Broadcastingtoday.biz (and other domains) spam methods.  who be Robert (aka Bob) Soloway of NIM Corporation.

Quick page links:

MIRROR of this Page http://uk.geocities.com/sjwest01
/broadcastspam.html: Here (being honoured by the great man himself, by repeated site visits.)

Primer Fact from Fiction - beyond the bullshit and lies
Page History (just below),
NIM Corporation spam domains - listed
  a 'brief history' of Robert Soloway activities/other places to look.
  Having problems with Robert - Client/Supplier you are not alone.
  Testimonials - what you ahem 'buy' from Bob.
  Singalong to to Bob's spam - what we spam victims 'do'
  Bobs new website design:

  Legal problems  Robert's legal issues.
  Charities he 'helps' - rather ironic when you dig * new*
  Bob's education background/haunts

  Inside a ? sub-rented spammers house  which Bob has 
                                                               used for registrations . 

NIM Spam methods.

NIM Tracking methods. - sort of spam 'spyware'
NIM Tracking via SPF with your email address in, not Bob's

A Suspected Bob Soloway operation explained. new

IP's used for spamming

IP's blocked by me and spaming for Bob (reports seen) * new
 
Can you Help/Credits
'Blogish' bit - a date based timeline  - whats happening now !

Member of the press ?

Notices: Most of the links on this page are internal.
You won't visit any spam website unless you type it in

Search engine visitors: This page has lots of
other junk on it - I will try and make it flow.
So if you typed some vague keyword or ip
address use your 'find feature' for that phrase.

Anyhow please meet my (and probably yours too)
most prolific spammer  who does not
understand the concept of 'no'


Translate:

Fact from Fiction - a primer on Bob Solaway

This page is not 'fan' literature, but an attempt to put together the facts of how Robert spams you and me. - it is not all of my own work.  And an attempt to get people who are thinking of using Roberts 'services' as counter to his claims which a court has as part of the evidence against him.

our spammer ?I've never met Robert, or used his 'service' etc - but a lot people including Microsoft (of which im sure you have heard of) consider him a problem.

So if you thinking about taking Robert up on his offer consider this.

  1. His list was not used when he spams
  2. I never requested mailings from Robert - but I got them.
  3. I have no idea if I am still on his list or not after opting out - its an academic point now
  4. I include actual 'testimonials' from people who signed up for Roberts offer
  5. Robert  is using spamware to mail his junk.
  6. And spamware that appears to use windoze trojan  pc's
  7. He hosts in China - who it appears don't mind spammers.
  8. It it doubtfull that the 478 clients (not the thousands claimed) of Robert got the million plus mailings - Robert could not tell

Lets summarise, He spams, his mailings are not 'can-spam' compliant, and this is not me making these claims this information can be found throughout this document

For the record - I just list the spams that my Domain owner email gets. Robert for some strange reason kept appearing in my inbox.  So this is a 'homage' to his  business operation.  Should you think this just 'sour grapes' then I suggest you email some of the clients who  having taken up Robert  and paid him discovered the truth.

So before you send Robert money to his 'paypal' account - please read the experience of 'clients', court documents and so on.

Once equipped with the facts  - hope you  will 'do the right thing'. 

A wiki entry on Bob for those of you who like extra sources of information

What about this spamis nonsense.

Those of you lucky enough to  get a spamis spam (I was lucky) will know that Robert is having a go at the people who are taking him to court.  I have no idea of what Bob is on but it is weird stuff. 

Many 'spammers' become anti-spammers when they are rumbled.  How long it continues for is a debatable point.

Bob is still Bob - so he is still a spammer. 
As to Bob being 'persecuted'  well if Bob thinks that way - then his 'stupidity' helped started it. 

That I think is a fair assessment on Spamis which a domain registrar has now terminated for breaking some rules set out in their terms and conditions.

The text below explains how I was introduced to Bob Solaway and how this page was eventually created.

If you came from my spamming the domain owner page  then you know the background.  otherwise let me recap.

Spammys house (see address below)  credit Thank you to the Roadie for the picture.In 2002 a couple of domains I look after changed registrar, so this meant the contacts in the whois changed.  The whois lists information about the owner and the technical contacts various internet rfc's require you have these so people can contact you, the downside of this ideal system is that spammers can also spam you as most domains not owned by spammers follow the rules..

Since spammers can joe-job you it is best not to have filters on these email accounts as it might be a another domain warning you that a spammer is using your domain name (if you don't know it already)

So the billing, technical, and administrator plus the owner contacts changed in the year 2002 - for good measure a web page was setup advising persons of this.  In June 2004 Broadcastingtoday.biz raided the whois by some means and decided to send me spam. and to all of the accounts I created in 2002.  which is nice of them since these accounts don't send email.

Enough history - lets move to 2004.

So in June 2004 I got spammed via my whois entries so I renamed a few things and started my experiment.  I also renamed the billing and technical contacts. they have since rescanned the whois and have sent spam to these new names this has become experiment 2.  No web page was put up with the changes so they are definitely raiding the whois for there claimed 28 million email addresses.

The spams to the domain aliases are similar to the experiment (see link) I am running this is the 'body' of a freshly subscribed address from my whois entry - a spam example from the 15th September 2004..

<<>> DiG 9.2.4 <<>> www.broadcastemailcorp.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8845
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.broadcastemailcorp.org. IN A

;; ANSWER SECTION:
www.broadcastemailcorp.org. 1685 IN CNAME odo4.meibu.com.
odo4.meibu.com. 20 IN A 218.88.44.247
email like this to 28 million people for free...

http://www.broadcastingtoday.biz



----------------

this email was sent to gain attention to non-profit
organizations that aid low-income individuals gain
access to the internet and technology looking for
immediate exposure. we make no profit on any of
these services, and we offer this service to help
organizations benefiting impoverished individuals
gain access to the internet throughout the world.

emailing is only zero amount if you are a non-profit
organization that aids low-income individuals gain
access to the internet. at our web site above, simply
contact us by mail for further details.

the primary purpose of this email is directed at non-profit
organizations that benefit low income individuals gain access
to the internet and technology in all countries worldwide.

several organizations worldwide have already taken
advantage of our free offer, and we look forward to
benefiting many more in the future.

if you are not a non-profit organization interested in our
non-commercial/non-profit email notifications that benefit
various world causes, please unsubscribe at:

contact us at: po box 1259, seattle, wa 98111

(look familiar?) They are consistent in there attempts to spam me, since i have not unopted from the billing and technical contacts the spam is less than from the owner email which has had 30 ish spams after opting out of the Broadcastingtoday.biz list.  Surprisingly Robert does not appear to spam webmaster or postmaster accounts - but I'm sure that will change one day. 

Suspected operations of Bob Soloway.

This is pure speculation on the basis of the facts seen from this page (TO WRITE COME BACK SOON)

Being subscribed:
1, Spam Victim: registers an internet domain
2, Bob Soloway: Hires help, or looks up what was entered in step 1, either using a mining tool, or a box of spyware/virus spybots pc that mask the number of requests for  ahem 'sales leads' like email addresses.

Being spammed:
1, Bob Using non american internet companies (normally Korea, or China) Bob sets up the same website over and over again
2, Bob uses/or employs help or his own

1 Spybot network or
2 open proxy Microsoft windows exchange servers to send (example ip addresses here)

his spam using Darkmailer.

Trying to unsubscribe:
1, Means you get even more spam - a 'feature' yet to developed by Bob - well you wanted spam didn't you ? or a misunderstanding of the word 'no' really means 'yes'

Other things Bob does well:

1. Autocreation of yahoo geocities (free webspace) aliases/accounts that link to websites if Bob is having problems (I am only using for Bob dataset examples only here, other spam that employs the geocities redirect I would not make the call about) I assume a script of some kind is run

That covers it

Singalong to Bobs Spam

I'd like to credit basaltbuster who lives at gmail for this, I'm no songwriter - alas you cannot buy it on itunes, or if your into open source sing it yourself, if  anyboy wants to mp3 it, I'd willingly host it.

To the tune of the Beach Boys song Barbara Ann:

went for my mail .... had to get a pail
the inbox is full of all of his crappy bull

soloway ....  bob bob ... bob soloway
you got me clicking and a reading ...  larting and deleting
soloway ... bob bob .... bob soloway

bob is the man ham sending out the charity scam spam
special offers just for you ... who are dumb enough to choose

soloway ... bob bob ... bob soloway
you got me clicking and a reading ...  larting and deleting
soloway ... bob bob .... bob soloway

advertise to many ... for just a couple pennys
soon millions will regret the day you ever met

soloway .... bob bob ... bob soloway
you got me clicking and a reading ...  larting and deleting
soloway ... bob bob .... bob soilaway

some day in jail he will regret sending all the mail
and all the boxes that he crammed ... in violation of can spam

soloway ... bob bob .... bob soloway

newportcorp.cn

you got me larting and deleting ... clicking and a reading
soloway ... bob bob ... bob soloway

Its all part of the Soloway experience. - if the crazy frog can get to number 1....

Domains Owned (observed so far)

EMAILTODAY2004.COM  - details about them links for all on this page.
BROADCASTEMAILINGTODAY.BIZ - details about them located on this page.
BROADCASTINGTODAY.BIZ - details about them on this page.
BROADCASTEMAIL.ORG - details about them on this page.
newportmarketing.com - details about them on this page
BROADCASTEMAIL.US - details about them on this page.
broadcastadvertise.org - details about them on this page
spamis.net details about them on this page
spamis.cc details about them on this page
spamis.biz details about them on this page
broadcastemailadvertising.net details about them on this page.
optinemailing.net details about them on this page
optin2millions.com details about them on this page
optin2millions.net details about them on this page
optinemailingtoday.com details about them on this page
optinemails.org details about them on this page
optinemailtoday.biz details about them on this page
optinemailing.biz details about them on this page
optinemailings.us NEUSTAR seem to have shut it (external link to (NEUSTAR REGISTRAR) down
broadcastingemail.us details about them on this page
emailingtoday.org details abut them on this page
searchengineranking.cn details about them on this page
broadcastingemailing.org details about them on this page
security-validations.com details about them on this page
broadcastemailservices.biz details about them on this page
broadcastemailservices.org details about them on this page
3322.ORG details about them on this page
broadcastemailcorp.org details about them on this page
cyberservices.com details about them on this page
China here we come
newportcorp.cn details about them on this page.
jzgx.nydns.cn details about them on this page.
broadcastemailingcorp.cn details about them on this page


then: IP hosts (see the list below)

http://de.geocities.com/email24624broadcast65559/ to details -> http://83.69.46.224/wm/
http://83.237.66.218/wm/

http://uk.geocities.com/Griselda70698Sol20116/ redirects to -> http://210.179.190.250/wm/
http://uk.geocities.com/Ingamar91782Leoine31932/ also redirects to
http://210.179.190.250/wm/
as does
http://uk.geocities.com/Gabbie86388Ninetta16900
http://de.geocities.com/Louis22093Tamma24664/

http://210.179.190.250/broadcastemail redirects to: http://uk.geocities.com/Fancy9059Cammy99965/
and http://de.geocities.com/Petronille78514Sarena78406/
and http://uk.geocities.com/Brina9829Krysta60333/
http://uk.geocities.com/Yasmeen25258Kaila54034/
etc - more stuff below.

* denotes active spamvertising

Spamming Method

Going back to broadcastingtoday.biz He has also 'lost' half million addresses in his latest spam (experiment 1 item 75) but I'm afraid I'm not one of them.  Then (on the 1st October)  However good news he's back to 28 million addresses.  So it seems one can never 'get off'

Jan 2005: Good news The webmaster has reported a spam from broadcastemailingtoday.biz that just leaves postmaster ...

Lets be 'Geeky' and take a look at the mail.log file:

01/10/2004 03:11:54 PM  pD9E51757.dip.t-dialin.net (217.229.23.87)
connected
01/10/2004 03:11:59 PM  Message 004E0061 (MessageID:
<JIUQTKJMWASOTLWYPXCURQ@fastestresponse.net>) received from
pD9E51757.dip.t-dialin.net (217.229.23.87) size 2466 bytes
01/10/2004 03:11:59 PM  SMTP Server: pD9E51757.dip.t-dialin.net
(217.229.23.87) disconnected. 1 message[s] received
01/10/2004 03:11:59 PM  Attempting delivery to: User
billing@Domain.name, admin@Domain.name admin@Domain.name from
donc@boardermail.com

Notice that broadcastingtoday.biz is nowhere to be found in in the headers but 'boardermail.com' or 'fastestresponse.net'  and instead of sending his junk from Korea Robert  is sending it from 217.229.23.87 which is somewhere in Germany  Which is not quite how Robert 'advertises' his package on his website as apparently they all have broadcastingtoday.biz in the headers.  Sorry to say i cannot see it - can you ?.

RANGE 217.224.0.0 - 217.237.161.47

?newportcorp.cn

netname: DTAG-DIAL15

descr: Deutsche Telekom AG

country: DE

remarks: ******************************************************************

remarks: * Abuse Contact: http://www.t-com.de/ip-abuse in case of Spam, *

remarks: * Hack Attacks, Illegal Activity, Violation, Scans, Probes, etc. *

remarks: ******************************************************************

source: RIPE

details about them

route: 217.224.0.0/11

descr: Deutsche Telekom AG, Internet service provider

address: Deutsche Telekom AG D-90492 Nuernberg Germany

phone: +49 180 5334332, fax-no: +49 180 5334252

e-mail: abuse@t-ipnet.de

So it appears he is using hacked windows pc's to send his email  You see this email marketing business is very legitimate indeed.  Lets be charitable and try another being the 4th October

04/10/2004 10:46:40 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) connected
04/10/2004 10:46:50 AM SMTP Server: Message 0035B9F2 (MessageID: <15910kqk7432peji$23698272w846$053kt177thb720@pituitary>) received from 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) size 2434 bytesbeing cheap
details about them

04/10/2004 10:46:51 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) disconnected. 1 message[s] received


Now thats coming from Taiwan,  which certainly is not part of Korea, The next comes again from Germany and pD95D7049.dip.t-dialin.net (217.93.112.73)

What domain spams what role account (it will be updated on Roberts next domain rotation)

mixailovich@tekcom.ru

Domain spams to email account/aliases:

remote
report

postmaster

info@

web
master

billing

admin

technical

owner

EMAILTODAY2004.COM


new




y
BROADCASTEMAILINGTODAY.BIZ


column
Y
y
y
y
y
BROADCASTINGTODAY.BIZ







y
**** BROADCASTEMAIL.ORG



y
y
y
y
y
** BROADCASTEMAIL.us


y

y
y
y

broadcastadvertise.org





y


spamis.net








spamis.cc








broadcastemailadvertising.net 







spamis.biz ?




y
y


optinemailing.net








optin2millions.com 



Y




optin2millions.net 



Y
Y



optinemailingtoday.com


y



Y

optinemails.org




Y



optinemailtoday.biz




Y


Y
optinemailings.us - KILLED




Y



broadcastingemail.us








emailingtoday.org




Y

Y
Y
searchengineranking.cn







Y
broadcastingemailing.org







Y
security-validations.com (heard about)








broadcastemailservices.biz







Y
broadcastemailservices.org





Y

Y
3322.ORG




Y



broadcastemailcorp.org




Y
T

Y
http://de.geocities.com/email24624broadcast65559/
But redirects here:
http://83.69.46.224/wm/
also
http://uk.geocities.com/Adi96471Rutter32324/
http://de.geocities.com/Viviene12522Billie34776/




Y
Y

Y
http://83.237.66.218/wm/ - via geocites (free websites)
Jan/2006 restarted:
http://83.237.66.218/broadcastemail/
uri: http://au.geocities.com/christiane14285danice73145/
uri: http://sg.geocities.com/ross84151renaldo78077/
uri: http://asia.geocities.com/taffy92423jennette64105/
uri: http://sg.geocities.com/nettie88750charis26018/
uri: http://asia.geocities.com/remington17144dari12110/







Y
http://210.179.190.250/wm/ - via geocites again
http://210.179.190.250/broadcastemail
 
uri: http://uk.geocities.com/Griselda70698Sol20116/
uri: http://uk.geocities.com/Ingamar91782Leoine31932/
uri: http://de.geocities.com/Dolph1663Hatti38832/
uri: http://de.geocities.com/Petronille78514Sarena78406/
uri: http://uk.geocities.com/Brina9829Krysta60333/
uri: http://uk.geocities.com/Yasmeen25258Kaila54034/
uri: http://de.geocities.com/Liva81348Yasmin50151/
uri: http://degeocities.com/Olvan27172Celka14168/ <- Bob bug!
uri: http://de.geocities.com/Ddene66341Arlie58920/




Y
Y
Y
Y
http://83.237.66.218/broadcastemail/ <- renamed from wm
via geocites
uri: http://uk.geocities.com/Preston17058Charmain74309/
uri: http://de.geocities.com/Granger62094Lauryn10094/
uri: http://de.geocities.com/Nappie16328Dorian45917/
uri: http://de.geocities.com/Herschel64700Frasier42753/







Y
http://147.46.30.174/broadcastemail/
uri: http://uk.geocities.com/hedwiga78946vi64062/
(same link in email twice)
uri: http://uk.geocities.com/harland91562dianemarie24502/
uri: http://uk.geocities.com/lawrence89699flore17738/
uri: http://de.geocities.com/Malvina10647Garwood23990/
uri: http://de.geocities.com/Candide51857Fanchon45885/
uri: http://de.geocities.com/Adan70125Cecile5424/
uri: http://uk.geocities.com/Bev25884Fair61456/
uri: http://in.geocities.com/marlyn29638darya739/
uri: http://uk.geocities.com/sophey43411desmond75026/







Y
http://147.46.240.97/broadcastemail/
uri: http://ca.geocities.com/kassey52278symon70907/
uri: http://sg.geocities.com/vachel20600karil61129/








http://198.93.1.73/broadcastemail/ <- America!!
uri: http://uk.geocities.com/gideon6497trumaine14477/
uri: http://uk.geocities.com/lissi56181holmes35/







Y
http://147.46.135.180/broadcastemail/
uri:
http://sg.geocities.com/helga34488dewey8633/
http://147.46.216.152/broadcastemail/
uri: http://uk.geocities.com/maurits59884minerva80565/










Y









http://219.136.53.13/broadcastemail/
uri: http://asia.geocities.com/ax55737titus16973/
uri: http://au.geocities.com/minne59928elihu63204/
uri: http://au.geocities.com/lorena76022clare70672/








broadcastemailcorp.odo.com.cn


Y

Y
Y
Y

http://210.66.241.1/broadcastemail/
uri: http://au.geocities.com/albie58684patrizio81985/
uri: http://uk.geocities.com/laurens12611francisco8457/
uri: http://ca.geocities.com/dorian63510leeanne2641/
uri: http://ca.geocities.com/maurene27548enrico51190/
uri: http://au.geocities.com/dorena6870eddie67768/
uri: http://au.geocities.com/ashlie55377shannon87205/
then again:
http://210.66.241.1/broadcastemail/
(
h1-210-66-241.seed.net.tw
internal page link)
uri:
http://au.geocities.com/kaiser59996mirella87067/
uri: http://au.geocities.com/lindsay83917bobbie29498/
uri: http://au.geocities.com/kaiser59996mirella87067/
uri: http://ca.geocities.com/myra12307dorelia94407/
uri:
http://ca.geocities.com/vevay33904emily13985/
uri:
http://au.geocities.com/cathi62098marybelle66314/
uri:
http://uk.geocities.com/brendon76690ally4991/
uri:
http://au.geocities.com/catlin73390ramsey77106/
uri:
http://au.geocities.com/catlin73390ramsey77106/
uri: http://au.geocities.com/herve39362denver10612/









Y






Y
http://securesite.odo.com.cn (seen evidence of spaming seen here)
Y
Y





Y
http://195.6.54.3/broadcastemail/

from nanas
uri: http://au.geocities.com/vinny45371corny32621/
uri: http://ca.geocities.com/ben96679elana92148/
uri: http://ca.geocities.com/mata55202jacinthe84242/
Y







status: up
from: 26 February 2006
to:  20 March 2006
uptime:  24 days+

http://217.74.161.86/broadcastemail/ (russia)

from nanas
uri: http://ca.geocities.com/filippa54782grover11025/
uri: http://ca.geocities.com/arch93554vinni74935/
uri: http://ca.geocities.com/karita91029kikelia28943/
uri: http://au.geocities.com/opal65982berta74613/
uri: http://au.geocities.com/currie50477dannie87600/
uri: http://uk.geocities.com/hamlen58035gabriele32842/
uri: http://au.geocities.com/melony8507kayle43814/
uri: http://au.geocities.com/sansone28259kippar39430/
uri: http://ca.geocities.com/rube55132fidelity2938/
uri: http://ca.geocities.com/cecilla59747vonny23020/
uri: http://ca.geocities.com/barny52108hanni35248/
uri: http://au.geocities.com/pierette2630rhodie89397/
uri: http://uk.geocities.com/terry88878odelia31888/
uri: http://ca.geocities.com/cortney68092raimondo66187/
uri: http://uk.geocities.com/aldridge98150wilfrid4076/
uri: http://ca.geocities.com/artur74689harp18490/
uri: http://au.geocities.com/olympia19940parsifal46310/
uri: http://au.geocities.com/johnny14789broderick63702/
uri: http://uk.geocities.com/ramona22912portie25673/
uri: http://au.geocities.com/tootsie62542nikita37436/
uri: http://uk.geocities.com/antonius14010waverly97461/

Y







status: down

http://62.119.28.243/broadcastemail/

uri: http://uk.geocities.com/louisette42897saudra96871/
uri: http://au.geocities.com/jessi2635corrianne64610/
uri: http://au.geocities.com/prinz51107blancha72518
uri: http://ca.geocities.com/adolph55110lona51107/
uri: http://uk.geocities.com/allyce41085tuesday30303/
uri: http://uk.geocities.com/roman99946lonna66099/
uri: http://uk.geocities.com/ginnie14697nonnah45520/
Y








time: 50 days (1month +)

http://broad.ztjm.com/ (china)

?not sure? but if i read spamcop report correctly
uri: http://uk.geocities.com/ramona22912portie25673/
uri: http://uk.geocities.com/antonius14010waverly97461/
uri: http://au.geocities.com/tootsie62542nikita37436/

NEWS: new WEBSITE
China doma is now 'expired'
Y







status: down
up-time: couple of hours

http://62.149.193.221/broadcastemail/  (italy)

uri: http://uk.geocities.com/sibby2891janot79802/
uri: http://au.geocities.com/dina19963electra91067/
uri: http://au.geocities.com/guglielma15411romona79535/
uri: http://uk.geocities.com/paulita74406charlotta21884/
Y







status: down
uptime: couple of hours

http://83.17.42.146/broadcastemail/ (poland)









uptime: 61 Days

http://210.7.70.150/broadcastemail/ (india - very lower caste)
uri: http://au.geocities.com/beverlee78668marla31926/
uri: http://ca.geocities.com/ted35795falito33228/
uri: http://uk.geocities.com/sandy84914isaiah5479/
? http://uk.geocities.com/natty44690tammi64102/
? http://au.geocities.com/monah56549lincoln29484/
? http://uk.geocities.com/sandra88398ephrem4089/
Y








upime: 6 days

http://62.204.237.170/broadcastemail/ (cz,eu)
uri: http://uk.geocities.com/alvinia82960olvan76817/
uri: http://au.geocities.com/dionysus20558ambros44611/
uri: http://ca.geocities.com/merci13559carley92014/
uri: http://uk.geocities.com/alika8411wiley87321/
uri: http://ca.geocities.com/ted35795falito33228/
uri: http://uk.geocities.com/belicia60930bobbi557
uri: http://au.geocities.com/larina98788evonne28916/
uri: http://ca.geocities.com/berti75397orv90753/
uri: http://ca.geocities.com/berti75397orv90753/
Y








uptime:  10 Days

http://advertising.voddo.cn/ (China)








uptime: 6 days

http://62.123.150.18/broadcastemail/ (Italy)
uri: http://uk.geocities.com/boot74365brigitta26464/
uri: http://ca.geocities.com/talbot36966eleanore31170/
uri: http://au.geocities.com/orville43112erena4619/
uri: http://ca.geocities.com/hilda56247piper52204/
uri: http://ca.geocities.com/horace45655silvano62082/
uri: http://uk.geocities.com/crysta67804emmanuel71305
uri: http://au.geocities.com/laney22743hale94335/
uri: http://uk.geocities.com/nesta39103enos89743/
uri: http://uk.geocities.com/wain70005carlin1020/
Y







      

uptime: 2 days

http://217.40.152.75/broadcastemail/ (England)
uri: http://au.geocities.com/guglielma15411romona79535/
uri: http://au.geocities.com/monte41495robenia81545/
uri: http://au.geocities.com/margery43414miller98997
uri: http://uk.geocities.com/sibby2891janot79802/
uri: http://uk.geocities.com/natty44690tammi64102/
uri: http://au.geocities.com/simmonds61112frederic508/
uri: http://uk.geocities.com/miguelita3538christina90514/
uri: http://ca.geocities.com/bengt190auberta16185/
uri: http://au.geocities.com/hermann20025caroljean2274/
uri: http://ca.geocities.com/valentino55129yuri24758/
uri: http://uk.geocities.com/boot74365brigitta26464/
uri: http://uk.geocities.com/miguelita3538christina90514/
uri: http://au.geocities.com/simmonds61112frederic508/
uri: http://ca.geocities.com/bengt190auberta16185/
uri: http://ca.geocities.com/hilda56247piper52204/
uri: http://ca.geocities.com/talbot36966eleanore31170/
uri: http://ca.geocities.com/nita60800wolf58783/
uri: http://au.geocities.com/orville43112erena4619
uri: http://uk.geocities.com/orelia72474charisse34696/
uri: http://au.geocities.com/june47487timmy59996
Y







status: up
from: 18 March 2006
to: still up

http://62.193.238.142/broadcastemail/ (France) - date entry

uri: http://uk.geocities.com/tiffy35215dyane77873/
uri: http://uk.geocities.com/misha37486cammi24695/





Y







time: 21 Days (blank page)

http://broad.1122.ish.cn/ (China)
Blank page - terminated








status: up
from: 11 April 2006
to:

newportcorp.cn pointed to -> 222.210.196.86 (china)
thn-> 222.210.203.37 (china)
now-> ab508.vicp.net 60.0.157.29 (china)
Y







duration:  13 Days

http://jzgx.nydns.cn/ 60.18.162.5 (china)








status: up
from: 12 May 2006
to:
duration:

http://62.193.224.161/broadcastemail/








status: up
from: 12 May 2006
to:
duration:

http://www.broadcastemailingcorp.cn/








coming soon
await !








' * ' denotes active current spam domain.
'**' prior spamvertised domain name

'***' prior domain before that
text in red  denotes a remote observation from a report i've seen
Remote report column denotes the email address could not be determined by myself (but the spam was deemed to be a Bob 'classic') .

etc...

- Red seen by others
- Black This information is observed by me alone -
if you google hard enough im sure others will confirm these findings.

Executive Summary of up hosts

Apnic (asia)

Ripe (europe/russia)

Other (Lanic)


Arin (america)

newportcorp.cn (et al)
broadcastemailingcorp.cn

http://217.74.161.86/broadcastemail/ (russia)
http://62.193.238.142/broadcastemail/ (France)
http://62.193.224.161/broadcastemail/ (France)


world tour logo


Moving along -  Since this page was once more dedicated to the Soloway Junk i get for our own domains technical contacts here is a list of the claimed ip addresses note that despite his domains being hosted in China/Korea  But we have ip's here from Japan, Australia, Brazil and New Zealand (and thats just the first couple).  the dns entry also seems to be telling me some of these appear to be dynamic ranges.

You have to admire the consistency of Roberts Operation - sorry I'm being sarcastic
As soon as I get confirmed Bob spam the table below will be updated

Our Bob Soloway Spam

Date (each entry denotes a spam)

'Published'
method

Sent IP (confirmed)

Origination ? (not confirmed)

email it was claimed from eg is it from
BROADCASTINGTODAY.BIZ etc in the headers ?



























































































n/a
Listwashed it appears Sob!


31 Jan


BSN-210-250-53.dial-up.dsl.siol.net (BSN-210-250-53.dial-up.dsl.siol.net [195.210.250.53])
ifkzdbsm5.eon.net.au  (0.12.140.61) by tz2-jre46.interfree.it  
Received: from Tykd2rkl770pg52iq (203.55.34.112) by ztonhmvbamu870.mweb.co.zw
id <7060298821562420.OU80.gypwgo93.mweb.co.zw @sovkhozssz7q895xxo6g>

Mason Townsend ebatlaster@uymail.com

27 January x 7 need I say more


Received: from pool-70-16-232-93.rich.east.verizon.net (pool-70-16-232-93.rich.east.verizon.net [70.16.232.93])


Reply-To: "Blake Thorne" <restonparker@coolgoose.com>
From: "Blake Thorne" <monksj@fastermail.com>

2006





25 December


from HSE-Ottawa-ppp157893.sympatico.ca (HSE-Ottawa-ppp157893.sympatico.ca [64.229.132.56])


mail13.mdlc.shaw.ca (138.40.128.105) by z1-jco775.valentini.net.ar with Microsoft SMTPSVC(5.0.2195.6824);
     Sun, 25 Dec 2005 01:33:52 +0100
from Y2 (xi24.200.33.185.p0.o.sxhealth.co.nz 78.57.217.168)
     by mail20.z.shaw.ca (51.830.7jw3/86.25.66)


Daisy Chung rollandkrisp @fishhoo.com

4th December (3)


from pool-71-254-43-40.roa.east.verizon.net (pool-71-254-43-40.roa.east.verizon.net [71.254.43.40])

01.172.149.24 by bqpbz949-ji16.z9.pwgsc.gc.ca  with DAV;
Sun, 04 Dec 2005 20:09:49 -0700
Brandon Doherty timrolland @care2.com or
tomaskoock @ cheshiremail.com

1 December (2)


from 200-122-115-170.dsl.prima.net.ar (unknown [200.122.115.170])


dns1interfree.it  (150.192.91.240) by fzz5-sg42.umontreal.ca 
from bednbreakfast.nu (127.0.0.1) by dnsopenface.ca


new members of staff ! 
Solomon@ us
Yazzie@ us

1 December (2)


from h196.166.141.67.ip.alltel.net (h196.166.141.67.ip.alltel.net [67.141.166.196])


from slump (50.222.12.208) by ko4.downpour.draco.daly.adv.es
??.mnhs5-mail.peak.ditch.net.cable.rogers.com@grandeur>
Melody Hooper 

24 November


from 26-49-112.adsl.terra.cl (26-49-112.adsl.terra.cl [200.112.49.26])
rom week (154.232.64.159)
by jg5.mockernut.abuilding.captain.umontreal.ca
id <???.ixt767-mail.reserve.slug.net.cable.rogers.com@curiosity>
Becky Erwin donaldcrisp @ boardermail. com

24 November


26-49-112.adsl.terra.cl (26-49-112.adsl.terra.cl [200.112.49.26])
from week (154.232.64.159)
by jg5.mockernut.abuilding.captain.umontreal.ca
<?767-mail.reserve.slug.net.cable.rogers.com@curiosity>
Becky

19 November


sl51B6348C.pool.t-online.hu (dsl51B6348C.pool.t-online.hu [81.182.52.140])


adv.es  (115.172.122.172) by zi4-q07.interfree.it  with Microsoft SMTPSVC(6.0.1024.9818);
umontreal.ca (wzcmariahuis.be 147.205.109.90) by sxhealth.co.nz (8.12.10/8.12.9)
WL272694 (modemcable52.76-22.ig.aaki.dk 84.42.219.182) (authenticated bits=2)by ghi.org.il (8.12.10/8.12.9)
me !

9 November


dialpool-210-214-204-58.maa.sify.net (dialpool-210-214-204-58.maa.sify.net [210.214.204.58])
ns3deacons.com.hk  (35.108.67.198) by jk3-mn05.wzcmariahuis.be
from inphomatch.com.br (127.0.0.1) by dnssympatico.ca
why i am sending spam to myself again

8 November


from host123.200-82-88.telecom.net.ar (host123.200-82-88.telecom.net.ar [200.82.88.123])
from xpflwn24.web.de  (4.38.5.7) by fa898-dhc.etnic.be 
from dealtboyuw06 (avow96.210.127.24)

why I sent it

3 November, to 'Billing'


from 200-233-176-225.xd-dynamic.ctbcnetsuper.com.br (200-233-176-225.xd-dynamic.ctbcnetsuper.com.br [200.233.176.225])

arboreal-dns.mweb.co.zw (208.48.66.146) by aha52-i385.sxhealth.co.nz 
us

16 October, I say I say I need that Japanese phase book for 'fuck off bob'.


from zaqdb737afe.zaq.ne.jp (zaqdb737afe.zaq.ne.jp [219.115.122.254])
no crap
Cullen, Gerry  <charityinfo @coolgoose.com>

5 October, Bobs been hitting the spam filter im told, but this made it through, so yep Bobs still spamming.


from OUR IP ADDRESS  (unknown [202.158.187.170])
interesting ... but its really
no crap - 
"Mrs. Lusk" <charityinfo@ m a i l .c o m >

26 August

Trojan.Spybot
domain
200216103247.user.veloxzone.com.br (200216103247.user.veloxzone.com.br [200.216.103.247])
localhost.localdomain (HELO localhost.localdomain [127.0.0.1]) 
     by assailant.allsaintsfan.com (Mostfix) with ESMTP
billing @ 'me'

26 August


hayate.inuta.ecei.tohoku.ac.jp (hayate.inuta.ecei.tohoku.ac.jp [130.34.198.77]) localhost.localdomain (HELO localhost.localdomain [127.0.0.1])
     by pompous.sacmail.com (Mostfix)
me

23  August


cm6.gamma40.maxonline.com.sg (cm6.gamma40.maxonline.com.sg [202.156.40.6])
64 by zab3-aek95.vnmnh7.graffiti.net with DAV;
me again, but I 'love' Robert Spam

19 August


from sub51-128.uhh.hawaii.edu (sub51-128.uhh.hawaii.edu [132.160.51.128]
from 72 by fjy04-l7.cfupm7.yyhmail.com with DAV;
me but im apparently sending it from 
hawaii.

18 August


from rndf-146-55-196.telkomadsl.co.za (rndf-146-55-196.telkomadsl.co.za [165.146.55.196])
none apparently
im sending his spam to myself via south africa

9 August


stjhnf0123w-142163145101.nl.aliant.net (unknown [142.163.145.101])
details about them
(from qrb258cowbell@localhost)
by nj437-traceable822.pc886dcy.mailpanda.com
X-Authentication-Warning: g49-bristle04.rr516t.mailpanda.com:
 

Tomas Gunter

8 August


hlfxns0145w-142167143103.ns.aliant.net (hlfxns0145w-142167143103.ns.aliant.net [142.167.143.103])
osvg514.inmail24.com (106) by vl4-iy831.138mail.com
from Darylyrx58f3es90ong (15) by bdugnsx473.outgun.com
Demetrius Engle xrs.net

31 July


SHASTA189200.ig.com.br (unknown [200.151.189.200])
174 by yj73-tq919.fn2.yyhmail.com with DAV;
Wed, 11 May 2005 16:43:55 -0500
graffiti.net

30 July


USER.36.178.5.201.dial-ip.telemar.net.br (unknown [201.5.178.36])
from nomogram (120)
by nir397.coop.prorogue.chameleon.collegeclub.com
(InterMail vK.3.83.97.12 2-0092-283-7259-46-363936644) with ESMTP
id <7966133896.RNWGB0719.e7-mail.confluent.egg.net.cable.rogers.com@imperative>
gawab.com

29 July


ppp-0-110.dts.mg (ppp-0-110.dts.mg [193.251.140.110])
cns848mcnaughton@localhost 
by xmc451-immoderate969.e89ctb.spamis.net (7.68.02/3.68.81) id d167YS66la05419
oh guess

28 July


BSN-210-230-216.dsl.siol.net (BSN-210-230-216.dsl.siol.net [195.210.230.216])
mail5085.otp.merseymail.com (234) by w9-f5.merseymail.com with Microsoft SMTPSVC(5.0.2195.6824);
Thu, 28 Jul 2005 22:28:29 +0600
Received: from GK40 (lo160.kl71.m.merseymail.com 112) by mail547.a.merseymail.com (51.4.524nqr4/0.392.081)
casino.com (spot a pattern yet?)





25 July


ppp1349.va-east.my-users.ne.jp (ppp1349.va-eas69.46.224t.my-users.ne.jp [219.100.144.49])
khzgpc3.fresnomail.com (220) by d58-b.fresnomail.com 
with Microsoft SMTPSVC(5.0.2195.6824);Mon, 25 Jul 2005 09:15:37 +0100
chloroplastfcn064 (booky144)
     by fresnomail.com (sae4) with SMTP
     id <181873747ta133a>
     (Authid: EstherHorne);
     Mon, 25 Jul 2005 11:15:37 +0300
lissamail.com

25 July


pool-141-153-229-140.nwrk.east.verizon.net (pool-141-153-229-140.nwrk.east.verizon.net 
92 by exdhf0-lz0.q57.xmail.net with DAV;
Mon, 25 Jul 2005 08:01:51 +0600
asheville.com

25 July


pool-138-88-176-85.res.east.verizon.net (pool-138-88-176-85.res.east.verizon.net [138.88.176.85])
from 118 by vz651-r6.rllx4.myway.com with DAV;
Fri, 22 Jul 2005 18:41:57 -0400

graffiti.net

20 July


pool-138-89-212-150.atc.east.verizon.net (pool-138-89-212-150.atc.east.verizon.net [138.89.212.150])
rom boyhood (12) by x7.emendable.inoffensive.belies.joinme.com
(InterMail vG.1.40.54.72 8-27735-18-701-46-05016) with ESMTP
id <97786845025574.UAH0929.nvgu5-mail.cromwell.jitter.net.cable.rogers.com@abovementioned>

lycos.com

20 July


207-18-135-4.flex.net (unknown [207.18.135.4])
assimilable-dns.doramail.com (72) by xn8-k89.doramail.com with Microsoft SMTPSVC(5.0.2195.6824);
Tue, 19 Jul 2005 20:44:20 -0700
fresnomail.com

18 July


Not yet convinced about Bob ? see this



17 July


201-011-224-137.cslce7007.dsl.brasiltelecom.net.br (unknown [201.11.224.137])

koreamail.com

17 July

Trojan.Spybot
domain
a84-0-197-145.adsl-pool.axelero.hu (a84-0-197-145.adsl-pool.axelero.hu [84.0.197.145])
talcum-dns.allsaintsfan.com (68) by kod81-sr23.graffiti.net with Microsoft SMTPSVC(5.0.2195.6824);
Fri, 15 Jul 2005 21:46:03 -0700
canada-11.com

17 July


200-126-91-229.bk6-dsl.surnet.cl (200-126-91-229.bk6-dsl.surnet.cl [200.126.91.229])
BAD HEADER MIME error: error: unexpected end of preamble

Received: from mailpanda.com (20) by f64-u749.usa-11.com with Microsoft SMTPSVC(8.4.3737.5659);
Sun, 17 Jul 2005 01:41:45 +0600
Received: from merseymail.com (outgun.com 112)
by keromail.com (8.12.10/8.12.9) with ESMTP id n09OLZ147
for <?@?.?>; Sat, 16 Jul 2005 20:43:45 +0100 (EST)
(envelope-from freddarlong@joinme.com)
Received: from ZSS2449211974 (modemcable3.8-717.dy.linuxmail.org 216)
(authenticated bits=9)
by marketweighton.com
grafiti.net

16 July


rom mail4934.oxfrd.mailpanda.com (176) by q931-h91.mailpanda.com with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 16 Jul 2005 00:36:27 -0500
Received: from D84 (h197.gdy52.rm.mailpanda.com 31)
by mail28.mbc.mailpanda.com (2.31.52ae290/6.833.781) with SMTP id iiz8U3MBnj1;
Sat, 16 Jul 2005 01:35:27 -0400
outgun.com
10 July

from pool-138-88-90-162.res.east.verizon.net (pool-138-88-90-162.res.east.verizon.net [138.88.90.162])
from cochrane-gp454.credent.koreamail.com (230) by p8-pqd677.koreamail.com with Microsoft SMTPSVC(5.0.2195.6824);
     Sat, 09 Jul 2005 21:02:33 -0300

" Tracey Potts " <billpaxton@casino.com>

2 July


85-49-161-26.mad2.adsl.uni2.es (85-49-161-26.mad2.adsl.uni2.es [85.49.161.26])    

mail360.gdoo.spamis.biz (177) by je4-lz4.spamis.cc with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 02 Jul 2005 07:39:06 +0300
Received: from MZ13 (maf207.vd639.rt.spamis.cc 95)

30 June


12-215-214-8.client.mchsi.com (12-215-214-8.client.mchsi.com [12.215.214.8])

Received: from swish (112)
     by ts17.ahmedabad.congressional.weave.spamis.biz
     (InterMail vZ.4.12.63.75 2-2362-9-5-6-0518116160) with ESMTP
     id <18021987.TGH6289.ahb945-mail.befell.respire.net.cable.rogers.com@womanhood>

14 June


61-230-132-106.dynamic.hinet.net (61-230-132-106.dynamic.hinet.net [61.230.132.106])

from sq8bedraggle@localhost)
by ebz496-duncan073.b181ui.spamis.org (6.44.34/7.29.23) id gzk33BU78emb71;
Mon, 13 Jun 2005 18:22:01 -0700 GMT
X-Authentication-Warning: hny26-decompression8.hu819siy.spamis.org: u1electret set sender to contact@spamis.org using -j

no

6 June


Received: from 22

details about them

0-133-87-182.HINET-IP.hinet.net (220-133-87-182.HINET-IP.hinet.net [220.133.87.182]) 

Received: from xih7.cashette.com  (91) 
by bqm636-kyy.lissamail.com with Microsoft SMTPSVC(5.0.2195.6824);
Received: from treasonouspathogenicx1 (swaziland148)
          by ureach.com  (dvv8) with SMTP
          id <5753464wls91209lj>
          (Authid: JacobJohnson);

no

31 March


unknown [61.68.161.165]

cypcsiz7.centralpets.com (254.132.0.249) by i362-dni.care2.com
cuttlefishwakeupvh96 (countenance112.192.108.162)
          by marchmail.com (ams7)  (Authid: MercedesDuncan);

No and im not telliing you

19 March


* Back in business !
p3020-ipad04sinnagasak.nagasaki.ocn.ne.jp (p3020-ipad04sinnagasak.nagasaki.ocn.ne.jp [220.107.80.20])

224.155.244.156 by dj95-v53.uaeq570.bolt.com with DAV

No it was not and I am not telling you anymore

Status:


Listwashed (no I did not opt out)
This section is now 'history' *

* unless Robert starts spamming the technical contacts
when he rotates his domain name to something other
than broadcastemail.us


26 February


201-255-30-155.mrse.com.ar ([201.255.30.155])

xhufgn682.bluebottle.com (189.163.92.27) by v5-vvx10.bluebottle.com
from Miawvt09g850de69cax (50.55.24.125) by wpm10.bluebottle.com 

Siegel <rfrasier0@lycos.com>

15 February

Trojan.Spybot
domain

[200.11.78.138]

from jppxyvrzp3.bolt.com (62.36.232.228) by hvy5-qx50.boardermail.com
from Todx0bgs557h2grb (128.47.76.80) by swksfr019.bolt.com

shawnm@surfy.net

13 February


83.151.137.114

from bst4.bolt.com (84.182.60.76) by ek925-o42.boardermail.com
Dougrb0jve53zos056fwx (58.150.236.216) by ifnlsmsgo604.boardermail.com

Doug Heller roddy@bolt.com

12 February


adsl-69-209-114-1

details about them

69.dsl.klmzmi.ameritech.net [69.209.114.169]

from badland-dns.bolt.com (192.74.0.223) by du6-hu2.boardermail.com

Clifford Boone <patknowles@collegeclub.com>

10 February


 [201.10.157.213]

 from gilkfibewgmf026.bluebottle.com (192.179.137.224) by b6-z60.boardermail.com
 from Earnestinevse373xrz183dlr4il (99.60.64.88) by wylvrszhm333.bolt.com

Earnestine Land <monksj@fastermail.com>

8 February


[211.211.41.168]

from bluebottle.com (6.64.71.72) by np7-duy81.bolt.com
from boardermail.com (bluebottle.com 30.206.102.196) by boardermail.com
(modemcable89.0-9.bh.bluebottle.com 216.192.123.177) by bluebottle.com (envelope-from perryedwards@iamit.com)"

Delmer Grant <mikebono@myway.com>

3 February


CPQ13941688621 ([4.31.111.51]

from dns72boardermail.com (182.234.241.234) by hd02-lpu48.bolt.com
from bolt.com (127.0.0.1) by dnsboardermail.com


3 February


ACD48E37.ipt.aol.com ([172.212.142.55])

from boujko6.bluebottle.com (151.136.192.89) by b32-am.bluebottle.com
from riemannrestrooml755 (katie243.254.44.64)          by boardermail.com (dy7)

Guy Shipley annalee@blazemail.com

1 February

? 
Trojan.Spybot
domain

56.137.99-84.rev.gaoland.net [84.99.137.56]

from bolt.com (240.50.226.183) by rj4-syj740.boardermail.com
from boardermail.com (bolt.com 208.20.136.188) by bolt.com
from SD793154391534452 (modemcable360.4208-9.ya.bluebottle.com 50.240.80.9) (authenticated bits=6) by bolt.com (envelope-from shawnm@surfy.net)"

Omar Conner <mikegraves@138mail.com>

31 January


dilayt.customers.pfts.com
[213.133.161.226]

dns312boardermail.com (58.156.249.44) by odf6-p78.bluebottle.com
from boardermail.com (127.0.0.1) by dnsboardermail.com 

Ian Dickson stevelitz@fastermail.com

31 January


200-147-136-99.tlm.dialuol.com.br ([200.147.136.99])


dns312boardermail.com (58.156.249.44) by odf6-p78.bluebottle.com
"from boardermail.com (127.0.0.1) by dnsboardermail.com

Ian Dickson stevelitz@fastermail.com

31 January


[63.170.38.115]

wmzhmbzts36.boardermail.com (168.243.32.208) by id438-a.boardermail.com
benefactorbrigq3 (bid226.180.19.232) by bluebottle.com (ljvoa625) (Authid: PercyChung)

Percy Chung christel@dbzmail.com

30 January


202.97.143.253

mail3691.fnsy.boardermail.com (155.108.135.40) by f71-vw048.boardermail.com
from PTIBM52 (gfz8.173.164.64.afb167.zcp.bolt.com 96.137.96.124) by mail775.jn.boardermail.com

Troy Reyna" <todd82@bolt.com>

29 January


182.red-217-217-138.user.auna.net ([217.217.138.182]

from dingy (16.219.44.19)          by st114.dave.avenge.diffractometer.boardermail.com   <797526972318.OITH9599.vrux0-mail.apposite.courtroom.net.cable.rogers.com@anomalous>        

Glenn Garrett harveypar@yyhmail.com

29 January


from F3P1L3 ([80.218.124.42])

from sdp856.bluebottle.com (38.164.30.184) by gy3-di68.bluebottle.com
from Janetyv429h41zv571ywi (160.208.173.79) by svqvcntqygfac410.boardermail.com

Janet Land
oharam@asianavenue.com

28 January


213.37.113.156

mz35.bolt.com 181.200.152.116 by ot40-i.bolt.com
from bandwidthcarsonre239 (bench80.47.19.141) by bluebottle.com (hriie8)

Craig Hathaway
mikebono@myway.com

28 January


80.97.138.1602/07

176.16.24.157 by ug2-p7.y5.boardermail.com with DAV

Mrs Goldstein
robliv@snail-mail.net

22 Janaury


host74-57.pool80182.interbusiness.it 80.182.57.74

dns744bolt.com (208.56.236.172) by qc3-bf70.bolt.com
from bolt.com (127.0.0.1) by dnsboardermail.com

Kate Maddox
barryfitz@catholic.org

21 January


42.85.97-84.rev.gaoland.net 84.97.85.42

basidiomycetes-g908.extendible.bolt.com (192.128.8.248) by ty65-xf452.bolt.com

Guadalupe Medina <lonnie@mail2artist.com>

21 January


42.85.97-84.rev.gaoland.net 84.97.85.42

180.83.244.64 by owogk30-xc7.uvkc2.boardermail.com with DAV

Jane Solomon" <oharam@asianavenue.com>

21 Janaury


0-177-130.onocable.ono.com 84.120.177.130

dns09bolt.com (169.198.209.116) by q797-t47.boardermail.com

Randell Shirley

18 January


195.146.59.57

from plcqloh3.bolt.com (84.0.40.64) by phq8-jrb.bluebottle.com
rubberyautomobilevgr8 (beauteous118.184.198.90)          by boardermail.com (pbsir72)

Judith " <jonlowry@asiamail.com>

18 January


82.101.184.32

taus353.bluebottle.com (226.102.86.240) by nnz0-ro6.boardermail.com
(132.112.128.187) by iuavnfnpfgdi12.bluebottle.com

Mandy " <scottroeder@budweiser.com>

17 January (1)

Trojan.Spybot
domain

62.59.34.226

mail9000.mjtox.boardermail.com (243.64.0.212) by o371-np9.boardermail.com


KFK7 (ptm37.192.8.206.xwuki43.f.bluebottle.com 172.247.110.221) by mail2.pg.boardermail.com (91.251.285r554/10.0.67)

Melisa Sanders" <shawnm@surfy.net>

16 January (1)


172.182.12.83

250.209.48.199 by qiq6-s604.hurz6.bolt.com with DAV;

Beatriz Paige <marykotch@outgun.com>

15 January (1)


[80.117.93.169]

from czarina (30.32.120.148) by sl399.guise.monad.know.bluebottle.com

Preston Metcalf <tomay@outgun.com>

14 January (1)


 wll-16-pppoe033.t-net.net.ve ([200.31.129.33])

(from 63inaudible@localhost) by 15-cataclysmic99.601.bolt.com

Ignacio  <allgoods@cardtown.com>

14 January (1)


202-63-181-63.broadband.isp.exatt.net ([202.63.181.63])      

yearn (206.237.88.1) by 07.counterproposal.meadowland.holman.boardermail.com

Sheila " <davidploy@marchmail.com>"

13 January
 (1)


200.31.151.11

(187.16.164.29) by 392.declare.reformatory.panjandrum.bluebottle.com         

Connie "
<rfrasier0@lycos.com>"

10 January


 dup-200-65-205-4.prodigy.net.mx [200.65.205.4]

45.104.37.240 by 200.65.205.4

Ernest Braun <timdommer@collegeclub.com>

5 January
2005 (1)


client-200.121.251.53.speedy.net.pe ([200.121.251.53])

?

mail492.xs.boardermail.com (144.88.192.144) by sh686-qv1.bolt.com
 (ob62.93.216.154.qfgwp590.t.bolt.com 142.117.160.184) by mail5.q.bluebottle.com

Edwin Bond" <jaredb@graffiti.net>

5 January
2005 (1)


[200.208.143.64]

orig 72.190.186.160 by 200.208.14mixailovich@tekcom.ru3.64

Morgan Santiago" <joeblake@emailaccount.com>

5 January
2005 (1)


WLL-66-pppoe073.t-net.net.ve ([200.35.72.73])

 236.184.234.144 by 200.35.72.73

Valentin Palacios" <jongotti@shadango.com>

Year: 2005


Monitored (January 18)
mixailovich@tekcom.ru



31 December (1)


222220.bsb.virtua.com.br ([200.167.222.220])

depressible-z36.cuprous.bolt.com (162.156.110.252) by x289-pd875.boardermail.com

"Cherie Johnston <jimmack@marchmail.com>"

31 December (1)


from d012181.adsl.hansenet.de224.155.244.156 by dj95-v53.uaeq570.bolt.com with DAV ([80.171.12.181]

from serology-dns.bolt.com (251.38.97.9) by lq7-yey0.bolt.com

"Tia Varner <herbertevans@hamptonroads.com>"

31 December (1)


dialin-212-144-190-010.arcor-ip.net ([212.144.190.10])

from gw27revert@localhost) by e56-tananarive09.my09qtf.boardermail.com

Karen Sams <jaredb@graffiti.net>"

9 December
(all three)


([164.77.173.11])  

from cervix (140.216.45.43)          by ku235.rainfall.timothy.liquefaction.bolt.com        

"Leta Purcell" <donaldcrisp@boardermail.com>"

29 December (all three)


from CEMAG-SERVER ([200.255.104.6])

"from 198.110.36.172 by 217.253.207.181; Wed, 29 Dec 2004 10:10:52 +0600"

mixailovich@tekcom.ru

No but its both a boy and a girl say hi to "Jami Simons" <timdommer@collegeclub.com>"

25 December
(all three - somebody always 'works' on xmas)


Static-IP-cr200118116224.cable.net.co ([200.118.116.224])


200.118.116.224

No its - " Mckinney" <tomprowe@graffiti.net>"

22 December  (all three)


112-52-89.adsl.terra.cl ([200.89.52.112])

behind.doit.org ([250.50.248.144] helo=infamous.ostracism.doit.org

Try "Tricia Darling" <evansjayme@kittymail.com>"

21 December
(all three)

Trojan.Spybot
domain

from 202-149-43-251.broadband.isp.exatt.net ([202.149.43.251]

mta1.uhyjqgo.ssl.bluebottle.com)   by mta649.mail.swl.boardermail.com by mta031.mail.comfort.boardermail.com

Well we are getting warmer  its - "Denise Duncan" <jesscollins@surfy.net>"

21 December
(all three)


host122-154.pool80181.interbusiness.it 80.181.154.122

from  (mta1.pijvmfw.ssl.snail-mail.net) by mta649.mail.swl.netster.com by mta272.mail.protein.antisocial.com

" Talbot" <katief@mail2katie.com>

21 December (all three)


17924635.rjo.virtua.com.br (200.179.246.35)

from yeah.doit.org 50.216.240.120

No its "Odell Hubbard" <bakerf@fishhoo.com>"

15 December (all three)


usr092.pial056-01.wpc.im.wakwak.ne.jp ([211.132.180.92])

from huckster.striker.cl ([93.72.200.44] helo=mail.uccangel.org) by smtp0.esmp.cl

No  its - Mai Walters" <rawlings@postmark.net>

10 December 2004


203-173-51-128.dyn.iinet.net.au ([203.173.51.128])

iy13.outgun.com (139.16.90.52) by iwv72-use.bolt.com

This column was added for the fun of it.

10 December 2004


202-74-218-156.ue.woosh.co.nz ([202.74.218.156])

iy13.outgun.com (139.16.90.52) by iwv72-use.bolt.com


10 December 2004


pm3-4-7.hillsboro.mwt.net ([207.190.85.7])

uf7-stir2.b50wul.blazemail.com


10 December 2004


202-74-218-156.ue.woosh.co.nz ([202.74.218.156])

uf7-stir2.b50wul.blazemail.com


Year: 2004


Monitored: (December 32)



I will update this when new Junk from Robert comes in - Just that he loves sending me this 'gold'.  Further proper examples of Roberts spams (and to view his 'fortune 100 client' list) can be seen in experiment 1 , and experiment 2.

Domain Owner spam,

I've done some fun stuff with spam they get, but its time to stop but i will continue to list Bobs spam here

Bob Soloway Domain Owner spam Analysis

date: 29 March 2006

Return-Path: <JanellWeeks3@montevideo.com.uy>
Received: from Q-SI3TG06W0SN5N (eu100-163-8.clientes.euskaltel.es [82.130.163.8])
Received-SPF: fail (gmail.com: domain of JanellWeeks3@montevideo.com.uy does not designate 82.130.163.8 as permitted sender)
Received: from wrneer4.atlas.cz (211.88.172.41) by ox3-ckl.zmail.ru with Microsoft SMTPSVC(5.0.2195.6824);
From: "Customer Support Department" <JanellWeeks3@montevideo.com.uy>

Notes:
Bob Soloway is called JanellWeeks3 somewhere in south america (if my geography is up to speed)
It was sent from spain (unchecked)
It failed SPF
the cz line looks like garbage - looks like China
Looks like an microsoft exchange open proxy (no mailer id though)

This is the world of Bob Soloway three continents in one email - full spam is numbered 1418 on the web pages listed and linked to elsewhere.

next

...

Roberts clients apparently include these highly reputable areas of trading in:

Robert's 'Clients' also Include these stupid retards
http://success-4-u.biz/?refid=BcastEmail-123456789              affiliate: Helen Allen, Hamilton Island, Queensland, Australia

and see Poochieheaven.com (no this is not a joke) recommendation

Thats my experiment experience - don't 'opt-out'. I never wanted it to begin with or signed up for it  The only way I seemed to stop his junk to the domain owner (that was just one email address) was to write these web pages.

It seems to have section

Getting some spamcop reports with headers in (stored to)  - Im parsing what i can- since these are Bobs spams its interesting to note how there geting delivered, my lack of recenr Bob specific spam means this is something you can do to.

Spam Cop reports seen

Date

From

IP Where....

Has

March 1 06
cc spamcop report
60.181.144.90
seems to have the  Trojan.spybot virus
March 2 06
cc spamcop report
211.200.129.39 (Korea)*

ip 211.200.129.39 has MIME-tools 4.104 (Entity 4.116) seems to have the  Trojan.spybot virus

March 2 06
cc spamcop report
211.33.79.125

211.33.79.125 has Mutt/1.5.1i seems to have the Trojan.spybot virus
March 2 06
cc spamcop report
221.139.207.34

221.139.207.34 has Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux) 
seems to have the Trojan.spybot virus
2 March
cc Spamcop report
220.125.192.85 KOREA TELECOM
has MailGate v3.0 seems to have the Trojan.spybot virus
2 March
cc Spamcop report
TOO MUNGED TO DECIPER
has MailGate v3.0 seems to have the Trojan.spybot virus
3 March
cc Spamcop report
87.0.195.186 ITALY
has malaysia.net and Internet Mail Service (5.5.2650.21) seems to have the Trojan.spybot virus
3 March
cc Spamcop report
70.101.151.228 CANADA/?says US?
has The Bat! (v1.60q) and ?cashette.com seems to have the Trojan.spybot virus
3 March
cc Spamcop report
24.63.250.136 Comcast Cable/US
Mutt/1.5.1i and ? snail-mail.net seems to have the Trojan.spybot virus
3 March
cc Spamcop report
211.177.66.70(x2)probably Korea
no mailer but malaysia.net seems to have the Trojan.spybot virus
3 March
cc Spamcop report
63.223.65.162 - US 
Beyond The Network America, Inc.
Reston Executive Center,
12100 Sunset Hills Road,
Suite 300,Reston,VA

MIME-tools 5.503 (Entity 5.501) and ureach.com ? has ? exchange open proxy or xmailer ?
6 March
cc Spamcop report
211.56.136.174 probably Korea
Calypso Version 3.20.01.01 (4) seems to have the Trojan.spybot virus
6 March
cc Spamcop report
60.210.147.185 - China
MIME-tools 5.503 (Entity 5.501) seems to have the Trojan.spybot virus
6 March
cc Spamcop report
58.69.36.173 - Phillipino spam
MailGate v3.0 seems to have the Trojan.spybot virus
7 March
cc Spamcop report
61.73.165.25 - Korea
Microsoft Internet Mail 4.70.1155 seems to have the Trojan.spybot virus (india)
7 March
cc Spamcop report
221.192.216.207 - China
MIME-tools 4.104 (Entity 4.116) seems to have the Trojan.spybot virus
12 March 

18
cc Spamcop report
59.14.170.94 - Korea
X-Authentication-Warning: R53-alias2.ZQ6meo.ciberaula.infase.es 
[40.114.178.89]: ol03exclamation set sender to nilarme...@budweiser.com using
-u X-Mailer: MIME-tools 5.503 (Entity 5.501)

Looks like * new xmailer / 123 trojan
12 March
cc Spamcop report
218.27.38.154 CNCGROUP-JL China
Calypso Version 3.30.00.00
@backstreet-boys.com
I'm opting for
the Trojan.spybot virus
12 March
cc Spamcop report 
40.232.92.121
Eli Lilly and Company Lilly
Corporate Center
Indianapolis,IN,US
mauimail.com Pegasus Mail for Win32 (v2.53/R1) 
the Trojan.spybot virus
12 March 2006
cc Spamcop report
138.217.21.239 Australia
Mutt/1.5.1i  Trojan.spybot virus
12 March 2006
cc Spamcop report
61.18.63.169 - HK (China)
Calypso Version 3.20.01.01 (4)  Trojan.spybot virus
15 March 2006
cc Spamcop report
adsl-67-114-113-210.dsl.bkfd14.pacbell.net
[67.114.113.210] - US
SBC Internet Services
/Sears Roebuck San Francisco
Internet Mail Service (5.5.2650.21) 
? Open Exchange Proxy ?
15 March 2006
cc Spamcop report
48.114.151.152 
Prudential Securities Inc
1 New York Plaza New York NY 10004 US
Calypso Version 3.20.01.01 (4) Trojan.spybot virus
15 March 2006
cc Spamcop report
132.117.92.200 
Army National Guard Bureau
8260 Willow Oaks Corporate Drive 7th Floor
Fairfax VA 22031 US
The Bat! (v1.53d)  Trojan.spybot virus
15 March 2006
cc Spamcop report
216.250.47.66 All West Communications 
PO Box 588 Kamas UT 84036 US
Mutt/1.5.1i  Trojan.spybot virus
15 March 2006
cc Spamcop report
88.243.240.9 Turk Telekom Turkey
Internet Mail Service (5.5.2650.21) 
? Open Exchange Proxy ?
15 March 2006
cc Spamcop report
102.16.24.65 - 
unassigned thoughts please? bogon ? term
Mutt/1.5.1i  Trojan.spybot virus 
19 March 
cc Spamcop report
80.243.245.135 - outremer-telecom.fr
Mutt/1.5.1i Trojan.spybot virus
















* for the record our email boxes blocks any email request sent to it from south korea, or china - it solves the volume of spam problem for us, if you thinks that is hard - i suggest you ask to see the log file, china and korea love to fake whats they spend most of their  time sending - which is spam willingly, or unwillingly

Both take spammers money too.


The Blogish section

Yes This page is a mess but the gives you a time line for me to discovering Roberts activities

Current Month

Year


4

2006


See the last
entry or scroll
down

December
November
October
September
August
July
June
May
April
March
February
January





heres to forward planning...
 . . . 01/05
 22/04 20/04 15/04 12/04 03/04 01/04
 29/03 21/03 20/03 19/03 15/03 14/03 13/03 12/03 10/03 06/03 04/03 03/03 02/03 01/03
 27/02 26/02 25/02  24/02 20/02 18/02 17/02 16/02 14/02 13/02 09/02 07/02 06/02 04/02
 30/01 27/01 23/01 16/01 09/01 07/01 04/01


2005

Archive for 2005

the old


December
November
October
September
August
July
June
May
April
March
February
January

 30/12  25/12 9/12 6/12  1/12
 29/11 28/11 27/11  26/11 25/11 23/11 17/11 3/11 2/11 1/11
 31/10 21/10 20/10 16/10 06/10 5/10
 30/09 24/09 22/09 21/09 12/09 09/09 05/09
 30/08 25/08 23/08 22/08 19/08 8/08
 25/07 20/07 18/07 17/07 10/07 05/07 02/07 01/07
 30/06 24/06 20/06 17/06 10/06 07/06 06/06 03/06
 02/05
 23/04
 19/03 11/03 - 12/03
 20/02 15/02 11/02 10/02 09/02 03/02 01/02
 22/01 18/01 17/01 15/01, 13/01 05/01 ,04/01, 03/0102/0101/01
  old entries to go here


2004

Archive for 2004


December
before that

29/12  21/12  1/12
31/10
27/10 9/10 23/9

next

14 May: Quiet here (no Bob spam) An interesting url from the the BBB.org http://www.thebbb.org/commonreport.html?bid=22009796

Marketplace Experience

Based on BBB files, this company has an unsatisfactory record with the
Bureau due to failure to respond to one or more complaints and or two or
more otherwise unresolved complaints.

more news from http://blog.opsan.com/archive/2005/07/29/1148.asp new domain for our cheeky spammer (its great to be a chinese citizen)

Parsing input: http://www.broadcastemailingcorp.cn/
Host www.broadcastemailingcorp.cn (checking ip) = 218.244.140.39 > abuse@hichina.com

Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????(??)????
Name Server:dns9.hichina.com
Name Server:dns10.hichina.com
Registration Date: 2006-05-11 11:26
Expiration Date: 2007-05-11 11:26
inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-AP
tech-c: ZX163-AP
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Zhang Xiangdong
nic-hdl: ZX103-AP
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-AP
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: APNIC

inetnum: 218.244.128.0 - 218.244.159.255
netname: HICHINA
country: CN
descr: 3/F,HiChina Mansion,No.27 Gulouwai Avenue,Dongcheng District, Beijing 100011,China
admin-c: ZX103-CN
tech-c: ZX163-CN
status: ALLOCATED PORTABLE
changed: shenzhi@cnnic.cn 20050606
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Zhang Xiangdong
nic-hdl: ZX103-CN
e-mail: abuse@hichina.com
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
phone: +86-10-64242299-8602
fax-no: +86-10-64242299-8354
country: CN
changed: ipas@cnnic.net.cn 20050413
mnt-by: MAINT-CNNIC-AP
source: CNNIC

person: Song Yingqiao
address: 3/F,HiChina Mansion,No.27 Gulouwai Avenue
address: Dongcheng District, Beijing 100011, China
country: CN
phone: +86-10-64242299-8328
fax-no: +86-10-64242299-8354
e-mail: songyq@hichina.com
nic-hdl: ZX163-CN
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20050413
source: CNNIC

> How those Chinese hate spam ....

Blonde reports

"The person that returned my call was friendly until I explained I'd not received my package, then immediately turned kinda rude. Told me to email support at newportcorp@mailshack.com.

Then it occured to me that the number on the caller id was Robert Soloway, (I'm a little slow catching on sometimes) so I asked the guy why the number was listed as Robert Soloway instead of Newport Broadcasting. He hung up on me."

> And rude to a customer .... - oh my He seems to be using http://62.193.224.161/broadcastemail/ (old style site - FRANCE) for specials, These guys 62.193.224.0 - 62.193.239.255 AMEN-EUROPE-NETWORK abuse@amenworld.com seem to like him (2nd ip)

inetnum:         62.193.224.0 - 62.193.239.255
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
descr: For Spam/Abuse requests please send mail to abuse@amenworld.com
country: FR
admin-c: AN1108-RIPE
tech-c: AN910-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AMEN-MNT
mnt-lower: AMEN-MNT
mnt-routes: AMEN-MNT
rev-srv: ns1.amenworld.com
rev-srv: ns2.amenworld.com
source: RIPE # Filtered
role:            AMEN NOC
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
e-mail: abuse@amen.fr
nic-hdl: AN910-RIPE
admin-c: JD2263-RIPE
tech-c: AN1018-RIPE
tech-c: AN1019-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered
person:          Gorun RENAULT
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
fax-no: +33 1 40 87 76 89
e-mail: gorun.renault@amen.fr
nic-hdl: AN1108-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered
% Information related to '62.193.224.0/22AS28677'
route:           62.193.224.0/22
descr: AMEN Networks
origin: AS28677
mnt-by: AMEN-MNT
source: RIPE # Filtered

1 May: April was 'interesting' Three Soloway hosts down

http://210.7.70.150/broadcastemail/ (india)
http://broad.1122.ish.cn/
jzgx.nydns.cn/

I expect some movement on Bob 'bulking up' on hostnames soon - the india host stopped responding after two months - seems rather spam friendly that indian isp , that is unless the rumours about spammer Ralsky come true.  Our friends the French still seem to be clueless but  then again the french with computers seems plain strange.

I will continue to mirror this page just in case a repeat of April happens again.

22 April: Funny things a happening and not just here

Just in case you think im the only one complaining or documenting mr soloway Im not - blog.opsan.com (mentioned before) got an honourable mention in a recent Bob Soloway spam run as an 'impediment to him spamming' - the site above has a proper comment system rather than my sorry yahoo guestbook.  Despite this being a boring webpage i try and verify the info i get, I got an above average page hit rate to in April over easter, make of that what you will. 

From that site: Acebirddog reports that Bobs 'spam me forever lists' - have been sold to he thinks to phishers who if you dont know are those very nice people who ask you for your id just before they raid your bank account - A casual glance at the spam I saved (all three experiments 'evidence') show that I've won the lottery, had 419 scams etc although low in number compared to drugs and software spam I got so I'm sure pointing a finger to Bob Soloway could not be too hard  .

While I'd not say he did (having not seen it), I'm sure he could have, alas my spam filtering is vicious, and with Max (mentioned elsewhere) not helping I pass this bit of info on.  Effective sales leads are targeted to people, just becuase you have an contact means there is a duty of care how you treat it - for instance you would not sell the list of mafia informers to the mafia.

The 'duty of care' never existed  as far as im concerned - client case studies whatever  (and not written by me) can be  found throughout this document.

20 April: New Chinese domain reported hosting Mr Spam (no China really is 'anti spam') Mirror of this page also setup, If China is 'anti spam' then G.W Bush, and all members of the Chinese communist party and the new german Pope are homosexuals.

Couple of Chinese terminations reported (or did Bob fail to pay the bill ?)

Meet jzgx.nydns.cn (thanks to Tomez)

nydns.cn
Domain Name: nydns.cn
ROID: 20050414s10001s06775213-cn
Domain Status: ok
Registrant Organization: 楠羽网络科技公司
Registrant Name: 王洪羽
Administrative Email: why_119@tom.com
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:ns.xinnetdns.com
Name Server:ns.xinnet.cn
Registration Date: 2005-04-14 16:12
Expiration Date: 2007-04-14 16:12

inetnum:      60.16.0.0 - 60.23.255.255
netname: CNCGROUP-LN
country: CN
descr: CNCGROUP Liaoning province network
admin-c: CH455-AP
tech-c: GZ84-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040416
changed: hm-changed@apnic.net 20060124
source: APNIC
route:        60.16.0.0/13
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC
role:         CNCGroup Hostmaster
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC
person:       Guangyu Zhan
nic-hdl: GZ84-AP
e-mail: abuse@online.ln.cn
address: DATA Communication Bureau of Liaoning Province,China
address: 38 Lianhe Road,Dadong District Shenyang 110044,China
phone: +86-24-22800096
fax-no: +86-24-22800368
country: CN
changed: zhangy@lntelecom.com 20030122
mnt-by: MAINT-CNCGROUP-LN
source: APNIC

15 April: We where popular the last couple of days

traffic spike

Alas geocities stats are not very good but it seems that 26 browsers tried over and over again to access this page for every hour,   - So Im assuming it  Bob and his 'army' of spambot pc's.  I see no refering url or page of entry so perhaps i can now infer to you that Bob is ddosing geocities now ?.

Does that mean his geocites redirect days are over ? time will tell

Geocities got fed up and blocked the ip's it seems.

12 April:  No eu activity activity yet, quite on the spam front too.

Tomez (report to nanae) discovers newportcorp.cn - guess where

inetnum:      222.208.0.0 - 222.215.255.255
netname:      CHINANET-SC
descr:        CHINANET Sichuan province network
descr:        China

Let see whois at whois.cnnic.net.cn:

Domain Name: newportcorp.cn
ROID: 20060330s10001s47212991-cn
Domain Status: ok
Registrant Organization: ????
Registrant Name: ??
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: ??????????????????
Name Server: dns9.hichina.com [218.30.103.100]
Name Server: dns10.hichina.com [218.244.143.64]
Registration Date: 2006-03-30 11:21
Expiration Date: 2007-03-30 11:21

See also:
only4testinter.vicp.net  IP 222.210.196.86
ns2.vicp.net [210.51.180.211]
ns1.vicp.net [202.105.21.217]

only4testinter.vicp.net has no MX records -> vicp.net has no MX records

Let see whois:
Registrar: ONLINENIC, INC.

Registrant:
     ORAY Network Resource Co., Ltd. domainreg@oray.net +86.2061073333
     Vavic Network Technology, Inc.  1F Office,NO 15,Jiangong Road,Tianhe S&T Zone Guangzhou,510655P.R.C
     Guangzhou,Guangdong,CN 510655

Domain Name: vicp.net
Record last updated at 2006-02-16 23:44:34
Record created on 2001/8/15
Record expired on 2011/8/15

Domain servers in listed order:
     ns1.vicp.net      ns2.vicp.net

Administrator:
     Name-- Vavic Network Technology, Inc.
 EMail-: (domainreg@oray.net)
 tel --: +86.2061073333
     org: Vavic Network Technology, Inc.
     1F Office,NO 15,Jiangong Road,Tianhe S&T Zone Guangzhou,510655P.R.C
     Guangzhou,Guangdong,CN 510655

Technical Contactor:
     Name-- Vavic Network Technology, Inc.
 EMail-: (domainreg[]oray.net)
 tel --: +86.2061073333
     org: Vavic Network Technology, Inc.
     1F Office,NO 15,Jiangong Road,Tianhe S&T Zone Guangzhou,510655 P.R.C
     Guangzhou,Guangdong,CN 510655

Billing Contactor:
     Name-- Vavic Network Technology, Inc.
 EMail-: (domainreg@oray.net)
 tel --: +86.2061073333
     org: Vavic Network Technology, Inc.
     1F Office,NO 15,Jiangong Road,Tianhe S&T Zone Guangzhou,510655P.R.C
     Guangzhou,Guangdong,CN 510655

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/936e3d380c28c656

And see also DNS dnsfamily.com used by Soloway for
nebc.dazh.cn IP 220.166.64.52 (at CHINANET-SC)

ns2.dnsfamily.com [218.107.216.80]
(at CNCNET-CN / dns-xm1.fjxm.cncnet.net)
ns1.dnsfamily.com [218.85.132.246]
(at CHINANET-FJ / dns.fz.fj.cn)

Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: dnsfamily.com

DNS Servers:
NS1.4EVERDNS.COM 218.5.77.19
NS2.4EVERDNS.COM 61.151.252.240
NS1.DNSFAMILY.COM 218.85.132.246
NS2.DNSFAMILY.COM 218.107.216.80

Registrant:
huiyu chen
    xiamen
    361004

Administrative Contact:
huiyu chen
    huiyu chen
    xiamen
    xiamen Fujian 361004
    China
    tel: 86 596 6637835
    fax: 86 596 6637835
    kittyyuc@hotmail.com

Technical Contact:
huiyu chen
    huiyu chen
    xiamen
    xiamen Fujian 361004
    China
    tel: 86 596 6637835
    fax: 86 596 6637835
    kittyyuc@hotmail.com

Billing Contact:
huiyu chen
    huiyu chen
    xiamen
    xiamen Fujian 361004
    China
    tel: 86 596 6637835
    fax: 86 596 6637835
    kittyyuc@hotmail.com

Registration Date: 2006-01-09
      Update Date: 2006-03-02
  Expiration Date: 2007-01-09

Primary DNS: ns1.DNSFAMILY.com 218.85.132.246
Secondary DNS: ns2.DNSFAMILY.com 218.107.216.80

See original spam in sightings:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1a28a5ee6aa40155

Credit to Tomez for the above,

Admin note to any spammers - comment spam to the guestbook feature will not help your seo ratings, it is not displayed. - so if you hired an seo spammer (better results in Google for 5 seconds) and you wonder why nobody is visiting you now know why.

Valid comments eg dealing with Bob will not be displayed either they will be added to this page. tips are anon and welcome..

3 April: No website termination to log recently, which allows to me to make a point about France and there employment issues (in the news) if a french isp cannot terminate a well known rokso spammers site (i'm not asking for miracles, and note i dont make those demands on the spam friendlyness of India, and China isp's) - while those sites might not currently spamvertised (see 29 march entry for the current host with the most), its still Bob Soloway.

So the question is there nobody at abuse@amenworld.com who is sufficienty educated enough to kill the site ? it seems there is work in france but nobody seems to

a know how to do it,
or
b or is paid to do it.

They've had some spamcop reports too.

admin note: new section for Domain owner spam analysis that Bob should send to me - why ? I'm packing up the spam statistical analysis 'experiments'.  well when you go document 700 spams + (a 5mb webpage)  and you will know the answer, alas Bob cannot celebrate, I'm still going to continue writing this page.

1 April: This is no joke but Bob Soloway spammed me! lucky me - hes using flickr.com too

http://static.flickr.com/51/113583781_17411093f6_m.jpg

Lots of other garbage too, once on, never off with our Bob

29 March: - eight days of nothing - then new (broad.1122 account ?) on host http://broad.1122.ish.cn/ (China)

; <<>> DiG 9.2.4 <<>> broad.1122.ish.cn
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10284
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;broad.1122.ish.cn.             IN      A

;; ANSWER SECTION:
broad.1122.ish.cn.      3094    IN      A       60.191.23.122

whois ish.cn
Domain Name: ish.cn
ROID: 20040920s10001s02686110-cn
Domain Status: ok
Registrant Organization: 杭州森蓝计算机网络有限公司
Registrant Name: 钱永强
Administrative Email: myqyq@yahoo.com.cn
Sponsoring Registrar: 北京新网数码信息技术有限公司
Name Server:ns.xinnetdns.com
Name Server:ns.xinnet.cn
Registration Date: 2004-09-20 09:12
Expiration Date: 2006-09-20 09:12

60.191.23.96 - 60.191.23.127
netname: HANGZHOU-WANGTONG-LTD
country: CN
descr: HangZhou WangTong Technology CO.,LTD
descr:
admin-c: YX315-AP
tech-c: CH122-AP
status: ASSIGNED NON-PORTABLE
changed: auto-dbm@dcb.hz.zj.cn 20050429
mnt-by: MAINT-CN-CHINANET-ZJ-HZ
source: APNIC
role:         CHINANET-ZJ Hangzhou
address: No.352 Tiyuchang Road,Hangzhou,Zhejiang.310003
country: CN
phone: +86-571-85157929
fax-no: +86-571-85102776
e-mail: anti_spam@mail.hz.zj.cn
trouble: send spam reports to anti_spam@mail.hz.zj.cn
trouble: and abuse reports to anti_spam@mail.hz.zj.cn
trouble: Please include detailed information and times in UTC
admin-c: CH54-AP
tech-c: CH54-AP
nic-hdl: CH122-AP
mnt-by: MAINT-CHINANET-ZJ
changed: master@dcb.hz.zj.cn 20031204
source: APNIC
person:       YuanDong Xu
nic-hdl: YX315-AP
e-mail: dkhxtb@mail.hz.zj.cn
address: Floor 17th,ChangDiHuoJu Mansion,No.259 WenSan Road,Hangzhou,Zhejiang.Postcode:310000
phone: +86-571-85511187
country: CN


21 March: A short analysis of new website (non techy), lets discuss opting out first.

first question is: how did I 'opt' to get Bob spam ? unknown ? i have my ideas.
second question is:  how do i know what email list(s) im on ?
third question is: will i get more spam after removing myself ? - probably

Now: Moving on to the success stories of NIM - It seems that many of the spam claims made by Bob have been removed from the new website for instance uskia et all, and he is urging his spammy clients to donate to The Salvation Army,Doctors Without Borders,Mercy Corps and not forgetting Child Help USA. - Perhaps what is means is when Bob mentions a donation was made in a spam email/website - he did not contribute but somebody else did ?

I wonder what happened to the 'success' (found on the old website, and in his spam emails) the stories of

america remembers: killed in action - notes: think is http://usakia.org/ they never replied to my query either.
foundation, his grace: evangelistic ministries - notes: ?
north valley aikikai: aikido education academy - notes: ? Information: (760) 788-3267 or www.ramona-aikikai.com (dead url)

lars ranch: abused children's sanctuary notes: ? the neverland moonwalking dance school ?

musici europae: classic music foundation notes: ? husband and wife duo of Tony Brychta and
Marianna Alaberdova ? from Google cache

coleman broadcasting: youth education network . notes: Kansas somewhere, can only find a address,
Coleman Broadcasting Network Po Box 300165,Kansas City, MO 64130 no url  a phone of (816) 861-378seven

Perhaps charity spam email does not work after all ?

I note (technical) he is using a counter script from rapidcounter.com

20 March: Images of Bob (our spammer comes out of the the closet) from the new website ? see below

the ceo techy

Site seems to be dead  http://advertising.voddo.cn/ (China) - see if they stay down

Leaves France, China, and India up

The remaining Chinese site (http://broad.ztjm.com/) has a new website see:

new website

I like the spam to be numero 1 spammer " NEBC Founder Ranked as The #1 Broadcast Emailer in The World by Wikipedia; The World's Largest Online Encyclopedia. "  Class! - Bet Forrester like there name being used to.

The site needs more investigation but Im sure the owner of poochieheaven.com would take issue for the satisfaction cliam.

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in.
Well now I have nothing but complaints about spam and am receiving virus' in my email all the time.
I asked for a refund but they said no.
Still I get complaints about emails being sent out after I told them to stop sending them.
So I wonder what can we do about this.
My business has slowed so much and I think my site's reputation is at stake.

Other 'recomendations' are here.

India, France have old website designs which looked like:

old design

19 March:  'e' larts me to France - bonjour to http://62.193.238.142/broadcastemail/

inetnum:         62.193.224.0 - 62.193.239.255
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
descr: For Spam/Abuse requests please send mail to abuse@amenworld.com
country: FR
admin-c: AN1108-RIPE
tech-c: AN910-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AMEN-MNT
mnt-lower: AMEN-MNT
mnt-routes: AMEN-MNT
rev-srv: ns1.amenworld.com
rev-srv: ns2.amenworld.com
source: RIPE # Filtered
role:            AMEN NOC
address: AMEN - Agence des Medias Numeriques
address: 12/14, rond-point des champs elysees
address: 75008 Paris, France
phone: +33 8 92 55 66 77
e-mail: abuse@amen.fr
nic-hdl: AN910-RIPE
admin-c: JD2263-RIPE
tech-c: AN1018-RIPE
tech-c: AN1019-RIPE
mnt-by: AMEN-MNT
source: RIPE # Filtered

Humour - yahoos guestbook alerter email is being deemed as spam by yahoo webmail - so before anybody pays (ahem spams) to have there mail put in our inboxes instead of bul - which aol are going to do  - its nice to know that parts of yahoo wont be paying it.  Thats good enough for me.

Admin note: Tables differenciated  between our spam, and spamcop reports

15 March: http://62.123.150.18/broadcastemail/ (Italy) down after six days. What a list of infected pc's retail/civil defence/wall stree/china  If Bob Soloways using it must be legit....

India (very spammy) /  China / and Russia current homes for bobs 'webhosting'.

14 March:  http://217.40.152.75/broadcastemail - England is down

new section web hosts up

13 March: advertising.voddo.cn is still up - not down the tour continues - Danke for the cc on the list of redirects at http://blog.opsan.com/archive/2005/07/29/1148.aspx

Lets have a Bob world spam tour logo.

World Tour logo

12 March: Confusion cleared up - spamcop reports added - bob down to one geocities url in those reports, (not the three one expects)  1st senderbase infected pc used by Bob identifed too.

but now one green box to add too....

Bobs in England now at http://217.40.152.75/broadcastemail/ - man can he Globetrot

Of note here to any people still thinking - Bob seems a 'genuine businessman' - perhaps you might ask why is he ordering english broadband internet connections when his office is not available to get english (european) broadband from British Telecom.

His address Executive Residence, Inc. 1200 Western Avenue Room 17E Seattle, Washington - which Im sure the english broadband checker at bt.com would say something along the lines of 'no service possible'.

My thanks to 'e'

% Information related to '217.40.152.72 - 217.40.152.79'
inetnum:         217.40.152.72 - 217.40.152.79
netname: Mary-MEADOWS-000000006186527
descr: BT-ADSL
remarks: Please send abuse notification to abuse@btopenworld.com
country: GB
admin-c: DY128-RIPE
tech-c: DY128-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: BTNET-MNT
mnt-lower: BTNET-MNT
source: RIPE # Filtered
person:          Robin Griffith
remarks: *******************************************************
remarks: * Please send abuse reports to abuse@btopenworld.com *
remarks: *******************************************************
address: Openworld
address: British Telecommunications plc
address: 81 Newgate Street
address: London
address: EC1A 7AJ
address: UK
phone: +44 1473 647774
abuse-mailbox: abuse@btopenworld.com
nic-hdl: DY128-RIPE
mnt-by: BTNET-MNT
source: RIPE # Filtered
% Information related to '217.32.0.0/12AS2856'
route:           217.32.0.0/12
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
source: RIPE # Filtered

10 March:

update: I'm  getting confused

where back in in Italy (last there 4th March)  on http://62.123.150.18/broadcastemail/

inetnum:         62.149.192.0 - 62.149.223.255
netname: TECHNORAIL-NET
descr: Technorail srl
descr: Internet Service and Access Provider
country: IT
admin-c: SC279-RIPE
tech-c: SC279-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
person:          Stefano Cecconi
address: Aruba S.p.A.
address: Piazza Garibaldi 8
address: 52010 soci (AR)
phone: +39 0575 51571
fax-no: +39 0575 561831
e-mail: hostmaster@technorail.com
nic-hdl: SC279-RIPE
source: RIPE # Filtered
% Information related to '62.149.128.0/17AS31034'
route:           62.149.128.0/17
descr: Technorail S.r.l. - Aruba.it
origin: AS31034
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered

New domain http://advertising.voddo.cn/ in China, 'E' reports that czech is down, that leaves China, and India up I need a traffic light system as to what is up, and how long it was up views please. - but now on with the new

Domain Name: voddo.cn
ROID: 20060223s10001s45519825-cn
Domain Status: ok
Registrant Organization: 苏风
Registrant Name: 苏风
Administrative Email: cnreg@hichina.com
Sponsoring Registrar: 创联万网国际信息技术(北京)有限公司
Name Server:dhserver.sharella.com
Name Server:dhserver2.sharella.com
Registration Date: 2006-02-23 13:45
Expiration Date: 2007-02-23 13:45

;; ANSWER SECTION:
voddo.cn.               60      IN      A       218.88.45.202

Which is our anti-spam friends at Chinanet

inetnum:      218.88.0.0 - 218.89.255.255
netname: CHINANET-SC
descr: CHINANET sichuan province network
descr: Data Communication Division
descr: China Telecom
country: CN
admin-c: CH93-AP
tech-c: XS16-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-SC
status: ALLOCATED NON-PORTABLE
changed: hostmaster@ns.chinanet.cn.net 20020408
changed: hm-changed@apnic.net 20040927
changed: hm-changed@apnic.net 20041126
source: APNIC
person:       Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: lqing@chinatelecom.com.cn 20051212
mnt-by: MAINT-CHINANET
source: APNIC
person:       Xiaodong Shi
nic-hdl: XS16-AP
e-mail: ipadmin@my-public.sc.cninfo.net
address: No.72,Wen Miao Qian Str.
address: Data Communication Bureau Of Sichuan Province
address: Chengdu
address: PR China
phone: +86-28-6190785
fax-no: +86-28-6190641
country: CN
changed: ipadmin@my-public.sc.cninfo.net 20030317
mnt-by: MAINT-CHINANET-SC
source: APNIC

6 March: Spamcop reports added to respective sections, Its seems safe to say that Bob 'loves' Trojan.Spybot, a song too here (thanks Basault) - if you want it removed its no problem

4 March: Hell Im getting Soloway Jetlag! - imagine if i got airmiles ...

India and Czech now, Poland reportely 'dead' - Thanks 'E' - 

sleazy countries 'hosting' Bob websites are still up -

Hi India http://210.7.70.150/broadcastemail/ welcome to the club Bishwo Chhetri & DIRECT INTERNET LTD.

inetnum:      210.7.64.0 - 210.7.95.255
netname: DIL
descr: DIRECT INTERNET LTD.
descr: 42 Dakshineshwar
descr: 10 Hailey Road
descr: New Delhi - 110 001
country: IN
admin-c: YK161-AP
tech-c: BC176-AP
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-india.com
mnt-by: APNIC-HM
mnt-lower: MAINT-IN-DIL
changed: hm-changed@apnic.net 20020517
status: ALLOCATED PORTABLE
source: APNIC
person:       Yashpal Kapoor
nic-hdl: YK161-AP
e-mail: ykapoor@primus-direct.com
address: 42/10, Hailey Road,
address: New Delhi - 110001
phone: +91.11.2373.7270
fax-no: +91.11.2373.7280
country: IN
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-direct.com
changed: bchhetri@primus-direct.com 20031001
mnt-by: MAINT-IN-DIL
source: APNIC
person:       Bishwo Chhetri
nic-hdl: BC176-AP
e-mail: bchhetri@primus-direct.com
address: 274, Captain Gaur Marg,
address: Sriniwaspuri, New Delhi
address: 110 065, India.
phone: +91-11-2692-4281
fax-no: +91-11-2692-4278
country: IN
remarks: FOR SPAM & SECURITY INCIDENTS,
remarks: SEND EMAIL TO - abuse@primus-direct.com
changed: bchhetri@primus-direct.com 20031001
mnt-by: MAINT-IN-DIL
source: APNIC

Czech (eu) now meet  http://62.204.237.170/broadcastemail/

:         62.204.236.0 - 62.204.237.255
netname: TTN-THSOFT-NET1
descr: THSOFT network
country: cz
admin-c: JS3270-RIPE
tech-c: TH101-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: CZTTNET-MNT
source: RIPE # Filtered
person:          Jiri Stefek
address: TTNET s.r.o.
Raisova 232
Zamberk 564 01
phone: +420465612567
fax-no: +420465612567
e-mail: jirka@tyhan.cz
nic-hdl: JS3270-RIPE
mnt-by: CZTTNET-MNT
remarks:
source: RIPE # Filtered
person:          Tomas Holenda
address: TTNET s.r.o.
Raisova 232
Zamberk 564 01
phone: +420465612567
fax-no: +420465612567
e-mail: tomas@thsoft.cz
nic-hdl: TH101-RIPE
mnt-by: CZTTNET-MNT
source: RIPE # Filtered
% Information related to '62.204.224.0/19AS34040'
route:           62.204.224.0/19
descr: TTNET Route
origin: AS34040
mnt-by: CZTTNET-MNT
source: RIPE # Filtered

Now poland too  and Polish Telecom !-!-!-!-! to you to

http://83.17.42.146/broadcastemail/  (apparently Dead saturday pm)

inetnum:         83.0.0.0 - 83.31.255.255
org: ORG-PT1-RIPE
netname: PL-TPSA-20031203
descr: Polish Telecom
descr: PROVIDER Local Registry
country: PL
admin-c: KP21-RIPE
admin-c: TK569-RIPE
admin-c: JS1838-RIPE
tech-c: TPHT
status: ALLOCATED PA "status:" definitions
remarks: In case of abuse contact abuse@telekomunikacja.pl
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TPNET
mnt-lower: AS5617-MNT
mnt-routes: AS5617-MNT
source: RIPE # Filtered
organisation:    ORG-PT1-RIPE
org-name: Polish Telecom
org-type: LIR
address: Nowogrodzka 47A
address: 00-695
address: Warszawa
address: Poland
phone: +48 22 625 74 96
phone: +48 44 4480030
fax-no: +48 22 625 23 83
fax-no: +48 44 47 35 72
admin-c: KP21-RIPE
admin-c: JS1838-RIPE
admin-c: TK569-RIPE
admin-c: TW880-RIPE
admin-c: EHD2-RIPE
mnt-ref: TPNET
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role:            TP S.A. Hostmaster
address: TP S.A. "POLPAK"
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: Poland
phone: +48 22 6252383
fax-no: +48 22 6225182
remarks: trouble: Network problems: hostmaster@tpnet.pl
remarks: trouble: Abuse and spam notification: abuse@telekomunikacja.pl
remarks: trouble: DNS problems: dns@tpnet.pl
remarks: trouble: Routing problems: registry@tpnet.pl
admin-c: TK569-RIPE
tech-c: TK569-RIPE
tech-c: JS1838-RIPE
nic-hdl: TPHT
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks: Please send spam and abuse notification only to abuse@telekomunikacja.pl
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
mnt-by: TPNET
source: RIPE # Filtered
abuse-mailbox: abuse@telekomunikacja.pl
person:          Tomasz Kielb
address: TP S.A. - POLPAK
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: POLAND
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks:
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please contact only to:
remarks:
remarks: abuse@tpnet.pl
remarks:
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
phone: +48 800 120 810
phone: +48 800 120 811
fax-no: +48 22 5230178
nic-hdl: TK569-RIPE
mnt-by: TPNET
source: RIPE # Filtered
person:          Jaroslaw Salamon
address: TP S.A. -POLPAK
address: ul. Nowogrodzka 47A
address: 00-695 Warszawa
address: POLAND
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
remarks:
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please contact only to:
remarks:
remarks: abuse@telekomunikacja.pl
remarks:
remarks: ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - ! - !
phone: +48 800 120 810
phone: +48 800 120 811
fax-no: +48 22 5230178
nic-hdl: JS1838-RIPE
mnt-by: TPNET
source: RIPE # Filtered
person:          Konrad Plich
address: TP S.A. CST POLPAK
address: ul. Sienkiewicza 9
address: 97-300 Piotrkow Tryb.
address: Poland
remarks: ---------------------------------------------
remarks: In case of abuse (intrusion attempts, hacking,
remarks: spamming or other unaccepted behavior) from
remarks: TP S.A. address space, please mail only to:
remarks: abuse@tpnet.pl
remarks: ----------------------------------------------
phone: + 48 44 6480030
fax-no: + 48 44 6473572
nic-hdl: KP21-RIPE
mnt-by: AS5617-MNT
source: RIPE # Filtered

 Email to uskia - (internal link) no reply yet 'but fingers crossed'
 ....  and thanks to 'E' - China and Italy Bob websites

'broad' - seems to be new so is ztjm.com  > broad.ztjm.com

  Domain Name: ZTJM.COM
   Registrar: BIZCN.COM, INC.
   Whois Server: whois.bizcn.com
   Referral URL: http://www.bizcn.com
   Name Server: NS5.CNMSN.NET
   Name Server: NS6.CNMSN.NET
   Status: REGISTRAR-LOCK
   Updated Date: 24-mar-2005
   Creation Date: 24-mar-2005
   Expiration Date: 24-mar-2006

China = spam freindly folks -
hangzhou ztjm co.,ltd. Yongqiang Qian myqyq@yahoo.com.cn 0571-28819615 fax: 0571-28812367 hz hz zj 310000 cn

And Italy time (geocites redirects) meet http://62.149.193.221/broadcastemail/ - 'killed' by out Italian friends in a few hours  nice quick termination Italy !.

inetnum:         62.149.192.0 - 62.149.223.255
netname: TECHNORAIL-NET
descr: Technorail srl
descr: Internet Service and Access Provider
country: IT
admin-c: SC279-RIPE
tech-c: SC279-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
person:          Stefano Cecconi
address: Aruba S.p.A.
address: Piazza Garibaldi 8
address: 52010 soci (AR)
phone: +39 0575 51571
fax-no: +39 0575 561831
e-mail: hostmaster@technorail.com
nic-hdl: SC279-RIPE
source: RIPE # Filtered
% Information related to '62.149.128.0/17AS31034'
route:           62.149.128.0/17
descr: Technorail S.r.l. - Aruba.it
origin: AS31034
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered

'E' reports that some geocities sites are also apparently down - .se and .ru - but Ive not bothered to check.
Once you host Bob, you stay in the list. - theres got to be some 'fame' for hosting Robert Soloway.

3 March: meet a dumb isp - and a dumb scheme to stop spam - it wont stop Bob - trust me.

 STOP AOL's Email Tax

2 March: Let introduce 'the its got a virus section' Getting a numbe rof cc'ed spamcop reports and not to confuse its origin, from the spams we get its going get its on section

ip 211.200.129.39 has MIME-tools 4.104 (Entity 4.116) seems to have the  Trojan.spybot virus

211.33.79.125 has Mutt/1.5.1i seems to have the  Trojan.spybot virus
221.139.207.34 has Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)
seems to have the  Trojan.spybot virus

Are you thinking what im thinking ? no then take a peek.

1 March: In following up on how did the spam get there (see below entry) I have added a column to the domain roles spamed with Bob Soloways spam  table, should it be easy to 'match' then i will indicate how the spam was delivered by our esteemed spammer.

During a rather dull day doing some non productive office nonsense, I went onto one of those high school friend finder sites, nothing 100% definitive but this chap hits our profile pretty close not many Soloways aged '26'  can you do better ?  drop me a line ?
 
Robert Soloway     Cotati CA     26    
Robert Soloway     Rohnert Park CA     26    

So I think I know where he might have gone to school.

RANCHO BODEGA SCHOOL
8297 OLD REDWOOD HWY
COTATI CA

or in the Rohnert Park area

BEREAN BAPTIST CHRISTIAN ACADEMY
CONSECUTIVE INSTRUCTIONS SCH
DEFOREST HAMILTON JUV HALL SCH
EL CAMINO CONT HIGH SCHOOL
EREAN BAPTIST CHRISTIAN ACADEM
PHOENIX HIGH SCHOOL
RANCHO COTATE HIGH SCHOOL
ROHNERT PARK COMMUNITY SCHOOL

The Pheonix high school had some members but  the others did not have much of a membership, if somebody a little more local than I am could dig (1996-1998) then it might be worthwhile persuing - might be wrong but I'd love a mugshot of Bob to put here.

Move to another website (thanks for the tip off) say hi to Fredrik Skold and http://62.119.28.243/broadcastemail/

inetnum:         62.119.28.0 - 62.119.28.255
netname: FSDATA-NET
descr: FS DATA
descr: Uppsala
country: SE
admin-c: FS1367-RIPE
tech-c: FS1367-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AS8434-MNT
source: RIPE # Filtered
person:          Fredrik Skold
address: F S DATA
address: Box 140
address: S-265 Astorp
address: Sweden
phone: +46 42 57500
fax-no: +46 42 57575
e-mail: fredrik@fsdata.se
nic-hdl: FS1367-RIPE
source: RIPE # Filtered
% Information related to '62.119.0.0/16AS8434'
route:           62.119.0.0/16
descr: UTFORS-BLK
origin: AS8434
member-of: AS8434:RS-PA-BLK
remarks: *** Contact abuse@utfors.se regarding ABUSE please! ***
mnt-by: UTFORS-MNT
source: RIPE # Filtered

  • admin note: This page was finally spell checked, bad spelling (mine) starts from here again! 

    27 Feb: Thanks for the extra yahoo redirects,  some user agents too report 1 and 2 claim .

    Microsoft Internet Mail 4.70.1155  --> Trojan.SpBot
    PObox II beta1.0 --> Trojan.SpBot

    60.181.144.90, seems to have the  Trojan.spybot virus

    From my associates site at http://blog.opsan.com/archive/2005/07/29/1148.aspx leave comments there, or use my contact form I'm easy - but if its got any interest about Bob then we'd love to hear about it, be it unpaid bills, disputes, sex problems etc - if you can point to online court documents/other stuff to back it up even better.

     Talk to Bob, have a desire to know more?

    Mr. Soloway ICQ 171-437-039

    Robert Alan Soloway with a DOB of 7/10/79 and a California DL of B5133985 has a couple of traffic tickets that show an address of 1547 Upland Pl., Medford, OR 97501, with a license plate of 4AKK886. He also has a speeding ticket from 8/31/01 with the 279 Granite St. address, an Oregon DL of 9678932, and a license plate of ROBCR4 and ROBCR2.

    For those of you unable to put the dots together,  Bob had a website in France (using geocites redirects) which got cancelled, and then took up 'house' in russia, but he is spamming from China.  if you can justify using a spambotted pc in china to send spam about spammer with a website in russia (currently) then I salute you.

    My view of the matter is - its something only a spammer would do

    Now back to 60.181.144.90 - Meet the citizen comrades ...

    inetnum:      60.181.0.0 - 60.181.255.255
    netname: CHINANET-ZJ-WZ
    country: CN
    descr: CHINANET-ZJ Wenzhou node network
    descr: Zhejiang Telecom
    admin-c: CZ4-AP
    tech-c: CW27-AP
    status: ALLOCATED NON-PORTABLE
    changed: auto-dbm@dcb.hz.zj.cn 20050429
    mnt-by: MAINT-CHINANET-ZJ
    mnt-lower: MAINT-CN-CHINANET-ZJ-WZ
    source: APNIC
    role:         CHINANET ZHEJIANG
    address: No.378 Yan'an Road,Hangzhou,Zhejiang.310006
    country: CN
    phone: +86-571-87080702
    fax-no: +86-571-87027816
    e-mail: antispam@dcb.hz.zj.cn
    trouble: send spam reports to antispam@dcb.hz.zj.cn
    trouble: and abuse reports to antispam@dcb.hz.zj.cn
    trouble: Please include detailed information and times in UTC
    admin-c: CZ61-AP
    tech-c: CZ61-AP
    nic-hdl: CZ4-AP
    remarks: http://www.zjtelecom.com.cn
    mnt-by: MAINT-CHINANET-ZJ
    changed: hjh@dcb.hz.zj.cn 20050914
    source: APNIC
    role:         CHINANET-ZJ Wenzhou
    address: No.2-1 Huancheng Road(East),Wenzhou,Zhejiang.325000
    country: CN
    phone: +86-577-88818629
    fax-no: +86-577-88818635
    e-mail: anti_spam@wz.zj.cn
    trouble: send spam reports to anti_spam@wz.zj.cn
    trouble: and abuse reports to anti_spam@wz.zj.cn
    trouble: Please include detailed information and times in UTC
    admin-c: CH117-AP
    tech-c: CH117-AP
    nic-hdl: CW27-AP
    mnt-by: MAINT-CHINANET-ZJ
    changed: master@dcb.hz.zj.cn 20031204
    source: APNIc

    Thats not going to be sorted out soon as it is in china.

    26 Feb: Vodka time boys and girls ! Bobs gone and got hosting with our friends the Russians - seems  dead now though, A big 'hi' to krsn.ru

    All Redirected to:
     http://217.74.161.86/broadcastemail/  (sound familiar)
     
     IP 217.74.161.86    kompas.krsn.ru
     (at krsn.ru / intertax.ru)

    IP 217.74.161.86 on intertax.ru

    217.74.161.86 PTR record: kompas.krsn.ru
    at ns.krsn.ru

    inetnum:        217.74.160.0 - 217.74.162.255
    netname:        Intertax-Net
    descr:          JSC Intertax
    descr:          78, K.Marksa st.
    descr:          Krasnoyarsk 660049, Russia
    country:        RU

    route:          217.74.160.0/20
    descr:          JSC Intertax - ISP in Krasnoyarsk region of Russia.
    descr:          ru.intertax address space

     
    25 Feb: Puis j'avoir un certain Spam de Bob de France svp ? or if your english 'ALO ALO we hate Bob' click

    Not responding either (either a bob fuckup, or nice kill by friends the French) unseen website but spam report seen - and good enough for me Thanks Tomez for this and the other article

    New URL:
    http://195.6.54.3/broadcastemail/

    IP 195.6.54.3

    No PTR records exist for 195.6.54.3
    at bow.rain.fr / francetelecom.net

    inetnum:      195.6.54.0 - 195.6.54.7
    netname:      FR-CIEME-INFORMATIQUE
    descr:        CIEME INFORMATIQUE
    country:      FR

    ASN:         3215
    ASN Name:    AS3215 (France Telecom Transpac)

    He gets around our Bob.

    24 Feb: After emailing child help usa,direct relief international and doctors without borders I've yet to hear anything, so either they don't give a shit, or  never had any donation from Mr Soloway.  Go make up your own mind, or ask the charities yourself

    20 Feb: Internet Mail Service (5.5.2650.21) from here - seems to be classed as an 'Exchange Open Proxy' abuse  in Google - Never used a exchange server as an production mail server for obvious reasons. If true then its an illegal use of somebody else's server, and Bob loves Billy Gates products to spam spybots which is funny since the 'spamis' debacle done by Bob and covered here in this page.

    The other query I had was for %XMAILER - is ?

    xmailer - xmailer.exe - Process Information

      Process File:     xmailer.exe
      Process Name:     123 hidden sender

    Description:     xmailer.exe is an advertising program by 123 hidden sender. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.

    A further search in Google reveals

    Anonymous bulk email software for email marketing, 123 Hidden Sender
    Real anonymous bulk email software, Super Email Harvester, extractor, harvester for online advertising, marketing.
    www.123hiddensender.com/
    Download 123 Hidden Sender 3.40 Free Trial - 123 Hidden Sender ...
    Download 123 Hidden Sender 3.40 for free - 123 Hidden Sender ends real ANONYMOUS bulk emails.

    Comrades search on "123 hidden sender" I rest my case. with this

    " Sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP will will never be shown in the email headers.

    Description

    123 Hidden Sender Screenshot
    View full-size screenshot

    123 Hidden Sender sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP address will not be shown in the email headers! All you do is input your message, subject, and email addresses, and then 123 Hidden Sender does all the rest. No relays to deal with anymore. No need for expensive bulk ISPs. Port 25 is not a problem.

    123 Hidden Sender is a anonymous bulk email software program based on a unique know-how sending technology. It provides real anonymous instant delivery - you can use your regular Internet connection because your IP address will never be shown in the email headers.

    faq of bulk email software. Frequesntly Asked Questions of 123 Hidden Sender
    faq of bulk email software. Download the help document of 123 Hidden Sender
    faq of bulk email software. Order 123 Hidden Sender NOW!

    Feature and Benefits

    Send absolute ANONYMOUS bulk emails. Real anonymous (using proprietary proxy routing - the next wave in bulk email stealth technology, New technology, not a conventional port 25 mailer). You will not lose your ISP service. Your IP will will never be shown in the email headers.
    Sending speed depends on your connection only (thread count control - up to 500).
    Lowest prices.
    Free client software.
    All required data client software retrieves from our center automatically (no more hunting for relays or paying hundreds ofdollars for open relays).
    No port 25 needed (not affected by port 25 blocking ISPs).
    No SMTP servers needed.
    Free support, Free upgrade. "

    The pot calls the kettle black.

    
    

    18 Feb: Off topic humour to start with from our spammy friends at Roach Runner (rr.com) - it made me smile

    [Note added by 24.170.23.242 (cpe-24-170-23-242.jam.res.rr.com)]
    I don't know why we were contacted about this. I can't seem to find any info on your page that relates to us. Our company is telebay.com -- and when I did a control F on your page and searched for "telebay" I couldn't find it. I see a bunch of other posts about other websites and spam issues, but not ours.

    On another note:

    1) Telebay does not even utilize emailing as part of our marketing efforts. The only people we send email to would be our affiliates, and this is about to be changed to a RSS feed, instead.

    2) If any spam was sent, it could only be one of our affiliates violating our strict NO SPAM POLICY. If you have anything to report, please let us know the affiliate's ID. This can be found immediately after the URL the affiliate would be marketing, such as either of these two examples:
    * http://www.telebay.com/IDhere
    * http://www.telebay.com/IDhere/page.html

    Being serious again: Der where rr users - and naturally stupid.

    From a list of emails for Bobs list and the emailer iding itself as

    MIME-tools 5.503 (Entity 5.501)
    Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
    Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)

    seen here  yet to id these

    Internet Mail Service (5.5.2650.21)
    %XMAILER

    Im sure something will 'popup'.

    17 Feb: Remote News Bobs moving (yes again)

    More Geocities(au) redirects:- http://210.66.241.1/broadcastemail/

    Meet some of Bob's friends again in Taiwan.

    Last there on the 4th Feb 2006 same ip too and active again,  My 'blindness' to getting Bobs stuff is beginginning to irritate me - perhaps when I hit 1000 spams, or do a years worth of spam here my 'eye sight' will return.

    To my other mutual 'friend' Max who works with the commision in Seattle - did you sell me out ? or are you working both sides ? For the record your not the 'Better Business Bureau' but if you make me think about doing that your organisation should be reclassified then I will be happy to.

    You know the routine.

    inetnum:      210.66.0.0 - 210.66.255.255
    netname: SEEDNET
    descr: Digital United Inc.
    descr: 9F, No. 125, Song Jiang Road
    descr: Taipei, Taiwan
    country: TW
    admin-c: CY74-AP
    tech-c: CY74-AP
    mnt-by: MAINT-TW-TWNIC
    changed: hostmaster@twnic.net 20000113
    changed: hm-changed@apnic.net 20021219
    status: ALLOCATED PORTABLE
    source: APNIC
    person:       Chyi-Chuan Yang
    nic-hdl: CY74-AP
    e-mail: ccyang@du.net.tw
    address: 9F, 125, song jiang road
    address: Taipei, 104, R.O.C
    phone: +886-2-2737-7298
    fax-no: +886-2-2739-7512
    country: TW
    changed: hostmaster@twnic.net.tw 20050531
    mnt-by: MAINT-TW-TWNIC
    source: APNIC
    inetnum:      210.66.240.0 - 210.66.241.255
    netname: SEEDNET-NET
    descr: Digital United Inc.
    descr: 9F, No. 220, Gangchi Road,Taipei 114, Taiwan, R.O.C.
    descr: Taipei Taiwan
    country: TW
    admin-c: RN472-TW
    tech-c: RN472-TW
    mnt-by: MAINT-TW-TWNIC
    remarks: This information has been partially mirrored by APNIC from
    remarks: TWNIC. To obtain more specific information, please use the
    remarks: TWNIC whois server at whois.twnic.net.
    changed: michaelc@du.net.tw 20040827
    status: ASSIGNED NON-PORTABLE
    source: TWNIC
    person:       Seednet Seednet
    address: Seednet
    address: TAIPEI
    address: N/A Taiwan
    country: TW
    phone: +886-2-0800-073330
    e-mail: root123@seed.net.tw
    nic-hdl: RN472-TW
    changed: hostmaster@twnic.net 20020124
    source: TWNIC

    16 Feb: Charity Time boys and girls, for those of you who really 'read' the Soloway spams will notice that there are a  lot of charities listed

    For your benefit I have gone and done some 'Googling' and put in the the urls, these are perhaps charities you might like to avoid donating to,  Some of these are large organisations. A lot of these take credit cards via websites for what its worth,  so may means that the donation was for not a lot and the charity mention means absolutely nothing as well

    Questions I like to know include:

    1. how large the donation was,
    2. or if Bob really donated to them
    3. and do they approve of being listed in a Bob Soloway spam 

    is something i will be asking each charity listed.  When time permits, should they respond i will put the answer here, or if you can find out as well so much the the better

    Charities 'Claimed' he Helped ? with a $1 dollar donation ?

    Charities Spammed using Bob services
     - some of these are plain weird

    adventist develop & relief agency international,
    child help usa,
    direct relief international,
    doctors without borders
    episcopal relief and development, international medical corps,
    mercy corps,
    operation usa,
    red cross hurricane relief division,
    red cross
    washington state chapter,  the salvation army,

    among "countless" others in need of global assistance.

    america remembers: killed in action -
    notes: think is http://usakia.org/

    foundation, his grace: evangelistic ministries
    notes: ?

    north valley aikikai: aikido education academy
    notes: ? Information: (760) 788-3267
    or www.ramona-aikikai.com (dead url)


    lars ranch: abused children's sanctuary
    notes: ? the neverland moonwalking dance school ?

    musici europae: classic music foundation,
    notes: ? husband and wife duo of Tony Brychta and
    Marianna Alaberdova ? from Google cache


    coleman broadcasting: youth education network .

    notes: Kansas somewhere, can only find a address,
    Coleman Broadcasting Network Po Box 300165,
    Kansas City, MO 64130 no url  a phone of (816) 861-378seven

    - whom sell a 'Pray TV dvd' Not wishing to 'promote'
    Bob or Coleman bc. Quite how a dvd is a 'charity' is
    a issue that others can ponder
     

    Thats a strange list of organisations Bobs claimed to spammed for most appear to be 'dead' in internet space as of writing this, or very 'local' to Washington State. 

    list 1

    child help usa,  http://www.childhelpusa.org/ 'e'
    direct relief international http://www.directrelief.org/ 'e'
    doctors without borders, http://www.doctorswithoutborders.org/ 'e'

    list 2
    only 'kia' looks like its working - 6/1 failure rate ? when you use Bob ? make up your own mind.

    administrative note: I'm getting reports from other now text denoting remote observation will be shown by using the red colour

    14 Feb: Thank goodness Valentines day is over - my spam load should contain more warez mircosoft offerings  than fake 'potions'

    This is to confirm this entry (9 feb), A friend sent me this, - I am still looking forward to my own personal copy though (line breaks mine, http url links removed.)

    EMAIL ADVERTISE YOUR SITE TO 3,000,000 INTERNET USERS FOR FREE

    http://securesite.odo.com.cn


    ------ ----- ---- --- -- - -

    ..for all charity/non-profit organization contacts...

    ..as a new year thank you to the world and all the good that nonprofits
    and charities are doing to assist society, our corporation is doing what it
    can to help and has decided to give away a non-commercial email sending
    service without cost to charities and nonprofits in need, which is the primary
    and only purpose of this non-commercial email.

    simply visit our company web site above, fill out any of the order
    forms on the web site with your nonprofit/charity contact details, but do not press
    submit. instead, print out what is displayed on the screen and send a letter to
    the mailing address on our company web site above with your nonprofit/charity
    mission
    statement, a copy of the paperwork from your governmental authority
    confirming your nonprofit/charity status in your city/state/province/country of
    origin enclosed, and we will then contact you with all you need to know to have your
    special non-commercial, non-transactional, non-relationship, courtesy
    charity/nonprofit emailing message sent out to 3 million people without cost.

    this non-commercial, non-transactional, non-relationship, courtesy
    emailing has an important primary purpose of helping society by assisting nonprofits
    and charities have their nonprofit/non-commercial mission statement/special
    message/web site sent out to a large number of emails as a courtesy to help worldwide in
    national & global relief efforts for various causes in need of non-commercial,
    non-transactional, non-relationship support.

    thanks to the technology of email, here are only a few of the countless
    chrities & nonprofit organizations we have countributed to in the past year:
    adventist develop & relief agency international, child help usa, direct relief
    international, doctors without borders, episcopal relief and development, international medical corps,
    mercy corps, operation usa, red cross hurricane relief division, red cross
    washington state chapter, the salvation army, among countless others in need of global
    assistance.

    on one day alone at our organization, six nonprofits/charities
    responded to one of our nonprofit emailings and then subsequently received their noncost,
    non-commercial emailing without charge to them: america remembers: killed in action
    foundation, his grace: evangelistic ministries, north valley aikikai: aikido education
    academy, lars ranch: abused children's sanctuary, musici europae: classic music foundation,
    coleman broadcasting: youth education network . we hope to assist countless
    nonprofits and charities have their special non-commercial email sent out in 2006.
    Help us fulfill our goal, in that we believe emailing can be a beneficial worldwide
    contribution to millions.

    disclaimer: please note that this non-commercial, non-transactional,
    non-relationship email originated from a computer outside of the united states of
    america by a citizen of a foreign country and obeys all non-commercial email laws of the
    country of the citizen that initated this non-commercial email that does not offer any product
    or service available for purchase/lease/trade/barter for any commercial nature of
    any kind.

    if you are not associated with a nonprofit/charity and/or this is not a
    nonprofit/charity contact email address and/or you are not interested in our occassional
    non-commercial, non-transactional, non-cost, non-relationship, courtesy emailings we
    perform to assist various nonprofits and charities interesting in sending out their
    special non-commercial message and/or non-commercial web site, press the delist option at our
    company web site at http://broadcastemailcorp.odo.com.cn

    Starting to write a new intro section here  

    13 Feb: Rumours true ? I make no comment, just pass along

    Re: Soloway spamming again...www.ottislan.com
    From: davesjunk1<nospam>@gmail.com
    Date: Sunday 12 February 2006 07:02:05
    Groups: news.admin.net-abuse.email

    Hi,
    Maybe this is the wrong place for this but I found the newsgroup
    through a search on ottislan.com

    I'm the poor fool who's credit card info was stolen and used to
    register www.ottislan.com and (12) other sites at www.bookyourname.com.

    The registrar has not responded to any of my emails, faxs, or phone
    calls about canceling these registrations.

    ICANN and Versign have not been much help either and referred me back
    to www.bookyourname.com

    My question is how do I have the WHOIS info corrected. I have already
    reported the errors on ICANN's website

    Other question is how do I find out what other sites were reqistered in
    my name.

    Any help is appreciated
    Thanks,
    David

    whois ottislan.com

    Whois Server Version 1.3

    Domain names in the .com and .net domains can now be registered
    with many different competing registrars. Go to http://www.internic.net
    for detailed information.

       Domain Name: OTTISLAN.COM
       Registrar: ONLINE SAS
       Whois Server: whois.bookmyname.com
       Referral URL: http://www.bookmyname.com
       Name Server: NS0.SIMPLELOO.COM
       Name Server: NS0.ALBEITI.COM
       Status: ACTIVE
       Updated Date: 07-feb-2006
       Creation Date: 06-feb-2006
       Expiration Date: 06-feb-2007


    >>> Last update of whois database: Sun, 12 Feb 2006 02:41:17 EST <<<
    NOTICE: The expiration date displayed in this record is the date the
    registrar's sponsorship of the domain name registration in the registry is
    currently set to expire. This date does not necessarily reflect the expiration
    date of the domain name registrant's agreement with the sponsoring
    registrar.  Users may consult the sponsoring registrar's Whois database to
    view the registrar's reported date of expiration for this registration.

    TERMS OF USE: You are not authorized to access or query our Whois
    database through the use of electronic processes that are high-volume and
    automated except as reasonably necessary to register domain names or
    modify existing registrations; the Data in VeriSign Global Registry
    Services' ("VeriSign") Whois database is provided by VeriSign for
    information purposes only, and to assist persons in obtaining information
    about or related to a domain name registration record. VeriSign does not
    guarantee its accuracy. By submitting a Whois query, you agree to abide
    by the following terms of use: You agree that you may use this Data only
    for lawful purposes and that under no circumstances will you use this Data
    to: (1) allow, enable, or otherwise support the transmission of mass
    unsolicited, commercial advertising or solicitations via e-mail, telephone,
    or facsimile; or (2) enable high volume, automated, electronic processes
    that apply to VeriSign (or its computer systems). The compilation,
    repackaging, dissemination or other use of this Data is expressly
    prohibited without the prior written consent of VeriSign. You agree not to
    use electronic processes that are automated and high-volume to access or
    query the Whois database except as reasonably necessary to register
    domain names or modify existing registrations. VeriSign reserves the right
    to restrict your access to the Whois database in its sole discretion to ensure
    operational stability.  VeriSign may restrict or terminate your access to the
    Whois database for failure to abide by these terms of use. VeriSign
    reserves the right to modify these terms at any time.

    The Registry database contains ONLY .COM, .NET, .EDU domains and
    Registrars.
    %% BookMyName Whois version 1.0
    %%
    %% NOTICE: Access to this information is provided to assist persons
    %% in determining the contents of a domain name registration record in
    %% our database. The data in this record is provided by BookMyName for
    %% informational purposes only.
    %% You agree that you will use this data only for lawful purposes and
    %% that, under no circumstances will you use this data to: (a) allow,
    %% enable, or otherwise support the transmission by e-mail, telephone, or
    %% facsimile of mass unsolicited, commercial advertising or solicitations
    %% to entities other than the data recipient's own existing customers;
    %% or (b) enable high volume, automated, electronic processes that
    %% send queries or data to the systems of Registry Operator or any
    %% ICANN-Accredited Registrar, except as reasonably necessary to register
    %% domain names or modify existing registrations.
    %% All rights reserved. BookMyName reserves the right to modify these
    %% terms at any time. By submitting this query, you agree to abide by
    %% this policy.
    DOMAIN
    Domain Name       : ottislan.com (OTTISL2-BMN-DOM)
    Registrar         : BookMyName
    Whois Server      : whois.bookmyname.com
    Referral URL      : https://www.bookmyname.com

    Registrant / Admin Contact :
    PERSON
    David STYNES (STYNES2-BMN-PE)

     30 cameron ave

     02140 cambridge
     UNITED STATES MA
     phone            : 7816469250
     fax              :
     e-mail           : trancettee@yahoo.com


    Billing Contact   :
    PERSON
    David STYNES (STYNES2-BMN-PE)

     30 cameron ave

     02140 cambridge
     UNITED STATES MA
     phone            : 7816469250
     fax              :
     e-mail           : trancettee@yahoo.com


    Technical Contact :
    PERSON
    David STYNES (STYNES2-BMN-PE)

     30 cameron ave

     02140 cambridge
     UNITED STATES MA
     phone            : 7816469250
     fax              :
     e-mail           : trancettee@yahoo.com


    Domain servers    :
    ns0.simpleloo.com (NSC167-BMN-HST)

    ns0.albeiti.com (NAC193-BMN-HST)


    Created on 02/06/2006 20:21:08
    Updated on 02/07/2006 13:16:20
    Expires on 02/06/2007 15:21:08

    9 Feb: Rumours of movement to http://securesite.odo.com.cn from broadcastemailcorp.odo.com.cn (internal page link) Not had one yet - but i am looking forward to it.

    7 Feb: From spam 906 (how they fly by)

    SmartMailer Version 1.56 -German Privat License-

    Bob seems to changed 'anonymous' remailers, (perhaps the demo time on the shareware was up?) see 6 feb 2006 those of you with a political bone in your body will find this ironic - imagine for a moment that you trade with the chinese government and its agents in the telecom industry there, but you use a private anonymous remailer as well, so Bob on one hand is saying any political expression (or religious) is ok, but then supports they very same people in China that repress the said individuals above.

    Thats 'Class' Bob, I hope you too see the irony

    This actually gets even better for the con men (virus writers) wrote a description of it:

    This also means Bob is still using botnet pc's

    Trojan.SpBot

    Category 1
    Discovered on: April 05, 2005
    Last Updated on: April 11, 2005 06:21:18 AM

    Trojan.Spbot is a Trojan horse program that allows a compromised computer to be used as an email relay. Computers compromised in this way are often used to relay spam.

    Type: Trojan Horse
    Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

    protection
  • Virus Definitions (LiveUpdate™ Weekly)
  • April 06, 2005

  • Virus Definitions (Intelligent Updater)
  • April 05, 2005

    threat assessment

    Wild

    Threat Metrics

    Low Medium Low

    Wild:
    Low

    Damage:
    Medium

    Distribution:
    Low

    Damage

    Distribution

    technical details

    When the Trojan is executed, it performs the following actions:

    1. Creates the following file:

      %System%\smp.dll

      Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

    2. Adds the value:

      "(Default)" = "%System%\smp.dll"

      to the registry subkey:

      HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{0211C4D9-BC71-8916-38AD-9DEA5D213614}\InProcServer32

      so that Trojan.Spbot is loaded into Windows Explorer every time Windows starts.

    3. Adds the value:

      "{0211C4D9-BC71-8916-38AD-9DEA5D213614}" = "OLE Module"

      to the registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

      so that Trojan.Spbot is loaded into Windows Explorer every time Windows starts.

    4. Modifies the value:

      "DoNotAllowXPSP2" = "1"

      in the registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

      to lower security settings.

    5. Modifies the values:

      "AntiVirusDisableNotify" = "1"
      "FirewallDisableNotify" = "1"
      "AntiVirusOverride" = "1"
      "FirewallOverride" = "1"
      "UpdatesDisableNotify" =
      "1"

      in the registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center

      to lower security settings.

    6. Modifies the value:

      "AUOptions" = "1"

      in the registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update

      to lower security settings.

    7. Modifies the value:

      "EnableFirewall" = "0x0"

      in the registry subkeys:

      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile

      to disable the Microsoft firewall.

    8. Modifies the value:

      "Start" = "4"

      in the registry subkey:

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc

      to disable the Microsoft Security Center.

    9. Modifies the values:

      "1001" = "1"
      "1004" = "1"
      "1200" = "0"
      "1809" = "3"


      in the registry subkeys:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

      to lower security settings.

    10. Sends notifications of its status via the following URLs:

    11. Opens a back door on UDP port 256.

    12. Works as an email relay for SPAM.

    13. Uses a randomly created sender address from one of the following domains:

    14. Uses an X-Mailer randomly choosen from the following:

    15. Creates the following files from data downloaded from rsp.btthost.com domain:

    16. Uses those files to send spam e-mail then deletes the files.

    17. Attempts to download an additional file from rsp.btthost.com domain to %temp%\file.exe and runs it.

    recommendations

    Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":

    removal instructions

    The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.

    1. Disable System Restore (Windows Me/XP).
    2. Update the virus definitions.
    3. Run a full system scan and delete all the files detected as Trojan.SpBot.
    4. Delete any values added to the registry.
    5. Restore the Windows Security Center
    For specific details on each of these steps, read the following instructions.
    1. To disable System Restore (Windows Me/XP)
    If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

    Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

    Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

    For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles: Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, reenable System Restore by following the instructions in the aforementioned documents.

    For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article: Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Article ID: Q263455).

    2. To update the virus definitions
    Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions: 3. To scan for and delete the infected files
    1. Start your Symantec antivirus program and make sure that it is configured to scan all the files.
    2. Run a full system scan.
    3. If any files are detected as infected with Trojan.SpBot, click Delete.

      Note:
      If your Symantec antivirus product reports that it cannot delete an infected file, Windows may be using the file. To fix this, run the scan in Safe mode. For instructions, read the document: How to start the computer in Safe Mode. Once you have restarted in Safe mode, run the scan again.

      After the files are deleted, restart the computer in Normal mode and proceed with section 4.

      Warning messages may be displayed when the computer is restarted, as the threat has not been fully removed at this point. Please ignore these messages and just click OK. These messages will not appear when the computer is restarted after the removal instructions have been fully completed. The messages displayed may be similar to the following:

      Title: [File path]
      Message body: Windows cannot find [file name]. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
    4. To delete the value from the registry
    Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only. For instructions refer to the document: How to make a backup of the Windows registry.
    1. Click Start > Run.

    2. Type regedit

    3. Click OK.

    4. Navigate to the subkey:

      HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{0211C4D9-BC71-8916-38AD-9DEA5D213614}\InProcServer32

    5. In the right pane, delete the value:

      "(Default)" = "%System%\smp.dll"

    6. Navigate to the subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler

    7. In the right pane, delete the value:

      "{0211C4D9-BC71-8916-38AD-9DEA5D213614}" = "OLE Module"

    8. Exit the Registry Editor.
    5. To restore the Windows Security Center
    Write-up by: Ka Chun Leung

    Now thats damming.

    6 Feb: I was ignorant of this so time to investigate

    The Bat! (v1.51) Educational

    Which comes from spam 878 of my spam experiment. So what is the bat ? - it seems its Bobs newest spam emailer from http://www.ritlabs.com/  email them on office@ritlabs.com from the website

    "

    Download The Bat! 2.00 for free - Powerful, highly configurable email client with ... Fake Email Mailer is a powerful anonymous emailer to send fake emails ...

    Shareware (Free to try)
    OS: Windows 9x/ME/NT 3.x/NT/XP/2000
    Price: 45$  "

    The ironic thing is the software is not produced by 'americans' (regulars please think about Spamis claims and protecting american 'jobs', or if not read about it here)  and the software he is only paying half of that fee.  Quite why Bob Soloways spam should be 'anonymous'  is something i leave you all to think about.

    I feel sorry for Darkmailer, Bobs previous spam emailing client, lets just hope darkmailer was not employing americans (per spamis claims of 'protecting' americans jobs via chinese websites.

    Much humour is to be found here

    [DOMAIN whois information for RITLABS.COM ]
    Domain Name: RITLABS.COM

    Registrant:
    RITLABS S.R.L
    180 Stefan cel Mare, office 102
    Chisinau, MD MD-2004
    MD

    Domain name: RITLABS.COM

    Administrative Contact:
    Demchenko, Serg serg@ritlabs.com
    180 Stefan cel Mare, office 101
    Chisinau, MD MD-2004
    MD
    + 373-2 246889 Fax: (312)577-0481

    Technical Contact:
    Hostmaster, CIFNet hostmaster@cifnet.com
    PO Box 5966
    Vernon Hills, IL 60061-5966
    US
    (773)989-0442 Fax: (312)803-0951

    Registration Service Provider:
    CIFNet, Inc., hostmaster@cifnet.com
    (773)989-0442
    (312)803-0951 (fax)
    http://www.cifnet.com
    This company may be contacted for domain login/passwords,
    DNS/Nameserver changes, and general domain support questions.

    Registrar of Record: TUCOWS, INC.
    Record last updated on 02-Oct-2005.
    Record expires on 12-Dec-2006.
    Record created on 13-Dec-1996.

    Domain servers in listed order:
    NS1.CIFNET.COM 198.63.208.9
    NS2.CIFNET.COM 198.63.208.11
    NS1.ELTEL.NET 217.170.67.5
    NS.ELTEL.NET 217.170.64.5

    Domain status: REGISTRAR-LOCK
    Trying "RITLABS.COM"
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21320
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 4

    ;; QUESTION SECTION:
    ;RITLABS.COM. IN ANY

    ;; ANSWER SECTION:
    RITLABS.COM. 86396 IN NS ns1.eltel.net.
    RITLABS.COM. 86396 IN NS ns1.cifnet.COM.
    RITLABS.COM. 86396 IN NS ns2.cifnet.COM.
    RITLABS.COM. 86396 IN NS ns.eltel.net.

    ;; AUTHORITY SECTION:
    RITLABS.COM. 86396 IN NS ns.eltel.net.
    RITLABS.COM. 86396 IN NS ns1.eltel.net.
    RITLABS.COM. 86396 IN NS ns1.cifnet.COM.
    RITLABS.COM. 86396 IN NS ns2.cifnet.COM.

    ;; ADDITIONAL SECTION:
    ns.eltel.net. 172796 IN A 217.170.64.5
    ns1.eltel.net. 172796 IN A 217.170.67.5
    ns1.cifnet.COM. 172797 IN A 198.63.208.9
    ns2.cifnet.COM. 86398 IN A 198.63.208.11

    Received 236 bytes from 216.151.192.222#53 in 2 ms

    #53

    Non-authoritative answer:
    RITLABS.COM
    origin = ns1.cifnet.COM
    mail addr = yk.cifnet.COM
    serial = 10410270
    refresh = 10800
    retry = 3600
    expire = 604800
    minimum = 86400

    Authoritative answers can be found from:
    RITLABS.COM nameserver = ns1.cifnet.COM.
    RITLABS.COM nameserver = ns2.cifnet.COM.
    RITLABS.COM nameserver = ns.eltel.net.
    RITLABS.COM nameserver = ns1.eltel.net.
    ns.eltel.net internet address = 217.170.64.5
    ns1.eltel.net internet address = 217.170.67.5
    ns1.cifnet.COM internet address = 198.63.208.9
    ns2.cifnet.COM internet address = 198.63.208.11

    Non-authoritative answer:
    Name: RITLABS.COM
    Address: 198.63.208.135

    ns1.cifnet.COM has origin of ns1.cifnet.COM
    ns1.cifnet.COM has hostmaster address of yk.cifnet.COM
    ns1.cifnet.COM has serial number 10410270
    ns1.eltel.net has origin of ns1.cifnet.COM
    ns1.eltel.net has hostmaster address of yk.cifnet.COM
    ns1.eltel.net has serial number 10410270
    ns.eltel.net has origin of ns1.cifnet.COM
    ns.eltel.net has hostmaster address of yk.cifnet.COM
    ns.eltel.net has serial number 10410270
    ns2.cifnet.COM has origin of ns1.cifnet.COM
    ns2.cifnet.COM has hostmaster address of yk.cifnet.COM
    ns2.cifnet.COM has serial number 10410270

    [IPv4 whois information for 198.63.208.135 ]
    [whois.arin.net]
    OrgName: NTT America, Inc.
    OrgID: NTTAM-1
    Address: 8005 South Chester Street
    Address: Suite 200
    City: Centennial
    StateProv: CO
    PostalCode: 80112
    Country: US

    ReferralServer: rwhois://rwhois.verio.net:4321/

    NetRange: 198.63.0.0 - 198.66.255.255
    CIDR: 198.63.0.0/16, 198.64.0.0/15, 198.66.0.0/16
    NetName: NTTA-198-63
    NetHandle: NET-198-63-0-0-1
    Parent: NET-198-0-0-0-0
    NetType: Direct Allocation
    NameServer: NS0.VERIO.NET
    NameServer: NS1.VERIO.NET
    NameServer: NS2.VERIO.NET
    NameServer: NS3.VERIO.NET
    NameServer: NS4.VERIO.NET
    Comment: *Rwhois information on assignments from this block available
    Comment: at rwhois.verio.net port 4321
    RegDate: 1993-02-11
    Updated: 2005-12-30

    RTechHandle: VIA4-ORG-ARIN
    RTechName: Verio, Inc.
    RTechPhone: +1-303-645-1900
    RTechEmail: vipar@verio.net

    OrgAbuseHandle: NAAC-ARIN
    OrgAbuseName: NTT America Abuse Contact
    OrgAbusePhone: +1-800-551-1630
    OrgAbuseEmail: abuse@us.ntt.net

    OrgNOCHandle: NASC-ARIN
    OrgNOCName: NTT America Support Contact
    OrgNOCPhone: +1-800-551-1630
    OrgNOCEmail: support@us.ntt.net

    OrgTechHandle: VIPAR-ARIN
    OrgTechName: VIPAR
    OrgTechPhone: +1-303-645-1900
    OrgTechEmail: vipar@verio.net

    # ARIN WHOIS database, last updated 2006-02-04 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
    [RWHOIS: RWHOIS.VERIO.NET]
    Results:

    Class-Name network
    Auth-Area 198.63.192.0/19
    ID NETBLK-A010-CUST-22140.127.0.0.1/32
    Handle NETBLK-A010-CUST-22140
    Network-Name A010-CUST-22140
    IP-Network 198.63.208.0/22
    In-Addr-Server NS1-CIF-VRIO-HST.127.0.0.1/32
    In-Addr-Server NS2-CIF-VRIO-HST.127.0.0.1/32
    IP-Network-Block 198.63.208.0 - 198.63.211.255
    Org-Name CIFNet.com
    Street-Address 427 S. LaSalle
    City Chicago
    State IL
    Postal-Code 60656
    Country-Code USA
    Tech-Contact A010-CUST-22140.127.0.0.1/32
    Created 2001-03-05 18:57:36+00
    Updated 2001-03-30 04:20:21+00

    Class-Name network
    Auth-Area 198.63.192.0/19
    ID NETBLK-A010-198-063-192.127.0.0.1/32
    Handle NETBLK-A010-198-063-192
    Network-Name A010-198-063-192
    IP-Network 198.63.192.0/19
    In-Addr-Server C60-VRIO-HST.127.0.0.1/32
    In-Addr-Server U60-VRIO-HST.127.0.0.1/32
    IP-Network-Block 198.63.192.0 - 198.63.223.255
    Org-Name Verio, Inc. - Chicago
    Street-Address 20 N Wacker Drive, Ste 1960
    City Chicago
    State IL
    Postal-Code 60606
    Country-Code US
    Tech-Contact VC146-VRIO.127.0.0.1/32
    Created 2000-11-03 23:03:03+00
    Updated 2001-03-30 04:11:18+00

    [DNS Information on 198.63.208.135]
    Whois Domain Lookup on ip 198.63.208.135 has been requested but failed
    DNS Error while getting PTR record for ip

    [DNS (DNSINFO) information for 198.63.208.135 ]
    Trying "135.208.63.198.in-addr.arpa"
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28999
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

    ;; QUESTION SECTION:
    ;135.208.63.198.in-addr.arpa. IN PTR

    ;; ANSWER SECTION:
    135.208.63.198.in-addr.arpa. 86400 IN PTR www.ritlabs.com.

    ;; AUTHORITY SECTION:
    208.63.198.in-addr.arpa. 86400 IN NS ns1.cifnet.com.
    208.63.198.in-addr.arpa. 86400 IN NS ns2.cifnet.com.

    ;; ADDITIONAL SECTION:
    ns1.cifnet.com. 172790 IN A 198.63.208.9
    ns2.cifnet.com. 86391 IN A 198.63.208.11

    Received 149 bytes from 216.151.192.222#53 in 344 ms

    #53

    Non-authoritative answer:
    135.208.63.198.in-addr.arpa name = www.ritlabs.com.

    Authoritative answers can be found from:
    208.63.198.in-addr.arpa nameserver = ns2.cifnet.com.
    208.63.198.in-addr.arpa nameserver = ns1.cifnet.com.
    ns1.cifnet.com internet address = 198.63.208.9
    ns2.cifnet.com internet address = 198.63.208.11

    Non-authoritative answer:
    135.208.63.198.in-addr.arpa name = www.ritlabs.com.

    Authoritative answers can be found from:
    208.63.198.in-addr.arpa nameserver = ns1.cifnet.com.
    208.63.198.in-addr.arpa nameserver = ns2.cifnet.com.
    ns1.cifnet.com internet address = 198.63.208.9
    ns2.cifnet.com internet address = 198.63.208.11

    4 February:  After hosting in china at 218.88.32.239 Bob moves back to geocites redirects again and the new latest and greatest host of http://210.66.241.1/broadcastemail/  Which is Taiwan - hello to Taiwan and Chyi-Chuan Yang of Digital United Inc, nice to have you on this page!

    inetnum:      210.66.0.0 - 210.66.255.255
    netname: SEEDNET
    descr: Digital United Inc.
    descr: 9F, No. 125, Song Jiang Road
    descr: Taipei, Taiwan
    country: TW
    admin-c: CY74-AP
    tech-c: CY74-AP
    mnt-by: MAINT-TW-TWNIC
    changed: hostmaster@twnic.net 20000113
    changed: hm-changed@apnic.net 20021219
    status: ALLOCATED PORTABLE
    source: APNIC
    person: Chyi-Chuan Yang
    nic-hdl: CY74-AP
    e-mail: ccyang@du.net.tw
    address: 9F, 125, song jiang road
    address: Taipei, 104, R.O.Cphone: +886-2-2737-7298
    fax-no: +886-2-2739-7512
    country: TW
    changed: hostmaster@twnic.net.tw 20050531
    mnt-by: MAINT-TW-TWNIC
    source: APNIC
    inetnum: 210.66.240.0 - 210.66.241.255
    netname: SEEDNET-NET
    descr: Digital United Inc.
    descr: 9F, No. 220, Gangchi Road,Taipei 114, Taiwan, R.O.C.
    descr: Taipei Taiwan
    country: TW
    admin-c: RN472-TW
    tech-c: RN472-TW
    mnt-by: MAINT-TW-TWNIC
    remarks: This information has been partially mirrored by APNIC from
    remarks: TWNIC. To obtain more specific information, please use the
    remarks: TWNIC whois server at whois.twnic.net.
    changed: michaelc@du.net.tw 20040827
    status: ASSIGNED NON-PORTABLE
    source: TWNIC
    person: Seednet Seednet
    address: Seednet
    address: TAIPEI
    address: N/A Taiwan
    country: TW
    phone: +886-2-0800-073330
    e-mail: root123@seed.net.tw
    nic-hdl: RN472-TW
    changed: hostmaster@twnic.net 20020124
    source: TWNIC

    30 Janaury: Bob's Seem to have given up on the geocities redirects to webhosts.

    do4.vicp.net.

    aliases     broadcastemailcorp.odo.com.cn
    addresses     218.88.32.239
    Domain Whois record

    Queried whois.cnnic.net.cn with "odo.com.cn"...

    Domain Name: odo.com.cn

    uri: 

    ROID: 20030701s10011s00299427-cn
    Domain Status: ok
    Registrant Organization: ??????????????
    Registrant Name: ???
    Administrative Email: marshall@odo.com.cn
    Sponsoring Registrar: ??????????????
    Name Server:dhserver.sharella.com
    Name Server:dhserver2.sharella.com
    Registration Date: 2003-07-01 09:51
    Expiration Date: 2006-07-01 09:51

    Network Whois record

    Queried whois.apnic.net with "218.88.32.239"...

    inetnum:      218.88.0.0 - 218.89.255.255
    netname:      CHINANET-SC
    descr:        CHINANET sichuan province network
    descr:        Data Communication Division
    descr:        China Telecom
    country:      CN
    admin-c:      CH93-AP
    tech-c:       XS16-AP
    mnt-by:       MAINT-CHINANET
    mnt-lower:    MAINT-CHINANET-SC
    status:       ALLOCATED NON-PORTABLE
    changed:      hostmaster@ns.chinanet.cn.net 20020408
    changed:      hm-changed@apnic.net 20040927
    changed:      hm-changed@apnic.net 20041126
    source:       APNIC

    person:       Chinanet Hostmaster
    nic-hdl:      CH93-AP
    e-mail:       anti-spam@ns.chinanet.cn.net
    address:      No.31 ,jingrong street,beijing
    address:      100032
    phone:        +86-10-58501724
    fax-no:       +86-10-58501724
    country:      CN
    changed:      lqing@chinatelecom.com.cn 20051212
    mnt-by:       MAINT-CHINANET
    source:       APNIC

    person:       Xiaodong Shi
    nic-hdl:      XS16-AP
    e-mail:       ipadmin@my-public.sc.cninfo.net
    address:      No.72,Wen Miao Qian Str.
    address:      Data Communication Bureau Of Sichuan Province
    address:      Chengdu
    address:      PR China
    phone:        +86-28-6190785
    fax-no:       +86-28-6190641
    country:      CN
    changed:      ipadmin@my-public.sc.cninfo.net 20030317
    mnt-by:       MAINT-CHINANET-SC
    source:       APNIC

    DNS records

    DNS query for 239.32.88.218.in-addr.arpa returned an error from the server: NameError
    name    class    type    data    time to live
    broadcastemailcorp.odo.com.cn    IN    CNAME    odo4.vicp.net    60s    (00:01:00)
    odo4.vicp.net    IN    A    218.88.32.239    14s    (00:00:14)
    odo.com.cn    IN    A    218.88.36.60    60s    (00:01:00)
    odo.com.cn    IN    NS    dhserver.sharella.local    3600s    (01:00:00)
    odo.com.cn    IN    NS    dhserver2.sharella.local    3600s    (01:00:00)
    odo.com.cn    IN    SOA   
    server:    dhserver.sharella.local
    email:    admin.sharella.local
    serial:    2074
    refresh:    900
    retry:    600
    expire:    86400
    minimum ttl:    3600
        3600s    (01:00:00)

    27 January: Back to Odo - Bob seems to like Odo in the name of things meet http://broadcastemailcorp.odo.com.cn/

    See another 'odo' !

    whois odo.com.cn
    Domain Name: odo.com.cn
    ROID: 20030701s10011s00299427-cn
    Domain Status: ok
    Registrant Organization: 成都瀚阳电子工程有限责任公司
    Registrant Name: 胡国辉
    Administrative Email: marshall@odo.com.cn
    Sponsoring Registrar: 北京新网数码信息技术有限公司
    Name Server:dhserver.sharella.com
    Name Server:dhserver2.sharella.com
    Registration Date: 2003-07-01 09:51
    Expiration Date: 2006-07-01 09:51

    Thats got to be China. - this news just in China loves Bob official

    23 Janaury: Moving to http://219.136.53.13/broadcastemail/ which is China (nice to be proven wrong !) and the "Guangdong Data Communication Bureau" so lets go meet  wumian@gdnmc.guangzhou.gd.cn

    How those Chinese 'hate' Spam.

    inetnum:      219.136.53.8 - 219.136.53.15
    netname: GUANGZHOU-JSSHL-NETBAR
    descr: GUANGZHOU JINSHISU NETBAR
    country: CN
    admin-c: SH439-AP
    tech-c: SH439-AP
    status: ASSIGNED NON-PORTABLE
    changed: ipadm@gddc.com.cn 20040820
    mnt-by: MAINT-CHINANET-GD
    source: APNIC
    person:	      SHI HUA
    nic-hdl: SH439-AP
    e-mail: ipuser@gddc.com.cn
    address: NO 302 RO.CHUNHUISAN GUANGZHOU
    country: CN
    phone: +86-20-82091277
    fax-no: +86-20-82091277
    changed: ipadm@gddc.com.cn 20040820
    mnt-by: MAINT-CHINANET-GD
    source: APNIC

    16 Janaury: Bob i see is back to Korea http://147.46.216.152/broadcastemail/ see and has given up with the unsubscribe list being on a different website (that odo site) to the one the geocites spam site redirects you to - the whole point of this is why does he bother with it  I'm getting more spam than every before  if you look at the spam experiments i run.

    update: Since the change from 'giving up' on domain names, he Seems also to be rotating between Korea, and Russia hosts, I mention this as if unsubscribe 'worked' - rather than just confirmed the email address was active how does Mr Soloway known which unsubscribe list is active or not.

    Expect an entry here soon - to say Bob is in Korea (again).  the Russians and Koreans listed seem to be in the business of doing bullet proof spam sites - I do hope they got paid.

    9 January: Meet 83.237.66.218 again Yuriy Kaminir  ( 095 ) 0959683121 Thats Russia detailed nonsense is under the link.

    07 January: Thanks to my tipper! But Bobs back in Korea, never a North Korean commie around to invade South Korea when you need one. Wackamole  Korean Style meet some Koreans you have all met before. Hi Bung

    inetnum:      147.46.0.0 - 147.46.255.255
    netname: NET-SNU
    country: KR
    descr: Seoul National University
    admin-c: BL348-AP
    tech-c: EJ86-AP
    remarks: ***********************************************
    remarks: KRNIC of NIDA is the National Internet Registry
    remarks: in Korea under APNIC. If you would like to
    remarks: find assignment information in detail
    remarks: please refer to the NIDA Whois DB
    remarks: http://whois.nida.or.kr/english/index.html
    remarks: ***********************************************
    status: ALLOCATED PORTABLE
    changed: hostmaster@nic.or.kr 20040625
    changed: hm-changed@apnic.net 20040926
    mnt-by: MNT-KRNIC-AP
    changed: hm-changed@apnic.net 20041007
    source: APNIC
    person: Bung Lee
    nic-hdl: BL348-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    person: Eunjoo Jung
    nic-hdl: EJ86-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    inetnum: 147.46.0.0 - 147.46.255.255
    netname: NET-SNU-KR
    descr: Seoul National University
    descr: Sillim9-dong, Gwanak-gu, Seoul
    descr: San56-1Beonji Jungangjeonsanwon
    descr: 151-742
    country: KR
    admin-c: EJ55-KR
    tech-c: EJ55-KR
    remarks: This IP address space has been allocated to KRNIC.
    remarks: For more information, using KRNIC Whois Database
    remarks: whois -h whois.nic.or.kr
    mnt-by: MNT-KRNIC-AP
    remarks: This information has been partially mirrored by APNIC from
    remarks: KRNIC. To obtain more specific information, please use the
    remarks: KRNIC whois server at whois.krnic.net.
    changed: hostmaster@nic.or.kr
    source: KRNIC
    person: Eunjoo Jung
    descr: Seoul National University
    descr: Sillim9-dong, Gwanak-gu, Seoul
    descr: San56-1Beonji Jungangjeonsanwon
    descr: 151-742
    country: KR
    phone: +82-2-880-5380
    e-mail: ercc_net@plaza.snu.ac.kr
    nic-hdl: EJ55-KR
    mnt-by: MNT-KRNIC-AP
    changed: hostmaster@nic.or.kr
    source: KRNIC

    04 January 2006: Happy new year now lets go meet http://198.93.1.73/broadcastemail/  Woohoo an american spammer, Bobs finally come home!

    rgName:    InnoMedia, Inc. 
    OrgID: INNOME-1
    Address: 90 Rio Robles Road
    City: San Jose
    StateProv: CA
    PostalCode: 95134
    Country: US

    NetRange: 198.93.1.0 - 198.93.1.255
    CIDR: 198.93.1.0/24
    NetName: INNOMEDIA2-1-28
    NetHandle: NET-198-93-1-0-1
    Parent: NET-198-92-0-0-1
    NetType: Reassigned
    Comment:
    RegDate: 2000-11-29
    Updated: 2000-11-29

    RTechHandle: AK154-ARIN
    RTechName: Ko, Alice
    RTechPhone: +1-408-432-5520
    RTechEmail: ako@innomedia.com

    30 December: new host http://147.46.240.97/broadcastemail/ Same people as last time Say hi to Bung lee

    inetnum:      147.46.0.0 - 147.46.255.255
    netname: NET-SNU
    country: KR
    descr: Seoul National University
    admin-c: BL348-AP
    tech-c: EJ86-AP
    remarks: ***********************************************
    remarks: KRNIC of NIDA is the National Internet Registry
    remarks: in Korea under APNIC. If you would like to
    remarks: find assignment information in detail
    remarks: please refer to the NIDA Whois DB
    remarks: http://whois.nida.or.kr/english/index.html
    remarks: ***********************************************
    status: ALLOCATED PORTABLE
    changed: hostmaster@nic.or.kr 20040625
    changed: hm-changed@apnic.net 20040926
    mnt-by: MNT-KRNIC-AP
    changed: hm-changed@apnic.net 20041007
    source: APNIC
    person:       Bung Lee
    nic-hdl: BL348-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    person:       Eunjoo Jung
    nic-hdl: EJ86-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    inetnum:      147.46.0.0 - 147.46.255.255
    netname: NET-SNU-KR
    descr: Seoul National University
    descr: Sillim9-dong, Gwanak-gu, Seoul
    descr: San56-1Beonji Jungangjeonsanwon
    descr: 151-742
    country: KR
    admin-c: EJ55-KR
    tech-c: EJ55-KR
    remarks: This IP address space has been allocated to KRNIC.
    remarks: For more information, using KRNIC Whois Database
    remarks: whois -h whois.nic.or.kr
    mnt-by: MNT-KRNIC-AP
    remarks: This information has been partially mirrored by APNIC from
    remarks: KRNIC. To obtain more specific information, please use the
    remarks: KRNIC whois server at whois.krnic.net.
    changed: hostmaster@nic.or.kr
    source: KRNIC
    person:       Eunjoo Jung
    descr: Seoul National University
    descr: Sillim9-dong, Gwanak-gu, Seoul
    descr: San56-1Beonji Jungangjeonsanwon
    descr: 151-742
    country: KR
    phone: +82-2-880-5380
    e-mail: ercc_net@plaza.snu.ac.kr
    nic-hdl: EJ55-KR
    mnt-by: MNT-KRNIC-AP
    changed: hostmaster@nic.or.kr
    source: KRNIC

    25 December: A Happy new year to everybody - bob is now spamming 'root'.
    Other news Bob is using India Geocities (free hosting, new country used germany and uk before) and pointing it to Seoul National University (see below)

    The dedication. - see you all in 2006 if not before.

    17 December: Meet http://147.46.30.174/broadcastemail/ you know the routine...

    inetnum:      147.46.0.0 - 147.46.255.255
    netname: NET-SNU
    country: KR
    descr: Seoul National University
    admin-c: BL348-AP
    tech-c: EJ86-AP
    remarks: ***********************************************
    remarks: KRNIC of NIDA is the National Internet Registry
    remarks: in Korea under APNIC. If you would like to
    remarks: find assignment information in detail
    remarks: please refer to the NIDA Whois DB
    remarks: http://whois.nida.or.kr/english/index.html
    remarks: ***********************************************
    status: ALLOCATED PORTABLE
    changed: hostmaster@nic.or.kr 20040625
    changed: hm-changed@apnic.net 20040926
    mnt-by: MNT-KRNIC-AP
    changed: hm-changed@apnic.net 20041007
    source: APNIC
    person: Bung Lee
    nic-hdl: BL348-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    person: Eunjoo Jung
    nic-hdl: EJ86-AP
    e-mail: ercc_net@plaza.snu.ac.kr
    address: San 56-1, Shillim-dong, Kwanak-gu, Seoul
    phone: +82-2-880-5380
    fax-no: +82-2-889-7486
    country: KR
    changed: hostmaster@nic.or.kr 20040625
    mnt-by: MNT-KRNIC-AP
    source: APNIC
    inetnum: 147.46.0.0 - 147.46.255.255
    netname: NET-SNU-KR
    descr: Seoul National University
    descr: Seoul National University Computing Center, San 56-1, Shillim-dong, Kwanak-gu
    descr: SEOUL
    descr: 151-742
    country: KR
    admin-c: BL50-KR
    tech-c: EJ109-KR
    remarks: This IP address space has been allocated to KRNIC.
    remarks: For more information, using KRNIC Whois Database
    remarks: whois -h whois.nic.or.kr
    mnt-by: MNT-KRNIC-AP
    remarks: This information has been partially mirrored by APNIC from
    remarks: KRNIC. To obtain more specific information, please use the
    remarks: KRNIC whois server at whois.krnic.net.
    changed: hostmaster@nic.or.kr 20050915

    한국인터넷진흥원(NIDA)의 인터넷정보센터(KRNIC)가 제공하는 Whois 서비스 입니다.

    query: 147.46.30.174

    # KOREAN

    조회결과는 아래와 같으며, 실제 정보와 상이할 수 있습니다.

    IPv4 주소 : 147.46.0.0-147.46.255.255
    네트워크 이름 : NET-SNU
    할당내역 등록일 : 20040625
    할당정보공개여부 : Y

    [ IPv4 사용 기관 정보 ]
    기관고유번호 : ORG384075
    기관명 : 서울대학교
    주소 : 서울 관악구 신림9동
    상세주소 : 산56-1번지 중앙전산원
    우편 번호 : 151-742

    [ 네트워크 담당자 인물 정보 ]
    이름 : 정은주
    기관명 : 서울대학교
    주소 : 서울 관악구 신림9동
    상세주소 : 산56-1번지 중앙전산원
    우편 번호 : 151-742
    전화 번호 : +82-2-880-5380
    전자 우편 : ercc_net@plaza.snu.ac.kr

    --------------------------------------------------------------------------------

    만약 위의 IPv4주소 사용기관 정보가 올바르지 않을 경우
    한국인터넷진흥원(hostmaster@nic.or.kr)으로 문의하시기 바랍니다.


    # ENGLISH

    KRNIC is not an ISP but a National Internet Registry similar to APNIC.
    The followings is organization information that is using the IPv4 address.

    IPv4 Address : 147.46.0.0-147.46.255.255
    Network Name : NET-SNU
    Registration Date : 20040625
    Publishes : Y

    [ Organization Information ]
    Organization ID : ORG384075
    Org Name : Seoul National University
    Address : Sillim9-dong, Gwanak-gu, Seoul
    Detail address : San56-1Beonji Jungangjeonsanwon
    Zip Code : 151-742

    [ Technical Contact Information ]
    Name : Eunjoo Jung
    Org Name : Seoul National University
    Address : Sillim9-dong, Gwanak-gu, Seoul
    Detail address : San56-1Beonji Jungangjeonsanwon
    Zip Code : 151-742
    Phone : +82-2-880-5380
    E-Mail : ercc_net@plaza.snu.ac.kr

    - NIDA/KRNIC Whois Service -

    Oh my Seoul National University becomes a spam hoster. - oh my and I thought you went to university to learn not spam.

    9 December: We been here before but its been renamed from /wm/ to http://83.237.66.218/broadcastemail/ which is our Friend in Russia - say hello to Yuriy Kaminir again.

    update: late news:  Bob fails to stop court process (again) > http://www.mortgagespam.com/soloway/26.pdf its been covered before here - another round lost by Bob. "Its a spammer"

    6 December:  I have just discovered Bob owns a time machine, the domain owner contacts got a spam from the future over the weekend when the mail was checked, dated Monday the 5th December how cool is that!!! 

    consider: its insert time: Sun, 4 Dec 2005 03:21:39 +0000 (GMT), and the date displayed Mon, December 5, 2005

    Other notes:

    1. Bobs back to using your email address in the headers, rather than in the body attachment, still no text just bad html
    2. This geocities redirects means Bob is making mistakes
    3. Still hosting in Korea....

    So Bob owns a time machine, or if you don't believe that - thats another email header he forges.

    1 December: Theres been a lot of activity recently so lets time out and examine the logic (if you can find it) in Bobs current activities which is a

    Still with me ? how does the opt-out in China - get to Korea or 'ahem' to Bobs spam injection points which I list in the domain owner spam page, and admin contacts on this page.  I once opted out of Bob's spam, and we are still getting them.

    If you can find the 'logic' can you please tell me.

    29 November: tipoff thankyou again ! Blog entry (long) with this, you see its other people too - probably had links to this in here somewhere to this

    Mr. Robert Alan Soloway
    Executive Residence, Inc.
    1200 Western Avenue
    Room 17E
    Seattle, Washington

    Tel: 206-226-9558 (reception) 206-223-1270 (sucker number)
    His personal phone number: 206-223-1271

    email: nim@cyberservices.com

    Registrar Homepage: http://www.register.com

    Domain Name: cyberservices.com

       Created on..............: 13 May 1996 00:00:00
       Expires on..............: 14 May 2006 00:00:00

    Registrant Info:
       NJDomains, Abuse Contact: abuse@mail.com
       Gerald Gorman
       33 Knightsbridge Rd.
       Piscataway, NJ 08854
       US
       Phone: 9086960929
       Fax..: none
       Email: abuse@mail.com_gerald.gorman@att.net

    Administrative Info:
       NJDomains, Abuse Contact: abuse@mail.com
       Gerald Gorman
       33 Knightsbridge Rd.
       Piscataway, NJ 08854
       US
       Phone: 9086960929
       Fax..: none
       Email: abuse@mail.com_gerald.gorman@att.net

    Technical Info:
       NJDomains, Abuse Contact: abuse@mail.com
       Gerald Gorman
       33 Knightsbridge Rd.
       Piscataway, NJ 08854
       US
       Phone: 9086960929
       Fax..: none
       Email: abuse@mail.com_gerald.gorman@att.net

    Status: Locked

    Domain servers in listed order:

        dns01.gpn.register.com
        dns02.gpn.register.com
        dns03.gpn.register.com
        dns04.gpn.register.com
        dns05.gpn.register.com

    Whois-Services: ypx7yp2yy94pc.cyberservices.com@whois-services.com


    Mail records are:

    20 ob-mail-com-bk.mr.outblaze.com. [TTL=1800] IP=64.71.166.194
    10 ob-mail-com.mr.outblaze.com. [TTL=1800] IP=205.158.62.33
    not much else no www/etc

    Who be:

    Hurricane Electric HURRICANE-2 (NET-64-71-128-0-1) 
    64.71.128.0 - 64.71.191.255
    Outblaze Limited HURRICANE-CE1460-541 (NET-64-71-166-192-1)
    64.71.166.192 - 64.71.166.223

    XO Communications XOXO-BLK-0 (NET-205-158-0-0-1)
    205.158.0.0 - 205.158.255.255
    Outblaze, Limited XOXO-205-158-62-0 (NET-205-158-62-0-1)
    205.158.62.0 - 205.158.62.255


    28 November: Our friends at Korea telecom have renamed the url from http://210.179.190.250/wm to http://210.179.190.250/broadcastemail

    27 November: new geocities redirect to Korea (26 November Entry) http://uk.geocities.com/Griselda70698Sol20116/ and http://uk.geocities.com/Ingamar91782Leoine31932/ points here. Bob's html ad (normally text) are pretty  awful and contain email typo's - whether this is 'tracking' item is up for discussion.

    26 November: Thank you again  for the tip off !. Korea here we come http://210.179.190.250/wm so lets go and have a screen dump  Lets do Russia ip from yesterday hello again to the 'Evropeyskiy sportivnyy klub', this brings back a few memories....

    doing it with ip, no domain names

    Korea, if only <insert nasty country brainwave...> there.

    query: 210.179.190.250

    # KOREAN

    조회하신 IPv4주소는 ISP가 아직 할당하지 않은 주소이거나 고객(End-User)에게 IPv4주소를
    할당한 후 할당내역을 한국인터넷진원에 등록하지 않은 주소공간입니다.

    따라서, 조회하신 IPv4주소에 대한 문의는 아래의 ISP 담당자에게 문의하시기 바랍니다.

    [ ISP의 IPv4주소 관리기관 정보 ]
    기 관 명 : (주)케이티
    서비스명 : PUBNET
    기관 주소 : 성남시 분당구 정자동
    기관 상세 주소: 206

    [ ISP의 IPv4주소 책임자 정보 ]
    이 름 : IP주소 책임자
    전화번호 : +82-2-3674-5890
    전자우편 : ip@pubnet.ne.kr

    [ ISP의 IPv4주소 관리자 정보 ]
    이 름 : IP주소 관리자
    전화번호 : +82-2-3674-5890
    전자우편 : ip@pubnet.ne.kr

    [ ISP의 Network Abuse 담당자 정보 ]
    이 름 : Pubnet Abuse 담당자
    전화번호 : +82-2-3674-5890
    전자우편 : abuse@pubnet.ne.kr

    # ENGLISH

    KRNIC is not a ISP but a National Internet Registry similar to APNIC.
    The address is allocated yet

    Please contact following ISP for further information

    [ ISP Organization Information ]
    Org Name : Korea Telecom-PUBNET
    Service Name : PUBNET
    Org Address : 206, Jungja, Bundang-Gu, Sungnam-ci

    [ ISP IP Admin Contact Information ]
    Name : IP Administrator
    Phone : +82-2-3674-5890
    E-Mail : ip@pubnet.ne.kr

    [ ISP IP Tech Contact Information ]
    Name : IP Manager
    Phone : +82-2-3674-5890
    E-mail : ip@pubnet.ne.kr

    [ ISP Network Abuse Contact Information ]
    Name : Pubnet Abuse Manger
    Phone : +82-2-3674-5890
    E-mail : abuse@pubnet.ne.kr

    A big hello to Korea Telecom

    add wiki link to introduction.

    25 November: Thanks for the the tipoff! 
    Bob is still using ip but has moved to the address http://83.237.66.218/wm/

    Which is Russia - say hello to Yuriy Kaminir.  Nice to see that Bob is providing the turkey for american workers this christmas (i refer to his spamis claims he made earlier in the year).

    inetnum:      83.237.66.216 - 83.237.66.223
    netname: OOO-Evropeyskiy-sportivnyy-klub
    descr: OOO "Evropeyskiy sportivnyy klub"
    descr: Moscow, Russia
    country: RU
    admin-c: YK170-RIPE
    tech-c: YK170-RIPE
    status: ASSIGNED PA
    mnt-by: MTU-NOC
    changed: lir@mtu.ru 20041111
    source: RIPE

    person: Yuriy Kaminir
    address: Admirala Makarova
    address: Moscow, Russia
    phone: +7 ( 095 ) 0959683121
    nic-hdl: YK170-RIPE
    mnt-by: MTU-NOC
    changed: lir@mtu.ru 20041111
    source: RIPE

    % Information related to '83.237.0.0/16AS8359'

    route: 83.237.0.0/16
    descr: ZAO MTU-Intel's Moscow Region Network
    descr: ZAO MTU-Intel
    descr: Moscow, Russia
    origin: AS8359
    notify: noc@mtu.ru
    mnt-by: MTU-NOC
    remarks: *****************************************
    remarks: Please send abuse reports to abuse@mtu.ru
    remarks: *****************************************
    changed: noc@mtu.ru 20040213
    source: RIPE

    23 November: Bobs keeping me busy!  He is spamming via Yahoo and redirecting to an ip address  a 1.2.3.4 (thing) rather than 'Bobisaspammer.com' etc

    Email link is: http://de.geocities.com/email24624broadcast65559/
    others include *

    But redirect to here: http://83.69.46.224/wm/

    from the html: " email address at: broadcastemailcorp odo4 . meibu . com / dounsub . php" 

    Thats going to work, very 'can-spam'

    * Some kind of new tracking device?

    update broadcastemailcorp.org seems to have died...  Thats what happens when you use the nameservers at joker.

    MX FAIL MX Category ERROR: I couldn't find any MX records for BROADCASTEMAILCORP.ORG. If you want to receive E-mail on this domain, you should have MX record(s). Without any MX records, mailservers should attempt to deliver mail to the A record for BROADCASTEMAILCORP.ORG. I can't continue in a case like this, so I'm assuming you don't receive mail on this domain.
    Mail FAIL Connect to mail servers ERROR: I could not find any mailservers for BROADCASTEMAILCORP.ORG.
    WWW FAIL WWW Category ERROR: I couldn't find any A records for www.BROADCASTEMAILCORP.ORG. But I did find a referral to a.ns.joker.com. (and maybe others). If you want a website at www.BROADCASTEMAILCORP.ORG, you will need an A record for www.BROADCASTEMAILCORP.ORG. If you do not want a website at www.BROADCASTEMAILCORP.ORG, you can ignore this error.

    Which CZ - europe

    % Information related to '83.69.46.0 - 83.69.46.255'
    
    inetnum:         83.69.46.0 - 83.69.46.255
    netname: SCNETCZ
    remarks: INFRA-AW
    descr: Losan s.r.o.
    country: CZ
    admin-c: MH38-RIPE
    tech-c: MM6144-RIPE
    status: ASSIGNED PA "status:" definitions
    mnt-by: LOSAN-MNT
    source: RIPE # Filtered
    person:          Milan Husak
    address: Brezenecka 4808
    Chomutov
    430 04
    phone: +420737142369
    nic-hdl: MH38-RIPE
    source: RIPE # Filtered
    person:          Michal Malina
    address: Brezenecka 4808
    Chomutov
    430 04
    phone: +420737142369

    Big shout to "Michal Malina" hi comrade!

    17 November: Bit soon but please meet broadcastemailcorp.org or ' broadcastemailcorp . org '

    Domain ID:D108098127-LROR
    Domain Name:BROADCASTEMAILCORP.ORG
    Created On:03-Nov-2005 08:52:54 UTC
    Last Updated On:03-Nov-2005 09:00:08 UTC
    Expiration Date:03-Nov-2006 08:52:54 UTC
    Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:CORG-138397
    Registrant Name:Bob Soloway
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:--
    Registrant Postal Code:WA
    Registrant Country:US
    Registrant Phone:+206.2231271
    Registrant Phone Ext.:
    Registrant FAX:+206.2231271
    Registrant FAX Ext.:
    Registrant Email:today2005@earthling.net
    Admin ID:CORG-135817
    Admin Name:Bob Soloway
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:--
    Admin Postal Code:WA
    Admin Country:US
    Admin Phone:+206.2231271
    Admin Phone Ext.:
    Admin FAX:+206.2231271
    Admin FAX Ext.:
    Admin Email:today2005@earthling.net
    Tech ID:CORG-135817
    Tech Name:Bob Soloway
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:--
    Tech Postal Code:WA
    Tech Country:US
    Tech Phone:+206.2231271
    Tech Phone Ext.:
    Tech FAX:+206.2231271
    Tech FAX Ext.:
    Tech Email:today2005@earthling.net
    Name Server:A.NS.JOKER.COM
    Name Server:B.NS.JOKER.COM
    Name Server:C.NS.JOKER.COM

    and nameservered there too.

    <<>> DiG 9.2.4 <<>> broadcastemailcorp.org
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59426
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastemailcorp.org.                IN      A

    ;; AUTHORITY SECTION:
    broadcastemailcorp.org. 10800   IN      SOA     a.ns.joker.com. hostmaster.joker.com. 2005111529 86400 7200 1209600 86400

    But it redirects to here...

    <<>> DiG 9.2.4 <<>> www.broadcastemailcorp.org
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8845
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;www.broadcastemailcorp.org. IN A

    ;; ANSWER SECTION:
    www.broadcastemailcorp.org. 1685 IN CNAME odo4.meibu.com.
    odo4.meibu.com. 20 IN A 218.88.44.247

    update 29/11/2005 odo4.meibu.com. moved to: 218.88.38.117


    inetnum: 218.88.0.0 - 218.89.255.255
    netname: CHINANET-SC
    descr: CHINANET sichuan province network
    descr: Data Communication Division
    descr: China Telecom
    country: CN
    admin-c: CH93-AP
    tech-c: XS16-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINANET-SC
    status: ALLOCATED NON-PORTABLE
    changed: hostmaster@ns.chinanet.cn.net 20020408
    changed: hm-changed@apnic.net 20040927
    changed: hm-changed@apnic.net 20041126
    source: APNIC
    person: Chinanet Hostmaster
    nic-hdl: CH93-AP
    e-mail: anti-spam@ns.chinanet.cn.net
    address: No.31 ,jingrong street,beijing
    address: 100032
    phone: +86-10-58501777
    fax-no: +86-10-58501724
    country: CN
    changed: lqing@chinatelecom.com.cn 20051107
    mnt-by: MAINT-CHINANET
    source: APNIC
    person: Xiaodong Shi
    nic-hdl: XS16-AP
    e-mail: ipadmin@my-public.sc.cninfo.net
    address: No.72,Wen Miao Qian Str.
    address: Data Communication Bureau Of Sichuan Province
    address: Chengdu
    address: PR China
    phone: +86-28-6190785
    fax-no: +86-28-6190641
    country: CN
    changed: ipadmin@my-public.sc.cninfo.net 20030317
    mnt-by: MAINT-CHINANET-SC
    source: APNIC




    Well its still China, see those Chinese really do hate spam.
    <end of update>

    Who and where ?  Say 'hi' to qingdao meibu in China that was a surprise to all of you

    Domain Name:meibu.com


    Registrant:
    Liu Chunming
            qingdao
            266071
            �


    Administrative Contact:
    liu cm
            qingdao meibu
            qingdao dayao 3 road 19#
            shandong qin Shandong 266071
            China
            tel: 86 0532 5779616
            fax: 86 0532 5779617
            meibu@sohu.com

    Technical Contact:
    liu cm
            qingdao meibu
            qingdao dayao 3 road 19#
            shandong qin Shandong 266071
            China
            tel: 86 0532 5779616
            fax: 86 0532 5779617
            meibu@sohu.com

    Billing Contact:
    liu cm
            qingdao meibu
            qingdao dayao 3 road 19#
            shandong qin Shandong 266071
            China
            tel: 86 0532 5779616
            fax: 86 0532 5779617
            meibu@sohu.com

     Registration Date: 2001-06-25
           Update Date: 2005-01-11
       Expiration Date: 2008-06-25

        Primary DNS:  ns1.meibu.com         221.2.55.235
      Secondary DNS:  ns2.meibu.com         202.104.237.179

    and Chinanet too!

    inetnum:      218.88.0.0 - 218.89.255.255
    netname: CHINANET-SC
    descr: CHINANET sichuan province network
    descr: Data Communication Division
    descr: China Telecom
    country: CN
    admin-c: CH93-AP
    tech-c: XS16-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINANET-SC
    status: ALLOCATED NON-PORTABLE
    changed: hostmaster@ns.chinanet.cn.net 20020408
    changed: hm-changed@apnic.net 20040927
    changed: hm-changed@apnic.net 20041126
    source: APNIC
    person:       Chinanet Hostmaster
    nic-hdl: CH93-AP
    e-mail: anti-spam@ns.chinanet.cn.net
    address: No.31 ,jingrong street,beijing
    address: 100032
    phone: +86-10-58501777
    fax-no: +86-10-58501724
    country: CN
    changed: lqing@chinatelecom.com.cn 20051107
    mnt-by: MAINT-CHINANET
    source: APNIC
    person:       Xiaodong Shi
    nic-hdl: XS16-AP
    e-mail: ipadmin@my-public.sc.cninfo.net
    address: No.72,Wen Miao Qian Str.
    address: Data Communication Bureau Of Sichuan Province
    address: Chengdu
    address: PR China
    phone: +86-28-6190785
    fax-no: +86-28-6190641
    country: CN
    changed: ipadmin@my-public.sc.cninfo.net 20030317
    mnt-by: MAINT-CHINANET-SC
    source: APNIC

    
    

    They really do hate spam those chinese government types.

    3 November: Meet Bob 'hiding' behind some chinese people on odo10 and 3322.ORG

    Domain ID:D81041153-LROR
    Domain Name:3322.ORG
    Created On:11-Dec-2001 18:35:40 UTC
    Last Updated On:07-Mar-2005 07:15:34 UTC
    Expiration Date:11-Dec-2009 18:35:40 UTC
    Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
    Status:OK
    Registrant ID:ONLC-615124-4
    Registrant Name:Bentium Ltd.
    Registrant Organization:Yaako Ltd.
    Registrant Street1:1406, Yinyuan Building 37, West Guanhe Road
    Registrant Street2:1406, Yinyuan Building 37, West Guanhe Road
    Registrant Street3:
    Registrant City:Changzhou
    Registrant State/Province:JS
    Registrant Postal Code:213002
    Registrant Country:CN
    Registrant Phone:+86.5196113322
    Registrant Phone Ext.:
    Registrant FAX:+86.5196620244
    Registrant FAX Ext.:
    Registrant Email:ppyy@staff.cn99.com
    Admin ID:ONLC-615124-1
    Admin Name:Yong, Peng
    Admin Organization:Yaako Ltd.
    Admin Street1:1406, Yinyuan Building 37, West Guanhe Road
    Admin Street2:1406, Yinyuan Building 37, West Guanhe Road
    Admin Street3:
    Admin City:Changzhou
    Admin State/Province:JS
    Admin Postal Code:213002
    Admin Country:CN
    Admin Phone:+86.5196113322
    Admin Phone Ext.:
    Admin FAX:+86.5196620244
    Admin FAX Ext.:
    Admin Email:ppyy@staff.cn99.com
    Tech ID:ONLC-615124-2
    Tech Name:Yong, Peng
    Tech Organization:Yaako Ltd.
    Tech Street1:1406, Yinyuan Building 37, West Guanhe Road
    Tech Street2:1406, Yinyuan Building 37, West Guanhe Road
    Tech Street3:
    Tech City:Changzhou
    Tech State/Province:JS
    Tech Postal Code:213002
    Tech Country:CN
    Tech Phone:+86.5196113322
    Tech Phone Ext.:
    Tech FAX:+86.5196620244
    Tech FAX Ext.:
    Tech Email:ppyy@staff.cn99.com
    Name Server:NS2.3322.NET
    Name Server:NS1.3322.NET

    Where:

    dig 3322.org

    ; <<>> DiG 9.2.4 <<>> 3322.org
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62854
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;3322.org. IN A

    ;; ANSWER SECTION:
    3322.org. 60 IN A 61.177.95.125

    Surprisingly Thats China

    name:      CHINANET-JS
    descr: CHINANET jiangsu province network
    descr: China Telecom
    descr: A12,Xin-Jie-Kou-Wai Street
    descr: Beijing 100088
    country: CN
    admin-c: CH93-AP
    tech-c: CJ186-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINANET-JS
    mnt-routes: maint-chinanet-js
    changed: hostmaster@ns.chinanet.cn.net 20020209
    changed: hostmaster@ns.chinanet.cn.net 20030306
    status: ALLOCATED non-PORTABLE
    source: APNIC
    route:        61.177.0.0/16
    descr: CHINANET jiangsu province network
    country: CN
    origin: AS23650
    mnt-by: MAINT-CHINANET-JS
    changed: ip@jsinfo.net 20030414
    source: APNIC
    role:         CHINANET JIANGSU
    address: No.268,Hanzhong Road,Nanjing 210029
    country: CN
    phone: +86-25-6588783
    fax-no: +86-25-6588740
    e-mail: ip@jsinfo.net
    trouble: send anti-spam reports to spam@jsinfo.net
    trouble: send abuse reports to abuse@jsinfo.net
    trouble: times in GMT+8
    admin-c: CH360-AP
    tech-c: CS306-AP
    tech-c: CN142-AP
    nic-hdl: CJ186-AP
    remarks: www.jsinfo.net
    notify: ip@jsinfo.net
    mnt-by: MAINT-CHINANET-JS
    changed: dns@ptt.js.cn 20020530
    changed: ip@jsinfo.net 20021213
    source: APNIC
    person:       Chinanet Hostmaster
    nic-hdl: CH93-AP
    e-mail: anti-spam@ns.chinanet.cn.net
    address: No.31 ,jingrong street,beijing
    address: 100032
    phone: +86-10-58501719
    fax-no: +86-10-58501724
    country: CN
    changed: lqing@chinatelecom.com.cn 20051021
    mnt-by: MAINT-CHINANET
    source: APNIC
    
    

    Glad to see those Chinese 'hating' spam

    2 November: Keep me busy... had to laugh at this email extract

    x@x nonprofit/charity contact email address right?  if so...

    WE WILL EMAIL YOUR WEB SITE TO 2,500,00 0PT-IN EMAILS FOR [Free]

    First Open Your Web Browser and Type in:

    www . broadcastemailservices . org

    So everybody please say hello to broadcastemailservices . org, or broadcastemailservices.org

    Domain ID:D107975459-LROR
    Domain Name:BROADCASTEMAILSERVICES.ORG
    Created On:28-Oct-2005 02:39:04 UTC
    Last Updated On:31-Oct-2005 08:47:11 UTC
    Expiration Date:28-Oct-2006 02:39:04 UTC
    Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:CORG-137882
    Registrant Name:Bob Soloway
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:--
    Registrant Postal Code:WA
    Registrant Country:US
    Registrant Phone:+206.2231271
    Registrant Phone Ext.:
    Registrant FAX:+206.2231271
    Registrant FAX Ext.:
    Registrant Email:today2005@earthling.net
    Admin ID:CORG-135817
    Admin Name:Bob Soloway
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:--
    Admin Postal Code:WA
    Admin Country:US
    Admin Phone:+206.2231271
    Admin Phone Ext.:
    Admin FAX:+206.2231271
    Admin FAX Ext.:
    Admin Email:today2005@earthling.net
    Tech ID:CORG-135817
    Tech Name:Bob Soloway
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:--
    Tech Postal Code:WA
    Tech Country:US
    Tech Phone:+206.2231271
    Tech Phone Ext.:
    Tech FAX:+206.2231271
    Tech FAX Ext.:
    Tech Email:today2005@earthling.net
    Name Server:NS1.BROADCASTEMAILSERVICES.ORG
    Name Server:NS2.BROADCASTEMAILSERVICES.ORG

    Where

    DiG 9.2.4 <<>> broadcastemailservices.org
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63586
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastemailservices.org. IN A

    ;; ANSWER SECTION:
    broadcastemailservices.org. 30 IN A 221.11.134.39

    Thats ns1 and ns2. thats being cheap Bob and thats ... China - how they hate spam those Chinese comrades.

    inetnum:      221.11.128.0 - 221.11.223.255
    netname: CNCGROUP-HI
    descr: CNC Group Hainan province network
    descr: China Network Communications Group Corporation
    descr: No.156,Fu-Xing-Men-Nei Street,
    descr: Beijing 100031
    country: CN
    admin-c: CH455-AP
    tech-c: CH455-AP
    remarks: service provider
    mnt-by: APNIC-HM
    mnt-lower: MAINT-CNCGROUP-HI
    changed: hm-changed@apnic.net 20030122
    status: ALLOCATED PORTABLE
    source: APNIC
    role: CNCGroup Hostmaster
    e-mail: abuse@cnc-noc.net
    address: No.156,Fu-Xing-Men-Nei Street,
    address: Beijing,100031,P.R.China
    nic-hdl: CH455-AP
    phone: +86-10-82993155
    fax-no: +86-10-82993102
    country: CN
    admin-c: CH444-AP
    tech-c: CH444-AP
    changed: inetnum: 221.11.128.0 - 221.11.223.255
    netname: CNCGROUP-HI
    descr: CNC Group Hainan province network
    descr: China Network Communications Group Corporation
    descr: No.156,Fu-Xing-Men-Nei Street,
    descr: Beijing 100031
    country: CN
    admin-c: CH455-AP
    tech-c: CH455-AP
    remarks: service provider
    mnt-by: APNIC-HM
    mnt-lower: MAINT-CNCGROUP-HI
    changed: hm-changed@apnic.net 20030122
    status: ALLOCATED PORTABLE
    source: APNIC
    role: CNCGroup Hostmaster
    e-mail: abuse@cnc-noc.net
    address: No.156,Fu-Xing-Men-Nei Street,
    address: Beijing,100031,P.R.China
    nic-hdl: CH455-AP
    phone: +86-10-82993155
    fax-no: +86-10-82993102
    country: CN
    admin-c: CH444-AP
    tech-c: CH444-AP
    changed: abuse@cnc-noc.net 20041119
    mnt-by: MAINT-CNCGROUP
    source: APNIC
    20041119
    mnt-by: MAINT-CNCGROUP
    source: APNIC

    1 November: Following on from the recommendation I found a better version online

    I got fooled and payed for Soloways broadcast email that was supposed to be all opt in.
    Well now I have nothing but complaints about spam and am receiving virus' in my email all the time.
    I asked for a refund but they said no.
    Still I get complaints about emails being sent out after I told them to stop sending them.
    So I wonder what can we do about this.
    My business has slowed so much and I think my site's reputation is at stake.

    That domain is poochieheaven.com - help ! Other recomendations are here.

    31 October: yet to have any spam from this (give it time), meet broadcastemailservices.biz

    whois broadcastemailservices.biz
    Domain Name: BROADCASTEMAILSERVICES.BIZ
    Domain ID: D11321182-BIZ
    Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
    COM)
    Sponsoring Registrar IANA ID: 113
    Domain Status: clientDeleteProhibited
    Domain Status: clientRenewProhibited
    Domain Status: clientTransferProhibited
    Domain Status: clientUpdateProhibited
    Registrant ID: CNEU-127712
    Registrant Name: Bob Soloway
    Registrant Address1: PO Box 1259
    Registrant City: Seattle
    Registrant State/Province: --
    Registrant Postal Code: WA
    Registrant Country: United States
    Registrant Country Code: US
    Registrant Phone Number: +206.2231271
    Registrant Facsimile Number: +206.2231271
    Registrant Email: today2005@earthling.net
    Administrative Contact ID: CNEU-127711
    Administrative Contact Name: Bob Soloway
    Administrative Contact Address1: PO Box 1259
    Administrative Contact City: Seattle
    Administrative Contact State/Province: --
    Administrative Contact Postal Code: WA
    Administrative Contact Country: United States
    Administrative Contact Country Code: US
    Administrative Contact Phone Number: +206.2231271
    Administrative Contact Facsimile Number: +206.2231271
    Administrative Contact Email: today2005@earthling.net
    Billing Contact ID: CNEU-127711
    Billing Contact Name: Bob Soloway
    Billing Contact Address1: PO Box 1259
    Billing Contact City: Seattle
    Billing Contact State/Province: --
    Billing Contact Postal Code: WA
    Billing Contact Country: United States
    Billing Contact Country Code: US
    Billing Contact Phone Number: +206.2231271
    Billing Contact Facsimile Number: +206.2231271
    Billing Contact Email: today2005@earthling.net
    Technical Contact ID: CNEU-127711
    Technical Contact Name: Bob Soloway
    Technical Contact Address1: PO Box 1259
    Technical Contact City: Seattle
    Technical Contact State/Province: --
    Technical Contact Postal Code: WA
    Technical Contact Country: United States
    Technical Contact Country Code: US
    Technical Contact Phone Number: +206.2231271
    Technical Contact Facsimile Number: +206.2231271
    Technical Contact Email: today2005@earthling.net
    Name Server: NS2.ZONEEDIT.COM
    Name Server: NS17.ZONEEDIT.COM
    Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
    COM)
    Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.
    COM)
    Domain Registration Date: Fri Oct 28 02:53:40 GMT 2005
    Domain Expiration Date: Fri Oct 27 23:59:59 GMT 2006
    Domain Last Updated Date: Sat Oct 29 06:52:01 GMT 2005

    Where: DiG 9.2.4 <<>> broadcastemailservices.biz
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 286
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastemailservices.biz.    IN      A

    ;; ANSWER SECTION:
    broadcastemailservices.biz. 7200 IN     A       222.77.185.251

    Thats... China

    inetnum:      222.76.0.0 - 222.79.255.255
    netname: CHINANET-FJ
    descr: CHINANET fujian province network
    descr: China Telecom
    descr: No1,jin-rong Street
    descr: Beijing 100032
    country: CN
    admin-c: CH93-AP
    tech-c: CA67-AP
    changed: hm-changed@apnic.net 20031024
    mnt-by: APNIC-HM
    mnt-lower: MAINT-CHINANET-FJ
    mnt-routes: MAINT-CHINANET-FJ
    remarks: This object can only modify by APNIC hostmaster
    remarks: If you wish to modify this object details please
    remarks: send email to hostmaster@apnic.net with your
    remarks: organisation account name in the subject line.
    status: ALLOCATED PORTABLE
    source: APNIC
    role:         CHINANETFJ IP ADMIN
    address: 7,East Street,Fuzhou,Fujian,PRC
    country: CN
    phone: +86-591-3333169-293
    fax-no: +86-591-3371954
    e-mail: fjnic@fjdcb.fz.fj.cn
    trouble: send spam reports and abuse reports
    trouble: to abuse@fjdcb.fz.fj.cn
    trouble: Please include detailed information and
    trouble: times in UTC
    admin-c: FH71-AP
    tech-c: FH71-AP
    nic-hdl: CA67-AP
    mnt-by: MAINT-CHINANET-FJ
    changed: fjnic@fjdcb.fz.fj.cn 20020719
    source: APNIC
    person:       Chinanet Hostmaster
    nic-hdl: CH93-AP
    e-mail: anti-spam@ns.chinanet.cn.net
    address: No.31 ,jingrong street,beijing
    address: 100032
    phone: +86-10-58501719
    fax-no: +86-10-58501724
    country: CN
    changed: lqing@chinatelecom.com.cn 20051021
    mnt-by: MAINT-CHINANET
    source: APNIC


    also (thanks Fridge) Citizens, Gladiators meet security-validations.com

    Domain Name ..................... security-validations.com
    Name Server ..................... dns7.hichina.com
                                      dns8.hichina.com
    Registrant ID ................... hc847466383-cn
    Registrant Name ................. Tanveer Ahmad
    Registrant Organization ......... Tanveer Ahmad Shah
    Registrant Address .............. Tanveer Ahmad Shah
    Registrant City ................. usa
    Registrant Province/State ....... uas
    Registrant Postal Code .......... 100000
    Registrant Country Code ......... US
    Registrant Phone Number ......... +86.10000000000 -
    Registrant Fax .................. +86.10000000000 -
    Registrant Email ................ leohosting@hotmail.com
    Administrative ID ............... hc734116639-cn
    Administrative Name .............
    Administrative Organization .....
    Administrative Address .......... JINGTIAN WEST ROAD
    Administrative City ............. SHENZHEN
    Administrative Province/State ... GUANGDONG
    Administrative Postal Code ...... 518034
    Administrative Country Code ..... CN
    Administrative Phone Number ..... +86.075583092575 -
    Administrative Fax .............. +86.075583092575 -
    Administrative Email ............ office@jinre.net
    Billing ID ...................... hc434116639-cn
    Billing Name ....................
    Billing Organization ............
    Billing Address ................. JINGTIAN WEST ROAD
    Billing City .................... SHENZHEN
    Billing Province/State .......... GUANGDONG
    Billing Postal Code ............. 518034
    Billing Country Code ............ CN
    Billing Phone Number ............ +86.075583092575 -
    Billing Fax ..................... +86.075583092575 -
    Billing Email ................... office@jinre.net
    Technical ID .................... hc134116639-cn
    Technical Name ..................
    Technical Organization ..........
    Technical Address ............... JINGTIAN WEST ROAD
    Technical City .................. SHENZHEN
    Technical Province/State ........ GUANGDONG
    Technical Postal Code ........... 518034
    Technical Country Code .......... CN
    Technical Phone Number .......... +86.075583092575 -
    Technical Fax ................... +86.075583092575 -
    Technical Email ................. office@jinre.net
    Expiration Date ................. 2006-06-25 04:44:19

    Is this Bobs new lover Tanveer Ahmad, what happened to stephen ? Plenty of fake stuff in there '+86.10000000000' Of note dns7.hichina.com.       154193  IN      A       218.30.103.250 from searchengineraking.cn

    <<>> DiG 9.2.4 <<>> dns7.hichina.com
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40181
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;dns7.hichina.com.              IN      A

    ;; ANSWER SECTION:
    dns7.hichina.com.       123517  IN      A       218.30.103.247
    dns7.hichina.com.       123517  IN      A       218.30.103.250

    which is still our spammy friends at the Chinese government

    inetnum:      218.30.96.0 - 218.30.127.255
    netname: CHINANET-IDC-BJ
    descr: CHINANET IDC center
    descr: China Telecom
    descr: Beijing 100088
    country: CN
    admin-c: HC55-AP
    tech-c: HC55-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINATELECOM-BJ
    changed: bjnic@bjtelecom.net 20040322
    status: ALLOCATED NON-PORTABLE
    source: APNIC
    domain:       103.30.218.in-addr.arpa
    descr: Hichina
    country: CN
    admin-c: CH93-AP
    tech-c: CH93-AP
    zone-c: CH93-AP
    nserver: dns1.hichina.com
    nserver: dns2.hichina.com
    mnt-by: maint-chinanet
    changed: shenjun@cndata.com 20040310
    source: APNIC
    person:       Chinanet Hostmaster
    nic-hdl: CH93-AP
    e-mail: anti-spam@ns.chinanet.cn.net < like they give a shit
    address: No.31 ,jingrong street,beijing
    address: 100032
    phone: +86-10-58501719
    fax-no: +86-10-58501724
    country: CN
    changed: lqing@chinatelecom.com.cn 20051021
    mnt-by: MAINT-CHINANET
    source: APNIC
    person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
    nic-hdl: HC55-AP
    e-mail: bjnic@bjtelecom.net
    address: Beijing Telecom
    address: No. 107 XiDan Beidajie, Xicheng District Beijing
    phone: +86-010-58503461
    fax-no: +86-010-58503054
    country: cn
    changed: bjnic@bjtelecom.net 20040115
    mnt-by: MAINT-CHINATELECOM-BJ
    source: APNIC

    21 October:  Meet 'searchengineranking.cn' A departure from the usual Bob selection of names but 'Hi'  Its very slow but its Bob- we have seen this before I think (excuse rubbish screen dump)

    Bob using .cn domian name

    whois searchengineranking.cn

    Domain Name: searchengineranking.cn
    ROID: 20050719s10001s22674827-cn
    Domain Status: ok
    Registrant Organization: stephen
    Registrant Name: stephen
    Administrative Email: postmaster@2ndDNS.com
    Sponsoring Registrar: 创联万网国际信息技术(北京)有限公司
    Name Server:dns7.hichina.com
    Name Server:dns8.hichina.com
    Registration Date: 2005-07-19 13:00
    Expiration Date: 2006-07-19 13:00

    Bob 'Stephen' oh my !!!  is he your lover ?

    Where

    dig searchengineranking.cn

    ; <<>> DiG 9.2.4 <<>> searchengineranking.cn
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7124
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;searchengineranking.cn.                IN      A

    ;; AUTHORITY SECTION:
    searchengineranking.cn. 10662   IN      SOA     dns7.hichina.com. hostmaster.hichina.com. 2005102001 21600 3600 1728000 21600

    Hmmm ... or..
    dns7.hichina.com.       154193  IN      A       218.30.103.250
    dns7.hichina.com.       154193  IN      A       218.30.103.247

    which is China.

    inetnum:      218.30.96.0 - 218.30.127.255
    netname: CHINANET-IDC-BJ
    descr: CHINANET IDC center
    descr: China Telecom
    descr: Beijing 100088
    country: CN
    admin-c: HC55-AP
    tech-c: HC55-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINATELECOM-BJ
    changed: bjnic@bjtelecom.net 20040322
    status: ALLOCATED NON-PORTABLE
    source: APNIC
    person:       Hostmaster of Beijing Telecom corporation CHINA   TELECOM
    nic-hdl: HC55-AP
    e-mail: bjnic@bjtelecom.net
    address: Beijing Telecom
    address: No. 107 XiDan Beidajie, Xicheng District Beijing
    phone: +86-010-58503461
    fax-no: +86-010-58503054
    country: cn
    changed: bjnic@bjtelecom.net 20040115
    mnt-by: MAINT-CHINATELECOM-BJ
    source: APNIC

    And broadcastingemailing.org

    Domain ID:D107836737-LROR
    Domain Name:BROADCASTINGEMAILING.ORG
    Created On:16-Oct-2005 19:51:29 UTC
    Last Updated On:19-Oct-2005 10:21:25 UTC
    Expiration Date:16-Oct-2006 19:51:29 UTC
    Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:CORG-136800
    Registrant Name:Bob Soloway
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:--
    Registrant Postal Code:WA
    Registrant Country:US
    Registrant Phone:+206.2231271
    Registrant Phone Ext.:
    Registrant FAX:+206.2231271
    Registrant FAX Ext.:
    Registrant Email:today2005@earthling.net
    Admin ID:CORG-135817
    Admin Name:Bob Soloway
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:--
    Admin Postal Code:WA
    Admin Country:US
    Admin Phone:+206.2231271
    Admin Phone Ext.:
    Admin FAX:+206.2231271
    Admin FAX Ext.:
    Admin Email:today2005@earthling.net
    Tech ID:CORG-135817
    Tech Name:Bob Soloway
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:--
    Tech Postal Code:WA
    Tech Country:US
    Tech Phone:+206.2231271
    Tech Phone Ext.:
    Tech FAX:+206.2231271
    Tech FAX Ext.:
    Tech Email:today2005@earthling.net
    Name Server:NS2.ASSETSSECURITYSERVICE.COM
    Name Server:NS1.ASSETSSECURITYSERVICE.COM

    Where:

    dig broadcastingemailing.org

    ; <<>> DiG 9.2.4 <<>> broadcastingemailing.org
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63833
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastingemailing.org.      IN      A

    ;; ANSWER SECTION:
    broadcastingemailing.org. 3600  IN      A       222.73.4.71

    Thats .. China ... and

    inetnum:      222.73.4.66 - 222.73.4.85
    netname: null
    descr: null
    country: CN
    admin-c: WQ58-AP
    tech-c: WL371-AP
    mnt-by: MAINT-CHINANET-SH
    changed: wanglin@shaidc.com 20051018
    status: ASSIGNED NON-PORTABLE
    source: APNIC
    person:       Wang Qing
    address: 6F,380 Fushan Road,Shanghai 200122
    country: CN
    phone: +86-21-68761255-807
    fax-no: +86-21-68761255-805
    e-mail: wanglin@shaidc.com
    nic-hdl: WQ58-AP
    mnt-by: MAINT-CN-SHTELE-XINCHAN
    changed: wanglin@shaidc.com 20021007
    source: APNIC
    person:       Wang Lin
    address: 6F,380 Fushan Road,Shanghai 200122
    country: CN
    phone: +86-21-68761255-807
    fax-no: +86-21-68761255-805
    e-mail: wanglin@shaidc.com
    nic-hdl: WL371-AP
    mnt-by: MAINT-CN-SHTELE-XINCHAN
    changed: wanglin@shaidc.com 20021007
    source: APNIC

    20 October: Testimonial time again:

    From:  Angela  Adcox
    Comment:     Hi, I came across your site today. I was investigating the optinemailing.biz. I was one of the suckers who paid 150.00 to have my site advertised through broadcast email. I was told it was all opt in emails. Now I am getting email complaints daily

    Hello and a belated welcome, she gave me no email. Strange..... 

    More 'recommendations' can be found elsewhere. (another 'better' version of this in Google is: "I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. Well now I have nothing but complaints about spam and am receiving virus' in my email all the time. I asked for a refund but they said no. Still I get complaints about emails being sent out after I told them to stop sending them. So I wonder what can we do about this. My business has slowed so much and I think my site's reputation is at stake". )

    Need more recommendations try.here

    Thats one for the website Bob.

    16 October:  Spam to (from Japan) and he has gone shopping

    Meet emailingtoday.org

    Domain ID:D107700584-LROR
    Domain Name:EMAILINGTODAY.ORG
    Created On:04-Oct-2005 21:28:24 UTC
    Last Updated On:10-Oct-2005 00:14:41 UTC
    Expiration Date:04-Oct-2006 21:28:24 UTC
    Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R25-LROR)
    Status:TRANSFER PROHIBITED
    Registrant ID:CORG-135818
    Registrant Name:Bob Soloway
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:--
    Registrant Postal Code:WA
    Registrant Country:US
    Registrant Phone:+206.2231271
    Registrant Phone Ext.:
    Registrant FAX:+206.2231271
    Registrant FAX Ext.:
    Registrant Email:today2005@earthling.net
    Admin ID:CORG-135817
    Admin Name:Bob Soloway
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:--
    Admin Postal Code:WA
    Admin Country:US
    Admin Phone:+206.2231271
    Admin Phone Ext.:
    Admin FAX:+206.2231271
    Admin FAX Ext.:
    Admin Email:today2005@earthling.net
    Tech ID:CORG-135817
    Tech Name:Bob Soloway
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:--
    Tech Postal Code:WA
    Tech Country:US
    Tech Phone:+206.2231271
    Tech Phone Ext.:
    Tech FAX:+206.2231271
    Tech FAX Ext.:
    Tech Email:today2005@earthling.net
    Name Server:S1.REDBUYER.COM
    Name Server:S2.REDBUYER.COM

    where ? why Patriotic China.  Dont you feel sorry for those american workers Bob ? - you are a patriot ?, you confessed your love in a 'spamis' spam.

    dig emailingtoday.org

    ; <<>> DiG 9.2.4 <<>> emailingtoday.org
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48580
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;emailingtoday.org.             IN      A

    ;; ANSWER SECTION:
    emailingtoday.org.      2000    IN      A       222.174.34.151

    ;; Query time: 407 msec

    inetnum:      222.173.0.0 - 222.175.255.255
    netname:      CHINATELECOM-SD
    descr:        CHINANET SHANDONG PROVINCE NETWORK
    descr:        Shandong Telecom Corporation
    descr:        NO.71 Jingshi Road,jinan,shandong
    country:      CN
    admin-c:      CH93-AP
    tech-c:       LB56-AP
    mnt-by:       APNIC-HM
    mnt-lower:    MAINT-CHINATELECOM-SD
    mnt-routes:   MAINT-CHINATELECOM-SD
    status:       ALLOCATED PORTABLE
    source:       APNIC

    person:       Chinanet Hostmaster
    address:      No.31 ,jingrong street,beijing
    address:      100032
    country:      CN
    phone:        +86-10-66027112
    fax-no:       +86-10-58501144
    e-mail:       hostmaster@ns.chinanet.cn.net
    e-mail:       anti-spam@ns.chinanet.cn.net
    nic-hdl:      CH93-AP
    mnt-by:       MAINT-CHINANET
    changed:      hostmaster@ns.chinanet.cn.net 20021016
    remarks:      hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
    source:       APNIC

    Well done Bob.

    6 October: Ladies and Gents, Boys and Girls, Lords, and Ladies
    meet broadcastingemail.us

    Domain Name:                                 BROADCASTINGEMAIL.US
    Domain ID: D8714297-US
    Sponsoring Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
    Domain Status: ok
    Registrant ID: ID00210189-PR
    Registrant Name: Bob Soloway
    Registrant Address1: PO Box 1259
    Registrant City: Seattle
    Registrant State/Province: WA
    Registrant Postal Code: 98101
    Registrant Country: United States
    Registrant Country Code: US
    Registrant Phone Number: +1.2062231271
    Registrant Email: today2005@earthling.net
    Registrant Application Purpose: P3
    Registrant Nexus Category: C11
    Administrative Contact ID: ID00210189-PR
    Administrative Contact Name: Bob Soloway
    Administrative Contact Address1: PO Box 1259
    Administrative Contact City: Seattle
    Administrative Contact State/Province: WA
    Administrative Contact Postal Code: 98101
    Administrative Contact Country: United States
    Administrative Contact Country Code: US
    Administrative Contact Phone Number: +1.2062231271
    Administrative Contact Email: today2005@earthling.net
    Administrative Application Purpose: P3
    Administrative Nexus Category: C11
    Billing Contact ID: ID00210189-PR
    Billing Contact Name: Bob Soloway
    Billing Contact Address1: PO Box 1259
    Billing Contact City: Seattle
    Billing Contact State/Province: WA
    Billing Contact Postal Code: 98101
    Billing Contact Country: United States
    Billing Contact Country Code: US
    Billing Contact Phone Number: +1.2062231271
    Billing Contact Email: today2005@earthling.net
    Billing Application Purpose: P3
    Billing Nexus Category: C11
    Technical Contact ID: ID00210189-PR
    Technical Contact Name: Bob Soloway
    Technical Contact Address1: PO Box 1259
    Technical Contact City: Seattle
    Technical Contact State/Province: WA
    Technical Contact Postal Code: 98101
    Technical Contact Country: United States
    Technical Contact Country Code: US
    Technical Contact Phone Number: +1.2062231271
    Technical Contact Email: today2005@earthling.net
    Technical Application Purpose: P3
    Technical Nexus Category: C11
    Name Server: S1.REDBUYER.COM
    Name Server: S2.REDBUYER.COM
    Created by Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
    Last Updated by Registrar: PRIMUS TELECOMMUNICATIONS PTY LTD.
    Domain Registration Date: Wed Oct 05 16:16:18 GMT 2005
    Domain Expiration Date: Wed Oct 04 23:59:59 GMT 2006
    Domain Last Updated Date: Thu Oct 06 00:13:02 GMT 2005

    >>>> Whois database was last updated on: Thu Oct 06 14:35:26 GMT 2005 <<<<

    Where ?
    broadcastingemail.us
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52807
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastingemail.us. IN A

    ;; ANSWER SECTION:
    broadcastingemail.us. 2000 IN A 222.174.34.151

    ;; Query time

    Thats .... China, glad to see bob supporting americans in employment

    netnum:      222.173.0.0 - 222.175.255.255
    netname: CHINATELECOM-SD
    descr: CHINANET SHANDONG PROVINCE NETWORK
    descr: Shandong Telecom Corporation
    descr: NO.71 Jingshi Road,jinan,shandong
    country: CN
    admin-c: CH93-AP
    tech-c: LB56-AP
    mnt-by: APNIC-HM
    mnt-lower: MAINT-CHINATELECOM-SD
    mnt-routes: MAINT-CHINATELECOM-SD
    status: ALLOCATED PORTABLE
    remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    remarks: This object can only be updated by APNIC hostmasters.
    remarks: To update this object, please contact APNIC
    remarks: hostmasters and include your organisation's account
    remarks: name in the subject line.
    remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    changed: hm-changed@apnic.net 20040316
    source: APNIC
    person: Chinanet Hostmaster
    address: No.31 ,jingrong street,beijing
    address: 100032
    country: CN
    phone: +86-10-66027112
    fax-no: +86-10-58501144
    e-mail: hostmaster@ns.chinanet.cn.net
    e-mail: anti-spam@ns.chinanet.cn.net
    nic-hdl: CH93-AP
    mnt-by: MAINT-CHINANET
    changed: hostmaster@ns.chinanet.cn.net 20021016
    remarks: hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
    source: APNIC
    person: Lin Bin
    nic-hdl: LB56-AP
    e-mail: linb@sdtele.com
    address: NO.71 Jingshi Road,Jinan,Shandong
    address: 250061,China
    phone: +86-531-3198141
    fax-no: +86-531-3198193
    country: CN
    changed: ipadmin@sdtele.com 20040213
    mnt-by: MAINT-CHINATELECOM-SD
    source: APNIC


    5 October:  The optinemailings.us domain registration has been killed by the retarded  folks at Neustar it seems (they run .biz too)  Sorry cant tell you anything if there is no domain record (as of 5 October)

    SPAM TRACKING update: Watch out for ROLE  @ DOMAIN  in the message body if you  report Bobs  crap  expect  more crap from him

    ROLE @ DOMAIN is your non-profit/charity contact email address right?

    If so... WE WILL EMAIL YOUR WEB SITE TO 2,500,00 OPT-IN EMAILS FOR FREE

    http://www.optinemailings.us


    ----- ---- --- -- - -
    simply visit our company web site above for details on how it works, then
    send a letter to the mailing address on our company web site above with
    your non-profit and/or charity status and address in your country of origin
    enclosed, along with your email address and we will then send you all the
    specifications needed on how to receive this non-cost, non-commercial, non-
    transactional, non-relationship, charity/non-profit courtesy emailing.

    This non-commercial, non-transactional, non-relationship, courtesy emailing
    has an important primary purpose of helping society by assisting non-profits
    & charities have their non-profit/non-commercial mission statement/special
    message sent out to 2.5 million opt-in emails as a courtesy to help worldwide
    in national & global relief efforts for various causes in need of support.

    if this is not a non-profit/charity contact email address and/or you are not
    interested in our occassional non-commercial, non-transactional, non-cost,
    non-relationship, courtesy emailings we perform for various non-profits and
    charities, remove the email above: http://www.optinemailings.us/dounsub.php
    contact us at: charity info, po box 1259, seattle, wa 98101, usa

    ----- ---- --- -- - -
    thanks to the technology of email, here are only a few of the countless
    charities & non-profit organizations we have countributed to in the past:
    adventist develop & relief agency international, child help usa, direct
    relief international, doctors without borders, episcopal relief and
    development, international medical corps, mercy corps, operation usa, red
    cross hurricane relief division, red cross washington state chapter, the
    salvation army, among countless others in need of global assistance.

    30 September: admin web stats for the year, We all love Bob spamming honest!

    Web stats


    24 September: Another court defeat for Bob Soloway - 'stolen' from a newsgroup, but its Bob related.

    Not only the $10,075,000 statutory penalty, but he also scored a permanent
    injunction against Soloway's (and his agents, affiliates, etc., etc.)
    sending spam with the usual header violations.

    http://www.mortgagespam.com/soloway/19.pdf

    Enjoy.

    Bobs reply (apparenlty)

    rsoloway@iname.com says...
    >
    >Comments from Robert Soloway:
    >
    >I've been reading these posts and have found them quite entertaining,
    >although unfortunately nobody here is aware of the true facts of the
    >matter at hand.
    >
    >Unfortunately, the injunction was filed improperly with the court.
    >There was never a request for an original injunction requested in the
    >original court complaint papers, so the injunction is invalidated upon
    >notification to the court, (as it will be invalidated next week, and
    >hopefully braver will be sanctioned potentially criminally, not just
    >civilly for his misuse and abuse of the court system.)
    >
    >All I can say is.. everything has now fallen into place with the
    >default judgement and malpractice injunction.  I sincerely wish braver
    >the best with his company and himself and sincerely hope that he has
    >already secured the best and most expensive possible lawyer on retainer
    >in the state of Washington, as I have done in the state of Oklahoma.

    >- Robert Soloway

    Yep Bobs dumb.

    22 September: Ladies and Gents meet optinemailing.biz

    whois optinemailing.biz
    Domain Name:                                 OPTINEMAILING.BIZ
    Domain ID:                                   D10685747-BIZ
    Sponsoring Registrar:                        CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
    Sponsoring Registrar IANA ID:                113
    Domain Status:                               clientDeleteProhibited
    Domain Status:                               clientRenewProhibited
    Domain Status:                               clientTransferProhibited
    Domain Status:                               clientUpdateProhibited
    Registrant ID:                               CNEU-123633
    Registrant Name:                             Bob Soloway
    Registrant Organization:                     NIM
    Registrant Address1:                         PO Box 1259
    Registrant City:                             Seattle
    Registrant State/Province:                   WA
    Registrant Postal Code:                      98111
    Registrant Country:                          United States
    Registrant Country Code:                     US
    Registrant Phone Number:                     +120.62231271
    Registrant Facsimile Number:                 +120.62231271
    Registrant Email:                            bsoloway@inorbit.com
    Administrative Contact ID:                   CNEU-123632
    Administrative Contact Name:                 Bob Soloway
    Administrative Contact Organization:         NIM
    Administrative Contact Address1:             PO Box 1259
    Administrative Contact City:                 Seattle
    Administrative Contact State/Province:       WA
    Administrative Contact Postal Code:          98111
    Administrative Contact Country:              United States
    Administrative Contact Country Code:         US
    Administrative Contact Phone Number:         +120.62231271
    Administrative Contact Facsimile Number:     +120.62231271
    Administrative Contact Email:                bsoloway@inorbit.com
    Billing Contact ID:                          CNEU-123632
    Billing Contact Name:                        Bob Soloway
    Billing Contact Organization:                NIM
    Billing Contact Address1:                    PO Box 1259
    Billing Contact City:                        Seattle
    Billing Contact State/Province:              WA
    Billing Contact Postal Code:                 98111
    Billing Contact Country:                     United States
    Billing Contact Country Code:                US
    Billing Contact Phone Number:                +120.62231271
    Billing Contact Facsimile Number:            +120.62231271
    Billing Contact Email:                       bsoloway@inorbit.com
    Technical Contact ID:                        CNEU-123632
    Technical Contact Name:                      Bob Soloway
    Technical Contact Organization:              NIM
    Technical Contact Address1:                  PO Box 1259
    Technical Contact City:                      Seattle
    Technical Contact State/Province:            WA
    Technical Contact Postal Code:               98111
    Technical Contact Country:                   United States
    Technical Contact Country Code:              US
    Technical Contact Phone Number:              +120.62231271
    Technical Contact Facsimile Number:          +120.62231271
    Technical Contact Email:                     bsoloway@inorbit.com
    Name Server:                                 NS1.VIRTUALUSE.COM
    Name Server:                                 NS2.VIRTUALUSE.COM
    Name Server:                                 NS3.VIRTUALUSE.COM
    Name Server:                                 NS4.VIRTUALUSE.COM
    Created by Registrar:                        CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
    Last Updated by Registrar:                   CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
    Domain Registration Date:                    Thu Aug 18 14:16:02 GMT 2005
    Domain Expiration Date:                      Thu Aug 17 23:59:59 GMT 2006
    Domain Last Updated Date:                    Mon Sep 19 22:01:12 GMT 2005
    Registrar Fields
    ----------------
    IDNLang:                                     de


    Where or wohin ?

    dig OPTINEMAILING.BIZ

    ; <<>> DiG 9.2.4 <<>> OPTINEMAILING.BIZ
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25049
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;OPTINEMAILING.BIZ.             IN      A

    ;; ANSWER SECTION:
    OPTINEMAILING.BIZ.      0       IN      A       194.126.190.13

    ;; Query time:

    Thats Russia Comrades.

    inetnum:        194.126.188.0 - 194.126.191.255
    netname: Tekcom
    descr: Tekcom Project
    country: RU
    org: ORG-TP17-RIPE
    admin-c: MV3243-RIPE
    tech-c: MV3243-RIPE
    status: ASSIGNED PI "status:" definitions
    mnt-by: RIPE-NCC-HM-PI-MNT
    mnt-by: MNT-TEKCOM
    mnt-lower: RIPE-NCC-HM-PI-MNT
    mnt-routes: MNT-TEKCOM
    mnt-domains: MNT-TEKCOM
    source: RIPE # Filtered
    organisation:   ORG-TP17-RIPE
    org-name: Tekcom Project
    org-type: NON-REGISTRY
    address: Russian Federation
    address: Moscow
    address: Verxniya Radichenskava St. 3-1
    e-mail: mixailovich@tekcom.ru
    admin-c: MV3243-RIPE
    tech-c: MV3243-RIPE
    mnt-ref: MNT-TEKCOM
    mnt-by: MNT-TEKCOM
    source: RIPE # Filtered
    person:         Mikhail Vlasov
    address: Russian Federation
    address: Moscow
    address: Verxniya Radichenskava St. 3-1
    e-mail: mixailovich@tekcom.ru
    phone: +7 921 9246323
    nic-hdl: MV3243-RIPE
    source: RIPE # Filtered

    21 September: Bob's a funny guy at times, Im not sure what hes on, but he makes good jokes.  He is still on the spamis crap (which im sending to myself by the way) and he is still complaining about Microsoft (sending him to court) This time its sending jobs to China.  Now Bob is a serial offender at using Chinese companies to host his web sites (theres a lot of 'cn' in these pages).  If your not sure look at 'Moscow' just up from here.

    So I assume Bob is worried by this (?better spam defences in exchange?, if your dumb enough to have a exchange server), but not bothered enough to 'try' and host his domains in 'America'.  The moral behind this story is

    Don't complain about 'losing american jobs', when your 'patrotism' to american workers and business can be called into question.

    Remember ladies and gentlemen  Bobs a Spammer, and no patriot of america by the gauging of his offshore 'non american' business activites recorded in this web page.

    Enough surmon for today, and a copy of the email (which you will be sending to yourself) will no doubt be coming into an email account of yours soon.
     

    12 September: Bobs given up with the proper spamis headers (see experiment) .  So if your posting messages to a spam reporting service look out for

    Received-SPF: neutral (gmail.com: 193.188.71.2 is neither permitted nor denied by domain of ?@gmail.com) 

    As ?@gmail.com was my email address, this technique seems to have replaced the nonsense word.  However the moron keeps sending me his crap, and tells me that I sent it to.  If you don't know what spf is I suggest you google/search for it

    9 September: From another domain account,  quite how he can mail spam services, and then complain via Spamis does make me smile while using my email address in the to and from headers is quite beyond belief..

    [SPAMIS NOTIFICATION]:
    Fully "READY" to Begin Increasing Public Service Announcement
    Emails to 20 Times the Amount of Internet Users by 25 Times the
    Current Sending Rate & Speed When a Certain Activity Transpires.
    [CURRENTLY IN WAITING FOR THIS ACTIVITY TO TRANSPIRE]

    Says it all. Well once a spammer always a spammer.

    5 September: Have added translate tool at top of page, and here.

    Page/Text Translate:


    30 August: Statistics time, for those of you unaware of the spam collection we do off this webpage may i point you towards these graphs of my own creation (your browser will need javascript/ecmascript).   Im still trying to figure out how to automate the charts (give me time), but the by month spam  is indicative 'proof' that can-spam does not work.

    The other chart based on category of the received spam speaks volumes about Bob's main source of income.  - I've put  the 419's scams together with the mlm scams for clarity after all they are all 'scams'.

    Due to  the problems of opening all three experiments webpages and doing graphs here its the best I can come up with without the thing taking several minutes to load and fire up all kind of scripting alerts on your web browser.  Graphs of each experiment can be found on the appropriate web pages.

    So if you want to take a long term view at Bobs client list be my guest.

    25 August: Surprise everybody meet optinemailtoday.biz

    Domain Name:                                 OPTINEMAILTODAY.BIZ
    Domain ID:                                   D10683405-BIZ
    Sponsoring Registrar:                        NETWORK SOLUTIONS INC.
    Sponsoring Registrar IANA ID:                2
    Domain Status:                               clientTransferProhibited
    Registrant ID:                               39827714
    Registrant Name:                             None
    Registrant Organization:                     None
    Registrant Address1:                         PO Box 1259
    Registrant City:                             Seattle
    Registrant State/Province:                   WA
    Registrant Postal Code:                      98111
    Registrant Country:                          United States
    Registrant Country Code:                     US
    Registrant Phone Number:                     +1.2062231271
    Registrant Email:                            no.valid.email@worldnic.com
    Administrative Contact ID:                   39827714
    Administrative Contact Name:                 None
    Administrative Contact Organization:         None
    Administrative Contact Address1:             PO Box 1259
    Administrative Contact City:                 Seattle
    Administrative Contact State/Province:       WA
    Administrative Contact Postal Code:          98111
    Administrative Contact Country:              United States
    Administrative Contact Country Code:         US
    Administrative Contact Phone Number:         +1.2062231271
    Administrative Contact Email:                no.valid.email@worldnic.com
    Billing Contact ID:                          39827715
    Billing Contact Name:                        None
    Billing Contact Organization:                None
    Billing Contact Address1:                    PO Box 1259
    Billing Contact City:                        Seattle
    Billing Contact State/Province:              WA
    Billing Contact Postal Code:                 98111
    Billing Contact Country:                     United States
    Billing Contact Country Code:                US
    Billing Contact Phone Number:                +1.2062231271
    Billing Contact Email:                       bsoloway@inorbit.com
    Technical Contact ID:                        39827714
    Technical Contact Name:                      None
    Technical Contact Organization:              None
    Technical Contact Address1:                  PO Box 1259
    Technical Contact City:                      Seattle
    Technical Contact State/Province:            WA
    Technical Contact Postal Code:               98111
    Technical Contact Country:                   United States
    Technical Contact Country Code:              US
    Technical Contact Phone Number:              +1.2062231271
    Technical Contact Email:                     no.valid.email@worldnic.com
    Name Server:                                 NS1.VIRTUALUSE.COM
    Name Server:                                 NS2.VIRTUALUSE.COM
    Name Server:                                 NS3.VIRTUALUSE.COM
    Name Server:                                 NS4.VIRTUALUSE.COM
    Created by Registrar:                        NETWORK SOLUTIONS INC.
    Last Updated by Registrar:                   NETWORK SOLUTIONS INC.
    Domain Registration Date:                    Thu Aug 18 07:13:54 GMT 2005
    Domain Expiration Date:                      Thu Aug 17 23:59:59 GMT 2006
    Domain Last Updated Date:                    Mon Aug 22 05:56:10 GMT 2005

    OK no.valid.email@worldnic.com thats normally how bob does things. 

    ; <<>> DiG 9.2.4 <<>> optinemailtoday.biz
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19926
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;optinemailtoday.biz.           IN      A

    ;; ANSWER SECTION:
    optinemailtoday.biz.    3600    IN      A       218.244.189.18

    Thats  China

    inetnum:      218.244.160.0 - 218.244.191.255
    netname: CHINACOM
    descr: CHINA COMMUNICATIONS SYSTEM Co.,Ltd
    country: CN
    admin-c: GJ121-AP
    tech-c: WY152-AP
    mnt-by: MAINT-CNNIC-AP
    changed: ipas@cnnic.net.cn 20020328
    status: ALLOCATED PORTABLE
    source: APNIC
    person:       Guo Jinbo
    nic-hdl: GJ121-AP
    e-mail: ipmaster@cetc-chinacomm.com.cn
    address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
    phone: +86-10-64169966
    fax-no: +86-10-64163632
    country: CN
    changed: wangjingying@cetc-chinacomm.com.cn 20031211
    mnt-by: MAINT-CNNIC-AP
    source: APNIC
    person:       Wang Yongqiang
    nic-hdl: WY152-AP
    e-mail: ipmaster@cetc-chinacomm.com.cn
    address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
    phone: +86-10-64163626
    fax-no: +86-10-64163632
    country: CN
    changed: wangjingying@cetc-chinacomm.com.cn
    Hey nice to see China sorting out its spam problem again.

    23 August:  We have a new domain Ladies and Gents please meet: optinemails.org

    Domain ID:D107210890-LROR
    Domain Name:OPTINEMAILS.ORG
    Created On:18-Aug-2005 07:46:33 UTC
    Last Updated On:22-Aug-2005 06:04:23 UTC
    Expiration Date:18-Aug-2006 07:46:33 UTC
    Sponsoring Registrar:Moniker Online Services Inc. (R145-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:MONIKER158873
    Registrant Name:Robert Soloway
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:WA
    Registrant Postal Code:98111
    Registrant Country:US
    Registrant Phone:+1.2062231271
    Registrant Phone Ext.:
    Registrant FAX:+1.2062231271
    Registrant FAX Ext.:
    Registrant Email:bsoloway@inorbit.com
    Admin ID:MONIKER158873
    Admin Name:Robert Soloway
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:WA
    Admin Postal Code:98111
    Admin Country:US
    Admin Phone:+1.2062231271
    Admin Phone Ext.:
    Admin FAX:+1.2062231271
    Admin FAX Ext.:
    Admin Email:bsoloway@inorbit.com
    Tech ID:MONIKER158873
    Tech Name:Robert Soloway
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:WA
    Tech Postal Code:98111
    Tech Country:US
    Tech Phone:+1.2062231271
    Tech Phone Ext.:
    Tech FAX:+1.2062231271
    Tech FAX Ext.:
    Tech Email:bsoloway@inorbit.com
    Name Server:NS3.VIRTUALUSE.COM
    Name Server:NS2.VIRTUALUSE.COM
    Name Server:NS4.VIRTUALUSE.COM
    Name Server:NS1.VIRTUALUSE.COM
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:


    Hmm smelly where

    ; <<>> DiG 9.2.4 <<>> optinemails.org
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30940
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;optinemails.org.               IN      A

    ;; ANSWER SECTION:
    optinemails.org.        3544    IN      A       218.244.189.18

    ;; Query time: 19 msec

    Thats  China

    inetnum:      218.244.160.0 - 218.244.191.255
    netname: CHINACOM
    descr: CHINA COMMUNICATIONS SYSTEM Co.,Ltd
    country: CN
    admin-c: GJ121-AP
    tech-c: WY152-AP
    mnt-by: MAINT-CNNIC-AP
    changed: ipas@cnnic.net.cn 20020328
    status: ALLOCATED PORTABLE
    source: APNIC
    person:       Guo Jinbo
    nic-hdl: GJ121-AP
    e-mail: ipmaster@cetc-chinacomm.com.cn
    address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
    phone: +86-10-64169966
    fax-no: +86-10-64163632
    country: CN
    changed: wangjingying@cetc-chinacomm.com.cn 20031211
    mnt-by: MAINT-CNNIC-AP
    source: APNIC
    person:       Wang Yongqiang
    nic-hdl: WY152-AP
    e-mail: ipmaster@cetc-chinacomm.com.cn
    address: NO.1 North Road of Workers Stadium, Chaoyang District, Beijing, China
    phone: +86-10-64163626
    fax-no: +86-10-64163632
    country: CN
    changed: wangjingying@cetc-chinacomm.com.cn

    Hey nice to see China sorting out its spam problem.

    22 August: Bob has spammed my domain owner account.  DMA go give those Congressman and Senator a bribe.  Once on never off.

    19 August:  It seems that I am sending Bob's spam to myself, but somehow I'm sending spam from myself to our mail server in europe via a computer in South Africa hmm i don't think that was me.  Bobby has been on that darkmailer training course (see the legal discovery pdf and prior entry).   My thats quite funny really.  I've really got meet this nutjob called Robert one day.  Like they say 'revenge is a dish best served cold.'

    8 August: Oh well Bob, null points for

    BAD HEADER MIME error: error: unexpected end of preamble

    Meet new domain optinemailingtoday.com, completing the set with .net as well

    -----------------------------------------------
    Queried Domain Information as follows
    -----------------------------------------------

    Domain Name : optinemailtoday.com

    ::Registrant::
            Name      : Rob
            Email     : rsoloway@saintly.com
            Address   : POBOX1259 - SEATTLE - WA - 98111
            Zipcode   : 98111
            Nation    : US
            Tel       : 2062231271
            Fax       :

    ::Administrative Contact::
            Name      : Rob
            Email     : rsoloway@saintly.com
            Address   : POBOX1259 - SEATTLE - WA - 98111
            Zipcode   : 98111
            Nation    : US
            Tel       : 2062231271
            Fax       :

    ::Technical Contact::
            Name      : Rob
            Email     : rsoloway@saintly.com
            Address   : POBOX1259 - SEATTLE - WA - 98111
            Zipcode   : 98111
            Nation    : US
            Tel       : 2062231271
            Fax       :

    ::Name Servers::
            ns1.virtualuse.com
            ns2.virtualuse.com
            ns3.virtualuse.com
            ns4.virtualuse.com

    ::Dates & Status::
            Created Date   2005-07-31 11:21:38 EDT
            Updated Date   2005-07-31 11:21:38 EDT
            Valid Date     2006-07-31 11:21:38 EDT
            Status         ACTIVE

    Where ? why Russia comradski

    dig optinemailtoday.com

    ; <<>> DiG 9.2.4 <<>> optinemailtoday.com
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9338
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;optinemailtoday.com.           IN      A

    ;; ANSWER SECTION:
    optinemailtoday.com.    0       IN      A       194.126.190.14

    organisation:   ORG-TP17-RIPE
    org-name: Tekcom Project
    org-type: NON-REGISTRY
    address: Russian Federation
    address: Moscow
    address: Verxniya Radichenskava St. 3-1
    e-mail: mixailovich@tekcom.ru
    admin-c: MV3243-RIPE
    tech-c: MV3243-RIPE
    mnt-ref: MNT-TEKCOM
    mnt-by: MNT-TEKCOM
    source: RIPE # Filtered
    person:         Mikhail Vlasov
    address: Russian Federation
    address: Moscow
    address: Verxniya Radichenskava St. 3-1
    e-mail: mixailovich@tekcom.ru
    phone: +7 921 9246323
    nic-hdl: MV3243-RIPE
    source: RIPE # Filtered

    25 July: Hes back

    20 July: My Bob's been busy recently and I have only put a few of the spam entries on the list.

    I think Bob must have a learning difficulty as he is very slow to understand what the word 'no' means and also with the news.  Who says you cannot have fun with people with learning difficulties.

    18 July: Bob you need to go a darkmailer (his open proxy spamming software) training course

    failed

    Its spam.  Way to go bob.    Monkeys in a zoo spam better than bob

    17 July: Today, yes today im yet again part of the 4.6 million plus  people who said yes to Bob Soloway
    meet the new domain optin2millions.net. 

    Got an email from spamis (seemed personal) - Jay ? have you been passing my details on ?

    Essentially Saying should microsoft have any power at all ?  - well if nobody used Microsoft how would Bob spam us ?.  Microsoft is a problem because of its size but not the problem bob thinks it has.   Quite why should i worry about Microsoft when I just found im on yet another bob spam run.  Americans

    details about them

    eh.

    The logic is this: Microsoft write (bad) software, Bob spams. 
    Id rather 'trust' the software company than the person called Bob.

    new domain: optin2millions.net

    Domain Name : optin2millions.net

    ::Registrant::
            Name      : Robert Soloway
            Email     : 2millions@mail.com
            Address   : PO Box 1259 - Seattle, WA
            Zipcode   : 98101
            Nation    : US
            Tel       : (206)223-1271

    details about them

            Fax       : (206)223-1271

    ::Administrative Contact::
            Name      : Robert Soloway
            Email     : 2millions@mail.com
            Address   : PO Box 1259 - Seattle, WA
            Zipcode   : 98101
            Nation    : US
            Tel       : (206)223-1271
            Fax       : (206)223-1271

    ::Technical Contact::
            Name      : Robert Soloway
            Email     : 2millions@mail.com
            Address   : PO Box 1259 - Seattle, WA
            Zipcode   : 98101
            Nation    : US
            Tel       : (206)223-1271
            Fax       : (206)223-1271

    ::Name Servers::
            ns3.nowhostthis.com
            ns1.nowhostthis.com

    ::Dates & Status::
            Created Date   2005-07-10 12:25:26 EDT
            Updated Date   2005-07-10 12:25:26 EDT
            Valid Date     2006-07-10 12:25:26 EDT
            Status         ACTIVE

    Where ? well surprise me its China home of the spammers   ? dig optin2millions.net

    ; <<>> DiG 9.2.4 <<>> optin2millions.net
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38354
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;optin2millions.net.            IN      A

    ;; ANSWER SECTION:
    optin2millions.net.     3600    IN      A       221.11.133.64

    ;; Query time: 3048 msec

    inetnum:      221.11.128.0 - 221.11.223.255
    netname: CNCGROUP-HI
    descr: CNC Group Hainan province network
    descr: China Network Communications Group Corporation
    descr: No.156,Fu-Xing-Men-Nei Street,
    descr: Beijing 100031
    country: CN
    admin-c: CH455-AP
    tech-c: CH455-AP
    remarks: service provider
    mnt-by: APNIC-HM
    mnt-lower: MAINT-CNCGROUP-HI
    changed: hm-changed@apnic.net 20030122
    status: ALLOCATED PORTABLE
    source: APNIC
    role:         CNCGroup Hostmaster
    e-mail: abuse@cnc-noc.net
    address: No.156,Fu-Xing-Men-Nei Street,
    address: Beijing,100031,P.R.China
    nic-hdl: CH455-AP
    phone: +86-10-82993155
    fax-no: +86-10-82993102
    country: CN
    admin-c: CH444-AP
    tech-c: CH444-AP
    changed: abuse@cnc-noc.net 20041119
    mnt-by: MAINT-CNCGROUP
    source: APNIC

    10 July: Webmaster gets the history lesson. Please meet OPTIN2MILLIONS.COM

    Registrant:
     Bobby Soloway
     POBOX1259
     Seattle, WA 98101
     US

     Domain name: OPTIN2MILLIONS.COM

     Administrative Contact:
        Soloway, Bobby  bsoloway200@usa.com
        POBOX1259
        Seattle, WA 98101
        US
        +1.2062231271
     Technical Contact:
        Direct, Domain dnstech@domaindirect.com
        96 Mowat Avenue
        Toronto, ON M6K 3M1
        CA
        +1.4165312084    Fax: +1.4165315584



     Registration Service Provider:
        Domain Direct, dnstech@domaindirect.com
        1-416-531-2084
        http://www.domaindirect.com
        This company may be contacted for domain login/passwords,
        DNS/Nameserver changes, and general domain support questions.


     Registrar of Record: TUCOWS, INC.
     Record last updated on 08-Jul-2005.
     Record expires on 05-Jul-2006.
     Record created on 05-Jul-2005.

     Domain servers in listed order:
        NS1.DOMAINDIRECT.COM   216.40.33.21
        NS2.DOMAINDIRECT.COM   216.40.33.22
        NS3.DOMAINDIRECT.COM   204.50.180.58


     Domain status: REGISTRAR-LOCK


    5  July: The guy who checks the spam-quaranteened messages now and then (eg once in a blue moon) told me Bob made an appearance or too there, and said something that a Bob was giving a 'history lession'.  Like we care. 

    Also: I met a person today as well who told me that Novell in there courseware where using the example domain "SpamIsUs.com" to block spam.  sounds close?  Just think is they used spamis.net they could have done a lot of there customers a huge favour.

    Made me smile....  I might even drop them a line.

    2 July: Bobs in Spain now,  and the postmaster saw another bounce in the queue Yep Bobs gone and renewed another domain  Ladies and Gentlemen may I introduce optinemailing.net  The Joys of working saturdays....

    Primus Telecommunications Pty Ltd (PlanetDomain/PrimusDomain)

       Domain Name: OPTINEMAILING.NET
          Reseller..............: #1 Cheap Domains
          Created on............: 22 Jun 2005 00:00:00 EST
          Expires on............: 22 Jun 2006 00:00:00 EST
          Record last updated on: 22 Jun 2005 00:00:00 EST
          Status................: ACTIVE

       Domain Name: OPTINEMAILING.NET
          Reseller..............: #1 Cheap Domains
          Created on............: 22 Jun 2005 00:00:00 EST
          Expires on............: 22 Jun 2006 00:00:00 EST
          Record last updated on: 22 Jun 2005 00:00:00 EST
          Status................: ATIVE


       Owner, Administrative Contact, Technical Contact, Billing Contact:
          Bob Soloway (ID00192989)
          POBOX1259
          Seattle, WA 98111
          United States
          Phone: +1.2062231271
          Email: opt2005@mail.com


       Domain servers in listed order:

          NS1.VIRTUALUSE.COM
          NS2.VIRTUALUSE.COM
          NS3.VIRTUALUSE.COM
          NS4.VIRTUALUSE.COM

    Hey a new domain registrar!  Now where ....

     dig optinemailing.net

    ; <<>> DiG 9.2.4 <<>> optinemailing.net
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59688
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;optinemailing.net.             IN      A

    ;; ANSWER SECTION:
    optinemailing.net.      1210    IN      A       210.22.50.99

    ;; Query time: 21 msec

    Thats China.

    inetnum:      210.22.50.0 - 210.22.50.127
    netname: shilong-trade-ltd
    country: cn
    descr: xian city,shanxi province
    admin-c: TC254-AP
    tech-c: TC254-AP
    status: ASSIGNED NON-PORTABLE
    changed: moujh@china-netcom.com 20021106
    mnt-by: MAINT-CN-ZM28
    source: APNIC
    person:       TECH GROUP CNC
    address: 9/F, Building A, Corporate Square, No. 35 Financial Street,
    address: Xicheng District, Beijing 100032, P.R.China
    country: CN
    phone: +86-10-88093588
    fax-no: +86-10-88091442
    e-mail: tech-group@china-netcom.com
    nic-hdl: TC254-AP
    mnt-by: MAINT-CN-ZM28
    changed: zhaomq@china-netcom.com 20010917
    source: APNIC

    Smells like a Bob, have to wait until i get proper spam email though

    1 July:  Spamis.biz - you should know the routine by now....  Its Bob again

    whois spamis.biz
    Domain Name:                                 SPAMIS.BIZ
    Domain ID:                                   D9727894-BIZ
    Sponsoring Registrar:                        TUCOWS INC.
    Sponsoring Registrar IANA ID:                69
    Domain Status:                               clientTransferProhibited
    Domain Status:                               clientUpdateProhibited
    Registrant ID:                               TUDGUMZSDRD4TIV9
    Registrant Name:                             Robert Soloway
    Registrant Organization:                     SPAMIS
    Registrant Address1:                         PO Box 1259
    Registrant City:                             Seattle
    Registrant State/Province:                   WA
    Registrant Postal Code:                      98111
    Registrant Country:                          United States
    Registrant Country Code:                     US
    Registrant Phone Number:                     +1.2062231271
    Registrant Email:                            contact@broadcastadvertise.net
    Administrative Contact ID:                   TU7PPZAYNKB0HFZU
    Administrative Contact Name:                 Domain Direct
    Administrative Contact Organization:         Domain Direct
    Administrative Contact Address1:             96 Mowat Avenue
    Administrative Contact City:                 Toronto
    Administrative Contact State/Province:       ON
    Administrative Contact Postal Code:          M6K3M1
    Administrative Contact Country:              Canada
    Administrative Contact Country Code:         CA
    Administrative Contact Phone Number:         +1.4165312084
    Administrative Contact Facsimile Number:     +1.4165315584
    Administrative Contact Email:                admin-contact@domaindirect.net
    Billing Contact ID:                          TUAFYHRK4M9KJRXR
    Billing Contact Name:                        Domain Direct
    Billing Contact Organization:                Domain Direct
    Billing Contact Address1:                    96 Mowat Avenue
    Billing Contact City:                        Toronto
    Billing Contact State/Province:              ON
    Billing Contact Postal Code:                 M6K3M1
    Billing Contact Country:                     Canada
    Billing Contact Country Code:                CA
    Billing Contact Phone Number:                +1.4165312084
    Billing Contact Facsimile Number:            +1.4165315584
    Billing Contact Email:                       admin-contact@domaindirect.net
    Technical Contact ID:                        TUSEET3MHGQ2FPDX
    Technical Contact Name:                      Domain Direct
    Technical Contact Organization:              Domain Direct
    Technical Contact Address1:                  96 Mowat Avenue
    Technical Contact City:                      Toronto
    Technical Contact State/Province:            ON
    Technical Contact Postal Code:               M6K3M1
    Technical Contact Country:                   Canada
    Technical Contact Country Code:              CA
    Technical Contact Phone Number:              +1.4165312084
    Technical Contact Facsimile Number:          +1.4165315584
    Technical Contact Email:                     dnstech@domaindirect.com
    Name Server:                                 NS1.DOMAINDIRECT.COM
    Name Server:                                 NS2.DOMAINDIRECT.COM
    Name Server:                                 NS3.DOMAINDIRECT.COM
    Created by Registrar:                        TUCOWS INC.
    Last Updated by Registrar:                   TUCOWS INC.
    Domain Registration Date:                    Sat May 14 21:42:30 GMT 2005
    Domain Expiration Date:                      Sat May 13 23:59:59 GMT 2006
    Domain Last Updated Date:                    Sat May 14 21:42:33 GMT 2005

    >>>> Whois database was last updated on: Thu Jun 30 19:14:53 GMT 2005 <<<<

    where ? Looks lile ... Canada - Bob loves doing business in America ... NOT .....

    dig spamis.biz

    ; <<>> DiG 9.2.4 <<>> spamis.biz
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54843
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;spamis.biz.                    IN      A

    ;; ANSWER SECTION:
    spamis.biz.             600     IN      A       216.40.33.117

    ;; Query time:

    Address:    96 Mowat Avenue
    City: Toronto
    StateProv: ON
    PostalCode: M6K-3M1
    Country: CA

    NetRange: 216.40.32.0 - 216.40.47.255
    CIDR: 216.40.32.0/20
    NetName: TUCOWS-BLK1
    NetHandle: NET-216-40-32-0-1
    Parent: NET-216-0-0-0-0
    NetType: Direct Assignment
    NameServer: DNS1.TUCOWS.COM
    NameServer: DNS2.TUCOWS.COM
    NameServer: DNS3.TUCOWS.COM
    Comment:
    RegDate: 2000-06-09
    Updated: 2003-10-10

    NOCHandle: OPERA30-ARIN
    NOCName: Operations Admin
    NOCPhone: +1-416-535-0123
    NOCEmail: dnsadmin@tucows.com

    TechHandle: OPERA26-ARIN
    TechName: Operations Team
    TechPhone: +1-416-535-0123
    TechEmail: dnstech@tucows.com

    OrgTechHandle: OPERA26-ARIN
    OrgTechName: Operations Team
    OrgTechPhone: +1-416-535-0123
    OrgTechEmail: dnstech@tucows.com

    suspended already

    Lol.

    30 June: New 'poo' in in the inbox and it looks like its been sent via another bot net computer (meaning the owner does not know there sending spam) -  but quite humorous this one Breaking News for Robert for this month is a piece of old journalism from November last year.  I wont indulge you with it.

    Something in the mail points to a ?new? domain spamis.biz  Something else to checkout... 

    My Bob seems to have cash to flash on domain registrars recently.

    24 June:  Bob is apparently spamming again, and recycling some old domain names he has used in the past. The host reported changes . Welcome insert a fanfare to broadcastemailadvertising.net Here comes the dns, and registration.

    Domain Name : broadcastemailadvertising.net

    ::Registrant::
    Name : Joseph Lehmann
    Email : Lehmann1@safe-mail.net
    Address : 1661 Oro Vista RD
    Zipcode : 92154
    Nation : US
    Tel : 619-749-3840
    Fax :

    ::Administrative Contact::
    Name : Joseph Lehmann
    Email : Lehmann1@safe-mail.net
    Address : 1661 Oro Vista RD
    Zipcode : 92154
    Nation : US
    Tel : 619-749-3840
    Fax :

    ::Technical Contact::
    Name : Joseph Lehmann
    Email : Lehmann1@safe-mail.net
    Address : 1661 Oro Vista RD
    Zipcode : 92154
    Nation : US
    Tel : 619-749-3840
    Fax :

    ::Name Servers::
    ns8983.broadcastemailadvertising.net
    ns1594.broadcastemailadvertising.net

    ::Dates & Status::
    Created Date 2005-06-09 12:52:13 EDT
    Updated Date 2005-06-09 12:52:13 EDT
    Valid Date 2006-06-09 12:52:13 EDT
    Status ACTIVE


    ; <<>> DiG 9.2.4 <<>> broadcastemailadvertising.net
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1564
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastemailadvertising.net. IN A

    ;; ANSWER SECTION:
    broadcastemailadvertising.net. 43200 IN A 218.234.109.216

    ;; Query time:

    Well that currently is Korea

    inetnum:      218.234.0.0 - 218.239.255.255
    netname: HANANET
    descr: Hanaro Telecom Co.
    descr: Kukje Electornics Cneter Bldg. 1445-3 Seocho-Dong Seocho-Ku
    country: KR

    Who is Joseph ? 

    20 June: Created a comment section about this spamis ranting Bobs got up and running and found out the .org site is defunct.

    Not sure whats happening about spamis.cc that was also reporting 'not found'

    Its dead jim

    17 June: The mail system team found this late last night - the spam filter/mail system thing rejected Bob's message, but the message was badly formatted according to how email should be sent.

    So the mailserver then tried to send a message back.  Lets have a look at the log.

    connect to spamis.org[216.40.33.117]: Connection refused (port 25)
    Jun 16 00:31:58 hostname MAILSERVER TYPE/smtp[NUMBER]: MSG ID: to=<contact@spamis.org>,
    relay=none, delay=3327, status=deferred (connect to spamis.org[216.40.33.117]: Connection refused)

    The mailserver could not even connect to his mailserver that one of his spammy isp setup for Bob.  The mail team deleted the message from the outbound queue.  

    So it seems that Bob here is very happy to send send his delusional crap via open proxies - (see list), but very unwilling to receive stuff.  Hmm too many spammers do this.

    Have at laugh at Bob, we are.

    10 June: contact@spamis.org Bob 'thinks' that microsoft sends the spam, not himself - whom also sent this spam to us.  I love this moron with learning difficulties.  Now the spammer decides he is now an anti-spammer and yes I believe in pixies too.

    I may dislike Microsoft but if they are intentionally spamming people then it is a profit centre.
    I think it should to be mentioned as a product on there website - can't see it sorry.  Personally we are all looking forward to Bob using this site as evidence in his spams to prove his perverted logic. 

    We can only dream.

    .You are receiving this email notification because...

    -> MICROSOFT SENDS ILLEGAL UNSOLICITED COMMERCIAL SPAM <-

    OUR MISSION: Worldwide Boycott of MICROSOFT Software / Hardware / Service
    SHOW YOUR SUPPORT: "Don't Support Illegal Spam, Don't Buy Microsoft Produ

    7 June: Busy Busy Busy!

    Bob has ?apparently?  been sub-renting this house

    Facts are a little confused

    There is also apparently a Rob Cain at the address and a gardener as well (?Saladoff family?)

    Soneone has  sold the house with the picture of the cars in.  This house was being used by Bob for domain registrations. 

     Thanks to the Real Estate agent who made these available publicly over the web and also to the person who told me about it (a large thank you to you.)

    So we now have interior pictures.  After the last picture there is more text relating to the sale

    It will be interesting to see if the money goes to Microsoft - or this not his to begin with  - Robert has been buying new domains and webhosting his new address seems to be here.

    Outside new1
    ?hall
    room
    room
    room
    hall
    room
    room
    room
    room
    a fan!
    table
    outside

    A big thank you to Gateway Real Estate
    http://www.ashlandagent.com/sold.htm (V E R Y  S L O W  W E B S I T E)

    Property Type: Residential
         Status
                                          )

    Status   Sold
    Date     05/20/05
    Listing# 251104
    Price       1,093,000            
    Address  279 Granite St     
    City     Ashland
    Area     Ashland
    BD      3
    BA      3
    Lot Size 0.230
    Sq Ft    3748


    Property Type     Residential     Property Subtype     Residential
    Area     Ashland
       
    Beds     3     Sq Ft(approx)     3748 Seller
    Baths(FH)     3 (3 0)     Price/Sq Ft     291.62
       
    Year Built     1999     Lot Sq Ft(approx)     10019 ((Assessor))
    Tax Act ID     10930582        
    DOM     24     Lot Acres (approx)     0.230
    TRS 39 1E 8     Selling Price     $1,093,000     SP%LP     100.00

    Marketing Remarks This beautiful home is located across from Lithia Park by the upper duck pond.The focus of the main floor is the large family/kitchen area with its 19'ceilings, oversized windows, fireplace, & hardwood floors. On the second floor, a bridge over the main floor separates the master bed/bath from the other two bedrooms. Each bedroom has its own balcony and walk-in closet. Below the main level is a 500' finished space that offers many possibilities. From this level, you enter the 4-car garage. The 1/4 acre is totally maintenance free.Some great trails are easily accessible from this property.

    6 June: He's back! with spam, I'm still one of those 'lucky' 7 and half million.  Way to go Bob!

    CHARITY CONTACT:

    email your web site to 7,500,000+ opt-in email addresses for free...

    http://www.broadcastadvertising.org

    3 June: Another domain spamis.cc essentially a large rant about marketing is not spamming - Robert  thats  good well done - shame you had to say it

    I quote from the webpage:  MISSION STATEMENT FROM SPAMIS FOUNDER:

    Microsoft has secretly been spending countless vast resources trying to remove all sources of this data on the internet, canceling messages, shredding internal documents and memos and having employees sign confidentiality agreements relating to keeping quiet about their past and current spamming practices.  Unfortunately for them, there's only so much evidence shredding they can do...

     Through 2005 and 2006, we will expose Microsoft for what it claims to be. "We are a Spamhaus" as stated by the Microsoft Email Abuse Administrator; Mike Lyman.

    Through thousands of now public Microsoft internal documents, memos, emails, online messages, white papers, and ex-Microsoft and anonymous current employee statements that we have obtained (all through legitimate and legal methods.) to be released publicly worldwide to over 1,940,000,000 internet user email addresses and 16,310 media outlets worldwide, our goal is 99.9% saturation of the Internet public with the information we have obtained on Microsoft's spamming practices.

    his quote ends.

    Quite frankly he is going to spam you again. - you heard it here first.  and straight from Robert.

    Here we go:

    Registrant:
             Robert Alan S.  (contact@spamis.org)
            SPAMIS
            PO Box 1259
            Seattle, WA  98111
            US
            +1.2062231271


    Domain Name: spamis.cc


    Administrative, Technical, Billing Contact:
             Robert Alan S.  (contact@spamis.org)
            SPAMIS
            PO Box 1259
            Seattle, WA  98111
            US
            +1.2062231271


       Record created on May 17 2005.
       Record expires on May 17 2006.
    Domain servers:
            ns1.dnsdns1.com
            ns2.dnsdns1.com


    Domain Service Provider:
       Primus Telecom

    Where ..
    dig spamis.cc

    ; <<>> DiG 9.2.4 <<>> spamis.cc
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48541
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;spamis.cc.                     IN      A

    ;; ANSWER SECTION:
    spamis.cc.              14400   IN      A       81.2.197.66

    ;; Query time: 54 msec

    81.2.197.66 is ... Czech Republic, - europe

    inetnum:      81.2.197.0 - 81.2.197.255
    netname:      CZ-INTERNET
    descr:        Servers Ktis
    descr:        Ktis 2
    descr:        okres Prachatice
    descr:        384 03
    country:      CZ
    admin-c:      ZZ70-RIPE
    tech-c:       PK677-RIPE
    status:       ASSIGNED PA
    mnt-by:       INTERNET-CZ-MNT
    source:       RIPE # Filtered

    person:       Zdenka Zadrazilova
    address:      INTERNET CZ, a.s.

    details about them

    address:      Ktis 2
    address:      Ktis
    address:      38403
    address:      cz
    phone:        +420 388 323676
    e-mail:       zz@internet-cz.cz
    nic-hdl:      ZZ70-RIPE
    mnt-by:       INTERNET-CZ-MNT
    source:       RIPE # Filtered

    person:       Petr Kolonicz
    address:      INTERNET CZ,a.s.
    address:      Ktis2
    address:      Ktis
    address:      38403
    address:      cz
    phone:        +420 388 323676
    e-mail:       petr@internet-cz.cz
    nic-hdl:      PK677-RIPE
    mnt-by:       INTERNET-CZ-MNT
    source:       RIPE # Filtered

    Also using webcounters from freelogs.com: http://xyz.freelogs.com/counter/index.php?u=spamis&s=modocr

    2 June: Rumours from 23rd May that Robert is spamming himself again with the domain spamis.net on 69.49.101.51

    Registrant:
     SPAMIS
     PO Box 1259
     Seattle, WA 98111
     US

     Domain name: SPAMIS.NET

     Administrative Contact:
        Direct, Domain  admin-contact@domaindirect.net
        96 Mowat Avenue
        Toronto, ON M6K 3M1
        CA
        +1.4165312084    Fax: +1.4165315584

     Technical Contact:
        Direct, Domain  dnstech@domaindirect.com
        96 Mowat Avenue
        Toronto, ON M6K 3M1
        CA
        +1.4165312084    Fax: +1.4165315584



     Registration Service Provider:
        Domain Direct, dnstech@domaindirect.com
        1-416-531-2084
        http://www.domaindirect.com
        This company may be contacted for domain login/passwords,
        DNS/Nameserver changes, and general domain support questions.


     Registrar of Record: TUCOWS, INC.
     Record last updated on 14-May-2005.
     Record expires on 14-May-2006.
     Record created on 14-May-2005.

     Domain servers in listed order:
        NS1.DOMAINDIRECT.COM   216.40.33.21
        NS2.DOMAINDIRECT.COM   216.40.33.22
        NS3.DOMAINDIRECT.COM   204.50.180.58


     Domain status: REGISTRAR-LOCK - I smell a Robert from that address


    dig spamis.net

    ; <<>> DiG 9.2.4 <<>> spamis.net
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50848
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;spamis.net.                    IN      A

    ;; ANSWER SECTION:
    spamis.net.             600     IN      A       216.40.33.117

    ;; Query time: 184 msec

    Thats ...  Canada

    OrgName:    Tucows International 
    OrgID: TUCOWS
    Address: 96 Mowat Avenue
    City: Toronto
    StateProv: ON
    PostalCode: M6K-3M1
    Country: CA

    NetRange: 216.40.32.0 - 216.40.47.255
    CIDR: 216.40.32.0/20
    NetName: TUCOWS-BLK1
    NetHandle: NET-216-40-32-0-1
    Parent: NET-216-0-0-0-0
    NetType: Direct Assignment
    NameServer: DNS1.TUCOWS.COM
    NameServer: DNS2.TUCOWS.COM
    NameServer: DNS3.TUCOWS.COM
    Comment:
    RegDate: 2000-06-09
    Updated: 2003-10-10

    NOCHandle: OPERA30-ARIN
    NOCName: Operations Admin
    NOCPhone: +1-416-535-0123
    NOCEmail: dnsadmin@tucows.com  

    2 May: Create a Fact from Fiction section.

    23 April: Roberts court case (see pdf) He has pissed of the court - Some Hi-lights include

    1. Failure to provide discovery (eg facts to the court)
    2. Use of Paypal - no records provided - by robert
    3. He now uses a spam program called Darkmailer - to send spam from windoze proxies, he now say he does it it himself
    4. No information as to his previous associates (claimed 100 persons) whom he claimed to 'employ'
    5. 496 morons and mentally retarded persons used the services of Robert and not the thousands claimed
    6. Old Associate name: Dan Averbukh - he used his own list not a list from Robert
    7. Use of paid proxy provider 'Digital Mental'
    8. No record keeping by Robert - and we assume no tax returns (or whatever the americans call it) either.
    9. 67 associate ICQ addresses not identified
    10. NIM did not believe that economics and time warranted the maintaining of records for its subcontractors ...
    11. In addition some subcontractors are more reliable than others meaning some claim to send a million emails but only send a hundred
    12.  need i continue ?

    '6' Explains why he cannot listwash, 11 - if you bought from Robert then your a sucker
    '3' explains why I've not had any of his crap recently

    His lawyers are

    Hallisky Law Group P.L.L.C
    1725 Westlake Avenune N,
    Suite 150, Seattle,
    Washington 98109

    Phone: 206 217 2200
    Old law news can be found here

    Its been a slow month but i do have a new email server.

    19 March: New domain broadcastadvertise.org purchased, yes its Robert

    Domain ID:D105698460-LROR
    Domain Name:BROADCASTADVERTISE.ORG
    Created On:08-Feb-2005 16:29:41 UTC
    Last Updated On:18-Mar-2005 15:10:39 UTC
    Expiration Date:08-Feb-2006 16:29:41 UTC
    Sponsoring Registrar:Tucows Inc. (R11-LROR)
    Status:TRANSFER PROHIBITED
    Registrant ID:tuHKgGbSf6FuVZTa
    Registrant Name:Bob Soloway
    Registrant Organization:NA
    Registrant Street1:PO Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    Registrant State/Province:WA
    Registrant Postal Code:98101
    Registrant Country:US
    Registrant Phone:+1.2062231270
    Registrant Phone Ext.:
    Registrant FAX:
    Registrant FAX Ext.:
    Registrant Email:badvertise500@mail.com
    Admin ID:tuHKgGbSf6FuVZTa
    Admin Name:Bob Soloway
    Admin Organization:NA
    Admin Street1:PO Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:WA
    Admin Postal Code:98101
    Admin Country:US
    Admin Phone:+1.2062231270
    Admin Phone Ext.:
    Admin FAX:
    Admin FAX Ext.:
    Admin Email:badvertise500@mail.com
    Tech ID:tuHKgGbSf6FuVZTa
    Tech Name:Bob Soloway
    Tech Organization:NA
    Tech Street1:PO Box 1259
    Tech Street2:
    Tech Street3:
    Tech City:Seattle
    Tech State/Province:WA
    Tech Postal Code:98101
    Tech Country:US
    Tech Phone:+1.2062231270
    Tech Phone Ext.:
    Tech FAX:
    Tech FAX Ext.:
    Tech Email:badvertise500@mail.com
    Name Server:NS1.BULKDUMP.COM
    Name Server:NS2.BULKDUMP.COM

    Some classic information in there I do like "tuHKgGbSf6FuVZTa" That certainly took some thinking about. Bulkdump.com (sounds like a sewer) is our friend Kim Li, he has been mentioned before in broadcastemail.us Back for more I see ! dont think he can claim the 'ignorance' defence this time.

    dig broadcastadvertise.org

    ; <<>> DiG 9.2.4 <<>> broadcastadvertise.org
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5875
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastadvertise.org. IN A

    ;; ANSWER SECTION:
    broadcastadvertise.org. 14400 IN A 219.147.65.244

    Wheres that - 219.147.65.244 . its China and Chinanet. ...

    219.147.64.0 - 219.147.95.255
    netname: CHINATELECOM-HL
    descr: CHINANET heilongjiang province network
    descr: China Telecom
    descr: No.31,jingrong street
    descr: Beijing 100032
    country: CN
    admin-c: CH93-AP
    tech-c: LZ298-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINATELECOM-hl
    changed: hostmaster@ns.chinanet.cn.net 20030820
    status: ALLOCATED NON-PORTABLE
    source: APNIC
    person: Chinanet Hostmaster
    address: No.31 ,jingrong street,beijing
    address: 100032
    country: CN
    phone: +86-10-66027112
    fax-no: +86-10-58501144
    e-mail: hostmaster@ns.chinanet.cn.net
    e-mail: anti-spam@ns.chinanet.cn.net
    nic-hdl: CH93-AP
    mnt-by: MAINT-CHINANET
    changed: hostmaster@ns.chinanet.cn.net 20021016
    remarks: hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
    source: APNIC

    person: LIJUAN ZHENG
    nic-hdl: LZ298-AP
    e-mail: network@hljtele.com
    address: Communication Corporation Internet Enterprise Division of HLJ
    phone: +86-451-53901158
    fax-no: +86-451-53900011
    country: CN
    changed: network@hljtele.com 20031102
    mnt-by: MAINT-CHINATELECOM-HL
    source: APNIC

    Hi China, looking forward to the spam 'clean up' - no it seems that has not happened yet.

    12 March: Chris Leeds of contentseed.com takes broadcastemail.us up on there 'free' offer, read his pdf document or a copy should he decide to remove it . The summary of his foolishness goes along the lines of

    1. reading a spam email
    2. accepting that 'free' is not too good to be true
    3. ORDERING  from a spam
    4. Not checking out Robert
    5. then the 'Grey matter' starts to work.....

    Its all in his own words. added to the problems section

    11 March: Broadcastemail.us goes on 'Safari', our democratic and patriotic citizen of the US is using an isp in Zimbabwe, (country code: ZW) but still using Chinanet  lets do hope that those communists at Chinanet get there money from.

    IJFNDGCT.COM
      Tinashe Makoni
      17 St. Annes Rd
      Avondale, Harare, ZW
      +263 4 335 516
      IJFNDGCT@YAHOO.COM
      created: 12 Feb 2005
      updated: 23 Feb 2005

    Everything else in Zimbabwe appears to to fucked up in the news reports that get out (famine, inflation, a president for life), and now Robert is using them.

    I appear to have been listwashed, so the where is 'Robert spamming you from today' now appears to be a historic record.

    20 February: Added ripoff report story to problems with robert section.  Should new information from the isp come to light I would be happy to advertise it here.

    15 February: New column added to what addresses Robert spams - pleasure is mine to add it to the table. Interesting fact that sending Spam to the domian owner account seems to have apparently stopped here. (I speak for 'me' only)  So he's probably still claiming 28 million spam addresses. 

    11 February: Rumour correct Broadcastemail.us on the move again, It's still China on NS555.BIZ (Alan Payne),  Details here

    10 February: Robert appears to have given up upon his Tsunami charity campaign. Also rumours that citizen Kim Lee of Bulkhosting.org is considering dropping Robert.  if it happens that means Robert going to be moving to a 3rd hosting company in a month.  

    09 February: New hosting for broadcastemail.us.  see the 3 Feb entry, still adding ip which spam for Robert.

    03 February: A new counter/statistics provider is being used by Robert Freelogs.com  from the webpage....

    http://freelogs.com/stats/z/unique10/

    " target="_top">
    <img border="0" alt="Free Web Counter" src="http://xyz.freelogs.com/counter/index.php?u=unique10&s=modocr" ALIGN="middle" HSPACE="4" VSPACE="2">
    </a>

    <script src=http://xyz.freelogs.com/counter/script.php?u=zumzum1></script>
    <br><a style="font-size:12" href="http://www.freelogs.com/create.php" target="_top">

    And Robert buys a new domain: BROADCASTEMAIL.US and spams me.

    whois broadcastemail.us

    Domain Name:                                 BROADCASTEMAIL.US
    Domain ID:                                   D7257877-US
    Sponsoring Registrar:                        VERISIGN .US REGISTRARS, INC.
    Domain Status:                               clientTransferProhibited
    Registrant ID:                               38946414
    Registrant Name:                             Newport IM
    Registrant Organization:                     Newport IM
    Registrant Address1:                         1200 Western Avenue
    Registrant City:                             Seattle
    Registrant State/Province:                   WA
    Registrant Postal Code:                      98101
    Registrant Country:                          United States
    Registrant Country Code:                     US
    Registrant Phone Number:                     +1.2062231270
    Registrant Email:                            no.valid.email@worldnic.com
    Registrant Application Purpose:              P3
    Registrant Nexus Category:                   C11
    Administrative Contact ID:                   38946414
    Administrative Contact Name:                 Newport IM
    Administrative Contact Organization:         Newport IM
    Administrative Contact Address1:             1200 Western Avenue
    Administrative Contact City:                 Seattle
    Administrative Contact State/Province:       WA
    Administrative Contact Postal Code:          98101
    Administrative Contact Country:              United States
    Administrative Contact Country Code:         US
    Administrative Contact Phone Number:         +1.2062231270
    Administrative Contact Email:                no.valid.email@worldnic.com
    Administrative Application Purpose:          P3
    Administrative Nexus Category:               C11
    Billing Contact ID:                          38946415
    Billing Contact Name:                        Robert Soloway
    Billing Contact Organization:                Newport IM
    Billing Contact Address1:                    Box 1259
    Billing Contact City:                        Seattle
    Billing Contact State/Province:              WA
    Billing Contact Postal Code:                 98111
    Billing Contact Country:                     United States
    Billing Contact Country Code:                US
    Billing Contact Phone Number:                +1.2062231270
    Billing Contact Email:                       support@broadcastemail.us
    Technical Contact ID:                        38946414
    Technical Contact Name:                      Newport IM
    Technical Contact Organization:              Newport IM
    Technical Contact Address1:                  1200 Western Avenue
    Technical Contact City:                      Seattle
    Technical Contact State/Province:            WA
    Technical Contact Postal Code:               98101
    Technical Contact Country:                   United States
    Technical Contact Country Code:              US
    Technical Contact Phone Number:              +1.2062231270
    Technical Contact Email:                     no.valid.email@worldnic.com
    Technical Application Purpose:               P3
    Technical Nexus Category:                    C11
    Name Server:                                 ns3.ijfndgct.com was NS3.NS555.BIZ was NS1.BULKDUMP.COM,NS1.BLUEPAL.NET
    Name Server:                                 ns1.ijfndgct.com was NS1.NS555.BIZ was NS2.BULKDUMP.COM,NS2.BLUEPAL.NET
    Created by Registrar:                        VERISIGN .US REGISTRARS, INC.
    Last Updated by Registrar:                   VERISIGN .US REGISTRARS, INC.
    Domain Registration Date:                    Wed Feb 02 02:56:38 GMT 2005
    Domain Expiration Date:                      Wed Feb 01 23:59:59 GMT 2006
    Domain Last Updated Date:                    Wed Feb 02 03:18:19 GMT 2005

    >>>> Whois database was last updated on: Thu Feb 03 18:42:47 GMT 2005 <<<<


    Now we have done this before so now where is that ? Its back to China ....  Meeting hosting company number 3, a chap called Alan Payne.

    dig broadcastemail.us

    ; <<>> DiG 9.2.4 <<>> broadcastemail.us
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59695
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

    ;; QUESTION SECTION:
    ;broadcastemail.us. IN A

    ;; ANSWER SECTION:
    broadcastemail.us. 600 IN A 219.148.3.141

    ;; AUTHORITY SECTION:
    broadcastemail.us. 600 IN NS ns4.ns555.biz.
    broadcastemail.us. 600 IN NS ns1.ns555.biz.
    broadcastemail.us. 600 IN NS ns2.ns555.biz.
    broadcastemail.us. 600 IN NS ns3.ns555.biz.

    ;; ADDITIONAL SECTION:
    ns1.ns555.biz. 6 IN A 219.148.3.139
    ns2.ns555.biz. 812 IN A 219.148.3.139
    ns3.ns555.biz. 11 IN A 219.148.3.140
    ns4.ns555.biz. 812 IN A 219.148.3.140

    Yes its located in China again and

    inetnum:      219.148.0.0 - 219.148.159.255
    netname: CHINATELECOM-he
    descr: CHINANET hebei province network
    descr: China Telecom
    descr: No.31,jingrong street
    descr: Beijing 100032
    country: CN
    admin-c: CH93-AP
    tech-c: BR3-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINATELECOM-he
    changed: hostmaster@ns.chinanet.cn.net 20030820
    status: ALLOCATED NON-PORTABLE
    source: APNIC

    person: Chinanet Hostmaster
    address: No.31 ,jingrong street,beijing
    address: 100032
    country: CN
    phone: +86-10-66027112
    fax-no: +86-10-58501144
    e-mail: hostmaster@ns.chinanet.cn.net
    e-mail: anti-spam@ns.chinanet.cn.net
    nic-hdl: CH93-AP
    mnt-by: MAINT-CHINANET
    changed: hostmaster@ns.chinanet.cn.net 20021016
    remarks: hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
    source: APNIC

    person: Bin Ren
    nic-hdl: BR3-AP
    e-mail: renbin@mail.he.cn
    address: 10F Ximei Building NO.6 Jianshe South Street
    address: Shijiazhuang 050011 China
    phone: +86-311-5211551
    fax-no: +86-311-5211578
    country: CN
    changed: renbin@mail.he.cn 20040430
    mnt-by: MAINT-CHINATELECOM-HE
    source: APNIC

    Who is the latest associate of Robert - Its some Canadian comrade called Alan Payne. His phone number is +1.6047254755 if correct details have been entered below.

    whois ns555.biz
    Domain Name: NS555.BIZ
    Domain ID: D8069375-BIZ
    Sponsoring Registrar: TUCOWS INC.
    Sponsoring Registrar IANA ID: 69
    Domain Status: ok
    Registrant ID: TUIOVCDSXFRWKFMU
    Registrant Name: Alan Payne
    Registrant Organization: Alan Payne
    Registrant Address1: 1222 howe st.
    Registrant City: Vancouver
    Registrant State/Province: BC
    Registrant Postal Code: v6e1r7
    Registrant Country: Canada
    Registrant Country Code: CA
    Registrant Phone Number: +1.6047254755
    Registrant Email: mracopolo4@indiatimes.com
    Administrative Contact ID: TUIOVCDSXFRWKFMU
    Administrative Contact Name: Alan Payne
    Administrative Contact Organization: Alan Payne
    Administrative Contact Address1: 1222 howe st.
    Administrative Contact City: Vancouver
    Administrative Contact State/Province: BC
    Administrative Contact Postal Code: v6e1r7
    Administrative Contact Country: Canada
    Administrative Contact Country Code: CA
    Administrative Contact Phone Number: +1.6047254755
    Administrative Contact Email: mracopolo4@indiatimes.com
    Billing Contact ID: TUIOVCDSXFRWKFMU
    Billing Contact Name: Alan Payne
    Billing Contact Organization: Alan Payne
    Billing Contact Address1: 1222 howe st.
    Billing Contact City: Vancouver
    Billing Contact State/Province: BC
    Billing Contact Postal Code: v6e1r7
    Billing Contact Country: Canada
    Billing Contact Country Code: CA
    Billing Contact Phone Number: +1.6047254755
    Billing Contact Email: mracopolo4@indiatimes.com
    Technical Contact ID: TUIOVCDSXFRWKFMU
    Technical Contact Name: Alan Payne
    Technical Contact Organization: Alan Payne
    Technical Contact Address1: 1222 howe st.
    Technical Contact City: Vancouver
    Technical Contact State/Province: BC
    Technical Contact Postal Code: v6e1r7
    Technical Contact Country: Canada
    Technical Contact Country Code: CA
    Technical Contact Phone Number: +1.6047254755
    Technical Contact Email: mracopolo4@indiatimes.com
    Name Server: NS1.NS555.BIZ
    Name Server: NS3.NS555.BIZ
    Name Server: NS2.NS555.BIZ
    Name Server: NS4.NS555.BIZ
    Created by Registrar: TUCOWS INC.
    Last Updated by Registrar: TUCOWS INC.
    Domain Registration Date: Sat Oct 30 14:22:38 GMT 2004
    Domain Expiration Date: Sat Oct 29 23:59:59 GMT 2005
    Domain Last Updated Date: Mon Nov 01 10:08:47 GMT 2004

    Second hoster:

     <<>> DiG 9.2.4 <<>> broadcastemail.us
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9736
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

    ;; QUESTION SECTION:
    ;broadcastemail.us. IN A

    ;; ANSWER SECTION:
    broadcastemail.us. 19600 IN A 211.144.164.145

    ;; AUTHORITY SECTION:
    broadcastemail.us. 19600 IN NS ns.broadcastemail.us.

    ;; ADDITIONAL SECTION:
    ns.broadcastemail.us. 19600 IN A 211.144.164.145

    Wheres that: ... China here we come

    inetnum:      211.144.160.0 - 211.144.175.255
    netname: LIANFENGMAN
    country: CN
    descr: CHONGQING LIANFENG COMMUNICATION Co.,Ltd
    descr: 18F, BUIDING-A, CITY PLAZA, 39-WUSI ROAD,YUZHONG DISTRICT, CHONGQING,PRC.
    admin-c: DC278-AP
    tech-c: ZL153-AP
    status: ALLOCATED PORTABLE
    changed: shenzhi@cnnic.cn 20041102
    mnt-by: MAINT-CNNIC-AP
    source: APNIC
    person: DUAN CHUNYAN
    nic-hdl: DC278-AP
    e-mail: cfc_dcy@sina.com
    address: 18F, BUIDING-A, CITY PLAZA, 39-WUSI ROAD,YUZHONG DISTRICT, CHONGQING,PRC.
    phone: +86-23-63702000-6659
    fax-no: +86-23-63782700
    country: CN
    changed: shenzhi@cnnic.cn 20041102
    mnt-by: MAINT-CNNIC-AP
    source: APNIC
    person: ZHOU LIN
    nic-hdl: ZL153-AP
    e-mail: cfc_dcy@sina.com
    address: 18F, BUIDING-A, CITY PLAZA, 39-WUSI ROAD,YUZHONG DISTRICT, CHONGQING,PRC.
    phone: +86-23-63782555
    fax-no: +86-23-63782700
    country: CN
    changed: shenzhi@cnnic.cn 20041215
    mnt-by: MAINT-CNNIC-AP
    source: APNIC

    First Hoster was:  bluepal.net, also our friends in China they lasted 9 days.

    dig ns1.bluepal.net

    ; <<>> DiG 9.2.4 <<>> ns1.bluepal.net
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13243
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;ns1.bluepal.net.               IN      A

    ;; ANSWER SECTION:
    ns1.bluepal.net.        382970  IN      A       219.150.118.12

    OK who is it.   ???

    inetnum:      219.150.112.0 - 219.150.255.255
    netname:      CHINATELECOM-ha
    descr:        CHINANET henan province network
    descr:        China Telecom
    descr:        No.31,jingrong street
    descr:        Beijing 100032
    country:      CN
    admin-c:      CH93-AP
    tech-c:       HZ149-AP
    mnt-by:       MAINT-CHINANET
    mnt-lower:    MAINT-CHINATELECOM-ha
    changed:      hostmaster@ns.chinanet.cn.net 20030820
    status:       ALLOCATED NON-PORTABLE
    source:       APNIC

    person:       Chinanet Hostmaster
    address:      No.31 ,jingrong street,beijing
    address:      100032
    country:      CN
    phone:        +86-10-66027112
    fax-no:       +86-10-58501144
    e-mail:       hostmaster@ns.chinanet.cn.net
    e-mail:       anti-spam@ns.chinanet.cn.net
    nic-hdl:      CH93-AP
    mnt-by:       MAINT-CHINANET
    changed:      hostmaster@ns.chinanet.cn.net 20021016
    remarks:      hostmaster is not for spam complaint,please send spam complaint to anti-spam@ns.chinanet.cn.net
    source:       APNIC


    person:       Hongbiao Zhang
    nic-hdl:      HZ149-AP
    e-mail:       ip@hntele.com
    address:      97# Zhongyuan Street, Zhengzhou,Chinese
    phone:        +86-371-5310007
    fax-no:       +86-371-5310044
    country:      CN
    changed:      zhb@hntele.com 20030813
    mnt-by:       MAINT-CHINATELECOM-HA
    source:       APNIC

    You should know the drill by now - China's governments loves spam. The whois has also got some bad email addresses in as well.  I don't link to anti-spam address as one chinese guy spends his/her life pressing the delete key.

    update 09 February:

    New hoster is called bulkhosting.org thats 211.144.164.145 covered above.   There is also a reference to bulkdump.com - infer what you like from that.

    Domain ID:		D105006674-LROR
    Domain Name: BULKHOSTING.ORG
    Created On: 16-Oct-2004 18:09:07 UTC
    Last Updated On: 08-Jan-2005 22:11:48 UTC
    Expiration Date: 16-Oct-2007 18:09:07 UTC
    Sponsoring Registrar: YesNIC Cov LTD (R82-LROR)
    Status: OK
    Registrant ID: YESNIC--532497
    Registrant Name: kim Li
    Registrant Organization:Kim Li enterprises
    Registrant Street1: Suite 1005 Tower E1 The Towers Oriental Plaza No. 1 E. ChangA
    Registrant Street2:
    Registrant Street3:
    Registrant City: Dong Cheng District, Beijing
    Registrant State/Province:
    Registrant Postal Code: 20000
    Registrant Country: CN
    Registrant Phone: +82.8620858552
    Registrant Phone Ext.:
    Registrant FAX:
    Registrant FAX Ext.:
    Registrant Email: bulkhosting@126.com
    Admin ID: YESNIC--381784
    Admin Name: kim Li
    Admin Organization: Kim Li enterprises
    Admin Street1: Suite 1005 Tower E1 The Towers Oriental Plaza No. 1 E. ChangA
    Admin Street2:
    Admin Street3:
    Admin City: Dong Cheng District, Beijing
    Admin State/Province:
    Admin Postal Code:20000
    Admin Country:CN
    Admin Phone:+82.8620858552
    Admin Phone Ext.:
    Admin FAX:
    Admin FAX Ext.:
    Admin Email: bulkhosting@126.com
    Tech ID: YESNIC--278354
    Tech Name: kim Li
    Tech Organization: Kim Li enterprises
    Tech Street1: Suite 1005 Tower E1 The Towers Oriental Plaza No. 1 E. ChangA
    Tech Street2:
    Tech Street3:
    Tech City: Dong Cheng District, Beijing
    Tech State/Province:
    Tech Postal Code: 20000
    Tech Country: CN
    Tech Phone: +82.8620858552
    Tech Phone Ext.:
    Tech FAX:
    Tech FAX Ext.:
    Tech Email: bulkhosting@126.com
    Name Server: NS1.BULKHOSTING.ORG
    Name Server: NS2.BULKHOSTING.ORG
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:

    Hi Kim Li welcome to this page!

    Registration Service Provided By: NameCheap.com
    Contact: support@NameCheap.com
    Visit: http://www.namecheap.com/

    Domain name: bulkdump.com

    Registrant Contact:
    WhoisGuard
    WhoisGuard Protected (h2abrsr4qt.protect@whoisguard.com)
    +1.6613102107
    Fax: +1.6613102107
    8939 S. Sepulveda Blvd
    8939 S. Sepulveda Blvd
    Westchester, CA 90045
    US

    Administrative Contact:
    WhoisGuard
    WhoisGuard Protected (h2abrsr4qt.protect@whoisguard.com)
    +1.6613102107
    Fax: +1.6613102107
    8939 S. Sepulveda Blvd
    8939 S. Sepulveda Blvd
    Westchester, CA 90045
    US

    Technical Contact:
    WhoisGuard
    WhoisGuard Protected (h2abrsr4qt.protect@whoisguard.com)
    +1.6613102107
    Fax: +1.6613102107
    8939 S. Sepulveda Blvd
    8939 S. Sepulveda Blvd
    Westchester, CA 90045
    US

    Billing Contact:
    WhoisGuard
    WhoisGuard Protected (h2abrsr4qt.protect@whoisguard.com)
    +1.6613102107
    Fax: +1.6613102107
    8939 S. Sepulveda Blvd
    8939 S. Sepulveda Blvd
    Westchester, CA 90045
    US

    Status: Locked

    Name Servers:
    ns1.bulkdump.com
    ns2.bulkdump.com

    Creation date: 21 Sep 2004 00:22:19
    Expiration date: 21 Sep 2005 00:22:19

    Well they want to be 'private'  Whoisguard.com must be spammers as well.

    01 February: Roberts legal problems. Its an external site, Spam entries still being added.

    22 January: Listing of uses for Roberts lists by 'clients'. - additional ip's added.

    18 January:  Somebody else (the Fridge) reports: newportmarketing.com domain - if your stupid enough to buy his list this is apparently this is what the customers use,  Robert is using Jellycounter.com again if you visit the website use '/1' otherwise you get a '404' page

    Registrant:
    Newport Internet Marketing Group (NEWPORTMARKETING-DOM)
    1314B Center Drive #514
    Medford, OR 97501
    US

    Domain Name: NEWPORTMARKETING.COM

    Administrative Contact, Technical Contact:
    Alan, Robert (31453424I) ralan541@hotmail.com
    NIM Corporation
    1314B Center Drive #514
    Medford, OR 97501
    US
    (888)340-9733 fax: (503)213-6416

    Record expires on 16-Jul-2006.
    Record created on 17-Jul-1997.
    Database last updated on 18-Jan-2005 06:15:29 EST.

    Domain servers in listed order:

    NS.MEDIA3.NET 208.249.122.250
    NS2.MEDIA3.NET 206.67.48.250

    dig newportmarketing.com

    ; <<>> DiG 9.2.4 <<>> newportmarketing.com
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23855
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

    ;; QUESTION SECTION:
    ;newportmarketing.com. IN A

    ;; ANSWER SECTION:
    newportmarketing.com. 84000 IN A 206.67.52.241

    ;; AUTHORITY SECTION:
    newportmarketing.com. 171740 IN NS ns.media3.net.
    newportmarketing.com. 171740 IN NS ns2.media3.net.

    ;; ADDITIONAL SECTION:
    ns.media3.net. 24771 IN A 208.249.122.250
    ns2.media3.net. 53780 IN A 206.67.48.250


    17 January 2004:   Made me 'smile' from a recent Robert spam:

    note: this is a non-commercial BROADCAST EMAIL ANNOUNCEMENT.  no products
    or services for sale or lease are endorsed in this BROADCAST EMAIL ADVISORY.

    So its spam with no endorsement ? why send the spam then ? Great logic there

    15 January 2005:  broadcastingemail.org becomes the webserver robert is using, Still located in China but on a new IP address a few numerical numbers away from where it used to be.  Thats China for you

    13 January 2005: Robert is spamming webmaster email accounts - a new tactic, chart to indicate roberts 'Domian of the month for spamming', and role accounts he spams in the method section.

    5 January 2005: the 'Tsunami' is a money making opportunity for Robert  - thats sick. anyhow the .biz spam ware - open proxy network whatever Robert uses seems to be much better the the .org -- or the org spamware is more efficient as it sends three spams to one host, as the  the .biz sends one per open proxy host  I'm very happy to report them all. 

    Another three Robert spams to the technical contacts.  Its a busy month

    4 January 2005: Run a update whois/dig check on broadcastemail.org.  Same China hoster, but somebody made a compliant about the whois so some new data added by Robert.  I think my technical contacts are due some spam soon, so stay tuned for updates.

    3 January 2005: Updated Broadcastemailtoday.biz dns and looked at changes at the whois record - it is now hosted in Brazil.  Its been a while since I did a section update

    2 January 2005: This news update still in .... Robert is using garbage custom words - it probably helps him list wash so they will not be displayed here in the future.  I give an fictional example account 'a' is banana and on account 'b' its falklands So thats how he can track you should you post your email message to spam group.. (I know this as another email address gets Roberts mailing) but I don't report that - its a checksum.   Further examples of this technique can be found in experiments 1 and 2.

    Broadcastemailtoday.biz is active again  - Robert has appeared to have given on broadcastemail.org for the time being.  I'd love to know when I can get off Roberts junk list.  Latest tracking method (October 2005) by Bob

    final note: Good news the First spam of 2005 has just plopped into experiment 2 and its a Robert spam . Time for Champagne I think.

    1 January 2005: Some cosmetic work done - including a regular six month spell check on this webpage - it gets downhill from here onwards - looking forward to June ? yet - who says you can't have fun with geocities webhosting .....


    29 December 2004: Robert has a 'new' charity, no doubt getting bored of low income families, helping the homeless, it now animal protecttion - note that no charity brand names or names where named. (general update) More spam addresses added to the table - My Robert is so consistent..

    21 December 2004: News about new domain bought: broadcastemail.org, further spam run data appended.

    New Domain: broadcastemail.org

    Domain ID:D105322628-LROR
    Domain Name:BROADCASTEMAIL.ORG
    Created On:11-Dec-2004 01:11:01 UTC
    Last Updated On:15-Dec-2004 23:37:58 UTC
    Expiration Date:11-Dec-2005 01:11:01 UTC
    Sponsoring Registrar:Network Solutions LLC (R63-LROR)
    Status:CLIENT TRANSFER PROHIBITED
    Status:TRANSFER PROHIBITED
    Registrant ID:38804169-NSI
    Registrant Name:Newport IM Corporation
    Registrant Organization:Newport IM Corporation
    Registrant Street1:Box 1259
    Registrant Street2:
    Registrant Street3:
    Registrant City:Seattle
    details about themRegistrant State/Province:WA
    Registrant Postal Code:98101
    Registrant Country:US
    Registrant Phone:+1.2062231270
    Registrant Phone Ext.:
    Registrant FAX:
    Registrant FAX Ext.:
    Registrant Email:no.valid.email@worldnic.com
    Admin ID:38804169-NSI
    Admin Name:Newport IM Corporation
    Admin Organization:Newport IM Corporation
    Admin Street1:Box 1259
    Admin Street2:
    Admin Street3:
    Admin City:Seattle
    Admin State/Province:WA
    Admin Postal Code:98101
    Admin Country:US
    Admin Phone:+1.2062231270
    Admin Phone Ext.:
    Admin FAX:
    Admin FAX Ext.:
    Admin Email:no.valid.email@worldnic.com
    Tech ID:5358805-NSI
    Tech Name:Network Solutions, LLC.
    Tech Organization:Network Solutions, LLC.
    Tech Street1:13200 Woodland Park Drive
    Tech Street2:
    Tech Street3:
    Tech City:Herndon
    Tech State/Province:VA
    Tech Postal Code:20171-3025
    Tech Country:US
    Tech Phone:+1.188864296
    Tech Phone Ext.:
    Tech FAX:+1.5714344620
    Tech FAX Ext.:
    Tech Email:customerservice@networksolutions.com
    Name Server:NS1.BROADCASTEMAIL.ORG
    Name Server:NS2.BROADCASTEMAIL.ORG
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:
    Name Server:

    With the classic no.valid.email@worldnic.com

    Section Update 4 January 2005: another complaint was made about the whois entry so a new email address is today2005@mail.com has been entered - China is still hosting our Friend.


    Now Where is that ?

    dig broadcastemail.org (valid 21 Dec 2004)

    ; <<>> DiG 9.2.4 <<>> broadcastemail.org
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64478
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastemail.org. IN A

    ;; ANSWER SECTION:
    broadcastemail.org. 3600 IN A 61.128.198.28
    update: 15 Jan 2005
    broadcastemail.org. 3600 IN A 61.128.198.39

    ;; AUTHORITY SECTION:
    broadcastemail.org. 82104 IN NS ns1.broadcastemail.org.
    broadcastemail.org. 82104 IN NS ns2.broadcastemail.org.

    ;; Query time: 2562 msec

    OK thats China -

    inetnum: 61.128.128.0 - 61.128.255.255
    netname: CHINANET-CQ
    descr: CHINANET Chongqing Province Network
    descr: Data Communication Division
    descr: China Telecom
    country: CN
    changed: hostmaster@ns.chinanet.cn.net 20000601
    status: ALLOCATED NON-PORTABLE
    source: APNIC
    role: CHINANET CQ
    address: The mainstreet 3 daping ,chongqing data communication bureau
    country: CN
    phone: +862368614888
    fax-no: +862368602314
    e-mail: abuse@cta.cq.cn
    trouble: send spam reports to abuse@cta.cq.cn

    Don't bother complaining Thats the Chinese government.
    Apparently there is only one person at Chinanet who spends his day pressing the delete key
    My no spam problems in China i hear thanks to that one person pressing the delete key.

    New approach (mailto's added by me)  So Robert is forwarding his spam  to himself ?

    Re: ...relating to email advertising"

    Email Advertise to 28,000,000 People => F-R-E-E
    http://www.broadcastemail.org

    -----Original Message-----
    From: admin@broadcastemail.org
    To: webmaster@broadcastemail.org
    Subject: very interesting...

    hey.. how are you doing?

    this organization will help you advertise to millions of people
    for free if you are a non-profit organization that benefits the
    homeless and needy for the holidays.

    at their web site, simply mail them at the address on the order
    page, and they will tell you how you can advertise to 28 million
    people for free if you fit the criteria above.

    this is a non-commercial email offer, and they make no money on
    this email offer at all..

    to be removed from their non-profit/non-commercial email list visit:
    http://www.broadcastemail.org/1/unsub.html or send a letter to
    them at: email offer, box 1259, seattle, wa 98111

    December 2004: Put in table of contents, and start listing he 'smtp servers' Robert uses per each spam run.

    On the 9th October he buys a new domain EMAILTODAY2004.COM, Hosted in China.

    Domain Name: EMAILTODAY2004.COM
    Registrar: NETWORK SOLUTIONS, LLC.

    Registrant:
    None (TERXVVFVWD)
    1200 Western Avenue
    Seattle, WA 98101
    US

    Domain Name: EMAILTODAY2004.COM

    Administrative Contact, Technical Contact:
    None (38475614O) biz300@mail.com
    1200 Western Avenue
    Seattle, WA 98101
    US
    (206)223-1270

    Record expires on 30-Sep-2005.
    Record created on 30-Sep-2004.
    Database last updated on 9-Oct-2004 12:59:59 EDT.

    Domain servers in listed order:

    NS1.ACTIVENAMESERVER.INFO 221.139.2.77
    NS2.ACTIVENAMESERVER.INFO 222.55.10.24

    221.138.0.0 - 221.143.255.255 HANANET Haaro Telecom, Inc Korea.
    222.32.0.0 - 222.63.255.255 CRTC CHINA RAILWAY TELECOMMUNICATIONS CENTER, Beijing,P.R.China

    Domain points to 222.55.10.23 (China)
    18th October 2004 MOVED TO 61.191.108.118 (China)
    Was hosted at CHINANET-AH: 61.191.0.0 61.191.255.255 Chinanet Anhui
    Message of 20 October 2004 - 27 October
    Whois IP Lookup on www.EMAILTODAY2004.COM has been requested but failed.
    IP address not resolvable by dns
    27 October 2004
    Points to: 221.4.199.10

    netname:      CNCGROUP-GD
    descr:        CNC Group Guangdong province network
    descr:        China Network Communications Group Corporation
    descr:        No.156,Fu-Xing-Men-Nei Street,
    descr:        Beijing 100031
    country:      CN

    Now it is the 31st October I get spammed by BROADCASTEMAILINGTODAY.BIZ  a domain name variation on a theme


    Domain Name: BROADCASTEMAILINGTODAY.BIZ
    Domain ID: D7255807-BIZ
    Sponsoring Registrar: NETWORK SOLUTIONS INC.
    Sponsoring Registrar IANA ID: 2
    Domain Status: clientTransferProhibited
    Registrant ID: 38066365
    Registrant Name: None
    Registrant Organization: None
    Registrant Address1: Box1259
    Registrant City: Seattle
    Registrant State/Province: WA
    Registrant Postal Code: 98111
    Registrant Country: United States
    Registrant Country Code: US
    Registrant Phone Number: +1.2062231270
    Registrant Email: no.valid.email@worldnic.com
    Administrative Contact ID: 38066366
    Administrative Contact Name: Bob Alan
    Administrative Contact Address1: Box1259
    Administrative Contact City: Seattle
    Administrative Contact State/Province: WA
    Administrative Contact Postal Code: 98111
    Administrative Contact Country: United States
    Administrative Contact Country Code: US
    Administrative Contact Phone Number: +1.2062231270
    Administrative Contact Email: biz3000@usa.com
    Billing Contact ID: 38066366
    Billing Contact Name: Bob Alan
    Billing Contact Address1: Box1259
    Billing Contact City: Seattle
    Billing Contact State/Province: WA
    Billing Contact Postal Code: 98111
    Billing Contact Country: United States
    Billing Contact Country Code: US
    Billing Contact Phone Number: +1.2062231270
    Billing Contact Email: biz3000@usa.com
    Technical Contact ID: 5358805
    Technical Contact Name: Network Solutions, LLC.
    Technical Contact Organization: Network Solutions, LLC.
    Technical Contact Address1: 13200 Woodland Park Drive
    Technical Contact City: Herndon
    Technical Contact State/Province: VA
    Technical Contact Postal Code: 20171-3025
    Technical Contact Country: United States
    Technical Contact Country Code: US
    Technical Contact Phone Number: +1.18886429675
    Technical Contact Facsimile Number: +1.5714344620
    Technical Contact Email: customerservice@networksolutions.com
    Name Server: NS1.BROADCASTEMAILINGTODAY.BIZ
    Name Server: NS2.BROADCASTEMAILINGTODAY.BIZ
    Created by Registrar: NETWORK SOLUTIONS INC.
    Last Updated by Registrar: NETWORK SOLUTIONS INC.
    Domain Registration Date: Fri Jun 25 02:47:40 GMT 2004
    Domain Expiration Date: Fri Jun 24 23:59:59 GMT 2005
    Domain Last Updated Date: Sat Oct 16 20:02:41 GMT 2004

    ; <<>> DiG 9.2.1 <<>> broadcastemailingtoday.biz
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26530
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

    ;; QUESTION SECTION:
    ;broadcastemailingtoday.biz. IN A

    ;; ANSWER SECTION:
    broadcastemailingtoday.biz. 3190 IN A 211.115.213.172

    ;; AUTHORITY SECTION:
    broadcastemailingtoday.biz. 490 IN NS NS1.broadcastemailingtoday.biz.
    broadcastemailingtoday.biz. 490 IN NS NS2.broadcastemailingtoday.biz.

    ;; ADDITIONAL SECTION:
    NS1.broadcastemailingtoday.biz. 490 IN A 222.134.66.38
    NS2.broadcastemailingtoday.biz. 490 IN A 222.134.66.38

    ;; Query time: 2 msec

    That is for dns 222.132.0.0. 222.135.255.255 CNCGROUP-SD (Shandong province/China).
    and Korea for web servers.

    inetnum: 211.115.213.0 - 211.115.213.255
    netname: ENTERPRISENET-NEXTLINE-KR
    descr: Nextline
    descr: 192 LG Twinhouse 816, Gumi-dong , Seongnam-si Bundang-gu
    descr: KYONGGI
    descr: 463-500
    country: KR

    person: Yongho Park
    descr: Nextline
    descr: 192 LG Twinhouse 816, Gumi-dong , Seongnam-si Bundang-gu
    descr: KYONGGI
    descr: 463-500
    country: KR
    phone: +82-31-708-8108
    e-mail: info@nextline.co.kr


    So ring him on:

    541-665-0272
    541-665-0586
    541-665-0587
    541-665-0960

    Robert Soloway
    279 Granite St, Ashland, OR  (Thats the picture of the house)
    Private: 541-482-1246
    Public : 541-482-1285 (spamervtised phone #)
    Fax : 541-482-1315 

    Client satisfaction:  (no I cannot claim to be one,  I just get spammed) But this is what some stupid found out: when they bought his list.

    Others having problems with Robert.

    Having problems with Robert - your not alone.

    Meet a client Contentseed.com who was nice enough to document his experience (http://contentseed.com/I-AM-NOT-A-SPAMMER.pdf found on their server ) and a backup copy if you get a 'not found error'

    http://www.ripoffreport.com/reports/ripoff129572.htm This is a little 'incoherent'  But the  summary of this appears to be: Robert tried to spam via this companies network, and they caught on and sent him a bill for his unauthorised activities. 

    So Robert complained to ripoffreport.com.  Should the link 'die' try Google cache for it.   Im not going to take sides I don't know the story, but I will say 'I would not trust Robert'.

    Some web counter http://www.jellycounter.com provider says 'up yours' to him.   You see everybody loves Robert.  date of screen capture: 23 September 2004.  However Jellycounter.com seem to have since resolved their difficulties  * with Robert.  I leave you with the picture. should you not believe me.

    Counter jellycounter.com provider has had enough of Robert

    * Jellycounter are being used by Robert again - for his customer website

    Meet Angela too

    OK right who are BroadcastingToday.biz:

    Domain Name:                                 BROADCASTINGTODAY.BIZ
    Domain ID: D7140996-BIZ
    Sponsoring Registrar: NETWORK SOLUTIONS INC.
    Domain Status: clientTransferProhibited
    Registrant ID: 37998718
    Registrant Name: N.I.M Corporation
    Registrant Organization: N.I.M Corporation
    Registrant Address1: PO Box 1259
    Registrant City: Seattle
    Registrant State/Province: WA
    Registrant Postal Code: 98101
    Registrant Country: United States
    Registrant Country Code: US
    Registrant Phone Number: +1.2062231270
    Registrant Email: biz3000@usa.com
    Administrative Contact ID: 37998719
    Administrative Contact Name: Robert Alan
    Administrative Contact Address1: PO Box 1259
    Administrative Contact City: Seattle
    Administrative Contact State/Province: WA
    Administrative Contact Postal Code: 98101
    Administrative Contact Country: United States
    Administrative Contact Country Code: US
    Administrative Contact Phone Number: +1.2062231270
    Administrative Contact Email: biz300@mail.com
    Billing Contact ID: 37998719
    Billing Contact Name: Robert Alan
    Billing Contact Address1: PO Box 1259
    Billing Contact City: Seattle
    Billing Contact State/Province: WA
    Billing Contact Postal Code: 98101
    Billing Contact Country: United States
    Billing Contact Country Code: US
    Billing Contact Phone Number: +1.2062231270
    Billing Contact Email: biz300@mail.com
    Technical Contact ID: 37998719
    Technical Contact Name: Robert Alan
    Technical Contact Address1: PO Box 1259
    Technical Contact City: Seattle
    Technical Contact State/Province: WA
    Technical Contact Postal Code: 98101
    Technical Contact Country: United States
    Technical Contact Country Code: US
    Technical Contact Phone Number: +1.2062231270
    Technical Contact Email: biz300@mail.com
    Name Server: NS-181.AUTODEALZ.BIZ
    Name Server: NS-180.AUTODEALZ.BIZ
    Created by Registrar: NETWORK SOLUTIONS INC.
    Last Updated by Registrar: NETWORK SOLUTIONS INC.
    Domain Registration Date: Thu Jun 10 16:51:04 GMT 2004
    Domain Expiration Date: Thu Jun 09 23:59:59 GMT 2005
    Domain Last Updated Date: Wed Aug 18 09:46:49 GMT 2004

    >>>> Whois database was last updated on: Mon Sep 06 15:00:51 ?MT 2004 <<<<

    As of the 2nd January 2005 somebody has complained about the above so the email changes to today2004@writeme.com , Also a new dns provider that is called activenameserver.info and that is pointing to ip address 200.146.101.135 Which is Latin America/ Brazil - Here are Roberts new 'chums'  - Lets move to South America.


    netnum: 200.146.101/24
    asn: AS18881
    ID abusos: GVO6
    entidade: BR IT Consulting
    documento: 005.724.985/0001-11
    responsável:Leni Abreu Neto
    endereço: Estr Dom Joao Becker, 600, CJ 9
    endereço: 88058-600 - Florianopolis - SC
    telefone: (48) 2842701 []
    ID entidade: BIC21
    ID técnico: BIC21
    inetrev: 200.146.101/24
    servidor DNS:RS1.BRITCONSULTING.COM.BR
    status DNS: 31/12/2004 UH
    último AA: 18/12/2004
    servidor DNS:RS2.BRITCONSULTING.COM.BR
    status DNS: 31/12/2004 UH
    último AA: 18/12/2004
    criado: 16/11/2004
    alterado: 16/11/2004
    inetnum-up: 200.146.64/18

    ID: BIC21
    nome: BR IT Consulting
    e-mail: lneto77@UOL.COM.BR
    endereço: Av Cons Nebias, 340,
    endereço: 11015-002 - Santos - SP
    telefone: (13) 32235453 []
    criado: 15/07/2003
    alterado: 27/11/2003

    ID: GVO6
    nome: GVT Operacao
    e-mail: operacao@GVT.NET.BR
    endereço: Rua Lourenco Pinto, 299,
    endereço: 80010-160 - Curitiba - PR
    telefone: (41) 4001-2000 []
    criado: 13/06/2001
    alterado: 01/11/2002

    remarks: Security issues should also be addressed to
    remarks: nbso@nic.br, http://www.nbso.nic.br/
    remarks: Mail abuse issues should also be addressed to
    remarks: mail-abuse@nic.br

    % whois.registro.br accepts only direct match queries.
    % Types of queries are: domains (.BR), BR POCs, CIDR blocks,
    % IP and AS numbers.

    Love from our spammy friends at NeuLevel, Inc So Robert Alan is behind it - Right Lets go look at the old dns: (update He has moved to Brazil and supplier BR IT Consulting prior suppliers in Korea called Inet Hosting, Inc,HANANET)

    <>

    dig broadcastingtoday.biz

    ; <<>> DiG 9.2.1 <<>> broadcastingtoday.biz
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43657
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;broadcastingtoday.biz.         IN      A

    ;; ANSWER SECTION:
    broadcastingtoday.biz.  3600    IN      A       221.143.42.180
                           NEW   at 23 Sept 2004 >  210.116.114.129
                          
    UPDATED  18 october 2004   >  nothing reachable status unknown.
                           UPDATED   2 Janaury 2005  200.146.101.135 Brazil (I'm lazy)

    Message as of 20 October through 27 October: 

    Whois IP Lookup on www.BROADCASTINGTODAY.BIZ has been requested but failed.
    IP address not resolvable by dns

     
    ;; AUTHORITY SECTION:
    broadcastingtoday.biz.  3600    IN      NS      ns14.dnsworld.biz.

    ;; Query time: 355 msec

    Dead for the time being it appears   My isp's dns servers have died so I tried a web based lookup Robert has been down since Saturday.  Im sure we will see Robert again.  It was rumoured (not confirmed by me) that he was using Brazil servers BUSINESSNET.COM.BR and INTELIG.NET.BR;  using the arin 167.0.0.0 ip range but somebody null routed the traffic.  Quite what arin and lacnic the ip allocating organisations for north america, and latin america are doing about this is not my problem  Its quite a large block of address space.

    It gives a new meaning to the term 'Black hat'


    Here are his old hosters in Korea  oh dear very spammy

    [ ISP Organization Information ]
    Org Name      : Inet Hosting, Inc.
    Service Name  : INET
    Org Address   : 1421-1, Seocho-dong, Seocho-gu, Seoul

    [ ISP IP Admin Contact Information ]
    Name          : Seongeop Yoon
    Phone         : +82-2-2103-7500
    Fax           : +82-2-3471-9035
    E-Mail        : net@inet.co.kr

    [ ISP IP Tech Contact Information ]
    Name          : Seongeop Yoon
    Phone         : +82-2-2103-7500
    Fax           : +82-2-3471-9035
    E-mail        : net@inet.co.kr

    [ ISP Network Abuse Contact Information ]
    Name          : Jaehwa Jung
    Phone         : +82-2-2103-7500
    Fax           : +82-2-3471-9035
    E-mail        : abuse@inet.co.kr

    until the 23rd September 2004 It was


    inetnum:      221.138.0.0 - 221.143.255.255
    netname:      HANANET
    descr:        Hanaro Telecom, Inc.
    descr:        726, JangHang-2dong, ILSAN-Gu, Goyang-Si, Kyonggi-Do
    country:      KR
    admin-c:      IS37-AP
    tech-c:       SH243-AP
    descr:        ************************************************
    descr:        Allocated to KRNIC Member.
    descr:        If you would like to find assignment
    descr:        information in detail please refer to
    descr:        the KRNIC Whois Database at:
    descr:        "http://whois.nic.or.kr/english/index.html"
    descr:        ************************************************
    status:       ALLOCATED PORTABLE
    mnt-by:       MNT-KRNIC-AP
    changed:      hm-changed@apnic.net 20030530
    source:       APNIC

    person:       Inyup Sung
    address:      Hanaro Telecom Co.
    address:      Kukje Electornics Cneter Bldg. 1445-3 Seocho-Dong Seocho-Ku
    address:      SEOUL
    address:      137-070
    country:      KR
    phone:        +82-2-106
    fax-no:       +82-2-6266-6483
    e-mail:       info@hananet.net
    nic-hdl:      IS37-AP
    mnt-by:       MNT-KRNIC-AP
    changed:      hostmaster@nic.or.kr 20010523
    source:       APNIC

    person:       Seungchul Hwang
    address:      Hanaro Telecom Co.
    address:      Kukje Electornics Cneter Bldg., 1445-3 Seocho-Dong Seocho-Ku
    address:      SEOUL
    address:      137-070
    country:      KR
    phone:        +82-2-106
    fax-no:       +82-2-6266-6483
    e-mail:       info@hananet.net
    nic-hdl:      SH243-AP
    mnt-by:       MNT-KRNIC-AP
    changed:      hostmaster@nic.or.kr 20010523
    source:       APNIC

    Current hosters be Inet Hosting, Inc. (korea spamhaus).  It took 15 days for Robert to start spamming me after his change of provider. Do email them net@inet.co.kr but it was Hanaro in Korea before that.

    NIM Corporations past history/other places of information.

    Robert has done this before (see external link: spamhaus), that site has a lot more information. he has also hosted in Pakistan (what a patriot of America he is)

    NIM Corporation

    http://www.email2millions.net/order.html
    NIM Corporation (c)1997-2004
    THE COMPLETE BROADCAST EMAIL PACKAGE
    Secure Online Ordering Form for All Countries

    To Order The Complete Broadcast Email Package Online:
    Please Complete This Online Order Form and then Press Submit Order.

    To Order The Complete Broadcast Email Package by Phone:
    Please Call Our Sales Department in the USA (Open 24/7) at: +1(206)223-1270

    To Order The Complete Broadcast Email Package by Fax:
    Please Complete This Online Order Form, then Print It Out and Fax it to the USA at: +1(503)213-6416.

    To Order The Complete Broadcast Email Package by Mail:
    Please Complete This Online Order Form, then Print It Out and Send it With Payment by US Check,
    Credit Card, or Money Order to: NIM Corp., 1314B Center Drive #514, Medford, OR 97501, USA.

    ------------------------------------------------------------

    Registrant:
    NA
    PO Box 1736
    Phoenix, OR 97535
    US
    541-665-0400

    Domain Name: EMAIL2MILLIONS.NET

    Administrative Contact:
    Technical Contact:
    Alan, Robert mailnow500@mail.com
    PO Box 1736
    Phoenix, OR 97535
    US
    541-665-0400

    Credits:  Thanks to: The wayback archive. Spamhaus,
         The Fridge, and the other 'Robert' (legal link) who is also suing the spammer called Robert
         and to the Roadie's family for the picture of Roberts House which I have reduced in size.

         not forgetting The Real Estate Agent.

    License: Creative Commons License


    This work is licensed under a Creative Commons License.

    Help:  If you have a picture (mugshot) of Robert, or know which High School he went to.  I love to show it here and share  it with others.  I can be contacted from the first experiment page.  Any Comments from Roberts ex Boyfriends/Girlfriends is also very welcome. 

    I personally would like to thank everybody who finds 'gold' for this site.

    Press Queries: I do not do press interviews via email, nor will I 'ring' you.  My position on Bob, and who i am is well represented/documented on this page, so read it carefully or return your chosen field of writing reviews of 'make up products' or something.   If your dumb enough not appreciate what is here, i then suggest you don't write your piece and wait for a 'more' experienced journalist to do it.

    It's all here, if you cannot see it - I suggest you go back to writing 'anti aging product' reviews.  - and my name is Barbie.

    MESSAGES