165-159.dhcp.crtn.ga.charter.com
s0106000c41222902.pk.shawcable.net ([70.66.141.148])
[189.170.26.171] (helo=dsl-189-170-26-171.prod-infinitum.com.mx)
[190.49.126.135] (helo=190-49-126-135.speedy.com.ar)
201-68-132-159.dsl.telesp.net.br ([201.68.132.159]),[201.63.213.60] (helo=201-63-213-60.customer.tdatabrasil.net.br)
[200.153.113.205] (helo=200-153-113-205.customer.tdatabrasil.net.br)
201.47.144.13.adsl.gvt.net.br ([201.47.144.13])
USA theplanet.com (located china?) map4.html, france,si,usa,ca,mexico,Argentina,Brazil x4
Thank you for the spamcop reports.
27 March 2007 cc Spamcop report(s) stm-ftth-1452.brightohio.net ([66.209.139.27]
66-189-65-77.dhcp.oxfr.ma.charter.com ([66.189.65.77])
c-24-7-77-200.hsd1.ca.comcast.net ([24.7.77.200])
p50864ee6.dip.t-dialin.net ([80.134.78.230])
dynamic-ip-cr200118100194.cable.net.co ([200.118.100.194])
69-11-44-112.regn.hsdb.sasknet.sk.ca ([69.11.44.112])
USA bright.net OH map4.html, Charter.com USA, Comcast USA. Germany,Columbia, and Canada.
23 March 2007 Domain owner friend cc us Bobs spam [71.91.8.101] (helo=unknown.lds.al.charter.com) Charter.com map4.html.
22 March 2007 cc Spamcop report(s) p549a17e9.dip0.t-ipconnect.de ([84.154.23.233]) Germany map4.html too
19 March 2007 cc Spamcop report(s) pc-238-131-45-190.cm.vtr.net ([190.45.131.238]) Chilly ? no its Chile added to the beta map4.html too
17 March 2007 cc Spamcop report(s) 84.120.137.159.dyn.user.ono.com ([84.120.137.159])
ip-81.180.65.99.renam.md ([81.180.65.99])
dslb-088-070-088-092.pools.arcor-ip.net ([88.70.88.92])
Spain ,Moldova republic, new passport stamp ! ,Germany.
15 March 2007 Domain owner friend cc us Bobs spam cpe-70-122-11-45.houston.res.rr.com ([70.122.110.45]) Roach runner in Texas, USA
13 March 2007 cc Spamcop report(s) 66-189-124-71.dhcp.oxfr.ma.charter.com ([66.189.124.71]) dsl or d/up client usa.
12 March 2007 cc Spamcop report(s) user-387gkpg.cable.mindspring.com ([208.120.83.48])
user-387gkpg.cable.mindspring.com ([208.120.83.48])
Earthlink (NY) USA x2
10 March 2007 Domain owner friend cc us Bobs spam 66-115-253-17.dsl-cust.gwtc.net ([66.115.253.17]) Golden West Telecommunications Coop - usa - where are the chickens ?
8 March 2007 Domain owner friend cc us Bobs spam cbl217-132-242-158.bb.netvision.net.il ([217.132.242.158]) Kosher land
7 March 2007 cc Spamcop report(s) [83.148.119.33] (helo=host33.119.b-net.evro.net)
static-67-62-159-11.dsl.cavtel.net ([67.62.159.11])
minasgas.sitecnet.com.br ([201.30.147.172])
84-75-213-2.dclient.hispeed.ch ([84.75.213.2])
123-194-28-231.ethome-ip.ethome.com.tw
red-corp-201.143.194.228.telnor.net ([201.143.194.228])
Bulgaria, america somewhere, Brazil, Switzerland, Tiawan, and not forgetting Mexico today.
3 March 2007 cc Spamcop report(s) cpc2-ward4-0-0-cust872.manc.cable.ntl.com ([82.23.227.105])
pc-175-115-120-200.cm.vtr.net ([200.120.115.175])
adsl201-34.aknet.it ([194.242.201.34])
Richard Branson is a spammer. Chile, and Itally
2 March 2007 cc Spamcop report(s) 201.244.212.122] (helo=adsl201-244212122.dyn.etb.net.co) Fancy a coffee, or something else addictive ?
1 March 2007 cc Spamcop report(s) 201-27-199-66.dsl.telesp.net.br ([201.27.199.66]) Brazil
27 Feb 2007 cc Spamcop report(s) adsl196-105-201-217-196.adsl196-15.iam.net.ma ([196.217.201.105])
[201.208.60.150] (helo=201-208-60-150.genericrev.cantv.net)
blk-222-115-94.eastlink.ca ([24.222.115.94])
Morroco (Africa - off the the Meditterean), South America Venezuela,Canada
26 Feb 2007 cc Spamcop report(s) 162.10.102-84.rev.gaoland.net ([84.102.10.162])
fr-lag-c3-06-cpe-87.231.242.094.chello.fr ([87.231.242.94])
Europe for the first one somewhere and France (also in Europe)
23 Feb 2007 cc Spamcop report(s) 201-13-19-216.dsl.telesp.net.br ([201.13.19.216])
71-11-215-139.dhcp.ftwo.tx.charter.com ([71.11.215.139])
Brazil and America
22 Feb 2007 cc Spamcop report(s) bzq-84-108-102-229.cablep.bezeqint.net ([84.108.102.229]) Jewish Spam (think about it and laugh) Kosher
17 Feb 2007 cc Spamcop report(s) pil59-1-82-225-124-125.fbx.proxad.net ([82.225.124.125])
71-93-180-24.static.rvsd.ca.charter.com ([71.93.180.24])88-223-125-BusName-MarketName.hfc.comcastbusiness.net)
France and America
14 Feb 2007 Domain owner friend cc us Bobs spam [70.88.223.125] (helo=70-88-223-125-BusName-MarketName.hfc.comcastbusiness.net) America.
14 Feb 2007 cc Spamcop report(s) cm169.sigma225.maxonline.com.sg ([218.212.225.169]) Hello to Singapore
13 Feburary 2007 cc Spamcop report(s) 201-27-169-143.dsl.telesp.net.br ([201.27.169.143]) Brazilian wax all Brazillians (and why not)
12 Feburary 2007 cc Spamcop report(s) [201.77.43.26] (helo=201-77-43-26.telesat.net.br)
auh-as12157.alshamil.net.ae ([217.164.140.219])
Brazillian wax all United Arab Emirates citizens for fun.
12 Feb 2007 Domain owner friend cc us Bobs spam [222.157.191.15] (helo=222-157-191-15.cctv.dynamic.lsc.net.tw) Twaian.
10 Feb 2007 Domain owner friend cc us Bobs spam cpe-76-181-193-2.columbus.res.rr.com ([76.181.193.2]) .
7 Feburary 2007 cc Spamcop report(s) 139.red-82-159-62.user.auna.net ([82.159.62.139]) .
2 Feburary 2007 cc Spamcop report(s) cpc4-stev1-0-0-cust436.lutn.cable.ntl.com ([82.9.69.181]) England.
1 Feburary 2007 cc Spamcop report(s) [86.120.102.78] (helo=86-120-102-78.rdsnet.ro)
host84-38-95-75.tvkdiana.pl ([84.38.95.75])
good day comrades.
31 January 2007 cc Spamcop report(s) 151.44.119-80.rev.gaoland.net ([80.119.44.151])
h69-31-225-84.cust.platinum.ca ([69.31.225.84])
wsip-70-166-84-91.sd.sd.cox.net ([70.166.84.91])
[80.97.72.80] (helo=deus16.cluj.astral.ro)
canada/europe and usa today bob goes northern hemispherising !.
30 January 2007 cc Spamcop report(s) s0106000ae633d838.vc.shawcable.net ([24.82.83.207])
chello087206026082.chello.pl ([87.206.26.82])
mek33-5-88-163-61-14.fbx.proxad.net ([88.163.61.14])
s010600112f0c342a.wp.shawcable.net ([24.76.55.130])
.
29 January 2007 cc Spamcop report(s) 125-230-165-248.dynamic.hinet.net ([125.230.165.248])
213.245.73.140] (helo=213245073140.chello.fr)
59.160.88.30] (helo=ill-lvsb-59.160.88.30.static.vsnl.net.in)
[89.36.230.177] (helo=177.230.clients.genesystelecom.Ro)
59-117-175-85.dynamic.hinet.net ([59.117.175.85])
d38-97-217.home1.cgocable.net ([72.38.97.217])
202.134.150.230] (helo=202.134.150.230.customer.7starnet.com)
m47.net85-168-135.noos.fr ([85.168.135.47])
India here.
28 January 2007 cc Spamcop report(s) pc2-brig9-0-0-cust1004.brig.cable.ntl.com
adsl-34-46-192-81.adsl.iam.net.ma ([81.192.46.34])
.
27 January 2007 cc Spamcop report(s) [81.193.138.54] (helo=bl4-138-54.dsl.telepac.pt)
61-216-250-130.dynamic.hinet.net ([61.216.250.130])
.
26 January 2007 cc Spamcop report(s) 89.37.231.66.internex.100megabiti.fiber.nex.ro
s010600010261950b.vc.shawcable.net ([24.81.42.24])
host84-38-95-75.tvkdiana.pl ([84.38.95.75])
.
25 January 2007 cc Spamcop report(s) 200-122-61-97.dsl.prima.net.ar ([200.122.61.97])
190.49.170.80] (helo=190-49-170-80.speedy.com.ar)
host86.200-117-211.telecom.net.ar ([200.117.211.86])
84-120-134-238.onocable.ono.com ([84.120.134.238])
softbank218112032038.bbtec.net ([218.112.32.38])
hmccweb-a-gr227.static-cust.acn.gr ([212.89.183.227])
74-129-9-53.dhcp.insightbb.com ([74.129.9.53])
pc-13-72-47-190.cm.vtr.net ([190.47.72.13])
cable-89-216-22-25.static.sbb.co.yu ([89.216.22.25])
059148181033.ctinets.com ([59.148.181.33])
59-113-85-184.dynamic.hinet.net ([59.113.85.184])
201.4.225.53] (helo=user.53.225.4.201.dial-ip.telemar.net.br)
s010600112f92d831.vs.shawcable.net ([24.81.233.75])
[201.254.49.99] (helo=201-254-49-99.speedy.com.ar)
61-228-189-199.dynamic.hinet.net ([61.228.189.199])
[196.219.38.83] (helo=host-196.219.83.38.tedata.net)
.
23 January 2007 cc Spamcop report(s) 200-122-3-213.dsl.prima.net.ar ([200.122.3.213])
81-203-30-78.user.ono.com ([81.203.30.78])
71-83-57-167.dhcp.oxfr.ma.charter.com ([71.83.57.167])
219.91.217.205] (helo=205-217.91.219.static.youtele.com)
83.148.119.197] (helo=host197.119.b-net.evro.net)
.
22 January 2007 cc Spamcop report(s) cpe-066-057-126-165.nc.res.rr.com ([66.57.126.165])
[201.255.143.162] (helo=201-255-143-162.mrse.com.ar)
157.40.103-84.rev.gaoland.net ([84.103.40.157])
e181117217.adsl.alicedsl.de ([85.181.117.217])
m241.net81-66-174.noos.fr ([81.66.174.241])
81-203-30-78.user.ono.com ([81.203.30.78])
219-68-179-102.adsl.dynamic.giga.net.tw ([219.68.179.102])
40.red-83-49-22.dynamicip.rima-tde.net ([83.49.22.40])
eu85-84-10-219.clientes.euskaltel.es ([85.84.10.219])
pool-71-161-67-147.cncdnh.east.verizon.net ([71.161.67.147])
129.red-80-39-92.staticip.rima-tde.net ([80.39.92.129])
.
21 January 2007 Domain owner friend cc us Bobs spam h941358.serverkompetenz.net ([81.169.155.183])
[202.65.177.14] (helo=ust.edu.ph)
.
21 January 2007 cc Spamcop report(s) ip82-139-68-188.lijbrandt.net ([82.139.68.188])
71-9-6-36.dhcp.rvsd.ca.charter.com ([71.9.6.36])
.
20 January 2007 cc Spamcop report(s) 62.red-81-33-95.dynamicip.rima-tde.net ([81.33.95.62])
86-63-69-125.asta-net.com.pl ([86.63.69.125])
c9346333.virtua.com.br ([201.52.99.51])
171-07.adsl.cytanet.com.cy ([213.149.171.7])
.
19 January 2007 cc Spamcop report(s) pc-96-162-214-201.cm.vtr.net ([201.214.162.96])
[200.118.115.223] (helo=Static-IP-cr200118115223.cable.net.co)
71-17-109-169.sktn.hsdb.sasknet.sk.ca ([71.17.109.169])
219-80-134-79.dynamic.tfn.net.tw ([219.80.134.79])
d100119.upc-d.chello.nl ([213.46.100.119])
dsl-3374.elblag.dialog.net.pl ([84.40.196.46])
201-1-187-17.dsl.telesp.net.br ([201.1.187.17])
.
18 January 2007 cc Spamcop report(s) 84-120-134-238.onocable.ono.com ([84.120.134.238])
jinju.wbb.net.cable.rogers.com ([74.210.12.207])
24-51-166-202.kntnny.adelphia.net ([24.51.166.202])
189.169.7.198] (helo=dsl-189-169-7-198.prod-infinitum.com.mx)
73.red-213-98-221.dynamicip.rima-tde.net ([213.98.221.73])
ono its Spain ! and other places
17 January 2007 cc Spamcop report(s) 201-27-5-172.dsl.telesp.net.br ([201.27.5.172])
c-71-195-106-174.hsd1.ca.comcast.net ([71.195.106.174])
adsl-67-118-80-237.dsl.lsan03.pacbell.net ([67.118.80.237])
17 January 2007 Domain owner friend cc us Bobs spam 80-193-58-123.cable.ubr02.glen.blueyonder.co.uk ([80.193.58.123]) My friend reports that there domain webmaster sent it too, gee which they find funny since that account does not send email. Nice one Robert.
15 January 2007 cc Spamcop report(s) boi59-2-82-225-228-84.fbx.proxad.net ([82.225.228.84])
eu83-213-143-57.clientes.euskaltel.es ([83.213.143.57])
mail.asiashippingmarket.com ([219.76.204.154])
i209-195-72-66.cia.com ([209.195.72.66])
82.84.175.125] (helo=ppp-82-84-175-125.cust-adsl.tiscali.it)
201-1-105-217.dsl.telesp.net.br ([201.1.105.217])
eu85-84-9-161.clientes.euskaltel.es ([85.84.9.161])
60-248-53-71.hinet-ip.hinet.net ([60.248.53.71])
blk-224-244-24.eastlink.ca ([24.224.244.24])
14 January 2007 cc Spamcop report(s) s01060011d8369ee8.wp.shawcable.net ([24.79.9.125])
82-32-188-15.cable.ubr09.newt.blueyonder.co.uk ([82.32.188.15])
pc-165-136-45-190.cm.vtr.net ([190.45.136.165])
200-181-4-58.bsace301.t.brasiltelecom.net.br ([200.181.4.58])
82-47-129-230.cable.ubr09.brad.blueyonder.co.uk ([82.47.129.230])
static-098-026-125.dsl.nextra.sk ([195.98.26.125])
host86-139-214-131.range86-139.btcentralplus.com ([86.139.214.131])
ns-bzn-20-82-250-33-177.adsl.proxad.net ([82.250.33.177])
61-230-66-84.dynamic.hinet.net ([61.230.66.84])
n219076187246.netvigator.com ([219.76.187.246])
12 January 2007 cc Spamcop report(s) cpe-72-181-16-51.houston.res.rr.com ([72.181.16.51])

America
10 January 2007 cc Spamcop report(s) 62-101-102-101.ip.fastwebnet.it ([62.101.102.101])
[85.155.70.123] (helo=123-70-155-85.user.auna.net)
[200.171.13.181] (helo=200-171-13-181.intercall.com.br)
61-64-124-192-adsl-tpe.dynamic.so-net.net.tw ([61.64.124.192])

9 January 2007 cc Spamcop report(s) eth1-1.nmd.mcd10259.atl.wayport.net ([206.59.8.11])
adsl-66-10-82-153.dsl.irvnca.sbcglobal.net ([66.10.82.153])
82-40-171-222.cable.ubr06.pres.blueyonder.co.uk ([82.40.171.222])
cab1b-180.compascable.net ([204.213.225.180])cab1b-180.compascable.net ([204.213.225.180])

8 January 2007 cc Spamcop report(s) 105.red-83-56-141.dynamicip.rima-tde.net ([83.56.141.105])
eu85-84-148-169.clientes.euskaltel.es ([85.84.148.169])
user-12hdn9f.cable.mindspring.com ([69.22.221.47])
adsl-ull-220-254.50-151.net24.it ([151.50.254.220])
7 January 2007 cc Spamcop report(s) adsl-69-224-110-10.dsl.irvnca.pacbell.net ([69.224.110.10])
144.204.101-84.rev.gaoland.net ([84.101.204.144])
eu85-87-47-53.clientes.euskaltel.es ([85.87.47.53])
virtua-cwb216-41.ctb.virtua.com.br ([200.250.216.41])
213.38.94.201] (helo=rsvd-genesys-conferncing-201.94.38.213.in-addr.arpa)
nk219-91-71-184.adsl.dynamic.apol.com.tw ([219.91.71.184])
bzq-84-108-200-204.cablep.bezeqint.net ([84.108.200.204])
24-181-230-169.dhcp.oxfr.ma.charter.com ([24.181.230.169])
153.red-82-158-40.user.auna.net ([82.158.40.153])
a81-84-254-253.cpe.netcabo.pt ([81.84.254.253])
71-17-73-192.msjw.hsdb.sasknet.sk.ca ([71.17.73.192])
74-133-16-141.dhcp.insightbb.com ([74.133.16.141])
5 January 2007 cc Spamcop report(s) 91.pool85-59-70.dynamic.orange.es ([85.59.70.191])
lya14-1-82-67-100-211.fbx.proxad.net ([82.67.100.211])
[85.136.237.217] (helo=217-237-136-85.user.auna.net)
s0106000021230f69.wp.shawcable.net ([24.76.122.197])
3 January 2007 cc Spamcop report(s) ipl-188-100.dsl.stargate.net ([208.40.188.100])
pe-069-132-236-020.carolina.res.rr.com ([69.132.236.20])
[203.187.222.109] (helo=109-222-187-203.static.iqara.net)
61.11.84.18] (helo=ppp61.11.84-18.dsl-chn.eth.net
dsl-66-10-82-153.dsl.irvnca.sbcglobal.net ([66.10.82.153])
ns35698.ovh.net ([213.251.185.42])
74-132-106-32.dhcp.insightbb.com ([74.132.106.32])
host229.200-82-46.telecom.net.ar ([200.82.46.229])
eu99-102-117.clientes.euskaltel.es ([62.99.102.117])
71-17-98-116.regn.hsdb.sasknet.sk.ca ([71.17.98.116])
[85.87.9.107] (helo=static.eu85-87-9-107.clientes.euskaltel.es)
A happy new year
22 December 2006 cc Spamcop report(s) 82.84.190.19] (helo=ppp-82-84-190-19.cust-adsl.tiscali.it)
201-1-205-250.dsl.telesp.net.br ([201.1.205.250])
201-42-34-203.dsl.telesp.net.br ([201.42.34.203])
74-134-178-151.dhcp.insightbb.com ([74.134.178.151])
Italy and Brazil for a change today
21 December 2006 cc Spamcop report(s) 61-229-88-203.dynamic.hinet.net ([61.229.88.203]) eu85-84-211-201.clientes.euskaltel.es ([85.84.211.201]) 215.red-81-184-127.user.auna.net ([81.184.127.215]) 61-229-88-203.dynamic.hinet.net ([61.229.88.203]) Spain and USA today
20 December 2006 cc Spamcop report(s) bny93-5-82-235-87-159.fbx.proxad.net ([82.235.87.159])
[204.191.150.66] (helo=proxy.gietech.com)
219-68-69-22.adsl.dynamic.giga.net.tw ([219.68.69.22])
201-26-199-63.dsl.telesp.net.br ([201.26.199.63])
24-197-138-115.dhcp.spbg.sc.charter.com ([24.197.138.115])
[84.94.124.62] (helo=84.94.124.62.cable.012.net.il)
Worldwide - France,Taiwan,Brazil,America,Isreal something for everybody there. - have you entered the competition yet ? lets hope that 'on the eighth day of Christmas, my true love sent to me Eight maids a-milking, Seven swans a-swimming, Six geese a-laying, Five golden rings, Four calling birds, Three French hens, Two turtle doves, And a partridge in a pear tree' dont start spamming for Robert.
19 December 2006 cc Spamcop report(s) 24-151-190-126.dhcp.kgpt.tn.charter.com
cpe-76-174-147-191.socal.res.rr.com ([76.174.147.191])
America x 2
18 December 2006 cc Spamcop report(s) [81.202.45.236] (helo=236.45.202.81.dyn.user.ono.com)
49.red-81-35-1.dynamicip.rima-tde.net ([81.35.1.49])
216-70-226-54.static-ip.telepacific.net
europe x 2
17 December 2006 cc Spamcop report(s) cpc2-swin5-0-0-cust274.sol2.cable.ntl.com ([82.11.45.19]) [200.122.114.32] (helo=200-122-114-32.dsl.prima.net.ar) [201.254.108.64] (helo=201-254-108-64.mrse.com.ar 2/3 south america, 1 england,
15 December 2006 cc Spamcop report(s) [200.122.114.32] (helo=200-122-114-32.dsl.prima.net.ar)
184-169-235-201.fibertel.com.ar ([201.235.169.184])
e72164.upc-e.chello.nl ([213.93.72.164])
[200.118.134.175] (helo=Dynamic-IP-cr200118134175.cable.net.co)
[200.119.56.214] (helo=adsl200-119056214.dyn.etb.net.co)
a213-22-154-238.cpe.netcabo.pt ([213.22.154.238])
all south america here.
to 14 December 2006 cc Spamcop report(s) 201-13-111-89.dsl.telesp.net.br ([201.13.111.89])
201-68-228-213.dsl.telesp.net.br ([201.68.228.213])
[201.5.21.25] (helo=USER.25.21.5.201.dial-ip.telemar.net.br)
[124.82.23.181] (helo=tm.net.my)
190.49.34.54] (helo=190-49-34-54.speedy.com.ar)
200-233-181-060.xd-dynamic.ctbcnetsuper.com.br ([200.233.181.60])
pc-151-38-120-200.cm.vtr.net ([200.120.38.151])
209.red-88-0-223.dynamicip.rima-tde.net ([88.0.223.209])
gqp76-2-82-235-245-84.fbx.proxad.net ([82.235.245.84])
gr2m-paris18-17-162.cnt.nerim.net ([213.215.17.162])
71-84-250-200.static.lsan.ca.charter.com
[221.128.140.42] (helo=221-128-140-42.dynamic.exatt.net)
201.160.96.171.cableonline.com.mx ([201.160.96.171])
adsl196-59-52-217-196.adsl196-10.iam.net.ma
cpe-024-211-092-105.sc.res.rr.com ([24.211.92.105]
68-184-122-73.dhcp.smyr.ga.charter.com ([68.184.122.73])
72-161-85-176.dyn.centurytel.net ([72.161.85.176])
lot of south american here. some usa, malaysia, france
8 December 2006 cc Spamcop report 24-197-111-089.dhcp.hlrg.nc.charter.com
user-12hc11e.cable.mindspring.com ([69.22.4.46])
chello217023245249.chello.sk ([217.23.245.249]
c-71-229-37-199.hsd1.ga.comcast.net ([71.229.37.199])
cv01mail.cablevision.net.mx ([200.77.160.220]
dslb-084-058-074-023.pools.arcor-ip.net ([84.58.74.23])
asc59-1-82-237-38-137.fbx.proxad.net ([82.237.38.137])
cpe-65-189-218-208.neo.res.rr.com ([65.189.218.208])
[213.137.32.138] (helo=plovdivppp138.internet-bg.net)
usa
usa
slovakia
usa
mexico
france
usa
usa
bulgaria
7 December 2006 cc Spamcop report 201-27-50-193.dsl.telesp.net.br ([201.27.50.193])
177-145-231-201.fibertel.com.ar ([201.231.145.177])
Brazil
Argentina ...
5/6 December 2006 cc Spamcop report pc-94-168-214-201.cm.vtr.net ([201.214.168.94])
cpe-76-184-209-55.tx.res.rr.com ([76.184.209.55])
g21010.upc-g.chello.nl ([80.57.21.10])
24-178-137-173.dhcp.crtn.ga.charter.com ([24.178.137.173])
Chile
American dsl rr.com
Netherlands
America
2/3/4 December 2006 cc Spamcop report 92.217.97-84.rev.gaoland.net ([84.97.217.92])
cpe-071-068-226-157.sc.res.rr.com ([71.68.226.157])
[86.34.204.37] (helo=adsl86-34-204-37.romtelecom.net)
230.red-62-57-240.user.auna.net ([62.57.240.230])
[85.11.164.49] (helo=49-164.skknet.net)
cpe-65-189-174-240.columbus.res.rr.com
[190.48.198.214] (helo=190-48-198-214.speedy.com.ar)
142-165-211-57.prna.hsdb.sasknet.sk.ca ([142.165.211.57])
[88.248.151.6] (helo=dsl88-248-38662.ttnet.net.tr)
218-34-18-51.cm.dynamic.apol.com.tw ([218.34.18.51])
[200.155.195.204] (helo=sp-200-155-195-204.evdo.giro.com.br)
ppp-124.120.166.30.revip2.asianet.co.th ([124.120.166.30])
201-26-46-26.dsl.telesp.net.br ([201.26.46.26])
24-158-180-205.dhcp.jcsn.tn.charter.com ([24.158.180.205])
adsl-66-137-138-217.dsl.rcsntx.swbell.net ([66.137.138.217])
200-122-40-241.dsl.prima.net.ar ([200.122.40.241])
cpe-24-167-254-31.wi.res.rr.com ([24.167.254.31])
cpe-24-166-164-185.kc.res.rr.com ([24.166.164.185])
24-107-231-44.dhcp.oxfr.ma.charter.com ([24.107.231.44])
80.178.36.96.adsl.012.net.il ([80.178.36.96])
89.0.108.16.dynamic.barak-online.net ([89.0.108.16])
68-190-81-102.dhcp.mdsn.wi.charter.com ([68.190.81.102])
68-112-92-85.dhcp.jcsn.tn.charter.com ([68.112.92.85])

spain
usa (roach runne)
romainia
spain
turkey
america
argentina
canada
romiania
Tiawan
Brazil
Thailiand
Bazil
isa
usa
argentina.
usa roachrunner x 2
usa
Isreal x2
American x 2
1 December 2006 cc Spamcop report cpe-74-72-68-91.nyc.res.rr.com ([74.72.68.91])
usa (roach runner)
28 November 2006 cc Spamcop report 62-77-249-19.pool.invitel.hu ([62.77.249.19])
66-189-214-146.dhcp.knwk.wa.charter.com
eu85-86-206-138.clientes.euskaltel.es ([85.86.206.138])
200-158-196-9.dsl.telesp.net.br ([200.158.196.9])
s010600110906c46f.cg.shawcable.net ([68.145.3.204])
hungary
american
spain
brazil
usa
So far today.
28 November 2006 cc Spamcop report cpe-76-186-237-35.tx.res.rr.com ([76.186.237.35])
m192.net81-67-246.noos.fr ([81.67.246.192]
201.21.185.68] virtua-cwbas128-68.ctb.virtua.com.br
201-13-89-235.dsl.telesp.net.br ([201.13.89.235])
201-1-68-188.dsl.telesp.net.br ([201.1.68.188])
[208.99.203.248] (helo=pluto.marrison.com)
american
france
brazil x3 and
Swift Communications,Seattle,USA (seen before)
27 November 2006 cc Spamcop report static-71-121-225-145.sttlwa.dsl-w.verizon.net
69-174-254-133.chvlva.adelphia.net ([69.174.254.133])
hsi-kbw-082-212-016-092.hsi.kabelbw.de ([82.212.16.92])
33.red-83-55-217.dynamicip.rima-tde.net ([83.55.217.33])
american
american?
germany
?spain?
So far today.
26 November 2006 cc Spamcop report host50-68-dynamic.10-87-r.retail.telecomitalia.it ([87.10.68.50])
cpe-66-65-49-239.nyc.res.rr.com ([66.65.49.239])
dslb-084-061-138-010.pools.arcor-ip.net ([84.61.138.10])
c95379d9.virtua.com.br ([201.83.121.217])
81-203-149-150.user.ono.com ([81.203.149.150])
adsl-ull-88-216.51-151.net24.it ([151.51.216.88])
69-172-8-126.atlsfl.adelphia.net ([69.172.8.126])
177-145-231-201.fibertel.com.ar ([201.231.145.177])
200-112-136-186.bbt.net.ar ([200.112.136.186])
cm-83-97-176-195.telecable.es ([83.97.176.195])
33.red-83-55-217.dynamicip.rima-tde.net ([83.55.217.33]) see monday
host21-110-dynamic.16-87-r.retail.telecomitalia.it
Italy
usa
eu
brazil
?
italy So far today.
24 November 2006 cc Spamcop report cpe-76-188-161-118.neo.res.rr.com ([76.188.161.118])
c-24-218-123-136.hsd1.ma.comcast.net ([24.218.123.136])
[201.21.166.182] (virtua-cwbas128-182.ctb.virtua.com.br)
142.red-83-35-71.dynamicip.rima-tde.net ([83.35.71.142])
200-185-247-155.user.ajato.com.br ([200.185.247.155])
[86.75.39.149] (149.39.75-86.rev.gaoland.net)
219.red-213-37-223.user.auna.net ([213.37.223.219])
cm90159.red.mundo-r.com ([213.60.90.159])
usa
usa
brazil
spain
brazil
france
spain
span
So far today.
23 November 2006 Domain owner friend cc us Bobs spam from 201-27-90-81.dsl.telesp.net.br ([201.27.90.81]) Brazil from feedback@there domian.something.tld
23 November 2006 cc Spamcop report 200-207-146-81.dsl.telesp.net.br ([200.207.146.81]) Brazil x 2
23 November 2006 cc Spamcop report [208.99.203.248] (helo=ns2.marrison.com) Swift Communications,Seattle,US abuse@swiftco.net x 2
23 November 2006 cc Spamcop report [62.14.204.108] (helo=108.204.14.62.dynamic.jazztel.es) abuse@jazztel.com x 2
23 November 2006 cc Spamcop report from pc-118-86-104-200.cm.vtr.net ([200.104.86.118]) Chile
23 November 2006 cc Spamcop report 68.173.163.67 USA roach runner rr.com
23 November 2006 cc Spamcop report ip67-154-127-98.z127-154-67.customer.algx.net ([67.154.127.98]) MARKETEER PENNYSAVER PUBLICATIONS 2824238 (ALGX) xo.com x2
23 November 2006 cc Spamcop report mo-69-34-117-232.dhcp.embarqhsd.net ([69.34.117.232]) Sprint DSL Network Sprint DSL Network
20 November 2006 cc Spamcop report 67.red-212-97-189.user.auna.net ([212.97.189.67]) Spain abuse@auna.net
20 November 2006 cc Spamcop report cpe-24-209-181-50.wi.res.rr.com ([24.209.181.50]) America roach runner abuse@rr.com
20 November 2006 cc Spamcop report x 2 62-31-92-254.cable.ubr01.sutt.blueyonder.co.uk ([62.31.92.254] England abuse@blueyonder.co.uk
19 November 2006 cc Spamcop report 142-217-89-94.telebecinternet.net ([142.217.89.94] Canada mailto:abuse@telebec.qc.ca
19 November 2006 cc Spamcop report [85.136.55.98] (helo=98-55-136-85.user.auna.net) Spain abuse@auna.es
19 November 2006 cc Spamcop report 86-63-111-141.asta-net.com.pl ([86.63.111.141]) Spammy Poland abuse@asta-net.pl
19 November 2006 cc Spamcop report 194-79-77-139.net.novis.pt ([194.79.77.139]) Portugal Instituto de Conservacao da Natureza
19 November 2006 cc Spamcop report cpe-65-26-194-123.wi.res.rr.com ([65.26.194.123]) Roadrunner (roach runner to its firends) America abuse@rr.com way to mentally retarded to be an isp in our opinion
15 November 2006 Domain owner friend cc us Bobs spam e178155166.adsl.alicedsl.de ([85.178.155.166]) spoofed headers from feedback@at.there.domian.tld HanseNet Telekommunikation GmbH,Ueberseering 33 A,D-22297 Hamburg,Germany abuse@hansenet.com
14 November 2006 cc Spamcop report 89.0.130.111 Not only do they kill Lebanese citizens, then spam too - Israel 89.0.130.111.dynamic.barak-online.net Assaf Dahary,Barak I.T.C,15 Hmelacha St Rosh Ha'ayin,Israel 48091 get ignored here abuse@013barak.net.il
8 November 2006 cc Spamcop report [200-206-230-73.dsl.telesp.net.br ([200.206.230.73]) Brazil bang those drums it's Carnival time !
25 October 2006 cc Spamcop report [cpe-071-068-068-176.carolina.res.rr.com ([71.68.68.176]) roach runner usa
24 October 2006 cc Spamcop report [62.241.150.138] (helo=host-62-241-150-138.static.link.com.eg) Mohamed gamal 3 musaddak St., Dokki Giza egypt
24 October 2006 cc Spamcop report 68-106.34-65.swfla.res.rr.com ([65.34.106.68] rr.com usa
24 October 2006 cc Spamcop report 84-123-71-160.onocable.ono.com [84.123.71.160] spain
4 October 2006 Domain owner friend cc us Bobs spam 64.233.185.27 ([59.8.239.146]) Korea Telecom no sender it came by 'magic' -
18 Sept 2006 Domain owner friend cc us Bobs spam (c-67-173-26-213.hsd1.il.comcast.net [67.173.26.213], Comcast Cable Communications, ILLINOIS, USA no sender it came by 'magic' - watch for Received-SPF: neutral (gmail.com: 67.173.26.213 is neither permitted nor denied by domain of person @domain)
10 Sept 2006 cc Spamcop report 0-192-32-56.cable.ubr09.edin.blueyonder.co.uk ([80.192.32.56]) england over munged
10 Sept 2006 cc Spamcop report ip-200.net-82-216-163.suresnes3.rev.numericable.fr ([82.216.163.200]) france over munged
10 Sept 2006 cc Spamcop report 203.99.103-84.rev.gaoland.net ([84.103.99.203]) eu somewhere over munged
09 Sept 2006 Domain owner friend cc us Bobs spam [64.97.144.244/smtpout1244.sc1.he.tucows.com] Toronto,ON,CA why - wildcountryflowers.com
06 Sept 2006 Domain owner friend cc us Bobs spam 5-227-212-206-wiban.onlinemac.com (5-227-212-206-wiban.onlinemac.com [206.212.227.5]) Oregon-USA nobody sent it.
06 Sept 2006 Domain owner friend cc us Bobs spam host181-221.pool874.interbusiness.it ([87.4.221.181]) Italy nobody sent it.
25 Aug 2006 Domain owner friend cc us Bobs spam 202.30.94.93 Korea 6KANet - Bob tries to hide by saying it was 72.14.215.114 message return path set to email account being spammed
23 Aug 2006 cc Spamcop report Received: from org51-2-82-244-212-207.fbx.proxad.net ([82.244.212.207]) Proxad, France abuse@proxad.net postalmail-mx1.dreamhost.com bad headers
18 August 2006 cc Spamcop report 200.48.241.34
Telefonica del peru,Lima PE (peru)
dreamhost.com bad fake headers.
18 August 2006 cc Spamcop report 200.250.154.84
postalmail-mx2.dreamhost.com -0700 (PDT) Received: from 200-250-154-84.sertaozinho.flash.tv.br ([200.250.154.84])
dreamhost.com bad fake headers. Brazillians Gustavo Alberto de Godoy Pereira Filho Av. Dr. Cardoso de Melo, 1855, Bl.01 5º A 04548-000 - São Paulo - SP
10 August 2006 cc Spamcop report 69.29.158.153 (CenturyTel Internet Holdings, Inc,Monroe,LA,US)
-search on glenconstruction.com in document
dreamhost.com bad fake headers
10 August 2006 cc Spamcop report 66.215.220.105 (charter.net, USA)
dreamhost.com bad fake headers
16 July 2006 cc Report 62.128.193.156 IOMART Ltd Scotland
the sender thought the reciever (same as sender) would like to know about Soloways spam. - Forged
6 July 2006 cc Spamcop report 69.167.67.29 (Adelphia.net Florida, USA)
dreamhost.com bad fake headers
6 July 2006 cc Spamcop report 83.228.0.253 (Bulgaria,europe)
??
6 July 2006 cc Spamcop report 68.202.181.119 cfl.res.rr.com (usa residential dsl pc)
fakeness in headers: dreamhost.com, bad spf etc
13 June 2006 cc Spamcop report 124.33.181.36 ucom.ne.jp - Japan
Over Munged
27 May 2006 Spamcop 200.158.120.117 Brazil ?
26 May 2006 Spamcop 200.113.46.237 - Chile dsl ? minged
25 May 2006 Spamcop 141.149.179.202 - America ? minged
25 May 2006 Spamcop 114santiagord16.codetel.net.do
([200.88.46.114]
VERIZON DOMINICANA Republic
? minged
May 23 2006 Spamcop 125.22.65.120 Spammy India ? over munged
May 23 2006 other report 200.216.78.153 - 20021678153.user.veloxzone.br
May 22 2006 cc spamcop report overly munged
May 21 2006 cc spamcop report 201.24.100.169 - braziltelecom.br overly munged
May 21 2006 other report 86.29.17.83 - client-86-29-17-83.nott.adsl.tesco.net
May 21 2006 cc spamcop report 3 x cm199.gamma182.maxonline.com.sg
202.156.182.199
overly munged
March 1 06 cc spamcop report 60.181.144.90 seems to have the Trojan.spybot virus
March 1 06 cc spamcop report 60.181.144.90 seems to have the Trojan.spybot virus
March 2 06 cc spamcop report 211.200.129.39 (Korea)* ip 211.200.129.39 has MIME-tools 4.104 (Entity 4.116) seems to have the Trojan.spybot virus
March 2 06 cc spamcop report 211.33.79.125 211.33.79.125 has Mutt/1.5.1i seems to have the Trojan.spybot virus
March 2 06 cc spamcop report 221.139.207.34 221.139.207.34 has Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux) seems to have the Trojan.spybot virus
2 March
cc Spamcop report
220.125.192.85 KOREA TELECOM has MailGate v3.0 seems to have the Trojan.spybot virus
2 March cc Spamcop report TOO MUNGED TO DECIPER has MailGate v3.0 seems to have the Trojan.spybot virus
3 March cc Spamcop report 87.0.195.186 ITALY has malaysia.net and Internet Mail Service (5.5.2650.21) seems to have the Trojan.spybot virus
3 March cc Spamcop report 70.101.151.228 CANADA/?says US? has The Bat! (v1.60q) and ? cashette.com seems to have the Trojan.spybot virus
3 March cc Spamcop report 24.63.250.136 Comcast Cable/US Mutt/1.5.1i and ? snail-mail.net seems to have the Trojan.spybot virus
3 March cc Spamcop report 211.177.66.70(x2)probably Korea no mailer but >malaysia.net seems to have the Trojan.spybot virus
3 March cc Spamcop report 63.223.65.162 - US
Beyond The Network America, Inc.
Reston Executive Center,
12100 Sunset Hills Road,
Suite 300,Reston,VA
MIME-tools 5.503 (Entity 5.501) and ureach.com ? has ? exchange open proxy or xmailer ?
6 March cc Spamcop report 211.56.136.174 probably Korea Calypso Version 3.20.01.01 (4) seems to have the Trojan.spybot virus
6 March cc Spamcop report 60.210.147.185 - China MIME-tools 5.503 (Entity 5.501) seems to have the Trojan.spybot virus
6 March cc Spamcop report 58.69.36.173 - Phillipino spam MailGate v3.0 seems to have the Trojan.spybot virus
7 March cc Spamcop report 61.73.165.25 - Korea Microsoft Internet Mail 4.70.1155 seems to have the Trojan.spybot virus (india)
7 March cc Spamcop report 221.192.216.207 - China MIME-tools 4.104 (Entity 4.116) seems to have the Trojan.spybot virus
12 March 18 cc Spamcop report 59.14.170.94 - Korea X-Authentication-Warning: R53-alias2.ZQ6meo.ciberaula.infase.es
[40.114.178.89]: ol03exclamation set sender to nilarme...@budweiser.com using
-u X-Mailer: MIME-tools 5.503 (Entity 5.501)

Looks like * new xmailer / 123 trojan
12 March cc Spamcop report 218.27.38.154 CNCGROUP-JL China Calypso Version 3.30.00.00
@backstreet-boys.com
I'm opting for the Trojan.spybot virus
12 March cc Spamcop report 40.232.92.121
Eli Lilly and Company Lilly
Corporate Center
Indianapolis,IN,US
mauimail.com Pegasus Mail for Win32 (v2.53/R1)
the Trojan.spybot virus
12 March 2006 cc Spamcop report 138.217.21.239 Australia Mutt/1.5.1i Trojan.spybot virus
12 March 2006 cc Spamcop report 61.18.63.169 - HK (China) Calypso Version 3.20.01.01 (4) Trojan.spybot virus
15 March 2006 cc Spamcop report adsl-67-114-113-210.dsl.bkfd14.pacbell.net
[67.114.113.210] - US SBC Internet Services
/Sears Roebuck San Francisco
Internet Mail Service (5.5.2650.21)
? Open Exchange Proxy ?
15 March 2006 cc Spamcop report 48.114.151.152
Prudential Securities Inc
1 New York Plaza New York NY 10004 US
Calypso Version 3.20.01.01 (4) Trojan.spybot virus
15 March 2006 cc Spamcop report 132.117.92.200
Army National Guard Bureau
8260 Willow Oaks Corporate Drive 7th Floor
Fairfax VA 22031 US
The Bat! (v1.53d) Trojan.spybot virus
15 March 2006 cc Spamcop report 216.250.47.66 West Communications
PO Box 588 Kamas UT 84036 US
Mutt/1.5.1i Trojan.spybot virus
15 March 2006 cc Spamcop report 88.243.240.9 Turk Telekom Turkey Internet Mail Service (5.5.2650.21)
? Open Exchange Proxy ?
15 March 2006 cc Spamcop report 102.16.24.65 -
unassigned thoughts please? bogon ? term
Mutt/1.5.1i Trojan.spybot virus
19 March cc Spamcop report 80.243.245.135 - outremer-telecom.fr
Mutt/1.5.1i Trojan.spybot virus

* for the record our email boxes blocks any email request sent to it from south korea, or china - it solves the volume of spam problem for us, if you thinks that is hard - i suggest you ask to see the log file, china and korea love to fake whats they spend most of their  time sending - which is spam willingly, or unwillingly

Both take spammers money too.

Domains
Bob Soloway used to kep the domain registrars busy that is until even they got fed up with him, He has essentailly been denied the rights to register internet domains like .com/org/biz - that leaves him the the strange position of making work for the chinese registrar of .cn (chinas) internet domain name whom we all know love spam persons like Mr Soloway. - remember China hates spam not.

The list of domains that advertise Bobs spam are

EMAILTODAY2004.COM - details about them links for all on this page.
BROADCASTEMAILINGTODAY.BIZ - details about them located on this page.
BROADCASTINGTODAY.BIZ - details about them on this page.
BROADCASTEMAIL.ORG - details about them on this page.
newportmarketing.com - details about them on this page
BROADCASTEMAIL.US - details about them on this page.
broadcastadvertise.org - details about them on this page
spamis.net details about them on this page
spamis.cc details about them on this page
spamis.biz details about them on this page
broadcastemailadvertising.net details about them on this page.
optinemailing.net details about them on this page
optin2millions.com details about them on this page
optin2millions.net details about them on this page
optinemailingtoday.com details about them on this page
optinemails.org details about them on this page
optinemailtoday.biz details about them on this page
optinemailing.biz details about them on this page
optinemailings.us NEUSTAR seem to have shut it (external link to (NEUSTAR REGISTRAR) down
broadcastingemail.us details about them on this page
emailingtoday.org details abut them on this page
searchengineranking.cn details about them on this page
broadcastingemailing.org details about them on this page
security-validations.com details about them on this page
broadcastemailservices.biz details about them on this page
broadcastemailservices.org details about them on this page
3322.ORG details about them on this page
broadcastemailcorp.org details about them on this page
cyberservices.com details about them on this page
China here we come
newportcorp.cn details about them on this page.
jzgx.nydns.cn details about them on this page.
broadcastemailingcorp.cn details about them on this page


as well as: IP hosts (see the other list)
newportcorporation.netdetails about them on this page
broadcastemailcorporation.org details about them on this page
web-dateset.com details about them on this page
broadcastemailcorporation.us details about them on this page
thebroadcastemailcorporation.com details about them on this page
emarketingcorp.cn details about them on this page
emailbroadcastcompany.com details about them on this page
211.155.132.206/welcome.html details about them on this page
? bbs007.com
broadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COM details about them on this page
THEEMAILCORPORATION.ORG details about them on this page
emailadvertisingcorporation.com details about them on this page (?nbs)
broadcastmarketingcorp.com - missed
broadcastemailcorporation.com details about them on this page (?nbs)
ebroadcastcorporation.com details about them on this page (nbs?)
broadcastemailcompany.com details about them on this page (nbs?)
emailadvertisingagency.org details about them on this page
broadcastemailinc.com details about them on this page
ctandres.com details about them on this page (nbs?)
emailadvertisinginc.com details about them on this page
colidsilver.com details about them on this page
minserf.com details about them on this page
broadcastemailingagency.com details about them on this page
broadcastadvertisenow.com details about them on this page
permissionemailcorporation.com details about them on this page
emailadvertisenow.com details about them on this page
advertisingemailcorporation.com details about them on this page
optinemailcorp.com details about them on this page
theemailbroadcastingcompany.com details about them on this page
EMAILBROADCASTAUTHORITY.COM details about them on this page
submit-me-now.com SEO spam operation
catsdogsandpets.com * new owner
phone-example.net * new owner
nim-company.com SEO spam operation
permissionemailcorp.com details about them on this page
emailsolutioncorp.com details about them on this page
globustravelclub.info aristocratroyal.info - robert drug sales domain names.
emailmarketingassociates.com details about them on this page.
theemailadvertisingcompany.com ahem i missed emailbroadcastingcompany.com details about them on this page. sorry !

IP addresses have been used, and yahoo redirects en mass to, .cn (China) is is currently his home in Cyberspace. Which is ironic becuase Bob likes to hire Americans - he just is not tolerated to.

So he's been around -

Current Operations

Host's operational now. You are looking for these zombies or the (original revised design. Those of you wondering where this design came from see the dmca theft section - 'fancy some spam for lunch') The text changes but the red text is an offer day, and no red text is full price sucker day.

the zombie does the 100 yard stare Robert latest ahem design. the Robert's latest claim.fancy some ham? screen dump of the new discount day revised website
fancy some ham? screen dump of the new website

or the original 'new site' redesign

old bob soloway website screen dump

Plus the classic - (old) the Bald deaf "SPEAK UP" eagle site design was used for cut price offers (left hand) - notice the lack of domain name too in the screen dump above.

If you where one the 28 million spammees your probably still on the list.

note: All images can be printed (link to image files in new browser window) full size if you desire it in png graphic format.







Bob Spam Frieindly Isp's by region
Asia
(apnic)
Europe
(ripe)
Latin America
Africa..
America
(arin)



00

Old Domains

Domain spams to email account/rfc aliases remote report post-
master
info@ web-
master
billing admin technical owner
EMAILTODAY2004.COM y
BROADCASTEMAILINGTODAY.BIZ Y y y y y
BROADCASTINGTODAY.BIZ y
BROADCASTEMAIL.ORG y y y y y
BROADCASTEMAIL.us y y y y
broadcastadvertise.org y
spamis.net
spamis.cc
broadcastemailadvertising.net
spamis.biz ? y y
optinemailing.net
optin2millions.com Y
optin2millions.net Y Y
optinemailingtoday.com y Y
optinemails.org Y
optinemailtoday.biz Y Y
optinemailings.us - KILLED Y
broadcastingemail.us
emailingtoday.org Y Y Y
searchengineranking.cn Y
broadcastingemailing.org Y
security-validations.com (heard about)
broadcastemailservices.biz Y
broadcastemailservices.org Y Y
3322.ORG Y
broadcastemailcorp.org Y T Y
http://de.geocities.com/email24624broadcast65559/
But redirects here:

http://83.69.46.224/wm/also
http://uk.geocities.com/Adi96471Rutter32324/
http://de.geocities.com/Viviene12522Billie34776/
Y Y Y
http://83.237.66.218/wm/ -via geocites (free websites)
Jan/2006 restarted:
http://83.237.66.218/broadcastemail/
uri: http://au.geocities.com/christiane14285danice73145/
uri: http://sg.geocities.com/ross84151renaldo78077/
uri: http://asia.geocities.com/taffy92423jennette64105/
uri: http://sg.geocities.com/nettie88750charis26018/
uri: http://asia.geocities.com/remington17144dari12110/
Y
http://210.179.190.250/wm/
- via geocites again
http://210.179.190.250/broadcastemail
uri: http://uk.geocities.com/Griselda70698Sol20116/
uri: http://uk.geocities.com/Ingamar91782Leoine31932/
uri: http://de.geocities.com/Dolph1663Hatti38832/
uri: http://de.geocities.com/Petronille78514Sarena78406/
uri: http://uk.geocities.com/Brina9829Krysta60333/
uri: http://uk.geocities.com/Yasmeen25258Kaila54034/
uri: http://de.geocities.com/Liva81348Yasmin50151/
uri: http://degeocities.com/Olvan27172Celka14168/ <- Bob bug!
uri: http://de.geocities.com/Ddene66341Arlie58920/
Y Y Y Y
http://83.237.66.218/broadcastemail/
<- renamed from wm
via geocites
uri: http://uk.geocities.com/Preston17058Charmain74309/
uri: http://de.geocities.com/Granger62094Lauryn10094/
uri: http://de.geocities.com/Nappie16328Dorian45917/
uri: http://de.geocities.com/Herschel64700Frasier42753/
Y
http://147.46.30.174/broadcastemail/
uri: http://uk.geocities.com/hedwiga78946vi64062/
(same link in email twice)
uri: http://uk.geocities.com/harland91562dianemarie24502/
uri: http://uk.geocities.com/lawrence89699flore17738/
uri: http://de.geocities.com/Malvina10647Garwood23990/
uri: http://de.geocities.com/Candide51857Fanchon45885/
uri: http://de.geocities.com/Adan70125Cecile5424/
uri: http://uk.geocities.com/Bev25884Fair61456/
uri: http://in.geocities.com/marlyn29638darya739/
uri: http://uk.geocities.com/sophey43411desmond75026/
http://147.46.240.97/broadcastemail/
uri: http://ca.geocities.com/kassey52278symon70907/
uri: http://sg.geocities.com/vachel20600karil61129/
http://198.93.1.73/broadcastemail/ <- America!!
uri: http://uk.geocities.com/gideon6497trumaine14477/
uri: http://uk.geocities.com/lissi56181holmes35/
Y
http://147.46.135.180/broadcastemail/
uri: http://sg.geocities.com/helga34488dewey8633/
http://147.46.216.152/broadcastemail/
uri: http://uk.geocities.com/maurits59884minerva80565/
Y
http://219.136.53.13/broadcastemail/>
uri: http://asia.geocities.com/ax55737titus16973/
uri: http://au.geocities.com/minne59928elihu63204/
uri: http://au.geocities.com/lorena76022clare70672/
broadcastemailcorp.odo.com.cn Y Y Y
http://210.66.241.1/broadcastemail/
uri: http://au.geocities.com/albie58684patrizio81985/
uri: http://uk.geocities.com/laurens12611francisco8457/
uri: http://ca.geocities.com/dorian63510leeanne2641/
uri: http://ca.geocities.com/maurene27548enrico51190/
uri: http://au.geocities.com/dorena6870eddie67768/
uri: http://au.geocities.com/ashlie55377shannon87205/
then again:
http://210.66.241.1/broadcastemail/
h1-210-66-241.seed.net.tw
internal page link)
uri: http://au.geocities.com/kaiser59996mirella87067/
uri: http://au.geocities.com/lindsay83917bobbie29498/
uri: http://au.geocities.com/kaiser59996mirella87067/
uri: http://ca.geocities.com/myra12307dorelia94407/
uri: http://ca.geocities.com/vevay33904emily13985/
uri: http://au.geocities.com/cathi62098marybelle66314/
uri: http://uk.geocities.com/brendon76690ally4991/
uri: http://au.geocities.com/catlin73390ramsey77106/
uri: http://au.geocities.com/catlin73390ramsey77106/
uri: http://au.geocities.com/herve39362denver10612/

Y
Y
http://securesite.odo.com.cn
(seen evidence of spaming seen here)
Y Y Y
http://195.6.54.3/broadcastemail/

from nanas
uri:http://au.geocities.com/vinny45371corny32621/
uri: http://ca.geocities.com/ben96679elana92148/
uri:http://ca.geocities.com/mata55202jacinthe84242/
Y

status: down
from: 26 February 2006
to: 20 March 2006
uptime: 89 day+

http://217.74.161.86/broadcastemail/ (russia)

from nanas
uri: http://ca.geocities.com/filippa54782grover11025/
uri: http://ca.geocities.com/arch93554vinni74935/
uri: http://ca.geocities.com/karita91029kikelia28943/
uri: http://au.geocities.com/opal65982berta74613/
uri: http://au.geocities.com/currie50477dannie87600/
uri: http://uk.geocities.com/hamlen58035gabriele32842/
uri: http://au.geocities.com/melony8507kayle43814/
uri: http://au.geocities.com/sansone28259kippar39430/
uri: http://ca.geocities.com/rube55132fidelity2938/
uri: http://ca.geocities.com/cecilla59747vonny23020/
uri: http://ca.geocities.com/barny52108hanni35248/
uri: http://au.geocities.com/pierette2630rhodie89397/
uri: http://uk.geocities.com/terry88878odelia31888/
uri: http://ca.geocities.com/cortney68092raimondo66187/
uri: http://uk.geocities.com/aldridge98150wilfrid4076/
uri: http://ca.geocities.com/artur74689harp18490/
uri: http://au.geocities.com/olympia19940parsifal46310/
uri: http://au.geocities.com/johnny14789broderick63702/
uri: http://uk.geocities.com/ramona22912portie25673/
uri: http://au.geocities.com/tootsie62542nikita37436/
uri: http://uk.geocities.com/antonius14010waverly97461/

Y

status: down

http://62.119.28.243/broadcastemail/

uri: http://uk.geocities.com/louisette42897saudra96871/
uri: http://au.geocities.com/jessi2635corrianne64610/
uri: http://au.geocities.com/prinz51107blancha72518
uri: http://ca.geocities.com/adolph55110lona51107/
uri: http://uk.geocities.com/allyce41085tuesday30303/
uri: http://uk.geocities.com/roman99946lonna66099/
uri: http://uk.geocities.com/ginnie14697nonnah45520/
Y

status: down
time: 50 days (1month +)

NEWS: new WEBSITE
China is now 'expired'

http://broad.ztjm.com/ (china)

uri: http://uk.geocities.com/ramona22912portie25673/
uri: http://uk.geocities.com/antonius14010waverly97461/
uri: http://au.geocities.com/tootsie62542nikita37436/
Y

status: down
up-time: couple of hours

http://62.149.193.221/broadcastemail/ (italy)

uri: http://uk.geocities.com/sibby2891janot79802/
uri:http://au.geocities.com/dina19963electra91067/
uri: http://au.geocities.com/guglielma15411romona79535/
uri: http://uk.geocities.com/paulita74406charlotta21884/
Y
 
 
 
 
 
 
 

status: down
uptime: couple of hours

http://83.17.42.146/broadcastemail/ (poland)

uptime: 61 Days

http://210.7.70.150/broadcastemail/ (india - very lower caste)
uri: http://au.geocities.com/beverlee78668marla31926/
uri: http://ca.geocities.com/ted35795falito33228/
uri:http://uk.geocities.com/sandy84914isaiah5479/
? http://uk.geocities.com/natty44690tammi64102/
? http://au.geocities.com/monah56549lincoln29484/
? http://uk.geocities.com/sandra88398ephrem4089/
Y

upime: 6 days

http://62.204.237.170/broadcastemail/ (cz,eu)
uri: http://uk.geocities.com/alvinia82960olvan76817/
uri: http://au.geocities.com/dionysus20558ambros44611/
uri: http://ca.geocities.com/merci13559carley92014/
uri: http://uk.geocities.com/alika8411wiley87321/
uri:http://ca.geocities.com/ted35795falito33228/
uri: http://uk.geocities.com/belicia60930bobbi557
uri: http://au.geocities.com/larina98788evonne28916/
uri: http://ca.geocities.com/berti75397orv90753/
uri:http://ca.geocities.com/berti75397orv90753/
Y

uptime: 10 Days

http://advertising.voddo.cn/ (China)

uptime: 6 days

http://62.123.150.18/broadcastemail/ (Italy)
uri: http://uk.geocities.com/boot74365brigitta26464/
uri: http://ca.geocities.com/talbot36966eleanore31170/
uri: http://au.geocities.com/orville43112erena4619/
uri: http://ca.geocities.com/hilda56247piper52204/
uri: http://ca.geocities.com/horace45655silvano62082/
uri: http://uk.geocities.com/crysta67804emmanuel71305
uri: http://au.geocities.com/laney22743hale94335/
uri: http://uk.geocities.com/nesta39103enos89743/
uri: http://uk.geocities.com/wain70005carlin1020/
Y

uptime: 2 days

http://217.40.152.75/broadcastemail/ (England)
uri: http://au.geocities.com/guglielma15411romona79535/
uri: http://au.geocities.com/monte41495robenia81545/
uri: http://au.geocities.com/margery43414miller98997
uri: http://uk.geocities.com/sibby2891janot79802/
uri: http://uk.geocities.com/natty44690tammi64102/
uri: http://au.geocities.com/simmonds61112frederic508/
uri: http://uk.geocities.com/miguelita3538christina90514/
uri: http://ca.geocities.com/bengt190auberta16185/
uri: http://au.geocities.com/hermann20025caroljean2274/
uri: http://ca.geocities.com/valentino55129yuri24758/
uri: http://uk.geocities.com/boot74365brigitta26464/
uri: http://uk.geocities.com/miguelita3538christina90514/
uri: http://au.geocities.com/simmonds61112frederic508/
uri: http://ca.geocities.com/bengt190auberta16185/
uri: http://ca.geocities.com/hilda56247piper52204/
uri: http://ca.geocities.com/talbot36966eleanore31170/
uri: http://ca.geocities.com/nita60800wolf58783/
uri: http://au.geocities.com/orville43112erena4619
uri: http://uk.geocities.com/orelia72474charisse34696/
uri: http://au.geocities.com/june47487timmy59996
Y

status: down
from: 18 March 2006
to: 26 May 2006 (69 days)

http://62.193.238.142/broadcastemail/ (France) - date entry

uri: http://uk.geocities.com/tiffy35215dyane77873/
uri: http://uk.geocities.com/misha37486cammi24695/

status: down
time: 21 Days (blank page)

http://broad.1122.ish.cn/ (China)
Blank page - terminated

status: up
from: 11 April 2006
to: 29 May 2006
then:
from: 22 November 2006
to: 22 November 2006>
then
from: 24 November 2006
to: (dns fun) 5 December 2006
uptime: first 50,1 day,13 days = 64 days

newportcorp.cn pointed to -> 222.210.196.86 (china)
thn-> 222.210.203.37 (china)
now-> ab508.vicp.net 60.0.157.29 (china), then china once again we think for a day, China again
Y

duration: 13 Days

http://jzgx.nydns.cn/ 60.18.162.5 (china)

status: down
from: 12 May 2006
to: 26 May 2006
duration: 12 Days

http://62.193.224.161/broadcastemail/

status: down
from: 12 May 2006
to: 20 May
duration: 8 Days

http://www.broadcastemailingcorp.cn/

status: down

NEWPORTCORPORATION.NET

status: down
from: 21 May 2006
to: 26 May 2006 (5 Days)
again: 30 May 2006
to: 4/6/06 (6 days 11 total)

broadcastemailcorporation.org/
now 211.155.132.206 (china)
Y

status: down
from: 21 May 2006
to: 16 June (26 days)

web-dateset.com
Y

status: down 1 day
from: 25 May 2006
to: 26 May 2006

broadcastemailcorporation.us
Y

status: ?for sale?
from: 4 June 2006
to: 22 June 2006 (18 days)

from 9 August 2006
to: 20 August 2006
uptime: 18+11=29 days

thebroadcastemailcorporation.com
http://www.domainsystems.com/bidform.php?
domain=thebroadcastemailcorporation.com

was: 221.10.254.97
was host 211.155.132.206 seen before here (China).

Auction
status: ownership unknown

Y

status: down
from: 16 June 2006
to: 20 June
from: 21 Aug 2006
to: 30 August 2006
then:
from: 29 November 2006
to: (dns fun) 5 december 2006
uptime; 4+9+6=19 days

broadcastemailcorporation.com
221.10.254.97 (china) x2, China

new owner
from: 4 Dec 2006

status: down
from: 23 June 2006
to: 23 June (couple of hours)

http://broadcastemailcorporation.us.hoc8.com/
'host of china', ev1.net american ip range (second sighting in this page.)

status: down
from: 29 June 2006
to: 29 June (couple of hours)
then: 6 July 2006
to: 11 July 2006 (six days and few hours)

emarketingcorp.cn
Y

status: down
from: 3 July 2006
to: 3 July 2006 (couple of hours)

emailbroadcastcompany.com
Y

status: down
from: 15 July 2006
to: 15 August 2006
time: one month.

broadcastemailworld.com
China
Y

status: down
from: 15 July 2006
to: 15 August 2006
up one month

BROADCASTEMAILGROUP.COM
China

status: down
from: 19 July 2006
to: 25 July 2006
then: 31 July 2006
to: 29 August 2006
up: six days 1st attempt
1 month and six days.

THEEMAILCORPORATION.ORG
China

status: down
from: 15 August 2006
to: 20 Ausgust 2006
up: 5day+

emailadvertisingcorporation.com
China

new owner?
from: 4 December 2006

Y
broadcastmarketingcorp.com
(omited) ?China?

status: down
from: 23 August 2006
to: 25 August 2006
up: 2days

ebroadcastcorporation.com
China

new owner
from: Late August 2006

Y

status: down
from: 26 August 2006
to: 28 August 2006
up: 2 days

broadcastemailcompany.com
China

new owner
from: 28 August 2006

Y

status: down
from: 29 August 2006
to: 31 August 2006
then: whois change
to: 1 September 2006
up: 3 days.

emailadvertisingagency.org
China

status: down
from: 04 Sept 2006
to: 14 September 2006
then
from/to: 27 November 2006
time: (couple of hours) up: 12 days and a bit.

broadcastemailinc.com
China x2
Y Y

status: down
from: 12 Sept 2006
to: 1 October
up: 17 days?

ctandres.com /bec
China
DOMAIN DISPUTE

domain dispute
from: 1 October.

status: down
from: 16 Sept 2006
to: 10 october
then
from: 16 October 2006
to: 16 November 2006
then again
from: 19 November 2006
to: 24 November 2006
then again (fun eh):
from: 25 November 2006
to: 27 November 2006
then...
from: 29 November 2006
to: 5 december (dns fun)
not up 17/12/2006
again (more dns tricks)
from: 1 January 2007
to: 3 January (dns fun)
not up 3/1/2007
up: 25 days first
28 days second
5 days third
forth 1 day
,fifth 6 days,
sixth: one day* = 66 days.

emailadvertisinginc.com
China (England, India x2, America x2 and continued dns games)
* guess, that is also assuming that the trick worked which i doubt.
Y Y

status: down
from: 23 Sept 2006
to: 1 October 2006
up: 8 day.

colidsilver.com
China

status: down
from: 24 Sept 2006
to: 16 October 2006
up: 23 day.

minserf.com
China

status: down
from: 12 Oct 2006
to: 17 November 2006
then. ? dead once (?italy) and
from: 20 November 2006
to: 22 November 2006
up: 34 days + 2 days = 36 days .

broadcastemailingagency.com
China
Y

status: no dns
from: ?
to: 12 Oct 2006
up: ?.

broadcastadvertisenow.com
?China

status: down
from: 16 November 2006
to: 18 November 2006
then
from: 19 November 2006
to: 22 November 2006
then:
from 28 November 2006
to: 8 Feb 2007
time: 1 day,3 days,72 days
= 78 days

permissionemailcorporation.com
America,China, China

status: down
from: 20 November 2006
to: 22 November 2006
time: 2 days

emailadvertisenow.com
was ?italy?, now China
Y

status: down
from: 23 November 2006
to: 24 November 2006
then
from: 25 November 2006
to: 15 January 2007
then
from: 2 Feb 2007
to: 8 Feb 2007
time: 1 day,52 days,6 days
= 59 days

advertisingemailcorporation.com
China,China, China 124.254.44.41 -now 124.254.44.10 ( in the same hoster ) dns bots. no dns
Y

status: (no hosting ever)
from: 26 November 2006
to: ?never up?
time:

optinemailcorp.com
?

status: down
from: 26 November 2006
to: 01 Feb 2007
time: 65 days

Awaiting dns

theemailbroadcastingcompany.com
China,China again 58.83.0.247,124.254.44.41 (China)
dns bot games.
Y

status: up
from: 15 January 2007
to: 31 May 2007 no dns
time: 124 days

EMAILBROADCASTAUTHORITY.COM
124.254.44.41 (China)
221.194.44.62 (China)
dns games.
Y

status: up
from: 20 January 2007
to: 31 May 2007 - do dns
time: 100 days

submit-me-now.com
seo spam op

China

status: down

catsdogsandpets.com

new owner
from: 24 January 2007

status: down

phone-example.net

new owner
from: 24 January 2007

status: down
from: 20 January 2007
to: 31 July 2007 (GUESS)
time: 192 days

nim-company.com
seo spam op

USA

status: up
from: 3 February 2007
to: 31 May 2007 - no dns
time: 117 days

permissionemailcorp.com


China
Y

status: up
from: 27 February 2007
to: 31 May 2007 no dns
time: 93 days

emailsolutioncorp.com


China
Y
globustravelclub.info
aristocratroyal.info

Drug sales domains

Unknown
Y

status: up
from: 27 March 2007
to: 31 May 2007 no dns
time: 66 days

emailmarketingassociates.com


China
Y

status: up
from: 5 April 2007
to: 31 May 2007
time: 57 days

theemailadvertisingcompany.com


China

status: up
from: 23 Jan 2007 (gandi dnsbot games)
then: 16 April 2007 (dnsbot games)
to: 31 May 2007 - no dns.
time: 47 days

emailbroadcastingcompany.com


China
Y

text in red denotes a remote observation from a report i've seen Remote report column denotes the email address could not be determined by myself (but the spam was deemed to be a Bob 'classic') .

- Red seen by others
- Black This information is observed by me alone - if you google hard enough im sure others will confirm these findings.

Search Engine Pollution

I am writing this but this appears to be new area for Robert Soloway - two domains for far submitmenow and nim-company - allow me think and flesh out with tables and other stuff see the 25 January 2007 blog entry if your impatient.

  1. submit-me-now.com
  2. nim-company.com

updates: There seems to be some questioning on the validity of these domains, but since seo's are spammers of garbage i see little reason to remove them.

As of the 1st August 2008 both these domains are 'defunct'.

Speaking of seo - I don't see a need for it, not that i care about ratings.

Whats Happening Now.

Current Month

Year

8

2008

See the last
entry or scroll
2008 down

December
November
October
September
August
July
June
May
April
March
February
January





20/10
25/09
29/07 24/07 21/07 17/07 13/07 12/07 11/07 6/07 4/07
27/06

20/03 15/03 15/03 4/03

21/01 11/01 8/01 6/01 3/01

2007

December
November
October
September
August
July
June
May
April
March
February
January


12/12 05/12
16/11 12/11 8/11
15/10 14/10

6/8 1/8
23/7 12/7 6/7 5/7
27/6 23/6 19/6 18/6 13/6 12/6 8/6 7/6 5/6 4/6 1/6
31/5 28/5 24/5 21/5 17/5 16/5 14/5 07/5 06/5 01/5
28/4 24/4 19/4 18/4 17/4 16/4 11/4 10/4 05/4 02/4
28/3 27/3 22/3 17/3 15/3 14/3 13/3 10/3 09/3 08/3 07/3 06/3 05/3 03/3
27/2 26/2 25/2 24/2 23/2 21/2 19/2 14/2 12/2 8/2 7/2 3/2 1/2 1/2
29/1 26/1 25/1 24/1 23/1 22/1 21/1 20/1 19/1 18/1 17/1 15/1 13/1 12/1 10/1 9/1 7/1 5/1 3/1

2006

Archive for 2006

the old

December
November
October
September
August
July
June
May
April
March
February
January

22/12 21/12 19/12 18/12 17/12 15/12 14/12 9/12 8/12 6/12 5/12 1/12
30/1129/11 28/11 27/11 26/11 24/11 23/11 22/11 20/11 19/11 18/11 17/11 15/11 14/11 8/11
25/10 23/10 18/10 16/10 12/10 10/10 1/10
24/9 23/9 18/9 16/9 14/9 12/9 7/9 4/9 1/9
31/8 29/8 28/8 27/8 26/8 25/8 23/8 22/8 21/8 20/8 18/8 16/8 15/8 10/8
31/7 27/7 25/7 19/7 16/7 15/7 14/7 11/7 07/7 06/7 05/7 03/7 01/7
30/6 28/6 24/6 23/6 22/6 20/6 19/6 16/6 14/6 6/6 4/6 1/6
31/5 29/5 27/5 26/5 25/5 24/5 23/5 21/5 20/5 14/5 01/5
22/4 20/4 15/4 12/4 03/4 01/4
29/3 21/3 20/3 19/3 15/3 14/3 13/3 12/3 10/3 06/3 04/3 03/3 02/3 01/3
27/2 26/2 25/2 24/2 20/2 18/2 17/2 16/2 14/2 13/2 09/2 07/2 06/2 04/2
30/1 27/1 23/1 16/1 09/1 07/1 04/1

2005

Archive for 2005

December
November
October
September
August
July
June
May
April
March
February
January

30/12 25/12 9/12 6/12 1/12
29/11 28/11 27/11 26/11 25/11 23/11 17/11 3/11 2/11 1/11
31/10 21/10 20/10 16/10 06/10 5/10
30/09 24/09 22/09 21/09 12/09 09/09 05/09
30/08 25/08 23/08 22/08 19/08 8/08
25/07 20/07 18/07 17/07 10/07 05/07 02/07 01/07
30/06 24/06 20/06 17/06 10/06 07/06 06/06 03/06
02/05
23/04
19/03 11/03 - 12/03
20/02 15/02 11/02 10/02 09/02 03/02 01/02
href="broadcastspam.html#22012005">22/01 18/01 17/0115/01, 13/01 05/01 ,04/01, 03/01, 02/01, 01/01
old entries to go here


2004

Archive for 2004


December
before that

29/12 21/12 1/12
31/10
27/10 9/10 23/9

next

Building...

who has bob been ?
some fake names for your enjoyment.
Chinese friendsother domain friends
liu feng
ash wen
ff ff - (really yes)
Song Wang
Aquil A. Naeem
Sierra Prine

Map of a mapMAPS (finished): Latest map map3e Robert Soloway Map's . Visit some spambots and take a tour of Robert Soloways old haunts.

.

.

where are we today meet spotWhere is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293
The Robert Soloway Locator url.

20 October: new home in Sheridan,OH Robert whom is now known as 37427-086.

A website by Michael Santos describes 'Sheridan' as:

The Federal Correctional Institution at Sheridan is part of a complex that holds three separate institutions. The complex is located about 90 miles south of Portland, Oregon, and those who serve time there enjoy the temperate weather of the Pacific Northwest. Most of the prisoner population comes from the Northwest and California. The medium-security FCI confines more than 1,500 men inside double fences that are separated and capped with coils of glistening razor wire. Inside the prison, the men are housed in one of eight housing units. Each housing unit holds between 150 and 200 prisoners. They are not allowed to spend time visiting in other housing units, though the men may congregate in small numbers on the recreation yard, in the education building, in the chapel, or during meals in the main chow hall. Adjacent to the medium-security FCI is a minimum-security camp that holds about 500 men. The men in the camp are held in relative freedom, as no fence confines them. They serve time under the honor system, and most complete their time in the camp without incident.
Robert Soloway in FCI Sheridan

Which is not the life he is used to.

Somehow i doubt that Soloway will 'never never ever' spam again in some form or other so see you all in the future. Signing off - bananas in the falklands.

25 September: In http://deepbackground.msnbc.msn.com/archive/2008/09/22/1432186.aspx Do a short piece on Soloway before prison (24 September 2008). It's a more polished than the below interview during the sentence hearing and a copy of the 'deep' interview has been retained for future airing once nbc get bored and delete there content.

Soloway in in Federal care and 'in transit' sine 24th September to where ever he ends up. More soon, same prisoner number as before.

Robert Soloway Federal prisoner

Robert Soloway in Transit to federal custody.

5 August: Comrade Vanessa Ho at Seattle Pi inorms us the 22 September is Roberts report date to be looked after by the federal government. Robert continues to put his foot in it.

He spends much of his time in the company of his lawyer, Richard Troberman, who declined to comment.   His posh Harbor Steps penthouse is long gone, exchanged for a small studio in the same downtown building.  I look back now; I never said 'bye' to a single person, he said of his Oregon days. In 2003, he wanted to start over and moved to Seattle with his cat, Simba. Vowing to scale down his business and spending, he wanted to go to museums, "get cultured"

That seems to discount Mr Tony Capozzola's account of who wears the trousers in this case from the Daily Breeze reporters story. And we know some of the motivations of the Seattle move now.

I dont quite get the association of being toy product seller on the internet makes you turn into being a vile spammer but then i must be plain dumb.

I wonder who gets to look after Simba ?

29 July: A video page has been created it can be accessed from most of the top menus on the site. A preparation of the words spoken by Soloway is also provided along with the moving pictures and audio if you find words better than trying to translate a non queens english accent. The words can be translated easier too into foriegn languages without it becoming a just a stream of words.

Mistakes are mine alone but thats what i heard Soloway speak, corrections to my text are welcome. I present the words as he spoke them and reserve observations on them for later. - You all know my views on the subject and its best to dig your grave and Soloway knows how to do that without needing our 'help' .

Lots of more updates i'm afraid. In the court page we have 2ndSupSentMemoSoloway.pdf 1stSupSentMemoSoloway.pdf and 1stSupSentMemoGovt.pdf which come from spamsuite.com dealt with the court page. IT IS NOT BORING

testimony of Steven Collins, proving that on a single day on which Soloway used the server he had rented (fraudulently) from Liquid Web to send fraudulent e-mails, he was initiating 4,468,306 such transmissions, at the rate of 71,882 per hour (and using 3001 proxy computers to do so.)

Not co-operating either with previous judgements - NOT BORING snipet

At almost 30 years of age, Soloway doesn’t work to pay for those luxurious accommodation; he doesn’t need to because his parents pay all his bills. The government notes that during the same 14 month period since his arrest, Soloway has made not one penny of payment in restitution to any of his victims - many of whom are known to the ...

We have video, and a interview and transcript of what robert said ouside courtfor those of us who like to digest the words and dont have the verbal road runner comprehension for even i find Mr Soloway belted out those words.

Court action is not yet over, i have seen no complete court report, and the restituion hearing is still to be heard - doj press release.

A contact informs me that Robert Soloway's website was indeed a template, since most of his site did not work quite where Mr Soloway paid for the the template, or could fix it is a point of discussion too.

Soloway takes Klonopin drug, that is not available in federal prison hence the 60 day stay of sentence.

Robert Soloway meets the press 22 july 2008 24 July: Restition court sitting to come. Sorry no court transcript from the horses mouth yet but press coverage in this

The case has been closely watched because only a few such spam cases have ever been tried. A man named Jeremy Jaynes was sentenced in Virginia earlier this year to nine years in prison for his spam crimes, and Adam Vitale got slightly more than two years for a recent conviction in New York.

The prosecution argued that Soloway should get more prison time than any of the previous spammers, asking for a sentence of seven to nine years. "None of those cases, not one, comes close to this case in terms of the duration of the maliciousness, the harassment techniques, the high level of spamming activity that we have in this case," said assistant U.S. attorney Kathryn Warma.

However, compared with some other notorious spammers, Soloway deserved some leniency, his attorneys said. Soloway didn't damage anyone's computer, he didn't send out malicious code, and he never directed people to pornography, as some spammers have done, his lawyer Richard Troberman said. Jaynes, for example, had millions of AOL e-mail addresses that were stolen from the ISP (Internet service provider), and he was earning as much as US$700,000 a month from his activities, Troberman said. By comparison, the government figured conservatively that Soloway earned more than $700,000 in three years.

But the Soloway case was an opportunity for the courts to dissuade online criminals from continuing their work, Warma said. "A disturbing theme we repeatedly saw from the complainant is, why isn't the law being enforced on the Net? Why isn't CAN-SPAM being enforced?" she said. "This individual has refused to stop his criminal conduct, notwithstanding two separate civil judgments and an injunction by a U.S. federal court judge. I suggest to you the only effective way to stop Soloway is a long prison sentence during which he'll be incapable of continuing this criminal activity." Soloway has previously lost cases brought against him by Microsoft and by an ISP in Oklahoma, yet continued to spam.

Pechman said it was difficult to come up with a sentence for Soloway because there have been so few other spam cases in the courts and because the legal system doesn't yet have appropriate sentencing guidelines. "This statute really needs a set of guidelines written and tailored to the CAN-SPAM act, tailored to the evolving computer science that allows people to engage in this activity," she said. "The current guidelines are not really very helpful," especially when CAN-SPAM violations are combined with other crimes, she said.

Soloway apologized to the judge and to his family, admitting that his actions were wrong. "There is no one else to blame but myself," he said, before the judge handed down her sentence.

Soloway has apologized for his activities before. After he was investigated in 1999 in California for spamming activities, he told detectives that he was sorry and learned a lot, Warma said. "He then moved on to another state and immediately engaged in the same behavior," she said.

It has been more typical for Soloway to boast about his techniques than to apologize for them. In online forums he would brag that he would never have to pay the millions of dollars the civil courts ordered him to pay.

He claims he lived in a modest household growing up but went to school with kids who were wealthier. He didn't have friends and always figured that if he earned a lot of money, people would like him, he said. "The only time people ever talked to me was when I made money or spent it," he said. "It was completely wrong. I'm very embarrassed and ashamed."

Microsoft attorney Aaron Kornblum attended the hearing and said he was pleased with the results. "Soloway repeatedly broke the law. He defied a federal judge and he made a lot of money. This sends a strong message."

Soloway was one of the first spammers Microsoft sued when, in 2003, the company decided it was time to try to put a stop to spam using legal means. At the time, Soloway was known as the third-most-prolific spammer in the world, Kornblum said.

In addition to the prison term, Soloway will serve three years of probation and must do 200 hours of community service.

The government has also asked for a separate restitution hearing.

For the reord i hated Soloway when he had money and still hate the bastard now. Seems a little unfair to blame the rich kids, he (or his parents) it appear have some deep psychological issues as most neurosies with children are associated with the parents.

in this the number of kings of spam is commented on. a common theme is this.

"I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails," he [soloway] said.

“[soloway am very embarrassed and ashamed.”

Spamhaus.org's view.

Richard Cox, chief information officer of anti-spam group Spamhaus, told SCMagazineUS.com on Wendesday that he was a bit disappointed by the lighter-than-requested sentence imposed on Soloway. But Cox said he takes solace that a number of other high-profile spammers have been charged under federal laws.

"At least we are seeing consistency of these guys going down," he said.
In Palos Verdes Denise Nix, of the dailybreeze.com gets a scoop.

Soloway replied: "I was used to living a certain lifestyle and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt, the newspaper reported.

When federal agents raided his upscale apartment in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes valued at $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Soloway has been living in a halfway house since he posted bail. He'll stay there until he surrenders in two months.

He added, "I am happier than ever because people actually talk to me for who I am."

Redondo Beach attorney Tony Capozzola, who represents Soloway, said the prosecution was overzealous in asking that his client spend about nine years behind bars.

But Capozzola said the judge, in sentencing his client to 47 months in prison, rightly considered how new Soloway's crimes are and rejected the prosecution's estimates of how much monetary damage Soloway's activities caused.

He said Soloway will likely be released in about two years, and will serve the time at a prison "camp," which will allow him to work.

"I'm really happy with that," Capozzola said. "I think a fair sentence came about in this case."

He said he spoke with Soloway's family, which still lives in the South Bay, after the sentencing.

"They are relieved that the matter is over," Capozzola said. "They do understand that some punishment was required, and they don't have any argument with the court's findings."

Soloway pleaded guilty in March to one count each of e-mail fraud, mail fraud and tax evasion.

Because this area of law is so new, both sides agreed that there were some challenging issues.

Soloway broke the law two ways: He made fraudulent misrepresentations about his service to customers and personally engaged in spamming.

According to the charges, he sent tens of millions of e-mails to advertise his company, which mostly operated under the name Newport Internet Marketing, from November 2003 until his arrest.

He told potential customers that, for $495, they could have an advertisement sent to 20 million e-mails, or receive software that will allow them to send up to 80 million e-mails themselves.

He claimed that the "broadcast e-mails" were legal because they were to people who agreed to receive messages, and he promised a money-back guarantee and around-the-clock technical support.

Soloway was arrested as part of Operation Bot Roast. According to the Department of Justice, a botnet is a collection of comprised computers that fall under the remote command and control of a criminal "bot herder" or hacker.

Most victims don't know this has happened, but their computer - and their domain names and e-mail addresses - then become the conduit for identity theft and spam.

Assistant U.S. Attorney Kathryn Warma said in court filings that Soloway's crimes were "markedly malicious" and he made "brazen and even boastful claims that he is above the law."

His activities continued even after he was ordered to pay nearly $7.9million to Microsoft in May 2005 and an Oklahoma Internet service provider more than $10million in September 2005. He never paid.

Warma argued and presented evidence to show that Soloway's actions cost millions of dollars - and warranted the higher sentence.

Soloway's attorneys argued that the cost to spam victims who only had to hit the "delete key" is minimal.

"Someone who sends unsolicited spam should be punished, but when you compare this with the federal crimes of major distribution of narcotics and violence, and bank failures caused by greed, this crime certainly does not rise to a sentence of 10 years in prison," Capozzola said.

Soloway's attorneys also asked for leniency because he has Tourette's syndrome. He has two months to surrender so that he can work out his medication issues. 

Been a while since Tony Capozzola has been heard of. theolympian.com a Seattle newpaper notes

Soloway said he is deeply in debt and owes more than $17 million in civil judgments.  ... So, are they victims or perpetrators?" Pechman asked

There is a point when the judge misses the point - yes spam can be called marketing too, and when spam is sold as marketing does that make marketing as evil as spam ? - remember i just log the spams i got, i never bought the soloway lies.

Paul Shukovsky of seattlepi.com seems to have been in court

'Spam King' gets nearly 4 years in prison
Judge likens sending fraudulent e-mails to Internet pollution

By PAUL SHUKOVSKY
P-I REPORTER

U.S. District Judge Marsha Pechman ended the reign of the so-called Spam King, who earned his title by sending out millions of unwanted e-mails, by sentencing the Seattle man to nearly four years in prison Tuesday.

Robert Soloway is the second person in the country to be convicted under the Can-Spam Act for flooding the virtual world with fraudulent e-mail messages. His sentence of 47 months is less than half of what prosecutors wanted.

Soloway told Pechman that he did it for the money to pay for fine clothes and a luxury apartment. But Pechman likened him to a polluter who had fouled the Internet.

Investigators said Soloway used software called Dark Mailer to tap into a network of "botnets" -- zombie computers that he used to send bulk e-mails with anonymity. He also sent out advertisements for his commercial e-mail clients using the addresses of real people without their permission.

Assistant U.S. Attorney Kathryn Warma called spamming a serious problem and compared the Internet to "a free-ranging Wild West" that is a welcoming environment to such cybercriminals as Soloway.

The prosecution and the defense jousted Tuesday over aggravating factors that could persuade the judge to increase Soloway's time behind bars.

Although Soloway acknowledged that he sent out a huge number of illegal spam e-mails, defense attorney Robert Wayne said there was "not a shred of evidence" that he used zombie computers to do it.

Soloway violated the Can-Spam Act, in part, by falsifying the header information in his e-mail messages. The program he used automatically substituted the e-mail recipient's name for that of Soloway's, making it appear that the recipient had sent a message to himself or herself or used bogus addresses in the from field. The purpose of these digital gymnastics was to get around any spam filter on the recipient's computer.

The sentencing Tuesday followed guilty pleas from Soloway in March to single counts of e-mail fraud, mail fraud and tax evasion.

Reviled by anti-spam groups, Soloway sent more than 90 million e-mails in just three months through two servers, according to court records.

Warma and fellow Assistant U.S. Attorney Richard Cohen had asked Pechman to send Soloway away for nine years. Richard Troberman, another of Soloway's attorneys, wanted a sentence of two years at the federal prison camp in Sheridan, Ore., and a fine of less than $100,000.

Pechman first heard from Soloway, then chose a middle ground.

Soloway -- composed and smartly attired in a conservative suit and muted tie -- told Pechman: "I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails."

Pechman asked Soloway why he continued with his spamming after another judge in a civil lawsuit enjoined him from continuing.

Soloway spoke frankly. "I was used to living a certain lifestyle, and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt.

When the feds raided his upscale apartment at the Harbor Steps in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes worth $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told an attentive Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Now living in a 400- square-foot apartment under the supervision of federal officers pending his imprisonment within 60 days, Soloway said, "I am happier then ever because people actually talk to me for who I am."

Prosecutors now want to seize nearly $705,000 in Soloway's property, including his computer. But he said he has little left to seize.

The federal prosecutors asked Pechman to send a message by imposing the maximum sentence of five years for e-mail fraud alone, the violation of the Can-Spam Act.

"The government believes that it is important uniquely in this unprecedented e-mail fraud case to recognize and pronounce publicly, and emphatically, that fraud in e-mail is a serious crime," Warma and Cohen said in a sentencing memo to the court. "The financial and societal costs of this crime are immense."

Soloway committed his crimes on the Internet "for the very reason that they would maximize his criminal reach to hundreds of millions of people worldwide, also have the concomitant potential to inflict corresponding damages of a heretofore unimaginable scope, to victims in numbers that were impossible and even incomprehensible with the use of 'traditional' tools."

Pechman did send a message. But it was neither as sharp as the prosecution wanted nor as lenient as the defense sought.

The judge likened spam to pollution because it is "spewed out ... has an impact on everybody who has a computer, and there are some people who are poisoned by it, and there are others who are merely annoyed."

Pechman called criminal spamming "new territory" in jurisprudence. "There is not much case law." And she noted it's close to impossible to accurately count the number of Soloway's victims and to quantify the damage done.

"We have an emerging social problem," said the judge. "The World Wide Web has given us a new criminal playground."

Many people -- some of them quite brilliant, some of them quite mad -- have found their way there, she said.

"Mr. Soloway went into his bedroom at age 11, turned on his computer and that froze him in time in terms of social development."

Pechman gave Soloway at least 60 days to report for imprisonment so that he can resolve problems with medication for Tourette's disorder, which is characterized by involuntary movements and verbal outbursts. 

not a good tiper either

TOMMYPRAXEDES at 7/22/08 5:03 p.m.

i have given this guy a cabride before,he was vry arrogant and stiff me on tips

In

In court on Tuesday, Pechman likened Soloway to an 11-year-old boy who sat down at a computer years ago and never grew up.

In kirotv has a longer interview 11 minutes.

Dont like the scumbag - oily I expect that he shall become a problem on his release.

21 July: Court to sit is comfirmed.

United States District Court Calendar
     Honorable Marsha J. Pechman
     Courtroom 14206
     Tuesday, July 22, 2008

     Eileen Scollard, Courtroom Deputy
9:00am      CR07-187MJP        U.S. VS ROBERT 
                                       ALAN SOLOWAY        
                               Kathryn Warma
                               Sentencing                             Richard Troberman ..

hours 3 1/2                            on bond
Court reporter: y/

17 July: Thank you for the viagra spams 74.55.158.66. Another priceless idiot.

a penny for your thoughts ? J D Falk Local news komo tv - gives us the picture while the Judge does her thinking on fraudster/idiot we all 'love and care' about so much - oh my that soap is slipperly.

A 'mr botnet' related item in this

shows some of the mechanics to us lowly non law enforcement soloway watchers get to know about 'who'. Subcontractors have neen known about but we had no names (via paypal) as Robert Soloway decided never to make them available to civil court.

From the stand on Monday, investigators revealed some of the techniques that Soloway allegedly used to send out massive amounts of e-mail. After the government seized Soloway's servers from GoDaddy, a hosting company, investigators found files with as many as 10 million e-mail addresses on each server

.. also found Dark Mailer software on each server. Dark Mailer is a program that users can set up to automatically send out mass e-mails, drawing from databases to fill in the to, from, subject and body fields of the e-mail message. It also can spoof the header information, making it difficult to trace where the mail came from.

Selling the tools used by spammers is easy money, at least until you get caught. Just ask Adam Sweaney, a man charged with computer fraud who took the stand at the sentencing hearing in Seattle for Robert Soloway, the so-called spam king.

Sweaney said he earned about US$2,500 a month for a couple of years selling botnets that could be used for a variety of activities including sending spam e-mails. He didn't even write them himself, but he traded or bought them in online forums, he said.

Sweaney didn't sell a massive volume to a wide variety of people -- a typical week might involve selling three or four botnets to any of his six regular customers, he said. He also sold millions of e-mail addresses to spammers, including one who, unfortunately for Sweaney, was an undercover U.S. Federal Bureau of Investigation agent. 

No honour among thieves there. Do notice Bob Parsons of godaddy.com gets a mention? - cheers Bob nice to see you made money from Robert Soloway. Ignoring civil court injunctions and the rest means - "im doing it my way".

Non profits - don't like this this site, i have guessed that no charity donations where ever made by Robert, or invented by Robert and the wild claims put on the ever moving website which had so many names, Soloway seems to have stiffed charites too even ones like this.

One such victim was Thomas Miller, who runs a nonprofit, nondenominational religious organization that counsels death row inmates and helps jobless and hungry people in Ohio. Newport Internet Marketing offered to run a free e-mail campaign for Miller, who was looking to raise money for his organization. Instead, Miller's Web site was ultimately shut down by his hosting company after the company found that large amounts of spam e-mail were being sent from his account, purportedly by Soloway.

Miller estimates he lost $12,000 to $24,000 throughout the debacle while he scrambled to get a new site up and lost potential donations because he was without the site. He said he testified at the hearings because it was the right thing to do, but he doesn't have high expectations. "I don't believe I'll ever get anything," he said. 

The jump from death row to homeless seems a rather wide remit. Anyhow no issues there it seems - business or charity your both game for Robert Soloways fraud and games.

The bank fraud (credit card charge backs) and stuff mean that somehow we will all recompense the banks for Soloways losses. Quite what that says about american express and other card processors is another matter.

Fun begins again on the 22nd July, dont be silly and miss it. The more you know the less of a defence Robert Soloway seems to have is an observation one can make.

13 July: We have sentencing recommendations and they are in the court page. Reading the Govt's evidence file (175 pages) 'OttO' at the Better Busines Bureau of OR,western WA and Alaska comes across as a bit useless retard - if i where them i would get rid of Otto for being useless.

Being 'foriegn' my knowledge of us case law isnt a strong point which is what the Troberman brief is mostly on tryng to reduce the sentence.

However with court doc's/enraged clients/statements from Robert himself about not cooperating and the like and a total disregard for the law as evidence I am not quite sure how thats going to 'wash' after all Robert might as well declare that the law should not apply to him. It's not just one rogue parking ticket.

In Robert is on the TV news America only it appears - i cannot view this.

In page 12 paragraph 43 (page 18 of the Troberman sentence pdf) It seems we make an entry.

[..] was involved in hacking and posted vile, vulgar, and twisted messages
 
According to Troberman we also hacked into the Swedish Woman's Educational Association (SWEA) website.

vile ? - hacking - you'd be amazed what a bit googling here and there turns up with. Many hackers would be upset if they knew that using google (or any other search engine) made them into 'hackers'.

Remember citizens next time you click on a url that's 'hacking' according to Mr Troberman. Lol.

Troberman and Soloway should both remember that if he had not spammed me to start with, or stopped continuing to spam me then this site and my 'interest' in it would have not existed.

12 July:Robert Soloway attending Federal court at Seatle 11 July 2008. Comrade Ed sends this picture of the spammer Robert Soloway. This is a first since it is the first official picture of him. We have the the unattributed and now defunct myspace picture (looks the same guy with a bit of extra fat). All pictures/videos welcome. IP geoloation witll probably prevent me getting this direct.

Theres a lot of stuff i need to review before i put it here so expect some daily updates.

Comrade Buss_Error in NANAE (thats nntp) hilights a few of the sticky wicket (the game of cricket) that Mr Troberman invokes on the mental state of Robert.

In the interest of full disclosure, here's the quote:

"In a letter to the court, David Comings, a leading world expert on
Tourette's Syndrome who first diagnosed Soloway's condition in 1988,
said Soloway's "genetic impulse disorders, Tourette's Syndrome and
attention-deficit hyperactivity disorder have contributed to his
(uninhibited) behavior and affected his judgment."

There is no page titled "David Comings" on wikipedia.
Searching Google: 

http://tourettenowwhat.tripod.com/GeneBomb.html

Hmmm. "controversial work". With this bit:
"In a remarkable series of papers by Comings and Comings in the
Journal, a number of claims are made that have profound implications
for future research on Gilles de la Tourette syndrome (TS).  Their
assertions fall outside of the mainstream of the very extensive TS
literature that has developed over the past 2 decades. The novelty of
the conclusions and the visibility of their presentation require that
the papers receive thorough discussion."

I'd hesitate to say "Quack for hire", but being "controversial" is
often a hallmark of such.

Tourette's Syndrome:
http://en.wikipedia.org/wiki/Tourette%27s_Syndrome

no cite for genetic impulse disorders. Perhaps this?
http://en.wikipedia.org/wiki/Impulse_control_disorder

or this?

http://en.wikipedia.org/wiki/Obsessive-compulsive_disorder

and for attention-deficit hyperactivity disorder

http://en.wikipedia.org/wiki/Attention-deficit_hyperactivity_disorder

Hmmm. OK, he can't control what drops out of his mouth (Tourettes).
Relation to spamming - NONE

Hmmm, Impulse control? Possible connection to spamming. More as one
GETTING the spam than SENDING it.

ADHD? Connection to spamming - NONE. In fact...

That deals with that problem. If your USA state based attorney general like Andrew Cuomo of NY isnt bannng all usenet then the discusion is worth a peek.

Being foriegn to most of the American judicial process i am pleased to report that the guilty plea by bob means no appeal.

I wonder if Jesus will turn up on monday and claim Soloway was on a 'mission from god' ?

11 July:In http://seattlepi.nwsource.com/local/370341_spamking11.html It is expected that events are to have be concluded on the 14 July (monday)

'Spam King' to be sentenced
Two-day hearing starts Friday for man who sent 90 million e-mails

By MIKE BARBER
P-I REPORTER

The lineup of people to testify in the sentencing of the 28-year-old so-called King of Spam is so long that it will require an unusual two-day hearing beginning Friday in federal court.

Robert Alan Soloway, only the second person to be convicted of criminal spamming under the 2004 "Can-Spam" law, pleaded guilty in March to single counts of mail and e-mail fraud, and to tax evasion.

The plea was entered 10 days before his trial was to begin on 37 more counts, including multiple counts of those crimes as well as wire fraud, money laundering and aggravated identity theft.

In the government's sentencing memorandum filed Monday, Soloway is said to stand out "worldwide for the volume and markedly malicious nature of his criminal spamming activity; the fraudulent 'spam promotion' sales scheme associated with it; and for brazen and even boastful claims that he is above the law and anyone -- even federal judges -- who would dare attempt to seek his compliance with it."

U.S. District Judge Marsha Pechman is expected to sentence Soloway following the conclusion of testimony slated for Monday.

The charges carry a maximum sentence of 20 years in prison and more than $500,000 in fines.

Prosecutors Kathryn Warma and Richard Cohen, both assistant U.S. attorneys for Western Washington, have asked for nine years in prison and a stiff fine in the $400,000 to $1 million range.

Soloway's attorney, Seattle lawyer Richard Troberman, responded with a recommendation of two years in prison at the Federal Prison Camp in Sheridan, Ore., and a less severe fine under $100,000.

Troberman argues that the government's recommendation is disproportionate to the crime and wants Pechman to consider that his client suffers from behavior-altering conditions -- Tourette's syndrome, attention-deficit disorder and "oppositional defiant disorder" -- for which he takes medication.

Federal prosecutors sought the two-day hearing to provide experts, witnesses and victims from around the nation and overseas to explain the technologies and evidence schemes in light of the 2004 law, and demonstrate how victims were affected between 2003 and 2007.

Victims, who include a businessman from England, are expected to testify first. Others include an Oklahoma man who never saw a penny of a $10 million judgment he won against Soloway in 2005; FBI and private computer analysts and security experts; and Adam Sweaney, who is himself awaiting sentencing on federal criminal spamming charges.

Sweaney, court papers say, will testify that Soloway rented a network of hacked computers, also known as a "bot net," to expedite bulk e-mail, or spam.

Soloway ran afoul of the Can-Spam Act by falsifying the header information in his e-mail messages to get around spam filters, investigators have said. That was done by using a program that automatically substituted the e-mail recipient's name for Soloway's, causing messages to appear as though recipients had sent them to themselves.

Investigators earlier this year said Soloway used software called Dark Mailer, which allows users to tap into a network of proxy computers to send spam anonymously.

Soloway, who is internationally reviled by anti-spam groups, sent more than 90 million e-mails in three months through just two of the servers he used, investigators said.

In his written response to the government's recommendation, however, Troberman argues that the federal case, as well as some victims' claims, are overblown.

"Without question Mr. Soloway has been a nuisance to Internet users, but the court should keep his offense in perspective," Troberman wrote. "What he did was send huge amounts of e-mail over the Internet advertising his product and service, often using forged headers to people who did not want to receive it."

Troberman said Soloway never sent worms or viruses to damage computers, for which others have received less severe sentences.

Essentially, Troberman argues, Soloway has never faced charges in the criminal justice system and has learned his lesson. "His likelihood of recidivism is low," he wrote, saying Soloway "will remain law-abiding."

Before criminal charges were brought against him by the Justice Department in May 2007, Soloway had been found guilty in several civil spam cases, including a judgment Microsoft won against him in 2005 worth more than $7 million. An Internet service provider in Oklahoma was awarded a $10 million judgment that same year.

The federal judge in that case enjoined Soloway from initiating across state lines commercial e-mail messages that contained false or misleading information.

But Soloway disregarded that order, prosecutors say.

"Remarkably, Soloway brazenly defied Judge Thompson's permanent injunction every day thereafter, until the day of his arrest some 15 months later," the prosecution's sentencing memorandum says.

Further, prosecutors say, Soloway evaded collection efforts and publicly boasted about it on an Internet chat room, writing:

"I always win ... regardless of the judgment amount ... losing is not an option, and I never ever, ever have to pay a single cent to anyone."

According to court documents, Soloway began his "broadcast e-mail" business in California when he started up Newport Internet Marketing in 1997. After California passed one of the country's first criminal spam laws in 1999, several police agencies there began investigating Soloway in connection with an array of spamming complaints, including one from the Japanese government. While charges were never filed, police noted that Soloway had "apologized for his e-mail practices" and said "he has learned a lot."

Soloway then moved to Oregon, sending spam from several locations but also, his defense lawyer notes, in 2003 helping form a group for people with mood disorders called Moody Blues Stress Workshop.

In a letter to the court, David Comings, a leading world expert on Tourette's Syndrome who first diagnosed Soloway's condition in 1988, said Soloway's "genetic impulse disorders, Tourette's Syndrome and attention-deficit hyperactivity disorder have contributed to his (uninhibited) behavior and affected his judgment."

What is interesting about this is that the 'charity help' seems to be one that nobodies has every heard of or even Robert failed to boast of and they be "Moody Blues Stress Workshop." which i cannot find any reference to via a few quick and dirty google searches. Another lie that his Lawyer is 'broadcasting' for Soloway ?

That's normal Soloway tactics though. Very under the radar. Pictures and court observations needed, can you help ?

6 July: OK the start, the second and yet another You may begin to understand why i (and others) dont like spammers. The pages are rather old but from this Robert Soloway is clearly big in spam, his legacy is there for all to see whatever happens on Friday.

In this the second is a class example from 2005. Remember that wave ? on new years day. This was Spam 26. Enjoy

Subject: *SPAM?* Re: your web site might benefit from this...
From: Aida Goss richardg@centralpets.com
Date: Thu, 13 Jan 2005 18:41:59 +0100
To: yes @btconnect.com
Return-Path: no1@cashette.com
Delivery-Date: Thu, 13 Jan 2005 17:47:06 +0000
Received: from c2bthimr06.btconnect.com (actually host 206.73.73.194.in-addr.arpa) by dswu27.btconnect.com with SMTP-IBMR (XT-PP) with ESMTP; Thu, 13 Jan 2005 17:47:05 +0000
Received: from 200-171-244-37.customer.telesp.net.br (200-171-244-37.customer.telesp.net.br [200.171.244.37]) by c2bthimr06.btconnect.com (MOS 3.5.4-GR) with SMTP id BOR35968; Thu, 13 Jan 2005 17:17:11 GMT
X-Message-Info: FXfahIJY79zeZ6IMWxcnTCX190SROtflSK5X51F1c3IU
Received: (from j9sedge@localhost) by vzi2-bulrush8.x1rtf.bluebottle.com (7.28.61/3.61.16) id kw146TBW96lgf694; Thu, 13 Jan 2005 12:47:59 -0500 GMT
X-Authentication-Warning: wyh87-madeira01.juv341mr.bolt.com: u65dispensable set sender to jimmack@marchmail.com using -t
MIME-Version: 1.0
X-Old-Subject: Re: your web site might benefit from this...

Click to Email Your Web Site
to 28 MILLION PEOPLE

=> F-R-E-E Today Only <=

If You Are a Non-Profit Organization That Aids the Tsunami Victims. Visit Our Web Site for Details on Our Offerings.
If You Fit the Criteria Above and Are Interested, Mail Us At: Tsunami Relief Non-Profit Offer, Box 1259, Seattle, WA 98111.
Every So Often We Will Email You A New Non-Commercial Special for Specific Non-Profit Causes.

    Unsubscribe From Our Non-Commercial/Non-Profit Email List
    (Please Note That The Primary Purpose of this Email is Non-Profit in Nature & is Exempt From S.877 Email Guidelines Because of! This)

The 'Tsunami Relief Non-Profit Offer' hmmm thats something to with Viagra right ?. Beware there's more to this story than meets the eye.

There's probably computer crime,theft (Brazil),use of a bot net, fraud, etc here. Please look beyond the sheep and see the wolf in lambswool jumper. Ask yourself - how does spamming via a computer in Brazil help an American citizen who is nowhere near the disaster zone ? The answer is it does not.

No charity has ever comfirmed any donation either publically. So I assume that no donations where made.

4 July: From http://www.wawd.uscourts.gov/calendars/JudgeMarshaP.PechmanCalendar.htm content changes every week so here is a pdf.

US COURT soloway sentence schedule
US Court
Sentencing schedule

U.S. Federal Courthouse | District Court | Calendar | Print
                         Page 1 of 1


 United States District Court Calendar
           Honorable Marsha J. Pechman
           Courtroom 14206
           Friday, July 11, 2008
           Eileen Scollard, Courtroom Deputy


 9:00am   CR07-187MJP     U.S. VS ROBERT ALAN SOLOWAY         
                Kathryn Warma           

Sentencing                        Richard Troberman          					  Richard Cowan
                                  on bond
   All day                            Court Reporter: y

OK see you all soon.

27 June: Its been seven days since a sentence was due to be passed/considered in Seattle, i seem to be drawing blanks on the progress of this case (timezone 12:00 gmt). If you know whats going on please drop us a note.

Uncle sam. 20 March: Thanks to John Levine at http://www.circleid.com/posts/83207_more_the_soloway_spam_case/ we have a copy of the plea. - A copy of the pdf document is here.

As mentioned on Opsan: no Tony Capozzola 'hotshot' lawyer link (where he go ? pasta problems* ? '*Italian lawyer'). Troberman the first lawyer seems to be back in control. It implies that assets are still hidden and that Soloway and family have withheld information.

It is worth a read http://thisfool.com/soloway-73.pdf.

15 March:Newsflash: GUILTY PLEA !!!!!

FOR IMMEDIATE RELEASE March 14, 2008 SEATTLE SPAMMER PLEADS GUILTY TO MAIL FRAUD, SPAM AND TAX CHARGES Man Sold Spamming Software and Spamming Services Impacting Millions of Computers ROBERT ALAN SOLOWAY, 28, the owner of NEWPORT INTERNET MARKETING CORPORATION of Seattle, Washington, pleaded guilty today in U.S. District Court in Seattle to Mail Fraud, Fraud in Connection with Electronic Mail, and Willful Failure to File a Tax Return. SOLOWAY was indicted in May 2007. SOLOWAY, dubbed the “Spam King” by investigators will be sentenced by U.S. District Judge Marsha J. Pechman on June 20, 2008. According to records filed in the case, between November 2003, and May 2007, SOLOWAY operated NEWPORT INTERNET MARKETING CORPORATION (NIM) which offered a “broadcast email” software product and “broadcast email” services. These products and services constituted “spam” i.e. bulk high volume commercial email messages that contained false and forged headers and that were relayed using networks of proxy computers (including “botnets”). SOLOWAY and NIM made a number of false and fraudulent claims about the products and services on their website. Among them was a claim that the e-mail addresses used for the product and services were “opt-in” email addresses. The website promised a satisfaction guarantee with a full refund to customers who purchased the broadcast email product. However, customers who later complained about the goods and services they had purchased, or who asked for refunds, were threatened with additional financial charges and referral to a collection agency. SOLOWAY spammed tens of millions of email messages to advertise the NIM websites from which he sold his product and services. Soloway constantly “moved” this website, which was hosted on at least 50 different domains. In the plea agreement, SOLOWAY further admits that in tax year 2005 he earned $309,725 in gross revenue, but failed to file an income tax return. Mail Fraud is punishable by up to twenty years in prison and a $250,000 fine. Fraud in Connection with Electronic Mail is punishable by up to five years in prison and a $250,000 fine. Willful Failure to File Tax Returns in punishable by up to a year in prison and a $25,000 fine. At the time of sentencing Judge Pechman will determine the loss amount and the amount of restitution, and the items to be forfeited to the government as proceeds of crime. SOLOWAY agrees in his plea agreement to submit to a polygraph examination regarding his assets. The case was investigated by the FBI, US Postal Inspection Service and Internal Revenue Service Criminal Investigations (IRS-CI) in conjunction with the Computer Hacking and Intellectual Property (CHIP) Task Force. The case is being prosecuted by Assistant United States Attorney Kathryn Warma.

Roll on June, It is my intention to continue to watch Robert Soloway as a fraudster and as a menance to anybody with an email address it needs to be done.

The evidence in this file of his activites will also remain. It has taken a year and twenty days from May last year to the judgement at this point.

A message for Judge Pechman

Robert Soloway has caused damage and fraud worldwide as an observer of the person you will have in your court may i please point out that he is not just a 'menance' to americans but to anyone with an internet connection which means that europe,india,south america and many other places have had to deal with and clean up his mess in some form. I hope that you will see fit to use the upper limits of the sentencing guidelines. Bananas in the Falklands

with 3/40 (other 37 charges dropped as part of the deal). Robert has the self admitted title of fraudster. - Its been a good day. I wonder how Tony Capozzola is going to explain this one ?

4 March: Related news that Jeremy Jaynes (a spammer) tried to use the 'free speech' arguement and lost in court, I wonder if Robert's motley legal team will use this ?

People seem to forget that freedom of speech means just that nothing more. Now with computer crimes commited worldwide by Robert, and that Robert had to rely on Chinese isps, not forgetting the theft charges. Means that nobodies rights have been abused.

Freedom of speech should be cherished, and if the 'advertising industry/pracitioners' ever needs this protection you know theres a problem.

21 January:Reading an interesting book about our friends the chinese which may explain why spammers in China switch from China telecom to netcom and China Mobile (things that Robert certainly did)

In Will Hutton's book the writing on the wall - china in the 21st century isbn: 9780316730181 on page 150 (Chapter six) quotes an economist article of 2005.

The soe* supervisory boards do not make this decisions. In the recent past the ceos of China Telecom,Netcom, Mobile and Unicom were arbitrarily swapped arround because the party was concerned that the companies were becoming too competitive and wanted to to encourage a more collaborative culture

*soe means critical chinese industry to the communist party ** party here means little red books, not dancing and drinking.

Its an interesting read.

11 January: Paul Shukovsky at the Seattle PI writes that the charges against Robert Soloway now number 40, and the event in March shall have a little of an 'international flavour' missing until now from us trial. In http://seattlepi.nwsource.com/local/346878_spamking11.html We have a non american victim (no not i)

Paul also writes that Robert is apparently 'reviled' by many - hmmm i wonder why. Perhaps somebody might explain this to me (humour btw).

A number of spammers try to defend Soloway here in the sound off section.

8 January: Our Kung Foo friend in opsan (Sensei) informs us that things have been set back further

Fraud and Related Activity in Connection with Electronic Mail 1 charge Pending Mail Fraud - Frauds and swindles 10 charges Pending Fraud by wire, radio, or television 5 charges Pending Laundering monetary instruments to promote specified unlawful activity 13 charges Pending Aggravated identity theft 6 charges Pending Falsifies header information in multiple commercial electronic mail messages 1 charge Pending Internal Case Number: 2006R01674 Court Docket Number: CR07-0187 A trial is scheduled before Judge MARSHA J. PECHMAN on March 24, 2008, 09:00 AM at United States District Courthouse, 700 Stewart Street, Seattle, WA 98101 in the case which involves ROBERT SOLOWAY.

In doc 295 The swedish connection becomes clear

Mr. Soloway has dual United States/Swedish citizenship by virtue of birth, pursuant to Swedish law (a child born to a Swedish mother is automatically a Swedish citizen) that went into effect nine days before his birth. Robert's mother obtained Robert's first Swedish passport in 1991 (at age 11) based on advice she received from a U.S. Customs -6- official. See declaration of Rachelle Soloway, attached hereto as Exhibit B. To avoid losing his Swedish citizenship, it was necessary for Robert to make application to the Swedish government for permanent citizenship before age 22. Accordingly, Robert submitted an application in 2001, just prior to his 22nd birthday. The application was approved on July 10, 2001.... As set forth in his Motion for Review, Robert's connections to Sweden are quite tenuous. His only "close" relative in Sweden is his eighty-five year old grandmother, who he has seen only once in the last twenty years (on a trip with his mother to celebrate his grandmother's eightieth birthday). Robert does not speak Swedish, and his grandmother does not speak English.

Sounds like the money/tax connection is under control by the Swedish and US tax authorites.

We all (from Opsan) get a healthy credit in the court document care of Mr Troberman - my comment about his possible 'retarded' cd-r skills gets a mention.

Countdown timer reset again - Robert still has time to leave and flee, so place your bets now! I'd like to say hello to Tony Capozzola who if our geolocation service is correct means he is visiting us - hi Tony, I assume to that the other one is listenting in.

Opsan - Should we move to use email ?

6 January: One day to Court (will he or wont he turn up and be called a loon?) But the 35 charges have become 37 (+2 from the irs)

At this week's arraignment he will face additional counts of wire fraud and aggravated identity theft, as well as two misdemeanor charges stemming from his failure to file income-tax returns. The IRS says Soloway had a gross income of $309,725 in 2005 and $294,334 in 2006, yet failed to file returns.

Source Seattle times (link opens in new window). They also confirm the Tourette's syndrome claim.

3 January: A happy new year. Being an idiot i fixed the countdown script thing (january is 0, not 1) The fun and games in court begin on Monday.

I hope to see you all soon.

12 December: Being that Christmas came early (June) this year for a lot of us. I was inspired to pen this based upon the carol.

On the first day of Christmas,
Robert Soloway did send to me
28 million email addresses for free.


On the second day of Christmas,
Robert Soloway did send to me
two Country music bands a spamming
and 28 million email addresses for free.

On the third day of Christmas,
Robert Soloway did send to me
Three logo designers designing logos for free
two Country music bands a spamming
and 28 million email addresses for free

On the forth day of Christmas,
Robert Soloway did send to me
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the fith day of Christmas,
Robert Soloway did send to me
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the six day of Christmas,
Robert Soloway did send to me
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the seventh day of Christmas,
Robert Soloway did send to me
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eight day of Christmas,
Robert Soloway did send to me
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the ninth day of Christmas,
Robert Soloway did send to me
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the tenth day of Christmas,
Robert Soloway did send to me
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eleveth day of Christmas,
Robert Soloway did send to me
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the twelfth day of Christmas,
Robert Soloway did send to me
Twelve drummers a diet pilling,
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

Rergardless of what do please, enjoy the new year and please come back in January when Robert faces trial in federal court.

5 December: In Danny Westneat of the Seattle Times takes up a media 'whats been happening since May 31 with Robert' in a roundabout oped peice.

While its nice to know that Bob is out of the picture lest we forget the other spammers out there.

Robert was plebeian than king.

Perhaps one king of many ?, a note as to why Robert got let out of pre trial detention reported was

A judge let Soloway out of detention because he has Tourette's syndrome. Without his meds, he was racked with "uncontrollable tics" and went days without sleep. He became suicidal.

Well i think we can add deranged loonatic to the what makes Robert Soloway 'tics' list dont you. Nice to see Trobermann and Capozzola are consistenty playing the 'my clients a mentally challenged moron' defence. Anyhow Mondays for us have not been the same since Soloway had his assets frozen in June - they got better.

where are we today meet spotHow 'really insane' Robert is remains a point of discussion. I note that a recent search for him (4/dec/2007)seems to put him in the care of his parents in Califonia. We all know the address.

Anyhow stay tuned later on this month for a specially adapted Robert Soloway carol 'the twelve days of christmas' which should lighten the mood here.

Anyhow that's enough insults for one day dont you think ?. we have January to wait for when the real fun starts.

16 November: Plans and promises.

Announcing as promised court.html (new window open) and a new front page (new window open) have been released. Comments welcome on both. I am 'working' on them still but they seem good enough to start using despite spelling issues.

The aim of the front page is a speedier loading file, and something that gently introduces Robert to people who may wish to find out more in January without looking at dig reports and going '?'.

MonsterThe court file should also be a lot faster to load. Rather than sticking new stuff in the broadcastspam.html file which is becoming rather a monster to load.

This file (broadcastspam.html) will be updated in 2008 after the trial. Its only fair that somebody keeps an ear to the ground.

Comments/thoughts welcome. Theres a month and bit for you to collect them.

12 November: Bot Herder news from Slashdot John Schiefer, 26 an it security consultant (*nudge nudge wink wink) working for 3G Communications, from Los Angeles has been convicted of making trojan computers. A better link is this.

8 November: A hunt last week seems to indicate that the Court has 'sealed' Robert Soloways proceedings. In plain english that appears to mean no more news from them until the trial.

Future plans: Thisfool.com will be getting a short executive summary front page soon (this page will remain as broadcastspam.html) and a court procedings page for the 2008 trial will be created which should be a more pleasant experience to load up compared to this monster.

Anyhow its been much better with Soloway in Prison and whatever he is up to now lets hope I dont need to advise you all of Bobs doings. However if have news sightings/photos/stories and would love them to be aired, or shared only by the trusted soloway watchers drop me line, or contact us all via Opsan.

Remember the comedy starts in Janaury 2008.

15 October: Robert Soloway has left his 'known' myspace.com account

Ongeldige vriend-ID. Deze gebruiker heeft zijn/haar lidmaatschap opgezegd, of zijn account is verwijderd.

Translation: Invalid friend-ID. This user has canceled its/her membership, or its account has been removed. Im sure hes on myspace again somewhere.

Will he skip bail - if only I was a betting monkey.

14 October: Hello again - In a stealth move by the Judge who it seems has decided Robert is not a flight list despite being dual nationality whatever he was released on the 20 September prision reigister Lets hope if he does skip bail the Russian mafia have a go at finding him.

1. ROBERT ALAN SOLOWAY 37427-086 28 White M 09-20-2007 RELEASED

That's 112 days behind bars, so if you see an increase spam, im blaming Bob (russian mafia take note please). Coverage in nanea. So lets all hope Bob turns up for his trial in January for the Judges sake.

Theres more going on here.

06 August: Missing it ? http://web.archive.org/web/*/http://emailbroadcastingcompany.com. An extra Youtube Soloway News Medely.

I like the later reporter who did a free peoplefinder search and made it sound 'so' authoritive even though thats about all he appeared to do (or got an intern to do it). Go Wayne who also discovered botnet's just three weeks ago!

Bananas in the Falklands thanks Wayne Havrelly for also discovering botnets for us all.

1 August: In seattle times newspaper we have a Robert Soloway Go Daddy server (Bob Parsons) link up.

The pile of potential evidence in Soloway's case grew in late June, when the government seized six hard drives from server computers maintained by GoDaddy.com, an Internet hosting provider. According to a search-warrant affidavit filed by the FBI on June 21, Soloway leased the six hard drives from March 30 until his arrest May 30. It is not known what the government found on the servers. According to the affidavit, Ben Butler, network-abuse administrator for GoDaddy.com, confirmed to the FBI a few days after Soloway's arrest that Soloway had leased the six servers, and that the "Dark Mailer" software program had been installed on each of them.

nim-company.com goes bye bye.Nothing to with this kill ? change of ownership ?

whois -hwhois.register.com nim-company.com 
[Querying whois.register.com]
[whois.register.com]

The data in Register.com's WHOIS database is provided to you by Register.com 

   Registrant: 
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Email: domainregistrar@register.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Sat, Jul 28, 2007

   Administrative,Technical Contact:
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Phone: +1.9027492701
      Email: domainregistrar@register.com

   DNS Servers:

   ns2.expireddomains.register.com
   ns1.expireddomains.register.com

Make up your own minds - the link is spamsuite.com/node/218 PDF document. Address used: Robert Solowa, with an address of 1200 Western Avenue, Seattle, WA

12. During the week of June 4, 2007, I spoke by telephone with Ben Butler, Network Abuse Administrator for GoDaddy.com. He advised me that Robert Soloway had rented a total of six dedicated servers from GoDaddy. Mr. Butler indicated that GoDaddy was interested in determining whether the servers that had been rented by Soloway had been used to transmit or distribute spam. Mr. Butler indicated further that if GoDaddy determined that the servers that had been rented by Soloway had been used in spamming activity, GoDaddy would turn those servers over to the FBI.

Appears boxes just had ip address allocations, no nameservering. Anybody confirm ?

Mr Parsons (godaddy founder) im surprised*. Not being privy to Soloways billing and bank records its interesting to see the hint of an back office address collection operation, but on godaddy.com who sell domains that's 'cocky'

Admin wise Some links clean up on this page. * i don't partically like Mr Parsons views (winge's really) on domain names (generic terms in europe etc) or trade with his operation in any capacity now, or in the past. Whether you can believe that 'anti spam bull' that godaddy.com state remains to be seen. Robert Soloway is (and was) a Rokso class spammer who it appears used his own address and name on the godaddy billing system.

23 July: Robert Soloway decided to spend some more time in Federal prison after waiving pdf 7/20/2007 - WAIVER of Speedy Trial which was agreed by all concerned pdf STIPULATION Continuing Motions, Filing Deadline, and Trial Date (The 20th July [Friday] was the last date to submit Filings in the Case if it was to have started on the 6 August).

So the first document listed seems to have been signed by Robert, Discovery to finished by 3rd December and the Trial date seems to be moved to the 7 January (some time up to 31 January 2008 in original request)

OK what is Tony Capozzola doing - I note much from troberman but nothing from the 'Italian' side.

Admin note: Countdown to Federal Trial and contact forms on this page have been added A big thank you to Andy for the 'proper' forms. - Change from 6 August to 7 January 2008 made to the countdown timer.

12 July: An aquaintance of Robert confirms the myspace site is Robert Soloway.

Everybody please meet somebody new called Kelly Horton who (and being a civilian in anti-spamming circles) does something in Oregon called tothepointtv.org: (link to source in new window requires flash). Who has a noteable view on Mr Soloway

Rachelle Soloway (his mother) it appears has a link with the http://www.swea.org/ Swedish Womens educational association based in: 5928 Balfour Court, Suite B - Carlsbad, California 92008 - USA - E-post: office@swea.org

Being that's in Swedish which im not familair with except for the swedish chef in the Muppets - The Wayback machine assists and says

... Swedish Women's Educational Association International, Inc. is a world-wide non-profit organization for Swedish and Swedish-speaking women (living abroad) with the purpose to promote Swedish culture and traditions, and encourage friendship and personal growth among its members.

Rachelle Soloway - rsoloway1@verizon.net gets a mention see swea.org - pdf file needs translating into English - note a variant of rsoloway'xx' at verizon was used in a usenet posting by Robert telling Microsoft and Mr Braver in a 'im not paying your court awarded fines' message. Seems fair game here.

update: Henrik (with the honourable title of 'Super Fan') does a quick and dirty translation and says the text has no value. Anyhow a 'big thank you' to Henrik is in order.

Perhaps most revealing is when searching for Robert the use of some software on the windows platform called 'proxychain' which it appears is traceable to Robert and 'fits in' with his known activities.

An interesting swedish website that (a summary will do) and that pdf document needs translating (if valid) so if anybody can help out - it would be much appreciated.

6 July: Robert Soloway myspace image.Robert
Soloways
Myspace page ?

A chance discovery by moi in wikipedia, but Henrik in opsan picks up the batton and swims in the myspace design sewage.

myspace page screendump for Robert Soloway http://www.myspace.com/robbierob206
open dump file in new window

Robbie is a friends with: www.myspace.com/ryancurran (Robbie appears under friends and have also made comments) male. another guy: www.myspace.com/sillyrabbit73 (Appears under friends and have also made comments) (this time a woman): www.myspace.com/mazcooper plus more men: www.myspace.com/tinaloulou, www.myspace.com/jaredplus www.myspace.cn/seattlepartyboi (Robbie describe himself as Adonis = god known for it's beauty... hehehe they like pretty boys in prison Robbie !!!) www.myspace.com/24229317 www.myspace.com/alexgarcia Notice something special about some of those myspace profiles ?

If any of the links don't work, take a look at an Internet archive like google cache, or wayback machine.

Then take a look at this blog from one of them:

blog.myspace.com/index.cfm?fuseaction=blog.ListAll&friendID=24229317&MyToken=71b0b005-7e70-46f7-b3b4-12682c2cb7a8ML. Notice the line "Robbie Rob-Such elegance and class at the same time. Yet I still havent found you that big cock you wanted."

I think you can make up your own minds. Anyhow want some more ? I found

on sillyrabbit73 is 'illuminating' Robert wrote "i had a dream with you in it. does that excite you or what?" seatlepartyboi tells much in comments where Robert wrote: "i'll be gay for you anytime chris..don't feel alone.. i'm always thinking about myself.. i know how it feels.. i always think about me at 2am too.. i even miss myself when i go to sleep.. it's tough being an adonis"

Want more ? you know the urls and the people. Please remember that being 'friends' with Robert does not indicate a business relationship. Its nice to get a name to a face, and a sort out of genders being Roberts been both male and female in domain registrations.

5 July: I hope you all enjoyed independence day (regardless of where) with Robert behind bars so let's go take a trip down memory lane. Also lets make Tony continue to provide us with some entertainment. After all why not.

According to the comrades at dailybreeze.com Roberts High School is (pvhigh.com Palos Verdes High School address: 600 Cloyden Road Palos Verdes Estates, CA 90274-1869

The Palos Verdes Peninsula Unified School District serves the communities of Palos Verdes Estates, Rancho Palos Verdes, Palos College Verdes Peninsula, Rolling Hills and Rolling Hills Estates. The Attendance Rates area is 21 miles southwest of metropolitan Los Angeles and draws predominantly middle to high-income business and professional residents. The school district’s reputation for having superior educational system

This amuses us from the aricle

He wasn't involved in student government or athletics. Oddly, considering where life took him, the 1997 graduate wasn't even a member of the computer club.

Oddly not too much new here but its rather humourous to get Tony Capozzola's take on the case. I don't see the relationship between the fbi and microsoft in this case. So (thinking aloud) where would be a safe place 'free of microsoft's sphere ?' - that i think would make the moon or another planet the place to hold the trial. This entertaining was provided by Tony Capozzola.

I would like to say that en.wikipedia.org Palos_Verdes_High_School seems is in a need of an update.

27 June: News from comrade Ed that the spammer persons named.

Federal jury convicted James R. Schaffer, of Paradise Valley, Arizona, and Jeffrey A. Kilbride, of Venice, California, on multiple charges including conspiracy, money laundering, fraud and transportation of obscene materials."

More details Sound familiar ? to our federal prisioner id 37427-086 ?

Perhaps of more interest is this 21 June missive which many of us missed is that China might start to be worrying about its rather widespread spam problem that it either promotes (bullet proof) or thus deems that one yahoo email to be a 'national security' problem. It might be pure 101% chinese bollocks (face saving) and nothing will be done but in the meantime I can recommend cn.countries.nerd.dk or the blackholes.us dnsbl to stop that chinese crap be it 'paid' or 'unauthorised' unpaid chinese spam.

China has a major image problem - 'saving face' isnt the the solution anymore, mind you they rather liked Robert Soloways 'debt'. I personally expect little to change.

23 June: More news about Robert 'Solon' (Soloway in Swedish I believe). Which was Posted by Mr Braver on his website, and cc'ed to Nanae. Is this Appear Pro Hac Vice (pdf) which in non legal goboblygook means another lawyer on the scene. Mr Trobermann (lawyer one) it appears is not working out.

So who is this 'new brain' whom we discover is a "long term aqquantance" of the Soloways? Well 23 days is it appears a bit of stretch for the above claim but thats joke one for today inserted.

Meet Carl A. Tony Capozzola (image credit to Ed see Italian American lawyers Association * Tony is standing on the left hand side)the name not ring any bells?.

A well-known South Bay attorney ventured into the world's biggest criminal case Tuesday by filing briefs with the state Supreme Court on behalf of Michael Jackson that allege the pop star is the target of an overzealous prosecution.

It is interesting to note while the above motion failed for wacko jacko, Robert and Michael Jackson fall into to the category 'foolish', I like the professors commenting in the article that 'it's good pr'. I suppose Mr Capozzola has to sing and dance and this certainly won't be the last occassion that the fool is abused for Mr Capozzola's benefit.

His expected line of attack is pitifull. Anyhow what do we know about Roberts new freind of 23 days California bar 44441 (links provided by Ed and Sky) is that for six years he was suspended and did something else. Sounds interesting so lets dig some more shall we this is from March 2003.

"Scotti pulled out a .38-caliber handgun, shot and killed Feldman and committed suicide," police Sgt. Peter Grimm said. Capozzola, who witnessed the shootings, was not hurt.

Keeping some interesting company there Carl A. Tony Capozzola - then again having to google this Ted Binion. But i suppose thats the price of 'fame'. * has a 'mirthfull' connotation.

Court it will appear will be very entertaining on the 6th August.

19 June: Henrik in Opsan informs us all of Spamsuite.com document 153 Essentially that answers a number of questions.

A drug dealer like dirty money operation where assets moved from the USA to Sweden where Robert apparently has family and Swedish nationality (Robert always claimed this but never mention the origin - but I was way off base from my 'Hungary' record search).

An interesting use of impressionable people.

Items admitted for trial use with generally no objections by Soloway's Lawyer - it be interesting to see if he ever gets paid. Anyhow I feel a letter to the swedish embassy c/o the swedish tax authorities coming along.

I do recommend a read of document 153, for all the things that I did not mention. The thought 'bank fraudster' seems to be a new on reflection concur ?.

18 June: After seeking counsel and hearing nothing negative i present ... At home with the Soloways I doubt mtv will pick it up. (humour).

Herb S Marc Soloway (67) and Rachelle D Soloway (59) now live in Palm Desert, California USA . It appears that a Henry Soloway (age 90) lives with them along with a person named Karin B Soloway (aged 64).

A map Google Maps OK - Want a telephone number ? easy phonebook: Soloway Palm Desert,CA (opens in new window). Some results just in case they get removed (760) 772-1148 (760) 772-2638 (760) 772-3618 (760) 345-7389. - Remember those are american numbers, your going to need international access codes and country id's if your not America based.

Sons and Daughters wise - it appears theres three (3 is conjecture) a Thomas Paul Soloway age 40 who lives in San Francisco, an easy association (with less conjecture more confidence) is for a female named Jill K Soloway (no not the Hollwood writer (different mother by the name of Elane - thats somewhere in Chicago i think).

Finally back on topic we get to Robert Soloway age 27 is is junior son to Rachelle (thats the easy confirmation). My assumptions
spot the family connection
Thank you to peoplefinder.com
Where i base this 'evidence' on.

Bananas in the Falklands would like to wish Herb Soloway a welcome to the page since he seems most likey a candidate for the title 'Father'. Ancient history (1999) appended to the bottom of the file.

13 June: Are you thinking this ? somebody else was

From Nanea.
Thanks to Mr Lindford for spotting.

Oh my the entertainment continues! Ed in Opsan jast happens to mention that Robert is Named as a 'bot herder' by our friends in the fbi, which sounds quite kinky considering that Robert was refused bail again. A big thank you must be said here for Mr Schmutz.

The FBI has also charged numerous individuals with cyber crimes around the nation as a direct result of the coordinated operation, including: * Robert Alan Soloway of Seattle, Washington, is accused of using botnets to send tens of millions of spam messages touting his website; * James C. Brewer of Arlington, Texas, is accused of infecting tens of thousands of computers worldwide, including some at Chicago-area hospitals; and * Jason Michael Downey of Covington, Kentucky, is charged with using botnets to disable other systems.

Now then, court today too and back to pokey Spamsuite.com document 140 Rachel Soloway lives in Palm Desert, California. But rejected by the Judge (seattle times) source. Credit to Super fan Henrik and Ed over at opsan.

Judge James Donohue sided with the government in ordering that Soloway should be detained until his trial, which is scheduled to begin Aug. 6.

where are we today meet spotWhere is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293
The Robert Soloway Locator url.

Hehe !







Wellington boots for shit removal12 June: No Digging today - look my wellies are clean !

But an Opsan update on Roberts Lawyer Richard J. Troberman..

I have asked http://www.ait.com/ for there views on on being a Bob Soloway support (think Chinese front man). Ive yet to ask Cologuys (2005) seems to be Korea hosting, MDMS (Seattle ISP seems very pro spam) or Nobullservers also points to China (as a sales front man). Gasper the owner didn't wish to talk shop when I broached the subject.

I suggest that these suppliers be treated with caution as possibly spam friendly. Links to Mr Soloway and them can be identified in the many pdf documents referenced to recently in this document.

08 June: Henrik informs us in Opsan about http://spamsuite.com/node/123 - see 130 131 also Trial is set for 6 August 2007 (might change re yesterday). Good news is Robert has no computers, money, or spam lists (unless hidden) should he be granted bail.

Robert second impression care of solowaysucks.net
2nd court impression.

where are we today meet spotWhere is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293
v From Nanea.

DC SeaTac The Federal Detention Center (FDC) - Sea Tac in Seattle, Washington, is an administrative facility housing male and female inmates.

FDC SeaTac is located 12 miles south of Seattle and 16 miles north of Tacoma, 1 mile west of Interstate 5 (200th Street exit).

Judicial District: Western Washington

INMATE NAME & REGISTER NUMBER
ROBERT ALAN SOLOWAY  	37427-086
FDC SEATAC
FEDERAL DETENTION CENTER
P.O. BOX 13900
SEATTLE, WA  98198
USA
 

Mark's Whews Bouquet fron nanea.you know what to send.....

07 June: Super Fan Henrik informs us via Opsan (see top link) here (kndo.com) that things are delayed until next Monday (11th) since it would appear that Robert legal 'team' are seeking extra time.

Komo TV's take on the matter: (link to source in new window requires flash)

Thank you to Bernzilla.com for the xhtml valid tip.

Flood the Spambox also has been told that the case has a federal dimension rather than a state only prosecution.

Admin notes: Thank you to Andy for the new domain name thisfool.com and the hosting off googlepages. I have backups of the page, and will continue to update both as long as i have ftp access. The map projects (or geo-location) are essentially dead projects. The map files will remain available for viewing.

05 June: Last style of message before our friends at the fbi shut our spammer down, notice user who recieves the mail also sent it, the diferent ip addresses and that 222.255.2.134 is somewhere in Vietnam which belongs to the VietNam Data Communication Company.

Delivered-To: user&gmail.com
Received: by 10.114.240.2 with SMTP id munged;
        Tue, 29 May 2007 20:40:12 -0700 (PDT)
Received: by 10.100.13.12 with SMTP id munged.grunge;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Return-Path: <user&gmail.com>
Received: from 209.85.133.114 ([222.255.2.134])
        by mx.google.com with SMTP id munged.2007.05.29.20.40.02;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Received-SPF: neutral (google.com: 222.255.2.134 is neither permitted nor denied by domain of munged&gmail.com)
Date: Tue, 29 May 2007 20:40:11 -0700 (PDT)
Message-Id: <munged.SMTPIN_ADDED&mx.google.com>
To: <user&gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--"

----
Content-Transfer-Encoding: quoted-printable

<html><body bgcolor=3D"#AFCDFF"><div align=3D"center"><center>
<table border=3D"1" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-co=
llapse: collapse" bordercolor=3D"#111111" width=3D"65%" id=3D"AutoNumber1"=
 height=3D"217" bgcolor=3D"#FFFFFF">
<tr><td width=3D"100%" align=3D"center" height=3D"217">
<p align=3D"center"><font size=3D"5" face=3D"Arial">We Email Advertise You=
r Charity Web Site to<BR>
<font color=3Dred><b>15,000,000 PEOPLE FOR FREE!</font></a></p><p align=3D=
"center"><font size=3D"5" face=3D"times new roman">
<a href=3D"http://www.emailbroadcastauthority.com">[CLICK HERE]</a></font>=
</p>
</td></tr></table></center></div></body></html>

------

For the record you know - that html sucks big time.

04 June:
credit takeabreak.com.au
Sorry no digging today cheers!

nim-company.com (seo op of mr Soloway) which is still with us, if you want to have some fun ring InternetNamesForBusiness in the USA on (954)-323-0075 and tell them Robert won't be paying his hosting bill. Dont dive them your email since they might well be ok sending you spam and they are Florida based which bodes badly in spam circles.

More on the case against Robert as i get it. Seattlepi reports lots of luxury goods found (rumour he was ebaying them in nanea) so they might be fakes, and he just bought a new Mercedes Benz (im told from an anon source). Something to look out for at the government IRS auction i think if your so inclined and live in WA/OR west coast states in the usa.

Anyhow thats all for now, cheers ! I still want a picture of Robert Soloway, Racheal Soloway (mother) and any of other family Soloway clan if you can help I would be very pleased.

Wellington boots for digging01 June: A big hello to all the new visitors and welcome but for some of us the work continues.

There are a number of outstanding domains with hosting from monday (China and Bangladesh) that we need to account for since the taxman,post office,fbi etc seized Roberts assets.

Along with the search optimizing engine businesses (two) which have there own bits of dubious fame. China/Bangladesh bases: emailbroadcastauthority.com submit-me-now.com (seo spam op) permissionemailcorp.com emailsolutioncorp.com emailmarketingassociates.com theemailadvertisingcompany.com emailbroadcastingcompany.com and american based hoster nim-company.com (seo spam op).

lets start with the seo operations first

;; Query time: 550 msec
;; SERVER: boris
;; WHEN: Thu May 31 17:06:45 2007
;; MSG SIZE  rcvd: 164
Registrant: 
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Email: d595683c0a1e672a00a6d77116f9399f@domaindiscreet.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Mon, May 21, 2007

   Administrative Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683c0a1e672a01ba25e6a0694171@domaindiscreet.com

   Technical Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683d0a1e672a002d22dfd5791c5d@domaindiscreet.com

   DNS Servers:

   dns11.register.com
   dns12.register.com

dig www.nim-company.com

; <<>> DiG 9.3.4 <<>> www.nim-company.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52016
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.nim-company.com.           IN      A

;; ANSWER SECTION:
www.nim-company.com.    14400   IN      CNAME   nim-company.com.nim-company.com.
nim-company.com.nim-company.com. 14400 IN A     69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns11.register.com.
nim-company.com.        43200   IN      NS      dns12.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     17812   IN      A       216.21.234.76
dns12.register.com.     30945   IN      A       216.21.226.76

 whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com

US Based - down in spammy Florida. Host up. Now lets do the other which was in China if I remember correctly (it as some time ago) was called submit-me-now.com

 whois submit-me-now.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]

[whois.dns.com.cn]

Domain Name.......... submit-me-now.com
  Creation Date........ 2006-11-21 03:30:28
  Registration Date.... 2006-11-21 03:30:28
  Expiry Date.......... 2007-11-21 03:30:28
  Organisation Name.... liu fei
  Organisation Address. nan chang
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 321000
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ nan chang
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 321000
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@makemelogo.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu fei
  Tech Address......... nan chang
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 321000
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@makemelogo.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu fei
  Bill Address......... nan chang
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 321000    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@makemelogo.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn

;; ANSWER SECTION:
www.submit-me-now.com.  3600    IN      A       124.42.8.163

whois 124.42.8.163
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Nobody home in China have our friends the Maoist's killed his connections already ?. Thats the seo out of the way. Now the main event.

 whois emailbroadcastauthority.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastauthority.com
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 210002    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.emailbroadcastauthority.com
  Name Server.......... ns3.emailbroadcastauthority.com
  Name Server.......... ns2.emailbroadcastauthority.com
  Name Server.......... ns1.emailbroadcastauthority.com

dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

 dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

;; ANSWER SECTION:
ns1.emailbroadcastauthority.com. 27774 IN A     218.106.165.183

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 43126 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns3.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns4.emailbroadcastauthority.com.

China (218.106.165.160 - 218.106.165.191 beijing-shengang-corp) says goodbye to Bob - no www. Lets try permissionemailcorp.com next

 whois permissionemailcorp.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

Nobody home there either never mind plenty more. Lets take a look at emailsolutioncorp.com

>> whois emailsolutioncorp.com -hwhois.dns.com.cn[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

emailsolution.com. is bye bye never fear for emailmarketingassociates.com has to be bullet chinese spam proof. You know the routine....

whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com

[sjwest@mail2 ~]$ dig  emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

Nobody home there either dont worry two more left so lets try theemailadvertisingcompany.com

Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63456
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME super2007.gnway.net.
super2007.gnway.net.    60      IN      A       127.0.0.1

;; AUTHORITY SECTION:
gnway.net.              3600    IN      NS      ns1.gnway.cn.
gnway.net.              3600    IN      NS      ns1.gnway.com.

;; ADDITIONAL SECTION:
ns1.gnway.cn.           1198    IN      A       210.51.190.207
ns1.gnway.com.          30540   IN      A       211.154.44.236

;; Query time: 2788 msec
;; SERVER: 212.23.3.100#53(212.23.3.100)
;; WHEN: Thu May 31 18:02:49 2007
;; MSG SIZE  rcvd: 183

No luck there - we are running out of magic spam bullets here. Lets all say the magic words (email advertise for free) )as we try the last emailbroadcastingcompany.com.

 whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

Damm you didnt say the magic bullet proof words dead too. Well our Chinese spam friends work fast when they need to.

Peter Miiller court artist impression  (komotv.com)31 May: New visitors hello - further updates from 31 may onwards can be seen by pressing the 'page up' key - This page takes a long time to load. but Woohoo !!!!!! its a start http://www.king5.com/localnews/stories/
NW_05307WABinternetspamindictmentTP.26000383.html
and http://seattlepi.nwsource.com/
local/317795_soloway31.html
not convicted yet but a start a more cluefull news item from nntp and spamhaus sayeth:

U.S. Department of Justice

United States Attorney
Western District of Washington

700 Stewart Street, Suite 5220Tel: (206) 553-7970
Seattle, Washington 98101-1271Fax: (206) 553-0882


FOR IMMEDIATE RELEASE
May 30, 2007

PRESS CONFERENCE ON SPAM KING INDICTMENT

The U.S. Attorneys Office will hold a press conference following the 
arrest of 27-year-old ROBERT ALAN SOLOWAY. SOLOWAY was indicted last 
week by a federal grand jury in Seattle in connection with his illegal 
spamming activities.

The press conference will begin at 1:30 in the Wales Conference Room of 
the U.S. Attorneys Office. United States Attorney Jeffrey C. Sullivan 
will be joined by representatives from the United States Postal 
Inspection Service (USPIS), FBI, FTC, Internal Revenue Service Criminal 
Investigations (IRS-CI), and Washington State Attorney Generals Office.

SOLOWAY will make his initial appearance in U.S. District Court at 2:30 
today. Copies of the indictment will be available at the press 
conference or are online via the PACER system.

Now thats good news and six governmental bodies wanting a piece of Bob. Futher stuff Detention Order (PDF) Indictment (PDF) and press release (seen above PDF)

Indictment is a great read and details wire fraud,id theft, sezure of funds etc - Pontential for 65 years !!!. MDS (Seattle isp) get a mention (noted here), 'Colo Guys' and NoBull yet to be be mentioned. I will dig more on those two names.

Big Thanks to the inner sanctum, and everybody whom helped maked this happen eventually.

? support@cologuys.com Cologuys Phone: 1-866-510-5799,Fax: 1-866-218-1533 8101 Chapin Rd,Fort Worth, TX 76116,USA other NoBull Server Hosting - nobullservers.com (usa 586) 5560823

Wellington boots for digging28 May: There seem to be a lot of Mondays in May and yes its digging day again. Start time:

;; Query time: 486 msec
;; SERVER: Boris
;; WHEN: Mon May 28 13:02:12 2007
;; MSG SIZE  rcvd: 197

Dns bot net (only one this week again).

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183 [china-netcom.com]
;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns4.926817a885d86e1.com. 43200  IN      A       68.188.83.59 [usa: charter.net]

Supplementary: 
ns1.926817a885d86e1.com. 43200  IN      A       87.243.166.122 [austria (eu): abuse@ainet.at]


Big Bush is watching you
;; AUTHORITY SECTION:
926817a885d86e1.com.    43200   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns2.926817a885d86e1.com. 43200  IN      A       66.66.32.40   [usa: rr.com]
ns3.926817a885d86e1.com. 43200  IN      A       70.235.18.100 [usa: at&t]
ns4.926817a885d86e1.com. 43200  IN      A       71.81.227.244 [usa: charter.net]

Normal dns with spammy providers (most seen before)

dig emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37812
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       124.254.29.136 [cn: 163.com marcom@service.netease.com]

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 23026 IN   NS      ns4.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns3.emailbroadcastauthority.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastauthority.com. 23026 IN A     218.106.165.183 china-netcom.com
ns2.emailbroadcastauthority.com. 23026 IN A     124.254.29.136 [cn: 163.com marcom@service.netease.com]
ns3.emailbroadcastauthority.com. 23026 IN A     221.194.44.60   cn: cnc-noc.net
ns4.emailbroadcastauthority.com. 23026 IN A     202.92.63.166  [bd * seen before]


ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn: 163.com marcom@service.netease.com (Nasdaq:NTES)]

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn: cnc-noc.net]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn: Chinese govt:wangwl@bsw.gov.cn seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bd * seen before]

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [cn: cnc-noc.net]

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82 [cn: Chinese govt:wangwl@bsw.gov.cn *seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60 cn: cnc-noc.net
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166 [bd: *seen before]

Unloved but still hosted in China

the Spam Olympics
theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007052302 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

Query time: 4548 msec
;; SERVER: boris
;; WHEN: Mon May 28 13:08:24 2007
;; MSG SIZE  rcvd: 113

EuropeOf note: New hoster not seen before from Austria (part of the bot net)

inetnum:        87.243.166.0 - 87.243.166.255
netname:        KOEFLACH-TV
descr:          Ainet Telekommunikations-Netzwerk Betriebs GmbH
country:        AT
admin-c:        ANOC9-RIPE
tech-c:         ANOC9-RIPE
status:         ASSIGNED PA
mnt-by:         AINET-MNT
source:         RIPE # Filtered

role:           Ainet Network Operations Center
address:        Ainet Telekommunikations-Netzwerk Betriebs GmbH
address:        Burggasse 15
address:        A-8750 Judenburg
address:        Austria
e-mail:         noc@ainet.at

Usual suspects - Bangalesh seems to be developing a long term problem.

24 May: Sky at Opsan (see top link) informs us that 163.com 's parent company netease.com (Nasdaq: NTES) in China would love to hear from us all at marcom@service.netease.com.

Thank you again for the spam cop reports.

Wellington boots for digging21 May: Its the Chelsea Flower show for some, but for Bananas in the Falklands it's not for me and its digging day again. Start time:

;; Query time: 388 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:24:57 2007
;; MSG SIZE  rcvd: 197

Normal dns with spammy providers (most seen before)

emailbroadcastauthority.com. 3600 IN    A       124.254.29.136
ns1.emailbroadcastauthority.com. 25911 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 25911 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 25911 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 25911 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Dns bot net (only one this week) not the usual two.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.31.75.60

Unloved but still hosted in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

;; Query time: 401 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:34:22 2007
;; MSG SIZE  rcvd: 113

Fin.

17 May: Two 'new and improved retard proof' spam messages ahoy from comrade Robert i see from Spamcop (Thank you).

Spam 1Spam 2
http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

non-commercial offer is for charity web sites only.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

non-commercial offer is for charity web sites only.

Nice to have a change.

16 May: emailbroadcastauthority.com up after its hiccup I note

ns4.emailbroadcastauthority.com. 3600 IN A      124.254.29.136
ns1.emailbroadcastauthority.com. 42119 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 42119 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 42119 IN A     221.194.44.60

Atg and Ed dig beyond the ip address and location for the company behind 163.com who help Robert.

163.com.                1903    IN      NS      ns.nease.net.
163.com.                1903    IN      NS      ns3.nease.net.
;; ADDITIONAL SECTION:
ns.nease.net.           40545   IN      A       202.106.185.75
ns3.nease.net.          19216   IN      A       220.181.28.3

Registrant:
   	Netease.com, Inc. 
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
  	 
Domain Name: NEASE.NET
 
   	Administrative Contact , Technical Contact : 	 
   	Netease.com, Inc. 
   	nsadmin@corp.netease.com
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
   	Phone: +86-20-85525516
   	Fax: +86-20-85525535
  	 
   	Record expires on 04-Apr-2009 	
   	Record created on 06-Jul-1997
   	Database last updated on 27-Jun-2006
 

Its very Chinese affair, listed on Nasdaq as NTES (NetEase.com, Inc) try the bottom links for English which it says it was founded by a William Ding (William Lei Ding) who also is its Chief Executive morfe follows...

NetEase also remains the largest email provider in China, approved by the Chinese authorities to operate as an Internet content provider along with the Ling Yi company ... legally owned by three citizens of China: the principal shareholder of the Company, his brother and a former employee of the Group.

Prior link to Rupert Murdoch (The News Corporation Limited “Newscorp”) and PricewaterhouseCoopers do there auditing. Employee numbers it appears are unstated.

Wellington boots for shit removal14 May: Gardening time usual Lets start with a start time.

;; Query time: 32 msec
;; SERVER: boris
;; WHEN: Mon May 14 18:37:21 2007
;; MSG SIZE  rcvd: 155

A down domain name emailbroadcastauthority.com

<<>> DiG 9.3.4 <<>> ns1.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

the Spam OlympicsGoing bot net ? next up is permisisonemailcorp.com - ns1.permissionemailcorp.com. 43200 IN A 124.254.44.66 not happy

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bot nets ahoy (the usual 2)

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.0.146.214

;ns1.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
ns1.emailbroadcastingcompany.com. 180 IN A      24.175.186.203
ns1.emailbroadcastingcompany.com. 180 IN A      64.22.246.49
ns1.emailbroadcastingcompany.com. 180 IN A      69.219.226.151
ns1.emailbroadcastingcompany.com. 180 IN A      69.227.22.150
ns1.emailbroadcastingcompany.com. 180 IN A      71.203.52.220
ns1.emailbroadcastingcompany.com. 180 IN A      74.100.247.81
ns1.emailbroadcastingcompany.com. 180 IN A      85.210.159.149
ns1.emailbroadcastingcompany.com. 180 IN A      12.208.154.35
ns1.emailbroadcastingcompany.com. 180 IN A      24.72.226.61
ns1.emailbroadcastingcompany.com. 180 IN A      24.137.86.117

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

Unloved but in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

The end

;; Query time: 296 msec
;; SERVER: Boris
;; WHEN: Mon May 14 18:50:57 2007
;; MSG SIZE  rcvd: 298

7 May: the Spam OlympicsGardening time usual suspects it appears (thats Bangladesh and China). Lets start with a start time

;; Query time: 44 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:24:20 2007
;; MSG SIZE  rcvd: 181

Big Bush is watching youOur bot net, and (one new one from last monday) which Sky over at Opsan notes as all american hosts. God bless George W Bush for 'can-spam'.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 38720  IN      A       68.206.193.209
ns2.926817a885d86e1.com. 22547  IN      A       75.71.156.72
ns3.926817a885d86e1.com. 38720  IN      A       24.12.137.170
ns4.926817a885d86e1.com. 38720  IN      A       68.114.199.93

emailbroadcastingcompany.com.  IN      A

;; ANSWER SECTION:
emailbroadcastingcompany.com. 180 IN    A       172.191.195.119
emailbroadcastingcompany.com. 180 IN    A       213.6.229.100
emailbroadcastingcompany.com. 180 IN    A       24.116.250.66
emailbroadcastingcompany.com. 180 IN    A       58.106.118.114
emailbroadcastingcompany.com. 180 IN    A       65.190.181.102
emailbroadcastingcompany.com. 180 IN    A       66.67.219.205
emailbroadcastingcompany.com. 180 IN    A       68.77.55.65
emailbroadcastingcompany.com. 180 IN    A       69.4.104.153
emailbroadcastingcompany.com. 180 IN    A       69.105.139.212
emailbroadcastingcompany.com. 180 IN    A       76.188.39.239

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

Kkaran Bahree indian it worker and bank thief.no A, nameservered

ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

The unloved and a finish time

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

;; Query time: 226 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:30:24 2007
;; MSG SIZE  rcvd: 294

6 May: I will be digging tomorrow (bet your all excited by that), but i note from the spamcop reports I am getting that Robert is doing it for 'FREE' Hmmm something going on ? Speaking of president@usakia.org has gone very quiet. Thank you for the spamcop reports for the map * is looking very colourfull now for those of you who prefer graphical things to lists.

* The number of countries whom have a claim that america is invovled in terrorising them is growing, lets hope Finland declares war (my latest read flag) on Seattle and Washington state for the damage caused in the Robert Soloway name.

Personally speaking i'm looking forward to seeing a Robert Spam sent from a computer in Zimbabwe in africa.

Remember to bring spades and wellington boots for the gardening if your going to join us tomorrow.

Wellington boots for shit removal1 May: Time to go gardening, Spade in hand and the Chinese plant book in the other let go and discover that species known as the bullet proof spam hoster (ilikeeyspammer).

Boring stuff follows

emailbroadcastauthority.com. 3600 IN    A       124.254.29.140
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bob's Bot net

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       206.188.126.28
ns2.926817a885d86e1.com. 43200  IN      A       68.54.156.163
ns3.926817a885d86e1.com. 43200  IN      A       91.105.34.191
ns4.926817a885d86e1.com. 43200  IN      A       24.12.0.46

Unloved by Bob, but tended to by a china man, and a dns time stamp.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

;; Query time: 374 msec
;; SERVER: boris
;; WHEN: Tue May  1 16:58:39 2007
;; MSG SIZE  rcvd: 113

Concludes so you can wake up now.

28 April: Well well well make of this what you please.

Name: Vincent Bartning
E-mail: president@usakia.org
City: San Jose
Country: CA
Homepage: http://usakia.org

I don't think you should be listing charities

without confirming the accusation.  We would

like ours removed.

Those of you 'lost' as to what this refers to charities 'helped' by the great man (thats Robert) i would like to remind Vincent that i contacted his organisation (and the others i could id) to ask them about the claim but heard nothing back.

So Mr Bartning the link remains - please do feel free to ignore this, - or write me something so i can justify removing it. I look forward to hearing from you whenever.

As to the other message - Bob is rather 'impotent' on that matter. Analogy: more gas, no power - refer your friend to Opsan my friend the point is made there.

Wellington boots for shit removal24 April: Its tuesday so its a digging day. Fun stuff first - botnet (1) update.

emailmarketingassociates.com. 180 IN    A       76.168.228.180
emailmarketingassociates.com. 180 IN    A       76.178.75.250
emailmarketingassociates.com. 180 IN    A       203.45.14.119
emailmarketingassociates.com. 180 IN    A       60.224.128.45
emailmarketingassociates.com. 180 IN    A       68.74.207.182
emailmarketingassociates.com. 180 IN    A       71.71.27.75
emailmarketingassociates.com. 180 IN    A       71.155.233.43
emailmarketingassociates.com. 180 IN    A       71.206.87.0
emailmarketingassociates.com. 180 IN    A       75.9.58.249
emailmarketingassociates.com. 180 IN    A       75.41.66.71

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 41759  IN      A       76.177.123.116
ns4.926817a885d86e1.com. 41759  IN      A       69.231.73.91

Usual suspects below - Bangladesh and China mostly

ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailbroadcastingcompany.com. 34962 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 34962 IN A    124.254.29.136
ns3.emailbroadcastingcompany.com. 34962 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 34962 IN A    202.92.63.166

Comparitively unloved (1) compared to the above and the date stamp. Again its China.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

WHEN: Tue Apr 24 09:48:11 2007
;; MSG SIZE  rcvd: 198

This concludes the gardening, of interest (should you be awake) is that while thats a number of variations on the name theme, we only have one botnet (see previous entry for details of its status then) rather than several to deal with. All domains registered in China too.

Thank you for the spamcop reports, it would be nice for some Bob spam to come from Africa if you take a look at spam bot map but overall things are filling up nicely if your into graphical rather textual lists of where.

19 April: Depending upon your dns Ed reports we have a new spambot for dns on emailbroadcastingcompany.com called 926817a885d86e1.com so copy and paste those random letters and let the fun begin.

the Spam Olympics
whois 926817a885d86e1.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... 926817a885d86e1.com
  Creation Date........ 2007-03-12 22:25:21
  Registration Date.... 2007-03-12 22:25:21
  Expiry Date.......... 2008-03-12 22:25:21
  Organisation Name.... xiaowen
  Organisation Address. No.12 chang'an road
  Organisation Address.
  Organisation Address. beijing
  Organisation Address. 100001
  Organisation Address. BJ
  Organisation Address. CN

Admin Name........... ash wen
  Admin Address........ No.12 chang'an road
  Admin Address........
  Admin Address........ beijing
  Admin Address........ 100001
  Admin Address........ BJ
  Admin Address........ CN
  Admin Email.......... 112@126.com
  Admin Phone.......... +86.109838384
  Admin Fax............ +86.109838387

Tech Name............ ash wen
  Tech Address......... No.12 chang'an road
  Tech Address.........
  Tech Address......... beijing
  Tech Address......... 100001
  Tech Address......... BJ
  Tech Address......... CN
  Tech Email........... 112@126.com
  Tech Phone........... +86.109838384
  Tech Fax............. +86.109838387

Bill Name............ ash wen
  Bill Address......... No.12 chang'an road
  Bill Address.........
  Bill Address......... beijing     
  Bill Address......... 100001    
  Bill Address......... BJ     
  Bill Address......... CN   
  Bill Email........... 112@126.com
  Bill Phone........... +86.109838384
  Bill Fax............. +86.109838387
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com
Big Bush is watching you
dig 926817a885d86e1.com

; <<>> DiG 9.3.4 <<>> 926817a885d86e1.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3281
;; flags: qr rd ra; QUERY: 1, ANSWER: 10, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;926817a885d86e1.com.           IN      A

;; ANSWER SECTION:
926817a885d86e1.com.    180     IN      A       72.241.80.119  -BUCKEYECOM.NET usa
926817a885d86e1.com.    180     IN      A       75.46.59.116   -sbc - usa
926817a885d86e1.com.    180     IN      A       75.73.225.114  -comcast usa
926817a885d86e1.com.    180     IN      A       76.181.187.227 -rr.com usa
926817a885d86e1.com.    180     IN      A       24.155.47.188  -Grande Communications Networks, Inc ? usa ?
926817a885d86e1.com.    180     IN      A       68.126.198.229 -sbc usa
926817a885d86e1.com.    180     IN      A       71.9.38.229    -charter usa
926817a885d86e1.com.    180     IN      A       71.198.13.0    -comcast usa
926817a885d86e1.com.    180     IN      A       71.205.236.169 -comcast usa
926817a885d86e1.com.    180     IN      A       72.184.82.147  -rr.com usa

;; AUTHORITY SECTION:
926817a885d86e1.com.    28148   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       76.181.187.227 -rr.com usa
ns2.926817a885d86e1.com. 28148  IN      A       68.39.83.198   -comcast usa
ns3.926817a885d86e1.com. 43200  IN      A       68.126.198.229 -sbc usa
ns4.926817a885d86e1.com. 28148  IN      A       76.181.187.227 -rr.com usa

;; Query time: 257 msec
;; SERVER: boris
;; WHEN: Thu Apr 19 18:10:48 2007
;; MSG SIZE  rcvd: 333

Robert powz's quite a few americans pcs there. I'd guess theres a big spam run in the 'tubes' - and quite a few Japanese spambotted pc's too.

18 April: In the spirit of the file EMAILS.1519 (which i have a copy of) is re-activated in spirit. You know unsubscribe request that started this rather page - well Robert re-spammed the domain owner again and twice - (Sky in Opsan) gets credit for first mentioning this recently.

Mr Soloway I presume Image opens a closeup/

Once on, never off. - or for the clueless 'Once a spammer always a spammer'. I conclude that the 14 spams cleared by the user where also sent by Robert. Those doughnuts must be good - I would urge all WA state voters to elect a less fat State Attorney General.

the Spam Olympics17 April: Gardening time dont you think ?

emailbroadcastauthority.com. 3600 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007030501 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   A       124.254.29.141
ns1.emailbroadcastingcompany.com. 21235 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 21235 IN A    124.254.29.141
ns3.emailbroadcastingcompany.com. 21235 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 21235 IN A    202.92.63.166

Kkaran Bahree indian it worker and bank thief.Below just have name servers

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
ns2.emailmarketingassociates.com. 43200 IN A    124.254.29.141
ns3.emailmarketingassociates.com. 43200 IN A    221.194.44.60
ns4.emailmarketingassociates.com. 43200 IN A    202.92.63.166

Result datestamp:
;; Query time: 348 msec
;; SERVER: boris
;; WHEN: Tue Apr 17 22:18:18 2007
;; MSG SIZE  rcvd: 198

Most of those ip's and hosters I recognise, and have been already documented here.

16 April: Dereliction of duty - somebody shoot me I failed to list emailbroadcastingcompany.com as Bob domain and not 'theemailbroadcastingcompany.com', in my defence it also was masked by some dns bots which kept the domain off the main lists by obsurity - it however got a mention on 23/01/2007 in the blog section. Sorry

I report as the domain is now spamming - updated stuff follows for emailbroadcastingcompany.com

the Spam Olympics
whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>>  DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34978
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;www.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
www.emailbroadcastingcompany.com. 1004 IN A     124.254.29.141 *new 

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 28231 IN  NS      ns1.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns2.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns3.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns4.emailbroadcastingcompany.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastingcompany.com. 28231 IN A    218.106.165.183 [cn seen before]
ns2.emailbroadcastingcompany.com. 28231 IN A    124.254.29.141  *new see below
ns3.emailbroadcastingcompany.com. 28231 IN A    221.194.44.60   [cn seen before]
ns4.emailbroadcastingcompany.com. 28231 IN A    202.92.63.166   [bangladesh * seen before]

;; Query time: 59 msec
;; SERVER: Boris
;; WHEN: Mon Apr 16 19:51:02 2007
;; MSG SIZE  rcvd: 202

Thank you for the spamcop reports - host 124.254.29.141 is fresh to this page. - Gardening later this week. Admin note: Japan entries will not be shown on the map because the whois is rather vague if you dont read the local langauge. Japan spambots are still listed on this page, otherwise northern japan will look like a pork major processing plant. This bug affects ip to geolocation services too, if using 'western langauges.

the Spam Olympics
 whois 124.254.29.141
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

11 April: Ed says opsan is ok, and Robert gains a few more fans here, and here too. so it's not just one or two people and an angry dog which somebody somewhere will no doubt claim.

Oddly enough a person by the name of Mark Pryor (us senate) starts thinking - see slashdot. Whether this is just only co2 emmissions or something else we will have to observe. Poltics wise i am keeping to the 'local' SAG race for 2008 - Washington State voters can probably do better than what they have now.

10 April: Gardening - usual suspects again (spam not seo)on quick glance and compare. Opsan's blog appears down here for posting to.

5 April: Minding ones business comrade Ed hints me about somthing called theemailadvertisingcompany.com. which is a brand new domain name and not something old and dealt with before.

This registrar used here before in 23/11/2006 might also be of interest to Soloway watchers

the Spam Olympics
[grs.hichina.com]
Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

http://2nddns.com/ is a very Chinese affair - they appear to the registrar/reseller for hichina.com I might be 100% wrong there. This is interesting

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40207
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME catalyst3550.meibu.com.
catalyst3550.meibu.com. 20      IN      A       58.17.245.130

;; AUTHORITY SECTION:
meibu.com.              43020   IN      NS      ns3.meibu.com.
meibu.com.              43020   IN      NS      ns2.meibu.com.

;; Query time: 1389 msec
;; SERVER: boris
;; WHEN: Fri Apr  6 19:24:59 2007
;; MSG SIZE  rcvd: 137

if your awake and not bored yet meibu.com was last seen in 01/11/2005 I note. Its China 'paging the pandas'

the Spam Olympics
whois 58.17.245.130
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      58.17.128.0 - 58.17.255.255
netname:      CNCGROUP-CQ
descr:        CNC Group Chongqing province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-CQ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20050215
changed:      hm-changed@apnic.net 20050218
source:       APNIC

route:        58.17.128.0/17
descr:        CNC Group CHINA169 Chongqing Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

I will update the map later on, gardening tuesday

2 April: Gardening time, so one two three and shovels at dawn.

Just the spam stuff today. somebody else can do the seo domains if the feel like it. No major changes - all ip's listed have been seen here previously, the order that there shown is somthing i have not checked since we last went gardening.

 dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2399
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 6396 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:30:51 2007

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     202.92.63.166   [bangladesh * seen before]
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.106.165.183 [china * seen before]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     210.76.106.82   [china * seen before]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.60   [china * seen before]

Less dns clarity from

 

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [china * seen before]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [china * seen before]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [china * seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bangladesh * seen before]

? bad dns skills ? - somebody mentioned in opsan an rfc 1918 setup (local - non routable ranges of ip addresses, it would appear that this is not a spambot controller

dig emailsolutioncorp.com

; <<>> DiG 9.3.4 <<>> emailsolutioncorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29674
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailsolutioncorp.com.         IN      A

;; ANSWER SECTION:
emailsolutioncorp.com.  3600    IN      A       210.76.106.82   [china * seen before (www) server]

;; AUTHORITY SECTION:
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [china * seen before]
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82   [china * seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60   [china * seen before]
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166   [bangladesh * seen before]

;; Query time: 1355 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:35:40 2007
;; MSG SIZE  rcvd: 127

One more

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3604
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
emailmarketingassociates.com. 1293 IN   NS      ns1.prioritydns.info.

;; ADDITIONAL SECTION:
ns1.prioritydns.info.   881     IN      A       218.106.165.183 [china *seen before]

;; Query time: 1401 msec
;; SERVER: boris_the_bear
;; WHEN: Mon Apr  2 11:37:06 2007
;; MSG SIZE  rcvd: 112

admin: I do like this mapping nonsense - I've added a link in the the main menu i use for this page, other features on map 3 now include Robert's old haunts, and isp. Map 4 needs some more spamcop reports, but south america is looking good recently.

28 March: Sky over at Opsan reports a new domain imaginatively named 'emailmarketingassociates.com'. Registered to our friend in China named Liu. Usual garbage starts below.

the Spam Olympics
 whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailmarketingassociates.com
  Name Server.......... ns3.emailmarketingassociates.com
  Name Server.......... ns2.emailmarketingassociates.com
  Name Server.......... ns1.emailmarketingassociates.com

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24514
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212

;; AUTHORITY SECTION:
emailmarketingassociates.com. 42698 IN  NS      ns3.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns4.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns1.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns2.emailmarketingassociates.com.

;; ADDITIONAL SECTION:
ns1.emailmarketingassociates.com. 9687 IN A     218.106.165.183 [cn * seen before]
ns2.emailmarketingassociates.com. 924 IN A      210.76.106.82 [cn * seen before]
ns3.emailmarketingassociates.com. 924 IN A      221.194.44.60 [cn * seen before]
ns4.emailmarketingassociates.com. 924 IN A      202.92.63.166 [bd * seen before]

;; Query time: 968 msec
;; SERVER: boris
;; WHEN: Tue Mar 27 12:20:52 2007
;; MSG SIZE  rcvd: 198

Locations: www- 218.106.165.212 (china), dns 75% china 25% Bangladesh. - i thus procliam Bangladesh to be a spam sewer. I also note some subtle change to the website - millions of us are not.

the zombie does the 100 yard stare Robert latest ahem design.

Anyhow spamcop reports most welcome. - maps have been updated thank you, more reports always welcome.

where are we today meet spot27 March: Admin note: before i bore you all to death with the 'where' theres been some nastiness in the world of 'counting' should any outside link (not that use i them much) might add spyware etc, and if you think it was inserted via here please do let me know. As per my defaults most links on this page link to stuff we provide. But do let me know and we will rethink the approach.

Now wheres that dog gone....

ns1.emailsolutioncorp.com. 38746 IN     A       218.106.165.183 [cn was 207]
ns2.emailsolutioncorp.com. 38746 IN     A       210.76.106.82   [cn china govt was 241]
ns3.emailsolutioncorp.com. 38746 IN     A       221.194.44.60   [cn - no change]
ns4.emailsolutioncorp.com. 38746 IN     A       202.92.63.166   [bd - no change]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66   [cn - no change]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60   [cn - no change]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241  [cn - no change]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166   [bd - no change]

ns1.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     218.57.8.93     [cn - no change]
ns2.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     221.194.44.62   [cn - no change]
ns3.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     222.76.212.175  [cn - no change]
ns4.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     208.2.150.150   [usa - no change medecison]

;; Query time: 1522 msec
;; SERVER: boris
;; WHEN: Mon Mar 26 17:57:01 2007

the Spam OlympicsNo change in the world of seo to report either and usual suspects. Interestingly now playing whack a mole is ns2.emailsolutioncorp.com and our friends in the chinese government aka 'Beijing Software Industry Productivity Center' and fuy@bsw.gov.cn So china gets a gold spam with 9/12 dns spots, silver goes to Bangladesh with 2/12, and usa fails miserably with bronze with 1/12 so no gold medals for america.

That concludes the gardening.

22 March: Latest map map3e Robert Soloway Map (version 5). should be for your consideration. It features two maps on a page, however something better would be desirable - this was achieved with a bit of searching and no book help.

Your spamcop reports are most welcome, your spamcop report (with the spamming ip) could be added to the map.

help: If there be any googlemap experts willing to drop a hint - please drop me a note. I need to visit a library before I can progress further with maps.

news wise: In Opsan robert is compared to failed marriage partner in reference to his telephone manner a Florist observes. Thank you to Green Cottage for that observation.

plans: Speaking of gardens - I plan to do some gardening soon - have you seen my spade ?.

17 March: Have a go with http://sjwest01.googlepages.com/map3.html Robert Soloway Map very very very beta. Thank you for the spamcop reports. SEO Section moved up the document a little it annoyed us where it was.

New! - http://sjwest01.googlepages.com/map4.html Robert Soloway Spambot Map (also very beta).

15 March: Dns update - (yawn) Medecision make another appearance hmmmm.

ns1.emailsolutioncorp.com. 9245 IN      A       218.106.165.207 [cn]
ns2.emailsolutioncorp.com. 9245 IN      A       210.76.106.241 [cn]
ns3.emailsolutioncorp.com. 9245 IN      A       221.194.44.60 [cn]
ns4.emailsolutioncorp.com. 9245 IN      A       202.92.63.166 [bd]

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 [Medecison, usa]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66 [cn]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60 [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [bd]

;; SERVER: boris
;; WHEN: Thu Mar 15 17:20:58 2007
;; MSG SIZE  rcvd: 191

admin note: Strangley i find out this page is Great Firewall of China 'friendly'.

14 March: Thank you for the spamcop reports. We need better roach killer, some might say thats very christian that. Anyhow the two domains who lost there 'where' have returned.

Before i bore you all to death Our chinese government friends make yet anoher appearance (you see China does loves spam) and we all take a holiday to Bangladesh which is a new destination for us, its another stamp in the passport folks.

Kkaran Bahree indian it worker and bank thief.
whois 202.92.63.166
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.92.48.0 - 202.92.63.255
netname:      AIRNET
descr:        Dekko Airnet Ltd.
descr:        Internet Service Provider
descr:        Dhaka
descr:        Bangladesh
country:      BD
admin-c:      FR17-AP
tech-c:       FR17-AP
changed:      hm-changed@apnic.net 20030121
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-BD-DEKKO-AIRNET
source:       APNIC

person:       Faisal Rahman
nic-hdl:      FR17-AP
e-mail:       faisal@danl.com.bd
address:      Dekko Airnet Ltd.
address:      13 Kawran Bazar
address:      T.K. Bhaban (17th Floor)
address:      Dhaka 1215
phone:        +880 2 9110296
fax-no:       +880 2 8123608
country:      BD
changed:      faisal@danl.com.bd 20040320
mnt-by:       MAINT-BD-DEKKO-AIRNET
source:       APNIC

One meets many 'old friends' while doing this page. Boring stuff follows sorry.

the Spam Olympics
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn]
;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [Dhaka, Bangladesh, BD]

ns1.emailsolutioncorp.com. 10794 IN     A       124.254.44.66  as above
ns2.emailsolutioncorp.com. 10794 IN     A       221.194.44.60
ns3.emailsolutioncorp.com. 10794 IN     A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.emailsolutioncorp.com. 10794 IN     A       202.92.63.166

;; Query time: ???
;; SERVER: boris
;; WHEN: Tue Mar 13 15:15:40 2007

13 March: Sky in opsan thinks Roberts been a dns botneting again - this time on roach runner (rr.com). So it's time to do some gardening again one, two, three spades at the ready and go.

We have a new dns supplier meet strawberyaudk.org and somebody called Aquil A. Naeem, 110 Arrowcreek Drive, 28273, Charlotte, North Carolina USA. Geeky people will also notice the change in in Gandi lookup.

whois strawberyaudk.org -hwhois.gandi.net
[Querying whois.gandi.net]
[whois.gandi.net]
% GANDI Registrar whois database for .COM, .NET, .ORG., .INFO, .BIZ, .NAME
% Acces et utilisation soumis a la legislation francaise sur
% les donnees personnelles.
% yada yada ye....
% Date: 2007/03/12 12:38:01
domain:         strawberyaudk.org
owner-address:  2110 Arrowcreek Drive #303
owner-address:  28273
owner-address:  Charlotte
owner-address:  North Carolina
owner-address:  United States of America
admin-c:        AAN19-GANDI
tech-c:         AAN19-GANDI
bill-c:         AAN19-GANDI
nserver:        ns1.strawberyaudk.org 217.70.185.0
nserver:        ns2.strawberyaudk.org 217.70.185.0
nserver:        ns5.strawberyaudk.org 217.70.185.0
nserver:        ns3.strawberyaudk.org 217.70.185.0
nserver:        ns4.strawberyaudk.org 217.70.185.0
reg_created:    2007-02-28 20:26:37
expires:        2008-02-28 20:26:37
created:        2007-02-28 21:25:05
changed:        2007-03-12 11:52:34

person:         Aquil A. Naeem
nic-hdl:        AAN19-GANDI
address:        2110 Arrowcreek Drive #303
address:        28273
address:        Charlotte
address:        North Carolina
address:        United States of America
phone:          +1.4406102907
e-mail:         6cc3e844b11b50948e6aab86be40905d-aan19@contact.gandi.net
lastupdated:    2007-02-28 21:23:07

the Spam OlympicsSummarising the below changes be (withdrawals) that our Chinese government friends at 210.76.96.0 - 210.76.115.255, (Beijing Software Industry Productivity Center) dont like Bob it appears - surprising that.

Big Bush is watching youAdditions now: Medecision make a reapperance from 25 Feb 2007 They do seem to be a bit clueless. Lots of usa dsl boxes here, of note (and close to Robert home?) is Charter Communications KNWK-WA, usa on 68.189.136.87 (see below).

Of more interest: Australia makes an appearance via unwiredaustralia.com.au which would appear to be a dsl supplier too. Most importantly is new Chinese dns provider by the name of XIAMEN-TELECOM-IDC-XIAMEN-FJ

the Spam Olympics
whois 222.76.212.175
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      222.76.208.0 - 222.76.223.255
netname:      XIAMEN-TELECOM-IDC-XIAMEN-FJ
country:      CN
descr:        Xiamen Telecom IDC
descr:        Xiamen Fujia Province
admin-c:      CA67-AP
tech-c:       CA67-AP
changed:      fjnic@fjdcb.fz.fj.cn 20040719
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CHINANET-FJ
source:       APNIC

role:         CHINANETFJ IP ADMIN
address:      7,East Street,Fuzhou,Fujian,PRC
country:      CN
phone:        +86-591-3333169-293
fax-no:       +86-591-3371954
e-mail:       fjnic@fjdcb.fz.fj.cn
trouble:      send spam reports  and abuse reports
trouble:      to abuse@fjdcb.fz.fj.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      FH71-AP
tech-c:       FH71-AP
nic-hdl:      CA67-AP
mnt-by:       MAINT-CHINANET-FJ
changed:      fjnic@fjdcb.fz.fj.cn 20020719
source:       APNIC

Boring stuff now sorry.

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93    [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62  [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn - ?new?]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150  [medecison, usa]

ns1.permissionemailcorp.com. 180 IN     A       24.126.126.177 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       67.166.181.124 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       69.47.53.127   [WideOpenWest, il,usa]
ns1.permissionemailcorp.com. 180 IN     A       24.6.233.172   [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       24.125.160.190 [comcast usa]
;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns1.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns2.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns3.strawberyaudk.org.

emailsolutioncorp.com.  180     IN      A       24.23.125.215  [comcast, usa]
emailsolutioncorp.com.  180     IN      A       67.9.165.164   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       67.10.13.218   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       68.189.136.87  [Charter Communications KNWK-WA, usa]
emailsolutioncorp.com.  180     IN      A       125.63.139.70  [unwiredaustralia. com.au]
;; AUTHORITY SECTION:
emailsolutioncorp.com.  28387   IN      NS      ns2.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns3.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns4.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns1.strawberyaudk.org.

;; Query time: 2740 msec
;; SERVER: boris
;; WHEN: Mon Mar 12 11:24:09 2007
;; MSG SIZE  rcvd: 272

Sky was right. - I imagine websites point to China as usual via these proxies. Update: only one domain seems to work, Robert has broken his internet thingy again. - up host is

the Spam Olympics
ns1.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     218.57.8.93
ns2.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     221.194.44.62
ns3.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     222.76.212.175
ns4.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     208.2.150.150

Most of those point east to that red book waving country, whose name aludes me. Imagine breaking the internet on a monday morning. Anyhow more fun and gardening (come smell the roses) soon.

Admin: Have had a little 'fun' with the Bob screen dumps - all are now clickable and printable (provided you can handle png) without right clicking.

10 March: Friend cc's us a bob craplet, other news I am using this on the right hand menu. Which might be usefull/useless, the right hand menu is never printed out of you use our print css file. This sort of function usually strikes me as pointless until recently, Views welcome.

9 March: With the recent link to smd (spam of mass destruction) in this page I can widen my focus a little but still keeping to my objective as mostly remaining a Robert Soloway spam document.

The US SEC (stock exchange) have decided to block trading in spams promoting stock trading. A quote i think.

He said the SEC is investigating the companies themselves as well as outsiders, and that the same people are likely behind multiple spam campaigns. The suspensions will last for 10 days. The S.E.C. said that further investigation could lead to arrests.

Recent offenders fingered by the us sec and have had there trading stopped included.

  1. Advanced Powerline Technologies Inc.
  2. America Asia Petroleum Corp.
  3. Amerossi Int'l Group, Inc.
  4. Apparel Manufacturing Associates, Inc.
  5. Asgard Holdings Inc.
  6. Biogenerics Ltd.
  7. China Gold Corp.
  8. CTR Investments & Consulting, Inc.
  9. DC Brands International, Inc.
  10. Equal Trading, Inc.
  11. Equitable Mining Corp.
  12. Espion International, Inc.
  13. Goldmark Industries, Inc.
  14. GroFeed Inc.
  1. Healtheuniverse, Inc.
  2. Interlink Global Corp.
  3. Investigative Services Agencies, Inc.
  4. iPackets International, Inc.
  5. Koko Petroleum Inc.
  6. Leatt Corporation
  7. LOM Logistics, Inc.
  8. Modern Energy Corp.
  9. National Healthcare Logistics, Inc.
  10. Presidents Financial Corp.
  11. Red Truck Entertainment Inc.
  12. Relay Capital Corp.
  13. Rodedawg International Industries, Inc.
  14. Rouchon Industries, Inc.
  1. Software Effective Solutions Corp.
  2. Solucorp Industries Ltd.
  3. Sports-stuff.com Inc.
  4. UBA Technology, Inc.
  5. Wataire Industries Inc.
  6. WayPoint Biomedical Holdings, Inc.
  7. Wineco Productions Inc
  8. Sports-stuff.com Inc.
  9. UBA Technology, Inc.
  10. Wataire Industries Inc.
  11. WayPoint Biomedical Holdings, Inc.
  12. Wineco Productions Inc

Quite what this means for Robert is something we can all speculate about. What the SEC thinks about can-spam legislation is pretty clear. I hope that this action by the sec continues. If it does not then its value as a statement only about 'can-spam' effectiveness was worth a mention here.

8 March: Sky confirms and informs us via opsan that the comrades in Chinas government are aware there hosting Robert Soloway in several forms, quite how 'anti spam' that makes them is something you can all think about.

where are we today meet spot7 March: Thank you for the spamcop reports, more always welcome. I will be doing some Robert Soloway 'gardening' soon when the time makes itself free.

the Spam OlympicsSeo domains first, submit-me-now.com no change with dns services supplied by China Telecom, and Beijing Feihua Communication Technology Co.Ltd. and hosted in China at Beijing Guanghuan Xinwang Digital Technology co.Ltd

Big Bush is watching younim-company.com (other seo) also shows no changes in status with its american hosting as before.

spam domains now, we have a mix of Korea and China here

EMAILBROADCASTAUTHORITY.COM - NS2.EMAILBROADCASTAUTHORITY.COM changes from 211.155.132.228 to

the Spam Olympics
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62

Thats China (still) CNCGROUP Hebei Province Network, no other changes. to emailbroadcastauthority.com. Next one strikes me a mildly humourous new hoster in guess ... China.

the Spam Olympics
dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43079
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       210.76.106.241

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 431 msec
;; SERVER: boris
;; WHEN: Wed Mar  7 16:45:44 2007
;; MSG SIZE  rcvd: 129

the Spam OlympicsMeet Beijing Software Industry Productivity Center on 210.76.106.241 (you will be seeing a lot of them) is this the Chinese Government/peoples liberation army (pla) ?

whois 210.76.106.241
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-AP
tech-c:       YF124-AP
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       APNIC

person:       Yi Fu
nic-hdl:      YF124-AP
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       APNIC

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-CN
tech-c:       YF124-CN
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       CNNIC

person:       Yi Fu
nic-hdl:      YF124-CN
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       CNNIC

Dns points to

ns4.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns3.permissionemailcorp.com. 43200 IN   A       222.122.56.49 * korea
ns2.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns1.permissionemailcorp.com. 43144 IN   A       218.57.8.93

In China - CNCGROUP-SD, Beijing Software Industry Productivity Center x 2

the Spam OlympicsAnd finally .... emailsolutioncorp.com... (never forgotten)

emailsolutioncorp.com.  3600    IN      A       210.76.106.241
ns4.emailsolutioncorp.com. 6171 IN      A       88.146.0.57 * czech - eu
ns1.emailsolutioncorp.com. 6171 IN      A       218.57.8.93
ns2.emailsolutioncorp.com. 6171 IN      A       210.76.106.241
ns3.emailsolutioncorp.com. 6171 IN      A       222.122.56.49 * korea

In China - CNCGROUP-SD, and Beijing Software Industry Productivity Center x2 (see above), plus our czech friends from last time, and Korea. Gardening time is finished for now.

6 March: admin note: Well George and Tony have wmd so Bananas must have 'smd' theories. Thats spam of mass destruction.

5 March: globustravelclub.info will be added to the domain list after looking at this (google) and Ed finds a link to aristocratroyal.info also a Google link which links it to drug sales of spam type that we all love.

Thank you also for the recent spamcop reports. Its very nice to have an original of the Robert mess up noted below.

3 March: Ed over at Opsan spots some Robert confusion. Now if this does not say something to shady then I'm a teapot called George. Excerpt from Roberts spam (I have copies of spamcop.net) for authenticity*.

Check out this new website i have found:

http://www.globustravelclub.info

everything you needed in one place.
we email advertise your charity web site to 7,500,000 people. free.

http://www.emailsolutioncorp.com 

Two in one email that is deserving of a lookup i think...

whois globustravelclub.info
[Querying whois.afilias.info]
[whois.afilias.info]
Yada yada ye 

Domain ID:D16446387-LRMS
Domain Name:GLOBUSTRAVELCLUB.INFO
Created On:09-Feb-2007 20:00:33 UTC
Last Updated On:20-Feb-2007 20:17:54 UTC
Expiration Date:09-Feb-2008 20:00:33 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:F4BA58C1E307310F
Registrant Name:Sierra Prine
Registrant Organization:
Registrant Street1:1080 Lake Front Dr Apt 718
Registrant Street2:
Registrant Street3:
Registrant City:Sacramento
Registrant State/Province:CA
Registrant Postal Code:95831
Registrant Country:US
Registrant Phone:+1.9164287480
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: greitsai@yahoo.com
Admin ID:F4BA58C1E307310F
Admin Name:Sierra Prine
Admin Organization:
Admin Street1:1080 Lake Front Dr Apt 718
Admin Street2:
Admin Street3:
Admin City:Sacramento
Admin State/Province:CA
Admin Postal Code:95831
Admin Country:US
Admin Phone:+1.9164287480
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:greitsai@yahoo.com
Billing ID:F4BA58C1E307310F
Billing Name:Sierra Prine
Billing Organization:
Billing Street1:1080 Lake Front Dr Apt 718
Billing Street2:
Billing Street3:
Billing City:Sacramento
Billing State/Province:CA
Billing Postal Code:95831
Billing Country:US
Billing Phone:+1.9164287480
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:greitsai@yahoo.com
Tech ID:F4BA58C1E307310F
Tech Name:Sierra Prine
Tech Organization:
Tech Street1:1080 Lake Front Dr Apt 718
Tech Street2:
Tech Street3:
Tech City:Sacramento
Tech State/Province:CA
Tech Postal Code:95831
Tech Country:US
Tech Phone:+1.9164287480
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:greitsai@yahoo.com
Name Server:NS1.RABBITANDTIGER.NET
Name Server:NS2.RABBITANDTIGER.NET
Name Server:NS3.RABBITANDTIGER.NET
Name Server:NS4.RABBITANDTIGER.NET
Name Server:NS5.RABBITANDTIGER.NET

admin note: We now have a working local html validator, and this should mean one update, rather than several where i fixed stupid stuff with euro; signs, etc. So an update is an update, rather than a html check.

Also we are attempting our yearly spell check

*An authentic Robert Soloway spam ? and not a fake does appear to have a level of comic value here to my brain.

27 February: Getting bored ? - falling asleep while ploughing through the last of the recent date entries - well so was I. Anyhow how Robert lightens the tones with a new domain, so fire up that J S Bach music in your telephone system as we introduce a new Robert Soloway domain of... emailsolutioncorp.com.

the Spam Olympics
whois -hwhois.dns.com.cn emailsolutioncorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

OK good old liu feng and guang zhou there, for domain look up spade the nameserver not the domain name

--- resolving host "ns1.emailsolutioncorp.com", please wait...
ns1.emailsolutioncorp.com [218.57.8.93]
--- 02/27/07 00:43:53 GMT Standard Time
--- resolving host "ns2.emailsolutioncorp.com", please wait...
ns2.emailsolutioncorp.com [221.194.44.60]
(ns1.prioritydns.info [221.194.44.60] )
--- 02/27/07 00:43:58 GMT Standard Time
--- resolving host "ns3.emailsolutioncorp.com", please wait...
ns3.emailsolutioncorp.com [222.122.56.49]
--- 02/27/07 00:44:04 GMT Standard Time
--- resolving host "ns4.emailsolutioncorp.com", please wait...
ns4.emailsolutioncorp.com [88.146.0.57]

Servers (dns) listed as

[218.57.8.93] - China
[221.194.44.60] - China
[222.122.56.49] - South Korea - Please Kim Jong-il nuke kornet and South Korea please please
[88.146.0.57] - Our czech friends again (eu)

Funny (humour) from opsan now from Comrade 'Flood the Spambox' whose activities to unsubscribe spam, and try and purchase his spam package (via non ssl) finally got a response. I love Roberts odd logic and lack of understanding of jurisdiction. Standard pure bull shit.

I'm sure the owner of robmckenna.org which not like to get Roberts Soloways Spam - I do hope some nice republican supporter will visit Mr Soloways website and unsubscribe that domain - after can-spam sorted out the spam problem didn't it.

Thank you for the spamcop reports.

26 February: admin note: have added link at the top of this document to cover the 2008 elections. Any help with links and comments by made by the SAG quoted in the press most welcome. After all it is an election year.

Thank you for the spam cop reports, Spamhaus have assigned sbl's to Czech isps (see couple of days ago entry) for details

Sky reports Robert is Havesting email from domains again over at Opsan.

A message to me (smoke signals) informs me that 221.194.44.61 (China) reportedly has port 3389 open - which apparently has a terminal service on a windows box. This box also hosts Roberts spamming websites of EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com which I referred to here on the 23/02/2007.

This seems to fits Robert windows platform preference observered here before in this page.

Should you wish to have fun do please take care, Robert has yet another 'fan'. Thank you for your tip (unverified).

25 February:Whois 'MEDecision' ? which was the name in look from yesterday - apparently

MEDecision provides software, services and clinical content that allows for increased administrative efficiency and improved quality

url:medecision.com
Nasdaq symbol: MEDE
Address: MEDecision Corporate Headquarters, 601 Lee Road, Chesterbrook Corporate Center, Wayne, PA, US,19087
phone: 610-540-0202

DNS to range indicates a breaking via sprint rather than a hack to MEDecisions webhoster (Qwest). Quite why Medecison need a another range i leave for them to explain. Websites hosted on Qwest

whois 72.165.244.1
[Querying whois.arin.net]
[whois.arin.net]
Qwest Communications Corporation QWEST-INET-37 (NET-72-164-0-0-1) 
                                  72.164.0.0 - 72.166.255.255
Medecision, Inc. Q0427-72-165-244-0 (NET-72-165-244-0-1) 
                                  72.165.244.0 - 72.165.244.255

Big Bush is watching youInternal range of Medecision, Inc (range below has Robert Soloway dns server - see yesterdays entry) appears to be:

 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

Interesting - I'd like to hear an explanation anyhow.

24 February: Boring entry today - sorry but permissionemailcorp.com dns changes from

ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93 #
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49 #
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57 €

to

ns1.permissionemailcorp.com. 24967 IN   A       218.57.8.93 #
ns2.permissionemailcorp.com. 24967 IN   A       221.194.44.62 #
ns3.permissionemailcorp.com. 24967 IN   A       222.122.56.49 # *
ns4.permissionemailcorp.com. 24967 IN   A       88.146.0.57 €**

Lets do the other shall - why not i hear from those of you whom be awake.

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 USA
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 #
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 #
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 #

key:
# China,
€ Czech (eu)
* new china
- ** see yesterday,
USA america
New spambot setup in progress ? A look up of 222.122.56.49 follows

the Spam Olympics
whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

The other dns of note - america.

Big Bush is watching you
 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

23 February: spam update for EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com both point to 221.194.44.61 Go Chinese Pandas!

the Spam Olympics
dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 11737
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; Query time: 2867 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:07:31 2007
;; MSG SIZE  rcvd: 129

dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 54442
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       221.194.44.61

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 3121 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:08:13 2007
;; MSG SIZE  rcvd: 133

whois 221.194.44.61
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

SEO operations now of submit-me-now.com (seo spam op) and nim-company.com

the Spam Olympics
dig submit-me-now.com

; <<>> DiG 9.3.4 <<>> submit-me-now.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:
;submit-me-now.com.             IN      A

;; ANSWER SECTION:
submit-me-now.com.      3600    IN      A       124.42.8.146

;; AUTHORITY SECTION:
submit-me-now.com.      3600    IN      NS      ns1.dns.com.cn.
submit-me-now.com.      3600    IN      NS      ns2.dns.com.cn.

;; ADDITIONAL SECTION:
ns1.dns.com.cn.         2772    IN      A       218.30.114.205
ns1.dns.com.cn.         2772    IN      A       218.30.114.204
ns2.dns.com.cn.         286     IN      A       218.244.47.6
ns2.dns.com.cn.         286     IN      A       218.244.47.5

;; Query time: 3282 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:17:32 2007
;; MSG SIZE  rcvd: 161

[sjwest@mail2 ~]$ whois 124.42.8.146
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Big Bush is watching younot forgetting ... nim-company.com being servered in spammy florida still.

No spambots from gandi (France) i notice, Thank you for the spamcop reports dns in Czech (eu) - probably hijacked.

Europe
ns4.permissionemailcorp.com [88.146.0.57] 
inetnum:        88.146.0.0 - 88.146.0.255
netname:        ADSLCOLNETWORK2
descr:          ADSL POP
descr:          Czech On Line a.s.
country:        CZ
admin-c:        VOL-RIPE
tech-c:         VOL-RIPE
status:         ASSIGNED PA
mnt-by:         VIDEOONLINE-MNT
mnt-lower:      VIDEOONLINE-MNT
source:         RIPE # Filtered
 
role:           Video On Line Hostmaster Role
address:        Czech On Line a.s.
address:        U Nakladoveho nadrazi 8
address:        130 00, Prague 3
phone:          +420 246000222
phone:          +420 246000400
fax-no:         +420 246000113
remarks:        trouble:      
------------------------------------------
remarks:        trouble:      Operational issues: hostmaster@vol.cz
remarks:        trouble:      Abuse and SPAM:     abuse@vol.cz

update (26/2/2007) Spamhaus add this for the above range and host ost1-v-5-57.static.adsl.vol.cz - at time of writing 6 open tickets for this isp listed here (vol.cz) sbl's

21 February: An anon contact (verified) says Santa Monica California is apparently his original roots - happy digging, and thank you very much

Elections for 2008 - Washington State (WA) not DC (politics1.com) is covering the state - Incumbent State Attorney General appears to be running again Rob McKenna (campaign site) is running, whom i discover is a republican by nature - ?spam is good?

Rob McKenna

lets go do a whois shall we ?

Domain ID:D25135944-LROR
Domain Name:ROBMCKENNA.ORG
Created On:18-Apr-2000 03:03:37 UTC
Last Updated On:17-Oct-2006 18:07:27 UTC
Expiration Date:18-Apr-2009 03:03:37 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:tuH8oQWrYdeDUm5R
Registrant Name:Rob McKenna
Registrant Organization:Committee to Re-Elect Attorney General Rob McKenna
Registrant Street1:6021 - 118th Avenue SE
Registrant Street2:
Registrant Street3:
Registrant City:Bellevue
Registrant State/Province:WA
Registrant Postal Code:98507
Registrant Country:US
Registrant Phone:+1.4256206337
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:robmckenna@robmckenna.org
Admin ID:tumOyn2iq2eavsIL
Admin Name:Craig Wright
Admin Organization:Committee to Re-Elect Attorney General Rob McKenna
Admin Street1:9039 SE 59th Street
Admin Street2:
Admin Street3:
Admin City:Mercer Island
Admin State/Province:WA
Admin Postal Code:98040
Admin Country:US
Admin Phone:+1.2063902978
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:cbwright@speakeasy.net
Tech ID:tupS4IVNiIChwDfZ
Tech Name:Support Easy CGI
Tech Organization:Easy CGI
Tech Street1:99 Main Street
Tech Street2:
Tech Street3:
Tech City:Nyack
Tech State/Province:NY
Tech Postal Code:10960
Tech Country:US
Tech Phone:+1.8453487698
Tech Phone Ext.:
Tech FAX:+1.8457277777
Tech FAX Ext.:
Tech Email:support@easycgi.com
Name Server:NS1.EASY-CGI.COM
Name Server:NS2.EASY-CGI.COM

Oddly Mr McKennas campaign site is based in New York State phobos.easy-cgi.com (66.245.186.32) Easy CGI, Inc.,EASYCG, 99 Main Street,Nyack,NY,10960 US - there must be something wrong with WA webhosters I assume ?

Consider that a Bananas in the Falklands exclusive.

19 February: General page cleanup (its a bit of a monster to maintain). Recent dns terminations of dns moved from yellow to red colour in domain table. Added the other seo domain name to the 'up host' table too.

admin: Since we are buying hats (a metaphor) recently I do hope that that our friends will perform on the day of the dance. Since my hats getting quite full can anybody recommend a decent big hat because mine is getting quite full.

Anyhow despite a perceived hat problem, i look forward to the dance and i trust someone will send me a 'ticket'.

14 February: Ed writes me that a NANEA post that gandi (the french) trashed MOUSESTYLEE.NET, Beergoggles reports to that phone number does not reach 'George Jones'. So its Chinese dns (very anti spam) again for Robert.

the Spam Olympics
dig permissionemailcorp.com

; >><< DiG 9.3.4 >><< permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37539
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43199  IN      NS   ns4.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns1.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns2.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns3.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57

;; Query time: 437 msec
;; SERVER: boris
;; WHEN: Wed Feb 14 22:33:22 2007
;; MSG SIZE  rcvd: 177

name servers locate to 88.146.0.57 = eastern europe,
222.122.56.49 = south korea (kim nukem please!)
218.57.8.93 = China (both CNCGROUP-HE and CNCGROUP-SD).

12 February: Ed writes me that a NANEA post that we have a new dns bot MOUSESTYLEE.NET for permissionemailcorp.com - a short look up

 whois permissionemailcorp.com 
[Querying whois.verisign-grs.com] [whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: PERMISSIONEMAILCORP.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.MOUSESTYLEE.NET
   Name Server: NS2.MOUSESTYLEE.NET
   Name Server: NS3.MOUSESTYLEE.NET
   Name Server: NS4.MOUSESTYLEE.NET
   Status: clientTransferProhibited
   Updated Date: 11-feb-2007
   Creation Date: 17-nov-2006
   Expiration Date: 17-nov-2007

Big Bush is watching youSome ips: permissionemailcorp.com. 65.185.91.199 (rr.com usa), 68.42.251.58 (comcast Michigan usa), 70.125.129.82 (rr.com usa), 71.118.101.91 (Verizon usa), 65.184.18.110 (rr.com usa). Good old Roach Runner with 3/5 of those

EuropeHello to the French, and George Jones of Dallas. I wonder what happened to Mr Brown ?

domain: mousestylee.net
  reg_created: 2007-02-10 18:22:09
  expires: 2008-02-10 18:22:09
  created: 2007-02-10 19:20:52
  changed: 2007-02-10 20:00:44
  ns0: ns1.mousestylee.net
  ns1: ns2.mousestylee.net
  ns2: ns3.mousestylee.net
  ns3: ns4.mousestylee.net
  ns4: ns5.mousestylee.net
  transfer-prohibited: yes
  owner-c:
    owner-name: George Jones
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  admin-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  tech-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  bill-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active

permissionemailcorp.com - probably still points to China. Thank you for spamcop reports.

8 February: Domain update (as promised) - went through the list - i think that domains advertisingemailcorporation.com and permissionemailcorporation.com have no dns. There status is now set to yellow

Roberts Domains up: EMAILBROADCASTAUTHORITY.COM - china same host and permissionemailcorp.com (China) plus 'new' SEO spamming ops

7 February: Thank you for the spam report. Time permitting i will rescan dns sometime this week and report findings back here.

admin note: Those of you wondering why I have this large page is because it is really interesting to watch an individual spammer in action, if one is thinking while reading this page one can make very informed choices. take..

He is a spammer

is ok but an assumption, but below is better

He is, since he is using ..., blocked also by ... etc

the Spam Olympics3 February: Well meet permissionemailcorp.com - if it where a song it be a mix of the best (and worst) of Bobs domains listed elsewhere. Credit to Ed who was also spammed.

whois -h whois.dns.com.cn permissionemailcorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns4.permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31380
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.62

;; AUTHORITY SECTION:
permissionemailcorp.com. 43197  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 2627 msec
;; SERVER: boris
;; WHEN: Sat Feb  3 17:18:30 2007
;; MSG SIZE  rcvd: 129

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

Go Chinese pandas yay!!! Haters of Spam oh yeah - sbl reference http://www.spamhaus.org/SBL/sbl.lasso?query=SBL47895.

where are we today meet spot2 February: Ed mails and notes some hosting changes ahoy. Also kanjerimada.info as a nameservice bot for advertisingemailcorporation.com - 14 days to go - god bless the french

Europe
Domain ID:D15682005-LRMS
Domain Name:KANJERIMADA.INFO
Created On:13-Dec-2006 06:58:09 UTC
Last Updated On:13-Dec-2006 07:29:09 UTC
Expiration Date:13-Dec-2007 06:58:09 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:O-1069683-GANDI
Registrant Name:clarence Brown
Registrant Organization:clarence Brown
Registrant Street1:39 linden ave. n
Registrant Street2:
Registrant Street3:
Registrant City:westbrook
Registrant State/Province:Connecticut
Registrant Postal Code:06498
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:716d8553e2f50049c16849a27e126be6-1071472@owner.gandi.net
Admin ID:CB3541-GANDI
Admin Name:clarence Brown
Admin Organization:
Admin Street1:39 linden ave. n
Admin Street2:
Admin Street3:
Admin City:westbrook
Admin State/Province:Connecticut
Admin Postal Code:06498
Admin Country:US
Admin Phone:+1.8606695398
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email: 316c1edc8824ac9ac9aea73301fab99a-cb3541@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: support@gandi.net
Name Server:NS1.KANJERIMADA.INFO
Name Server:NS2.KANJERIMADA.INFO
Name Server:NS3.KANJERIMADA.INFO
Name Server:NS4.KANJERIMADA.INFO
Name Server:NS5.KANJERIMADA.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Dns queries for that all over the place, a big hi to clarence Brown i think. - Is Clarence Scott Richers (spammer of the ye olden days) possibly the technical cohort who was once named 'Charlie Brown' - which sounded strange to me even then in a media feature on Mr Richers house with a basement full of pcs spewing spam ? - if i may throw a spanner in.

Domain time and time for 'where is it now' game we like playing, stay tuned and we will right back after these adverts...

I confirm with ed that theemailbroadcastingcompany.com has no dns & emailbroadcastauthority.com is up (pay attention now)

the Spam Olympics
dig emailbroadcastauthority.com
; >><< DiG 9.3.4 >><< emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56854
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       221.194.44.62

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

This concludes.

1 February: Changes to Robert's spam invoices scheme i note from the various spamcop reports i see (more always welcome) current scheme seems to be 123456LETTER, which is a slight variation 12345LETTER7 and then an end for this scam i note again. Its the small things that make Bob happy it seems.

Speaking of friends with 'imaginary work colleagues with email' with a new system (as designed) he's been saving the spams and can probably point out what your average soloway spammee gets quite easily. Should i be interested enough to get my finger out it might make another interesting feature for this page. - anybody think this might be fun ?

I'm beginning to think perhaps Rob McKenna (AG of WA 2004-2008) is on Robert Soloways payroll? - oh well its nice to know the position of such persons. His four year term of office ends in 2008.

admin note: I will publically lynch the next person who suggests that a class action suite be initiated against retard spammer known as robert or occasionally bob. I will have to learn the dark art of lynching first and i don't care what your skin colour (equal opportunity lynching sounds good) is either. Should anybody have an decent websites dedicated to the art of lynching (certified lynchers preferred) then I'd love to hear from you. So don't expect a quick lynch. While civil litigation might have a place it helps if both parties recognise each other should that not be the case then others are needed.

As to that person who thinks Robert is giving email marketers a bad name - welcome to the the party. Spamcop reports always welcome thank you for todays.

junkie29 January: My domain owning friend emails and informs me like others at Opsan do that he finds that fake users (using catchall@domain.dom) are being created by Robert Soloway and then being used by pill pushers. Since it is recognised fact by followers of intelligent design theory (that's death to monkeys too) that we all need to take more asprin* as it is a well known fact in order to make intelligent design make sense is best when stoned.

So (hopefully you all got the joke in the above) what can we say now ? Anyhow your priest would probally recommend cystall meth instead apparently as its better than asprin but that's apparently illegal under the usa patriot act - Bin ladin,wmd and Meth now that's a reach but i suppose if being George Bushes public enemy numero uno your going to need some help from Robert Soloway.

So if inventing email addresses is optin then it raises some interesting questions for thedma.org for if nobody signed up, how might they optout (should that even be technically possible). I'd like an answer to that quandary by them.

Anyhow I doubt spammers r us (thedma.org) will respond. but I'm sure they would happily market meth too. One learns much in these short entries.

Thank you for the spamcop reports too, Sky at Opsan (see main links) notes a striking sameness about a website page design. - Which i added to the dmca section.

26 January: Thank you for the spamcop reports I notice that its now free again.

x] Invoice #: 12345LETTER7 - AMOUNT OWED: $0.00 
We Email Advertise Your Charity Web Site to 7,500,000 People

Odd so nothing new then there. Further unknown skills of Robert include selling fake watches (see opsan). Does Robert know no bounds? What further skills will he perform - stay tuned.

where are we today meet spot25 January: Super size portions of spamcop reports can be found today Thank you all. Super Fan Henrik returns and I will adding a new section called 'seo spammage' soon. Do Roberts 'talents' have no bounds ? mind you since I bet he can probably give you all 1009 variations on how the drug asprin is spelt and I look forward to seeing them in msn search real soon now.

Ballet RussesI was just about to watch a nice dvd (Ballet Russes) when these activities come to my attention, first off the domains of webpositionexpert.com and nim-company.com come into the radar look very close to webpositionexpert.com who really is a seo spammer.

Pictures ? hell why not ! spot the difference.

Roberts copy of webpositionexpert.com

and the original webpositionexpert.com
Spot the difference (images can also be viewed full size) , seo spammers will note that neither has a url link.

That Looks like design theft from Robert (mail link to newportcorp@mailshack.com here. Apparently Bob has been certified since 2004 - Sigmund must had a large queue of more deserving nut jobs to certify first - a shrinks job is never done ho hum. Robert being a crap emailer needs the services of mailshack.com - that's another cheap jibe but quite funny.

Owner, Administrative Contact, Technical Contact, Billing Contact of the thefted domain is: Simon Skinner (ID00127660) PO Box W908 WoodsCentre St Johns, WI 00000 Antigua and Barbuda Phone: +268.5609733 Email: simon@webpositionexpert.com. Is make no comments about his operation but Roberts latest domain registration is:

whois nim-company.com
[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: NIM-COMPANY.COM
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL: http://www.register.com
   Name Server: DNS11.REGISTER.COM
   Name Server: DNS12.REGISTER.COM
   Status: clientTransferProhibited
   Updated Date: 02-aug-2006
   Creation Date: 26-jul-2006
   Expiration Date: 26-jul-2007

Registrant:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA

Email: 4559a7b10a1e672a010ec780f8713151@domaindiscreet.com

Registrar Name....: REGISTER.COM, INC.
Registrar Whois...: whois.register.com
Registrar Homepage: www.register.com

Domain Name: nim-company.com

Created on..............: Wed, Jul 26, 2006
Expires on..............: Thu, Jul 26, 2007
Record last updated on..: Sun, Jan 14, 2007

Administrative Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7a60a1e672a0108df5d9cf350be@domaindiscreet.com

Technical Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7b70a1e672a01ac888d69003f00@domaindiscreet.com

DNS Servers:

dns11.register.com
dns12.register.com


Register your domain name at http://www.register.com

Big Bush is watching youAmerican dns registrar servers

dig nim-company.com

; >> DiG 9.3.3rc3 << nim-company.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER - opcode: QUERY, status: NOERROR, id: 37276
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;nim-company.com.               IN      A

;; ANSWER SECTION:
nim-company.com.        14400   IN      A       69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns12.register.com.
nim-company.com.        43200   IN      NS      dns11.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     20132   IN      A       216.21.234.76
dns12.register.com.     10782   IN      A       216.21.226.76

;; Query time: 424 msec
;; SERVER: ?#53(?)
;; WHEN: Thu Jan 25 19:08:02 2007
;; MSG SIZE  rcvd: 130

Its spammy florida too Big Bush is watching you

whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com 

# ARIN WHOIS database, last updated 2007-01-24 20:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Trademark (dmca) theft Further Image copyright abuse (thanks to Andy) has been tracked down. Please go see dynamicbizserv.com for original shaking hands zombies (see images of websites for evidence) and effinop.com (which is nearly a form of verbal abuse in england)

clone websiteupdate (29 Jan 07) spot something different effinop.com Clone see image, which Sky over at opsan cannot a company called http://www.curanow.com/ seems to maintain it. At least he changed the ceo picture on his copy - and how do you do - 'Hello did you know were strangely linked to a spammer called Robert Soloway' is what there thinking should a photograph ever do that after all the camera never lies does it.

24 January: Another superfan Andy drops in and informs that i have been rather lacking in reporting the ex Robert Soloway domains of catsdogsandpets.com, and the other easy to remember name of phone-example.net on this page for i humbly apologise being a lowly fan and missing although in my defence i've heard mention of them but no more than that.

Andy reports that they now 'rent' these domains and not Robert Soloway - which it is reported he still claims them on various website offering evil stuff. So if your visiting hello, its time to mug up on our favourite spammer (robert that is).

admin note: I don't object to links but when the referrer says (robert_soloway.domain x many visits) you do start to wonder.

Anyhow I hope that Andy 'makee workee' for thba (his china spam provider) and the ex Robert the domains will be added to the list and be greyed out to indicate a new owner as is my sop. That's enough of that background stuff.

Dull ? - here never tomorrow I announce where saddams wmd went so stay tuned.

23 January: Powned!

endorsed by robert!

Europe Nice! (google groups) Robert using MANGOORANGEE.ORG (google groups)our friends at Gandi

emailbroadcastingcompany.com

  Name Server.......... ns4.mangoorangee.org
  Name Server.......... ns3.mangoorangee.org
  Name Server.......... ns2.mangoorangee.org
  Name Server.......... ns1.mangoorangee.org

Thank you for the spamcop reports

22 January: Big dollop of spamcop addresses, Thank you - I also seem to be officially recognised by Robert in some capacity or other.

as recommended Screen shot well I'm not sure where and in what context. The link will not take you to Roberts spam offering.

'Super Fan' Henrik has dazzled us recently with some bits of information - which i hopefully credited properly by the latest is that http://70.85.187.88/ was reconfigured through a Chinese dns bug and is no doubt causing young Robert a few problems - Robert now using a bot net on 221.194.44.62.

Bananas humbly salutes Henrik and offers the Title of distinction 'head super fan' should it desired. Bananas feels unworthy to be called a fan and will continue to write this and continue to document his sightings as and when they appear.

Its nice to know that my views (along with opsans blog, and the rokso record too) have been fully endorsed by Robert Soloway (if he can lie about wikipedia quotes on website, then i have no problem doing it) Nice one Bob!

As ever - looking forward to tomorrow!

21 January: 'Please sir can we have some more spamcop reports please*' have been added. My Domain owner friend sends me ip addresses too.

admin note: Meebo (flash plug in) has been trashed since it did not work in all flavours of ie, and firefox uses another html method to load the flash that is different to ie if your trying write valid xhtml code. Since i don't approve of flash and it is was rather of slow, I can do without it. Should meebo provide a non flash plug in that works with valid xhtml and in all the popular browsers then it might return.

* Oliver Twist ? Charles Dickens reference - better check that you still have your hankerchief (blowing nose cloth).

20 January: Spamcop reports added Danke, Robert Seems to be giving his junk away* and not 'frauding' persons of $15 a spam email. I note from those Spamcop reports,

* you will pay. But it seems Roberts invoice phase has finished for now.

Big Bush is watching you19 January: admin: Added Roberts home isp link and 'recent sightings' to main menu. Lets make it it fun for mdm.net shall we ? big hello to Tim Ensley. But on with the show.




the Spam OlympicsSky over at Opsan says 'submit-me-now.com' strangely shares some similarities with liu fei/nan chang whois entries documented elsewhere in this page. Is Bob getting out of spam and into seo spamming ? don't worry its been sbl'ed hgc.com.hk And Dog reports that 'emailbroadcastingcompany.com' is also using Gandi's phduaisarida.com for dns fun and games but it still points to [124.254.44.*] which has been documented before.

Thank you for the spamcop reports.

Big Bush is watching you18 January: Thank you for the spamcop reports more always welcome. Henrik over at Opsan reports that Robert appears to use a hoster in Seatle for ordering and opens a file of html - think i understand you - nice one Henrik. Think you might have fingered Roberts cable tv connection/stuff OK that new isp fingered is http://www.mdm.net/ or http://www.mdmbusiness.com/ Have a chat with Washington & Oregon Tim Ensley Commercial Services Account Executive mdmbusiness.com 3633 136th Pl SE Suite 107 Bellevue, WA 98006 425.945.1759 800.829.2225 x1159 Email: mdmbusiness_nw@mdm.net Millennium Digital Media is a privately held company headquartered in St. Louis, MO

Big Bush is watching you
whois 66.235.10.215
[Querying whois.arin.net]
[whois.arin.net]
Millenium Digital Media MDM-BLOCK-1 (NET-66-235-0-0-1) 
                                  66.235.0.0 - 66.235.63.255
Millennium Digital Media SEATTLE-MILLENNIUM-DIGITAL-MEDIA (NET-66-235-8-0-1) 
                                  66.235.8.0 - 66.235.11.255

CustName:   Millennium Digital Media
Address:    4316 S104 PL
City:       Seattle
StateProv:  WA
PostalCode: 98178
Country:    US
RegDate:    2005-05-04
Updated:    2005-05-04

NetRange:   66.235.8.0 - 66.235.11.255 
CIDR:       66.235.8.0/22 
NetName:    SEATTLE-MILLENNIUM-DIGITAL-MEDIA
NetHandle:  NET-66-235-8-0-1
Parent:     NET-66-235-0-0-1
NetType:    Reassigned
Comment:    
RegDate:    2005-05-04
Updated:    2005-05-04

RAbuseHandle: MAN23-ARIN
RAbuseName:   MDM Abuse Northwest 
RAbusePhone:  +1-314-802-2400
RAbuseEmail:  abuse-nw@mdm.net 

RNOCHandle: MNN-ARIN
RNOCName:   MDM National NOC 
RNOCPhone:  +1-314-802-2400
RNOCEmail:  nnoc@mdm.net 

RTechHandle: MIA7-ARIN
RTechName:   MDM IP Administrators 
RTechPhone:  +1-314-802-2400
RTechEmail:  ipadmins@mdm.net 

OrgAbuseHandle: MAN23-ARIN
OrgAbuseName:   MDM Abuse Northwest 
OrgAbusePhone:  +1-314-802-2400
OrgAbuseEmail:  abuse-nw@mdm.net

OrgNOCHandle: MNN-ARIN
OrgNOCName:   MDM National NOC 
OrgNOCPhone:  +1-314-802-2400
OrgNOCEmail:  nnoc@mdm.net

OrgTechHandle: MNN-ARIN
OrgTechName:   MDM National NOC 
OrgTechPhone:  +1-314-802-2400
OrgTechEmail:  nnoc@mdm.net

Henrik Thank you! seems to make sense.

17 January: Usual operations from Robert a friend notes to me. Other Opsan reports speak of stock 'pimp n dump' spams to known soloway 'get his spam addresses'. Well nothing unusual there then anyhow i was getting bored of viagra spam's anyhow.

Spamhaus sbl's for those of you interested in such matters vol.cz (europe) kornet.net Korea with another relationship with the Polyakov's ? (mentioned before), Roberts range now gwbn.net.cn (not the whois owners apparently Beijing THBA Technology Co,.Ltd), and finally not forgeting CNCGROUP Shandong province network

the Spam Olympics
 whois gwbn.net.cn
[Querying whois.cnnic.net.cn]
[whois.cnnic.net.cn]
Domain Name: gwbn.net.cn
ROID: 20021209s10021s00016816-cn
Domain Status: ok
Registrant Organization: 中国长城计算机集团公司
Registrant Name: 潘志
Administrative Email: panzhi2000@yahoo.com.cn
Sponsoring Registrar: 北京中科三方网络技术有限公司
Name Server:ns2.gwbn.net.cn
Name Server:ns1.gwbn.net.cn
Registration Date: 2000-04-07 00:00
Expiration Date: 2007-04-07 00:00

Kkaran Bahree indian it worker bank thief.I think we have all seen many of those mentioned here before in this rather long file. - of note PHDUAISARIDA.COM and Gandi's spam policy don't seem to work since its still with us.

Oh well god bless mba management bullshit.


Europem'excusent - I thought gandi was that indian registrar and not my european neighbors. A 'Freudian slip' on my part. I must ask Sigmund about my relationship with Bananas while I'm at it next time.

Apparently he died so i wont ask him damm - (readers tag under humour) Thanks Ed

Spammy India

Kkaran Bahree indian it worker bank thief.15 January: Goodness gracious me - Gandi seem now to hate spam, lets see how long there anti spam stance lasts (not long imho sounds like short term bullshit) anyhow Ed spots that advertisingemailcorporation.com is down for a minute but added as well the domain EMAILBROADCASTAUTHORITY.COM.








the Spam Olympics
Domain Name.......... EMAILBROADCASTAUTHORITY.COM
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.phduaisarida.com
  Name Server.......... ns3.phduaisarida.com
  Name Server.......... ns2.phduaisarida.com
  Name Server.......... ns1.phduaisarida.com

Ed reports dns fun and games from phduaisarida.com which is Indian registered. see what you mean Ed !

Spammy IndiaKkaran Bahree indian it worker bank thief.
domain: phduaisarida.com
  reg_created: 2007-01-09 17:30:36
  expires: 2008-01-09 17:30:36
  created: 2007-01-09 18:29:48
  changed: 2007-01-09 18:32:04
  ns0: ns1.phduaisarida.com
  ns1: ns2.phduaisarida.com
  ns2: ns4.phduaisarida.com
  ns3: ns3.phduaisarida.com
  ns4: ns5.phduaisarida.com
  transfer-prohibited: yes
  owner-c:
    owner-name: Joe Johnson
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  admin-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  tech-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  bill-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42

My geography of the west coast of america is improving but that does sound odd, other domain should ring a telephone bell too.

Ed says: advertisingemailcorporation.com [124.254.44.10] & theemailbroadcastingcompany.com [124.254.44.10] & emailbroadcastauthority.com [69.212.194.93] - botnet - so round robin revolves. Lets do a whois shall we !

the Spam Olympics
whois 124.254.44.10
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

No surprises there - Hello again are the hills alive with Song Wang ? it seems so. Can a 'fan' port scan 124.254.44.10 please all for science as they say.

13 January:the Spam OlympicsSomebody (no not i) Port scanned advertisingemailcorporation.com and reported it - results below - what's slightly freaky here is that it appears to be running smtp - Robert does not like usually getting email so I'm thinking that helpfull (pro spam) China hosting company think this boy is the real deal reputable american businessboy. An open smtp (that's email for any beauty comestic journalists reading this) port does not mean its configured - but it is verging into odd Robert Soloway territory here. Anyhow another fan reports the following.

advertisingemailcorporation.com - 124.254.44.41

PORT STATE SERVICE VERSION
21/tcp open ftp WS FTPd 4.0.0
25/tcp open smtp IMail NT-ESMTP 8.05 37868-1
26/tcp open tcpwrapped
43/tcp open whois?
53/tcp open domain Microsoft DNS
79/tcp open finger?
80/tcp open http Microsoft IIS webserver 6.0
106/tcp open pop3pw IPSwitch Imail pop3 password change daemon 8.05
110/tcp open pop3 IMail pop3d 8.05 596833-37
113/tcp filtered auth
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1023/tcp filtered netvenuechat
1025/tcp filtered NFS-or-IIS
1030/tcp open msrpc Microsoft Windows RPC
1032/tcp open iad3?
1033/tcp open msrpc Microsoft Windows RPC
2000/tcp open ssl/http RemotelyAnywhere remote PC management webserver 6.20.467
3306/tcp open mysql MySQL 5.0.18-nt-max
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
8888/tcp filtered sun-answerbook

Its a windows box too it appears. So if your into whatever go have fun should you feel inclined to.

For instance Microsoft China might be inclined to check if the copy of windows license is legit im sure that Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN would like to hear from them.

Other thoughts i leave to your imaginations (health and beauty journalists) that is called 'pretend'. I'm no windows add-on product expert (iis cal's etc) but there might be more violations on some of that stuff.

Anyhow Robert likes Windows as an os is the one impression i think we can all walk away with here which considering his spamis rantings from a couple of years ago is slightly strange. So nothing new there then.

12 January:the Spam Olympics Added Spamcop report, thank you. Just to remind you that Bobs bullet proof (and hate spam chinese folk) at Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN is still his hosting provider. Make your own mind up* about Chinas anti spam 'initiatives' (* fox news viewers should ask Bill O'reilly and Rupert Murdoch for Guidance instead)

10 January: Added Spamcop reports, thank you. Lets hope some fraudster decides to phish for american express card details using Roberts email lists you know: 'please update your details' scam. That would be karmic after all American Express appear approve of that sort of thing.

Speaking of scammers: A big hi to the Nigerian who visits here and never finds anything of value.

9 January: Added Spamcop reports thank you - since a friend was lucky enough to get one (which they strangely also sent too) - I got a copy

Return-Path: user @ domain
Received: from adsl-ull-220-254.50-151.net24.it ([151.50.254.220]) for user  @ domain; date
To: user@domain
X-SA-Exim-Connect-IP: 151.50.254.220
From: user @ domain
[user@domain] Invoice #: 12345 - TOTAL: $15.00
We Email Advertise Your Web Site to 8,000,000 People

VIEW TRANSACTION BELOW:
http://www.advertisingemailcorporation.com/

Well my friend was surprised that he has an office in Italy, and sending spam to himself and i am pleased too. Its been a while since I've seen a robert spam with complete headers.

What does this say ? - very spammerish, and beware that you clean out user and domains when dealing with Mr Soloway. I will keep this civil - I think the actions of Bob speak more eloquently than a Bananas rant can ever achieve.

'RS' another new Robert 'fan' over at opsan notes that Robert can only process American Express cards these days, Visa and Mastercard seem to have withdrawn his ability to process visa and mastercard payments* at this time based on his website. No doubt this will change but it seems American Express like purveyors of spam.

* chargebacks ?

7 January: Added Spamcop reports thank you - the $15 spam tracking system seems to be a complete Robert screw up. Sky over at Opsan says

I'm receiving about 3-10 a day. Every one of them has different invoice numbers, even the ones that arrive in batches. The spam (and considering he's sending false invoice statements constitutes fraud) 

So my conclusion too is it is just a fraud then, and not a spam tracking system like spf. Sky has the 'advantage' of getting spams to an individual account where the consistency of the numbers ca be checked. That is something i am unable to do due to the actions of a certain person.

Anyhow enough of my gripes.

5 January: Added Spamcop reports thank you - the $15 per spam scam continues. Guess of latest up time for emailadvertisinginc.com made, highly speculative based from reports i have (see 3rd Jan Entry) which should be below.

3 January: Added spam cop reports latest tracking method by Robert Slimeball Soloway is using invoice number with a low $ sum which points you to his website, varying quantities of spammage offered by Robert from 3 million to 9 million id'ed by Sky at Opsan. (all of which are high quality targeted leads - that's humour btw)

Invoice #: 12345 TOTAL: $15.00
We Email Advertise Your Web Site to 3,000,000 People

Example (from spamcop report) If your reporting spam number '12345' is my creation and does change as noted - beware its bit like Roberts spf exploit he did of olden times.

Moving onwards - (stay awake) dns switch for emailadvertisinginc.com which is using round robin dns fun and games compliments of MADAPGYRJ.INFO report host list is extensive but 83.42.160.135, 67.166.215.4, 71.134.191.251, 70.114.194.125, 12.178.131.98, 12.214.232.112, 66.176.188.221 and 71.228.236.208 got fingered by the comrades at spamcop.net as places of where that domain 'lived'.

the Spam Olympics Robert still here though.

124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN

Whether the dns fun and games are working is a judgement call others can make - his last attempt at this got rather fucked up. For the record lets get the new dns providers whois info in here.

Domain ID:D15660292-LRMS
Domain Name:MADAPGYRJ.INFO
Created On:12-Dec-2006 17:50:15 UTC
Last Updated On:02-Jan-2007 10:12:44 UTC
Expiration Date:12-Dec-2007 17:50:15 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT HOLD
Status:TRANSFER PROHIBITED
Registrant ID:O-1069542-GANDI
Registrant Name:Richard Sheldon
Registrant Organization:Richard Sheldon
Registrant Street1:781 Pleasant St.
Registrant Street2:
Registrant Street3:
Registrant City:Rochdale
Registrant State/Province:Massachusetts
Registrant Postal Code:01542
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:af337cb29bb0b8e08ea0664b485533b1-1071331@owner.gandi.net
Admin ID:RS2121-GANDI
Admin Name:Richard Sheldon
Admin Organization:
Admin Street1:781 Pleasant St.
Admin Street2:
Admin Street3:
Admin City:Rochdale
Admin State/Province:Massachusetts
Admin Postal Code:01542
Admin Country:US
Admin Phone:+1.5088929138
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email:c4691c4eaf205b67eef46ac289fd01be-rs2121@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:support@gandi.net
Name Server:NS1.MADAPGYRJ.INFO
Name Server:NS2.MADAPGYRJ.INFO
Name Server:NS3.MADAPGYRJ.INFO
Name Server:NS4.MADAPGYRJ.INFO
Name Server:NS5.MADAPGYRJ.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Massachusetts is in France ? - that's americans and geography for you. Big hi to Richard Sheldon who now has no hosting for it.

Regrettably no one submitted an entry for my Competition, so its a pot of banana compost the next competition i have. Well that appears to be all - advertisingemailcorporation.com and theemailbroadcastingcompany.com still up 124.254.44.41 (see above) Go Chinese Panadas go.

As to Roberts latest spam procedure (having seen more), I be in two minds - it could be perceived as a fraud or a sign of desperation. Fraud thinking is: Should not the Seattle (of Washington State) tax collectors might in involved since having no corporation registered and theoretically taking money would assume that state taxes would need to be paid? From a consumer point of view if anybody could pay to be removed to raises the point that unsubscribing from the spam list never is going to happen, so I'd imagine they would also go join the queue of wronged person in a civil court. Perhaps i go visit his website, then again perhaps i wont.

Personally i prefer my 'desperation view'. Over the new year there was some great fun in nanea where Robert gained yet another 'fan'. Love him or loathe him hes class entertainment.

2007

Merry Christmas24 December My Compliments to all the helpers of this page I hope that whatever you do, you also have a good new year. Robert should Santa not visit you this might help explain a few things. Image credit Shamelessly stolen from some Australian called Russell Coker ages ago.

If your flying today please ask the pilot to be carefull. Our default Robert games of 'up and down domain name', 'what regional registry', and not forgeting 'is that the china panda' party games that this webpage enjoys inventing will resume from tomorrow onwards.

Suggestions for Christmas Robert Soloway games welcome. We have songs.

22 December Surprise no dns fun and games but a simple change of chinese supplier: these idiots seem new to the Soloway empire (well it is China) prioritydns.info is dns supplier (dubious? views) up Robert domain is THEEMAILBROADCASTINGCOMPANY.COM which has taken a back number (SBL46638) advertisingemailcorporation.com and also points here. Thats it 'up' domain name wise at current time (as far as i know).

the Spam Olympics
apnic.net with "124.254.44.41"...
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

Spamcop reports added, thanks!

the Spam Olympics21 December Spot the connection ? from http://www.spamhaus.org/SBL/sbl.lasso?query=SBL49240 221.194.111.54/31 is listed on the Register Of Known Spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by Robert Soloway - Newport Internet Marketing. theemailbroadcastingcompany.com .55 is already occupied by Alex Blood SBL listing, so we'll document Robert Soloway's site in this listing as a /31. (The whole /24 is listed, anyway.)

Spamcop reports added. thanks,

the Spam Olympics19 December DNS posting (stay awake please) advertisingemailcorporation.com points to 221.194.111.55/32 and (Polyakov) SBL47267 Reading that indicates that our Soloway 'polonium-210' friends are 'sending the spam before DNS is live to prevent body-checks, and Hijacking virus-infected PCs to proxy-relay spam from 66.185.126.155' (thats Serverflo look below) links in that range here to Finance scams and all things non Robert related like i don't track.

OK wake up now, some spamcop reports added. Above sort of explains a few things, that still seems dumb. Anyhow both several and Poyakov have honourable mentions in this page. That's the same isp CNCGROUP-HE robert is hosting from (on one ip address)

rumour/bananas bad assumption time: one might infer from this situation that Robert Soloway is unable to directly purchase spam support from our friends the Panda's, and has to resort to spammers with better 'tricks' to get hosting ? Is Bob a spammer - yes, and does Bob need other spammers help - yes.

Views please.

Kkaran Bahree indian it worker bank thief.18 December Sorry but its time for a dns nameserver posting (sorry), normal service will resume soon. The dns of advertisingemailcorporation.com points to managednameservers.com ROK6101 which links to spammy indian called Daniel Mankani (ROK3533) being of Indian origin, who reportedly according to spamhaus does his spamming from Singapore of interest perhaps is this Michigan lawsuit The good news is hes yet another spammer doing things with another spammer. Feel free to adjust your views on indians.

Now should you be still awake also added a couple of spamcop reports. Robert seems to picked up a european spambot supplier. Also like to remind you about the competition, you could be the proud winner of a very exclusive banana skin - so what are you waiting for.

Spammy India Regardless of your views the Image of Kkaran Bahree (google him) just fits perfectly that not everything from India is good. Either 'exported' or domestic.

admin: I screwed up so I'm re-adding advertisingemailcorporation.com to domain list summary and removing advertisingemailcompany.com as an 'up' host- duh companies/corporations it blurs at times. Having funny five minutes here excuse me. 'Close' but wrong same number of 'up' hosts remain.

Opsan update: Mother Natures ice storm apparently knocked out Opsan and everybody else too for that matter, ert: Tuesday (usa time zone) for electrical power restoration.

17 December silly question: You think Santa gets Robert Soloway spam ?. Anyhow with Opsan in a state of flux. Its time for a fun game of up and down domain. Polyakov (fellow spammer) link still active according to Ed but issues with service (from a spamcop report) - www.advertisingemailcorporation.com (checking ip) IP not found. If they cant find it don't expect us to.

the Spam Olympics
;; WHEN: Sun Dec 17 18:25:36 2006
theemailbroadcastingcompany.com. 43195 IN A 221.194.111.55 advertisingemailcorporation.com. 352 IN A 221.194.111.55

Which seems to be it (domain wise) that's China (seen before here ) 221.192.0.0 - 221.195.255.255 CNCGROUP-HE. It appears Roberts sudden domain fun and games have cooled down.

Updates to domains status changed - using historical evidence from 5th december to generate 'uptimes'. Whatever you think one can hardly say Robert is a consistent 86400x365 spam operation. That says too much.

So if you send spam to Santa - does he still come? oh the mysteries of life*. If you know contact us it might explain why Bob does what he does even on christmas day.

* = humour for those whom don't get it

15 December Spamcop reports added, it seems Robert is looking for new botmister, since some of us report a drying up of south american owned pcs doings Satan's (sorry) soloways spam. Anyhow having just started christmas preparations i was wondering if Bob would be working over the christmas period. Somehow i think he will be.

admin: html 'code' might get a bit screwed up while i add a 2007 daily planner over the weekend - table work

its been a good year here since Bob has not really been able to keep domains up and running for long and the dns games of recent become a complete failure since half the time the thing didn't work. Then i finally got my hands on the spam package and was able to debunk a few of those Soloway fibs - if that's 'opt in' then George W Bush is a communist party member. So overall whatever you think about the state of play its been an interesting year with some interesting developments. Of note to those of you expecting 'progress' and not 'getting it' please do note that the continued links to spambotted pc's worldwide, association with other spammers (or isps with other spammers on) and the dns fun and games means Roberts pool of usual haunts is remaining the same.

Here end that rather long paragraph on the year. But whatever happens im in no doubt that the spamlist part of Robert Soloway is a spammer, if this rather large page of logging where when and how Robert is does not work for you then perhaps you can offer me a better explanation* - So bananas in the falklands is proud to have its first competition

COMPETITION * in this competiton please explain why my use of an isp for over a 12 months period is strange and Robert Soloways switching of dns/hosting and utilising random pcs world wide is better than my usage of the internet. Should you find that example 'limiting' then compare Soloways operation to a large corporation (lets take google here) and asks the question how often do they switch providers. The best entry plus your email will be featured on this page.

The winner will also receive a used banana skin in the post if they provide there postal address. So go get writing send your entry in by the 31st December 2006. Bananas judgement is final so no whining.

Good luck.

14 December Been busy with other nonsense, back to usual nonsense Spamcop reports added, Ed in Opsan (plus Dog and Sky) note SPAMHAUS SBL48865 = tinyurl.com/ynff7r Source of proxy/botnet hijack spamming TCP stream analysis of a virus-infected/trojaned PC reveals that it is being hijacked on proprietary high ports from the spammers illegal proxy-mailing server on 66.185.126.88 serverflo.com (current spam listing) reputation What is interesting to note that hes been here before, and the domain names additions had since dried up. Rev BeerGoggles also notes that our high princes of spam (indian robots at gandi) have finally done something about haufna.biz for now whom where providing Bob with dns services. Maybe we will be seeing both gandi, and sevrflo soon here ?

9 December admin: spamcop display changed (sorry).

8 December Back on the Charity scam again, ever since Robert removed all his charities he would like to think he 'supported' from his spams - Sky reports that a made for robert email address got hit with a charity spam for savechilds.net - which has an odd domain name look uk of chinese and russia info - it null routes but the point is that after Sky unsubscribed the address* the spam started to roll in.

* Evidence of this can be seen from the opsan link, an indication that unsubscribing from Robert = more spam can be seen from my now defunct pages which the internet wayback machine has an record of, and i still do have the original files somewhere before i called time on the experiment.

Those of you unaware i have an original spam package which was donated to me for documenting, the link can be found on this page, it starts to explain why the Robert unsubscribe (for more spam) form looks the way it does. Whatever your views on spam/advertising I ask you to visit the link (if you so interested) and make up your own mind.

Add to about bob section.

Spamcop reports added - now with id views please.

6 December I'll keep this short (rather than bore you to death). Lets make opendns.com explain it "You typed www.emailadvertisinginc.com, which doesn't currently resolve."

the Spam Olympics

The haufna.biz dns operation might be 'clever' at obscuring Roberts chinese hosts but when they don't work (and i know that robert has chinese hosting) then I see little point to these servers - if there not going to relay the request back to China.

So is emailadvertisinginc.com up? technically maybe but for some of the time only and cannot be described as 24x7 hosting. If opendns cant find it well just this suits ok. If opnedns cant figure it out where it might be, im not going to. Spamcop sightings added. Happy Wednesday all - Fin.

5 December Delayed from Monday (extra non Soloway fun n games) Another 'quiet weekend' for Robert. Latest lovers who be the Polyakov (Alex Blood/Alexander Mosh/AlekseyB/Alex Polyakov) spam gang (spamhaus: SBL47267 link tinyurl.com/y2g34u ) Well scum with villainy together is something i approve of I refer to.

ns1.optinemailcorp.com. 2D IN A 221.194.111.55 - SBL47267

OK think I've discovered a 'bullet proof' (others have been informed of) technique, and 'bullet proof' should mean something Robert. A method to stop the dns man in the middle* fun and games which continues. The extra villinary factor just makes it it too good to ignore. Anyhow I'll be testing it out this week since im really interested in where things are hosted, rather than who bob would like pretend it is and is but technically not there.

So please do excuse me while i check the new technique for bugs. Roberts Old fiends of haufna.biz has been reported for bad dns according to Ed at Opsan. The moral is that once ignored name has attracted some unwanted fame and linked other spammers to Robert. using my domain list (?nbs? = Robert's mentally retarded fan club) means i should ignore those other fools - who of note Name King sound a fishy outfit.

the Spam Olympics
;; WHEN: Mon Dec  4 09:10:44 2006
dig theemailbroadcastingcompany.com

; <<>> DiG 9.2.4 <<>> theemailbroadcastingcompany.com

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 86400 IN A     221.194.111.55
advertisingemailcorporation.com.  3600 IN A     211.155.132.206
permissionemailcorporation.com.   3600 IN A     211.155.132.206
broadcastemailingagency.com.      3600 IN A     211.155.132.206

First One CNC Group CHINA169 Hebei Province Network, remaining three (still China) and hosted by old friends of Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd - (not a spelling mistake Dns games seem only to be with emailadvertisinginc.com first three american dupes, forth ip is a bogon and is unreachable, other points to the middle east - likely to change too but all probably redirect to above 211.155.132.206 or 221.194.111.55 (both china)

ANSWER SECTION:
emailadvertisinginc.com. 	180    IN A       68.79.49.138
emailadvertisinginc.com. 	180    IN A       68.81.168.165
emailadvertisinginc.com. 	180    IN A       71.137.236.199
emailadvertisinginc.com. 	180    IN A       121.72.7.78
emailadvertisinginc.com. 	180    IN A       212.118.8.74

Last three, Germany, China, ?american ? enom, dont look like Bob - emailadvertisingagency.com status unknown ? Bob is Nils Buurman ?

Registration Service Provided By: BlueYellow
Contact: info@blueyellow.nl
Visit: http://www.blueyellow.nl

Domain name: emailadvertisingagency.com

Registrant Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Administrative Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Technical Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Status: Locked

Name Servers:
   ns1.sedoparking.com
   ns2.sedoparking.com

Creation date: 21 Apr 2005 16:00:47
Expiration date: 21 Apr 2007 16:00:47

emailadvertisingagency.com. 	  600 IN A      212.227.34.3 (sedo)
broadcastemailcorporation.com.   3600 IN A      221.10.254.97 (sedo)
emailadvertisingcorporation.com. 1800 IN A      69.25.142.8 ?not bob ?

* old hacker technique: how do I really know (or you) that say www.whitehouse.gov really hits the server at the other washington, rather than say Osama's cave bunker in Crawford,Texas www server ?. Anyhow go think about it

Main Event time what is going on with emailadvertisinginc.com well im getting host not found. Its either a: screw up by the Polyakov persons, b: my technique needs refining, or c: my dns is screwed (looks likely) Juri is out on that since i cannot even update this page.

Mass of spamcog ips added too, thanks!

admin note: tinyurl links will be replaced with full urls from now on.

1 December Spamcop report added with the amazing observation from Robert that there be 25 days (now less) to Christmas. Since Bob has spammed on Christmas day you get to wonder what christmas is like in the Soloway household in his mothers Cotati residence / or his Seattle one man non registered corporation and his voicemail machine - perhaps it does not happen ?, or he and the voicemail thing do something?

Anyhow with that display of Robert brain power will wonders ever cease?

the Spam Olympics

A solution to the dns games might have been found. Things still (as i suspected) point to China 211.155.132.206 The good news is that new method seems consistent.

30 November Musical chairs continues (party games too) and trip to estonia took place - did you enjoy it ? from a spamcop report.

Host www.emailadvertisinginc.com (checking ip) = 62.65.236.113
    host 62.65.236.113 (getting name) = pc113.host1.trt.starman.ee.

So how is this happening, i don't particularly wish to dilute this page with other stuff but it seems that that's a battle lost, anyhow lets just say Comrade soloway is using the dns at haufna.biz, the dns refresh tricks are just that - consider them a supplier to Bob. Quite how 'willing' 62.65.236.113 was to host emailadvertisinginc.com is another discussion too.

whois haufna.biz
Domain Name:                                 HAUFNA.BIZ
Domain ID:                                   D15124532-BIZ
Sponsoring Registrar:                        GANDI SARL
Sponsoring Registrar IANA ID:                81
Domain Status:                               clientTransferProhibited
Registrant ID:                               O-1056924-GANDI
Registrant Name:                             nancy j wasiuk
Registrant Organization:                     nancy j wasiuk
Registrant Address1:                         22 rockledge terrace
Registrant City:                             pompton plains
Registrant State/Province:                   New Jersey
Registrant Postal Code:                      07444
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.9736169759
Registrant Email:                            d6e3129d8c7267c16edc77bef4ce6567-1058713@owner.gandi.net
Administrative Contact ID:                   NJW3-GANDI
Administrative Contact Name:                 nancy j wasiuk
Administrative Contact Address1:             22 rockledge terrace
Administrative Contact City:                 pompton plains
Administrative Contact State/Province:       New Jersey
Administrative Contact Postal Code:          07444
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.9736169759
Administrative Contact Facsimile Number:     +33.1
Administrative Contact Email:                716c88e34150afa0fbb6b5964a122a04-njw3@contact.gandi.net
Billing Contact ID:                          AR41-GANDI
Billing Contact Name:                        CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Contact Organization:                Gandi SARL
Billing Contact Address1:                    38 rue Notre-Dame de Nazareth
Billing Contact City:                        Paris
Billing Contact Postal Code:                 75003
Billing Contact Country:                     France
Billing Contact Country Code:                FR
Billing Contact Email:                       support@gandi.net
Technical Contact ID:                        AR41-GANDI
Technical Contact Name:                      CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Technical Contact Organization:              Gandi SARL
Technical Contact Address1:                  38 rue Notre-Dame de Nazareth
Technical Contact City:                      Paris
Technical Contact Postal Code:               75003
Technical Contact Country:                   France
Technical Contact Country Code:              FR
Technical Contact Email:                     support@gandi.net
Name Server:                                 NS1.HAUFNA.BIZ
Name Server:                                 NS2.HAUFNA.BIZ
Name Server:                                 NS3.HAUFNA.BIZ
Name Server:                                 NS4.HAUFNA.BIZ
Name Server:                                 NS5.HAUFNA.BIZ
Created by Registrar:                        GANDI SARL
Last Updated by Registrar:                   GANDI SARL
Domain Registration Date:                    Tue Nov 07 10:49:46 GMT 2006
Domain Expiration Date:                      Tue Nov 06 23:59:59 GMT 2007
Domain Last Updated Date:                    Wed Nov 08 18:24:21 GMT 2006

>>>> Whois database was last updated on: Thu Nov 30 00:55:20 GMT 2006 <<<<

NS1.HAUFNA.BIZ - through to NS5. are being utilised so even though we are probably hitting china for Robert websites but these servers are throwing false paths to it every time interval of x seconds (that's my explanation to it) So its a bit like a proxy - you send a request to a person and it actions it. How much this is 'costing' Robert is something we don't know, somehow i doubt that nancy j wasiuk exists too.

Check down the last few days for the dns stuff to see this in action and Beergoggles tracker url. I suspect that the China is taking money from Bob for domain name registrations, and still hosting that website in multiple locations.

While a dynamic dns isn't 'evil' its not really necessary - except if have things to hide/obscure. As always the question is what is Robert trying to hide?

I don't like diluting the page, but the tactics have changed

Sky also writes (bbq time) Soloway's corporation (UBI 6024226472) no longer comes up on Washington state corporation database. So much for the "NPR Corporation" name, much less LLC protection. - added to about 'Robert' section too.

Domain owner friend who was 'wading' though 457 quarantined crap spams since last time they did it (they tell me that they pick an occasional random spam message from that folder - subject unknown and open it) and tells me they one of the few they opens they found one from his holyness. Its been added to the list. They also tell me that Robert is using spoofed headers and they now have an operation in Brazil which is news to all concerned. Such is life - i mean what are the odds that an random message in 457 will be a Robert Soloway spam (americans worried about 'gambling' laws should consider question a statistical probability issue) which is classed as statistics rather than a bet.

29 November Spamcop reports added - Thanks !. Some new logos - too make an appearance soon. Dns lookups as of Wed Nov 29 11:47:23 2006 gmt. emailadvertisinginc.com is interesting, Dns seems to have settled down from wacky monday. - I will start to document and append the upwards part of the document. Most of these appear to be Chinese ip address.

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 33309 IN A     58.83.0.247
advertisingemailcorporation.com. 3600  IN A     211.155.132.206
permissionemailcorporation.com. 3600   IN A     211.155.132.206
broadcastmailingagency.com. 3600 IN       A     204.13.160.26

emailadvertisinginc.com. 180    IN      A       88.111.156.172
emailadvertisinginc.com. 180    IN      A       202.144.125.229
emailadvertisinginc.com. 180    IN      A       216.49.246.8
emailadvertisinginc.com. 180    IN      A       220.226.131.98
emailadvertisinginc.com. 180    IN      A       24.129.93.17
;; WHEN: Wed Nov 29 11:47:23 2006

ctandres.com.           300     IN      A       207.7.201.11
broadcastemailcompany.com. 3600 IN      A       204.13.161.124

ebroadcastcorporation.com. 86400 IN     CNAME   dpweb.vendaregroup.com.
dpweb.vendaregroup.com. 659     IN      A       72.5.175.90

broadcastemailcorporation.com. 3600 IN   A      221.10.254.97 
emailadvertisingcorporation.com. 1800 IN A      69.25.142.8

Rumour time now ? a link to Matt Ferris / Acetech USA rokso 6479 have partnered up for emailadvertisinginc.com ? (if you lookup the spamhaus record for Swiftco.net/Seattle).

broadcastmailingagency.com points to America

Big Bush is watching you
whois 204.13.160.26

OrgName:    Oversee.net
OrgID:      OVERS-1
Address:    818 W 7th Street
Address:    Suite 700
City:       Los Angeles
StateProv:  CA
PostalCode: 90017
Country:    US

NetRange:   204.13.160.0 - 204.13.163.255
CIDR:       204.13.160.0/22
NetName:    OVERSEE-NET-01
NetHandle:  NET-204-13-160-0-1
Parent:     NET-204-0-0-0-0
NetType:    Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate:    2005-04-21
Updated:    2005-04-21

RTechHandle: OVERS-ARIN
RTechName:   Oversee NOC
RTechPhone:  +1-213-408-0080
RTechEmail:  ipadmin@oversee.net

OrgTechHandle: OVERS-ARIN
OrgTechName:   Oversee NOC
OrgTechPhone:  +1-213-408-0080
OrgTechEmail:  ipadmin@oversee.net

# ARIN WHOIS database, last updated 2006-11-28 19:10

emailadvertisinginc.com points to England, India, America, India, America

Europe
whois 88.111.156.172
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '88.108.0.0 - 88.111.255.255'

inetnum:        88.108.0.0 - 88.111.255.255
netname:        DSL-TISCALI-UK
descr:          Tiscali UK Ltd
descr:          Milton Keynes
descr:          Dynamic DSL
descr:          ==========================================================
descr:          Concerning abuse and spam ... mailto: abuse@uk.tiscali.com
descr:          e-mail to other addresses will not be dealt with.
descr:          ==========================================================
country:        GB
admin-c:        TU935-RIPE
tech-c:         TU935-RIPE
status:         ASSIGNED PA
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered

role:           Tiscali UK
address:        Tiscali UK Limited
address:        20 Broadwick Street
address:        London W1F 8HT
phone:          +44 207 087 2000
remarks:        Information: http://www.tiscali.com
admin-c:        DC-RIPE
admin-c:        DG9105-RIPE
tech-c:         DC-RIPE
nic-hdl:        TU935-RIPE
remarks:        Hostmaster Role Account
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered
abuse-mailbox:  abuse@uk.tiscali.com

% Information related to '88.104.0.0/13AS9105'

route:          88.104.0.0/13
descr:          Tiscali UK Limited
origin:         AS9105
mnt-by:         TU935-RIPE-MNT
source:         RIPE # Filtered
Kkaran Bahree indian it worker bank thief.
whois 202.144.125.229
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.144.0.0 - 202.144.127.255
netname:      SILNET-AP
descr:        SIFY Ltd
descr:        Value Added Network service provider in India.
country:      IN
admin-c:      HS51-AP
tech-c:       HS51-AP
remarks:      ---------------------------------------------------------
remarks:      This object can only be modified by APNIC hostmaster
remarks:      If you wish to modify this object details please
remarks:      send email to hostmaster@apnic.net with your organisation
remarks:      account name in the subject line.
remarks:      ----------------------------------------------------------
mnt-by:       APNIC-HM
mnt-lower:    MAINT-IN-SIFY
mnt-routes:   MAINT-IN-SIFY
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20040429
changed:      hm-changed@apnic.net 20040820
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS24193
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS9796
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

route:        202.144.0.0/17
descr:        Sify Ip address Space
country:      IN
origin:       AS9583
mnt-by:       MAINT-IN-SIFY
changed:      ipadmin@sifycorp.com 20040906
changed:      hm-changed@apnic.net 20060117
source:       APNIC

person:       Hostmaster Satyam Infoway
nic-hdl:      HS51-AP
e-mail:       ipadmin@sifycorp.com
address:      Sify Limited,
address:      Second Floor, Tidel Park,
address:      No.4,Canal Bank Road,
address:      Taramani, Chennai - 600113
phone:        +91-44-22540770
fax-no:       +91-44-22540771
country:      IN
changed:      ipadmin@sifycorp.com 20040818
mnt-by:       MAINT-IN-SIFY
changed:      hm-changed@apnic.net 20060117
source:       APNIC
Big Bush is watching you
whois 216.49.246.8

OrgName:    Craw-Kan Telephone Coop. Inc.
OrgID:      CKT
Address:    200 N Ozark
City:       Girard
StateProv:  KS
PostalCode: 66742
Country:    US

NetRange:   216.49.224.0 - 216.49.255.255
CIDR:       216.49.224.0/19
NetName:    CKTNET-BLK-1
NetHandle:  NET-216-49-224-0-1
Parent:     NET-216-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.CKT.NET
NameServer: NS2.CKT.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2000-06-07
Updated:    2002-07-26

RTechHandle: BS1438-ARIN
RTechName:   Short, Bruce
RTechPhone:  +1-316-724-8235
RTechEmail:  bruce@ckt.net

OrgTechHandle: BEM3-ARIN
OrgTechName:   McClendon, Bryan Eugene
OrgTechPhone:  +1-620-724-9810
OrgTechEmail:  bmcclen@ckt.net

# ARIN WHOIS database, last updated 2006-11-28 19:10
Spammy India
whois 220.226.131.98
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      220.224.0.0 - 220.227.255.255
netname:      RelianceInfocomm
descr:        Reliance Infocom Ltd
country:      IN
admin-c:      BN96-AP
tech-c:       SC1210-AP
tech-c:       CL1307-AP
status:       ALLOCATED PORTABLE
notify:       Antiabuse.support@Relianceinfo.com
mnt-by:       APNIC-HM
mnt-lower:    MAINT-IN-SN
changed:      hm-changed@apnic.net 20040301
changed:      hm-changed@apnic.net 20060208
changed:      hm-changed@apnic.net 20060404
source:       APNIC

route:        220.226.131.0/24
descr:        Reliance Infocom Ltd Internet Data Centre
origin:       AS18101
mnt-by:       MAINT-IN-SN
changed:      ip.nnoc@relianceinfo.com 20050916
source:       APNIC
country:      IN

person:       B Nagaraj
nic-hdl:      BN96-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      2CA 13 , D Block , 2nd Floor,
address:      Dhirubai Ambani Knowledge City,
address:      Thane Belapur Road, KoparKhairne,
address:      Navi Mumbai - 400710 , INDIA.
phone:        +91-22-30383796
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20061107
mnt-by:       MAINT-IN-SN
source:       APNIC

person:       Shankha Chaudhuri
nic-hdl:      SC1210-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      2W14 , DB 17 , D Block , 2nd Floor,
address:      Dhirubai Ambani Knowledge City,
address:      Thane Belapur Road, KoparKhairne,
address:      Navi Mumbai - 400710 , INDIA.
phone:        +91-22-30383936
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20060613
mnt-by:       MAINT-IN-SN
source:       APNIC

person:       Cavin Lobo
nic-hdl:      CL1307-AP
remarks:      Send spam & abuse Reports
remarks:      include detailed information & time
remarks:      to antiabuse.support@relianceada.com
e-mail:       ricip.admin@relianceada.com
address:      Reliance Communication Ventures Ltd,
address:      3W24, Block-D,
address:      DAKC, Kopar khairne,
address:      Navi Mumbai 400 709
phone:        +91-22-30383851
fax-no:       +91-22-30383899
country:      IN
changed:      ricip.admin@relianceada.com 20060613
mnt-by:       MAINT-IN-SN
source:       APNIC
Big Bush is watching you

And Jacksonville America

whois 24.129.93.17
Comcast Cable Communications Holdings, Inc CCCH3-21 (NET-24-129-0-0-1)
                                  24.129.0.0 - 24.129.127.255
Comcast Cable Communications Holdings, Inc. JACKSONVILLE-1 (NET-24-129-0-0-2)
                                  24.129.0.0 - 24.129.127.255

ctandres.com disputed still (dns games mean the plots been slightly lost) broadcastemailcompany.com points here seems dormant

Big Bush is watching you
OrgName:    Oversee.net
OrgID:      OVERS-1
Address:    818 W 7th Street
Address:    Suite 700
City:       Los Angeles
StateProv:  CA
PostalCode: 90017
Country:    US

NetRange:   204.13.160.0 - 204.13.163.255
CIDR:       204.13.160.0/22
NetName:    OVERSEE-NET-01
NetHandle:  NET-204-13-160-0-1
Parent:     NET-204-0-0-0-0
NetType:    Direct Assignment
NameServer: NS1.OVERSEE.NET
NameServer: NS2.OVERSEE.NET
Comment:
RegDate:    2005-04-21
Updated:    2005-04-21

RTechHandle: OVERS-ARIN
RTechName:   Oversee NOC
RTechPhone:  +1-213-408-0080
RTechEmail:  ipadmin@oversee.net

OrgTechHandle: OVERS-ARIN
OrgTechName:   Oversee NOC
OrgTechPhone:  +1-213-408-0080
OrgTechEmail:  ipadmin@oversee.net

Some muppet has linked ebroadcastcorporation.com. to *here 1 day refresh) dpweb.vendaregroup.com 72.5.175.90 which links here http://4internetradios.com/?rid=1446547 odd. broadcastemailcorporation.com hits

the Spam Olympics
whois 221.10.254.97
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

emailadvertisingcorporation.com hits ? bogon ? seems dormant.

whois 69.25.142.8
Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
                                  69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
                                  69.25.142.0 - 69.25.142.63

Ed mails me to say the fan club of ctandres.com / broadcastemailcompany.com / ebroadcastcorporation and emailadvertisingcorporation.com have been taken over by persons/companies with a strange mental illness. Once a domain name has bob website on it its then got a history imho. The dubious nature of these can be discovered quite easily.

I'd also like to remind you all that although i have many Bob domain names listed here - none of them actually hit a Robert Soloway website. OK boys and girls that concludes.

28 November Spamcop reports added, Bobs recent activity indicates to me why Bob seemed 'quiet' earlier on in the month was his preparation and my inability to get to any of his websites yesterday however proves that while such fun and games might possible, my ability (and the dns - name resolution how many of you go to 72.14.207.99) to track his websites becomes pointless since that website advertising bobs spam offering is not there since it's moved then that's a pointless 'game'.

Anyhow over at Opsan (sky) reports of splog spammming too. Fresh batch alledges a 75% price hike in the spam email 'product' (?to pay for fun and games of above?) and the games continued after i called it yesterday (sky says) emailadvertisinginc.com -CHANGED - now on a USA server - SBglobal.net! 210.214.109.145 Full IP list 62.121.124.223, 68.250.195.150, 71.129.206.36, 200.42.234.6,210.214.109.145

broadcastemailinc.com - still down, emailadvertisinginc.com - UP - Domain shows 62.121.124.223,68.250.195.150,71.129.206.36,200.42.234.6,210.214.109.145 and Emailadvertisinginc just changed again. Now 86.8.133.169, a refresh of the whois then shows 213.22.137.7, then 88.111.145.141, then 69.183.41.74, 88.111.145.141, and 69.47.55.16

See yesterdays 'nerdy section' for the dns explanation. Thank you for the extra spamcop reports. Say 'hi' to american spammer hosting.

Big Bush is watching you
www.emailadvertisinginc.com (checking ip) = 69.183.41.74
    host 69.183.41.74 (getting name) no name
    Cached whois for 69.183.41.74 : abuse@sbcglobal.net

admin note: collecting private statistics now.

27 November More spamcop reports added at the right section area. Thanks again.

Ed tells me (note opsan down ?dns bug?) that lots of things are not working. emailadvertisinginc.com - down (no dns), broadcastemailinc.com down (no dns) theemailbroadcastingcompany.com might have changed but im not reporting 58.83.0.247 (china) which Ed does but still the old address (still in china) i listed below. - some outside issue here confirmed by dnsreport = Ed right. Time to unleash the Pandas. optinemailcorp points here too

the Spam Olympics
canonical name  	theemailbroadcastingcompany.com.
aliases         	
addresses       	58.83.0.247

whois 58.83.0.247
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      58.83.0.0 - 58.83.3.255
netname:      yzgzynetwork---cn
descr:        Yongzhou City Guangzhiyuan Technology Development Co., LTD
descr:        Room 201, Hedong Businesstown, Lengshuitan, Yongzhou City, Hunan Province, China.
country:      CN
admin-c:      HW542-AP
tech-c:       HW542-AP
status:       ALLOCATED NON-PORTABLE
mnt-by:       MAINT-CN-GUANGZHIYUAN
mnt-routes:   MAINT-CNCGROUP-RR
changed:      abuse@86ad.com  20060626
remarks:      please send spam reports to abuse@86ad.com
notify:       cs@86ad.com
source:       APNIC

person:       Hanbo Wang
nic-hdl:      HW542-AP
e-mail:       cs@86ad.com
address:      Yongzhou city Guangzhiyuan Technology Co., LTD.
address:      Room 201, Hedong Businesstown, Lengshuitan, Yongzhou City, Hunan Province, China.
phone:        +86-746-8328995
fax-no:       +86-746-8328995
country:      CN
changed:      bluesky_bluesky@163.com 20060804
mnt-by:       MAINT-NEW
source:       APNIC

Its going to get a bit nerdy here (you may wish to skip)

Generated by www.DNSreport.com at 12:37:58 GMT on 27 Nov 2006.
Category	Status	Test Name	Information
INFO	NS records at parent servers	Your NS records at the parent servers are:

ns1.optinemailcorp.com. [221.194.111.55] [TTL=172800] [CN]
ns2.optinemailcorp.com. [58.83.0.247] [TTL=172800] [CN]

Mismatched glue	ERROR: Your nameservers report glue that is different from what the parent servers report. This will cause DNS servers to get confused; some may go to the IP provided by the parent servers, while others may get to the ones provided by your authoritative DNS servers. Problem record(s) are:

ns1.optinemailcorp.com.:
Parent server (g.gtld-servers.net) says A record is 221.194.111.55, but
authoritative DNS server (221.194.111.55) says it is 125.208.6.59
ns2.optinemailcorp.com.:
Parent server (g.gtld-servers.net) says A record is 58.83.0.247, but
authoritative DNS server (221.194.111.55) says it is 60.200.228.41

That means that depending on upon where you be you get different results (examples) from generated here and here (results will change) so take two countries.

Israel: Barak 013 #1         TIMEOUT
Israel: Barak 013 #2         [No cached answer: Would go to NS of com.] 
Israel: Barak 013 #3         A=58.83.0.247 [TTL=19h 37m 33s] 

US: Sprynet #1               [No cached answer: Would go to NS of (root)] 
US: Sprynet #2               [No cached answer: Would go to NS of (root)] 
US: Sprynet #1               A=221.194.111.55 [TTL=2h 2m 13s]

re: dnsreport.com/tools/dnsreport.ch?domain=emailadvertisinginc.com:-

NS records at the parent servers are:

ns1.haufna.biz. [213.138.228.130 (NO GLUE)] [PT]
ns2.haufna.biz. [213.138.228.130 (NO GLUE)] [PT]
ns3.haufna.biz. [212.10.46.189 (NO GLUE)] [DK]
ns4.haufna.biz. [131.114.250.77 (NO GLUE)] [EU]

Seems like Soloway 'fun' with the botnetted ns's as per nanae & nanas refs:- haufna.biz that seems to share similar characteristics to yourherballife.info See Rev Beergoggles post (google) (http://tinyurl.com/ybnbl5)

Well Thats it so far. my dns servers are borked (broken) when tracking this shit. Im assuming emailadvertisinginc.com is up. In discussing Chinas views of things this made me laugh the Chinesse cannot read it since the bbc is considered 'bad' and thus 'censored'. It deals with the Chinese Olympic bid, and when some english politicians (that's Ken and Seb) went for a field trip for some tips. I quote i think is in order.

the Spam Olympics "For about 20 minutes the Chinese side impressed their guests with slick presentations, and a deluge of facts and figures; everything from the number of trees being planted, to the treatment of Olympic sewage. The presentation complete, the group of Chinese officials sat back smiling, confident that the foreigners had been suitably impressed. But Ken and Seb clearly hadn't read the script. A look of panic came over the officials faces. Why were these foreigners asking questions? Hadn't they been listening to the carefully prepared presentation? For a few minutes the officials floundered and waffled, before the meeting was brought to a swift close. For Seb and Ken it was lesson number one in Chinese bureaucrat-dom, official information is there to be consumed, not questioned."

When you replace Olympics with the Word Spam it becomes funny. The moral - don't ask the chinese panda's questions.

26 November The christian god might have taken sunday off, but Robert Soloway does not. So what could best be described as 'hyper' activity optinemailcorp.com (new coming up?), emailadvertisinginc.com (seen before), advertisingemailcorporation.com (seen before), and theemailbroadcastingcompany.com (new). Hey you all know what follows, Pandas have been fed and are ready to go do there stuff - go pandas go!

the Spam OlympicsComing up ?

registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 17-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Sun, 26 Nov 2006 09:40:24 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

  Domain Name.......... optinemailcorp.com
  Creation Date........ 2006-11-17 21:42:59
  Registration Date.... 2006-11-17 21:42:59
  Expiry Date.......... 2007-11-17 21:42:59
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  no dns yet

Remember ?

the Spam Olympics
dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40779
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.206

;; AUTHORITY SECTION:

;; Query time: 3601 msec
;; SERVER: ?#53()
;; WHEN: Sun Nov 26 14:55:53 2006
;; MSG SIZE  rcvd: 281

whois 211.155.132.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

Now advertisingemailcorporation.com

the Spam Olympics
dig advertisingemailcorporation.com

<<>> DiG 9.2.4 <<>> advertisingemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53317
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;advertisingemailcorporation.com. IN    A

;; ANSWER SECTION:
advertisingemailcorporation.com. 3600 IN A      211.155.132.206
;; Query time: 2612 msec
;; SERVER: #53()
;; WHEN: Sun Nov 26 15:02:52 2006
;; MSG SIZE  rcvd: 289

whois 211.155.132.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

Finally (ive got exhuasted spamming pandas here. Least theres plenty of spam in Beijung again So lets meet theemailbroadcastingcompany.com appears new

the Spam Olympics
whois theemailbroadcastingcompany.com

Whois Server Version 2.0
   Domain Name: THEEMAILBROADCASTINGCOMPANY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.OPTINEMAILCORP.COM
   Name Server: NS1.OPTINEMAILCORP.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 24-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Sun, 26 Nov 2006 10:11:24 EST <<<

Domain Name.......... theemailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:48
  Registration Date.... 2006-11-17 21:42:48
  Expiry Date.......... 2007-11-17 21:42:48
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns2.optinemailcorp.com
  Name Server.......... ns1.optinemailcorp.com
  
  dig theemailbroadcastingcompany.com

; <<>> DiG 9.2.4 <<>> theemailbroadcastingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56265
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailbroadcastingcompany.com. IN    A

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 86076 IN A     221.194.111.55
;; Query time: 3 msec
;; SERVER: #53()
;; WHEN: Sun Nov 26 15:13:29 2006
;; MSG SIZE  rcvd: 289

whois 221.194.111.55
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN

whoopie China - full house !!!

Send bamboo leaves and spam now. Thanks for your cc on spamcop reports too added to right section. Credit to the usual gang at Opsan. Anybody here do exorcism's?

24 November admin note: I am trying a different approach to the spamcop reports. comments, views ?. Ok Chinese Pandas at the ready so lets all go remember newportcorp.cn (credit ed)

the Spam Olympics
Lets say China hosting shall we ?

无法找到网页
您正在搜索的网页可能已经删除、更名或暂时不可用。

请尝试下列操作:

    * 如果您在“地址”栏中键入了网页地址,请检查其拼写是否正确。
    * 打开 www.newportcorp.cn 主页,寻找指向所需信息的链接。
    * 单击后退按钮尝试其他链接。

HTTP 404 - 无法找到文件
Internet 信息服务

技术信息(支持个人)

    * 详细信息:
      Microsoft 支持
            
      Dns says fun and games: www.newportcorp.cn. CNAME linuxroot2006.kmip.net. [TTL=10800]
      
      dig linuxroot2006.kmip.net

; <<>> DiG 9.2.4 <<>> linuxroot2006.kmip.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9876
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0

;; QUESTION SECTION:
;linuxroot2006.kmip.net.                IN      A

;; ANSWER SECTION:
linuxroot2006.kmip.net. 60      IN      A       222.182.118.206

;; WHEN: Fri Nov 24 15:24:47 2006
the Spam Olympics
which is woohooo !!!

whois 222.182.118.206
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      222.176.0.0 - 222.183.255.255
netname:      CHINANET-CQ
descr:        CHINANET Chongqing  province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       CQ235-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CHINANET-CQ
mnt-routes:   MAINT-CHINANET-CQ
changed:      hm-changed@apnic.net 20040203
remarks:      This object can only be changed by APNIC Hostmaster
status:       ALLOCATED PORTABLE
source:       APNIC

role:         CHINANET CQ
address:      The mainstreet 3 daping ,chongqing data communication bureau
country:      CN
phone:        +862368614888
fax-no:       +862368602314
e-mail:       abuse@cta.cq.cn
trouble:      send spam reports to abuse@cta.cq.cn
trouble:      and abuse reports to abuse@cta.cq.cn
admin-c:      ZL235-AP
tech-c:       ZL235-AP
nic-hdl:      CQ235-AP
remarks:      http://www.cta.cq.cn
notify:       abuse@cta.cq.cn
mnt-by:       MAINT-CHINANET-CQ
changed:      abuse@cta.cq.cn 20030917
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      lqing@chinatelecom.com.cn 20051212
mnt-by:       MAINT-CHINANET
source:       APNIC

the 'I hate spam not' department in Chinanet told you those antispam conferences are great didn't I. Ed also reports advertisingemailcorporation.com and emailadvertisinginc.com have lost there dns.

23 November There i was thinking its wednesday and nothing happens and then it does. Ed (welcome back) reports to Opsan that one old one up, three down, and then also the first one down. and then ... (rather large entry today) so Details below start with the old domain just up and seen before here.

the Spam Olympics
whois newportcorp.cn
Domain Name: newportcorp.cn
ROID: 20060330s10001s47212991-cn
Domain Status: ok
Registrant Organization: 第二域名
Registrant Name: 胡兵
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 北京万网志成科技有限公司
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-03-30 11:21
Expiration Date: 2007-03-30 11:21

no dns we assume chinese hosting either at Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd and CNCGROUP Hebei province network shutdown time one day it seems. Hosts of: broadcastemailingagency.com, permissionemailcorporation.com and emailadvertisenow.com appear down. Those of you seeking get rich quick (without working) should take a look at Odono and Transfergate Thats not exactly an area of expertise for me (seek ace) but there's an 'inferred' link that Mr Soloway might have something to do with those two schemes of dubiousness. Go make up your own mind as to Robert association with the two schemes. Americans are reminded that you can ring his toll free phone number on on 1-888-340-9733 and then apparently press 10

Right back to what i do best - that leaves emailadvertisinginc.com up guess where to ? Go Chinese olympic pandas!

the Spam Olympics
inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
Zombies

Spam still available in Beijing, god bless chairman mao. Ed also spots advertisingemailcorporation.com , note new masthead for website. Love the zombies Bob (that pose is just ..). Technical garbage follows.

November 2006 website dump

the Spam Olympics
whois advertisingemailcorporation.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: ADVERTISINGEMAILCORPORATION.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS3.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS2.ADVERTISINGEMAILCORPORATION.COM
   Name Server: NS1.ADVERTISINGEMAILCORPORATION.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 22-Nov-2006
   Creation Date: 17-Nov-2006
   Expiration Date: 17-Nov-2007

>>> Last update of whois database: Thu, 23 Nov 2006 09:49:44 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... advertisingemailcorporation.com
  Creation Date........ 2006-11-17 21:43:14
  Registration Date.... 2006-11-17 21:43:14
  Expiry Date.......... 2007-11-17 21:43:14
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232
  
Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou
  Bill Address......... 321000
  Bill Address......... GD
  Bill Address......... CN
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.advertisingemailcorporation.com
  Name Server.......... ns3.advertisingemailcorporation.com
  Name Server.......... ns2.advertisingemailcorporation.com
  Name Server.......... ns1.advertisingemailcorporation.com

; <<>> DiG 9.2.4 <<>> advertisingemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12000
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 2

;; QUESTION SECTION:
;advertisingemailcorporation.com. IN    A

;; ANSWER SECTION:
advertisingemailcorporation.com. 3600 IN A      211.155.132.229

;; AUTHORITY SECTION:
com.                    159831  IN      NS      L.GTLD-SERVERS.NET.
com.                    159831  IN      NS      M.GTLD-SERVERS.NET.
com.                    159831  IN      NS      A.GTLD-SERVERS.NET.
com.                    159831  IN      NS      B.GTLD-SERVERS.NET.
com.                    159831  IN      NS      C.GTLD-SERVERS.NET.
com.                    159831  IN      NS      D.GTLD-SERVERS.NET.
com.                    159831  IN      NS      E.GTLD-SERVERS.NET.
com.                    159831  IN      NS      F.GTLD-SERVERS.NET.
com.                    159831  IN      NS      G.GTLD-SERVERS.NET.
com.                    159831  IN      NS      H.GTLD-SERVERS.NET.
com.                    159831  IN      NS      I.GTLD-SERVERS.NET.
com.                    159831  IN      NS      J.GTLD-SERVERS.NET.
com.                    159831  IN      NS      K.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
E.GTLD-SERVERS.NET.     159831  IN      A       192.12.94.30
M.GTLD-SERVERS.NET.     159830  IN      A       192.55.83.30

;; Query time: 583 msec
;; SERVER: #53()
;; WHEN: Thu Nov 23 14:50:11 2006
;; MSG SIZE  rcvd: 321

whois 211.155.132.229
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

rumour time dynamicpipe.com (canada?) is dead hoster ? according spamcop notes ? Thanks for spamcop reports.

22 November 2006: one new spamcop report added Bob slightly changes "his" message

email advertise like "this" to 8,000,000 people... 

Could "this" (in the context of an unwanted email) be deemed as unwanted and untargeted spam?. Send your "answers" to the usual place.

Some humour now: q: whats the best meeting to go to ? a: the China Anti Spam summit of 2006, why that meeting should take all of a minute, imagine

chair: welcome
Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd: we hate spammers
CNCGROUP Hebei province network: so do we
everybody else: ok
chair: that concludes our business, now who wants to see some tourist sights now.

20 November 2006: Monday - boring ? not here - Two domains up, one emailadvertisenow.com is new and broadcastemailingagency.com makes an reappearance. Two new spamcop reports

Spamcop comments say Italy dumped Bob, which one is not clear. [Note added by 80.204.90.91 (host91-90-static.204-80-b.business.telecomitalia.it)] Time to get the Chinese Panda out ?. 1,2,3 Pandas ready and standard technical garbage follows.

the Spam Olympics


   Domain Name: EMAILADVERTISENOW.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 15-Sep-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Mon, 20 Nov 2006 12:10:15 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... emailadvertisenow.com
  Creation Date........ 2006-09-12 22:42:37
  Registration Date.... 2006-09-12 22:42:37
  Expiry Date.......... 2007-09-12 22:42:37
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  where ?
  
  dig emailadvertisenow.com

; <<>> DiG 9.2.4 <<>> emailadvertisenow.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39507
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;emailadvertisenow.com.         IN      A

;; ANSWER SECTION:
emailadvertisenow.com.  3600    IN      A       218.11.17.231

;; Query time: 401 msec
;; SERVER: ?#53(?)
;; WHEN: Mon Nov 20 17:13:02 2006

That be ....

whois 218.11.17.231
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      218.11.0.0 - 218.12.255.255
netname:      CNCGROUP-HE
country:      CN
descr:        CNCGROUP Hebei province network
admin-c:      CH455-AP
tech-c:       JL2284-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      abuse@cnc-noc.net 20031217
changed:      hm-changed@apnic.net 20040105
changed:      hm-changed@apnic.net 20040105
changed:      hm-changed@apnic.net 20040927
changed:      hm-changed@apnic.net 20050511
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        218.11.0.0/16
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

China.                    
  

the Spam OlympicsLest we not forget

whois broadcastemailingagency.com

   Domain Name: BROADCASTEMAILINGAGENCY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS3.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS2.PERMISSIONEMAILCORPORATION.COM
   Name Server: NS1.PERMISSIONEMAILCORPORATION.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 18-Nov-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Mon, 20 Nov 2006 12:17:41 EST <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

Domain Name.......... broadcastemailingagency.com
  Creation Date........ 2006-09-12 22:42:22
  Registration Date.... 2006-09-12 22:42:22
  Expiry Date.......... 2007-09-12 22:42:22
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.permissionemailcorporation.com
  Name Server.......... ns3.permissionemailcorporation.com
  Name Server.......... ns2.permissionemailcorporation.com
  Name Server.......... ns1.permissionemailcorporation.com
  
  hmm that's 
  
   dig broadcastemailingagency.com

; <<>> DiG 9.2.4 <<>> broadcastemailingagency.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35937
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;broadcastemailingagency.com.   IN      A

;; ANSWER SECTION:
broadcastemailingagency.com. 3600 IN    A       211.155.132.226

;; Query time: 388 msec
;; WHEN: Mon Nov 20 17:19:37 2006
;; MSG SIZE  rcvd: 333


Whoopie !!! 


whois  211.155.132.226

% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Spam free China!!!

19 November 2006: Thank you for spamcop reports!, as predicted permissionemailcorporation.com and emailadvertisinginc.com are up seen by our friend freshbatch and sky confirms surprisingly both being hosted in China in beautiful downtown 'spam free' Beijing.

Being bored one sunday I found this from http://ww2.howmanyofme.com/search/ (click on logo to search)

* There are 630 people in the U.S. with the last name Soloway.
* Statistically the 41520th most popular last name. (tied with 3253 other last names)

(poor sods) and

HowManyOfMe.com
LogoThere are: 10 people with the name Robert Soloway in the U.S.A.

the Spam OlympicsStandard technical garbage follows (china).

dig permissionemailcorporation.com

; <<>> DiG 9.2.4 <<>> permissionemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10376
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 1

;; QUESTION SECTION:
;permissionemailcorporation.com.        IN      A

;; ANSWER SECTION:
permissionemailcorporation.com. 3600 IN A       211.155.132.226

;; AUTHORITY SECTION:

;; Query time: 713 msec
;; SERVER: #53()
;; WHEN: Sun Nov 19 12:31:11 2006
;; MSG SIZE  rcvd: 304

dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50290
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 1

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.226
...

China naturally been here before

whois 211.155.132.226
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

the Spam OlympicsWikipedia might be evil in China, but thank goodness Spam is communist and thus good. Enjoy. Page size updated. This will be my icon for China now on. Who said the olympics (which china will host) was for drug taking athletes only ?. The Panda is perfect. Thanks China!

18 November 2006: OK Boys and Girls - friend informs me that Soloway is spamming with dead domain in so is emailadvertisinginc.com going up again?. He was using a res.rr.com address (american dsl) to send his spam.

Now what does Yahoo answers think of Soloway http://answers.yahoo.com/question/index?qid=20061008121843AAxLeXU and Sky also writes to tell that permissionemailcorporation.com american host is down.

outside Blue folder - American paper size.17 November 2006: News about the broadcast spam package. I reloaded the disk into a a cd-rw drive (rather than a normal cd-r) the burner application is identified as 'CDPROLIB' which bashing that into google seems to indicate its part of a Nero package using microsoft windows.

I also seem to have a better copy of the data by using a cd-rw drive than cd-r don't ask me why. Generally i'd assume that is end user incompetence but i don't use nero to burn cd's. So make your own views on the subject or Americans might like to ring his free to toll free number (thanks to sky) on 1-888-340-9733 and then press 10 and ask him why.

Sky reports permissionemailcorporation.com, and emailadvertisnginc.com down

Domain Name.......... permissionemailcorporation.com
  Creation Date........ 2006-09-12 22:42:30
  Registration Date.... 2006-09-12 22:42:30
  Expiry Date.......... 2007-09-12 22:42:30
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  dig permissionemailcorporation.com

; <<>> DiG 9.2.4 <<>> permissionemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38051
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 3

;; QUESTION SECTION:
;permissionemailcorporation.com.        IN      A

;; ANSWER SECTION:
permissionemailcorporation.com. 3252 IN A       205.209.141.50

;; AUTHORITY SECTION:
com.                    30752   IN      NS      G.GTLD-SERVERS.NET.
com.                    30752   IN      NS      H.GTLD-SERVERS.NET.
com.                    30752   IN      NS      I.GTLD-SERVERS.NET.
com.                    30752   IN      NS      J.GTLD-SERVERS.NET.
com.                    30752   IN      NS      K.GTLD-SERVERS.NET.
com.                    30752   IN      NS      L.GTLD-SERVERS.NET.
com.                    30752   IN      NS      M.GTLD-SERVERS.NET.
com.                    30752   IN      NS      A.GTLD-SERVERS.NET.
com.                    30752   IN      NS      B.GTLD-SERVERS.NET.
com.                    30752   IN      NS      C.GTLD-SERVERS.NET.
com.                    30752   IN      NS      D.GTLD-SERVERS.NET.
com.                    30752   IN      NS      E.GTLD-SERVERS.NET.
com.                    30752   IN      NS      F.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
E.GTLD-SERVERS.NET.     30752   IN      A       192.12.94.30
K.GTLD-SERVERS.NET.     30752   IN      A       192.52.178.30
M.GTLD-SERVERS.NET.     30752   IN      A       192.55.83.30

;; Query time: 123 msec
;; SERVER: ??#53(??)
;; WHEN: Fri Nov 17 12:37:42 2006
;; MSG SIZE  rcvd: 336

whois 205.209.141.50

OrgName:    Managed Solutions Group, Inc.
OrgID:      MSG-48
Address:    46750 Fremont Blvd.
Address:    #107
City:       Fremont
StateProv:  CA
PostalCode: 94538
Country:    US

ReferralServer: rwhois://rwhois.managedsg-inc.com:4321

NetRange:   205.209.128.0 - 205.209.191.255
CIDR:       205.209.128.0/18
NetName:    NET-MANAGED
NetHandle:  NET-205-209-128-0-1
Parent:     NET-205-0-0-0-0
NetType:    Direct Allocation
NameServer: RDNS1.MANAGEDSG-INC.COM
NameServer: RDNS2.MANAGEDSG-INC.COM
Comment:
RegDate:    2004-04-15
Updated:    2006-03-17

RAbuseHandle: ABUSE429-ARIN
RAbuseName:   MSG Inc Abuse
RAbusePhone:  +1-888-585-8889
RAbuseEmail:  abuse@managedsg-inc.com

RTechHandle: MAT48-ARIN
RTechName:   MSG Arin Tech
RTechPhone:  +1-888-585-8889
RTechEmail:  tech@managedsg-inc.com

OrgAbuseHandle: ABUSE429-ARIN
OrgAbuseName:   MSG Inc Abuse
OrgAbusePhone:  +1-888-585-8889
OrgAbuseEmail:  abuse@managedsg-inc.com

OrgTechHandle: MAT48-ARIN
OrgTechName:   MSG Arin Tech
OrgTechPhone:  +1-888-585-8889
OrgTechEmail:  tech@managedsg-inc.com

# ARIN WHOIS database, last updated 2006-11-16 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


Found a referral to rwhois.managedsg-inc.com:4321.

%rwhois V-1.5:003eff:00 rwhoisd (by Network Solutions, Inc. V-1.5.9.5)
network:Auth-Area:205.209.128.0/18
network:Class-Name:network
network:Network-Name:NET-MSG
network:IP-Network:205.209.141.50/30
network:IP-Network-Block:205.209.141.50-53
network:Organization-Name:SN.com
network:Organization-City:Brighton
network:Organization-State:East Sussex
network:Organization-Zip:19
network:Organization-Country:UK
network:Description-Usage:customer
network:Created:20061115
network:Updated:20061115
network:Updated-By:abuse@managedsg-inc.com

%ok

Wow hosting in america - Bob Soloway found some fucked up americans. broadcastemailingagency.com non resolving.

Mistyping 'broadcastmailingagency.com' comes up with this with adverts for drivercleaner.com (spambot loader ?) and other advertsing crap
Maltuzi Holdings approves of spam

Domain Name:                 broadcastmailingagency.com
Registrant
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Admin Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Billing Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Tech Contact
------------------------------------------------------------
Name:                        Admin -
Organization:                Maltuzi Holdings
Email:                       admin@maltuzi.com
Address:                     800 West El Camino Real Suite 180
City, Province, Post Code:   Mountain View, CA, 94040
Country:                     US
Phone:                       650-814-6730

Creation Date:               10/13/06
Expiration Date:             10/13/07
Domain Status:               ACTIVE


Domain Servers

  ns2.maltuzi.com
  ns22.maltuzi.com

Registration Provided By:    NAME KING INC.
Contact:                     info@nameking.com
Abuse Desk Email Address:    abuse@nameking.com

Request 1/20
Hosted in America

More dumb american people.

15 November 2006: Domain owner friend fishes spam out of the spam box and sends it on here. Mr Soloway is spamming from Germany on this occurrence, and spoofing a return email address that the domain being spammed does not have 'feedback@ tld'. how Robert can you get.

14 November 2006: Thank you for the spam cop report.

8 November 2006: Added spamcop report (thank you !) more wanted please and '+' '-' page font changing feature. Apologies but it is rather boring at present here.

25 October 2006: Thank you for the spamcop reports added to this page Spamming via Egypt,Spain, and America our Mr Soloway gets around don't he.

Sky archived this too Soloway 'get lost' legal response that's enough of that I think.

23 October 2006: Lets discuss 'karma' or what goes around comes around Robert Soloway style.

Report wrong doing to the Washington State Attorney Generals office: http://www.atg.wa.gov/ Bananas says hello to the incumbent Rob McKenna, who was elected in 2004 to a four-year term. He seems to 'like' Mr Soloway.

18 October 2006: Meet and email Bob's spammy state representatives of washington state (credit Sky) chopp.frank@leg.wa.gov murray.edward@leg.wa.gov thibaudeau.pat@leg.wa.gov I think they deserve some spam don't you ?, some of you might wish to unsubscribe them from Bobs spam business 'confirm you want spam' webpage. That's fair isn't it ?

where are we today meet spot16 October: Jake at Opsan spots this thebroadcastemailcorp@mailshack.com email address after opting out. Might as well give it a mention here.

Bob appears to be Viagra'ing, probably explains the lack of activity in this part of his 'opt-in' one man broadcastemail empire. Since i don't cover that area of Soloway.

minserf.com dead,emailadvertisinginc.com up

12 October: Sky reports broadcastemailingagency.com

Domain Name: BROADCASTEMAILINGAGENCY.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS3.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS2.BROADCASTEMAILINGAGENCY.COM
   Name Server: NS1.BROADCASTEMAILINGAGENCY.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 10-Oct-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Thu, 12 Oct 2006 10:58:24 EDT <<<

Domain Name.......... broadcastemailingagency.com
  Creation Date........ 2006-09-12 22:42:22
  Registration Date.... 2006-09-12 22:42:22
  Expiry Date.......... 2007-09-12 22:42:22
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.broadcastemailingagency.com
  Name Server.......... ns3.broadcastemailingagency.com
  Name Server.......... ns2.broadcastemailingagency.com
  Name Server.......... ns1.broadcastemailingagency.com
  
  ; <<<>> DiG 9.2.4 ;<<>> broadcastemailingagency.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER;<<- opcode: QUERY, status: NOERROR, id: 24365
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailingagency.com.   IN      A

;; ANSWER SECTION:
broadcastemailingagency.com. 3600 IN    A       211.155.132.6

;; AUTHORITY SECTION:
broadcastemailingagency.com. 2837 IN    NS      ns4.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns1.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns2.broadcastemailingagency.com.
broadcastemailingagency.com. 2837 IN    NS      ns3.broadcastemailingagency.com.

;; Query time: 617 msec
;; SERVER: 
;; WHEN: Thu Oct 12 16:00:08 2006
;; MSG SIZE  rcvd: 133

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

China fancy that and broadcastadvertisenow.com

   Domain Name: BROADCASTADVERTISENOW.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS2.DNS.COM.CN
   Name Server: NS1.DNS.COM.CN
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 15-Sep-2006
   Creation Date: 12-Sep-2006
   Expiration Date: 12-Sep-2007

>>> Last update of whois database: Thu, 12 Oct 2006 11:02:48 EDT <<<

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... broadcastadvertisenow.com
  Creation Date........ 2006-09-12 22:42:41
  Registration Date.... 2006-09-12 22:42:41
  Expiry Date.......... 2007-09-12 22:42:41
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn
  
  ; <<>> DiG 9.2.4 <<>> broadcastadvertisenow.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1152
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastadvertisenow.com.     IN      A

;; AUTHORITY SECTION:
broadcastadvertisenow.com. 3594 IN      SOA     ns2.dns.com.cn. root.ns2.dns.com.cn. 2006091222 3600 3600 68400 180

;; Query time: 2 msec
;; SERVER: ?#53(?)
;; WHEN: Thu Oct 12 16:05:39 2006
;; MSG SIZE  rcvd: 98

no home - lets assume it was China

10 October: did dot did dip... news update emailadvertisinginc.com and colidsilver.com have no dns. It appears that nobody is home in Bob Soloway land. Take a look at this (bbc).

1 October:ctandres.com in limbo colidliver.com, colidsilver.com no dns

This domain has been disputed!  This domain name was registered through DomainsNow4U.com

ctandres.com

No dns for.

dig colidsilver.com

; <<>> DiG 9.2.4 <<>> colidsilver.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;colidsilver.com.               IN      A

;; AUTHORITY SECTION:
com.                    900     IN      SOA     a.gtld-servers.net. nstld.verisign-grs.com. 1159700350 1800 900 604800 900

;; Query time: 66 msec
;; SERVER: 
;; WHEN: Sun Oct  1 11:59:40 2006
;; MSG SIZE  rcvd: 106

minserf.com is screwed too

24 September:Contact informs us of minserf.com Bob is now a 'she'. Bananas says hello to 'Amanda Limert'

whois minserf.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: MINSERF.COM
   Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
   Whois Server: whois.aitdomains.com
   Referral URL: http://www.aitdomains.com
   Name Server: NS2.ALCASERFOBESTDNS.COM
   Name Server: NS1.MANTAREDEGOL.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 14-Sep-2006
   Creation Date: 14-Sep-2006
   Expiration Date: 14-Sep-2007

>>> Last update of whois database: Sun, 24 Sep 2006 07:56:32 EDT 

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

The Data in THE NAMEIT CORPORATION WHOIS database is provided by
THE NAMEIT CORPORATION for information purposes, and to assist persons
in obtaining information about or related to a domain name registration record.
 THE NAMEIT CORPORATION does not guarantee its accuracy.  By submitting a
WHOIS query, you agree that you will use this Data only for lawful purposes
and that, under no circumstances will you use this Data to: (1) allow, enable,
or otherwise support the transmission of mass unsolicited, commercial advertising
or solicitations via e-mail (spam); or  (2) enable high volume, automated,
electronic processes that apply to THE NAMEIT
CORPORATION (or its systems).

THE NAMEIT CORPORATION reserves the right to modify these terms at any time.
 By submitting this query, you agree to abide by this policy.

Domain Name:    minserf.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET


Registrant Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Administrative Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Technical Contact

Name:           Amanda    Limert
Address:        22983 Coledo Ave
                Alexandria, MN  55498
                US
Email Address:  cosserdo@hotlero.biz
Phone Number:   (639)721-0927


Record Created on........ 2006-09-14 18:07:51.162
Expire on................ 2007-09-14 18:16:05.000

  Domain servers in listed order:

        ns2.alcaserfobestdns.com
        ns1.mantaredegol.com

dig minserf.com

; <<>> DiG 9.2.4 << minserf.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER <<- opcode: QUERY, status: NOERROR, id: 2463
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;minserf.com.                   IN      A

;; ANSWER SECTION:
minserf.com.            300     IN      A       210.83.200.219

;; AUTHORITY SECTION:
minserf.com.            300     IN      NS      ns2.minserf.com.
minserf.com.            300     IN      NS      ns1.minserf.com.

;; ADDITIONAL SECTION:
ns1.minserf.com.        300     IN      A       210.83.200.219
ns2.minserf.com.        300     IN      A       210.83.200.219

;; Query time: 300 msec
;; SERVER: 
;; WHEN: Sun Sep 24 12:50:51 2006
;; MSG SIZE  rcvd: 113	
	

23 September:Slow but china seems to have stopped service.

dig emailadvertisinginc.com

; << DiG 9.2.4 << emailadvertisinginc.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

alas seems up again

dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21940
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 1716   IN      A       211.155.132.6

;; AUTHORITY SECTION:
emailadvertisinginc.com. 108317 IN      NS      ns4.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns1.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns2.emailadvertisinginc.com.
emailadvertisinginc.com. 108317 IN      NS      ns3.emailadvertisinginc.com.

;; Query time: 3 msec
;; SERVER: 
;; WHEN: Sat Sep 23 17:22:02 2006
;; MSG SIZE  rcvd: 129

Hey ho meet colidsilver.com meet 'Collis Williams' Hosting using Chinese open webmail (reported before)

whois colidsilver.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: COLIDSILVER.COM
   Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
   Whois Server: whois.melbourneit.com
   Referral URL: http://www.melbourneit.com
   Name Server: NS2.DALISBANER.COM.DOMAIN-NOT-RENEWED.COM
   Name Server: NS1.MACHDEDIK.COM.DOMAIN-NOT-RENEWED.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 19-Sep-2006
   Creation Date: 19-Sep-2006
   Expiration Date: 19-Sep-2007

<<< Last update of whois database: Sat, 23 Sep 2006 12:34:24 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... colidsilver.com
  Creation Date........ 2006-09-19
  Registration Date.... 2006-09-19
  Expiry Date.......... 2007-09-19
  Organisation Name.... Collis Williams

Details removed at request (November 2006) send email request for full disclosure.

Name Server.......... ns1.machdedik.com
  Name erver.......... ns2.dalisbaner.com
  
  dig colidsilver.com

; <<>> DiG 9.2.4 <<>> colidsilver.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45988
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;colidsilver.com.               IN      A

;; ANSWER SECTION:
colidsilver.com.        7       IN      A       210.83.200.219

;; AUTHORITY SECTION:
colidsilver.com.        7       IN      NS      ns1.colidsilver.com.
colidsilver.com.        7       IN      NS      ns2.colidsilver.com.

;; ADDITIONAL SECTION:
ns1.colidsilver.com.    7       IN      A       210.83.200.219
ns2.colidsilver.com.    7       IN      A       210.83.200.219

;; Query time: 2 msec
;; SERVER: 
;; WHEN: Sat Sep 23 17:37:33 2006
;; MSG SIZE  rcvd: 117

whois 210.83.200.219
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

china, yahoo, and Bob Soloway - now that's an evil conbination.

18 September: Talk to Bobs mother. Robert Soloways Mother according to some basic maths Rachel D Soloway (other spelling Rachelle) was 32 when she had brought our spamming satan into the planet - her age is apparently now 59 (2006).

Mother 59 (year 2006) Rachelle D Soloway

I did not purchase the report but those in the know might wish to take it further.

16 September: New domain 'there she blows' moby dick style seen over in Opsan. - Its our chinese friend again 'liu feu'

whois emailadvertisinginc.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: EMAILADVERTISINGINC.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS4.EMAILADVERTISINGINC.COM
   Name Server: NS3.EMAILADVERTISINGINC.COM
   Name Server: NS2.EMAILADVERTISINGINC.COM
   Name Server: NS1.EMAILADVERTISINGINC.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 12-Sep-2006
   Creation Date: 27-Aug-2006
   Expiration Date: 27-Aug-2007

>>> Last update of whois database: Fri, 15 Sep 2006 10:03:27 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... emailadvertisinginc.com
  Creation Date........ 2006-08-28 03:03:31
  Registration Date.... 2006-08-28 03:03:31
  Expiry Date.......... 2007-08-28 03:03:31
  Organisation Name.... liu fei
  Organisation Address. xia meng
  Organisation Address.
  Organisation Address. xia meng
  Organisation Address. 321000
  Organisation Address. FJ
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ xia meng
  Admin Address........
  Admin Address........ xia meng
  Admin Address........ 321000
  Admin Address........ FJ
  Admin Address........ CN
  Admin Email.......... pop@broadcastemailinc.com
  Admin Phone.......... +86.5922577833
  Admin Fax............ +86.5922577833

Tech Name............ liu fei
  Tech Address......... xia meng
  Tech Address.........
  Tech Address......... xia meng
  Tech Address......... 321000
  Tech Address......... FJ
  Tech Address......... CN
  Tech Email........... pop@broadcastemailinc.com
  Tech Phone........... +86.5922577833
  Tech Fax............. +86.5922577833

Bill Name............ liu fei
  Bill Address......... xia meng
  Bill Address.........
  Bill Address......... xia meng
  Bill Address......... 321000
  Bill Address......... FJ
  Bill Address......... CN
  Bill Email........... pop@broadcastemailinc.com
  Bill Phone........... +86.5922577833
  Bill Fax............. +86.5922577833
  Name Server.......... ns2.emailadvertisinginc.com
  Name Server.......... ns1.emailadvertisinginc.com
  Name Server.......... ns3.emailadvertisinginc.com
  Name Server.......... ns4.emailadvertisinginc.com
sjwest@mail2:~> dig emailadvertisinginc.com

; <<>> DiG 9.2.4 <<>> emailadvertisinginc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29702
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailadvertisinginc.com.       IN      A

;; ANSWER SECTION:
emailadvertisinginc.com. 3600   IN      A       211.155.132.6

;; AUTHORITY SECTION:
emailadvertisinginc.com. 35491  IN      NS      ns2.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns3.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns4.emailadvertisinginc.com.
emailadvertisinginc.com. 35491  IN      NS      ns1.emailadvertisinginc.com.

;; ADDITIONAL SECTION:
ns1.emailadvertisinginc.com. 40371 IN   A       218.57.8.93
ns2.emailadvertisinginc.com. 3316 IN    A       211.155.132.6
ns3.emailadvertisinginc.com. 40371 IN   A       222.76.212.175
ns4.emailadvertisinginc.com. 771 IN     A       211.155.132.6

;; Query time: 371 msec
;; SERVER: 
;; WHEN: Sat Sep 16 00:25:58 2006
;; MSG SIZE  rcvd: 193

whois 211.155.132.6
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

admin: Trying new guestbook contact feature - other one seems kaputt so lets try, [Sign My Guestbook] [View My Guestbook]

14 September: 'Because your worth it' In honour of certain make up brand. Sky over at Opsan also ran an experiment and spent some money obtaining a new domain name (something i've yet to do), and yes even Sky too got a Bob Soloway spam too.

Here is a guess, this page got started Bob Soloway was #1 to spam our 'fresh' domain email account. Then being 'intentionally stupid' (experiment page of mine via wayback machine) I unopted (do remember it was a test). Then extra spams to admin,billing and whatever@ started rolling in, and today well there still coming in.

Where does bob get these addresses from.

D\'Arcy Lore
   D\'Arcy Lore
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

D'Arcy Lore, some kind of author (google it), The address 16175 Andrews Ct, can be found in a PCT gazette, can you do better ?. Domain finally dies

dig broadcastemailinc.com

; <<>> DiG 9.2.4 <<>> broadcastemailinc.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

where are we today meet spot12 September: section appended 'about Bob'. broadcastemailinc.com Moves from China to China (has hosting renewed or something) and new domain observed by others (thanks!) listed below

whois ctandres.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: CTANDRES.COM
   Registrar: INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM
   Whois Server: whois.itsyourdomain.com
   Referral URL: http://www.itsyourdomain.com
   Name Server: NS2.AMESMCALLISTERDNS.COM
   Name Server: NS1.ELDINAPATRISIADNS.COM
   Status: REGISTRAR-LOCK
   EPP Status: clientTransferProhibited
   Updated Date: 10-Sep-2006
   Creation Date: 10-Sep-2006
   Expiration Date: 10-Sep-2007

>>> Last update of whois database: Tue, 12 Sep 2006 06:19:30 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
The Data in our WHOIS database is provided by us for information purposes,
and to assist persons in obtaining information about or related to a domain
name registration record.  We do not guarantee its accuracy.  By
submitting a WHOIS query, you agree that you will use this Data only for
lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via e-mail (spam); or  (2) enable
high volume, automated, electronic processes that apply to us, our
systems, or our customers.  We reserve the right to modify these terms at
any time.  By submitting this query, you agree to abide by this policy.


 Domain: ctandres.com

 Registrant
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Administrative
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Billing
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Technical
   D\'Arcy Lore
   D\'Arcy Lore
   vacitalom@open.com
   16175 Andrews Ct
   Monte Sereno, CA 95030 US
   +1.4085465478

 Record created on September 10, 2006
 Record last updated on September 10, 2006
 Record expires on September 10, 2007

 Domain Name Servers:
   NS1.ELDINAPATRISIADNS.COM
   NS2.AMESMCALLISTERDNS.COM

dig ctandres.com

; <<>> DiG 9.2.4 <<>> ctandres.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39744
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;ctandres.com.                  IN      A

;; ANSWER SECTION:
ctandres.com.           300     IN      A       210.83.200.219

;; AUTHORITY SECTION:
ctandres.com.           300     IN      NS      ns2.ctandres.com.
ctandres.com.           300     IN      NS      ns1.ctandres.com.

;; ADDITIONAL SECTION:
ns1.ctandres.com.       300     IN      A       210.83.200.219
ns2.ctandres.com.       300     IN      A       210.83.200.219

;; Query time: 283 msec
;; SERVER: 
;; WHEN: Tue Sep 12 11:20:18 2006
;; MSG SIZE  rcvd: 114

Where/Wohin ? ist Carman today ?

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

Golly gosh - we seem to have been here before. Wheres Spot gone why China silly!

admin note: archive links fixed, and 'package' pictures (my photo's) inserted into this file in various places.

Open link to find out more!7 September: Fresh spam in above table. an inside look of the broadcastspam package.

Well (read url first) the identification of Vassil, and the list design is an revelation, the new mailer and the quality of the lists left much to be desired.

A lot we don't know still about the specific Bob use of the lists. Anyhow its nice demolish the claim that billing@domain signed up for spam. Please read the link, and make up your own mind.

4 September: Meet broadcastemailinc.com, multiple personalities of liu fei/xia meng.

whois broadcastemailinc.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BROADCASTEMAILINC.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.BROADCASTEMAILINC.COM
   Name Server: NS4.BROADCASTEMAILINC.COM
   Name Server: NS3.BROADCASTEMAILINC.COM
   Name Server: NS2.BROADCASTEMAILINC.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 31-Aug-2006
   Creation Date: 27-Aug-2006
   Expiration Date: 27-Aug-2007

<<<< Last update of whois database: Mon, 04 Sep 2006 08:01:16 EDT

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name.......... broadcastemailinc.com
  Creation Date........ 2006-08-28 03:03:34
  Registration Date.... 2006-08-28 03:03:34
  Expiry Date.......... 2007-08-28 03:03:34
  Organisation Name.... liu fei
  Organisation Address. xia meng
  Organisation Address.
  Organisation Address. xia meng
  Organisation Address. 321000
  Organisation Address. FJ
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ xia meng
  Admin Address........
  Admin Address........ xia meng
  Admin Address........ 321000
  Admin Address........ FJ
  Admin Address........ CN
  Admin Email.......... pop@broadcastemailinc.com
  Admin Phone.......... +86.5922577833
  Admin Fax............ +86.5922577833

Tech Name............ liu fei
  Tech Address......... xia meng
  Tech Address.........
  Tech Address......... xia meng
  Tech Address......... 321000
  Tech Address......... FJ
  Tech Address......... CN
  Tech Email........... pop@broadcastemailinc.com
  Tech Phone........... +86.5922577833
  Tech Fax............. +86.5922577833

Bill Name............ liu fei
  Bill Address......... xia meng
  Bill Address.........
  Bill Address......... xia meng
  Bill Address......... 321000
  Bill Address......... FJ
  Bill Address......... CN
  Bill Email........... pop@broadcastemailinc.com
  Bill Phone........... +86.5922577833
  Bill Fax............. +86.5922577833
  Name Server.......... ns1.broadcastemailinc.com
  Name Server.......... ns2.broadcastemailinc.com
  Name Server.......... ns3.broadcastemailinc.com
  Name Server.......... ns4.broadcastemailinc.com

  dig broadcastemailinc.com

; <<>> DiG 9.2.4 <<>> broadcastemailinc.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34092
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailinc.com.         IN      A

;; ANSWER SECTION:
broadcastemailinc.com.  3600    IN      A       211.155.132.6

;; AUTHORITY SECTION:
broadcastemailinc.com.  358     IN      NS      ns2.virtualinc.info.

;; Query time: 421 msec
;; SERVER: 
;; WHEN: Mon Sep  4 13:03:10 2006
;; MSG SIZE  rcvd: 88

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

1 September: Dead this time. - I have incriminating stuff too, will take some to analyse.

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D128097125-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:31-Aug-2006 17:01:42 UTC
Last Updated On:01-Sep-2006 15:21:30 UTC
Expiration Date:31-Aug-2007 17:01:42 UTC
Sponsoring Registrar:Namesdirect Inc. (R92-LROR)
Status:CLIENT HOLD
Status:TRANSFER PROHIBITED
Registrant ID:DOT-SX8GWS0OUMGE
Registrant Name:Deactivated (Spam)
Registrant Organization:Dotster, Inc
Registrant Street1:8100 NE Parkway Drive
Registrant Street2:Suite 300
Registrant Street3:
Registrant City:Vancouver
Registrant State/Province:Washington
Registrant Postal Code:98662
Registrant Country:US
Registrant Phone:+1.3602532210
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:abuse@dotster.com
Admin ID:DOT-QM9ILR3UBN5C
Admin Name:Deactivated (Spam)
Admin Organization:Dotster, Inc
Admin Street1:8100 NE Parkway Drive
Admin Street2:Suite 300
Admin Street3:
Admin City:Vancouver
Admin State/Province:Washington
Admin Postal Code:98662
Admin Country:US
Admin Phone:+1.3602532210
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:abuse@dotster.com
Tech ID:DOT-7O7UIX01KN26
Tech Name:Deactivated (Spam)
Tech Organization:Dotster, Inc
Tech Street1:8100 NE Parkway Drive
Tech Street2:Suite 300
Tech Street3:
Tech City:Vancouver
Tech State/Province:Washington
Tech Postal Code:98662
Tech Country:US
Tech Phone:+1.3602532210
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:abuse@dotster.com
Name Server:NS1.SPAMSHUTDOWN.COM
Name Server:NS2.SPAMSHUTDOWN.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; Query time: 122 msec
;; 
;; WHEN: Fri Sep  1 17:29:02 2006
;; MSG SIZE  rcvd: 44

31 August: Temporary Bye Bye emailadvertisingagency.org pir/.org registrar temporarily terminates my favourite spammer.

whois emailadvertisingagency.org
NOT FOUND

no dns

But a subtle change here and there to the whois and things return.

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D128097125-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:31-Aug-2006 17:01:42 UTC
Last Updated On:31-Aug-2006 17:07:20 UTC
Expiration Date:31-Aug-2007 17:01:42 UTC
Sponsoring Registrar:Namesdirect Inc. (R92-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:DOT-RP43F6ZP7ACG
Registrant Name:Bob Alan
Registrant Organization:NA
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:WA
Registrant Postal Code:98111
Registrant Country:US
Registrant Phone:+1.2062231271
Registrant Phone Ext.:
Registrant FAX:+1.2062231271
Registrant FAX Ext.:
Registrant Email:pres10000@ranmamail.com was  ead1000@ranmamail.com
Admin ID:DOT-4FT3NDJUKNU3
Admin Name:Bob Alan
Admin Organization:NA
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:WA
Admin Postal Code:98111
Admin Country:US
Admin Phone:+1.2062231271
Admin Phone Ext.:
Admin FAX:+1.2062231271
Admin FAX Ext.:
Admin Email:pres10000@ranmamail.com
Tech ID:DOT-DFV0X6IEEWTW
Tech Name:Bob Alan
Tech Organization:NA
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:WA
Tech Postal Code:98111
Tech Country:US
Tech Phone:+1.2062231271
Tech Phone Ext.:
Tech FAX:+1.2062231271
Tech FAX Ext.:
Tech Email:pres10000@ranmamail.com
Name Server:NS1.EMAILADVERTISINGAGENCY.ORG
Name Server:NS2.EMAILADVERTISINGAGENCY.ORG
Name Server:NS3.EMAILADVERTISINGAGENCY.ORG
Name Server:NS4.EMAILADVERTISINGAGENCY.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38180
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; ANSWER SECTION:
emailadvertisingagency.org. 3600 IN     A       211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingagency.org. 43199 IN    NS      ns3.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns4.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns1.emailadvertisingagency.org.
emailadvertisingagency.org. 43199 IN    NS      ns2.emailadvertisingagency.org.

;; ADDITIONAL SECTION:
ns1.emailadvertisingagency.org. 2441 IN A       211.155.132.206
ns2.emailadvertisingagency.org. 2441 IN A       211.155.132.206
ns4.emailadvertisingagency.org. 2441 IN A       211.155.132.206

;; Query time: 471 msec
;; SERVER: secret
;; WHEN: Thu Aug 31 18:36:52 2006
;; MSG SIZE  rcvd: 180

Oh well ! - however Karen rings Bob to ask him to stop spamming, she then emails me.

Name: Karen

I am a victim of this NPR spamming.  I am  not
(stuff removed by me) very computer literate, but I know that my
computer isn't running right
since I have been getting NPR's spam, and also,
so much OTHER junk is cramming my email box....

I was glad to find your site. I called the # you
posted for Bob, and he hung up on me too....
now, can't get through to them....

Is there anything I can do?

Karen welcome and yet another person whom that can affirm that Bob has a bad telephone manner.

29 August: Not getting much else down another recommendation http://www.aussieninjakids.org/security_notice.htm, theemailcorporation.org is down, along with broadcastemailcorporation.com

But say welcome to: emailadvertisingagency.org

whois emailadvertisingagency.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry

registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy.  This service is intended only for query-based access.  

You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D127948604-LROR
Domain Name:EMAILADVERTISINGAGENCY.ORG
Created On:29-Aug-2006 00:33:29 UTC
Last Updated On:29-Aug-2006 00:56:01 UTC
Expiration Date:29-Aug-2007 00:33:29 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:41052107-NSI
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:WA
Registrant Postal Code:98111
Registrant Country:US
Registrant Phone:+1.2062231271
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:ead1000@ranmamail.com
Admin ID:41052107-NSI
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:WA
Admin Postal Code:98111
Admin Country:US
Admin Phone:+1.2062231271
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:ead1000@ranmamail.com
Tech ID:41052107-NSI
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:WA
Tech Postal Code:98111
Tech Country:US
Tech Phone:+1.2062231271
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:ead1000@ranmamail.com
Name Server:NS1.EMAILADVERTISINGAGENCY.ORG
Name Server:NS2.EMAILADVERTISINGAGENCY.ORG
Name Server:NS3.EMAILADVERTISINGAGENCY.ORG
Name Server:NS4.EMAILADVERTISINGAGENCY.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

dig emailadvertisingagency.org

; <<>> DiG 9.2.4 <<>> emailadvertisingagency.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;emailadvertisingagency.org.    IN      A

;; ANSWER SECTION:
emailadvertisingagency.org. 3600 IN     A       211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingagency.org. 2803 IN     NS      ns2.virtualinc.info.

;; Query time: 464 msec
;; SERVER: 
;; WHEN: Wed Aug 30 13:57:14 2006
;; MSG SIZE  rcvd: 93

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

28 August: theemailboardcastcorporation.org is down having no dns.

27 August: Dog reports that broadcastemailcompany.com is dead after two days ( a registrar termination), and it seems to have a new owner already pointing to a redirect page at 66.118.136.67

Sago Networks SAGONET-IPV4-1 NET-66-118-128-0-1 
                                  66.118.128.0 - 66.118.191.255
				  
BiJu Mathew SAGO-66-118-136-64 NET-66-118-136-64-1 
                               66.118.136.64 66.118.136.71
			       
# ARIN WHOIS database, last updated 2006-08-27 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

whois broadcastemailcompany.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BROADCASTEMAILCOMPANY.COM
   Registrar: COMPANA, LLC
   Whois Server: whois.budgetnames.com
   Referral URL: http://www.budgetnames.com
   Name Server: NS2.BODYFUNCTIONS.COM
   Name Server: NS1.BODYFUNCTIONS.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 28-Aug-2006
   Creation Date: 28-Aug-2006
   Expiration Date: 28-Aug-2007

>>> Last update of whois database: Mon, 28 Aug 2006 17:47:42 EDT

the New owner is not known as of writing this entry, after hoop jumping at budgetnames.com whois webform - in order to stop spammers, this page at times could become a humour page. (EPP status means domain is reactivated by some sucker).

.org seems to have host its dns servers too.

dig theemailcorporation.org

; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; connection timed out; no servers could be reached

In order to differentate between Bob and non Bob domains picked up in rebound after termination so I'm using this.

new owner
from: date

Quite why anybody thinks its a good idea is another mater entirely.

26 August: Whack a mole continues.

http://www.networksolutions.com


Registrant:
NIM Corporation
   PO Box 1259
   Seattle, WA 98101
   US

   Domain Name: BROADCASTEMAILCOMPANY.COM

   Administrative Contact, Technical Contact:
      NIM Corporation           pres100@ranmamail.com
      PO Box 1259
      Seattle, WA 98101
      US
      206-223-1271

   Record expires on 24-Aug-2007.
   Record created on 24-Aug-2006.
   Database last updated on 26-Aug-2006 10:29:09 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILCOMPANY.COM 218.57.8.93
   NS2.BROADCASTEMAILCOMPANY.COM 211.155.132.228
   NS3.BROADCASTEMAILCOMPANY.COM 222.76.212.175
   NS4.BROADCASTEMAILCOMPANY.COM 208.2.150.150
   
   dig broadcastemailcompany.com

; <<>> DiG 9.2.4 <<>> broadcastemailcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;broadcastemailcompany.com.     IN      A

;; ANSWER SECTION:
broadcastemailcompany.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcompany.com. 13287 IN     NS      ns3.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns4.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns1.broadcastemailcompany.com.
broadcastemailcompany.com. 13287 IN     NS      ns2.broadcastemailcompany.com.

;; ADDITIONAL SECTION:
ns1.broadcastemailcompany.com. 42307 IN A       218.57.8.93
ns2.broadcastemailcompany.com. 2710 IN  A       211.155.132.206
ns3.broadcastemailcompany.com. 42307 IN A       222.76.212.175
ns4.broadcastemailcompany.com. 38572 IN A       208.2.150.150

;; Query time: 4508 msec
;; SERVER: #53()
;; WHEN: Sat Aug 26 15:40:12 2006
;; MSG SIZE  rcvd: 195

China - seen before spotted by by Dog

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Clean up of paragraphs, document of recent spam text added near the top.

25 August:the Sky notices that two days later and our friends at the registrar do something (I was cc'ed a spamcop report). another Friend with domain also gets a spam.

No match for "EBROADCASTCORPORATION.COM".
>>> Last update of whois database: Fri, 25 Aug 2006 05:46:39 EDT 

23 August:Meet ebroadcastcorporation.com

http://www.networksolutions.com


Registrant:
Davidson, Pat
   4951 Netarts Hwy West
   Tillamook, OR 97141
   US

   Domain Name: EBROADCASTCORPORATION.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patdvs2000@yahoo.com
      4951 Netarts Hwy West
      Tillamook, OR 97141
      US
      541-550-7322

   Record expires on 22-Aug-2007.
   Record created on 22-Aug-2006.
   Database last updated on 23-Aug-2006 08:39:19 EDT.

   Domain servers in listed order:

   NS1.EBROADCASTCORPORATION.COM 218.57.8.93
   NS2.EBROADCASTCORPORATION.COM 211.155.132.228
   NS3.EBROADCASTCORPORATION.COM 222.76.212.175
   NS4.EBROADCASTCORPORATION.COM 208.2.150.150
   
   dig ebroadcastcorporation.com

; <<>> DiG 9.2.4 <<>> ebroadcastcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29712
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;ebroadcastcorporation.com.     IN      A

;; ANSWER SECTION:
ebroadcastcorporation.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
ebroadcastcorporation.com. 24132 IN     NS      ns3.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns4.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns1.ebroadcastcorporation.com.
ebroadcastcorporation.com. 24132 IN     NS      ns2.ebroadcastcorporation.com.

;; ADDITIONAL SECTION:
ns1.ebroadcastcorporation.com. 43198 IN A       218.57.8.93
ns2.ebroadcastcorporation.com. 43198 IN A       211.155.132.228
ns3.ebroadcastcorporation.com. 2552 IN  A       211.155.132.206
ns4.ebroadcastcorporation.com. 1547 IN  A       211.155.132.206

;; Query time: 557 msec
;; SERVER: ?#53(?)
;; WHEN: Wed Aug 23 14:38:45 2006
;; MSG SIZE  rcvd: 195

Whoopee its ... China

% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

what a surprise. Apologies about borked guestbook.

22 August: Scamnot tells me Ive 'boobed' a few things like forgeting about broadcastmarketingcorp.com now added to domain list and broadcastemailcorporation.com (hosted in anti-spammy China) details:

dig broadcastemailcorporation.com

; >> DiG 9.2.4 >> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER- opcode: QUERY, status: NOERROR, id: 1767
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 43200 IN NS      ns2.xinnetdns.com.
broadcastemailcorporation.com. 43200 IN NS      ns2.xinnet.cn.

;; ADDITIONAL SECTION:
ns2.xinnetdns.com.      36140   IN      A       210.51.170.67

;; Query time: 385 msec
;; SERVER: #53()
;; WHEN: Tue Aug 22 16:36:17 2006
;; MSG SIZE  rcvd: 134

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Normal service shall be 'ahem' resumed soon. broadcastmarketingcorp.com (host i missed) follows below.

http://www.networksolutions.com


Registrant:
Davidson, Pat
   4951 Netarts Hwy West
   Tillamook, OR 97141
   US

   Domain Name: BROADCASTMARKETINGCORP.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patdvs2000@yahoo.com
      4951 Netarts Hwy West
      Tillamook, OR 97141
      US
      541-550-7322

   Record expires on 11-Aug-2007.
   Record created on 11-Aug-2006.
   Database last updated on 22-Aug-2006 12:01:27 EDT.

   Domain servers in listed order:

   NS1.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 218.57.8.93
   NS2.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 211.155.132.228
   NS3.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 222.76.212.175
   NS4.EMAILADVERTISINGCORPORATION.COM.LAMEDELEGATION.COM 208.2.150.150
   
   No dns host
   

21 August: Dog reports that broadcastemailcorporation.com (16 June last seen) makes an resurrection from the dead on the same host it died on.

If anybody can find my ie html bug on line 53 i will credit them with a thank you, major ie problem sorted (i hope) - remember other browsers exist too - I'm not getting ie these days. Meebo is borked in ie it seems works fine in Firefox.

20 August: deceased (doa) emailadvertisingcorporation.com terminated by registrar, and thebroadcastemailcorporation.com is 'up for sale' http://www.domainsystems.com/bidform.php?domain=thebroadcastemailcorporation.com bid now spammers and supported by our friends at moniker.com

auction of the url thebroadcastemailcorporation.com

18 August: Bob Soloway goes on tour to Latin American visiting 'darkest' Peru (once home to paddington bear - we did Hong Kong Phooey in the last entry) and Brazil too. Evidence seen in cc'ed spamcop reports. Looking forward to seeing the holiday pictures Bob.

The 'sky' provides us with a location: http://local.live.com/?v=2&sp=aN.ry0xgv4t50yv_1001%25204th%2520Ave%252c%2520Seattle%252c%2520WA%252098154-1119%252c%2520United%2520States___

Cartoon character16 August: Students of Hong Kong Phooey, Ladies, and gentlemen meet emailadvertisingcorporation.com. Thanks to Sky at Opsan for the id.

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: EMAILADVERTISINGCORPORATION.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 11-Aug-2007.
   Record created on 11-Aug-2006.
   Database last updated on 15-Aug-2006 15:10:26 EDT.

   Domain servers in listed order:

   NS1.EMAILADVERTISINGCORPORATION.COM 218.57.8.93
   NS2.EMAILADVERTISINGCORPORATION.COM 211.155.132.228
   NS3.EMAILADVERTISINGCORPORATION.COM 222.76.212.175
   NS4.EMAILADVERTISINGCORPORATION.COM 208.2.150.150
   
  dig emailadvertisingcorporation.com

; <<>> DiG 9.2.4 <<>> emailadvertisingcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51910
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailadvertisingcorporation.com. IN    A

;; ANSWER SECTION:
emailadvertisingcorporation.com. 3250 IN A      211.155.132.206

;; AUTHORITY SECTION:
emailadvertisingcorporation.com. 35534 IN NS ns2.emailadvertisingcorporation.com.
emailadvertisingcorporation.com. 35534 IN NS ns3.emailadvertisingcorporation.com. 
emailadvertisingcorporation.com. 35534 IN NS    ns4.emailadvertisingcorporation.com.
emailadvertisingcorporation.com. 35534 IN NS ns1.emailadvertisingcorporation.com.

;; ADDITIONAL SECTION:
ns1.emailadvertisingcorporation.com. 35534 IN A 218.57.8.93
ns2.emailadvertisingcorporation.com. 35534 IN A 211.155.132.228
ns3.emailadvertisingcorporation.com. 35534 IN A 222.76.212.175
ns4.emailadvertisingcorporation.com. 23054 IN A 208.2.150.150

;; Query time: 3 msec
;; SERVER: ?#53(?)
;; WHEN: Tue Aug 15 20:10:53 2006
;; MSG SIZE  rcvd: 201


'Pat' rings a bell its not 'Bob', but Pat will will do - China ? oh yes !!! and seen before

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC
person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

15 August: A Ninja running a children's school (how the mighty warriors fall) reports that broadcastemailgroup.com is deceased (hosting not renewed/paid? at Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd ) and so is broadcastemailworld.com down too (my discovery). Alas the Ninja has no 'goods' for his austrailian money - Austrialain police I'm sure would like to talk to this fraudster/come email spammer (Note to Ninja: spam is illegal in australia).

Of interest is that 'after care support' for Bob has moved to emailsupport@msbx.net which appears to be a dropbox service, love the spam filtering irony here

I hope bob paid for this service.

They Kenosha Information Technology, Inc. 8809 39th Ave, Kenosha, WI 53142 currently live on ev1.net -> abuse@ev1.net

Other domains still - 'up' existing hosts still being used.

10 August: News finally (slow month). charter.net pc (american) spewing spam for Bob (see spamcop reports), and broadcastemailcorporation.com makes a reappearance (last seen 22 June 2006 new host is 221.10.254.97 which unbelievably is hosted at those I hate spammers known as the Chinese.

dig broadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45728
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 2744 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 42343 IN NS      ns2.xinnet.cn.
broadcastemailcorporation.com. 42343 IN NS      ns2.xinnetdns.com.

;; ADDITIONAL SECTION:
ns2.xinnet.cn.          32463   IN      A       210.51.170.67

;; Query time: 3 msec
;; WHEN: Thu Aug 10 15:44:10 2006
inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

Bobs been playing with the masthead again its now nport, what fun he must have. Looking forward to the next one too. screen dumps are like so funa variant on a website theme

Thanks for spamcop cc spamnot one of the reports had

dig glennconstruction.com

; <<>> DiG 9.2.4 <<>> glennconstruction.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7259
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;glennconstruction.com.         IN      A

;; ANSWER SECTION:
glennconstruction.com.  3600    IN      A       69.29.58.153

;; AUTHORITY SECTION:
glennconstruction.com.  3600    IN      NS      PARK11.SECURESERVER.NET.
glennconstruction.com.  3600    IN      NS      PARK12.SECURESERVER.NET.

;; Query time: 175 msec
;; WHEN: Thu Aug 10 16:17:44 2006
;; MSG SIZE  rcvd: 113

dnsreport thinks its not a relay (same ip) but looks compromised as it reports.

mail.glennconstruction.com:
    220 glennconstruction.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.211 ready at Thu, 10 Aug 2006 10:22:08 -0500 

Seems to be open for spamming, Im sure a proper relay check is in order for glennconstruction.com, alas the owner seems to want to remain anon.

Administrative Contact:
      Private, Registration  GLENNCONSTRUCTION.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599

Clean up of xhtml to a state of 'validness' - which depending on who you believe is or is not valid html. make your judgement on the ongoings at the w3c.

31 July: THEEMAILCORPORATION.ORG is back in China, what a surprise.

This is more interesting.
openmail login



















A demo of what Bob could 'see' view inside demo

Its a refugee from HP it appears, open-xhange.org and acts much like a M$ Exchange server, url is http://www.theemailcorporation.org/ cgi-bin/openwebmail/openwebmail.pl the website we all know and love is at /bec (as before) oh typing in the domain name got me there.

How Bob Soloway hates American workers we wont even buy a modern email server, thankfully it seems Bob still has to use stuff like this because hes too dumb to setup up sendmail/imap server which is also hosted in china.

dig theemailcorporation.org

; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailcorporation.org.       IN      A

;; ANSWER SECTION:
theemailcorporation.org. 300    IN      A       210.83.200.219

;; AUTHORITY SECTION:
theemailcorporation.org. 300    IN      NS      ns1.theemailcorporation.org.
theemailcorporation.org. 300    IN      NS      ns2.theemailcorporation.org.

;; Query time: 

inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

27 July: Thanks to sky for spotting new masthead NPRT ... at Opsan - new screen dump in current operations section,

25 July:THEEMAILCORPORATION.ORG has no dns. Also (seen in nanae), does Soloway have competition see

whois bulk-email-broadcasting.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: BULK-EMAIL-BROADCASTING.COM
   Registrar: BULKREGISTER, LLC.
   Whois Server: whois.bulkregister.com
   Referral URL: http://www.bulkregister.com
   Name Server: NS1.EXPEDITEMG.COM
   Name Server: NS2.EXPEDITEMG.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 13-Feb-2006
   Creation Date: 12-Feb-2003
   Expiration Date: 12-Feb-2007

>>> Last update of whois database: Tue, 25 Jul 2006 12:06:00 EDT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
The data in BulkRegister, LLC WHOIS database is provided to you by
BulkRegister, LLC for information purposes only, that is, to assist you in
obtaining information about or related to a domain name registration
record.  BulkRegister, LLC makes this information available "as is", and
does not guarantee its accuracy.  By submitting a WHOIS query, you
agree that you will use this data only for lawful purposes and that,
under no circumstances will you use this data to: (1) allow, enable,
or otherwise support the transmission of mass or bulk unsolicited,
commercial advertising or solicitations via electronic mail, aka (SPAM).
(2) enable high volume, automated, electronic processes that apply
to BulkRegister, LLC (or its systems).  The compilation, repackaging,
dissemination or other use of this data is expressly prohibited without
the prior written consent of BulkRegister, LLC.  BulkRegister, LLC reserves
the right to modify these terms at any time.  By submitting this query,
you agree to abide by these terms.


Expedite Media Group
   245 W. Roosevelt Road
   West Chicago, Illinois 60185
   US

   Domain Name: BULK-EMAIL-BROADCASTING.COM

   Administrative Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146
   Technical Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146
   Billing Contact:
        n/a n/a domains@expeditemg.com
        Expedite Media Group
        245 W. Roosevelt Road
        West Chicago, Illinois 60185
        US
        Phone: +1 630-876-8066
        Fax: +1 630-876-8146

   Record updated on 2006-02-14 06:36:11
   Record created on 2003-02-12
   Record expires on 2007-02-12
   Database last updated on 2006-07-25 12:06:22 EST

   Domain servers in listed order:

   NS1.EXPEDITEMG.COM            71.194.7.54
   NS2.EXPEDITEMG.COM            71.194.7.54

   TransferGuard LOCK Status => ENABLED

That's american hosting, different to Soloway usual website too.

19 July: Meet theemailcorporation.org/bec/, that's a new registrar or we have not seen it recently.

whois theemailcorporation.org
NOTICE: Access to .ORG WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the Public Interest Registry
registry database. The data in this record is provided by Public Interest Registry
for informational purposes only, and Public Interest Registry does not guarantee its
accuracy.  This service is intended only for query-based access.  You agree
that you will use this data only for lawful purposes and that, under no
circumstances will you use this data to: (a) allow, enable, or otherwise
support the transmission by e-mail, telephone, or facsimile of mass
unsolicited, commercial advertising or solicitations to entities other than
the data recipient's own existing customers; or (b) enable high volume,
automated, electronic processes that send queries or data to the systems of
Registry Operator or any ICANN-Accredited Registrar, except as reasonably
necessary to register domain names or modify existing registrations.  All
rights reserved. Public Interest Registry reserves the right to modify these terms at any
time. By submitting this query, you agree to abide by this policy.

Domain ID:D125009123-LRMS
Domain Name:THEEMAILCORPORATION.ORG
Created On:24-Jun-2006 09:46:28 UTC
Last Updated On:06-Jul-2006 23:41:30 UTC
Expiration Date:24-Jun-2007 09:46:28 UTC
Sponsoring Registrar:eNom, Inc. (R39-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:9CEA66B30549F72F
Registrant Name:Terry Cohen
Registrant Organization:Kersengton PC Doctors
Registrant Street1:4121 Dutchmans Lane
Registrant Street2:
Registrant Street3:
Registrant City:Louisville
Registrant State/Province:KY
Registrant Postal Code:40207
Registrant Country:US
Registrant Phone:+1.2433019148
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: vasfelt@yahoo.com
Admin ID:9CEA66B30549F72F
Admin Name:Terry Cohen
Admin Organization:Kersengton PC Doctors
Admin Street1:4121 Dutchmans Lane
Admin Street2:
Admin Street3:
Admin City:Louisville
Admin State/Province:KY
Admin Postal Code:40207
Admin Country:US
Admin Phone:+1.2433019148
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:vasfelt@yahoo.com
Tech ID:9CEA66B30549F72F
Tech Name:Terry Cohen
Tech Organization:Kersengton PC Doctors
Tech Street1:4121 Dutchmans Lane
Tech Street2:
Tech Street3:
Tech City:Louisville
Tech State/Province:KY
Tech Postal Code:40207
Tech Country:US
Tech Phone:+1.2433019148
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:vasfelt@yahoo.com
Name Server:NS1.THEEMAILCORPORATION.ORG
Name Server:NS2.THEEMAILCORPORATION.ORG
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
; <<>> DiG 9.2.4 <<>> theemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7722
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;theemailcorporation.org.       IN      A

;; ANSWER SECTION:
theemailcorporation.org. 300    IN      A       210.83.200.219

;; AUTHORITY SECTION:
theemailcorporation.org. 300    IN      NS      ns2.theemailcorporation.org.
theemailcorporation.org. 300    IN      NS      ns1.theemailcorporation.org.
inetnum:      210.83.200.0 - 210.83.200.255
netname:      DALIAN-JINGUANG-CORP
descr:        No 6,jinhua Road,dalian city,liaoning province
country:      CN
admin-c:      JW302-AP
tech-c:       JW302-AP
mnt-by:       MAINT-CN-ZM28
status:       ASSIGNED NON-PORTABLE
changed:      daihy@china-netcom.com 20020815
changed:      hm-changed@apnic.net 20040927
source:       APNIC

route:        210.82.0.0/15
descr:        CNC Group CncNet
country:      CN
origin:       AS9929
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060330
source:       APNIC

person:       jianhua wu
address:      dalian city
country:      CN
phone:        +86-010-88093588
e-mail:       wjh@dhc.com.cn
nic-hdl:      JW302-AP
mnt-by:       MAINT-CN-ZM28
changed:      daihy@china-netcom.com 20011024
source:       APNIC

China, fancy that.

16 July: Meet broadcastemailworld.com

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: BROADCASTEMAILWORLD.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 12-Jul-2007.
   Record created on 12-Jul-2006.
   Database last updated on 15-Jul-2006 10:06:18 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILWORLD.COM  218.57.8.93
   NS2.BROADCASTEMAILWORLD.COM  211.155.132.228
   NS3.BROADCASTEMAILWORLD.COM  222.76.212.175
   NS4.BROADCASTEMAILWORLD.COM  208.2.150.150

Pat could be a boy or a girl.

dig broadcastemailworld.com

; <<>> DiG 9.2.4 <<>> broadcastemailworld.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58792
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailworld.com.       IN      A

;; ANSWER SECTION:
broadcastemailworld.com. 3600   IN      A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailworld.com. 36612  IN      NS      ns1.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns2.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns3.broadcastemailworld.com.
broadcastemailworld.com. 36612  IN      NS      ns4.broadcastemailworld.com.

;; ADDITIONAL SECTION:
ns2.broadcastemailworld.com. 36612 IN   A       211.155.132.228

That's got to be China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

We have met before too very much in love with spam Also meet BROADCASTEMAILGROUP.COM

http://www.networksolutions.com


Registrant:
Davidson, Pat
   PO Box 444
   Springfield, OR 97477
   US

   Domain Name: BROADCASTEMAILGROUP.COM

   Administrative Contact, Technical Contact:
      Davidson, Pat             patd2000@yahoo.com
      PO Box 444
      Springfield, OR 97477
      US
      541-543-5661

   Record expires on 12-Jul-2007.
   Record created on 12-Jul-2006.
   Database last updated on 15-Jul-2006 10:21:26 EDT.

   Domain servers in listed order:

   NS1.BROADCASTEMAILWORLD.COM  218.57.8.93
   NS2.BROADCASTEMAILWORLD.COM  211.155.132.228
   NS3.BROADCASTEMAILWORLD.COM  222.76.212.175
   NS4.BROADCASTEMAILWORLD.COM  208.2.150.150
   
   dig broadcastemailgroup.com

; <<>> DiG 9.2.4 <<>> broadcastemailgroup.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61701
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailgroup.com.       IN      A

;; ANSWER SECTION:
broadcastemailgroup.com. 3600   IN      A       211.155.132.206

;; Query time: 

Thats the same ip as the first domain name in the date entry..

15 July:'rumour' of up then domain name bbs007.com thanks to Ed, It seems to be those I hate spam chinese communists again. Strange.

Bob Soloways sex change the after picture.14 July: Bob sends a spam to domain owner email (we have tech issues with this) (its been a while) or has ?he/she got .eu registrar data ?

whoopie spam has image too with post operation sex change pictures (nice tommy tuck), and they really did do the sex change - thats got to be a improvement on being Mr Schmitt hey Bob, who was 'Mr Schmitts' doctor, many tv's out there would love to know who did it for you.

See the sections. for analysis, if your reporting Bobbettes crap be carefull the spf, subject, to and from (four items) had your email address in. I'm still getting spam from Bob, be wise.

Hes a girl spammer now it seems. but still waiting for the face transplant operation. (this picture was actually sent by Bob) If you consider what it has to do with email spam (in context) your doing better than us. - Hey the jokes now thats another matter.

11 July: emarketingcorp.cn seems to have been suspended by our spam friendly chinese registrar. We are not Bob Soloway so asking us to stop Bob's spamming is a waste of time. This site documents his going ons.

07 July:Bob does not like criticism, so posting as Nemesis he said he would pay to have himself murdered (financial means unknown), a couple of days later after refusing suggestions to sue himself for spamming, and with nobody taking him up on the offer over at opsan, Bob then complains about the site and his posting.

So was it a threat? no it was a suicide attempt by our featured spammer. I think you can add missing a few brain cells to the Bob Soloway Picture too. 'MEDICATION TIME'. Somebody better reserve a nice doctor to assess Bob - Washington State has a 'drain' on its healthcare budget. - perhaps its a life insurance fraud ?

Lol "Priceless"

06 July:Meet new host (as expected) sans domain name (i wonder why ? - humour) Bob 211.155.132.206/welcome.html Yes its our friends in China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC
broadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COM person: Hongde Luo nic-hdl: HL2-AP e-mail: hongde@hdcatv.com address: Bldg. #10, Zijin Zhuangyuan, Suzhou Street address: Haidian District, Beijing, China 100086 phone: +86-10-82672299 fax-no: +86-10-82672299 country: CN changed: ipas@cnnic.net.cn 20030805 mnt-by: MAINT-CNNIC-AP source: APNIC inetnum: 211.155.128.0 - 211.155.143.255 netname: HDBMAN country: CNbroadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COM descr: Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd descr: Haidian District, Beijing, China 100086 admin-c: LH43-CN tech-c: HL2-CN status: ALLOCATED PORTABLE mnt-by: MAINT-CNNIC-AP mnt-lower: MAINT-CN-HDBMAN changed: shenzhi@cnnic.cn 20050629 changed: ipas@cnnic.net.cn 20050711 changed: ipas@cnnic.net.cn 20051102 source: CNNIC person: Lixian He nic-hdl: LH43-CN e-mail: hongde@hdcatv.com address: Bldg. #10, Zijin Zhuangyuan, Suzhou Street address: Haidian District, Beijing, China 100086 phone: +86-10-82672299 fax-no: +86-10-82672299 country: CN changed: ipas@cnnic.net.cn 20030805 mnt-by: MAINT-CNNIC-AP source: CNNIC person: Hongde Luo nic-hdl: HL2-CN e-mail: hongde@hdcatv.cbroadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COMom address: Bldg. #10, Zijin Zhuangyuan, Suzhou Street address: Haidian District, Beijing, China 100086 phone: +86-10-82672299 fax-no: +86-10-82672299 country: CN changed: ipas@cnnic.net.cn 20030805 mnt-by: MAINT-CNNIC-AP source: CNNIC

Thanks for the 3 spamcop reports too. Spamming from America via rr.com, and Bulgaria too emarketingcobroadcastemailworld.com details about them on this page
BROADCASTEMAILGROUP.COMrp.cn up again

dig emarketingcorp.cn

; <<>> DiG 9.2.4 <<>> emarketingcorp.cn
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52132
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;emarketingcorp.cn.             IN      A

;; ANSWER SECTION:
emarketingcorp.cn.      10800   IN      A       218.30.100.92

;; AUTHORITY SECTION:
emarketingcorp.cn.      10800   IN      NS      dns9.hichina.com.
emarketingcorp.cn.      10800   IN      NS      dns10.hichina.com.

Meet the spam is good communists in Beijing (China)

inetnum:      218.30.96.0 - 218.30.127.255
netname:      CHINANET-IDC-BJ
descr:        CHINANET IDC center
descr:        China Telecom
descr:        Beijing 100088
country:      CN
admin-c:      HC55-AP
tech-c:       HC55-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINATELECOM-BJ
changed:      bjnic@bjtelecom.net 20040322
status:       ALLOCATED NON-PORTABLE
source:       APNIC

person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
nic-hdl:      HC55-AP
e-mail:       bjnic@bjtelecom.net
address:      Beijing Telecom
address:      No. 107 XiDan Beidajie, Xicheng District Beijing
phone:        +86-010-58503461
fax-no:       +86-010-58503054
country:      cn
changed:      bjnic@bjtelecom.net 20040115
mnt-by:       MAINT-CHINATELECOM-BJ
source:       APNIC

05 July:Humour time: Wahyu Inc is a firm in Indonesia. the telephone registered (707) 954-3717 is a lady too who has nothing to with Mr Soloway (opsan news).

What can we assume from this ? easy Bobs seems to have had a sex change, before this it seems he was a Indonesian Lady boy ( a transvestite) called Mr Schmitt where he serviced clients from a hotel in Yermo, CA.

This is the strange world of Bob Soloway, Come back soon to discover what Bobs 'morphed' into next time. Honestly its hard to say this is not fiction (made up) at times. - I mean she's (bob) a Business woman now.

Should we start calling him Roberta Soloway ?

03 July: Up and then Down, Morning breaks and Al yet again id's emailbroadcastcompany.com Bob has a friend (perhaps imaginary) called Shannon Johnson. So hello.

Update: somebody terminated it (23:00 gmt), it will be interesting to see if our Chinese hoster pops up again.

Domain name: emailbroadcastcompany.com

Registrant:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Administrative Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Technical Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Billing Contact:
   Shannon Johnson (NKQKN) wahyu@arunngl.com
   Wahyu Inc.
   18645 Oak Grove Ct.
   Middletown,    CA    95461
   United States
   Phone: +1 (707) 954-3717

Record last updated on 2006-06-30 00:00:00
Record created on 2006-06-30 00:00:00
Record expires on 2007-06-30 00:00:00

Domain servers in listed order:
   ns2.dnsuse.info   211.155.132.226
   ns1.dnsuse.info   219.146.57.85

Registration Service Provider: Sun Network
   domain.billing@sun-network.com
   +1 (702)2847493

Registrar: NAMES4EVER, http://www.names4ever.com

Looks like china

<<>> DiG 9.2.4 <<>> emailbroadcastcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3517
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;emailbroadcastcompany.com.     IN      A

;; ANSWER SECTION:
emailbroadcastcompany.com. 3600 IN      A       211.155.132.206

;; AUTHORITY SECTION:
emailbroadcastcompany.com. 16287 IN     NS      ns1.dnsuse.info.
emailbroadcastcompany.com. 16287 IN     NS      ns2.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        32014   IN      A       61.156.8.120
ns2.dnsuse.info.        32014   IN      A       211.155.132.228

and whoopie its China Last seen here 14 June 2006 too. Hello to spammy china.

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

01 July:Happy July 1st, Our green chinese man (image) made an appearance again, Google translate says :

对不起,此网站暂时关闭,请您稍后再来。详细原因请查询...

Sorry, this site is temporarily closed, please come again later. Please detail the reasons enquiries. . .

A big hello to Al over at Opsan for spotting

whois emarketingcorp.cn
Domain Name: emarketingcorp.cn
ROID: 20060516s10001s52771768-cn
Domain Status: ok
Registrant Organization: 第二域名
Registrant Name: 吴东
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 创联万网国际信息技术(北京)有限公司
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-05-16 10:40
Expiration Date: 2007-05-16 10:40

yes thats the we Chinese really do hate spammers, for they they hopefully take Bobs money in advance and then they trash him. Communism has changed, Karl Marx would be spinning in his Highbury cemetery grave 'home'.

dig emarketingcorp.cn

; <<>> DiG 9.2.4 <<>> emarketingcorp.cn
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53074
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;emarketingcorp.cn.             IN      A

;; ANSWER SECTION:
emarketingcorp.cn.      10268   IN      A       218.30.100.92

;; AUTHORITY SECTION:
emarketingcorp.cn.      9230    IN      NS      dns10.hichina.com.
emarketingcorp.cn.      9230    IN      NS      dns9.hichina.com.

;; Query time: 18 msec

Strangely Beijing (thats in China) loves Bob

inetnum:      218.30.96.0 - 218.30.127.255
netname:      CHINANET-IDC-BJ
descr:        CHINANET IDC center
descr:        China Telecom
descr:        Beijing 100088
country:      CN
admin-c:      HC55-AP
tech-c:       HC55-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINATELECOM-BJ
changed:      bjnic@bjtelecom.net 20040322
status:       ALLOCATED NON-PORTABLE
source:       APNIC

person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
nic-hdl:      HC55-AP
e-mail:       bjnic@bjtelecom.net
address:      Beijing Telecom
address:      No. 107 XiDan Beidajie, Xicheng District Beijing
phone:        +86-010-58503461
fax-no:       +86-010-58503054
country:      cn
changed:      bjnic@bjtelecom.net 20040115
mnt-by:       MAINT-CHINATELECOM-BJ
source:       APNIC

30 June: After a surprisingly short time of ahem compliants (this was Mr Schmits hotel if my memory is correct) Network solutions pulls the registration. - Everybody loves Bobs spamming

http://www.networksolutions.com
No match for "THEBROADCASTEMAILCORPORATION.COM".

Come back soon and find out what our lovable rogue is pretending to be today, and see Bob promote the american way of life. Observing Bob is much more fun than wondering which z list starlet is going to have a baby in Africa, because its the thing to do this week apparently or something.

28 June:ancestry.com has the american 1930's census data on it, its free, Not many Soloways. Who Appear to be of Russians/Polish descent and thus renamed to Soloway by some immigration officer - pockets of Soloways in New York/West Virgina. Soloways *REGISTRATION REQUIRED ? Mary and Dorothy Soloway names searched on.

24 June:ev1.net repeat offender hoster documented, had a look at this page in internet explorer 6 - my tables suck - strange if your still using Internet explorer please use something better.

23 June: Stu - i wonder what "you decide" Rupert Murdoch's puppet reporters would be 'told to say ?'. Bob had a go here at sub hosting (nanae lead) but thats dead.

22 June:thebroadcastemailcorporation.com seems to be defunct, thats the last known website (to date) Mr Soloway/HerrSchmitt seems to be out of the 'broadcasting' frequencies for the time being, dns works fine for other domains.

dig thebroadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> thebroadcastemailcorporation.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

hmmm

20 June:broadcastemailcorporation.com now points to http://www.sower.cn/close/ a possible an example of domain knitting? a hosting life of 4 days so far.

dig broadcastemailcorporation.com

; <<> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63072
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 42971 IN NS      ns2.xinnet.cn.
broadcastemailcorporation.com. 42971 IN NS      ns2.xinnetdns.com.

Domain still exists in whois too sans the 'fancy some spam website' Jury is out on this one on 'Knitting'. Assistance please.

19 June:I don't like Bob Parsons but he raised the point about domain knitting, now whether our friends the Chinese are paying for the domains Bob spamvertises is a valid point for discussion - being that some of these are only a few days in duration, assuming the dns is cached that be quite a few of them.

Its a fraud term (evil thought is Bob Parsons legit?) that never made it too europe, but it seems to be something like the enron scam in action, you take credit on non existant assets for a short term. It reeks of a 'I hate my competition' rant, while Bob tars a lot of his clients with the mark of the spammer recently which a decent technical person should know about.

If so then it does not matter if Bob pays his Chinese pro spam friends or not which from the going on's documented here it appear he does not like a long term relationship with his 'suppliers'. It would be interesting to find out who dumped who first. An observation from the the chinese man in the white hat screenshot it appears that Bob is an 'absent' client.

16 June:web-dateset.com down but Meet broadcastemailcorporation.com

Domain Name:broadcastemailcorporation.com


Registrant:
Wei Yuzhang
        hu bei
        434000
        ·36·


Administrative Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Hubei 434000
        CN
        tel: 86 0716 8560437
        fax: 86 0716 8560437
        ninecat2003@163.com

Technical Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Beijing 434000
        CN
        tel:   8560437
        fax:   8560437
        ninecat2003@163.com

Billing Contact:
Wei Yuzhang
        Wei Yuzhang
        hu bei
        jin zhou Beijing 434000
        CN
        tel:   8560437
        fax:   8560437
        ninecat2003@163.com

 Registration Date: 2006-05-23
       Update Date: 2006-05-23
   Expiration Date: 2007-05-23

    Primary DNS:  ns2.xinnetdns.com             210.51.170.48
  Secondary DNS:  ns2.xinnet.cn         210.51.170.67 

Meet Wei Yuzhang

<<>> DiG 9.2.4 <<>> broadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31982
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;broadcastemailcorporation.com. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.com. 3600 IN  A       221.10.254.97

;; AUTHORITY SECTION:
broadcastemailcorporation.com. 43199 IN NS      ns2.xinnetdns.com.
broadcastemailcorporation.com. 43199 IN NS      ns2.xinnet.cn.

;; ADDITIONAL SECTION:
ns2.xinnet.cn.          7945    IN      A       210.51.170.67
ns2.xinnetdns.com.      35872   IN      A       210.51.170.67

China ? oh yes I guessed correct whoopie!!!

inetnum:      221.10.0.0 - 221.10.255.255
netname:      CNCGROUP-SC
descr:        CNC Group SiChuan province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-SC
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      service provider
changed:      hm-changed@apnic.net 20030120
changed:      hm-changed@apnic.net 20060124
source:       APNIC

route:        221.10.0.0/16
descr:        CNC Group CHINA169 Sichuan Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

14 June: Meeting old friends, thebroadcastemailcorporation.com is on 211.155.132.206 which is also an old hoster of broadcastemailcorporation.org (terminated 30 May 2006)

web-dateset.com (was 211.155.132.206 - yes China ) seems to be missing the dns has been screwed up by this spammer pal Charles Earle IV, the lession one can draw is only a spammer would do that to another spammer.

6 June: While some think its the beginning of the end today, its a shame the Bible spoke in general terms rather than something like (The spammer called Bob Soloway SHALT RULZE DA EARTH)- I told it was in a early draft. Excuse my humour.

My little spawn of the devil (Bob Soloway) seems to be working with another spamhaus rokso class who answers the the name of 'Charles Earle IV' He lives in Florida so he must be a spammer (link)

My view on this is that it seems credible, but it is a little outside the terms of this page (i deal with Bob, and his domains, rather than the third party spam), when spammers have to get together you know its getting tough.

4 June: new page host http://sjwest01.googlepages.com/broadcastspam.html thanks to freeguestbook.de for the new guestbook

broadcastemailcorporation.org dead but introducing drum roll...... thebroadcastemailcorporation.com and Mr Schmitt is still at the hotel too.

   Domain Name: THEBROADCASTEMAILCORPORATION.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS4.DNSUSE.INFO
   Name Server: NS3.DNSUSE.INFO
   Name Server: NS2.DNSUSE.INFO
   Name Server: NS1.DNSUSE.INFO
   Status: REGISTRAR-LOCK
   EPP Status: clientDeleteProhibited
   EPP Status: clientTransferProhibited
   EPP Status: clientUpdateProhibited
   Updated Date: 02-Jun-2006
   Creation Date: 02-Jun-2006
   Expiration Date: 02-Jun-2007



http://www.networksolutions.com


Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: THEBROADCASTEMAILCORPORATION.COM

   Administrative Contact, Technical Contact:
      Schmitt, John             
      JohnSchmitt2000@hotmail.com
      35450 Yermo Road
      Yermo, CA 92398
      US
      7602541154

   Record expires on 02-Jun-2007.
   Record created on 02-Jun-2006.
   Database last updated on 4-Jun-2006 10:04:21 EDT.

   Domain servers in listed order:

   NS1.DNSUSE.INFO              61.156.8.120
   NS2.DNSUSE.INFO              211.155.132.228
   NS3.DNSUSE.INFO              71.40.152.91
   NS4.DNSUSE.INFO              71.40.152.83

Where

dig thebroadcastemailcorporation.com

; <<>> DiG 9.2.4 <<>> thebroadcastemailcorporation.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10384
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;thebroadcastemailcorporation.com. IN   A

;; ANSWER SECTION:
thebroadcastemailcorporation.com. 3600 IN A     211.155.132.206

;; AUTHORITY SECTION:
thebroadcastemailcorporation.com. 2816 IN NS    ns1.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns2.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns3.dnsuse.info.
thebroadcastemailcorporation.com. 2816 IN NS    ns4.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        38242   IN      A       61.156.8.120
ns2.dnsuse.info.        38242   IN      A       211.155.132.228
ns4.dnsuse.info.        38241   IN      A       71.40.152.83

;; Query time: 421 msec

Anti spammers of china rejoice hes hosting in China!!!

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

1 June: 'Mr Schmitt' lives in a Hotel called the Oak Tree Inn - thanks to Sky images here - 2 star hotel description link $75 per night

Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: WEB-DATESET.COM

31 May: broadcastemailcorporation.org new hosr

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24056
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;broadcastemailcorporation.org. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.org. 3600 IN  A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcorporation.org. 2776 IN  NS      ns2.virtualinc.info.

;; ADDITIONAL SECTION:
ns2.virtualinc.info.    40620   IN      A       211.155.132.228

China

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

29 May:broadcastemailcorporation.us has a fresh id record its our freind John.

Status:                               clientDeleteProhibited
Domain Status:                               clientTransferProhibited
Domain Status:                               clientUpdateProhibited
Registrant ID:                               WN-R865271575
Registrant Name:                             wujie wujie
Registrant Organization:                     wujie
Registrant Address1:                         SZ
Registrant Address2:                         SZ
Registrant City:                             SZ
Registrant State/Province:                   SZ
Registrant Postal Code:                      518000
Registrant Country:                          Bahamas
Registrant Country Code:                     BS
Registrant Phone Number:                     +86.75525651488
Registrant Facsimile Number:                 +86.75525651488
Registrant Email:                            domain@hostofchina.com
Registrant Application Purpose:              P3
Registrant Nexus Category:                   C31/BS
Administrative Contact ID:                   WN-A865271575
Administrative Contact Name:                 wujie wujie
Administrative Contact Organization:         HOSTOFCHINA
Administrative Contact Address1:             SZ
Administrative Contact Address2:             SZ1604
Administrative Contact City:                 ShenZhen
Administrative Contact State/Province:       GD
Administrative Contact Postal Code:          518000
Administrative Contact Country:              China
Administrative Contact Country Code:         CN
Administrative Contact Phone Number:         +86.75525614031
Administrative Contact Facsimile Number:     +86.75525614031
Administrative Contact Email:                domain@hostofchina.com
Administrative Application Purpose:          P3
Administrative Nexus Category:               C31/BS
Billing Contact ID:                          WN-B865271575
Billing Contact Name:                        HostOfChina.com Webhosting Domain Hostmaster
Billing Contact Organization:                HOSTOFCHINA
Billing Contact Address1:                    SZ
Billing Contact Address2:                    SZ1604
Billing Contact City:                        ShenZhen
Billing Contact State/Province:              GD
Billing Contact Postal Code:                 518000
Billing Contact Country:                     China
Billing Contact Country Code:                CN
Billing Contact Phone Number:                +86.75525614031
Billing Contact Facsimile Number:            +86.75525614031
Billing Contact Email:                       domain@hostofchina.com
Billing Application Purpose:                 P3
Billing Nexus Category:                      C31/BS
Technical Contact ID:                        WN-T865271575
Technical Contact Name:                      HostOfChina.com Webhosting Domain Hostmaster
Technical Contact Organization:              HOSTOFCHINA
Technical Contact Address1:                  SZ
Technical Contact Address2:                  SZ1604
Technical Contact City:                      ShenZhen
Technical Contact State/Province:            GD
Technical Contact Postal Code:               518000
Technical Contact Country:                   China
Technical Contact Country Code:              CN
Technical Contact Phone Number:              +86.75525614031
Technical Contact Facsimile Number:          +86.75525614031
Technical Contact Email:                     domain@hostofchina.com
Technical Application Purpose:               P3
Technical Nexus Category:                    C31/BS
Name Server:                                 NS8.HOSTOFCHINA.COM
Name Server:                                 NS7.HOSTOFCHINA.COM
Created by Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Last Updated by Registrar:                   WEB COMMERCE COMMUNICATIONS, LTD.
Domain Registration Date:                    Mon May 22 03:49:13 GMT 2006
Domain Expiration Date:                      Mon May 21 23:59:59 GMT 2007
Domain Last Updated Date:                    Mon May 22 19:37:47 GMT 2006

27 May: Dead hosts:

http://217.74.161.86/broadcastemail/ (russia)
http://62.193.238.142/broadcastemail/ (France)
http://62.193.224.161/broadcastemail/ (France)


and ?? ????
newportcorporation.net seems dead - or bob 'forgot' to pay the bill - I don't speak Chinese - link looks like a login window. greylines in nanae reports that cyberservices.com (a bob domain mentioned here) is dead or on the move.

26 May: ev1.net refuse to serve broadcastemailcorporation.us

25 May: Meet broadcastemailcorporation.us guess where too

 whois broadcastemailcorporation.us
Domain Name:                                 BROADCASTEMAILCORPORATION.US
Domain ID:                                   D10132463-US
Sponsoring Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Domain Status:                               clientDeleteProhibited
Domain Status:                               clientTransferProhibited
Domain Status:                               clientUpdateProhibited
Registrant ID:                               WN-R865271575
Registrant Name:                             wujie wujie
Registrant Organization:                     wujie
Registrant Address1:                         SZ
Registrant Address2:                         SZ
Registrant City:                             SZ
Registrant State/Province:                   SZ
Registrant Postal Code:                      518000
Registrant Country:                          Bahamas
Registrant Country Code:                     BS
Registrant Phone Number:                     +86.75525651488
Registrant Facsimile Number:                 +86.75525651488
Registrant Email:                            domain@hostofchina.com
Registrant Application Purpose:              P3
Registrant Nexus Category:                   C31/BS
Administrative Contact ID:                   WN-A865271575
Administrative Contact Name:                 wujie wujie
Administrative Contact Organization:         HOSTOFCHINA
Administrative Contact Address1:             SZ
Administrative Contact Address2:             SZ1604
Administrative Contact City:                 ShenZhen
Administrative Contact State/Province:       GD
Administrative Contact Postal Code:          518000
Administrative Contact Country:              China
Administrative Contact Country Code:         CN
Administrative Contact Phone Number:         +86.75525614031
Administrative Contact Facsimile Number:     +86.75525614031
Administrative Contact Email:                domain@hostofchina.com
Administrative Application Purpose:          P3
Administrative Nexus Category:               C31/BS
Billing Contact ID:                          WN-B865271575
Billing Contact Name:                        HostOfChina.com Webhosting Domain Hostmaster
Billing Contact Organization:                HOSTOFCHINA
Billing Contact Address1:                    SZ
Billing Contact Address2:                    SZ1604
Billing Contact City:                        ShenZhen
Billing Contact State/Province:              GD
Billing Contact Postal Code:                 518000
Billing Contact Country:                     China
Billing Contact Country Code:                CN
Billing Contact Phone Number:                +86.75525614031
Billing Contact Facsimile Number:            +86.75525614031
Billing Contact Email:                       domain@hostofchina.com
Billing Application Purpose:                 P3
Billing Nexus Category:                      C31/BS
Technical Contact ID:                        WN-T865271575
Technical Contact Name:                      HostOfChina.com Webhosting Domain Hostmaster
Technical Contact Organization:              HOSTOFCHINA
Technical Contact Address1:                  SZ
Technical Contact Address2:                  SZ1604
Technical Contact City:                      ShenZhen
Technical Contact State/Province:            GD
Technical Contact Postal Code:               518000
Technical Contact Country:                   China
Technical Contact Country Code:              CN
Technical Contact Phone Number:              +86.75525614031
Technical Contact Facsimile Number:          +86.75525614031
Technical Contact Email:                     domain@hostofchina.com
Technical Application Purpose:               P3
Technical Nexus Category:                    C31/BS
Name Server:                                 NS8.HOSTOFCHINA.COM
Name Server:                                 NS7.HOSTOFCHINA.COM
Created by Registrar:                        WEB COMMERCE COMMUNICATIONS, LTD.
Last Updated by Registrar:                   WEB COMMERCE COMMUNICATIONS, LTD.
Domain Registration Date:                    Mon May 22 03:49:13 GMT 2006
Domain Expiration Date:                      Mon May 21 23:59:59 GMT 2007
Domain Last Updated Date:                    Mon May 22 19:37:47 GMT 2006

 dig broadcastemailcorporation.us

; <<>> DiG 9.2.4 <<>> broadcastemailcorporation.us
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23102
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
broadcastemailcorporation.us.  IN      A

;; ANSWER SECTION:
broadcastemailcorporation.us. 43200 IN  A       66.98.168.41

;; AUTHORITY SECTION:
broadcastemailcorporation.us. 43200 IN  NS      ns7.hostofchina.com.
broadcastemailcorporation.us. 43200 IN  NS      ns8.hostofchina.com.

;; ADDITIONAL SECTION:
ns7.hostofchina.com.    43200   IN      A       66.98.168.41
ns8.hostofchina.com.    43200   IN      A       66.98.168.151

But its hosted in America rare! Say hi to ev1.net
OrgName:    Everyones Internet 
OrgID:      EVRY

Address:    390 Benmar
Address:    Suite 200
City:       Houston
StateProv:  TX
PostalCode: 77060
Country:    US

NetRange:   66.98.128.0 - 66.98.255.255 
CIDR:       66.98.128.0/17 
NetName:    EVRY-BLK-14
NetHandle:  NET-66-98-128-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.EV1.NET
NameServer: NS2.EV1.NET
Comment:    
RegDate:    2003-07-02
Updated:    2004-02-06

RTechHandle: RW172-ARIN

RTechName:   Williams, Randy 
RTechPhone:  +1-713-579-2850
RTechEmail:  admin@ev1.net 

OrgAbuseHandle: ABUSE477-ARIN
OrgAbuseName:   ABUSE 
OrgAbusePhone:  +1-713-579-2850
OrgAbuseEmail:  abuse@ev1.net

OrgNOCHandle: NOC1445-ARIN
OrgNOCName:   NOC 
OrgNOCPhone:  +1-713-579-2850
OrgNOCEmail:  noc@ev1.net

OrgTechHandle: RW172-ARIN
OrgTechName:   Williams, Randy 
OrgTechPhone:  +1-713-579-2850
OrgTechEmail:  admin@ev1.net

OrgTechHandle: VST3-ARIN
OrgTechName:   Stinson, Valarie 
OrgTechPhone:  +1-713-579-2850
OrgTechEmail:  admin2@ev1.net

# ARIN WHOIS database, last updated 2006-05-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

24 May: I have a guestbook spammer selling some drug or other who likes the new design - well its a compliment from the other side.

23 May: Another spam from a related Domain hes spamming from Brazil, - Bob may think he has list washed us, but there are other domains i care for, and his efforts to stay under my radar are only partially successfull,

Most of this pages validates as xhtml 1.0 transitional - any bugs are the additional shit yahoo sticks on the page, Objective is to thank 'Circle of Friends' for stealing the page design concept - hopefully the css and html should not give internet explorer users any gpf's , and perhaps run a spell check on the page soon (a major task).

Comments welcome if it does murder Internet explorer in use, not much of a 'windows' shop. As to the size of quarter pounder not sure what i can do. I am advised we could iframe and do sections in other html files, but that might break strict xhtml in the future.

I'd not image that i'd have an 164 indictment of Bob Soloway as a pet hobby, but 'a dogs not for christmas its for life.' As those animal rights nutcases tell us. - I need a vet to put down 'Bob'. Its a shame nobody in washington state in authority wants to do anything and rather pass him about.

As Shakespear wrote (or stole): Revenge is dish best served cold.

21 May: Meet John Schmitt - Bob Soloway it seems

   Domain Name: WEB-DATESET.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com
   Name Server: NS4.DNSUSE.INFO
   Name Server: NS3.DNSUSE.INFO
   Name Server: NS2.DNSUSE.INFO
   Name Server: NS1.DNSUSE.INFO
   Status: REGISTRAR-LOCK
   EPP Status: clientDeleteProhibited
   EPP Status: clientTransferProhibited
   EPP Status: clientUpdateProhibited
   Updated Date: 19-Feb-2006
   Creation Date: 19-Feb-2006
   Expiration Date: 19-Feb-2007

http://www.networksolutions.com


Registrant:
Schmitt, John
   35450 Yermo Road
   Yermo, CA 92398
   US

   Domain Name: WEB-DATESET.COM

   Administrative Contact, Technical Contact:
      Schmitt, John             JohnSchmitt2000@hotmail.com
      35450 Yermo Road
      Yermo, CA 92398
      US
      7602541154

   Record expires on 19-Feb-2007.
   Record created on 19-Feb-2006.
   Database last updated on 21-May-2006 19:08:05 EDT.

   Domain servers in listed order:

   NS1.DNSUSE.INFO              61.156.8.120
   NS2.DNSUSE.INFO              211.155.132.228
   NS3.DNSUSE.INFO              71.40.152.91
   NS4.DNSUSE.INFO              71.40.152.83


dig web-dateset.com

; <DiG 9.2.4 > web-dateset.com
;; global options:  printcmd
;; Got answer:
;; -> HEADER - opcode: QUERY, status: NOERROR, id: 18156
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2

;; QUESTION SECTION:
;web-dateset.com.               IN      A

;; ANSWER SECTION:
web-dateset.com.        3600    IN      A       211.155.132.206

;; AUTHORITY SECTION:
web-dateset.com.        43017   IN      NS      ns4.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns1.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns2.dnsuse.info.
web-dateset.com.        43017   IN      NS      ns3.dnsuse.info.

;; ADDITIONAL SECTION:
ns1.dnsuse.info.        43017   IN      A       61.156.8.120
ns4.dnsuse.info.        43017   IN      A       71.40.152.83

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

China then Meet drum roll http://www.broadcastemailcorporation.org/
email advertise your web site to 8,000,000 people for free
http://www.web-dateset.com/hello.html

this non-commercial offer is solely intended for non-commercial 
charities only.  press charity info option on site for details.
this email offer is not a commercial service for sale/lease/trade.

only 8 million (thats not many) and its free remember they all opted in. Spamcop report in the section.
Domain ID:D122755898-LROR
Domain Name:BROADCASTEMAILCORPORATION.ORG
Created On:19-May-2006 22:13:31 UTC
Last Updated On:19-May-2006 22:13:35 UTC
Expiration Date:19-May-2007 22:13:31 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:40448377-NSI
Registrant Name:John Schmitt
Registrant Street1:35450 Yermo Road
Registrant Street2:
Registrant Street3:
Registrant City:Yermo
Registrant State/Province:CA
Registrant Postal Code:92398
Registrant Country:US
Registrant Phone:+1.7602541154
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:JohnSchmitt2000@hotmail.com
Admin ID:40448377-NSI
Admin Name:John Schmitt
Admin Street1:35450 Yermo Road
Admin Street2:
Admin Street3:
Admin City:Yermo
Admin State/Province:CA
Admin Postal Code:92398
Admin Country:US
Admin Phone:+1.7602541154
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:JohnSchmitt2000@hotmail.com
Tech ID:40448377-NSI
Tech Name:John Schmitt
Tech Street1:35450 Yermo Road
Tech Street2:
Tech Street3:
Tech City:Yermo
Tech State/Province:CA
Tech Postal Code:92398
Tech Country:US
Tech Phone:+1.7602541154
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:JohnSchmitt2000@hotmail.com
Name Server:NS2.DNSUSE.INFO
Name Server:NS3.DNSUSE.INFO
Name Server:NS1.DNSUSE.INFO
Name Server:NS4.DNSUSE.INFO
Where ?
dig broadcastemailcorporation.org

;  DiG 9.2.4  broadcastemailcorporation.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER opcode: QUERY, status: NOERROR, id: 26375
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 3

;; QUESTION SECTION:
;broadcastemailcorporation.org. IN      A

;; ANSWER SECTION:
broadcastemailcorporation.org. 3600 IN  A       211.155.132.206

;; AUTHORITY SECTION:
broadcastemailcorporation.org. 768 IN   NS      ns2.virtualinc.info.

;; ADDITIONAL SECTION:
ns2.virtualinc.info.    770     IN      A       211.155.132.227
ns2.virtualinc.info.    770     IN      A       211.155.132.228
ns2.virtualinc.info.    770     IN      A       211.155.132.206
Where China silly
inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-AP
tech-c:       HL2-AP
status:       ALLOCATED PORTABLE
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Lixian He
nic-hdl:      LH43-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Hongde Luo
nic-hdl:      HL2-AP
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      211.155.128.0 - 211.155.143.255
netname:      HDBMAN
country:      CN
descr:        Beijing Haidian Broadcast &  TV Netowrk Information Co. Ltd
descr:        Haidian District, Beijing, China 100086
admin-c:      LH43-CN
tech-c:       HL2-CN
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-HDBMAN
changed:      shenzhi@cnnic.cn 20050629
changed:      ipas@cnnic.net.cn 20050711
changed:      ipas@cnnic.net.cn 20051102
source:       CNNIC

person:       Lixian He
nic-hdl:      LH43-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Hongde Luo
nic-hdl:      HL2-CN
e-mail:       hongde@hdcatv.com
address:      Bldg. #10, Zijin Zhuangyuan, Suzhou Street
address:      Haidian District, Beijing, China 100086
phone:        +86-10-82672299
fax-no:       +86-10-82672299
country:      CN
changed:      ipas@cnnic.net.cn 20030805
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

20 May: http://www.broadcastemailingcorp.cn/ is dead The (second hand news) French website is hijacked from these people http://62.193.224.161/broadcastemail/ = http://cnpmusic.com/broadcastemail/

Parsing input: cnpmusic.com
Host cnpmusic.com (checking ip) = 62.193.224.161
host 62.193.224.161 (getting name) = wpc0225.amenworld.com.
Using abuse net on abuse@amenworld.com
abuse net amenworld.com = postmaster@amen.fr, abuse@amen.fr
http://support.amenworld.com/contact/information.php

Registrant: ( http://www.cnpmusic.com )
CNPMUSIC
119 Chemin Des Vergers
BAR SUR LOUP 06620
FR

Domain Name: CNPMUSIC.COM

Administrative Contact:
CNPMUSIC e.boell@free.fr
119 Chemin Des Vergers
BAR SUR LOUP 06620
FR
+33493429679

Technical Contact:
AMEN.FR internic@amen.fr
12-14, Rond Point des Champs Elysees
Paris, France 75008
FR
+33 892 55 66 77

Record expires on 29-Dec-2006.
Record created on 29-Dec-2000.
Database last updated on 15-May-2006 18:07:43 EDT.
http://www.cnpmusic.com/index2.php?page=contact
dig newportcorporation.net
;; QUESTION SECTION:
;newportcorporation.net.                IN      A

;; AUTHORITY SECTION:
newportcorporation.net. 60      IN      SOA     peanutmail.newpeanut.idc. admin.newpeanut.idc. 16 900 600 86400 3600
 
 whois newportcorporation.net

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.


   Domain Name: NEWPORTCORPORATION.NET
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS2.ORAY.NET
   Name Server: NS1.ORAY.NET
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 10-Apr-2006
   Creation Date: 10-Apr-2006
   Expiration Date: 10-Apr-2007

Registrant:
         WANG nbcm@163.com +86.75557429836
         WANG
         JINGZHOU
         JINGZHOU,HUBEI,CHINA 434010


Domain Name:newportcorporation.net
Record last updated at 2006-04-10 04:37:05
Record created on 2006/4/10
Record expired on 2007/4/10


Domain servers in listed order:
         ns1.oray.net    ns2.oray.net

Administrator:
         JINGZHOU
         JINGZHOU
HUBEI,
CHINA
 434010

         name:(WANG)
mail:(nbcm@163.com) +86.75557429836
         WANG
Technical Contactor:
         890,North Tianhe Road
         Guangzhou
Guangdong,
CHINA
 510620

         name:(RadiumHuang)
mail:(radium@vavic.com) +86.2087568999
         Vavic Network Technology Co.,Tld.
Billing Contactor:
         890,North Tianhe Road
         Guangzhou
Guangdong,
CHINA
 510620

         name:(RadiumHuang)
mail:(radium@vavic.com) +86.2087568999
         Vavic Network Technology Co.,Tld.

New page design, Ive tried to stop the tables from sucking as much but without losing some of the detail its not going to print that well. Google page each might not work either, Bable fish not test ok either it might complain theres too much on the page. xhtml will come

14 May: Quiet here (no Bob spam) An interesting url from the the BBB.org http://www.thebbb.org/commonreport.html?bid=22009796

Marketplace Experience 

Based on BBB files, this company has an unsatisfactory record BBB Definition:

unsatisfactory record - A company has an "unsatisfactory business performance record" with the Bureau is based on the experiences reflected in BBB files. This file condition results when the company has failed to resolve or respond to complaints, repeatedly failed to respond or resolve issues in a timely manner, failed to resolve the underlying issues for a pattern BBB Definition: pattern - More than 2 complaints involving the same allegations usually within 12 months that are significant in relation to the company's size and volume of business. of complaints, failed to honor their commitment to mediate or arbitrate disputes or honor mediated agreements or arbitrated decisions, failed to substantiate, modify or discontinue false advertising claims that are challenged by the BBB, or failed to discontinue unauthorized use of the BBB name and logo, a Federally protected trademark. with the
Bureau due to failure to respond to one or more complaints and or two or
more otherwise unresolved BBB Definition:
unresolved - The company failed to resolve the complaint issues. complaints.

more news from http://blog.opsan.com/archive/2005/07/29/1148.asp new domain for our cheeky spammer (its great to be a chinese citizen)

Parsing input: http://www.broadcastemailingcorp.cn/
Host www.broadcastemailingcorp.cn (checking ip) = 218.244.140.39 > abuse@hichina.com

Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????(??)????
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-05-11 11:26
Expiration Date: 2007-05-11 11:26
inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-AP
tech-c: ZX163-AP
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Zhang Xiangdong
nic-hdl: ZX103-AP
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: APNIC

inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-CN
tech-c: ZX163-CN
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Zhang Xiangdong
nic-hdl: ZX103-CN
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-CN
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: CNNIC

> How those Chinese hate spam ....

Blonde reports

"The person that returned my call was friendly until I explained I'd not received my package, then immediately turned kinda rude. Told me to email support at newportcorp@mailshack.com.

Then it occured to me that the number on the caller id was Robert Soloway, (I'm a little slow catching on sometimes) so I asked the guy why the number was listed as Robert Soloway instead of Newport Broadcasting. He hung up on me."

> And rude to a customer .... - oh my He seems to be using http://62.193.224.161/broadcastemail/ (old style site - FRANCE) for specials, These guys 62.193.224.0 - 62.193.239.255 AMEN-EUROPE-NETWORK abuse@amenworld.com seem to like him (2nd ip)

inetnum: 62.193.224.0 - 62.193.239.255 
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
descr: For Spam/Abuse requests please send mail to abuse@amenworld.com
country: FR
admin-c: AN1108-RIPE
tech-c: AN910-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AMEN-MNT
mnt-lower: AMEN-MNT
mnt-routes: AMEN-MNT
rev-srv: ns1.amenworld.com
rev-srv: ns2.amenworld.com
source: RIPE # Filtered
role: AMEN NOC 
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
e-mail: abuse@amen.fr
nic-hdl: AN910-RIPE
admin-c: JD2263-RIPE
tech-c: AN1018-RIPE
tech-c: AN1019-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered
person: Gorun RENAULT 
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
fax-no: +33 1 40 87 76 89
e-mail: gorun.renault@amen.fr
nic-hdl: AN1108-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered
% Information related to '62.193.224.0/22AS28677'
route: 62.193.224.0/22 
descr: AMEN Networks
origin: AS28677
mnt-by: AMEN-MNT
source: RIPE # Filtered

1 May: April was 'interesting' Three Soloway hosts down

http://210.7.70.150/broadcastemail/ (india) 
http://broad.1122.ish.cn/
jzgx.nydns.cn/

I expect some movement on Bob 'bulking up' on hostnames soon - the india host stopped responding after two months - seems rather spam friendly that indian isp , that is unless the rumours about spammer Ralsky come true. Our friends the French still seem to be clueless but then again the french with computers seems plain strange.

I will continue to mirror this page just in case a repeat of April happens again.

22 April: Funny things a happening and not just here

Just in case you think I'm the only one complaining or documenting mr soloway I'm not - blog.opsan.com (mentioned before) got an honourable mention in a recent Bob Soloway spam run as an 'impediment to him spamming' - the site above has a proper comment system rather than my sorry yahoo guestbook. Despite this being a boring webpage i try and verify the info i get, I got an above average page hit rate to in April over easter, make of that what you will.

From that site: Acebirddog reports that Bobs 'spam me forever lists' - have been sold to he thinks to phishers who if you dont know are those very nice people who ask you for your id just before they raid your bank account - A casual glance at the spam I saved (all three experiments 'evidence') show that I've won the lottery, had 419 scams etc although low in number compared to drugs and software spam I got so I'm sure pointing a finger to Bob Soloway could not be too hard .

While I'd not say he did (having not seen it), I'm sure he could have, alas my spam filtering is vicious, and with Max (mentioned elsewhere) not helping I pass this bit of info on. Effective sales leads are targeted to people, just becuase you have an contact means there is a duty of care how you treat it - for instance you would not sell the list of mafia informers to the mafia.

The 'duty of care' never existed as far as I'm concerned - client case studies whatever (and not written by me) can be found throughout this document.

20 April: New Chinese domain reported hosting Mr Spam (no China really is 'anti spam') Mirror of this page also setup, If China is 'anti spam' then G.W Bush, and all members of the Chinese communist party and the new german Pope are homosexuals.

Couple of Chinese terminations reported (or did Bob fail to pay the bill ?)

Meet jzgx.nydns.cn (thanks to Tomez)

nydns.cn
Domain Name: nydns.cn
ROID: 20050414s10001s06775213-cn
Domain Status: ok
Registrant Organization: 楠羽网络科技公司
Registrant Name: 王洪羽
Administrative Email: why_119@tom.com
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:ns.xinnetdns.com
Name Server:ns.xinnet.cn
Registration Date: 2005-04-14 16:12
Expiration Date: 2007-04-14 16:12

inetnum: 60.16.0.0 - 60.23.255.255 
netname: CNCGROUP-LN
country: CN
descr: CNCGROUP Liaoning province network
admin-c: CH455-AP
tech-c: GZ84-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040416
changed: hm-changed@apnic.net 20060124
source: APNIC
route: 60.16.0.0/13 
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC
role: CNCGroup Hostmaster 
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC
person: Guangyu Zhan 
nic-hdl: GZ84-AP
e-mail: abuse@online.ln.cn
address: DATA Communication Bureau of Liaoning Province,China
address: 38 Lianhe Road,Dadong District Shenyang 110044,China
phone: +86-24-22800096
fax-no: +86-24-22800368
country: CN
changed: zhangy@lntelecom.com 20030122
mnt-by: MAINT-CNCGROUP-LN
source: APNIC

15 April: We where popular the last couple of days

traffic spike

Alas geocities stats are not very good but it seems that 26 browsers tried over and over again to access this page for every hour, - So I'm assuming it Bob and his 'army' of spambot pc's. I see no refering url or page of entry so perhaps i can now infer to you that Bob is ddosing geocities now ?.

Does that mean his geocites redirect days are over ? time will tell

Geocities got fed up and blocked the ip's it seems.

12 April: No eu activity activity yet, quite on the spam front too.

Tomez (report to nanae) discovers newportcorp.cn - guess where

inetnum: 222.208.0.0 - 222.215.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China

Let see whois at whois.cnnic.net.cn:

Domain Name: newportcorp.cn
ROID: 20060330s10001s47212991-cn
Domain Status: ok
Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????????????
Name Server: dns9.hichina.com [218.30.103.100]
Name Server: dns10.hichina.com [218.244.143.64]
Registration Date: 2006-03-30 11:21
Expiration Date: 2007-03-30 11:21

See also:
only4testinter.vicp.net IP 222.210.196.86
ns2.vicp.net [210.51.180.211]
ns1.vicp.net [202.105.21.217]

only4testinter.vicp.net has no MX records -> vicp.net has no MX records

Let see whois:
Registrar: ONLINENIC, INC.

Registrant:
ORAY Network Resource Co., Ltd. domainreg@oray.net +86.2061073333
Vavic Network Technology, Inc. 1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

Domain Name: vicp.net
Record last updated at 2006-02-16 23:44:34
Record created on 2001/8/15
Record expired on 2011/8/15

Domain servers in listed order:
ns1.vicp.net ns2.vicp.net

Administrator:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg@oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

Technical Contactor:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg[]oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655 P.R.C
Guangzhou,Guangdong,CN 510655

Billing Contactor:
Name-- Vavic Network Technology, Inc.
EMail-: (domainreg@oray.net)
tel --: +86.2061073333
org: Vavic Network Technology, Inc.
1F Office,NO 15,Jiangong Road,Tianhe S& T Zone Guangzhou,510655P.R.C
Guangzhou,Guangdong,CN 510655

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/936e3d380c28c656

And see also DNS dnsfamily.com used by Soloway for
nebc.dazh.cn IP 220.166.64.52 (at CHINANET-SC)

ns2.dnsfamily.com [218.107.216.80]
(at CNCNET-CN / dns-xm1.fjxm.cncnet.net)
ns1.dnsfamily.com [218.85.132.246]
(at CHINANET-FJ / dns.fz.fj.cn)

Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: dnsfamily.com

DNS Servers:
NS1.4EVERDNS.COM 218.5.77.19
NS2.4EVERDNS.COM 61.151.252.240
NS1.DNSFAMILY.COM 218.85.132.246
NS2.DNSFAMILY.COM 218.107.216.80

Registrant:
huiyu chen
xiamen
361004

Administrative Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Technical Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Billing Contact:
huiyu chen
huiyu chen
xiamen
xiamen Fujian 361004
China
tel: 86 596 6637835
fax: 86 596 6637835
kittyyuc@hotmail.com

Registration Date: 2006-01-09
Update Date: 2006-03-02
Expiration Date: 2007-01-09

Primary DNS: ns1.DNSFAMILY.com 218.85.132.246
Secondary DNS: ns2.DNSFAMILY.com 218.107.216.80

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1a28a5ee6aa40155

Credit to Tomez for the above,

Admin note to any spammers - comment spam to the guestbook feature will not help your seo ratings, it is not displayed. - so if you hired an seo spammer (better results in Google for 5 seconds) and you wonder why nobody is visiting you now know why.

Valid comments eg dealing with Bob will not be displayed either they will be added to this page. tips are anon and welcome..

3 April: No website termination to log recently, which allows to me to make a point about France and there employment issues (in the news) if a french isp cannot terminate a well known rokso spammers site (i'm not asking for miracles, and note i dont make those demands on the spam friendliness of India, and China isp's) - while those sites might not currently spamvertised (see 29 march entry for the current host with the most), its still Bob Soloway.

So the question is there nobody at abuse@amenworld.com who is sufficiently educated enough to kill the site ? it seems there is work in france but nobody seems to

a know how to do it,
or
b or is paid to do it.

They've had some spamcop reports too.

admin note: new section for Domain owner spam analysis that Bob should send to me - why ? I'm packing up the spam statistical analysis 'experiments'. well when you go document 700 spams + (a 5mb webpage) and you will know the answer, alas Bob cannot celebrate, I'm still going to continue writing this page.

1 April: This is no joke but Bob Soloway spammed me! lucky me - hes using flickr.com too

http://static.flickr.com/51/113583781_17411093f6_m.jpg 

Lots of other garbage too, once on, never off with our Bob

29 March: - eight days of nothing - then new (broad.1122 account ?) on host http://broad.1122.ish.cn/ (China)

; <<>> DiG 9.2.4 <<>> broad.1122.ish.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10284
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broad.1122.ish.cn. IN A

;; ANSWER SECTION:
broad.1122.ish.cn. 3094 IN A 60.191.23.122

whois ish.cn
Domain Name: ish.cn
ROID: 20040920s10001s02686110-cn
Domain Status: ok
Registrant Organization: 杭州森蓝计算机网络有限公司
Registrant Name: 钱永强
Administrative Email: myqyq@yahoo.com.cn
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:ns.xinnetdns.com
Name Server:ns.xinnet.cn
Registration Date: 2004-09-20 09:12
Expiration Date: 2006-09-20 09:12

60.191.23.96 - 60.191.23.127 
netname: HANGZHOU-WANGTONG-LTD
country: CN
descr: HangZhou WangTong Technology CO.,LTD
descr:
admin-c: YX315-AP
tech-c: CH122-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20050429
mnt-by: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC
role: CHINANET-ZJ Hangzhou 
address: No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country: CN
phone: +86-571-85157929
fax-no: +86-571-85102776
e-mail: anti_spam@mail.hz.zj.cn
trouble: send spam reports to anti_spam@mail.hz.zj.cn
trouble: and abuse reports to anti_spam@mail.hz.zj.cn
trouble: Please include detailed information and times in UTC
admin-c: CH54-AP
tech-c: CH54-AP
nic-hdl: CH122-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
person: YuanDong Xu 
nic-hdl: YX315-AP
e-mail: dkhxtb@mail.hz.zj.cn
address: Floor 17th,ChangDiHuoJu Mansion,No.259 WenSan Road,Hangzhou,Zhejiang.Postcode:310000
phone: +86-571-85511187
country: CN


21 March: A short analysis of new website (non techy), lets discuss opting out first.

first question is: how did I 'opt' to get Bob spam ? unknown ? i have my ideas.
second question is: how do i know what email list(s) I'm on ?
third question is: will i get more spam after removing myself ? - probably

Now: Moving on to the success stories of NIM - It seems that many of the spam claims made by Bob have been removed from the new website for instance uskia et all, and he is urging his spammy clients to donate to The Salvation Army,Doctors Without Borders,Mercy Corps and not forgetting Child Help USA. - Perhaps what this means is when Bob mentions a donation was made in a spam email/website - he did not contribute but somebody else did ?

I wonder what happened to the 'success' (found on the old website, and in his spam emails) the stories of

america remembers: killed in action - notes: think is http://usakia.org/ they never replied to my query either.
foundation, his grace: evangelistic ministries - notes: ?
north valley aikikai: aikido education academy - notes: ? Information: (760) 788-3267 or www.ramona-aikikai.com (dead url)

lars ranch: abused children's sanctuary notes: ? the neverland moonwalking dance school ?

musici europae: classic music foundation notes: ? husband and wife duo of Tony Brychta and
Marianna Alaberdova ? from Google cache

coleman broadcasting: youth education network . notes: Kansas somewhere, can only find a address,
Coleman Broadcasting Network Po Box 300165,Kansas City, MO 64130 no url a phone of (816) 861-378seven

Perhaps charity spam email does not work after all ?

I note (technical) he is using a counter script from rapidcounter.com

20 March: Images of Bob (our spammer comes out of the the closet) from the new website ? see below

the ceo techy

Site seems to be dead http://advertising.voddo.cn/ (China) - see if they stay down

Leaves France, China, and India up

The remaining Chinese site (http://broad.ztjm.com/) has a new website see:

new website

I like the spam to be numero 1 spammer " NEBC Founder Ranked as The #1 Broadcast Emailer in The World by Wikipedia; The World's Largest Online Encyclopedia. " Class! - Bet Forrester like there name being used to.

The site needs more investigation but Im sure the owner of poochieheaven.com would take issue for the satisfaction cliam.

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. 
Well now I have nothing but complaints about spam and am receiving virus' in my email all the time.
I asked for a refund but they said no.
Still I get complaints about emails being sent out after I told them to stop sending them.
So I wonder what can we do about this.
My business has slowed so much and I think my site's reputation is at stake.

Other 'recomendations' are here.

India, France have old website designs which looked like:

old design

19 March: 'e' larts me to France - bonjour to http://62.193.238.142/broadcastemail/

inetnum: 62.193.224.0 - 62.193.239.255 
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
descr: For Spam/Abuse requests please send mail to abuse@amenworld.com
country: FR
admin-c: AN1108-RIPE
tech-c: AN910-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AMEN-MNT
mnt-lower: AMEN-MNT
mnt-routes: AMEN-MNT
rev-srv: ns1.amenworld.com
rev-srv: ns2.amenworld.com
source: RIPE # Filtered
role: AMEN NOC 
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
e-mail: abuse@amen.fr
nic-hdl: AN910-RIPE
admin-c: JD2263-RIPE
tech-c: AN1018-RIPE
tech-c: AN1019-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered

Humour - yahoos guestbook alerter email is being deemed as spam by yahoo webmail - so before anybody pays (ahem spams) to have there mail put in our inboxes instead of bul - which aol are going to do - its nice to know that parts of yahoo wont be paying it. Thats good enough for me.

Admin note: Tables differentiated between our spam, and spamcop reports

15 March: http://62.123.150.18/broadcastemail/ (Italy) down after six days. What a list of infected pc's retail/civil defence/wall stree/china If Bob Soloways using it must be legit....

India (very spammy) / China / and Russia current homes for bobs 'webhosting'.

14 March: http://217.40.152.75/broadcastemail - England is down

new section web hosts up

13 March: advertising.voddo.cn is still up - not down the tour continues - Danke for the cc on the list of redirects at http://blog.opsan.com/archive/2005/07/29/1148.aspx

Lets have a Bob world spam tour logo.

World Tour logo

12 March: Confusion cleared up - spamcop reports added - bob down to one geocities url in those reports, (not the three one expects) 1st senderbase infected pc used by Bob identifed too.

but now one green box to add too....

Bobs in England now at http://217.40.152.75/broadcastemail/ - man can he Globetrot

Of note here to any people still thinking - Bob seems a 'genuine businessman' - perhaps you might ask why is he ordering english broadband internet connections when his office is not available to get english (european) broadband from British Telecom.

His address Executive Residence, Inc. 1200 Western Avenue Room 17E Seattle, Washington - which Im sure the english broadband checker at bt.com would say something along the lines of 'no service possible'.

My thanks to 'e'

% Information related to '217.40.152.72 - 217.40.152.79'
inetnum: 217.40.152.72 - 217.40.152.79 
netname: Mary-MEADOWS-000000006186527
descr: BT-ADSL
remarks: Please send abuse notification to abuse@btopenworld.com
country: GB
admin-c: DY128-RIPE
tech-c: DY128-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: BTNET-MNT
mnt-lower: BTNET-MNT
source: RIPE # Filtered
person: Robin Griffith 
remarks: *******************************************************
remarks: * Please send abuse reports to abuse@btopenworld.com *
remarks: *******************************************************
address: Openworld
address: British Telecommunications plc
address: 81 Newgate Street
address: London
address: EC1A 7AJ
address: UK
phone: +44 1473 647774
abuse-mailbox: abuse@btopenworld.com
nic-hdl: DY128-RIPE
mnt-by: BTNET-MNT
source: RIPE # Filtered
% Information related to '217.32.0.0/12AS2856'
route: 217.32.0.0/12 
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
source: RIPE # Filtered

10 March:

update: I'm getting confused

where back in in Italy (last there 4th March) on http://62.123.150.18/broadcastemail/

inetnum: 62.149.192.0 - 62.149.223.255 
netname: TECHNORAIL-NET
descr: Technorail srl
descr: Internet Service and Access Provider
country: IT
admin-c: SC279-RIPE
tech-c: SC279-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
person: Stefano Cecconi 
address: Aruba S.p.A.
address: Piazza Garibaldi 8
address: 52010 soci (AR)
phone: +39 0575 51571
fax-no: +39 0575 561831
e-mail: hostmaster@technorail.com
nic-hdl: SC279-RIPE
source: RIPE # Filtered
% Information related to '62.149.128.0/17AS31034'
route: 62.149.128.0/17 
descr: Technorail S.r.l. - Aruba.it
origin: AS31034
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered

New domain http://advertising.voddo.cn/ in China, 'E' reports that czech is down, that leaves China, and India up I need a traffic light system as to what is up, and how long it was up views please. - but now on with the new

Domain Name: voddo.cn
ROID: 20060223s10001s45519825-cn
Domain Status: ok
Registrant Organization: 苏风
Registrant Name: 苏风
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 创联万网国际信息技术(北京)有限公司
Name Server:dhserver.sharella.com
Name Server:dhserver2.sharella.com
Registration Date: 2006-02-23 13:45
Expiration Date: 2007-02-23 13:45

;; ANSWER SECTION:
voddo.cn. 60 IN A 218.88.45.202

Which is our anti-spam friends at Chinanet

inetnum: 218.88.0.0 - 218.89.255.255 
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC
person: Chinanet Hostmaster 
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051212
mnt-by: MAINT-CHINANET
source: APNIC
person: Xiaodong Shi 
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC

6 March: Spamcop reports added to respective sections, Its seems safe to say that Bob 'loves' Trojan.Spybot, a song too here (thanks Basault) - if you want it removed its no problem

4 March: Hell Im getting Soloway Jetlag! - imagine if i got airmiles ...

India and Czech now, Poland reportely 'dead' - Thanks 'E' -

sleazy countries 'hosting' Bob websites are still up -

Hi India http://210.7.70.150/broadcastemail/ welcome to the club Bishwo Chhetri & DIRECT INTERNET LTD.

inetnum: 210.7.64.0 - 210.7.95.255 
netname: DIL
descr: DIRECT INTERNET LTD.
descr: 42 Dakshineshwar
descr: 10 Hailey Road
descr: New Delhi - 110 001
country: IN
admin-c: YK161-AP
tech-c: BC176-AP
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-india.com
mnt-by: APNIC-HM
mnt-lower: MAINT-IN-DIL
changed: hm-changed@apnic.net 20020517
status: ALLOCATED PORTABLE
source: APNIC
person: Yashpal Kapoor 
nic-hdl: YK161-AP
e-mail: ykapoor@primus-direct.com
address: 42/10, Hailey Road,
address: New Delhi - 110001
phone: +91.11.2373.7270
fax-no: +91.11.2373.7280
country: IN
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-direct.com
changed: bchhetri@primus-direct.com 20031001
mnt-by: MAINT-IN-DIL
source: APNIC
person: Bishwo Chhetri 
nic-hdl: BC176-AP
e-mail: bchhetri@primus-direct.com
address: 274, Captain Gaur Marg,
address: Sriniwaspuri, New Delhi
address: 110 065, India.
phone: +91-11-2692-4281
fax-no: +91-11-2692-4278
country: IN
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-direct.com
changed: bchhetri@primus-direct.com 20031001
mnt-by: MAINT-IN-DIL
source: APNIC

Czech (eu) now meet http://62.204.237.170/broadcastemail/

: 62.204.236.0 - 62.204.237.255 
netname: TTN-THSOFT-NET1
descr: THSOFT network
country: cz
admin-c: JS3270-RIPE
tech-c: TH101-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: CZTTNET-MNT
source: RIPE # Filtered
person: Jiri Stefek 
address: TTNET s.r.o.
Raisova 232
Zamberk 564 01
phone: +420465612567
fax-no: +420465612567
e-mail: jirka@tyhan.cz
nic-hdl: JS3270-RIPE
mnt-by: CZTTNET-MNT
remarks:
source: RIPE # Filtered
person: Tomas Holenda 
address: TTNET s.r.o.
Raisova 232
Zamberk 564 01
phone: +420465612567
fax-no: +420465612567
e-mail: tomas@thsoft.cz
nic-hdl: TH101-RIPE
mnt-by: CZTTNET-MNT
source: RIPE # Filtered
% Information related to '62.204.224.0/19AS34040'
route: 62.204.224.0/19 
descr: TTNET Route
origin: AS34040
mnt-by: CZTTNET-MNT
source: RIPE # Filtered

Now poland too and Polish Telecom !-!-!-!-! to you to

http://83.17.42.146/broadcastemail/ (apparently Dead saturday pm)

inetnum: 83.0.0.0 - 83.31.255.255 
org: ORG-PT1-RIPE
netname: PL-TPSA-20031203
descr: Polish Telecom
descr: PROVIDER Local Registry
country: PL
admin-c: KP21-RIPE
admin-c: TK569-RIPE
admin-c: JS1838-RIPE
tech-c: TPHT
status: ALLOCATED PA "status:" definitions
remarks: In case of abuse contact abuse@telekomunikacja.pl
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TPNET
mnt-lower: AS5617-MNT
mnt-routes: AS5617-MNT
source: RIPE # Filtered
organisation: ORG-PT1-RIPE 
org-name: Polish Telecom
org-type: LIR
address: Nowogrodzka 47A
address: 00-695
address: Warszawa
address: Poland
phone: +48 22 625 74 96
phone: +48 44 4480030
fax-no: +48 22 625 23 83
fax-no: +48 44 47 35 72
admin-c: KP21-RIPE
admin-c: JS1838-RIPE
admin-c: TK569-RIPE
admin-c: TW880-RIPE
admin-c: EHD2-RIPE
mnt-ref: TPNET
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: TP S.A. Hostmaster 
address: TP S.A. "POLPAK"
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: Poland
phone: +48 22 6252383
fax-no: +48 22 6225182
remarks: trouble: Network problems: hostmaster@tpnet.pl
remarks: trouble: Abuse and spam notification: abuse@telekomunikacja.pl
remarks: trouble: DNS problems: dns@tpnet.pl
remarks: trouble: Routing problems: registry@tpnet.pl
admin-c: TK569-RIPE
tech-c: TK569-RIPE
tech-c: JS1838-RIPE
nic-hdl: TPHT
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks: Please send spam and abuse notification only to abuse@telekomunikacja.pl
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
mnt-by: TPNET
source: RIPE # Filtered
abuse-mailbox: abuse@telekomunikacja.pl
person: Tomasz Kielb 
address: TP S.A. - POLPAK
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: POLAND
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks:
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please contact only to:
remarks:
remarks: abuse@tpnet.pl
remarks:
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
phone: +48 800 120 810
phone: +48 800 120 811
fax-no: +48 22 5230178
nic-hdl: TK569-RIPE
mnt-by: TPNET
source: RIPE # Filtered
person: Jaroslaw Salamon 
address: TP S.A. -POLPAK
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: POLAND
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks:
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please contact only to:
remarks:
remarks: abuse@telekomunikacja.pl
remarks:
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
phone: +48 800 120 810
phone: +48 800 120 811
fax-no: +48 22 5230178
nic-hdl: JS1838-RIPE
mnt-by: TPNET
source: RIPE # Filtered
person: Konrad Plich 
address: TP S.A. CST POLPAK
address: ul. Sienkiewicza 9
address: 97-300 Piotrkow Tryb.
address: Poland
remarks: ---------------------------------------------
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please mail only to:
remarks: abuse@tpnet.pl
remarks: ----------------------------------------------
phone: + 48 44 6480030
fax-no: + 48 44 6473572
nic-hdl: KP21-RIPE
mnt-by: AS5617-MNT
source: RIPE # Filtered

Email to uskia - (internal link) no reply yet 'but fingers crossed'
.... and thanks to 'E' - China and Italy Bob websites

'broad' - seems to be new so is ztjm.com > broad.ztjm.com

Domain Name: ZTJM.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS5.CNMSN.NET
Name Server: NS6.CNMSN.NET
Status: REGISTRAR-LOCK
Updated Date: 24-mar-2005
Creation Date: 24-mar-2005
Expiration Date: 24-mar-2006

China = spam freindly folks -
hangzhou ztjm co.,ltd. Yongqiang Qian myqyq@yahoo.com.cn 0571-28819615 fax: 0571-28812367 hz hz zj 310000 cn

And Italy time (geocites redirects) meet http://62.149.193.221/broadcastemail/ - 'killed' by out Italian friends in a few hours nice quick termination Italy !.

inetnum: 62.149.192.0 - 62.149.223.255 
netname: TECHNORAIL-NET
descr: Technorail srl
descr: Internet Service and Access Provider
country: IT
admin-c: SC279-RIPE
tech-c: SC279-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
person: Stefano Cecconi 
address: Aruba S.p.A.
address: Piazza Garibaldi 8
address: 52010 soci (AR)
phone: +39 0575 51571
fax-no: +39 0575 561831
e-mail: hostmaster@technorail.com
nic-hdl: SC279-RIPE
source: RIPE # Filtered
% Information related to '62.149.128.0/17AS31034'
route: 62.149.128.0/17 
descr: Technorail S.r.l. - Aruba.it
origin: AS31034
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered

'E' reports that some geocities sites are also apparently down - .se and .ru - but Ive not bothered to check.
Once you host Bob, you stay in the list. - theres got to be some 'fame' for hosting Robert Soloway.

3 March: meet a dumb isp - and a dumb scheme to stop spam - it wont stop Bob - trust me.

STOP AOL's Email Tax

2 March: Let introduce 'the its got a virus section' Getting a numbe rof cc'ed spamcop reports and not to confuse its origin, from the spams we get its going get its on section

ip 211.200.129.39 has MIME-tools 4.104 (Entity 4.116) seems to have the Trojan.spybot virus

211.33.79.125 has Mutt/1.5.1i seems to have the  Trojan.spybot virus 
221.139.207.34 has Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)
seems to have the Trojan.spybot virus

Are you thinking what I'm thinking ? no then take a peek.

1 March: In following up on how did the spam get there (see below entry) I have added a column to the domain roles spamed with Bob Soloways spam table, should it be easy to 'match' then i will indicate how the spam was delivered by our esteemed spammer.

During a rather dull day doing some non productive office nonsense, I went onto one of those high school friend finder sites, nothing 100% definitive but this chap hits our profile pretty close not many Soloways aged '26' can you do better ? drop me a line ?

Robert Soloway Cotati CA 26
Robert Soloway Rohnert Park CA 26

So I think I know where he might have gone to school.

RANCHO BODEGA SCHOOL
8297 OLD REDWOOD HWY
COTATI CA

or in the Rohnert Park area

BEREAN BAPTIST CHRISTIAN ACADEMY
CONSECUTIVE INSTRUCTIONS SCH
DEFOREST HAMILTON JUV HALL SCH
EL CAMINO CONT HIGH SCHOOL
EREAN BAPTIST CHRISTIAN ACADEM
PHOENIX HIGH SCHOOL
RANCHO COTATE HIGH SCHOOL
ROHNERT PARK COMMUNITY SCHOOL

The Pheonix high school had some members but the others did not have much of a membership, if somebody a little more local than I am could dig (1996-1998) then it might be worthwhile persuing - might be wrong but I'd love a mugshot of Bob to put here.

Move to another website (thanks for the tip off) say hi to Fredrik Skold and http://62.119.28.243/broadcastemail/

inetnum: 62.119.28.0 - 62.119.28.255 
netname: FSDATA-NET
descr: FS DATA
descr: Uppsala
country: SE
admin-c: FS1367-RIPE
tech-c: FS1367-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AS8434-MNT
source: RIPE # Filtered
person: Fredrik Skold 
address: F S DATA
address: Box 140
address: S-265 Astorp
address: Sweden
phone: +46 42 57500
fax-no: +46 42 57575
e-mail: fredrik@fsdata.se
nic-hdl: FS1367-RIPE
source: RIPE # Filtered
% Information related to '62.119.0.0/16AS8434'
route: 62.119.0.0/16 
descr: UTFORS-BLK
origin: AS8434
member-of: AS8434:RS-PA-BLK
remarks: *** Contact abuse@utfors.se regarding ABUSE please! ***
mnt-by: UTFORS-MNT
source: RIPE # Filtered

admin note: This page was finally spell checked, bad spelling (mine) starts from here again!

27 Feb: Thanks for the extra yahoo redirects, some user agents too report 1 and 2 claim .

Microsoft Internet Mail 4.70.1155 --> Trojan.SpBot 
PObox II beta1.0 --> Trojan.SpBot

60.181.144.90, seems to have the Trojan.spybot virus

From my associates site at http://blog.opsan.com/archive/2005/07/29/1148.aspx leave comments there, or use my contact form I'm easy - but if its got any interest about Bob then we'd love to hear about it, be it unpaid bills, disputes, sex problems etc - if you can point to online court documents/other stuff to back it up even better.

Talk to Bob, have a desire to know more?

Mr. Soloway ICQ 171-437-039

Robert Alan Soloway with a DOB of 7/10/79 and a California DL of B5133985 has a couple of traffic tickets that show an address of 1547 Upland Pl., Medford, OR 97501, with a license plate of 4AKK886. He also has a speeding ticket from 8/31/01 with the 279 Granite St. address, an Oregon DL of 9678932, and a license plate of ROBCR4 and ROBCR2.

For those of you unable to put the dots together, Bob had a website in France (using geocites redirects) which got cancelled, and then took up 'house' in russia, but he is spamming from China. if you can justify using a spambotted pc in china to send spam about spammer with a website in russia (currently) then I salute you.

My view of the matter is - its something only a spammer would do

Now back to 60.181.144.90 - Meet the citizen comrades ...

inetnum: 60.181.0.0 - 60.181.255.255 
netname: CHINANET-ZJ-WZ
country: CN
descr: CHINANET-ZJ Wenzhou node network
descr: Zhejiang Telecom
admin-c: CZ4-AP
tech-c: CW27-AP
status: ALLOCATED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20050429
mnt-by: MAINT-CHINANET-ZJ
mnt-lower: MAINT-CN-CHINANET-ZJ-WZ
source: APNIC
role: CHINANET ZHEJIANG 
address: No.378 Yan'an Road,Hangzhou,Zhejiang.310006
country: CN
phone: +86-571-87080702
fax-no: +86-571-87027816
e-mail: antispam@dcb.hz.zj.cn
trouble: send spam reports to antispam@dcb.hz.zj.cn
trouble: and abuse reports to antispam@dcb.hz.zj.cn
trouble: Please include detailed information and times in UTC
admin-c: CZ61-AP
tech-c: CZ61-AP
nic-hdl: CZ4-AP
remarks: http://www.zjtelecom.com.cn
mnt-by: MAINT-CHINANET-ZJ
changed: hjh@dcb.hz.zj.cn 20050914
source: APNIC
role: CHINANET-ZJ Wenzhou 
address: No.2-1 Huancheng Road(East),Wenzhou,Zhejiang.325000
country: CN
phone: +86-577-88818629
fax-no: +86-577-88818635
e-mail: anti_spam@wz.zj.cn
trouble: send spam reports to anti_spam@wz.zj.cn
trouble: and abuse reports to anti_spam@wz.zj.cn
trouble: Please include detailed information and times in UTC
admin-c: CH117-AP
tech-c: CH117-AP
nic-hdl: CW27-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIc

Thats not going to be sorted out soon as it is in china.

26 Feb: Vodka time boys and girls ! Bobs gone and got hosting with our friends the Russians - seems dead now though, A big 'hi' to krsn.ru

All Redirected to:
http://217.74.161.86/broadcastemail/ (sound familiar)

IP 217.74.161.86 kompas.krsn.ru
(at krsn.ru / intertax.ru)

IP 217.74.161.86 on intertax.ru

217.74.161.86 PTR record: kompas.krsn.ru
at ns.krsn.ru

inetnum: 217.74.160.0 - 217.74.162.255
netname: Intertax-Net
descr: JSC Intertax
descr: 78, K.Marksa st.
descr: Krasnoyarsk 660049, Russia
country: RU

route: 217.74.160.0/20
descr: JSC Intertax - ISP in Krasnoyarsk region of Russia.
descr: ru.intertax address space


25 Feb: Puis j'avoir un certain Spam de Bob de France svp ? or if your english 'ALO ALO we hate Bob' click

Not responding either (either a bob fuckup, or nice kill by friends the French) unseen website but spam report seen - and good enough for me Thanks Tomez for this and the other article

New URL:
http://195.6.54.3/broadcastemail/

IP 195.6.54.3

No PTR records exist for 195.6.54.3
at bow.rain.fr / francetelecom.net

inetnum: 195.6.54.0 - 195.6.54.7
netname: FR-CIEME-INFORMATIQUE
descr: CIEME INFORMATIQUE
country: FR

ASN: 3215
ASN Name: AS3215 (France Telecom Transpac)

He gets around our Bob.

24 Feb: After emailing child help usa,direct relief international and doctors without borders I've yet to hear anything, so either they don't give a shit, or never had any donation from Mr Soloway. Go make up your own mind, or ask the charities yourself

20 Feb: Internet Mail Service (5.5.2650.21) from here - seems to be classed as an 'Exchange Open Proxy' abuse in Google - Never used a exchange server as an production mail server for obvious reasons. If true then its an illegal use of somebody else's server, and Bob loves Billy Gates products to spam spybots which is funny since the 'spamis' debacle done by Bob and covered here in this page.

The other query I had was for %XMAILER - is ?

xmailer - xmailer.exe - Process Information

Process File: xmailer.exe
Process Name: 123 hidden sender

Description: xmailer.exe is an advertising program by 123 hidden sender. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.

A further search in Google reveals

Anonymous bulk email software for email marketing, 123 Hidden Sender 
Real anonymous bulk email software, Super Email Harvester, extractor, harvester for online advertising, marketing.
www.123hiddensender.com/
Download 123 Hidden Sender 3.40 Free Trial - 123 Hidden Sender ... 
Download 123 Hidden Sender 3.40 for free - 123 Hidden Sender ends real ANONYMOUS bulk emails.

Comrades search on "123 hidden sender" I rest my case. with this

" Sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP will will never be shown in the email headers.

Description

123 Hidden Sender Screenshot
View full-size screenshot

123 Hidden Sender sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP address will not be shown in the email headers! All you do is input your message, subject, and email addresses, and then 123 Hidden Sender does all the rest. No relays to deal with anymore. No need for expensive bulk ISPs. Port 25 is not a problem.

123 Hidden Sender is a anonymous bulk email software program based on a unique know-how sending technology. It provides real anonymous instant delivery - you can use your regular Internet connection because your IP address will never be shown in the email headers.

faq of bulk email software. Frequesntly Asked Questions of 123 Hidden Sender
faq of bulk email software. Download the help document of 123 Hidden Sender
faq of bulk email software. Order 123 Hidden Sender NOW!

Feature and Benefits

Send absolute ANONYMOUS bulk emails. Real anonymous (using proprietary proxy routing - the next wave in bulk email stealth technology, New technology, not a conventional port 25 mailer). You will not lose your ISP service. Your IP will will never be shown in the email headers.
Sending speed depends on your connection only (thread count control - up to 500).
Lowest prices.
Free client software.
All required data client software retrieves from our center automatically (no more hunting for relays or paying hundreds ofdollars for open relays).
No port 25 needed (not affected by port 25 blocking ISPs).
No SMTP servers needed.
Free support, Free upgrade. "

The pot calls the kettle black.


18 Feb: Off topic humour to start with from our spammy friends at Roach Runner (rr.com) - it made me smile

[Note added by 24.170.23.242 (cpe-24-170-23-242.jam.res.rr.com)]
I don't know why we were contacted about this. I can't seem to find any info on your page that relates to us. Our company is telebay.com -- and when I did a control F on your page and searched for "telebay" I couldn't find it. I see a bunch of other posts about other websites and spam issues, but not ours.

On another note:

1) Telebay does not even utilize emailing as part of our marketing efforts. The only people we send email to would be our affiliates, and this is about to be changed to a RSS feed, instead.

2) If any spam was sent, it could only be one of our affiliates violating our strict NO SPAM POLICY. If you have anything to report, please let us know the affiliate's ID. This can be found immediately after the URL the affiliate would be marketing, such as either of these two examples:
* http://www.telebay.com/IDhere
* http://www.telebay.com/IDhere/page.html

Being serious again: Der where rr users - and naturally stupid.

From a list of emails for Bobs list and the emailer iding itself as

MIME-tools 5.503 (Entity 5.501)
Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)

seen here yet to id these

Internet Mail Service (5.5.2650.21)
%XMAILER

Im sure something will 'popup'.

17 Feb: Remote News Bobs moving (yes again)

More Geocities(au) redirects:- http://210.66.241.1/broadcastemail/

Meet some of Bob's friends again in Taiwan.

Last there on the 4th Feb 2006 same ip too and active again, My 'blindness' to getting Bobs stuff is beginginning to irritate me - perhaps when I hit 1000 spams, or do a years worth of spam here my 'eye sight' will return.

To my other mutual 'friend' Max who works with the commision in Seattle - did you sell me out ? or are you working both sides ? For the record your not the 'Better Business Bureau' but if you make me think about doing that your organisation should be reclassified then I will be happy to.

You know the routine.

inetnum: 210.66.0.0 - 210.66.255.255 
netname: SEEDNET
descr: Digital United Inc.
descr: 9F, No. 125, Song Jiang Road
descr: Taipei, Taiwan
country: TW
admin-c: CY74-AP
tech-c: CY74-AP
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000113
changed: hm-changed@apnic.net 20021219
status: ALLOCATED PORTABLE
source: APNIC
person: Chyi-Chuan Yang 
nic-hdl: CY74-AP
e-mail: ccyang@du.net.tw
address: 9F, 125, song jiang road
address: Taipei, 104, R.O.C
phone: +886-2-2737-7298
fax-no: +886-2-2739-7512
country: TW
changed: hostmaster@twnic.net.tw 20050531
mnt-by: MAINT-TW-TWNIC
source: APNIC
inetnum: 210.66.240.0 - 210.66.241.255 
netname: SEEDNET-NET
descr: Digital United Inc.
descr: 9F, No. 220, Gangchi Road,Taipei 114, Taiwan, R.O.C.
descr: Taipei Taiwan
country: TW
admin-c: RN472-TW
tech-c: RN472-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: michaelc@du.net.tw 20040827
status: ASSIGNED NON-PORTABLE
source: TWNIC
person: Seednet Seednet 
address: Seednet
address: TAIPEI
address: N/A Taiwan
country: TW
phone: +886-2-0800-073330
e-mail: root123@seed.net.tw
nic-hdl: RN472-TW
changed: hostmaster@twnic.net 20020124
source: TWNIC

16 Feb: Charity Time boys and girls, for those of you who really 'read' the Soloway spams will notice that there are a lot of charities listed

For your benefit I have gone and done some 'Googling' and put in the the urls, these are perhaps charities you might like to avoid donating to, Some of these are large organisations. A lot of these take credit cards via websites for what its worth, so may means that the donation was for not a lot and the charity mention means absolutely nothing as well

Questions I like to know include:

  1. how large the donation was,
  2. or if Bob really donated to them
  3. and do they approve of being listed in a Bob Soloway spam

is something i will be asking each charity listed. When time permits, should they respond i will put the answer here, or if you can find out as well so much the the better

Charities 'Claimed' he Helped ? with a $1 dollar donation ?

Charities Spammed using Bob services
- some of these are plain weird

adventist develop & relief agency international,
child help usa,
direct relief international,
doctors without borders
episcopal relief and development, international medical corps,
mercy corps,
operation usa,
red cross hurricane relief division,
red cross
washington state chapter, the salvation army,

among "countless" others in need of global assistance.

america remembers: killed in action -
notes: think is http://usakia.org/

foundation, his grace: evangelistic ministries
notes: ?

north valley aikikai: aikido education academy
notes: ? Information: (760) 788-3267
or www.ramona-aikikai.com (dead url)


lars ranch: abused children's sanctuary
notes: ? the neverland moonwalking dance school ?

musici europae: classic music foundation,
notes: ? husband and wife duo of Tony Brychta and
Marianna Alaberdova ? from Google cache


coleman broadcasting: youth education network .

notes: Kansas somewhere, can only find a address,
Coleman Broadcasting Network Po Box 300165,
Kansas City, MO 64130 no url a phone of (816) 861-378seven

- whom sell a 'Pray TV dvd' Not wishing to 'promote'
Bob or Coleman bc. Quite how a dvd is a 'charity' is
a issue that others can ponder

Thats a strange list of organisations Bobs claimed to spammed for most appear to be 'dead' in internet space as of writing this, or very 'local' to Washington State.

list 1

child help usa, http://www.childhelpusa.org/ 'e'
direct relief international http://www.directrelief.org/ 'e'
doctors without borders, http://www.doctorswithoutborders.org/ 'e'

list 2
only 'kia' looks like its working - 6/1 failure rate ? when you use Bob ? make up your own mind.

administrative note: I'm getting reports from other now text denoting remote observation will be shown by using the red colour

14 Feb: Thank goodness Valentines day is over - my spam load should contain more warez mircosoft offerings than fake 'potions'

This is to confirm this entry (9 feb), A friend sent me this, - I am still looking forward to my own personal copy though (line breaks mine, http url links removed.)

EMAIL ADVERTISE YOUR SITE TO 3,000,000 INTERNET USERS FOR FREE 

http://securesite.odo.com.cn


------ ----- ---- --- -- - -

..for all charity/non-profit organization contacts...

..as a new year thank you to the world and all the good that nonprofits
and charities are doing to assist society, our corporation is doing what it
can to help and has decided to give away a non-commercial email sending
service without cost to charities and nonprofits in need, which is the primary
and only purpose of this non-commercial email.

simply visit our company web site above, fill out any of the order
forms on the web site with your nonprofit/charity contact details, but do not press
submit. instead, print out what is displayed on the screen and send a letter to
the mailing address on our company web site above with your nonprofit/charity
mission
statement, a copy of the paperwork from your governmental authority
confirming your nonprofit/charity status in your city/state/province/country of
origin enclosed, and we will then contact you with all you need to know to have your
special non-commercial, non-transactional, non-relationship, courtesy
charity/nonprofit emailing message sent out to 3 million people without cost.

this non-commercial, non-transactional, non-relationship, courtesy
emailing has an important primary purpose of helping society by assisting nonprofits
and charities have their nonprofit/non-commercial mission statement/special
message/web site sent out to a large number of emails as a courtesy to help worldwide in
national & global relief efforts for various causes in need of non-commercial,
non-transactional, non-relationship support.

thanks to the technology of email, here are only a few of the countless
charities & nonprofit organizations we have countributed to in the past year:
adventist develop & relief agency international, child help usa, direct relief
international, doctors without borders, episcopal relief and development, international medical corps,
mercy corps, operation usa, red cross hurricane relief division, red cross
washington state chapter, the salvation army, among countless others in need of global
assistance.

on one day alone at our organization, six nonprofits/charities
responded to one of our nonprofit emailings and then subsequently received their noncost,
non-commercial emailing without charge to them: america remembers: killed in action
foundation, his grace: evangelistic ministries, north valley aikikai: aikido education
academy, lars ranch: abused children's sanctuary, musici europae: classic music foundation,
coleman broadcasting: youth education network . we hope to assist countless
nonprofits and charities have their special non-commercial email sent out in 2006.
Help us fulfill our goal, in that we believe emailing can be a beneficial worldwide
contribution to millions.

disclaimer: please note that this non-commercial, non-transactional,
non-relationship email originated from a computer outside of the united states of
america by a citizen of a foreign country and obeys all non-commercial email laws of the
country of the citizen that initated this non-commercial email that does not offer any product
or service available for purchase/lease/trade/barter for any commercial nature of
any kind.

if you are not associated with a nonprofit/charity and/or this is not a
nonprofit/charity contact email address and/or you are not interested in our occassional
non-commercial, non-transactional, non-cost, non-relationship, courtesy emailings we
perform to assist various nonprofits and charities interesting in sending out their
special non-commercial message and/or non-commercial web site, press the delist option at our
company web site at http://broadcastemailcorp.odo.com.cn

Starting to write a new intro section here

13 Feb: Rumours true ? I make no comment, just pass along

Re: Soloway spamming again...www.ottislan.com
From: davesjunk1<nospam>@gmail.com
Date: Sunday 12 February 2006 07:02:05
Groups: news.admin.net-abuse.email

Hi,
Maybe this is the wrong place for this but I found the newsgroup
through a search on ottislan.com

I'm the poor fool who's credit card info was stolen and used to
register www.ottislan.com and (12) other sites at www.bookyourname.com.

The registrar has not responded to any of my emails, faxs, or phone
calls about canceling these registrations.

ICANN and Versign have not been much help either and referred me back
to www.bookyourname.com

My question is how do I have the WHOIS info corrected. I have already
reported the errors on ICANN's website

Other question is how do I find out what other sites were reqistered in
my name.

Any help is appreciated
Thanks,
David

whois ottislan.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: OTTISLAN.COM
Registrar: ONLINE SAS
Whois Server: whois.bookmyname.com
Referral URL: http://www.bookmyname.com
Name Server: NS0.SIMPLELOO.COM
Name Server: NS0.ALBEITI.COM
Status: ACTIVE
Updated Date: 07-feb-2006
Creation Date: 06-feb-2006
Expiration Date: 06-feb-2007


>>> Last update of whois database: Sun, 12 Feb 2006 02:41:17 EST <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
%% BookMyName Whois version 1.0
%%
%% NOTICE: Access to this information is provided to assist persons
%% in determining the contents of a domain name registration record in
%% our database. The data in this record is provided by BookMyName for
%% informational purposes only.
%% You agree that you will use this data only for lawful purposes and
%% that, under no circumstances will you use this data to: (a) allow,
%% enable, or otherwise support the transmission by e-mail, telephone, or
%% facsimile of mass unsolicited, commercial advertising or solicitations
%% to entities other than the data recipient's own existing customers;
%% or (b) enable high volume, automated, electronic processes that
%% send queries or data to the systems of Registry Operator or any
%% ICANN-Accredited Registrar, except as reasonably necessary to register
%% domain names or modify existing registrations.
%% All rights reserved. BookMyName reserves the right to modify these
%% terms at any time. By submitting this query, you agree to abide by
%% this policy.
DOMAIN
Domain Name : ottislan.com (OTTISL2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com

Registrant / Admin Contact :
PERSON
David STYNES (STYNES2-BMN-PE)

30 cameron ave

02140 cambridge
UNITED STATES MA
phone : 7816469250
fax :
e-mail : trancettee@yahoo.com


Billing Contact :
PERSON
David STYNES (STYNES2-BMN-PE)

30 cameron ave

02140 cambridge
UNITED STATES MA
phone : 7816469250
fax :
e-mail : trancettee@yahoo.com


Technical Contact :
PERSON
David STYNES (STYNES2-BMN-PE)

30 cameron ave

02140 cambridge
UNITED STATES MA
phone : 7816469250
fax :
e-mail : trancettee@yahoo.com


Domain servers :
ns0.simpleloo.com (NSC167-BMN-HST)

ns0.albeiti.com (NAC193-BMN-HST)


Created on 02/06/2006 20:21:08
Updated on 02/07/2006 13:16:20
Expires on 02/06/2007 15:21:08

9 Feb: Rumours of movement to http://securesite.odo.com.cn from broadcastemailcorp.odo.com.cn (internal page link) Not had one yet - but i am looking forward to it.

7 Feb: From spam 906 (how they fly by)

SmartMailer Version 1.56 -German Privat License- 

Bob seems to changed 'anonymous' remailers, (perhaps the demo time on the shareware was up?) see 6 feb 2006 those of you with a political bone in your body will find this ironic - imagine for a moment that you trade with the chinese government and its agents in the telecom industry there, but you use a private anonymous remailer as well, so Bob on one hand is saying any political expression (or religious) is ok, but then supports they very same people in China that repress the said individuals above.

Thats 'Class' Bob, I hope you too see the irony

This actually gets even better for the con men (virus writers) wrote a description of it:

This also means Bob is still using botnet pc's

Trojan.SpBot

Category 1
Discovered on: April 05, 2005
Last Updated on: April 11, 2005 06:21:18 AM
spybot1 spybot1 spybot1 spybot1

Trojan.Spbot is a Trojan horse program that allows a compromised computer to be used as an email relay. Computers compromised in this way are often used to relay spam.

Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

protection

April 06, 2005

black image
Virus Definitions (Intelligent Updater)

April 05, 2005

black image

threat assessment

Wild

Threat Metrics

1 Low 1 1 Medium 1 1 Low 1

Wild:
Low

Damage:
Medium

Distribution:
Low

Damage

Distribution

technical details

When the Trojan is executed, it performs the following actions:

  1. Creates the following file:

    %System%\smp.dll

    Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

  2. Adds the value:

    "(Default)" = "%System%\smp.dll"

    to the registry subkey:

    HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{0211C4D9-BC71-8916-38AD-9DEA5D213614}\InProcServer32

    so that Trojan.Spbot is loaded into Windows Explorer every time Windows starts.

  3. Adds the value:

    "{0211C4D9-BC71-8916-38AD-9DEA5D213614}" = "OLE Module"

    to the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

    so that Trojan.Spbot is loaded into Windows Explorer every time Windows starts.

  4. Modifies the value:

    "DoNotAllowXPSP2" = "1"

    in the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

    to lower security settings.

  5. Modifies the values:

    "AntiVirusDisableNotify" = "1"
    "FirewallDisableNotify" = "1"
    "AntiVirusOverride" = "1"
    "FirewallOverride" = "1"
    "UpdatesDisableNotify" =
    "1"

    in the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center

    to lower security settings.

  6. Modifies the value:

    "AUOptions" = "1"

    in the registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update

    to lower security settings.

  7. Modifies the value:

    "EnableFirewall" = "0x0"

    in the registry subkeys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile

    to disable the Microsoft firewall.

  8. Modifies the value:

    "Start" = "4"

    in the registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc

    to disable the Microsoft Security Center.

  9. Modifies the values:

    "1001" = "1"
    "1004" = "1"
    "1200" = "0"
    "1809" = "3"


    in the registry subkeys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

    to lower security settings.

  10. Sends notifications of its status via the following URLs:

    • rsp.btthost.com/alive.php
    • rsp.btthost.com/inst.php
    • rsp.btthost.com/report.php
    • rsp.btthost.com/num.php
    • rsp.btthost.com/resend.php
    • rsp.btthost.com/task.php

  11. Opens a back door on UDP port 256.

  12. Works as an email relay for SPAM.

  13. Uses a randomly created sender address from one of the following domains:

    • @yyhmail.com
    • @wongfaye.com
    • @wartaponsel.com
    • @ultrapostman.com
    • @u2club.com
    • @tlcfan.com
    • @tenchiclub.com
    • @surfy.net
    • @southparkmail.com
    • @shaniastuff.com
    • @sammimail.com
    • @roxette.org
    • @rickymail.com
    • @ranmamail.com
    • @qdice.com
    • @purinmail.com
    • @otakumail.com
    • @norikomail.com
    • @nctta.org
    • @myfunnymail.com
    • @malaysia.net
    • @lovecat.com
    • @lopezclub.com
    • @lissamail.com
    • @leonlai.net
    • @kichimail.com
    • @kellychen.com
    • @jpopmail.com
    • @hingismartina.net
    • @grungecafe.com
    • @fffan.com
    • @dogmail.org
    • @chocofan.com
    • @celineclub.com
    • @britneyclub.com
    • @boyzoneclub.com
    • @badtzmail.com
    • @backstreetboysclub.com
    • @amuromail.com
    • @amuro.net
    • @amrer.net
    • @allsaintsfan.com
    • @aaronkwok.net
    • @168city.com
    • @zipolite.com
    • @zapopan.com
    • @veracruz-llave.com
    • @ustedopina.com
    • @universo.com
    • @tuxtla.com
    • @tlaxcala.com
    • @tepasasdeveras.com
    • @tegucigalpa.com
    • @tamaulipas.com
    • @surrealismo.com
    • @surfeador.com
    • @supersonicos.com
    • @superdirectorio.com
    • @sexxxo.com
    • @sanluis.com
    • @saladeprensa.com
    • @rotario.com
    • @regiomontano.com
    • @rdominicana.com
    • @radiomexico.com
    • @radioactivo.com
    • @quintanaroo.com
    • @queretaro.com
    • @puertorrico.com
    • @puebla.com
    • @programador.com
    • @postaldigital.com
    • @pormexico.com
    • @picanteperosabroso.com
    • @osopanda.com
    • @ondagrupera.com
    • @oficinadecorreo.com
    • @nuevoleon.com
    • @notimexico.com
    • @nayarit.com
    • @mundoanimal.com
    • @morelos.com
    • @michoacan.com
    • @mexxxico.com
    • @mejico.com
    • @m3xico.com
    • @lujuria.com
    • @lapalabra.com
    • @jerusalen.com
    • @islasmarias.com
    • @infantil.com
    • @ilusionista.com
    • @horafeliz.com
    • @guanajuato.com
    • @guadalupano.com
    • @grandesligas.com
    • @gobiernofederal.com
    • @garzagarcia.com
    • @futbolsoccer.com
    • @futbolamericano.com
    • @fumador.com
    • @filantropia.com
    • @fiestabrava.com
    • @femenino.com
    • @exalumnos.com
    • @esoterico.com
    • @elturista.com
    • @elchavo.com
    • @ejecutivo.com
    • @edomex.com
    • @derechoshumanos.com
    • @deportista.com
    • @depelicula.com
    • @cuernavaca.com
    • @costarrica.com
    • @correo1.com
    • @comidamexicana.com
    • @colima.com
    • @coahuila.com
    • @cinemexicano.com
    • @cienciaficcion.com
    • @chihuahua.com
    • @chido.com
    • @cartonista.com
    • @capitalino.com
    • @busquedas.com
    • @buenhumor.com
    • @billonario.com
    • @belice.com
    • @barriolatino.com
    • @bajacalifornianorte.com
    • @asistencia.org
    • @artesmarciales.com
    • @ardiente.com
    • @anuncia.com
    • @antronomia.com
    • @altacocina.com
    • @alcoholicosanonimos.com
    • @albur.com
    • @alacarta.com
    • @aguascalientes.com
    • @acuario.com
    • @juno.com
    • @pacific.net.hk
    • @worldnet.att.net
    • @mcimail.com
    • @263.net
    • @163.net
    • @libero.it
    • @hot.ee
    • @gmx.de
    • @geocities.com
    • @gateway.net
    • @ns.sympatico.ca
    • @mindspring.com
    • @atlanta.com
    • @cs.com
    • @erols.com
    • @webtv.net
    • @t-online.de
    • @pacbell.net
    • @earthlink.net
    • @usa.net
    • @server.com
    • @server.n@arkansas.net
    • @softhome.net
    • @zzn.com
    • @home.com
    • @compuserve.com

  14. Uses an X-Mailer randomly choosen from the following:

    • Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1
    • Mutt/1.5.1i
    • Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)
    • Pegasus Mail for Win32 (v2.53/R1)
    • SmartMailer Version 1.56 -German Privat License-
    • MIME-tools 4.104 (Entity 4.116)
    • Calypso Version 3.20.01.01 (4)
    • Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
    • QUALCOMM Windows Eudora Pro Version 4.0
    • The Bat! (v1.51) Educational
    • AOL 6.0 for Windows US sub 10551
    • AOL 7.0 for Windows UK sub 52
    • The Bat! (v1.53d)
    • Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0rc2) Gecko/20020513 Netscape/7.0b1
    • MailGate v3.0
    • The Bat! (v1.60q)
    • Microsoft Internet Mail 4.70.1155
    • Mozilla 4.7 [en] (X11; I; FreeBSD 4.0-20000103-CURRENT i386)
    • Microsoft Outlook Express 4.72.3110.5
    • The Bat! (v1.61)
    • Calypso Version 3.30.00.00
    • PObox II beta1.0
    • AOL 7.0 for Windows US sub 118
    • eGroups Message Poster
    • Microsoft Outlook Express 5.50.4133.2400
    • Microsoft Outlook Express 5.00.2919.6700
    • Internet Mail Service (5.5.2650.21)
    • QUALCOMM Windows Eudora Version 5.1
    • Microsoft Outlook, Build 10.0.2627
    • Microsoft Outlook, Build 10.0.2616
    • Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
    • Microsoft Outlook Express 6.00.2462.0000
    • MIME-tools 5.503 (Entity 5.501)
    • Microsoft Outlook Express 5.00.2615.200
    • Microsoft Outlook Express 6.00.2600.0000
    • The Bat! (v1.52f) Business
    • Microsoft Outlook Express 5.50.4522.1200

  15. Creates the following files from data downloaded from rsp.btthost.com domain:

    • %temp%\url.sys
    • %temp%\mailz.dat
    • %temp%\tsk.sys
    • %temp%\body.dat

      Note: %Temp% is a variable that refers to the Windows temporary folder. By default, this is C:\Windows\TEMP (Windows 95/98/Me/XP) or C:\WINNT\Temp (Windows NT/2000).

  16. Uses those files to send spam e-mail then deletes the files.

  17. Attempts to download an additional file from rsp.btthost.com domain to %temp%\file.exe and runs it.

recommendations

Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":

removal instructions

The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

  1. Disable System Restore (Windows Me/XP).
  2. Update the virus definitions.
  3. Run a full system scan and delete all the files detected as Trojan.SpBot.
  4. Delete any values added to the registry.
  5. Restore the Windows Security Center
For specific details on each of these steps, read the following instructions.
1. To disable System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles: Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, reenable System Restore by following the instructions in the aforementioned documents.

For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article: Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Article ID: Q263455).

2. To update the virus definitions
Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions: 3. To scan for and delete the infected files
  1. Start your Symantec antivirus program and make sure that it is configured to scan all the files.
  2. Run a full system scan.
  3. If any files are detected as infected with Trojan.SpBot, click Delete.

    Note:
    If your Symantec antivirus product reports that it cannot delete an infected file, Windows may be using the file. To fix this, run the scan in Safe mode. For instructions, read the document: How to start the computer in Safe Mode. Once you have restarted in Safe mode, run the scan again.

    After the files are deleted, restart the computer in Normal mode and proceed with section 4.

    Warning messages may be displayed when the computer is restarted, as the threat has not been fully removed at this point. Please ignore these messages and just click OK. These messages will not appear when the computer is restarted after the removal instructions have been fully completed. The messages displayed may be similar to the following:

    Title: [File path]
    Message body: Windows cannot find [file name]. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
4. To delete the value from the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only. For instructions refer to the document: How to make a backup of the Windows registry.
  1. Click Start > Run.

  2. Type regedit

  3. Click OK.

  4. Navigate to the subkey:

    HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{0211C4D9-BC71-8916-38AD-9DEA5D213614}\InProcServer32

  5. In the right pane, delete the value:

    "(Default)" = "%System%\smp.dll"

  6. Navigate to the subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

  7. In the right pane, delete the value:

    "{0211C4D9-BC71-8916-38AD-9DEA5D213614}" = "OLE Module"

  8. Exit the Registry Editor.
5. To restore the Windows Security Center
This threat attempts to disable the features in the Windows Security Center, available in Windows XP Service Pack 2. If you are running Windows XP Service Pack 2 and would like to restore the full functionality of the Windows Security Center, please complete the following steps:

Important: If your computer is connected to a domain, you may not be able to adjust these settings. If so, contact your network administrator for more information.
Write-up by: Ka Chun Leung

Now thats damming.

6 Feb: I was ignorant of this so time to investigate

The Bat! (v1.51) Educational 

Which comes from spam 878 of my spam experiment. So what is the bat ? - it seems its Bobs newest spam emailer from http://www.ritlabs.com/ email them on office@ritlabs.com from the website

"

Download The Bat! 2.00 for free - Powerful, highly configurable email client with ... Fake Email Mailer is a powerful anonymous emailer to send fake emails ...

Shareware (Free to try)
OS: Windows 9x/ME/NT 3.x/NT/XP/2000
Price: 45$ "

The ironic thing is the software is not produced by 'americans' (regulars please think about Spamis claims and protecting american 'jobs', or if not read about it here) and the software he is only paying half of that fee. Quite why Bob Soloways spam should be 'anonymous' is something i leave you all to think about.

I feel sorry for Darkmailer, Bobs previous spam emailing client, lets just hope darkmailer was not employing americans (per spamis claims of 'protecting' americans jobs via chinese websites.

Much humour is to be found here

[DOMAIN whois information for RITLABS.COM ] 
Domain Name: RITLABS.COM

Registrant:
RITLABS S.R.L
180 Stefan cel Mare, office 102
Chisinau, MD MD-2004
MD

Domain name: RITLABS.COM

Administrative Contact:
Demchenko, Serg serg@ritlabs.com
180 Stefan cel Mare, office 101
Chisinau, MD MD-2004
MD
+ 373-2 246889 Fax: (312)577-0481

Technical Contact:
Hostmaster, CIFNet hostmaster@cifnet.com
PO Box 5966
Vernon Hills, IL 60061-5966
US
(773)989-0442 Fax: (312)803-0951

Registration Service Provider:
CIFNet, Inc., hostmaster@cifnet.com
(773)989-0442
(312)803-0951 (fax)
http://www.cifnet.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.

Registrar of Record: TUCOWS, INC.
Record last updated on 02-Oct-2005.
Record expires on 12-Dec-2006.
Record created on 13-Dec-1996.

Domain servers in listed order:
NS1.CIFNET.COM 198.63.208.9
NS2.CIFNET.COM 198.63.208.11
NS1.ELTEL.NET 217.170.67.5
NS.ELTEL.NET 217.170.64.5

Domain status: REGISTRAR-LOCK
Trying "RITLABS.COM"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21320
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;RITLABS.COM. IN ANY

;; ANSWER SECTION:
RITLABS.COM. 86396 IN NS ns1.eltel.net.
RITLABS.COM. 86396 IN NS ns1.cifnet.COM.
RITLABS.COM. 86396 IN NS ns2.cifnet.COM.
RITLABS.COM. 86396 IN NS ns.eltel.net.

;; AUTHORITY SECTION:
RITLABS.COM. 86396 IN NS ns.eltel.net.
RITLABS.COM. 86396 IN NS ns1.eltel.net.
RITLABS.COM. 86396 IN NS ns1.cifnet.COM.
RITLABS.COM. 86396 IN NS ns2.cifnet.COM.

;; ADDITIONAL SECTION:
ns.eltel.net. 172796 IN A 217.170.64.5
ns1.eltel.net. 172796 IN A 217.170.67.5
ns1.cifnet.COM. 172797 IN A 198.63.208.9
ns2.cifnet.COM. 86398 IN A 198.63.208.11

Received 236 bytes from 216.151.192.222#53 in 2 ms

#53

Non-authoritative answer:
RITLABS.COM
origin = ns1.cifnet.COM
mail addr = yk.cifnet.COM
serial = 10410270
refresh = 10800
retry = 3600
expire = 604800
minimum = 86400

Authoritative answers can be found from:
RITLABS.COM nameserver = ns1.cifnet.COM.
RITLABS.COM nameserver = ns2.cifnet.COM.
RITLABS.COM nameserver = ns.eltel.net.
RITLABS.COM nameserver = ns1.eltel.net.
ns.eltel.net internet address = 217.170.64.5
ns1.eltel.net internet address = 217.170.67.5
ns1.cifnet.COM internet address = 198.63.208.9
ns2.cifnet.COM internet address = 198.63.208.11

Non-authoritative answer:
Name: RITLABS.COM
Address: 198.63.208.135

ns1.cifnet.COM has origin of ns1.cifnet.COM
ns1.cifnet.COM has hostmaster address of yk.cifnet.COM
ns1.cifnet.COM has serial number 10410270
ns1.eltel.net has origin of ns1.cifnet.COM
ns1.eltel.net has hostmaster address of yk.cifnet.COM
ns1.eltel.net has serial number 10410270
ns.eltel.net has origin of ns1.cifnet.COM
ns.eltel.net has hostmaster address of yk.cifnet.COM
ns.eltel.net has serial number 10410270
ns2.cifnet.COM has origin of ns1.cifnet.COM
ns2.cifnet.COM has hostmaster address of yk.cifnet.COM
ns2.cifnet.COM has serial number 10410270

[IPv4 whois information for 198.63.208.135 ]
[whois.arin.net]
OrgName: NTT America, Inc.
OrgID: NTTAM-1
Address: 8005 South Chester Street
Address: Suite 200
City: Centennial
StateProv: CO
PostalCode: 80112
Country: US

ReferralServer: rwhois://rwhois.verio.net:4321/

NetRange: 198.63.0.0 - 198.66.255.255
CIDR: 198.63.0.0/16, 198.64.0.0/15, 198.66.0.0/16
NetName: NTTA-198-63
NetHandle: NET-198-63-0-0-1
Parent: NET-198-0-0-0-0
NetType: Direct Allocation
NameServer: NS0.VERIO.NET
NameServer: NS1.VERIO.NET
NameServer: NS2.VERIO.NET
NameServer: NS3.VERIO.NET
NameServer: NS4.VERIO.NET
Comment: *Rwhois information on assignments from this block available
Comment: at rwhois.verio.net port 4321
RegDate: 1993-02-11
Updated: 2005-12-30

RTechHandle: VIA4-ORG-ARIN
RTechName: Verio, Inc.
RTechPhone: +1-303-645-1900
RTechEmail: vipar@verio.net

OrgAbuseHandle: NAAC-ARIN
OrgAbuseName: NTT America Abuse Contact
OrgAbusePhone: +1-800-551-1630
OrgAbuseEmail: abuse@us.ntt.net

OrgNOCHandle: NASC-ARIN
OrgNOCName: NTT America Support Contact
OrgNOCPhone: +1-800-551-1630
OrgNOCEmail: support@us.ntt.net

OrgTechHandle: VIPAR-ARIN
OrgTechName: VIPAR
OrgTechPhone: +1-303-645-1900
OrgTechEmail: vipar@verio.net

# ARIN WHOIS database, last updated 2006-02-04 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[RWHOIS: RWHOIS.VERIO.NET]
Results:

Class-Name network
Auth-Area 198.63.192.0/19
ID NETBLK-A010-CUST-22140.127.0.0.1/32
Handle NETBLK-A010-CUST-22140
Network-Name A010-CUST-22140
IP-Network 198.63.208.0/22
In-Addr-Server NS1-CIF-VRIO-HST.127.0.0.1/32
In-Addr-Server NS2-CIF-VRIO-HST.127.0.0.1/32
IP-Network-Block 198.63.208.0 - 198.63.211.255
Org-Name CIFNet.com
Street-Address 427 S. LaSalle
City Chicago
State IL
Postal-Code 60656
Country-Code USA
Tech-Contact A010-CUST-22140.127.0.0.1/32
Created 2001-03-05 18:57:36+00
Updated 2001-03-30 04:20:21+00

Class-Name network
Auth-Area 198.63.192.0/19
ID NETBLK-A010-198-063-192.127.0.0.1/32
Handle NETBLK-A010-198-063-192
Network-Name A010-198-063-192
IP-Network 198.63.192.0/19
In-Addr-Server C60-VRIO-HST.127.0.0.1/32
In-Addr-Server U60-VRIO-HST.127.0.0.1/32
IP-Network-Block 198.63.192.0 - 198.63.223.255
Org-Name Verio, Inc. - Chicago
Street-Address 20 N Wacker Drive, Ste 1960
City Chicago
State IL
Postal-Code 60606
Country-Code US
Tech-Contact VC146-VRIO.127.0.0.1/32
Created 2000-11-03 23:03:03+00
Updated 2001-03-30 04:11:18+00

[DNS Information on 198.63.208.135]
Whois Domain Lookup on ip 198.63.208.135 has been requested but failed
DNS Error while getting PTR record for ip

[DNS (DNSINFO) information for 198.63.208.135 ]
Trying "135.208.63.198.in-addr.arpa"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28999
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;135.208.63.198.in-addr.arpa. IN PTR

;; ANSWER SECTION:
135.208.63.198.in-addr.arpa. 86400 IN PTR www.ritlabs.com.

;; AUTHORITY SECTION:
208.63.198.in-addr.arpa. 86400 IN NS ns1.cifnet.com.
208.63.198.in-addr.arpa. 86400 IN NS ns2.cifnet.com.

;; ADDITIONAL SECTION:
ns1.cifnet.com. 172790 IN A 198.63.208.9
ns2.cifnet.com. 86391 IN A 198.63.208.11

Received 149 bytes from 216.151.192.222#53 in 344 ms

#53

Non-authoritative answer:
135.208.63.198.in-addr.arpa name = www.ritlabs.com.

Authoritative answers can be found from:
208.63.198.in-addr.arpa nameserver = ns2.cifnet.com.
208.63.198.in-addr.arpa nameserver = ns1.cifnet.com.
ns1.cifnet.com internet address = 198.63.208.9
ns2.cifnet.com internet address = 198.63.208.11

Non-authoritative answer:
135.208.63.198.in-addr.arpa name = www.ritlabs.com.

Authoritative answers can be found from:
208.63.198.in-addr.arpa nameserver = ns1.cifnet.com.
208.63.198.in-addr.arpa nameserver = ns2.cifnet.com.
ns1.cifnet.com internet address = 198.63.208.9
ns2.cifnet.com internet address = 198.63.208.11

4 February: After hosting in china at 218.88.32.239 Bob moves back to geocites redirects again and the new latest and greatest host of http://210.66.241.1/broadcastemail/ Which is Taiwan - hello to Taiwan and Chyi-Chuan Yang of Digital United Inc, nice to have you on this page!

inetnum: 210.66.0.0 - 210.66.255.255 
netname: SEEDNET
descr: Digital United Inc.
descr: 9F, No. 125, Song Jiang Road
descr: Taipei, Taiwan
country: TW
admin-c: CY74-AP
tech-c: CY74-AP
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000113
changed: hm-changed@apnic.net 20021219
status: ALLOCATED PORTABLE
source: APNIC
person: Chyi-Chuan Yang
nic-hdl: CY74-AP
e-mail: ccyang@du.net.tw
address: 9F, 125, song jiang road
address: Taipei, 104, R.O.Cphone: +886-2-2737-7298
fax-no: +886-2-2739-7512
country: TW
changed: hostmaster@twnic.net.tw 20050531
mnt-by: MAINT-TW-TWNIC
source: APNIC
inetnum: 210.66.240.0 - 210.66.241.255
netname: SEEDNET-NET
descr: Digital United Inc.
descr: 9F, No. 220, Gangchi Road,Taipei 114, Taiwan, R.O.C.
descr: Taipei Taiwan
country: TW
admin-c: RN472-TW
tech-c: RN472-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: michaelc@du.net.tw 20040827
status: ASSIGNED NON-PORTABLE
source: TWNIC
person: Seednet Seednet
address: Seednet
address: TAIPEI
address: N/A Taiwan
country: TW
phone: +886-2-0800-073330
e-mail: root123@seed.net.tw
nic-hdl: RN472-TW
changed: hostmaster@twnic.net 20020124
source: TWNIC

30 Janaury: Bob's Seem to have given up on the geocities redirects to webhosts.

do4.vicp.net.

aliases broadcastemailcorp.odo.com.cn
addresses 218.88.32.239
Domain Whois record

Queried whois.cnnic.net.cn with "odo.com.cn"...

Domain Name: odo.com.cn

uri: 

ROID: 20030701s10011s00299427-cn
Domain Status: ok
Registrant Organization: ??????????????
Registrant Name: ???
Administrative Email: marshall@odo.com.cn
Sponsoring Registrar: ??????????????
Name Server:dhserver.sharella.com
Name Server:dhserver2.sharella.com
Registration Date: 2003-07-01 09:51
Expiration Date: 2006-07-01 09:51

Network Whois record

Queried whois.apnic.net with "218.88.32.239"...

inetnum: 218.88.0.0 - 218.89.255.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051212
mnt-by: MAINT-CHINANET
source: APNIC

person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC

DNS records

DNS query for 239.32.88.218.in-addr.arpa returned an error from the server: NameError
name class type data time to live
broadcastemailcorp.odo.com.cn IN CNAME odo4.vicp.net 60s (00:01:00)
odo4.vicp.net IN A 218.88.32.239 14s (00:00:14)
odo.com.cn IN A 218.88.36.60 60s (00:01:00)
odo.com.cn IN NS dhserver.sharella.local 3600s (01:00:00)
odo.com.cn IN NS dhserver2.sharella.local 3600s (01:00:00)
odo.com.cn IN SOA
server: dhserver.sharella.local
email: admin.sharella.local
serial: 2074
refresh: 900
retry: 600
expire: 86400
minimum ttl: 3600
3600s (01:00:00)

27 January: Back to Odo - Bob seems to like Odo in the name of things meet http://broadcastemailcorp.odo.com.cn/

See another 'odo' !

whois odo.com.cn
Domain Name: odo.com.cn
ROID: 20030701s10011s00299427-cn
Domain Status: ok
Registrant Organization: 成都瀚阳电子工程有限责任公司
Registrant Name: 胡国辉
Administrative Email: marshall@odo.com.cn
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:dhserver.sharella.com
Name Server:dhserver2.sharella.com
Registration Date: 2003-07-01 09:51
Expiration Date: 2006-07-01 09:51

Thats got to be China. - this news just in China loves Bob official

23 Janaury: Moving to http://219.136.53.13/broadcastemail/ which is China (nice to be proven wrong !) and the "Guangdong Data Communication Bureau" so lets go meet wumian@gdnmc.guangzhou.gd.cn

How those Chinese 'hate' Spam.

inetnum: 219.136.53.8 - 219.136.53.15 
netname: GUANGZHOU-JSSHL-NETBAR
descr: GUANGZHOU JINSHISU NETBAR
country: CN
admin-c: SH439-AP
tech-c: SH439-AP
status: ASSIGNED NON-PORTABLE
changed: ipadm@gddc.com.cn 20040820
mnt-by: MAINT-CHINANET-GD
source: APNIC
person: SHI HUA 
nic-hdl: SH439-AP
e-mail: ipuser@gddc.com.cn
address: NO 302 RO.CHUNHUISAN GUANGZHOU
country: CN
phone: +86-20-82091277
fax-no: +86-20-82091277
changed: ipadm@gddc.com.cn 20040820
mnt-by: MAINT-CHINANET-GD
source: APNIC

16 Janaury: Bob i see is back to Korea http://147.46.216.152/broadcastemail/ see and has given up with the unsubscribe list being on a different website (that odo site) to the one the geocites spam site redirects you to - the whole point of this is why does he bother with it I'm getting more spam than every before if you look at the spam experiments i run.

update: Since the change from 'giving up' on domain names, he Seems also to be rotating between Korea, and Russia hosts, I mention this as if unsubscribe 'worked' - rather than just confirmed the email address was active how does Mr Soloway known which unsubscribe list is active or not.

Expect an entry here soon - to say Bob is in Korea (again). the Russians and Koreans listed seem to be in the business of doing bullet proof spam sites - I do hope they got paid.

9 January: Meet 83.237.66.218 again Yuriy Kaminir ( 095 ) 0959683121 Thats Russia detailed nonsense is under the link.

07 January: Thanks to my tipper! But Bobs back in Korea, never a North Korean commie around to invade South Korea when you need one. Wackamole Korean Style meet some Koreans you have all met before. Hi Bung

inetnum: 147.46.0.0 - 147.46.255.255 
netname: NET-SNU
country: KR
descr: Seoul National University
admin-c: BL348-AP
tech-c: EJ86-AP
remarks: ***********************************************
remarks: KRNIC of NIDA is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the NIDA Whois DB
remarks: http://whois.nida.or.kr/english/index.html
remarks: ***********************************************
status: ALLOCATED PORTABLE
changed: hostmaster@nic.or.kr 20040625
changed: hm-changed@apnic.net 20040926
mnt-by: MNT-KRNIC-AP
changed: hm-changed@apnic.net 20041007
source: APNIC
person: Bung Lee
nic-hdl: BL348-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
person: Eunjoo Jung
nic-hdl: EJ86-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
inetnum: 147.46.0.0 - 147.46.255.255
netname: NET-SNU-KR
descr: Seoul National University
descr: Sillim9-dong, Gwanak-gu, Seoul
descr: San56-1Beonji Jungangjeonsanwon
descr: 151-742
country: KR
admin-c: EJ55-KR
tech-c: EJ55-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr
source: KRNIC
person: Eunjoo Jung
descr: Seoul National University
descr: Sillim9-dong, Gwanak-gu, Seoul
descr: San56-1Beonji Jungangjeonsanwon
descr: 151-742
country: KR
phone: +82-2-880-5380
e-mail: ercc_net@plaza.snu.ac.kr
nic-hdl: EJ55-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr
source: KRNIC
 

04 January 2006: Happy new year now lets go meet http://198.93.1.73/broadcastemail/ Woohoo an american spammer, Bobs finally come home!

rgName: InnoMedia, Inc.  
OrgID: INNOME-1
Address: 90 Rio Robles Road
City: San Jose
StateProv: CA
PostalCode: 95134
Country: US

NetRange: 198.93.1.0 - 198.93.1.255
CIDR: 198.93.1.0/24
NetName: INNOMEDIA2-1-28
NetHandle: NET-198-93-1-0-1
Parent: NET-198-92-0-0-1
NetType: Reassigned
Comment:
RegDate: 2000-11-29
Updated: 2000-11-29

RTechHandle: AK154-ARIN
RTechName: Ko, Alice
RTechPhone: +1-408-432-5520
RTechEmail: ako@innomedia.com

30 December: new host http://147.46.240.97/broadcastemail/ Same people as last time Say hi to Bung lee

inetnum: 147.46.0.0 - 147.46.255.255 
netname: NET-SNU
country: KR
descr: Seoul National University
admin-c: BL348-AP
tech-c: EJ86-AP
remarks: ***********************************************
remarks: KRNIC of NIDA is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the NIDA Whois DB
remarks: http://whois.nida.or.kr/english/index.html
remarks: ***********************************************
status: ALLOCATED PORTABLE
changed: hostmaster@nic.or.kr 20040625
changed: hm-changed@apnic.net 20040926
mnt-by: MNT-KRNIC-AP
changed: hm-changed@apnic.net 20041007
source: APNIC
person: Bung Lee 
nic-hdl: BL348-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
person: Eunjoo Jung 
nic-hdl: EJ86-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
inetnum: 147.46.0.0 - 147.46.255.255 
netname: NET-SNU-KR
descr: Seoul National University
descr: Sillim9-dong, Gwanak-gu, Seoul
descr: San56-1Beonji Jungangjeonsanwon
descr: 151-742
country: KR
admin-c: EJ55-KR
tech-c: EJ55-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr
source: KRNIC
person: Eunjoo Jung 
descr: Seoul National University
descr: Sillim9-dong, Gwanak-gu, Seoul
descr: San56-1Beonji Jungangjeonsanwon
descr: 151-742
country: KR
phone: +82-2-880-5380
e-mail: ercc_net@plaza.snu.ac.kr
nic-hdl: EJ55-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr
source: KRNIC

25 December: A Happy new year to everybody - bob is now spamming 'root'.
Other news Bob is using India Geocities (free hosting, new country used germany and uk before) and pointing it to Seoul National University (see below)

The dedication. - see you all in 2006 if not before.

17 December: Meet http://147.46.30.174/broadcastemail/ you know the routine...

inetnum: 147.46.0.0 - 147.46.255.255 
netname: NET-SNU
country: KR
descr: Seoul National University
admin-c: BL348-AP
tech-c: EJ86-AP
remarks: ***********************************************
remarks: KRNIC of NIDA is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the NIDA Whois DB
remarks: http://whois.nida.or.kr/english/index.html
remarks: ***********************************************
status: ALLOCATED PORTABLE
changed: hostmaster@nic.or.kr 20040625
changed: hm-changed@apnic.net 20040926
mnt-by: MNT-KRNIC-AP
changed: hm-changed@apnic.net 20041007
source: APNIC
person: Bung Lee
nic-hdl: BL348-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
person: Eunjoo Jung
nic-hdl: EJ86-AP
e-mail: ercc_net@plaza.snu.ac.kr
address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
phone: +82-2-880-5380
fax-no: +82-2-889-7486
country: KR
changed: hostmaster@nic.or.kr 20040625
mnt-by: MNT-KRNIC-AP
source: APNIC
inetnum: 147.46.0.0 - 147.46.255.255
netname: NET-SNU-KR
descr: Seoul National University
descr: Seoul National University Computing Center, San 56-1, Shillim-dong, Kwanak-gu
descr: SEOUL
descr: 151-742
country: KR
admin-c: BL50-KR
tech-c: EJ109-KR
remarks: This IP address space has been allocated to KRNIC.
remarks: For more information, using KRNIC Whois Database
remarks: whois -h whois.nic.or.kr
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr 20050915

한국인터넷진흥원(NIDA)의 인터넷정보센터(KRNIC)가 제공하는 Whois 서비스 입니다.

query: 147.46.30.174

# KOREAN

조회결과는 아래와 같으며, 실제 정보와 상이할 수 있습니다.

IPv4 주소 : 147.46.0.0-147.46.255.255
네트워크 이름 : NET-SNU
할당내역 등록일 : 20040625
할당정보공개여부 : Y

[ IPv4 사용 기관 정보 ]
기관고유번호 : ORG384075
기관명 : 서울대학교
주소 : 서울 관악구 신림9동
상세주소 : 산56-1번지 중앙전산원
우편 번호 : 151-742

[ 네트워크 담당자 인물 정보 ]
이름 : 정은주
기관명 : 서울대학교
주소 : 서울 관악구 신림9동
상세주소 : 산56-1번지 중앙전산원
우편 번호 : 151-742
전화 번호 : +82-2-880-5380
전자 우편 : ercc_net@plaza.snu.ac.kr

----------------------------------------------------- ---------------------------

만약 위의 IPv4주소 사용기관 정보가 올바르지 않을 경우
한국인터넷진흥원(hostmaster@nic.or.kr)으로 문의하시기 바랍니다.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The followings is organization information that is using the IPv4 address.

IPv4 Address : 147.46.0.0-147.46.255.255
Network Name : NET-SNU
Registration Date : 20040625
Publishes : Y

[ Organization Information ]
Organization ID : ORG384075
Org Name : Seoul National University
Address : Sillim9-dong, Gwanak-gu, Seoul
Detail address : San56-1Beonji Jungangjeonsanwon
Zip Code : 151-742

[ Technical Contact Information ]
Name : Eunjoo Jung
Org Name : Seoul National University
Address : Sillim9-dong, Gwanak-gu, Seoul
Detail address : San56-1Beonji Jungangjeonsanwon
Zip Code : 151-742
Phone : +82-2-880-5380
E-Mail : ercc_net@plaza.snu.ac.kr

- NIDA/KRNIC Whois Service -

Oh my Seoul National University becomes a spam hoster. - oh my and I thought you went to university to learn not spam.

9 December: We been here before but its been renamed from /wm/ to http://83.237.66.218/broadcastemail/ which is our Friend in Russia - say hello to Yuriy Kaminir again.

update: late news: Bob fails to stop court process (again) > http://www.mortgagespam.com/soloway/26.pdf its been covered before here - another round lost by Bob. "Its a spammer"

6 December: I have just discovered Bob owns a time machine, the domain owner contacts got a spam from the future over the weekend when the mail was checked, dated Monday the 5th December how cool is that!!!

consider: its insert time: Sun, 4 Dec 2005 03:21:39 +0000 (GMT), and the date displayed Mon, December 5, 2005

Other notes:

  1. Bobs back to using your email address in the headers, rather than in the body attachment, still no text just bad html
  2. This geocities redirects means Bob is making mistakes
  3. Still hosting in Korea....

So Bob owns a time machine, or if you don't believe that - thats another email header he forges.

1 December: Theres been a lot of activity recently so lets time out and examine the logic (if you can find it) in Bobs current activities which is a

Still with me ? how does the opt-out in China - get to Korea or 'ahem' to Bobs spam injection points which I list in the domain owner spam page, and admin contacts on this page. I once opted out of Bob's spam, and we are still getting them.

If you can find the 'logic' can you please tell me.

29 November: tipoff thankyou again ! Blog entry (long) with this, you see its other people too - probably had links to this in here somewhere to this

Mr. Robert Alan Soloway
Executive Residence, Inc.
1200 Western Avenue
Room 17E
Seattle, Washington

Tel: 206-226-9558 (reception) 206-223-1270 (sucker number)
His personal phone number: 206-223-1271

email: nim@cyberservices.com

Registrar Homepage: http://www.register.com

Domain Name: cyberservices.com

Created on..............: 13 May 1996 00:00:00
Expires on..............: 14 May 2006 00:00:00

Registrant Info:
NJDomains, Abuse Contact: abuse@mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 9086960929
Fax..: none
Email: abuse@mail.com_gerald.gorman@att.net

Administrative Info:
NJDomains, Abuse Contact: abuse@mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 9086960929
Fax..: none
Email: abuse@mail.com_gerald.gorman@att.net

Technical Info:
NJDomains, Abuse Contact: abuse@mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 9086960929
Fax..: none
Email: abuse@mail.com_gerald.gorman@att.net

Status: Locked

Domain servers in listed order:

dns01.gpn.register.com
dns02.gpn.register.com
dns03.gpn.register.com
dns04.gpn.register.com
dns05.gpn.register.com

Whois-Services: ypx7yp2yy94pc.cyberservices.com@whois-services.com


Mail records are:

20 ob-mail-com-bk.mr.outblaze.com. [TTL=1800] IP=64.71.166.194
10 ob-mail-com.mr.outblaze.com. [TTL=1800] IP=205.158.62.33
not much else no www/etc

Who be:

Hurricane Electric HURRICANE-2 (NET-64-71-128-0-1)  
64.71.128.0 - 64.71.191.255
Outblaze Limited HURRICANE-CE1460-541 (NET-64-71-166-192-1)
64.71.166.192 - 64.71.166.223

XO Communications XOXO-BLK-0 (NET-205-158-0-0-1)
205.158.0.0 - 205.158.255.255
Outblaze, Limited XOXO-205-158-62-0 (NET-205-158-62-0-1)
205.158.62.0 - 205.158.62.255


28 November: Our friends at Korea telecom have renamed the url from http://210.179.190.250/wm to http://210.179.190.250/broadcastemail

27 November: new geocities redirect to Korea (26 November Entry) http://uk.geocities.com/Griselda70698Sol20116/ and http://uk.geocities.com/Ingamar91782Leoine31932/ points here. Bob's html ad (normally text) are pretty awful and contain email typo's - whether this is 'tracking' item is up for discussion.

26 November: Thank you again for the tip off !. Korea here we come http://210.179.190.250/wm so lets go and have a screen dump Lets do Russia ip from yesterday hello again to the 'Evropeyskiy sportivnyy klub', this brings back a few memories....

doing it with ip, no domain names

Korea, if only <insert nasty country brainwave...> there.

query: 210.179.190.250 

# KOREAN

조회하신 IPv4주소는 ISP가 아직 할당하지 않은 주소이거나 고객(End-User)에게 IPv4주소를
할당한 후 할당내역을 한국인터넷진원에 등록하지 않은 주소공간입니다.

따라서, 조회하신 IPv4주소에 대한 문의는 아래의 ISP 담당자에게 문의하시기 바랍니다.

[ ISP의 IPv4주소 관리기관 정보 ]
기 관 명 : (주)케이티
서비스명 : PUBNET
기관 주소 : 성남시 분당구 정자동
기관 상세 주소: 206

[ ISP의 IPv4주소 책임자 정보 ]
이 름 : IP주소 책임자
전화번호 : +82-2-3674-5890
전자우편 : ip@pubnet.ne.kr

[ ISP의 IPv4주소 관리자 정보 ]
이 름 : IP주소 관리자
전화번호 : +82-2-3674-5890
전자우편 : ip@pubnet.ne.kr

[ ISP의 Network Abuse 담당자 정보 ]
이 름 : Pubnet Abuse 담당자
전화번호 : +82-2-3674-5890
전자우편 : abuse@pubnet.ne.kr

# ENGLISH

KRNIC is not a ISP but a National Internet Registry similar to APNIC.
The address is allocated yet

Please contact following ISP for further information

[ ISP Organization Information ]
Org Name : Korea Telecom-PUBNET
Service Name : PUBNET
Org Address : 206, Jungja, Bundang-Gu, Sungnam-ci

[ ISP IP Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-3674-5890
E-Mail : ip@pubnet.ne.kr

[ ISP IP Tech Contact Information ]
Name : IP Manager
Phone : +82-2-3674-5890
E-mail : ip@pubnet.ne.kr

[ ISP Network Abuse Contact Information ]
Name : Pubnet Abuse Manger
Phone : +82-2-3674-5890
E-mail : abuse@pubnet.ne.kr

A big hello to Korea Telecom

add wiki link to introduction.

25 November: Thanks for the the tipoff!
Bob is still using ip but has moved to the address http://83.237.66.218/wm/

Which is Russia - say hello to Yuriy Kaminir. Nice to see that Bob is providing the turkey for american workers this christmas (i refer to his spamis claims he made earlier in the year).

inetnum: 83.237.66.216 - 83.237.66.223 
netname: OOO-Evropeyskiy-sportivnyy-klub
descr: OOO "Evropeyskiy sportivnyy klub"
descr: Moscow, Russia
country: RU
admin-c: YK170-RIPE
tech-c: YK170-RIPE
status: ASSIGNED PA
mnt-by: MTU-NOC
changed: lir@mtu.ru 20041111
source: RIPE

person: Yuriy Kaminir
address: Admirala Makarova
address: Moscow, Russia
phone: +7 ( 095 ) 0959683121
nic-hdl: YK170-RIPE
mnt-by: MTU-NOC
changed: lir@mtu.ru 20041111
source: RIPE

% Information related to '83.237.0.0/16AS8359'

route: 83.237.0.0/16
descr: ZAO MTU-Intel's Moscow Region Network
descr: ZAO MTU-Intel
descr: Moscow, Russia
origin: AS8359
notify: noc@mtu.ru
mnt-by: MTU-NOC
remarks: *****************************************
remarks: Please send abuse reports to abuse@mtu.ru
remarks: *****************************************
changed: noc@mtu.ru 20040213
source: RIPE

23 November: Bobs keeping me busy! He is spamming via Yahoo and redirecting to an ip address a 1.2.3.4 (thing) rather than 'Bobisaspammer.com' etc

Email link is: http://de.geocities.com/email24624broadcast65559/
others include *

But redirect to here: http://83.69.46.224/wm/

from the html: " email address at: broadcastemailcorp odo4 . meibu . com / dounsub . php"

Thats going to work, very 'can-spam'

* Some kind of new tracking device?

update broadcastemailcorp.org seems to have died... Thats what happens when you use the nameservers at joker.

MX FAIL MX Category ERROR: I couldn't find any MX records for BROADCASTEMAILCORP.ORG. If you want to receive E-mail on this domain, you should have MX record(s). Without any MX records, mailservers should attempt to deliver mail to the A record for BROADCASTEMAILCORP.ORG. I can't continue in a case like this, so I'm assuming you don't receive mail on this domain.
Mail FAIL Connect to mail servers ERROR: I could not find any mailservers for BROADCASTEMAILCORP.ORG.
WWW FAIL WWW Category ERROR: I couldn't find any A records for www.BROADCASTEMAILCORP.ORG. But I did find a referral to a.ns.joker.com. (and maybe others). If you want a website at www.BROADCASTEMAILCORP.ORG, you will need an A record for www.BROADCASTEMAILCORP.ORG. If you do not want a website at www.BROADCASTEMAILCORP.ORG, you can ignore this error.

Which CZ - europe

% Information related to '83.69.46.0 - 83.69.46.255'
inetnum: 83.69.46.0 - 83.69.46.255 
netname: SCNETCZ
remarks: INFRA-AW
descr: Losan s.r.o.
country: CZ
admin-c: MH38-RIPE
tech-c: MM6144-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: LOSAN-MNT
source: RIPE # Filtered
person: Milan Husak 
address: Brezenecka 4808
Chomutov
430 04
phone: +420737142369
nic-hdl: MH38-RIPE
source: RIPE # Filtered
person: Michal Malina 
address: Brezenecka 4808
Chomutov
430 04
phone: +420737142369

Big shout to "Michal Malina" hi comrade!

17 November: Bit soon but please meet broadcastemailcorp.org or ' broadcastemailcorp . org '

Domain ID:D108098127-LROR
Domain Name:BROADCASTEMAILCORP.ORG
Created On:03-Nov-2005 08:52:54 UTC
Last Updated On:03-Nov-2005 09:00:08 UTC
Expiration Date:03-Nov-2006 08:52:54 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CORG-138397
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:--
Registrant Postal Code:WA
Registrant Country:US
Registrant Phone:+206.2231271
Registrant Phone Ext.:
Registrant FAX:+206.2231271
Registrant FAX Ext.:
Registrant Email:today2005@earthling.net
Admin ID:CORG-135817
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:--
Admin Postal Code:WA
Admin Country:US
Admin Phone:+206.2231271
Admin Phone Ext.:
Admin FAX:+206.2231271
Admin FAX Ext.:
Admin Email:today2005@earthling.net
Tech ID:CORG-135817
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:--
Tech Postal Code:WA
Tech Country:US
Tech Phone:+206.2231271
Tech Phone Ext.:
Tech FAX:+206.2231271
Tech FAX Ext.:
Tech Email:today2005@earthling.net
Name Server:A.NS.JOKER.COM
Name Server:B.NS.JOKER.COM
Name Server:C.NS.JOKER.COM

and nameservered there too.

<<>> DiG 9.2.4 <<>> broadcastemailcorp.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59426
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailcorp.org. IN A

;; AUTHORITY SECTION:
broadcastemailcorp.org. 10800 IN SOA a.ns.joker.com. hostmaster.joker.com. 2005111529 86400 7200 1209600 86400

But it redirects to here...

<<>> DiG 9.2.4 <<>> www.broadcastemailcorp.org 
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8845
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.broadcastemailcorp.org. IN A

;; ANSWER SECTION:
www.broadcastemailcorp.org. 1685 IN CNAME odo4.meibu.com.
odo4.meibu.com. 20 IN A 218.88.44.247

update 29/11/2005 odo4.meibu.com. moved to: 218.88.38.117

 
inetnum: 218.88.0.0 - 218.89.255.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501777
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051107
mnt-by: MAINT-CHINANET
source: APNIC
person: Xiaodong Shi
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC




Well its still China, see those Chinese really do hate spam.
<end of update>

Who and where ? Say 'hi' to qingdao meibu in China that was a surprise to all of you

Domain Name:meibu.com


Registrant:
Liu Chunming
qingdao
266071



Administrative Contact:
liu cm
qingdao meibu
qingdao dayao 3 road 19#
shandong qin Shandong 266071
China
tel: 86 0532 5779616
fax: 86 0532 5779617
meibu@sohu.com

Technical Contact:
liu cm
qingdao meibu
qingdao dayao 3 road 19#
shandong qin Shandong 266071
China
tel: 86 0532 5779616
fax: 86 0532 5779617
meibu@sohu.com

Billing Contact:
liu cm
qingdao meibu
qingdao dayao 3 road 19#
shandong qin Shandong 266071
China
tel: 86 0532 5779616
fax: 86 0532 5779617
meibu@sohu.com

Registration Date: 2001-06-25
Update Date: 2005-01-11
Expiration Date: 2008-06-25

Primary DNS: ns1.meibu.com 221.2.55.235
Secondary DNS: ns2.meibu.com 202.104.237.179

and Chinanet too!

inetnum: 218.88.0.0 - 218.89.255.255 
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC
person: Chinanet Hostmaster 
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501777
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051107
mnt-by: MAINT-CHINANET
source: APNIC
person: Xiaodong Shi 
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC


They really do hate spam those chinese government types.

3 November: Meet Bob 'hiding' behind some chinese people on odo10 and 3322.ORG

Domain ID:D81041153-LROR 
Domain Name:3322.ORG
Created On:11-Dec-2001 18:35:40 UTC
Last Updated On:07-Mar-2005 07:15:34 UTC
Expiration Date:11-Dec-2009 18:35:40 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:OK
Registrant ID:ONLC-615124-4
Registrant Name:Bentium Ltd.
Registrant Organization:Yaako Ltd.
Registrant Street1:1406, Yinyuan Building 37, West Guanhe Road
Registrant Street2:1406, Yinyuan Building 37, West Guanhe Road
Registrant Street3:
Registrant City:Changzhou
Registrant State/Province:JS
Registrant Postal Code:213002
Registrant Country:CN
Registrant Phone:+86.5196113322
Registrant Phone Ext.:
Registrant FAX:+86.5196620244
Registrant FAX Ext.:
Registrant Email:ppyy@staff.cn99.com
Admin ID:ONLC-615124-1
Admin Name:Yong, Peng
Admin Organization:Yaako Ltd.
Admin Street1:1406, Yinyuan Building 37, West Guanhe Road
Admin Street2:1406, Yinyuan Building 37, West Guanhe Road
Admin Street3:
Admin City:Changzhou
Admin State/Province:JS
Admin Postal Code:213002
Admin Country:CN
Admin Phone:+86.5196113322
Admin Phone Ext.:
Admin FAX:+86.5196620244
Admin FAX Ext.:
Admin Email:ppyy@staff.cn99.com
Tech ID:ONLC-615124-2
Tech Name:Yong, Peng
Tech Organization:Yaako Ltd.
Tech Street1:1406, Yinyuan Building 37, West Guanhe Road
Tech Street2:1406, Yinyuan Building 37, West Guanhe Road
Tech Street3:
Tech City:Changzhou
Tech State/Province:JS
Tech Postal Code:213002
Tech Country:CN
Tech Phone:+86.5196113322
Tech Phone Ext.:
Tech FAX:+86.5196620244
Tech FAX Ext.:
Tech Email:ppyy@staff.cn99.com
Name Server:NS2.3322.NET
Name Server:NS1.3322.NET

Where:

dig 3322.org 

; <<>> DiG 9.2.4 <<>> 3322.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62854
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;3322.org. IN A

;; ANSWER SECTION:
3322.org. 60 IN A 61.177.95.125

Surprisingly Thats China

name: CHINANET-JS 
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostmaster@ns.chinanet.cn.net 20020209
changed: hostmaster@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC
route: 61.177.0.0/16 
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: ip@jsinfo.net 20030414
source: APNIC
role: CHINANET JIANGSU 
address: No.268,Hanzhong Road,Nanjing 210029
country: CN
phone: +86-25-6588783
fax-no: +86-25-6588740
e-mail: ip@jsinfo.net
trouble: send anti-spam reports to spam@jsinfo.net
trouble: send abuse reports to abuse@jsinfo.net
trouble: times in GMT+8
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
remarks: www.jsinfo.net
notify: ip@jsinfo.net
mnt-by: MAINT-CHINANET-JS
changed: dns@ptt.js.cn 20020530
changed: ip@jsinfo.net 20021213
source: APNIC
person: Chinanet Hostmaster 
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501719
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051021
mnt-by: MAINT-CHINANET
source: APNIC

Glad to see those Chinese 'hating' spam

2 November: Keep me busy... had to laugh at this email extract

x@x nonprofit/charity contact email address right?  if so... 

WE WILL EMAIL YOUR WEB SITE TO 2,500,00 0PT-IN EMAILS FOR [Free]

First Open Your Web Browser and Type in:

www . broadcastemailservices . org

So everybody please say hello to broadcastemailservices . org, or broadcastemailservices.org

Domain ID:D107975459-LROR
Domain Name:BROADCASTEMAILSERVICES.ORG
Created On:28-Oct-2005 02:39:04 UTC
Last Updated On:31-Oct-2005 08:47:11 UTC
Expiration Date:28-Oct-2006 02:39:04 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CORG-137882
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:--
Registrant Postal Code:WA
Registrant Country:US
Registrant Phone:+206.2231271
Registrant Phone Ext.:
Registrant FAX:+206.2231271
Registrant FAX Ext.:
Registrant Email:today2005@earthling.net
Admin ID:CORG-135817
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:--
Admin Postal Code:WA
Admin Country:US
Admin Phone:+206.2231271
Admin Phone Ext.:
Admin FAX:+206.2231271
Admin FAX Ext.:
Admin Email:today2005@earthling.net
Tech ID:CORG-135817
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:--
Tech Postal Code:WA
Tech Country:US
Tech Phone:+206.2231271
Tech Phone Ext.:
Tech FAX:+206.2231271
Tech FAX Ext.:
Tech Email:today2005@earthling.net
Name Server:NS1.BROADCASTEMAILSERVICES.ORG
Name Server:NS2.BROADCASTEMAILSERVICES.ORG

Where

DiG 9.2.4 <<>> broadcastemailservices.org 
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63586
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailservices.org. IN A

;; ANSWER SECTION:
broadcastemailservices.org. 30 IN A 221.11.134.39

Thats ns1 and ns2. thats being cheap Bob and thats ... China - how they hate spam those Chinese comrades.

inetnum: 221.11.128.0 - 221.11.223.255 
netname: CNCGROUP-HI
descr: CNC Group Hainan province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
admin-c: CH455-AP
tech-c: CH455-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HI
changed: hm-changed@apnic.net 20030122
status: ALLOCATED PORTABLE
source: APNIC
role: CNCGroup Hostmaster
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: inetnum: 221.11.128.0 - 221.11.223.255
netname: CNCGROUP-HI
descr: CNC Group Hainan province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
admin-c: CH455-AP
tech-c: CH455-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HI
changed: hm-changed@apnic.net 20030122
status: ALLOCATED PORTABLE
source: APNIC
role: CNCGroup Hostmaster
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC
20041119
mnt-by: MAINT-CNCGROUP
source: APNIC

1 November: Following on from the recommendation I found a better version online

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. 
Well now I have nothing but complaints about spam and am receiving virus' in my email all the time.
I asked for a refund but they said no.
Still I get complaints about emails being sent out after I told them to stop sending them.
So I wonder what can we do about this.
My business has slowed so much and I think my site's reputation is at stake.

That domain is poochieheaven.com - help ! Other recomendations are here.

31 October: yet to have any spam from this (give it time), meet broadcastemailservices.biz

whois broadcastemailservices.biz 
Domain Name: BROADCASTEMAILSERVICES.BIZ
Domain ID: D11321182-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
COM)
Sponsoring Registrar IANA ID: 113
Domain Status: clientDeleteProhibited
Domain Status: clientRenewProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: CNEU-127712
Registrant Name: Bob Soloway
Registrant Address1: PO Box 1259
Registrant City: Seattle
Registrant State/Province: --
Registrant Postal Code: WA
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +206.2231271
Registrant Facsimile Number: +206.2231271
Registrant Email: today2005@earthling.net
Administrative Contact ID: CNEU-127711
Administrative Contact Name: Bob Soloway
Administrative Contact Address1: PO Box 1259
Administrative Contact City: Seattle
Administrative Contact State/Province: --
Administrative Contact Postal Code: WA
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +206.2231271
Administrative Contact Facsimile Number: +206.2231271
Administrative Contact Email: today2005@earthling.net
Billing Contact ID: CNEU-127711
Billing Contact Name: Bob Soloway
Billing Contact Address1: PO Box 1259
Billing Contact City: Seattle
Billing Contact State/Province: --
Billing Contact Postal Code: WA
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +206.2231271
Billing Contact Facsimile Number: +206.2231271
Billing Contact Email: today2005@earthling.net
Technical Contact ID: CNEU-127711
Technical Contact Name: Bob Soloway
Technical Contact Address1: PO Box 1259
Technical Contact City: Seattle
Technical Contact State/Province: --
Technical Contact Postal Code: WA
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +206.2231271
Technical Contact Facsimile Number: +206.2231271
Technical Contact Email: today2005@earthling.net
Name Server: NS2.ZONEEDIT.COM
Name Server: NS17.ZONEEDIT.COM
Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
COM)
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
COM)
Domain Registration Date: Fri Oct 28 02:53:40 GMT 2005
Domain Expiration Date: Fri Oct 27 23:59:59 GMT 2006
Domain Last Updated Date: Sat Oct 29 06:52:01 GMT 2005

Where: DiG 9.2.4 <<>> broadcastemailservices.biz
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 286
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailservices.biz. IN A

;; ANSWER SECTION:
broadcastemailservices.biz. 7200 IN A 222.77.185.251

Thats... China

inetnum: 222.76.0.0 - 222.79.255.255 
netname: CHINANET-FJ
descr: CHINANET fujian province network
descr: China Telecom
descr: No1,jin-rong Street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: CA67-AP
changed: hm-changed@apnic.net 20031024
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-FJ
mnt-routes: MAINT-CHINANET-FJ
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
status: ALLOCATED PORTABLE
source: APNIC
role: CHINANETFJ IP ADMIN 
address: 7,East Street,Fuzhou,Fujian,PRC
country: CN
phone: +86-591-3333169-293
fax-no: +86-591-3371954
e-mail: fjnic@fjdcb.fz.fj.cn
trouble: send spam reports and abuse reports
trouble: to abuse@fjdcb.fz.fj.cn
trouble: Please include detailed information and
trouble: times in UTC
admin-c: FH71-AP
tech-c: FH71-AP
nic-hdl: CA67-AP
mnt-by: MAINT-CHINANET-FJ
changed: fjnic@fjdcb.fz.fj.cn 20020719
source: APNIC
person: Chinanet Hostmaster 
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501719
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051021
mnt-by: MAINT-CHINANET
source: APNIC


also (thanks Fridge) Citizens, Gladiators meet security-validations.com

Domain Name ..................... security-validations.com
Name Server ..................... dns7.hichina.com
dns8.hichina.com
Registrant ID ................... hc847466383-cn
Registrant Name ................. Tanveer Ahmad
Registrant Organization ......... Tanveer Ahmad Shah
Registrant Address .............. Tanveer Ahmad Shah
Registrant City ................. usa
Registrant Province/State ....... uas
Registrant Postal Code .......... 100000
Registrant Country Code ......... US
Registrant Phone Number ......... +86.10000000000 -
Registrant Fax .................. +86.10000000000 -
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc734116639-cn
Administrative Name .............
Administrative Organization .....
Administrative Address .......... JINGTIAN WEST ROAD
Administrative City ............. SHENZHEN
Administrative Province/State ... GUANGDONG
Administrative Postal Code ...... 518034
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.075583092575 -
Administrative Fax .............. +86.075583092575 -
Administrative Email ............ office@jinre.net
Billing ID ...................... hc434116639-cn
Billing Name ....................
Billing Organization ............
Billing Address ................. JINGTIAN WEST ROAD
Billing City .................... SHENZHEN
Billing Province/State .......... GUANGDONG
Billing Postal Code ............. 518034
Billing Country Code ............ CN
Billing Phone Number ............ +86.075583092575 -
Billing Fax ..................... +86.075583092575 -
Billing Email ................... office@jinre.net
Technical ID .................... hc134116639-cn
Technical Name ..................
Technical Organization ..........
Technical Address ............... JINGTIAN WEST ROAD
Technical City .................. SHENZHEN
Technical Province/State ........ GUANGDONG
Technical Postal Code ........... 518034
Technical Country Code .......... CN
Technical Phone Number .......... +86.075583092575 -
Technical Fax ................... +86.075583092575 -
Technical Email ................. office@jinre.net
Expiration Date ................. 2006-06-25 04:44:19

Is this Bobs new lover Tanveer Ahmad, what happened to stephen ? Plenty of fake stuff in there '+86.10000000000' Of note dns7.hichina.com. 154193 IN A 218.30.103.250 from searchengineraking.cn

<<>> DiG 9.2.4 <<>> dns7.hichina.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40181
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;dns7.hichina.com. IN A

;; ANSWER SECTION:
dns7.hichina.com. 123517 IN A 218.30.103.247
dns7.hichina.com. 123517 IN A 218.30.103.250

which is still our spammy friends at the Chinese government

inetnum: 218.30.96.0 - 218.30.127.255 
netname: CHINANET-IDC-BJ
descr: CHINANET IDC center
descr: China Telecom
descr: Beijing 100088
country: CN
admin-c: HC55-AP
tech-c: HC55-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINATELECOM-BJ
changed: bjnic@bjtelecom.net 20040322
status: ALLOCATED NON-PORTABLE
source: APNIC
domain: 103.30.218.in-addr.arpa 
descr: Hichina
country: CN
admin-c: CH93-AP
tech-c: CH93-AP
zone-c: CH93-AP
nserver: dns1.hichina.com
nserver: dns2.hichina.com
mnt-by: maint-chinanet
changed: shenjun@cndata.com 20040310
source: APNIC
person: Chinanet Hostmaster 
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net < like they give a shit
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501719
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051021
mnt-by: MAINT-CHINANET
source: APNIC
person: Hostmaster of Beijing Telecom corporation CHINA TELECOM 
nic-hdl: HC55-AP
e-mail: bjnic@bjtelecom.net
address: Beijing Telecom
address: No. 107 XiDan Beidajie, Xicheng District Beijing
phone: +86-010-58503461
fax-no: +86-010-58503054
country: cn
changed: bjnic@bjtelecom.net 20040115
mnt-by: MAINT-CHINATELECOM-BJ
source: APNIC

21 October: Meet 'searchengineranking.cn' A departure from the usual Bob selection of names but 'Hi' Its very slow but its Bob- we have seen this before I think (excuse rubbish screen dump)

Bob using .cn domian name

whois searchengineranking.cn

Domain Name: searchengineranking.cn
ROID: 20050719s10001s22674827-cn
Domain Status: ok
Registrant Organization: stephen
Registrant Name: stephen
Administrative Email: postmaster@2ndDNS.com
Sponsoring Registrar: 创联万网国际信息技术(北京)有限公司
Name Server:dns7.hichina.com
Name Server:dns8.hichina.com
Registration Date: 2005-07-19 13:00
Expiration Date: 2006-07-19 13:00

Bob 'Stephen' oh my !!! is he your lover ?

Where

dig searchengineranking.cn

; <<>> DiG 9.2.4 <<>> searchengineranking.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;searchengineranking.cn. IN A

;; AUTHORITY SECTION:
searchengineranking.cn. 10662 IN SOA dns7.hichina.com. hostmaster.hichina.com. 2005102001 21600 3600 1728000 21600

Hmmm ... or..
dns7.hichina.com. 154193 IN A 218.30.103.250
dns7.hichina.com. 154193 IN A 218.30.103.247

which is China.

inetnum: 218.30.96.0 - 218.30.127.255 
netname: CHINANET-IDC-BJ
descr: CHINANET IDC center
descr: China Telecom
descr: Beijing 100088
country: CN
admin-c: HC55-AP
tech-c: HC55-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINATELECOM-BJ
changed: bjnic@bjtelecom.net 20040322
status: ALLOCATED NON-PORTABLE
source: APNIC
person: Hostmaster of Beijing Telecom corporation CHINA TELECOM 
nic-hdl: HC55-AP
e-mail: bjnic@bjtelecom.net
address: Beijing Telecom
address: No. 107 XiDan Beidajie, Xicheng District Beijing
phone: +86-010-58503461
fax-no: +86-010-58503054
country: cn
changed: bjnic@bjtelecom.net 20040115
mnt-by: MAINT-CHINATELECOM-BJ
source: APNIC

And broadcastingemailing.org

Domain ID:D107836737-LROR
Domain Name:BROADCASTINGEMAILING.ORG
Created On:16-Oct-2005 19:51:29 UTC
Last Updated On:19-Oct-2005 10:21:25 UTC
Expiration Date:16-Oct-2006 19:51:29 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CORG-136800
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:--
Registrant Postal Code:WA
Registrant Country:US
Registrant Phone:+206.2231271
Registrant Phone Ext.:
Registrant FAX:+206.2231271
Registrant FAX Ext.:
Registrant Email:today2005@earthling.net
Admin ID:CORG-135817
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:--
Admin Postal Code:WA
Admin Country:US
Admin Phone:+206.2231271
Admin Phone Ext.:
Admin FAX:+206.2231271
Admin FAX Ext.:
Admin Email:today2005@earthling.net
Tech ID:CORG-135817
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:--
Tech Postal Code:WA
Tech Country:US
Tech Phone:+206.2231271
Tech Phone Ext.:
Tech FAX:+206.2231271
Tech FAX Ext.:
Tech Email:today2005@earthling.net
Name Server:NS2.ASSETSSECURITYSERVICE.COM
Name Server:NS1.ASSETSSECURITYSERVICE.COM

Where:

dig broadcastingemailing.org

; <<>> DiG 9.2.4 <<>> broadcastingemailing.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63833
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastingemailing.org. IN A

;; ANSWER SECTION:
broadcastingemailing.org. 3600 IN A 222.73.4.71

Thats .. China ... and

inetnum: 222.73.4.66 - 222.73.4.85 
netname: null
descr: null
country: CN
admin-c: WQ58-AP
tech-c: WL371-AP
mnt-by: MAINT-CHINANET-SH
changed: wanglin@shaidc.com 20051018
status: ASSIGNED NON-PORTABLE
source: APNIC
person: Wang Qing 
address: 6F,380 Fushan Road,Shanghai 200122
country: CN
phone: +86-21-68761255-807
fax-no: +86-21-68761255-805
e-mail: wanglin@shaidc.com
nic-hdl: WQ58-AP
mnt-by: MAINT-CN-SHTELE-XINCHAN
changed: wanglin@shaidc.com 20021007
source: APNIC
person: Wang Lin 
address: 6F,380 Fushan Road,Shanghai 200122
country: CN
phone: +86-21-68761255-807
fax-no: +86-21-68761255-805
e-mail: wanglin@shaidc.com
nic-hdl: WL371-AP
mnt-by: MAINT-CN-SHTELE-XINCHAN
changed: wanglin@shaidc.com 20021007
source: APNIC

20 October: Testimonial time again:

From: Angela Adcox
Comment: Hi, I came across your site today. I was investigating the optinemailing.biz. I was one of the suckers who paid 150.00 to have my site advertised through broadcast email. I was told it was all opt in emails. Now I am getting email complaints daily

Hello and a belated welcome, she gave me no email. Strange.....

More 'recommendations' can be found elsewhere. (another 'better' version of this in Google is: "I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. Well now I have nothing but complaints about spam and am receiving virus' in my email all the time. I asked for a refund but they said no. Still I get complaints about emails being sent out after I told them to stop sending them. So I wonder what can we do about this. My business has slowed so much and I think my site's reputation is at stake". )

Need more recommendations try.here

Thats one for the website Bob.

16 October: Spam to (from Japan) and he has gone shopping

Meet emailingtoday.org

Domain ID:D107700584-LROR
Domain Name:EMAILINGTODAY.ORG
Created On:04-Oct-2005 21:28:24 UTC
Last Updated On:10-Oct-2005 00:14:41 UTC
Expiration Date:04-Oct-2006 21:28:24 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:CORG-135818
Registrant Name:Bob Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:--
Registrant Postal Code:WA
Registrant Country:US
Registrant Phone:+206.2231271
Registrant Phone Ext.:
Registrant FAX:+206.2231271
Registrant FAX Ext.:
Registrant Email:today2005@earthling.net
Admin ID:CORG-135817
Admin Name:Bob Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:--
Admin Postal Code:WA
Admin Country:US
Admin Phone:+206.2231271
Admin Phone Ext.:
Admin FAX:+206.2231271
Admin FAX Ext.:
Admin Email:today2005@earthling.net
Tech ID:CORG-135817
Tech Name:Bob Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:--
Tech Postal Code:WA
Tech Country:US
Tech Phone:+206.2231271
Tech Phone Ext.:
Tech FAX:+206.2231271
Tech FAX Ext.:
Tech Email:today2005@earthling.net
Name Server:S1.REDBUYER.COM
Name Server:S2.REDBUYER.COM

where ? why Patriotic China. Dont you feel sorry for those american workers Bob ? - you are a patriot ?, you confessed your love in a 'spamis' spam.

dig emailingtoday.org

; <<>> DiG 9.2.4 <<>> emailingtoday.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48580
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailingtoday.org. IN A

;; ANSWER SECTION:
emailingtoday.org. 2000 IN A 222.174.34.151

;; Query time: 407 msec

inetnum: 222.173.0.0 - 222.175.255.255
netname: CHINATELECOM-SD
descr: CHINANET SHANDONG PROVINCE NETWORK
descr: Shandong Telecom Corporation
descr: NO.71 Jingshi Road,jinan,shandong
country: CN
admin-c: CH93-AP
tech-c: LB56-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINATELECOM-SD
mnt-routes: MAINT-CHINATELECOM-SD
status: ALLOCATED PORTABLE
source: APNIC

person: Chinanet Hostmaster
address: No.31 ,jingrong street,beijing
address: 100032
country: CN
phone: +86-10-66027112
fax-no: +86-10-58501144
e-mail: hostmaster@ns.chinanet.cn.net
e-mail: anti-spam@ns.chinanet.cn.net
nic-hdl: CH93-AP
mnt-by: MAINT-CHINANET
changed: hostmaster@ns.chinanet.cn.net 20021016
remarks: hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
source: APNIC

Well done Bob.

6 October: Ladies and Gents, Boys and Girls, Lords, and Ladies
meet broadcastingemail.us

Domain Name: BROADCASTINGEMAIL.US 
Domain ID: D8714297-US
Sponsoring Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
Domain Status: ok
Registrant ID: ID00210189-PR
Registrant Name: Bob Soloway
Registrant Address1: PO Box 1259
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98101
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.2062231271
Registrant Email: today2005@earthling.net
Registrant Application Purpose: P3
Registrant Nexus Category: C11
Administrative Contact ID: ID00210189-PR
Administrative Contact Name: Bob Soloway
Administrative Contact Address1: PO Box 1259
Administrative Contact City: Seattle
Administrative Contact State/Province: WA
Administrative Contact Postal Code: 98101
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.2062231271
Administrative Contact Email: today2005@earthling.net
Administrative Application Purpose: P3
Administrative Nexus Category: C11
Billing Contact ID: ID00210189-PR
Billing Contact Name: Bob Soloway
Billing Contact Address1: PO Box 1259
Billing Contact City: Seattle
Billing Contact State/Province: WA
Billing Contact Postal Code: 98101
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.2062231271
Billing Contact Email: today2005@earthling.net
Billing Application Purpose: P3
Billing Nexus Category: C11
Technical Contact ID: ID00210189-PR
Technical Contact Name: Bob Soloway
Technical Contact Address1: PO Box 1259
Technical Contact City: Seattle
Technical Contact State/Province: WA
Technical Contact Postal Code: 98101
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.2062231271
Technical Contact Email: today2005@earthling.net
Technical Application Purpose: P3
Technical Nexus Category: C11
Name Server: S1.REDBUYER.COM
Name Server: S2.REDBUYER.COM
Created by Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
Last Updated by Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
Domain Registration Date: Wed Oct 05 16:16:18 GMT 2005
Domain Expiration Date: Wed Oct 04 23:59:59 GMT 2006
Domain Last Updated Date: Thu Oct 06 00:13:02 GMT 2005

>>>> Whois database was last updated on: Thu Oct 06 14:35:26 GMT 2005 <<<<

Where ?
broadcastingemail.us
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52807
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastingemail.us. IN A

;; ANSWER SECTION:
broadcastingemail.us. 2000 IN A 222.174.34.151

;; Query time

Thats .... China, glad to see bob supporting americans in employment

netnum: 222.173.0.0 - 222.175.255.255 
netname: CHINATELECOM-SD
descr: CHINANET SHANDONG PROVINCE NETWORK
descr: Shandong Telecom Corporation
descr: NO.71 Jingshi Road,jinan,shandong
country: CN
admin-c: CH93-AP
tech-c: LB56-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINATELECOM-SD
mnt-routes: MAINT-CHINATELECOM-SD
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040316
source: APNIC
person: Chinanet Hostmaster
address: No.31 ,jingrong street,beijing
address: 100032
country: CN
phone: +86-10-66027112
fax-no: +86-10-58501144
e-mail: hostmaster@ns.chinanet.cn.net
e-mail: anti-spam@ns.chinanet.cn.net
nic-hdl: CH93-AP
mnt-by: MAINT-CHINANET
changed: hostmaster@ns.chinanet.cn.net 20021016
remarks: hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
source: APNIC
person: Lin Bin
nic-hdl: LB56-AP
e-mail: linb@sdtele.com
address: NO.71 Jingshi Road,Jinan,Shandong
address: 250061,China
phone: +86-531-3198141
fax-no: +86-531-3198193
country: CN
changed: ipadmin@sdtele.com 20040213
mnt-by: MAINT-CHINATELECOM-SD
source: APNIC


5 October: The optinemailings.us domain registration has been killed by the retarded folks at Neustar it seems (they run .biz too) Sorry cant tell you anything if there is no domain record (as of 5 October)

SPAM TRACKING update: Watch out for ROLE @ DOMAIN in the message body if you report Bobs crap expect more crap from him

ROLE @ DOMAIN is your non-profit/charity contact email address right? 

If so... WE WILL EMAIL YOUR WEB SITE TO 2,500,00 OPT-IN EMAILS FOR FREE

http://www.optinemailings.us


----- ---- --- -- - -
simply visit our company web site above for details on how it works, then
send a letter to the mailing address on our company web site above with
your non-profit and/or charity status and address in your country of origin
enclosed, along with your email address and we will then send you all the
specifications needed on how to receive this non-cost, non-commercial, non-
transactional, non-relationship, charity/non-profit courtesy emailing.

This non-commercial, non-transactional, non-relationship, courtesy emailing
has an important primary purpose of helping society by assisting non-profits
& charities have their non-profit/non-commercial mission statement/special
message sent out to 2.5 million opt-in emails as a courtesy to help worldwide
in national & global relief efforts for various causes in need of support.

if this is not a non-profit/charity contact email address and/or you are not
interested in our occassional non-commercial, non-transactional, non-cost,
non-relationship, courtesy emailings we perform for various non-profits and
charities, remove the email above: http://www.optinemailings.us/dounsub.php
contact us at: charity info, po box 1259, seattle, wa 98101, usa

----- ---- --- -- - -
thanks to the technology of email, here are only a few of the countless
charities & non-profit organizations we have countributed to in the past:
adventist develop & relief agency international, child help usa, direct
relief international, doctors without borders, episcopal relief and
development, international medical corps, mercy corps, operation usa, red
cross hurricane relief division, red cross washington state chapter, the
salvation army, among countless others in need of global assistance.

30 September: admin web stats for the year, We all love Bob spamming honest!

Web stats


24 September: Another court defeat for Bob Soloway - 'stolen' from a newsgroup, but its Bob related.

Not only the $10,075,000 statutory penalty, but he also scored a permanent
injunction against Soloway's (and his agents, affiliates, etc., etc.)
sending spam with the usual header violations.

http://www.mortgagespam.com/soloway/19.pdf

Enjoy.

Bobs reply (apparenlty)

rsoloway@iname.com says...
>
>Comments from Robert Soloway:
>
>I've been reading these posts and have found them quite entertaining,
>although unfortunately nobody here is aware of the true facts of the
>matter at hand.
>
>Unfortunately, the injunction was filed improperly with the court.
>There was never a request for an original injunction requested in the
>original court complaint papers, so the injunction is invalidated upon
>notification to the court, (as it will be invalidated next week, and
>hopefully braver will be sanctioned potentially criminally, not just
>civilly for his misuse and abuse of the court system.)
>
>All I can say is.. everything has now fallen into place with the
>default judgement and malpractice injunction. I sincerely wish braver
>the best with his company and himself and sincerely hope that he has
>already secured the best and most expensive possible lawyer on retainer
>in the state of Washington, as I have done in the state of Oklahoma.

>- Robert Soloway

Yep Bobs dumb.

22 September: Ladies and Gents meet optinemailing.biz

whois optinemailing.biz
Domain Name: OPTINEMAILING.BIZ
Domain ID: D10685747-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Sponsoring Registrar IANA ID: 113
Domain Status: clientDeleteProhibited
Domain Status: clientRenewProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: CNEU-123633
Registrant Name: Bob Soloway
Registrant Organization: NIM
Registrant Address1: PO Box 1259
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98111
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +120.62231271
Registrant Facsimile Number: +120.62231271
Registrant Email: bsoloway@inorbit.com
Administrative Contact ID: CNEU-123632
Administrative Contact Name: Bob Soloway
Administrative Contact Organization: NIM
Administrative Contact Address1: PO Box 1259
Administrative Contact City: Seattle
Administrative Contact State/Province: WA
Administrative Contact Postal Code: 98111
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +120.62231271
Administrative Contact Facsimile Number: +120.62231271
Administrative Contact Email: bsoloway@inorbit.com
Billing Contact ID: CNEU-123632
Billing Contact Name: Bob Soloway
Billing Contact Organization: NIM
Billing Contact Address1: PO Box 1259
Billing Contact City: Seattle
Billing Contact State/Province: WA
Billing Contact Postal Code: 98111
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +120.62231271
Billing Contact Facsimile Number: +120.62231271
Billing Contact Email: bsoloway@inorbit.com
Technical Contact ID: CNEU-123632
Technical Contact Name: Bob Soloway
Technical Contact Organization: NIM
Technical Contact Address1: PO Box 1259
Technical Contact City: Seattle
Technical Contact State/Province: WA
Technical Contact Postal Code: 98111
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +120.62231271
Technical Contact Facsimile Number: +120.62231271
Technical Contact Email: bsoloway@inorbit.com
Name Server: NS1.VIRTUALUSE.COM
Name Server: NS2.VIRTUALUSE.COM
Name Server: NS3.VIRTUALUSE.COM
Name Server: NS4.VIRTUALUSE.COM
Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Domain Registration Date: Thu Aug 18 14:16:02 GMT 2005
Domain Expiration Date: Thu Aug 17 23:59:59 GMT 2006
Domain Last Updated Date: Mon Sep 19 22:01:12 GMT 2005
Registrar Fields
----------------
IDNLang: de


Where or wohin ?

dig OPTINEMAILING.BIZ

; <<>> DiG 9.2.4 <<>> OPTINEMAILING.BIZ
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25049
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;OPTINEMAILING.BIZ. IN A

;; ANSWER SECTION:
OPTINEMAILING.BIZ. 0 IN A 194.126.190.13

;; Query time:

Thats Russia Comrades.

inetnum: 194.126.188.0 - 194.126.191.255 
netname: Tekcom
descr: Tekcom Project
country: RU
org: ORG-TP17-RIPE
admin-c: MV3243-RIPE
tech-c: MV3243-RIPE
status: ASSIGNED PI "status:" definitions
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-TEKCOM
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-TEKCOM
mnt-domains: MNT-TEKCOM
source: RIPE # Filtered
organisation: ORG-TP17-RIPE 
org-name: Tekcom Project
org-type: NON-REGISTRY
address: Russian Federation
address: Moscow
address: Verxniya Radichenskava St. 3-1
e-mail: mixailovich@tekcom.ru
admin-c: MV3243-RIPE
tech-c: MV3243-RIPE
mnt-ref: MNT-TEKCOM
mnt-by: MNT-TEKCOM
source: RIPE # Filtered
person: Mikhail Vlasov 
address: Russian Federation
address: Moscow
address: Verxniya Radichenskava St. 3-1
e-mail: mixailovich@tekcom.ru
phone: +7 921 9246323
nic-hdl: MV3243-RIPE
source: RIPE # Filtered

21 September: Bob's a funny guy at times, Im not sure what hes on, but he makes good jokes. He is still on the spamis crap (which im sending to myself by the way) and he is still complaining about Microsoft (sending him to court) This time its sending jobs to China. Now Bob is a serial offender at using Chinese companies to host his web sites (theres a lot of 'cn' in these pages). If your not sure look at 'Moscow' just up from here.

So I assume Bob is worried by this (?better spam defences in exchange?, if your dumb enough to have a exchange server), but not bothered enough to 'try' and host his domains in 'America'. The moral behind this story is

Don't complain about 'losing american jobs', when your 'patrotism' to american workers and business can be called into question.

Remember ladies and gentlemen Bobs a Spammer, and no patriot of america by the gauging of his offshore 'non american' business activites recorded in this web page.

Enough surmon for today, and a copy of the email (which you will be sending to yourself) will no doubt be coming into an email account of yours soon.

12 September: Bobs given up with the proper spamis headers (see experiment) . So if your posting messages to a spam reporting service look out for

Received-SPF: neutral (gmail.com: 193.188.71.2 is neither permitted nor denied by domain of ?@gmail.com)  

As ?@gmail.com was my email address, this technique seems to have replaced the nonsense word. However the moron keeps sending me his crap, and tells me that I sent it to. If you don't know what spf is I suggest you google/search for it

9 September: From another domain account, quite how he can mail spam services, and then complain via Spamis does make me smile while using my email address in the to and from headers is quite beyond belief..

[SPAMIS NOTIFICATION]:
Fully "READY" to Begin Increasing Public Service Announcement
Emails to 20 Times the Amount of Internet Users by 25 Times the
Current Sending Rate & Speed When a Certain Activity Transpires.
[CURRENTLY IN WAITING FOR THIS ACTIVITY TO TRANSPIRE]

Says it all. Well once a spammer always a spammer.

5 September: Have added translate tool at top of page, and here.

Page/Text Translate:


30 August: Statistics time, for those of you unaware of the spam collection we do off this webpage may i point you towards these graphs of my own creation (your browser will need javascript/ecmascript). Im still trying to figure out how to automate the charts (give me time), but the by month spam is indicative 'proof' that can-spam does not work.

The other chart based on category of the received spam speaks volumes about Bob's main source of income. - I've put the 419's scams together with the mlm scams for clarity after all they are all 'scams'.

Due to the problems of opening all three experiments webpages and doing graphs here its the best I can come up with without the thing taking several minutes to load and fire up all kind of scripting alerts on your web browser. Graphs of each experiment can be found on the appropriate web pages.

So if you want to take a long term view at Bobs client list be my guest.

25 August: Surprise everybody meet optinemailtoday.biz

Domain Name: OPTINEMAILTODAY.BIZ
Domain ID: D10683405-BIZ
Sponsoring Registrar: NETWORK SOLUTIONS INC.
Sponsoring Registrar IANA ID: 2
Domain Status: clientTransferProhibited
Registrant ID: 39827714
Registrant Name: None
Registrant Organization: None
Registrant Address1: PO Box 1259
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98111
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.2062231271
Registrant Email: no.valid.email@worldnic.com
Administrative Contact ID: 39827714
Administrative Contact Name: None
Administrative Contact Organization: None
Administrative Contact Address1: PO Box 1259
Administrative Contact City: Seattle
Administrative Contact State/Province: WA
Administrative Contact Postal Code: 98111
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.2062231271
Administrative Contact Email: no.valid.email@worldnic.com
Billing Contact ID: 39827715
Billing Contact Name: None
Billing Contact Organization: None
Billing Contact Address1: PO Box 1259
Billing Contact City: Seattle
Billing Contact State/Province: WA
Billing Contact Postal Code: 98111
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.2062231271
Billing Contact Email: bsoloway@inorbit.com
Technical Contact ID: 39827714
Technical Contact Name: None
Technical Contact Organization: None
Technical Contact Address1: PO Box 1259
Technical Contact City: Seattle
Technical Contact State/Province: WA
Technical Contact Postal Code: 98111
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.2062231271
Technical Contact Email: no.valid.email@worldnic.com
Name Server: NS1.VIRTUALUSE.COM
Name Server: NS2.VIRTUALUSE.COM
Name Server: NS3.VIRTUALUSE.COM
Name Server: NS4.VIRTUALUSE.COM
Created by Registrar: NETWORK SOLUTIONS INC.
Last Updated by Registrar: NETWORK SOLUTIONS INC.
Domain Registration Date: Thu Aug 18 07:13:54 GMT 2005
Domain Expiration Date: Thu Aug 17 23:59:59 GMT 2006
Domain Last Updated Date: Mon Aug 22 05:56:10 GMT 2005

OK no.valid.email@worldnic.com thats normally how bob does things.

; <<>> DiG 9.2.4 <<>> optinemailtoday.biz
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19926
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;optinemailtoday.biz. IN A

;; ANSWER SECTION:
optinemailtoday.biz. 3600 IN A 218.244.189.18

Thats China

inetnum: 218.244.160.0 - 218.244.191.255 
netname: CHINACOM
descr: CHINA COMMUNICATIONS SYSTEM Co.,Ltd
country: CN
admin-c: GJ121-AP
tech-c: WY152-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20020328
status: ALLOCATED PORTABLE
source: APNIC
person: Guo Jinbo 
nic-hdl: GJ121-AP
e-mail: ipmaster@cetc-chinacomm.com.cn
address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
phone: +86-10-64169966
fax-no: +86-10-64163632
country: CN
changed: wangjingying@cetc-chinacomm.com.cn 20031211
mnt-by: MAINT-CNNIC-AP
source: APNIC
person: Wang Yongqiang 
nic-hdl: WY152-AP
e-mail: ipmaster@cetc-chinacomm.com.cn
address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
phone: +86-10-64163626
fax-no: +86-10-64163632
country: CN
changed: wangjingying@cetc-chinacomm.com.cn
Hey nice to see China sorting out its spam problem again.

23 August: We have a new domain Ladies and Gents please meet: optinemails.org

Domain ID:D107210890-LROR
Domain Name:OPTINEMAILS.ORG
Created On:18-Aug-2005 07:46:33 UTC
Last Updated On:22-Aug-2005 06:04:23 UTC
Expiration Date:18-Aug-2006 07:46:33 UTC
Sponsoring Registrar:Moniker Online Services Inc. (R145-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:MONIKER158873
Registrant Name:Robert Soloway
Registrant Street1:PO Box 1259
Registrant Street2:
Registrant Street3:
Registrant City:Seattle
Registrant State/Province:WA
Registrant Postal Code:98111
Registrant Country:US
Registrant Phone:+1.2062231271
Registrant Phone Ext.:
Registrant FAX:+1.2062231271
Registrant FAX Ext.:
Registrant Email:bsoloway@inorbit.com
Admin ID:MONIKER158873
Admin Name:Robert Soloway
Admin Street1:PO Box 1259
Admin Street2:
Admin Street3:
Admin City:Seattle
Admin State/Province:WA
Admin Postal Code:98111
Admin Country:US
Admin Phone:+1.2062231271
Admin Phone Ext.:
Admin FAX:+1.2062231271
Admin FAX Ext.:
Admin Email:bsoloway@inorbit.com
Tech ID:MONIKER158873
Tech Name:Robert Soloway
Tech Street1:PO Box 1259
Tech Street2:
Tech Street3:
Tech City:Seattle
Tech State/Province:WA
Tech Postal Code:98111
Tech Country:US
Tech Phone:+1.2062231271
Tech Phone Ext.:
Tech FAX:+1.2062231271
Tech FAX Ext.:
Tech Email:bsoloway@inorbit.com
Name Server:NS3.VIRTUALUSE.COM
Name Server:NS2.VIRTUALUSE.COM
Name Server:NS4.VIRTUALUSE.COM
Name Server:NS1.VIRTUALUSE.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:


Hmm smelly where

; <<>> DiG 9.2.4 <<>> optinemails.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30940
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;optinemails.org. IN A

;; ANSWER SECTION:
optinemails.org. 3544 IN A 218.244.189.18

;; Query time: 19 msec

Thats China

inetnum: 218.244.160.0 - 218.244.191.255 
netname: CHINACOM
descr: CHINA COMMUNICATIONS SYSTEM Co.,Ltd
country: CN
admin-c: GJ121-AP
tech-c: WY152-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20020328
status: ALLOCATED PORTABLE
source: APNIC
person: Guo Jinbo 
nic-hdl: GJ121-AP
e-mail: ipmaster@cetc-chinacomm.com.cn
address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
phone: +86-10-64169966
fax-no: +86-10-64163632
country: CN
changed: wangjingying@cetc-chinacomm.com.cn 20031211
mnt-by: MAINT-CNNIC-AP
source: APNIC
person: Wang Yongqiang 
nic-hdl: WY152-AP
e-mail: ipmaster@cetc-chinacomm.com.cn
address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
phone: +86-10-64163626
fax-no: +86-10-64163632
country: CN
changed: wangjingying@cetc-chinacomm.com.cn

Hey nice to see China sorting out its spam problem.

22 August: Bob has spammed my domain owner account. DMA go give those Congressman and Senator a bribe. Once on never off.

19 August: It seems that I am sending Bob's spam to myself, but somehow I'm sending spam from myself to our mail server in europe via a computer in South Africa hmm i don't think that was me. Bobby has been on that darkmailer training course (see the legal discovery pdf and prior entry). My thats quite funny really. I've really got meet this nutjob called Robert one day. Like they say 'revenge is a dish best served cold.'

8 August: Oh well Bob, null points for

BAD HEADER MIME error: error: unexpected end of preamble

Meet new domain optinemailingtoday.com, completing the set with .net as well

-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : optinemailtoday.com

::Registrant::
Name : Rob
Email : rsoloway@saintly.com
Address : POBOX1259 - SEATTLE - WA - 98111
Zipcode : 98111
Nation : US
Tel : 2062231271
Fax :

::Administrative Contact::
Name : Rob
Email : rsoloway@saintly.com
Address : POBOX1259 - SEATTLE - WA - 98111
Zipcode : 98111
Nation : US
Tel : 2062231271
Fax :

::Technical Contact::
Name : Rob
Email : rsoloway@saintly.com
Address : POBOX1259 - SEATTLE - WA - 98111
Zipcode : 98111
Nation : US
Tel : 2062231271
Fax :

::Name Servers::
ns1.virtualuse.com
ns2.virtualuse.com
ns3.virtualuse.com
ns4.virtualuse.com

::Dates & Status::
Created Date 2005-07-31 11:21:38 EDT
Updated Date 2005-07-31 11:21:38 EDT
Valid Date 2006-07-31 11:21:38 EDT
Status ACTIVE

Where ? why Russia comradski

dig optinemailtoday.com

; <<>> DiG 9.2.4 <<>> optinemailtoday.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9338
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;optinemailtoday.com. IN A

;; ANSWER SECTION:
optinemailtoday.com. 0 IN A 194.126.190.14

organisation: ORG-TP17-RIPE 
org-name: Tekcom Project
org-type: NON-REGISTRY
address: Russian Federation
address: Moscow
address: Verxniya Radichenskava St. 3-1
e-mail: mixailovich@tekcom.ru
admin-c: MV3243-RIPE
tech-c: MV3243-RIPE
mnt-ref: MNT-TEKCOM
mnt-by: MNT-TEKCOM
source: RIPE # Filtered
person: Mikhail Vlasov 
address: Russian Federation
address: Moscow
address: Verxniya Radichenskava St. 3-1
e-mail: mixailovich@tekcom.ru
phone: +7 921 9246323
nic-hdl: MV3243-RIPE
source: RIPE # Filtered

25 July: Hes back

20 July: My Bob's been busy recently and I have only put a few of the spam entries on the list.

I think Bob must have a learning difficulty as he is very slow to understand what the word 'no' means and also with the news. Who says you cannot have fun with people with learning difficulties.

18 July: Bob you need to go a darkmailer (his open proxy spamming software) training course

failed

Its spam. Way to go bob. Monkeys in a zoo spam better than bob

17 July: Today, yes today im yet again part of the 4.6 million plus people who said yes to Bob Soloway
meet the new domain optin2millions.net.

Got an email from spamis (seemed personal) - Jay ? have you been passing my details on ?

Essentially Saying should microsoft have any power at all ? - well if nobody used Microsoft how would Bob spam us ?. Microsoft is a problem because of its size but not the problem bob thinks it has. Quite why should i worry about Microsoft when I just found im on yet another bob spam run. Americans

details about them

eh.

The logic is this: Microsoft write (bad) software, Bob spams.
Id rather 'trust' the software company than the person called Bob.

new domain: optin2millions.net

Domain Name : optin2millions.net

::Registrant::
Name : Robert Soloway
Email : 2millions@mail.com
Address : PO Box 1259 - Seattle, WA
Zipcode : 98101
Nation : US
Tel : (206)223-1271

details about them

Fax : (206)223-1271

::Administrative Contact::
Name : Robert Soloway
Email : 2millions@mail.com
Address : PO Box 1259 - Seattle, WA
Zipcode : 98101
Nation : US
Tel : (206)223-1271
Fax : (206)223-1271

::Technical Contact::
Name : Robert Soloway
Email : 2millions@mail.com
Address : PO Box 1259 - Seattle, WA
Zipcode : 98101
Nation : US
Tel : (206)223-1271
Fax : (206)223-1271

::Name Servers::
ns3.nowhostthis.com
ns1.nowhostthis.com

::Dates & Status::
Created Date 2005-07-10 12:25:26 EDT
Updated Date 2005-07-10 12:25:26 EDT
Valid Date 2006-07-10 12:25:26 EDT
Status ACTIVE

Where ? well surprise me its China home of the spammers ? dig optin2millions.net

; <<>> DiG 9.2.4 <<>> optin2millions.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38354
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;optin2millions.net. IN A

;; ANSWER SECTION:
optin2millions.net. 3600 IN A 221.11.133.64

;; Query time: 3048 msec

inetnum: 221.11.128.0 - 221.11.223.255 
netname: CNCGROUP-HI
descr: CNC Group Hainan province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
admin-c: CH455-AP
tech-c: CH455-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HI
changed: hm-changed@apnic.net 20030122
status: ALLOCATED PORTABLE
source: APNIC
role: CNCGroup Hostmaster 
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC

10 July: Webmaster gets the history lesson. Please meet OPTIN2MILLIONS.COM

Registrant:
Bobby Soloway
POBOX1259
Seattle, WA 98101
US

Domain name: OPTIN2MILLIONS.COM

Administrative Contact:
Soloway, Bobby bsoloway200@usa.com
POBOX1259
Seattle, WA 98101
US
+1.2062231271
Technical Contact:
Direct, Domain dnstech@domaindirect.com
96 Mowat Avenue
Toronto, ON M6K 3M1
CA
+1.4165312084 Fax: +1.4165315584



Registration Service Provider:
Domain Direct, dnstech@domaindirect.com
1-416-531-2084
http://www.domaindirect.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.


Registrar of Record: TUCOWS, INC.
Record last updated on 08-Jul-2005.
Record expires on 05-Jul-2006.
Record created on 05-Jul-2005.

Domain servers in listed order:
NS1.DOMAINDIRECT.COM 216.40.33.21
NS2.DOMAINDIRECT.COM 216.40.33.22
NS3.DOMAINDIRECT.COM 204.50.180.58


Domain status: REGISTRAR-LOCK


5 July: The guy who checks the spam-quaranteened messages now and then (eg once in a blue moon) told me Bob made an appearance or too there, and said something that a Bob was giving a 'history lession'. Like we care.

Also: I met a person today as well who told me that Novell in there courseware where using the example domain "SpamIsUs.com" to block spam. sounds close? Just think is they used spamis.net they could have done a lot of there customers a huge favour.

Made me smile.... I might even drop them a line.

2 July: Bobs in Spain now, and the postmaster saw another bounce in the queue Yep Bobs gone and renewed another domain Ladies and Gentlemen may I introduce optinemailing.net The Joys of working saturdays....

Primus Telecommunications Pty Ltd (PlanetDomain/PrimusDomain)

Domain Name: OPTINEMAILING.NET
Reseller..............: #1 Cheap Domains
Created on............: 22 Jun 2005 00:00:00 EST
Expires on............: 22 Jun 2006 00:00:00 EST
Record last updated on: 22 Jun 2005 00:00:00 EST
Status................: ACTIVE

Domain Name: OPTINEMAILING.NET
Reseller..............: #1 Cheap Domains
Created on............: 22 Jun 2005 00:00:00 EST
Expires on............: 22 Jun 2006 00:00:00 EST
Record last updated on: 22 Jun 2005 00:00:00 EST
Status................: ATIVE


Owner, Administrative Contact, Technical Contact, Billing Contact:
Bob Soloway (ID00192989)
POBOX1259
Seattle, WA 98111
United States
Phone: +1.2062231271
Email: opt2005@mail.com


Domain servers in listed order:

NS1.VIRTUALUSE.COM
NS2.VIRTUALUSE.COM
NS3.VIRTUALUSE.COM
NS4.VIRTUALUSE.COM

Hey a new domain registrar! Now where ....

dig optinemailing.net

; <<>> DiG 9.2.4 <<>> optinemailing.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59688
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;optinemailing.net. IN A

;; ANSWER SECTION:
optinemailing.net. 1210 IN A 210.22.50.99

;; Query time: 21 msec

Thats China.

inetnum: 210.22.50.0 - 210.22.50.127 
netname: shilong-trade-ltd
country: cn
descr: xian city,shanxi province
admin-c: TC254-AP
tech-c: TC254-AP
status: ASSIGNED NON-PORTABLE
changed: moujh@china-netcom.com 20021106
mnt-by: MAINT-CN-ZM28
source: APNIC
person: TECH GROUP CNC 
address: 9/F, Building A, Corporate Square, No. 35 Financial Street,
address: Xicheng District, Beijing 100032, P.R.China
country: CN
phone: +86-10-88093588
fax-no: +86-10-88091442
e-mail: tech-group@china-netcom.com
nic-hdl: TC254-AP
mnt-by: MAINT-CN-ZM28
changed: zhaomq@china-netcom.com 20010917
source: APNIC

Smells like a Bob, have to wait until i get proper spam email though

1 July: Spamis.biz - you should know the routine by now.... Its Bob again

whois spamis.biz
Domain Name: SPAMIS.BIZ
Domain ID: D9727894-BIZ
Sponsoring Registrar: TUCOWS INC.
Sponsoring Registrar IANA ID: 69
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: TUDGUMZSDRD4TIV9
Registrant Name: Robert Soloway
Registrant Organization: SPAMIS
Registrant Address1: PO Box 1259
Registrant City: Seattle
Registrant State/Province: WA
Registrant Postal Code: 98111
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.2062231271
Registrant Email: contact@broadcastadvertise.net
Administrative Contact ID: TU7PPZAYNKB0HFZU
Administrative Contact Name: Domain Direct
Administrative Contact Organization: Domain Direct
Administrative Contact Address1: 96 Mowat Avenue
Administrative Contact City: Toronto
Administrative Contact State/Province: ON
Administrative Contact Postal Code: M6K3M1
Administrative Contact Country: Canada
Administrative Contact Country Code: CA
Administrative Contact Phone Number: +1.4165312084
Administrative Contact Facsimile Number: +1.4165315584
Administrative Contact Email: admin-contact@domaindirect.net
Billing Contact ID: TUAFYHRK4M9KJRXR
Billing Contact Name: Domain Direct
Billing Contact Organization: Domain Direct
Billing Contact Address1: 96 Mowat Avenue
Billing Contact City: Toronto
Billing Contact State/Province: ON
Billing Contact Postal Code: M6K3M1
Billing Contact Country: Canada
Billing Contact Country Code: CA
Billing Contact Phone Number: +1.4165312084
Billing Contact Facsimile Number: +1.4165315584
Billing Contact Email: admin-contact@domaindirect.net
Technical Contact ID: TUSEET3MHGQ2FPDX
Technical Contact Name: Domain Direct
Technical Contact Organization: Domain Direct
Technical Contact Address1: 96 Mowat Avenue
Technical Contact City: Toronto
Technical Contact State/Province: ON
Technical Contact Postal Code: M6K3M1
Technical Contact Country: Canada
Technical Contact Country Code: CA
Technical Contact Phone Number: +1.4165312084
Technical Contact Facsimile Number: +1.4165315584
Technical Contact Email: dnstech@domaindirect.com
Name Server: NS1.DOMAINDIRECT.COM
Name Server: NS2.DOMAINDIRECT.COM
Name Server: NS3.DOMAINDIRECT.COM
Created by Registrar: TUCOWS INC.
Last Updated by Registrar: TUCOWS INC.
Domain Registration Date: Sat May 14 21:42:30 GMT 2005
Domain Expiration Date: Sat May 13 23:59:59 GMT 2006
Domain Last Updated Date: Sat May 14 21:42:33 GMT 2005

>>>> Whois database was last updated on: Thu Jun 30 19:14:53 GMT 2005 <<<<

where ? Looks lile ... Canada - Bob loves doing business in America ... NOT .....

dig spamis.biz

; <<>> DiG 9.2.4 <<>> spamis.biz
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54843
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;spamis.biz. IN A

;; ANSWER SECTION:
spamis.biz. 600 IN A 216.40.33.117

;; Query time:

Address: 96 Mowat Avenue 
City: Toronto 
StateProv: ON 
PostalCode: M6K-3M1
Country: CA 

NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20  
>NetName: TUCOWS-BLK1NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0 
NetType: Direct Assignment
NameServer: DNS1.TUCOWS.COM
NameServer: DNS2.TUCOWS.COM
NameServer: DNS3.TUCOWS.COM Comment: RegDate: 2000-06-09 Updated: 2003-10-10 NOCHandle: OPERA30-ARIN NOCName: Operations Admin NOCPhone: +1-416-535-0123 NOCEmail: dnsadmin@tucows.com

TechHandle: OPERA26-ARIN TechName: Operations Team TechPhone: +1-416-535-0123 TechEmail: dnstech@tucows.com OrgTechHandle: OPERA26-ARIN OrgTechName: Operations Team OrgTechPhone: +1-416-535-0123 OrgTechEmail: dnstech@tucows.com

suspended alreadyLol.

30 June: New 'poo' in in the inbox and it looks like its been sent via another bot net computer (meaning the owner does not know there sending spam) - but quite humorous this one Breaking News for Robert for this month is a piece of old journalism from November last year. I wont indulge you with it.

Something in the mail points to a ?new? domain spamis.biz Something else to checkout...

My Bob seems to have cash to flash on domain registrars recently.

24 June: Bob is apparently spamming again, and recycling some old domain names he has used in the past. The host reported changes . Welcome insert a fanfare to broadcastemailadvertising.net Here comes the dns, and registration.

Domain Name : broadcastemailadvertising.net ::
Registrant:: 
Name : Joseph Lehmann Email : Lehmann1@safe-mail.net Address : 1661 Oro Vista RD Zipcode : 92154 Nation : US Tel : 619-749-3840 Fax : ::Administrative Contact:: Name : Joseph Lehmann Email : Lehmann1@safe-mail.net Address : 1661 Oro Vista RD Zipcode : 92154 Nation : US Tel : 619-749-3840 Fax : Technical Contact:: Name : Joseph Lehmann Email : Lehmann1@safe-mail.net Address : 1661 Oro Vista RD Zipcode : 92154 Nation : US Tel : 619-749-3840 Fax : ::Name Servers:: ns8983.broadcastemailadvertising.net ns1594.broadcastemailadvertising.net ::Dates & Status:: Created Date 2005-06-09 12:52:13 EDT Updated Date 2005-06-09 12:52:13 EDT Valid Date 2006-06-09 12:52:13 EDT Status ACTIVE <<>> DiG 9.2.4 <<>> broadcastemailadvertising.net ;; global options: printcmd ; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1564 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broadcastemailadvertising.net. IN A

;; ANSWER SECTION:
broadcastemailadvertising.net. 43200 IN A 218.234.109.216

;; Query time:

Well that currently is Korea

inetnum: 218.234.0.0 - 218.239.255.255 
netname: HANANET
descr: Hanaro Telecom Co.
descr: Kukje Electornics Cneter Bldg. 1445-3 Seocho-Dong Seocho-Ku
country: KR

Who is Joseph ?

20 June: Created a comment section about this spamis ranting Bobs got up and running and found out the .org site is defunct.

Not sure whats happening about spamis.cc that was also reporting 'not found'

Its dead jim

17 June: The mail system team found this late last night - the spam filter/mail system thing rejected Bob's message, but the message was badly formatted according to how email should be sent.

So the mailserver then tried to send a message back. Lets have a look at the log.

connect to spamis.org[216.40.33.117]: Connection refused (port 25) 
Jun 16 00:31:58 hostname MAILSERVER TYPE/smtp[NUMBER]: MSG ID: to=<contact@spamis.org>,
relay=none, delay=3327, status=deferred (connect to spamis.org[216.40.33.117]: Connection refused)

The mailserver could not even connect to his mailserver that one of his spammy isp setup for Bob. The mail team deleted the message from the outbound queue.

So it seems that Bob here is very happy to send send his delusional crap via open proxies - (see list), but very unwilling to receive stuff. Hmm too many spammers do this.

Have at laugh at Bob, we are.

10 June: contact@spamis.org Bob 'thinks' that microsoft sends the spam, not himself - whom also sent this spam to us. I love this moron with learning difficulties. Now the spammer decides he is now an anti-spammer and yes I believe in pixies too.

I may dislike Microsoft but if they are intentionally spamming people then it is a profit centre.
I think it should to be mentioned as a product on there website - can't see it sorry. Personally we are all looking forward to Bob using this site as evidence in his spams to prove his perverted logic.

We can only dream.

.You are receiving this email notification because... 

-> MICROSOFT SENDS ILLEGAL UNSOLICITED COMMERCIAL SPAM <-

OUR MISSION: Worldwide Boycott of MICROSOFT Software / Hardware / Service
SHOW YOUR SUPPORT: "Don't Support Illegal Spam, Don't Buy Microsoft Produ

7 June: Busy Busy Busy!

Bob has ?apparently? been sub-renting this house

Facts are a little confused

There is also apparently a Rob Cain at the address and a gardener as well (?Saladoff family?)

Soneone has sold the house with the picture of the cars in. This house was being used by Bob for domain registrations.

Thanks to the Real Estate agent who made these available publicly over the web and also to the person who told me about it (a large thank you to you.)

So we now have interior pictures. After the last picture there is more text relating to the sale

It will be interesting to see if the money goes to Microsoft - or this not his to begin with - Robert has been buying new domains and webhosting his new address seems to be here. Pictures moved to About the spammer section

Outside new1

A big thank you to Gateway Real Estate
http://www.ashlandagent.com/sold.htm (V E R Y S L O W W E B S I T E)

Property Type: Residential
Status
)

Status Sold
Date 05/20/05
Listing# 251104
Price 1,093,000
Address 279 Granite St
City Ashland
Area Ashland
BD 3
BA 3
Lot Size 0.230
Sq Ft 3748


Property Type Residential Property Subtype Residential
Area Ashland

Beds 3 Sq Ft(approx) 3748 Seller
Baths(FH) 3 (3 0) Price/Sq Ft 291.62

Year Built 1999 Lot Sq Ft(approx) 10019 ((Assessor))
Tax Act ID 10930582
DOM 24 Lot Acres (approx) 0.230
TRS 39 1E 8 Selling Price $1,093,000 SP%LP 100.00

Marketing Remarks This beautiful home is located across from Lithia Park by the upper duck pond.The focus of the main floor is the large family/kitchen area with its 19'ceilings, oversized windows, fireplace, & hardwood floors. On the second floor, a bridge over the main floor separates the master bed/bath from the other two bedrooms. Each bedroom has its own balcony and walk-in closet. Below the main level is a 500' finished space that offers many possibilities. From this level, you enter the 4-car garage. The 1/4 acre is totally maintenance free.Some great trails are easily accessible from this property.

6 June: He's back! with spam, I'm still one of those 'luck