Introduction
Video interview
Success Stories
Charity success
The rogue
About the spammer
Bob's mental wellbeing
dmca theft
smd 'link'
(spam of mass destruction)


Court Proceedings 2008
Federal Trial coming soon

Politics
2008 Elections (WA)

Technical
The spam package
in detail
Suspected operation
Domain list
SEO pollution (NEW)

Know something ?
tell me
Spamcop sightings
Roberts home isp
Some Maps
of the above
in a new window.
Current
Recent activity
Hosting with

Fun
A Bob Soloway
spam song to sing.

Community zone
Meet Fellow 'fans'.
I post here its a
public zone instead
of my private contact
'feature' below

.
Housekeeping
How to use this page
Contact Us.
for
Media 'Professionals'
section.
Copies of this page

Welcome to the 2006
redesign of this page
the old page is still
here This page is
very large mirror and
subject to ddos attacks.
it is originally hosted here
original mirror
Welcome to the
Bob Soloway universe!
Its great fun.

I have 'migrated' from yahoo.

Enable or disable the
Search and translate
tools.

. clicking this
this can take some
time to work.

Bob Soloway (rokso spammer) in action

Search engine visitors:
This page has
lots of other junk on it
if you typed in
some vague keyword
or ip address please
use your 'find
feature' for that phrase.

So please meet
my (and probably yours too)
most prolific spammer
who does not understand
the concept of 'no'

Most links on this page
are internal - to visit
Bob Soloway site you will
have to type it in yourself.

This page documents
activities seen
in a concise* form
*in one page.

Translate this site:

or Translate words

[ hide this menu]
It can be re-displayed
again via the bottom
on the left hand menu.
This takes some
time to work.

Notice: This page monitors Bob Soloway, and is VERY BORING/DULL if your not an uber i.t nerd; but such is the nature of the subject. It's not a media 'powerpoint friendly' presentation*.

Updates:
Court Sentencing (all day) is set for Seattle on Friday the 11 of July 2008. On the 14th of March 2008 Robert Soloway admitted three charges of guilt and in a deal with the us authorites had the other 37 charges droped. Sentencing with at least five years of jail time, and $ us 500,000.00 in fines is the issue for the Judge on the three counts admitted to.


Sentence is set at 47 months (about four years) and fine of $ 700,000.00 (Sterling £ 350,000.00,euro 443,044.00) more when i have court docs.

It is over!, for now. But I will continue to monitor our pest. See the date entry for more information.

Robert Soloway was released from prison until his trial on 20 September 2007, If you spot him (online or in person) please drop us a note as documents have been sealed.

Federal (usa) Trial was set for 24 march 2008, first delay was 7 January 2008 (it was orginally set for 6 August 2007). Lets hope Robert does not go to Sweden while 'free'. New Lawyer appointed 'Carl A. Tony Capozzola' existing lawyer Trobermann to take a backseat ?

MAY 31 2007 Robert Soloway (federal prisioner id 37427-086) and in the Care of Six US Governmental agencies details.

I feel your pain if you are being Joe jobbed/or where. However you can read about the Spammer below and his 'progress' through the court.

NEW HOSTING ANNOUNCEMENT: A big thank you to Andy for the new home and domain name thisfool.com and hosting for it. Note I will also continue to maintain the existing googlepages site.

Lets get started.

This page is not 'fan' literature, but an attempt to put together the facts of how Robert spams you and me. - it is not all of my own work. But an attempt to get people who are thinking of using Roberts 'services' as counter to his claims which a court has as part of the evidence against him. I've never met Robert, or used his 'service' etc - but a lot people including Microsoft (of which I'm sure you have heard of) consider him a problem. So if you thinking about taking Robert up on his offer consider this.

1. His list was not used when he spams
2. I never requested mailings from Robert - but I got them.
3. I have no idea if I am still on his list or not after opting out - its an academic point now
4. I include actual 'testimonials' from people who signed up for Roberts offer
5. Robert is using spamware to mail his junk.
6. And spamware that appears to use windows trojan; pc's
7. He hosts in China - who it appears don't mind spammers.
8. It it doubtfull that the 478 clients (not the thousands claimed) of Robert got the million plus mailings - Robert could not tell

is not me making these claims this information can be found throughout this document For the record - I just list the spams that my Domain owner email gets. Robert for some strange reason kept appearing in my inbox. So this is a 'homage' to his business operation. Should you think this just 'sour grapes' then I suggest you email some of the clients who having taken up Robert and paid him and discovered the truth. So before you send Robert money to his 'paypal' account - please read the experience of 'clients', court documents and so on. Once equipped with the facts I hope you will 'do the right thing'.

A wiki entry on Bob for those of you who like extra sources of information.

From another wikipedia contributor (June/2006):

Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may call 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

Exclusive !!! The Spam package under the hood look at the spamware, complete with photo's.

A visit is recommended (links back to this page).

Bobs 'Its not Spam' phase What about this spamis nonsense ? Those of you lucky enough to get a spamis spam (I was lucky) will know that Robert is having a go at the people who are taking him to court. I have no idea of what Bob is on but it is weird stuff. Many 'spammers' become anti-spammers when they are rumbled. Bob is still Bob - so he is still a spammer. As to Bob being 'persecuted' well if Bob thinks that way - then his 'stupidity' helped started it. That I think is a fair assessment on Spamis which a domain registrar has now terminated for breaking some rules set out in their terms and conditions.

Meeting Bob

The text below explains how I was introduced to Bob Soloway and how this page was eventually created. If you came from my spamming the domain owner (web archived now) page then you know the background. otherwise let me recap. As a domain owner In 2002 a couple of domains I look after changed registrar, so this meant the all contacts in the whois database changed.

The whois lists information about the owner and the technical contacts various internet rfc's (who the internet is ideally run) require you have these so people can contact you.

The downside of this ideal system is that spammers can also spam you as most domains not owned by spammers follow the rules. Since spammers can joe-job you it is best not to have filters on these email accounts as it might be a another domain warning you that a spammer is using your domain name (if you don't know it already) So the billing, technical, and administrator plus the owner contacts changed in the year 2002 - for good measure a web page was setup advising persons of this. In June 2004 Bob who was then using 'Broadcastingtoday.biz' raided the whois by some means and decided to send me spam, then to all of the accounts I created in 2002. which is nice of them since these accounts don't send email. Enough history - lets move to 2004.So in June 2004 I got spammed via my whois entries so I renamed a few things and started my experiment. I then also renamed the billing and technical contacts. they have since rescanned the whois and have sent spam to these new names this has become experiment 2 (also web archived). No web page was put up with the changes so they are definitely raiding the whois for there claimed and 28 million email addresses. That's how Bob Soloway introduced himself. with this (archive link)

Email Advertise to 28 Million People Free

http://www.broadcastingtoday.biz emailing is only zero amount if you are a non profit organization
that aids low income individuals gain access to the internet.
at web site, contact us by mail for further details.

unsubscribe from our non-commercial/non-profit newsletter database:
http://www.broadcastingtoday.biz/unsub.html

po box 1259, seattle, wa 98111

The 'love affair' of tracing Bob's spam started back then - thus this page of love was born.

Bob reciprocated my love my sending me more spam (see the link). and before one knew it I had a lovers crush - I've yet to do the Glen Close - Fatal Attraction 'bunny boiling' stage. - I would not want to be Bob's boyfriend or girlfriend (whatever his sexual orientation) when the Bunny Boiler state comes.

The more you know the funnier Bob gets - his claim to 'protecting american jobs' is code for using anything but americans in his operations, the Charities success rate from what I can gather is a complete failure and may be mostly lies.

A Spam

What does a Bob Soloway spam look like ? - well you seen one, and more importantly where might it come from ?

Most 'normal' internet citizens live in a neighbourhood e.g. 24. is america 211. is Korea etc etc, Bob is international in fact if you look at my lists you will see computers in many nations unwittingly working for Bob.

The spams to the domain aliases are similar to the experiment (see link) I am running this is the 'body' of a freshly subscribed address from my whois entry - a later spam example from the 15th September 2004.

message: 

email like this to 28 million people for free...

http://www.broadcastingtoday.biz



---------------- 
 
this email was sent to gain attention to non-profit 
organizations that aid low-income individuals gain
access to the internet and technology looking for 
immediate exposure.  we make no profit on any of
these services, and we offer this service to help
organizations benefiting impoverished individuals
gain access to the internet throughout the world.

emailing is only zero amount if you are a non-profit 
organization that aids low-income individuals gain 
access to the internet.  at our web site above, simply  
contact us by mail for further details.

the primary purpose of this email is directed at non-profit
organizations that benefit low income individuals gain access
to the internet and technology in all countries worldwide.

several organizations worldwide have already taken
advantage of our free offer, and we look forward to 
benefiting many more in the future.

if you are not a non-profit organization interested in our 
non-commercial/non-profit email notifications that benefit
various world causes, please unsubscribe at: 

contact us at: po box 1259, seattle, wa 98111

(look familiar?) - you now seen two spams. They are consistent in there attempts to spam me, since i have not unopted from the billing and technical contacts the spam is less than from the owner email which has had 30 ish spams after opting out of the Broadcastingtoday.biz list. Surprisingly Robert does not appear to spam webmaster or postmaster accounts - but I'm sure that will change one day.

Over time that number has dwindled to only 8 million this is a recent example of the current text forwarded by a fellow domain owner, the domain below was shut down in 2 days after being activated.

wow...

email advertise like this to 8,000,000 people this week for free...

http://www.ebroadcastcorporation.com/






the above non commercial offer is directed at non commercial
charities only.  push charity info on site for details. this offer is
not a commercial service that is absolutely not at all available
for sale or lease or trade of any kind.

That last paragraph is humorous - so my domain owner friend according to Bob is a charity, however Bob will sell the list to anybody including pet companies and it related products (see below), No endorsements by charities is implied either it appears if you read the appropriate section of this file.

One can infer.

• no means yes!
• spam is approved by charities
• your going to get Bob Soloways spam regardless.
• don't see a opt-out link - no we don't either - it would not make any difference anyhow - this confirms Bob is a spammer in our eyes.

Success Stories

Read some quotes from dissatisfied customers. None of these are made up. Roberts clients apparently include these highly reputable areas of trading in:

• lottery scam merchants (advance fee fraudsters)
• internet pharmacies
• Nigerian 419 advance free fraudsters
• Western Samoa internet 'timeshare' / get rich quick scheme
• 'Cheap' software suppliers
• contentseed.com (see pdf document)
• you don't believe me or want me to continue ? - go see the experiment pages

Robert's 'Clients' also seem to include
http://success-4-u.biz/?refid=BcastEmail-123456789 affiliate: Helen Allen, Hamilton Island, Queensland, Australia and Poochieheaven.com (real) recommends Bob

I got fooled and payed for Soloways broadcast email that was supposed to be all opt in. Well now I have nothing but complaints about spam and am receiving virus' in my email all the time. 

I asked for a refund but they said no. Still I get complaints about emails being sent out after I told them to stop sending them. So I wonder what can we do about this. 
My business has slowed so much and I think my site's reputation is at stake.

US Court document copy

Contentseed client experience pdf document.

Print to discover what a Bob Soloway client found out, and that the American Judge thought print a copy / browse for your amusement. Pdf documents do not need the latest acrobat driver (old style pdf). Any Lawyers (legal people) whom be reading this and are still thinking c**** action should read Bob response to such things on newsnet. I'm not giving it anymore propaganda. So go chase ambulances that is more profitable from what i know of the american legal profession.

Its not only me (wiki quote from the past):

The most recent incarnation of this Spammer's website has now moved to http://www.web-dateset.com/ - and they are once again forging headers to make it appear as though legitimate business websites are responsible for their SPAM messages. The author of this update, wishing to draw no further attention from the SPAMMER, will remain anonymous, but we have received about 200 messages in the last 2 days, supposedly from over 200 of our own domain names Anyone wishing to call Robert Soloway at the Newport Internet Marketing offices, may calll 206-223-1270 and 206-223-1271. He answered the phone today, and when I stated that no longer wished to receive SPAM from him, he said "Why should we care?" and then hung up on me. He stopped answering after that.

Broadcastemail advertising is a failure. says yet another client

Karma There are other problems that Mr Soloway will encounter, he has interested me in 'how does he do it'. This page regardless of your view of 'spam' links Mr Soloway to many domains (joe jobs) and providers of it services (mostly Chinese).

So should somebody else do something 'bad' - and google and see that Bob has used it - one might come to the conclusion that Bob is one very bad apple. take an email i received about a Nigerian in October 2006 - let me explain.

A Nigerian named Ghenga Olanrewaju of 11 Odeku Close, Surulere, Lagos 23401 used a domain that Bob Soloway used. An inference by somebody else assumed that he was 'Bob' was made. So is Bob 'Ghenga'? I don't think so, but if you play loose with things like has been observed and documented with Mr Soloway then our Robert it appears also takes the rap for another crook apparently named: 'Ghenga Olanrewaju'.

That's sort of 'karmic'. Also moral in there. Something along the lines of 'responsibility' see if you can find it.

Charity work

Charity Time boys and girls, for those of you who really 'read' the Soloway spams will notice that there are a lot of charities listed. So does his charity spam work ? - it seems not. Bob was also Tsuna-ming too at the time.

For your benefit I have gone and done some 'Googling' and put in the the urls, these are perhaps charities you might like to avoid donating to, Some of these are large organisations. A lot of these take credit cards via websites for what its worth, so it may mean that the donation was for not a lot and the charity mention Bob claims means absolutely nothing as well.

Questions I like to know include:

1. how large the donation was
2. or if Bob really donated to them
3. and do they approve of being listed in a Bob Soloway spam

I have asked each charity listed in the Bob Soloway spam that exists. Strangely none of these esteemed organisations answered my questions about Bob if you can find out as well so much the the better

Charities 'Claimed' he Helped ? with a $1 dollar donation ?

More recently - Sky (opsan december 2006) reports savechilds.net being spammed.

The Rogue
Bob Soloway inhabits a strange universe of which i have spent much time writing (8000 lines in this file) down/finding out. My aim is to present a picture which Bob would rather you not see.

Bob causes problems - through annoyance to the downright illegal, when these issue arise The fun begins. Under a couple of hours for a web host says much.

has more detail and graphic examples from isp's that say more just words.

The Spam Operation
Pure speculation on the basis of the facts seen from this page you can assume quite a lot/

Being subscribed:
1, Spam Victim: registers an internet domain
2, Bob Soloway: Hires help, or looks up what was entered in step 1, either using a mining tool, or a box of spyware/virus spybots pc that mask the number of requests for ahem 'sales leads' like email addresses.

Being spammed:
1, Bob Using non american internet companies (normally Korea, or China) Bob sets up the same website over and over again.
2, Bob uses/or employs help or his own.
1 Spybot network - example (bbc) or 2 open proxy Microsoft windows exchange servers to send (example ip addresses here)

Internet Mail Service (5.5.2650.21) from here - seems to be classed as an 'Exchange Open Proxy' abuse in Google - Never used a exchange server as an production mail server for obvious reasons. If true then its an illegal use of somebody else's server, and Bob loves Billy Gates products to spam spybots which is funny since the 'spamis' debacle done by Bob and covered here in this page.

The other query I had was for %XMAILER - is ?

xmailer - xmailer.exe - Process Information

Process File: xmailer.exe
Process Name: 123 hidden sender


Description: xmailer.exe is an advertising program by 123 hidden sender. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.


A further search in Google reveals

Anonymous bulk email software for email marketing, 123 Hidden Sender Real anonymous bulk email software, Super Email Harvester, extractor, harvester for online advertising, marketing. www.123hiddensender.com/

Download 123 Hidden Sender 3.40 Free Trial - 123 Hidden Sender ... Download 123 Hidden Sender 3.40 for free - 123 Hidden Sender ends real ANONYMOUS bulk emails.

Comrades search on "123 hidden sender" I rest my case. with this

" Sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP will will never be shown in the email headers.

Description

123 Hidden Sender Screenshot
View full-size screenshot


123 Hidden Sender sends absolute ANONYMOUS bulk emails. You won't lose your ISP service. It is trouble free! Your IP address will not be shown in the email headers! All you do is input your message, subject, and email addresses, and then 123 Hidden Sender does all the rest. No relays to deal with anymore. No need for expensive bulk ISPs. Port 25 is not a problem.

123 Hidden Sender is a anonymous bulk email software program based on a unique know-how sending technology. It provides real anonymous instant delivery - you can use your regular Internet connection because your IP address will never be shown in the email headers.

Feature and Benefits

Send absolute ANONYMOUS bulk emails. Real anonymous (using proprietary proxy routing - the next wave in bulk email stealth technology, New technology, not a conventional port 25 mailer). You will not lose your ISP service. Your IP will will never be shown in the email headers. Sending speed depends on your connection only (thread count control - up to 500).

Lowest prices.
Free client software.
All required data client software retrieves from our center automatically (no more hunting for relays or paying hundreds ofdollars for open relays). No port 25 needed (not affected by port 25 blocking ISPs). No SMTP servers needed.
Free support, Free upgrade. "


The pot calls the kettle black. From a list of emails for Bobs list and the emailer iding itself as MIME-tools 5.503 (Entity 5.501)
Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)


his spam using Darkmailer.

Trying to unsubscribe: 1, Means you get even more spam - a 'feature' yet to developed by Bob - well you wanted spam didn't you ? or a misunderstanding of the word 'no' really means 'yes'

Other things Bob does well:

1. Autocreation of yahoo geocities (free webspace) aliases/accounts that link to websites if Bob is having problems (I am only using for Bob dataset examples only here, other spam that employs the geocities redirect I would not make the call about) I assume a script of some kind is run

If you think I'm being unfair Going back to broadcastingtoday.biz (old) Bob is known to 'lose' half million email addresses in his latest spam (experiment 1 item 75) but I'm afraid I'm not one of them. Then (on the 1st October) However good news he's back to 28 million addresses. So it seems one can never 'get off'

Lets be 'Geeky' and take a look at the mail.log file:

01/10/2004 03:11:54 PM  pD9E51757.dip.t-dialin.net (217.229.23.87) connected
01/10/2004 03:11:59 PM  Message 004E0061 (MessageID:
<JIUQTKJMWASOTLWYPXCURQ@fastestresponse.net >) received from
pD9E51757.dip.t-dialin.net (217.229.23.87) size 2466 bytes

01/10/2004 03:11:59 PM  SMTP Server: pD9E51757.dip.t-dialin.net
(217.229.23.87) disconnected. 1 message[s] received

01/10/2004 03:11:59 PM  Attempting delivery to: User
billing@Domain.name, admin@Domain.name admin@Domain.name from
donc@boardermail.com

RANGE 217.224.0.0 - 217.237.161.47
netname: DTAG-DIAL15
descr: Deutsche Telekom AG
country: DE
remarks: ******************************************************************
remarks: * Abuse Contact: http://www.t-com.de/ip-abuse in case of Spam, *
remarks: * Hack Attacks, Illegal Activity, Violation, Scans, Probes, etc. *
remarks: ******************************************************************
source: RIPE
details about them
route: 217.224.0.0/11
descr: Deutsche Telekom AG, Internet service provider
address: Deutsche Telekom AG D-90492 Nuernberg Germany
phone: +49 180 5334332, fax-no: +49 180 5334252
e-mail: abuse@t-ipnet.de

04/10/2004 10:46:40 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) connected
04/10/2004 10:46:50 AM SMTP Server: Message 0035B9F2 (MessageID: <15910kqk7432peji$23698272w846$053kt177thb720@pituitary>) received from 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) size 2434 bytesbeing cheap

04/10/2004 10:46:51 AM SMTP Server: 202-178-191-45.cm.dynamic.apol.com.tw (202.178.191.45) disconnected. 1 message[s] received

I will update this when new Junk from Robert comes in - Just that he loves sending me this 'gold'. Further proper examples of Roberts spams (and to view his 'fortune 100 client' list) can be seen in experiment 1 , and experiment 2.

Domain Owner spam,

I've done some fun stuff with spam they get, but its time to stop but i will continue to list Bobs spam here

nice... 

email advertise like this to 8,000,000 people this week for free..

http://www.broadcastemailinc.com/






the above noncommercial offer is only for noncommercial
charities only.  press on charity info on our web site for full
and complete details. this offer is not a commercial service 
and is not at all for sale or lease or trade of any kind.

    ??-Received: f338169d6d4450e3f72c2fa47c4e86b6ecf9322e
Delivered-To: ?@gmail.com
Received: by 10.78.123.3 with SMTP id v3cs31932huc;
        Tue, 11 Jul 2006 08:17:10 -0700 (PDT)
Received: by 10.36.118.8 with SMTP id q8mr7333176nzc;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Return-Path: < me @gmail.com>
Received: from adsl-68-88-212-155.dsl.rcsntx.swbell.net (adsl-68-88-212-155.dsl.rcsntx.swbell.net [68.88.212.155])
        by mx.gmail.com with SMTP id c12si2063739nzc.2006.07.11.08.17.08;
        Tue, 11 Jul 2006 08:17:09 -0700 (PDT)
Received-SPF: neutral (gmail.com: 68.88.212.155 is neither permitted nor denied by domain of gmail.com)
X-Message-Info: ONZUqZXI77morFicuQZzx921iwq489JQW73QZXpcyMc
Received: from hf2.freenet.de (168.104.239.56) by qzo251-p.inet.com.ua with Microsoft SMTPSVC(5.0.2195.6824);
	 Tue, 11 Jul 2006 20:09:04 +0400
Received: from inclusivesculpttvv500 (bouffant108.154.239.136)
          by sunpoint.net (bgsetw246) with SMTP
          id <123175477641887w0prg>
          (Authid: BillyPlatt);
          Tue, 11 Jul 2006 15:16:04 -0100
From: "me @gmail.com" <me @gmail.com>
To: "me " <me @gmail.com>
Subject: me
Date: Tue, 11 Jul 2006 11:11:04 -0500
Message-ID: <327f214vr629$44cio50f399$524sj88eazg@mediterraneandao699>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--30278814625304915155"

----30278814625304915155
Content-Transfer-Encoding: quoted-printable

<HTML>
<HEAD> STYLEBODY {FONT-FAMILY: "Arial"}TT {FONT-FAMILY: "Courier New"}BLO=
CKQUOTE.CITE {PADDING-LEFT: 2.6em; MARGIN: 0px; BORDER-LEFT: 0px solid}
SPAN.TABOOHEADER {DISPLAY: none} </STYLE> <META content=3D"MSHTML 6.00.2712.=
300" name=3DGENERATOR </HEAD> <BR> <BR>
<body bgcolor=3D#6666FF> <table bordercolor=3Dwhite cellSpacing=3D0 cellpad=
ding=3D0 width=3D750 align=3Dcenter bgcolor=3D#ffffff border=3D2 tbody t=
r td bgcolor=3D#003399 div align=3Dcenter table cellspacing=3D0 cellpad=
ding=3D10 width=3D"100%" border=3D0 tbody tr> td bgcolor=3D#000000>div =
align=3Dcenter> <B 
BR> <a href=3D"http://www.emarketingcorp.cn/"> <img src=3D"http://static.fl=
ickr.com/46/124948285_d9671caeb7_m.jpg"> /I
font face=3D"arial, helvetica, sans-serif" font size=3D2 color=3Dgray B=
R> BR I Charity/Non-Profit Organization Contact Only:br font color=3Dwh=
ite size=3D4>font color=3DwhiteLet The World Know About Your Organizatio=
n...BRa href=3D"http://www.emarketingcorp.cn/"></I><font color=3Dyellow=
><BR><font size=3D10>Click to Advertise Your Site toBR8,000,000 Internet=
 Users/Afont color=3Dwhite>
<font size=3D5><font color=3Dwhite><br>...Starting Within 24 Hours!<br>
<br>font color=3Dred> b>font color=3Dyellow>=3D> u>a href=3D"http://w=
ww.emarketingcorp.cn/">font color=3Dred> F-R-E-E TODAY ONLY/A>/U> font=
 color=3Dyellow><=3DBRBRfont color=3Dgray>font size=3D1>/U>ICLICK=
 ON "CHARITY INFO" ON OUR CORPORATE WEB SITE FOR FULL DETAILS ON THIS NON-=
COMMERCIAL OFFER.BR/UThis Non-Commercial Email and Non-Commercial Emai=
l Offer Have a Primary Sole Purpose to Assist Charity & Non-Profit Organiz=
ations Only.BR
/body /html
----30278814625304915155--

Return-Path: <JanellWeeks3@montevideo.com.uy>
Received: from Q-SI3TG06W0SN5N (eu100-163-8.clientes.euskaltel.es [82.130.163.8])
Received-SPF: fail (gmail.com: domain of JanellWeeks3@montevideo.com.uy does not designate 82.130.163.8 as permitted sender)
Received: from wrneer4.atlas.cz (211.88.172.41) by ox3-ckl.zmail.ru with Microsoft SMTPSVC(5.0.2195.6824);
From: "Customer Support Department" <JanellWeeks3@montevideo.com.uy>

* for the record our email boxes blocks any email request sent to it from south korea, or china - it solves the volume of spam problem for us, if you thinks that is hard - i suggest you ask to see the log file, china and korea love to fake whats they spend most of their  time sending - which is spam willingly, or unwillingly

Both take spammers money too.

Domains
Bob Soloway used to kep the domain registrars busy that is until even they got fed up with him, He has essentailly been denied the rights to register internet domains like .com/org/biz - that leaves him the the strange position of making work for the chinese registrar of .cn (chinas) internet domain name whom we all know love spam persons like Mr Soloway. - remember China hates spam not.

The list of domains that advertise Bobs spam are

IP addresses have been used, and yahoo redirects en mass to, .cn (China) is is currently his home in Cyberspace. Which is ironic becuase Bob likes to hire Americans - he just is not tolerated to.

So he's been around -

Current Operations

Host's operational now. You are looking for these zombies or the (original revised design. Those of you wondering where this design came from see the dmca theft section - 'fancy some spam for lunch') The text changes but the red text is an offer day, and no red text is full price sucker day.

	or the original 'new site' redesign
	Plus the classic - (old) the Bald deaf "SPEAK UP" eagle site design was used for cut price offers (left hand) - notice the lack of domain name too in the screen dump above. If you where one the 28 million spammees your probably still on the list. note: All images can be printed (link to image files in new browser window) full size if you desire it in png graphic format. Bob Spam Frieindly Isp's by region

Old Domains

Y

text in red denotes a remote observation from a report i've seen Remote report column denotes the email address could not be determined by myself (but the spam was deemed to be a Bob 'classic') .

- Red seen by others
- Black This information is observed by me alone - if you google hard enough im sure others will confirm these findings.

Search Engine Pollution

I am writing this but this appears to be new area for Robert Soloway - two domains for far submitmenow and nim-company - allow me think and flesh out with tables and other stuff see the 25 January 2007 blog entry if your impatient.

1. submit-me-now.com
2. nim-company.com

updates: There seems to be some questioning on the validity of these domains, but since seo's are spammers of garbage i see little reason to remove them.

As of the 1st August 2008 both these domains are 'defunct'.

Speaking of seo - I don't see a need for it, not that i care about ratings.

Whats Happening Now.

next

Building...

MAPS (finished): Latest map map3e Robert Soloway Map's . Visit some spambots and take a tour of Robert Soloways old haunts.

.

.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293 The Robert Soloway Locator url.

20 October: new home in Sheridan,OH Robert whom is now known as 37427-086.

A website by Michael Santos describes 'Sheridan' as:

The Federal Correctional Institution at Sheridan is part of a complex that holds three separate institutions. The complex is located about 90 miles south of Portland, Oregon, and those who serve time there enjoy the temperate weather of the Pacific Northwest. Most of the prisoner population comes from the Northwest and California. The medium-security FCI confines more than 1,500 men inside double fences that are separated and capped with coils of glistening razor wire. Inside the prison, the men are housed in one of eight housing units. Each housing unit holds between 150 and 200 prisoners. They are not allowed to spend time visiting in other housing units, though the men may congregate in small numbers on the recreation yard, in the education building, in the chapel, or during meals in the main chow hall. Adjacent to the medium-security FCI is a minimum-security camp that holds about 500 men. The men in the camp are held in relative freedom, as no fence confines them. They serve time under the honor system, and most complete their time in the camp without incident.

Which is not the life he is used to.

Somehow i doubt that Soloway will 'never never ever' spam again in some form or other so see you all in the future. Signing off - bananas in the falklands.

25 September: In http://deepbackground.msnbc.msn.com/archive/2008/09/22/1432186.aspx Do a short piece on Soloway before prison (24 September 2008). It's a more polished than the below interview during the sentence hearing and a copy of the 'deep' interview has been retained for future airing once nbc get bored and delete there content.

Soloway in in Federal care and 'in transit' sine 24th September to where ever he ends up. More soon, same prisoner number as before.

5 August: Comrade Vanessa Ho at Seattle Pi inorms us the 22 September is Roberts report date to be looked after by the federal government. Robert continues to put his foot in it.

He spends much of his time in the company of his lawyer, Richard Troberman, who declined to comment.   His posh Harbor Steps penthouse is long gone, exchanged for a small studio in the same downtown building.  I look back now; I never said 'bye' to a single person, he said of his Oregon days. In 2003, he wanted to start over and moved to Seattle with his cat, Simba. Vowing to scale down his business and spending, he wanted to go to museums, "get cultured"

That seems to discount Mr Tony Capozzola's account of who wears the trousers in this case from the Daily Breeze reporters story. And we know some of the motivations of the Seattle move now.

I dont quite get the association of being toy product seller on the internet makes you turn into being a vile spammer but then i must be plain dumb.

I wonder who gets to look after Simba ?

29 July: A video page has been created it can be accessed from most of the top menus on the site. A preparation of the words spoken by Soloway is also provided along with the moving pictures and audio if you find words better than trying to translate a non queens english accent. The words can be translated easier too into foriegn languages without it becoming a just a stream of words.

Mistakes are mine alone but thats what i heard Soloway speak, corrections to my text are welcome. I present the words as he spoke them and reserve observations on them for later. - You all know my views on the subject and its best to dig your grave and Soloway knows how to do that without needing our 'help' .

Lots of more updates i'm afraid. In the court page we have 2ndSupSentMemoSoloway.pdf 1stSupSentMemoSoloway.pdf and 1stSupSentMemoGovt.pdf which come from spamsuite.com dealt with the court page. IT IS NOT BORING

testimony of Steven Collins, proving that on a single day on which Soloway used the server he had rented (fraudulently) from Liquid Web to send fraudulent e-mails, he was initiating 4,468,306 such transmissions, at the rate of 71,882 per hour (and using 3001 proxy computers to do so.)

Not co-operating either with previous judgements - NOT BORING snipet

At almost 30 years of age, Soloway doesn’t work to pay for those luxurious accommodation; he doesn’t need to because his parents pay all his bills. The government notes that during the same 14 month period since his arrest, Soloway has made not one penny of payment in restitution to any of his victims - many of whom are known to the ...

We have video, and a interview and transcript of what robert said ouside courtfor those of us who like to digest the words and dont have the verbal road runner comprehension for even i find Mr Soloway belted out those words.

Court action is not yet over, i have seen no complete court report, and the restituion hearing is still to be heard - doj press release.

A contact informs me that Robert Soloway's website was indeed a template, since most of his site did not work quite where Mr Soloway paid for the the template, or could fix it is a point of discussion too.

Soloway takes Klonopin drug, that is not available in federal prison hence the 60 day stay of sentence.

24 July: Restition court sitting to come. Sorry no court transcript from the horses mouth yet but press coverage in this

The case has been closely watched because only a few such spam cases have ever been tried. A man named Jeremy Jaynes was sentenced in Virginia earlier this year to nine years in prison for his spam crimes, and Adam Vitale got slightly more than two years for a recent conviction in New York.

The prosecution argued that Soloway should get more prison time than any of the previous spammers, asking for a sentence of seven to nine years. "None of those cases, not one, comes close to this case in terms of the duration of the maliciousness, the harassment techniques, the high level of spamming activity that we have in this case," said assistant U.S. attorney Kathryn Warma.

However, compared with some other notorious spammers, Soloway deserved some leniency, his attorneys said. Soloway didn't damage anyone's computer, he didn't send out malicious code, and he never directed people to pornography, as some spammers have done, his lawyer Richard Troberman said. Jaynes, for example, had millions of AOL e-mail addresses that were stolen from the ISP (Internet service provider), and he was earning as much as US$700,000 a month from his activities, Troberman said. By comparison, the government figured conservatively that Soloway earned more than $700,000 in three years.

But the Soloway case was an opportunity for the courts to dissuade online criminals from continuing their work, Warma said. "A disturbing theme we repeatedly saw from the complainant is, why isn't the law being enforced on the Net? Why isn't CAN-SPAM being enforced?" she said. "This individual has refused to stop his criminal conduct, notwithstanding two separate civil judgments and an injunction by a U.S. federal court judge. I suggest to you the only effective way to stop Soloway is a long prison sentence during which he'll be incapable of continuing this criminal activity." Soloway has previously lost cases brought against him by Microsoft and by an ISP in Oklahoma, yet continued to spam.

Pechman said it was difficult to come up with a sentence for Soloway because there have been so few other spam cases in the courts and because the legal system doesn't yet have appropriate sentencing guidelines. "This statute really needs a set of guidelines written and tailored to the CAN-SPAM act, tailored to the evolving computer science that allows people to engage in this activity," she said. "The current guidelines are not really very helpful," especially when CAN-SPAM violations are combined with other crimes, she said.

Soloway apologized to the judge and to his family, admitting that his actions were wrong. "There is no one else to blame but myself," he said, before the judge handed down her sentence.

Soloway has apologized for his activities before. After he was investigated in 1999 in California for spamming activities, he told detectives that he was sorry and learned a lot, Warma said. "He then moved on to another state and immediately engaged in the same behavior," she said.

It has been more typical for Soloway to boast about his techniques than to apologize for them. In online forums he would brag that he would never have to pay the millions of dollars the civil courts ordered him to pay.

He claims he lived in a modest household growing up but went to school with kids who were wealthier. He didn't have friends and always figured that if he earned a lot of money, people would like him, he said. "The only time people ever talked to me was when I made money or spent it," he said. "It was completely wrong. I'm very embarrassed and ashamed."

Microsoft attorney Aaron Kornblum attended the hearing and said he was pleased with the results. "Soloway repeatedly broke the law. He defied a federal judge and he made a lot of money. This sends a strong message."

Soloway was one of the first spammers Microsoft sued when, in 2003, the company decided it was time to try to put a stop to spam using legal means. At the time, Soloway was known as the third-most-prolific spammer in the world, Kornblum said.

In addition to the prison term, Soloway will serve three years of probation and must do 200 hours of community service.

The government has also asked for a separate restitution hearing.

For the reord i hated Soloway when he had money and still hate the bastard now. Seems a little unfair to blame the rich kids, he (or his parents) it appear have some deep psychological issues as most neurosies with children are associated with the parents.

in this the number of kings of spam is commented on. a common theme is this.

"I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails," he [soloway] said.

“[soloway am very embarrassed and ashamed.”

Spamhaus.org's view.

Richard Cox, chief information officer of anti-spam group Spamhaus, told SCMagazineUS.com on Wendesday that he was a bit disappointed by the lighter-than-requested sentence imposed on Soloway. But Cox said he takes solace that a number of other high-profile spammers have been charged under federal laws.

"At least we are seeing consistency of these guys going down," he said.

Soloway replied: "I was used to living a certain lifestyle and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt, the newspaper reported.

When federal agents raided his upscale apartment in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes valued at $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Soloway has been living in a halfway house since he posted bail. He'll stay there until he surrenders in two months.

He added, "I am happier than ever because people actually talk to me for who I am."

Redondo Beach attorney Tony Capozzola, who represents Soloway, said the prosecution was overzealous in asking that his client spend about nine years behind bars.

But Capozzola said the judge, in sentencing his client to 47 months in prison, rightly considered how new Soloway's crimes are and rejected the prosecution's estimates of how much monetary damage Soloway's activities caused.

He said Soloway will likely be released in about two years, and will serve the time at a prison "camp," which will allow him to work.

"I'm really happy with that," Capozzola said. "I think a fair sentence came about in this case."

He said he spoke with Soloway's family, which still lives in the South Bay, after the sentencing.

"They are relieved that the matter is over," Capozzola said. "They do understand that some punishment was required, and they don't have any argument with the court's findings."

Soloway pleaded guilty in March to one count each of e-mail fraud, mail fraud and tax evasion.

Because this area of law is so new, both sides agreed that there were some challenging issues.

Soloway broke the law two ways: He made fraudulent misrepresentations about his service to customers and personally engaged in spamming.

According to the charges, he sent tens of millions of e-mails to advertise his company, which mostly operated under the name Newport Internet Marketing, from November 2003 until his arrest.

He told potential customers that, for $495, they could have an advertisement sent to 20 million e-mails, or receive software that will allow them to send up to 80 million e-mails themselves.

He claimed that the "broadcast e-mails" were legal because they were to people who agreed to receive messages, and he promised a money-back guarantee and around-the-clock technical support.

Soloway was arrested as part of Operation Bot Roast. According to the Department of Justice, a botnet is a collection of comprised computers that fall under the remote command and control of a criminal "bot herder" or hacker.

Most victims don't know this has happened, but their computer - and their domain names and e-mail addresses - then become the conduit for identity theft and spam.

Assistant U.S. Attorney Kathryn Warma said in court filings that Soloway's crimes were "markedly malicious" and he made "brazen and even boastful claims that he is above the law."

His activities continued even after he was ordered to pay nearly $7.9million to Microsoft in May 2005 and an Oklahoma Internet service provider more than $10million in September 2005. He never paid.

Warma argued and presented evidence to show that Soloway's actions cost millions of dollars - and warranted the higher sentence.

Soloway's attorneys argued that the cost to spam victims who only had to hit the "delete key" is minimal.

"Someone who sends unsolicited spam should be punished, but when you compare this with the federal crimes of major distribution of narcotics and violence, and bank failures caused by greed, this crime certainly does not rise to a sentence of 10 years in prison," Capozzola said.

Soloway's attorneys also asked for leniency because he has Tourette's syndrome. He has two months to surrender so that he can work out his medication issues. 

Been a while since Tony Capozzola has been heard of. theolympian.com a Seattle newpaper notes

Soloway said he is deeply in debt and owes more than $17 million in civil judgments.  ... So, are they victims or perpetrators?" Pechman asked

There is a point when the judge misses the point - yes spam can be called marketing too, and when spam is sold as marketing does that make marketing as evil as spam ? - remember i just log the spams i got, i never bought the soloway lies.

Paul Shukovsky of seattlepi.com seems to have been in court

'Spam King' gets nearly 4 years in prison
Judge likens sending fraudulent e-mails to Internet pollution

By PAUL SHUKOVSKY
P-I REPORTER

U.S. District Judge Marsha Pechman ended the reign of the so-called Spam King, who earned his title by sending out millions of unwanted e-mails, by sentencing the Seattle man to nearly four years in prison Tuesday.

Robert Soloway is the second person in the country to be convicted under the Can-Spam Act for flooding the virtual world with fraudulent e-mail messages. His sentence of 47 months is less than half of what prosecutors wanted.

Soloway told Pechman that he did it for the money to pay for fine clothes and a luxury apartment. But Pechman likened him to a polluter who had fouled the Internet.

Investigators said Soloway used software called Dark Mailer to tap into a network of "botnets" -- zombie computers that he used to send bulk e-mails with anonymity. He also sent out advertisements for his commercial e-mail clients using the addresses of real people without their permission.

Assistant U.S. Attorney Kathryn Warma called spamming a serious problem and compared the Internet to "a free-ranging Wild West" that is a welcoming environment to such cybercriminals as Soloway.

The prosecution and the defense jousted Tuesday over aggravating factors that could persuade the judge to increase Soloway's time behind bars.

Although Soloway acknowledged that he sent out a huge number of illegal spam e-mails, defense attorney Robert Wayne said there was "not a shred of evidence" that he used zombie computers to do it.

Soloway violated the Can-Spam Act, in part, by falsifying the header information in his e-mail messages. The program he used automatically substituted the e-mail recipient's name for that of Soloway's, making it appear that the recipient had sent a message to himself or herself or used bogus addresses in the from field. The purpose of these digital gymnastics was to get around any spam filter on the recipient's computer.

The sentencing Tuesday followed guilty pleas from Soloway in March to single counts of e-mail fraud, mail fraud and tax evasion.

Reviled by anti-spam groups, Soloway sent more than 90 million e-mails in just three months through two servers, according to court records.

Warma and fellow Assistant U.S. Attorney Richard Cohen had asked Pechman to send Soloway away for nine years. Richard Troberman, another of Soloway's attorneys, wanted a sentence of two years at the federal prison camp in Sheridan, Ore., and a fine of less than $100,000.

Pechman first heard from Soloway, then chose a middle ground.

Soloway -- composed and smartly attired in a conservative suit and muted tie -- told Pechman: "I take full responsibility for everything I've done. I am sorry for all the people that got the e-mails."

Pechman asked Soloway why he continued with his spamming after another judge in a civil lawsuit enjoined him from continuing.

Soloway spoke frankly. "I was used to living a certain lifestyle, and I tried to maintain it. I tried to live beyond my means.

"It was a new law. I thought I would find a loophole."

Soloway's spam scam produced an income as high as $120,000 in 2005, he said. But it was not enough to keep up with his credit card debt.

When the feds raided his upscale apartment at the Harbor Steps in downtown Seattle, they found 24 pairs of sunglasses worth $3,724, and 27 pairs of shoes worth $7,412.

"I built my entire lifestyle around a facade that was not really who I was," Soloway told an attentive Pechman. "I was so scared of losing it. I am very embarrassed and ashamed."

Now living in a 400- square-foot apartment under the supervision of federal officers pending his imprisonment within 60 days, Soloway said, "I am happier then ever because people actually talk to me for who I am."

Prosecutors now want to seize nearly $705,000 in Soloway's property, including his computer. But he said he has little left to seize.

The federal prosecutors asked Pechman to send a message by imposing the maximum sentence of five years for e-mail fraud alone, the violation of the Can-Spam Act.

"The government believes that it is important uniquely in this unprecedented e-mail fraud case to recognize and pronounce publicly, and emphatically, that fraud in e-mail is a serious crime," Warma and Cohen said in a sentencing memo to the court. "The financial and societal costs of this crime are immense."

Soloway committed his crimes on the Internet "for the very reason that they would maximize his criminal reach to hundreds of millions of people worldwide, also have the concomitant potential to inflict corresponding damages of a heretofore unimaginable scope, to victims in numbers that were impossible and even incomprehensible with the use of 'traditional' tools."

Pechman did send a message. But it was neither as sharp as the prosecution wanted nor as lenient as the defense sought.

The judge likened spam to pollution because it is "spewed out ... has an impact on everybody who has a computer, and there are some people who are poisoned by it, and there are others who are merely annoyed."

Pechman called criminal spamming "new territory" in jurisprudence. "There is not much case law." And she noted it's close to impossible to accurately count the number of Soloway's victims and to quantify the damage done.

"We have an emerging social problem," said the judge. "The World Wide Web has given us a new criminal playground."

Many people -- some of them quite brilliant, some of them quite mad -- have found their way there, she said.

"Mr. Soloway went into his bedroom at age 11, turned on his computer and that froze him in time in terms of social development."

Pechman gave Soloway at least 60 days to report for imprisonment so that he can resolve problems with medication for Tourette's disorder, which is characterized by involuntary movements and verbal outbursts. 

not a good tiper either

TOMMYPRAXEDES at 7/22/08 5:03 p.m.

i have given this guy a cabride before,he was vry arrogant and stiff me on tips

In

In court on Tuesday, Pechman likened Soloway to an 11-year-old boy who sat down at a computer years ago and never grew up.

In kirotv has a longer interview 11 minutes.

Dont like the scumbag - oily I expect that he shall become a problem on his release.

21 July: Court to sit is comfirmed.

United States District Court Calendar
     Honorable Marsha J. Pechman
     Courtroom 14206
     Tuesday, July 22, 2008

     Eileen Scollard, Courtroom Deputy
9:00am      CR07-187MJP        U.S. VS ROBERT 
                                       ALAN SOLOWAY        
                               Kathryn Warma
                               Sentencing                             Richard Troberman ..

hours 3 1/2                            on bond
Court reporter: y/

17 July: Thank you for the viagra spams 74.55.158.66. Another priceless idiot.

a penny for your thoughts ? J D Falk Local news komo tv - gives us the picture while the Judge does her thinking on fraudster/idiot we all 'love and care' about so much - oh my that soap is slipperly.

A 'mr botnet' related item in this

From the stand on Monday, investigators revealed some of the techniques that Soloway allegedly used to send out massive amounts of e-mail. After the government seized Soloway's servers from GoDaddy, a hosting company, investigators found files with as many as 10 million e-mail addresses on each server

.. also found Dark Mailer software on each server. Dark Mailer is a program that users can set up to automatically send out mass e-mails, drawing from databases to fill in the to, from, subject and body fields of the e-mail message. It also can spoof the header information, making it difficult to trace where the mail came from.

Selling the tools used by spammers is easy money, at least until you get caught. Just ask Adam Sweaney, a man charged with computer fraud who took the stand at the sentencing hearing in Seattle for Robert Soloway, the so-called spam king.

Sweaney said he earned about US$2,500 a month for a couple of years selling botnets that could be used for a variety of activities including sending spam e-mails. He didn't even write them himself, but he traded or bought them in online forums, he said.

Sweaney didn't sell a massive volume to a wide variety of people -- a typical week might involve selling three or four botnets to any of his six regular customers, he said. He also sold millions of e-mail addresses to spammers, including one who, unfortunately for Sweaney, was an undercover U.S. Federal Bureau of Investigation agent. 

One such victim was Thomas Miller, who runs a nonprofit, nondenominational religious organization that counsels death row inmates and helps jobless and hungry people in Ohio. Newport Internet Marketing offered to run a free e-mail campaign for Miller, who was looking to raise money for his organization. Instead, Miller's Web site was ultimately shut down by his hosting company after the company found that large amounts of spam e-mail were being sent from his account, purportedly by Soloway.

Miller estimates he lost $12,000 to $24,000 throughout the debacle while he scrambled to get a new site up and lost potential donations because he was without the site. He said he testified at the hearings because it was the right thing to do, but he doesn't have high expectations. "I don't believe I'll ever get anything," he said. 

13 July: We have sentencing recommendations and they are in the court page. Reading the Govt's evidence file (175 pages) 'OttO' at the Better Busines Bureau of OR,western WA and Alaska comes across as a bit useless retard - if i where them i would get rid of Otto for being useless.

Being 'foriegn' my knowledge of us case law isnt a strong point which is what the Troberman brief is mostly on tryng to reduce the sentence.

However with court doc's/enraged clients/statements from Robert himself about not cooperating and the like and a total disregard for the law as evidence I am not quite sure how thats going to 'wash' after all Robert might as well declare that the law should not apply to him. It's not just one rogue parking ticket.

In Robert is on the TV news America only it appears - i cannot view this.

In page 12 paragraph 43 (page 18 of the Troberman sentence pdf) It seems we make an entry.

[..] was involved in hacking and posted vile, vulgar, and twisted messages
 
According to Troberman we also hacked into the Swedish Woman's Educational Association (SWEA) website.

vile ? - hacking - you'd be amazed what a bit googling here and there turns up with. Many hackers would be upset if they knew that using google (or any other search engine) made them into 'hackers'.

Remember citizens next time you click on a url that's 'hacking' according to Mr Troberman. Lol.

Troberman and Soloway should both remember that if he had not spammed me to start with, or stopped continuing to spam me then this site and my 'interest' in it would have not existed.

12 July: Comrade Ed sends this picture of the spammer Robert Soloway. This is a first since it is the first official picture of him. We have the the unattributed and now defunct myspace picture (looks the same guy with a bit of extra fat). All pictures/videos welcome. IP geoloation witll probably prevent me getting this direct.

Theres a lot of stuff i need to review before i put it here so expect some daily updates.

Comrade Buss_Error in NANAE (thats nntp) hilights a few of the sticky wicket (the game of cricket) that Mr Troberman invokes on the mental state of Robert.

In the interest of full disclosure, here's the quote:

"In a letter to the court, David Comings, a leading world expert on
Tourette's Syndrome who first diagnosed Soloway's condition in 1988,
said Soloway's "genetic impulse disorders, Tourette's Syndrome and
attention-deficit hyperactivity disorder have contributed to his
(uninhibited) behavior and affected his judgment."

There is no page titled "David Comings" on wikipedia.
Searching Google: 

http://tourettenowwhat.tripod.com/GeneBomb.html

Hmmm. "controversial work". With this bit:
"In a remarkable series of papers by Comings and Comings in the
Journal, a number of claims are made that have profound implications
for future research on Gilles de la Tourette syndrome (TS).  Their
assertions fall outside of the mainstream of the very extensive TS
literature that has developed over the past 2 decades. The novelty of
the conclusions and the visibility of their presentation require that
the papers receive thorough discussion."

I'd hesitate to say "Quack for hire", but being "controversial" is
often a hallmark of such.

Tourette's Syndrome:
http://en.wikipedia.org/wiki/Tourette%27s_Syndrome

no cite for genetic impulse disorders. Perhaps this?
http://en.wikipedia.org/wiki/Impulse_control_disorder

or this?

http://en.wikipedia.org/wiki/Obsessive-compulsive_disorder

and for attention-deficit hyperactivity disorder

http://en.wikipedia.org/wiki/Attention-deficit_hyperactivity_disorder

Hmmm. OK, he can't control what drops out of his mouth (Tourettes).
Relation to spamming - NONE

Hmmm, Impulse control? Possible connection to spamming. More as one
GETTING the spam than SENDING it.

ADHD? Connection to spamming - NONE. In fact...

That deals with that problem. If your USA state based attorney general like Andrew Cuomo of NY isnt bannng all usenet then the discusion is worth a peek.

Being foriegn to most of the American judicial process i am pleased to report that the guilty plea by bob means no appeal.

I wonder if Jesus will turn up on monday and claim Soloway was on a 'mission from god' ?

11 July:In http://seattlepi.nwsource.com/local/370341_spamking11.html It is expected that events are to have be concluded on the 14 July (monday)

'Spam King' to be sentenced
Two-day hearing starts Friday for man who sent 90 million e-mails

By MIKE BARBER
P-I REPORTER

The lineup of people to testify in the sentencing of the 28-year-old so-called King of Spam is so long that it will require an unusual two-day hearing beginning Friday in federal court.

Robert Alan Soloway, only the second person to be convicted of criminal spamming under the 2004 "Can-Spam" law, pleaded guilty in March to single counts of mail and e-mail fraud, and to tax evasion.

The plea was entered 10 days before his trial was to begin on 37 more counts, including multiple counts of those crimes as well as wire fraud, money laundering and aggravated identity theft.

In the government's sentencing memorandum filed Monday, Soloway is said to stand out "worldwide for the volume and markedly malicious nature of his criminal spamming activity; the fraudulent 'spam promotion' sales scheme associated with it; and for brazen and even boastful claims that he is above the law and anyone -- even federal judges -- who would dare attempt to seek his compliance with it."

U.S. District Judge Marsha Pechman is expected to sentence Soloway following the conclusion of testimony slated for Monday.

The charges carry a maximum sentence of 20 years in prison and more than $500,000 in fines.

Prosecutors Kathryn Warma and Richard Cohen, both assistant U.S. attorneys for Western Washington, have asked for nine years in prison and a stiff fine in the $400,000 to $1 million range.

Soloway's attorney, Seattle lawyer Richard Troberman, responded with a recommendation of two years in prison at the Federal Prison Camp in Sheridan, Ore., and a less severe fine under $100,000.

Troberman argues that the government's recommendation is disproportionate to the crime and wants Pechman to consider that his client suffers from behavior-altering conditions -- Tourette's syndrome, attention-deficit disorder and "oppositional defiant disorder" -- for which he takes medication.

Federal prosecutors sought the two-day hearing to provide experts, witnesses and victims from around the nation and overseas to explain the technologies and evidence schemes in light of the 2004 law, and demonstrate how victims were affected between 2003 and 2007.

Victims, who include a businessman from England, are expected to testify first. Others include an Oklahoma man who never saw a penny of a $10 million judgment he won against Soloway in 2005; FBI and private computer analysts and security experts; and Adam Sweaney, who is himself awaiting sentencing on federal criminal spamming charges.

Sweaney, court papers say, will testify that Soloway rented a network of hacked computers, also known as a "bot net," to expedite bulk e-mail, or spam.

Soloway ran afoul of the Can-Spam Act by falsifying the header information in his e-mail messages to get around spam filters, investigators have said. That was done by using a program that automatically substituted the e-mail recipient's name for Soloway's, causing messages to appear as though recipients had sent them to themselves.

Investigators earlier this year said Soloway used software called Dark Mailer, which allows users to tap into a network of proxy computers to send spam anonymously.

Soloway, who is internationally reviled by anti-spam groups, sent more than 90 million e-mails in three months through just two of the servers he used, investigators said.

In his written response to the government's recommendation, however, Troberman argues that the federal case, as well as some victims' claims, are overblown.

"Without question Mr. Soloway has been a nuisance to Internet users, but the court should keep his offense in perspective," Troberman wrote. "What he did was send huge amounts of e-mail over the Internet advertising his product and service, often using forged headers to people who did not want to receive it."

Troberman said Soloway never sent worms or viruses to damage computers, for which others have received less severe sentences.

Essentially, Troberman argues, Soloway has never faced charges in the criminal justice system and has learned his lesson. "His likelihood of recidivism is low," he wrote, saying Soloway "will remain law-abiding."

Before criminal charges were brought against him by the Justice Department in May 2007, Soloway had been found guilty in several civil spam cases, including a judgment Microsoft won against him in 2005 worth more than $7 million. An Internet service provider in Oklahoma was awarded a $10 million judgment that same year.

The federal judge in that case enjoined Soloway from initiating across state lines commercial e-mail messages that contained false or misleading information.

But Soloway disregarded that order, prosecutors say.

"Remarkably, Soloway brazenly defied Judge Thompson's permanent injunction every day thereafter, until the day of his arrest some 15 months later," the prosecution's sentencing memorandum says.

Further, prosecutors say, Soloway evaded collection efforts and publicly boasted about it on an Internet chat room, writing:

"I always win ... regardless of the judgment amount ... losing is not an option, and I never ever, ever have to pay a single cent to anyone."

According to court documents, Soloway began his "broadcast e-mail" business in California when he started up Newport Internet Marketing in 1997. After California passed one of the country's first criminal spam laws in 1999, several police agencies there began investigating Soloway in connection with an array of spamming complaints, including one from the Japanese government. While charges were never filed, police noted that Soloway had "apologized for his e-mail practices" and said "he has learned a lot."

Soloway then moved to Oregon, sending spam from several locations but also, his defense lawyer notes, in 2003 helping form a group for people with mood disorders called Moody Blues Stress Workshop.

In a letter to the court, David Comings, a leading world expert on Tourette's Syndrome who first diagnosed Soloway's condition in 1988, said Soloway's "genetic impulse disorders, Tourette's Syndrome and attention-deficit hyperactivity disorder have contributed to his (uninhibited) behavior and affected his judgment."

What is interesting about this is that the 'charity help' seems to be one that nobodies has every heard of or even Robert failed to boast of and they be "Moody Blues Stress Workshop." which i cannot find any reference to via a few quick and dirty google searches. Another lie that his Lawyer is 'broadcasting' for Soloway ?

That's normal Soloway tactics though. Very under the radar. Pictures and court observations needed, can you help ?

6 July: OK the start, the second and yet another You may begin to understand why i (and others) dont like spammers. The pages are rather old but from this Robert Soloway is clearly big in spam, his legacy is there for all to see whatever happens on Friday.

In this the second is a class example from 2005. Remember that wave ? on new years day. This was Spam 26. Enjoy

Subject: *SPAM?* Re: your web site might benefit from this...
From: Aida Goss richardg@centralpets.com
Date: Thu, 13 Jan 2005 18:41:59 +0100
To: yes @btconnect.com
Return-Path: no1@cashette.com
Delivery-Date: Thu, 13 Jan 2005 17:47:06 +0000
Received: from c2bthimr06.btconnect.com (actually host 206.73.73.194.in-addr.arpa) by dswu27.btconnect.com with SMTP-IBMR (XT-PP) with ESMTP; Thu, 13 Jan 2005 17:47:05 +0000
Received: from 200-171-244-37.customer.telesp.net.br (200-171-244-37.customer.telesp.net.br [200.171.244.37]) by c2bthimr06.btconnect.com (MOS 3.5.4-GR) with SMTP id BOR35968; Thu, 13 Jan 2005 17:17:11 GMT
X-Message-Info: FXfahIJY79zeZ6IMWxcnTCX190SROtflSK5X51F1c3IU
Received: (from j9sedge@localhost) by vzi2-bulrush8.x1rtf.bluebottle.com (7.28.61/3.61.16) id kw146TBW96lgf694; Thu, 13 Jan 2005 12:47:59 -0500 GMT
X-Authentication-Warning: wyh87-madeira01.juv341mr.bolt.com: u65dispensable set sender to jimmack@marchmail.com using -t
MIME-Version: 1.0
X-Old-Subject: Re: your web site might benefit from this...

Click to Email Your Web Site
to 28 MILLION PEOPLE

=> F-R-E-E Today Only <=

If You Are a Non-Profit Organization That Aids the Tsunami Victims. Visit Our Web Site for Details on Our Offerings.
If You Fit the Criteria Above and Are Interested, Mail Us At: Tsunami Relief Non-Profit Offer, Box 1259, Seattle, WA 98111.
Every So Often We Will Email You A New Non-Commercial Special for Specific Non-Profit Causes.

    Unsubscribe From Our Non-Commercial/Non-Profit Email List
    (Please Note That The Primary Purpose of this Email is Non-Profit in Nature & is Exempt From S.877 Email Guidelines Because of! This)

The 'Tsunami Relief Non-Profit Offer' hmmm thats something to with Viagra right ?. Beware there's more to this story than meets the eye.

There's probably computer crime,theft (Brazil),use of a bot net, fraud, etc here. Please look beyond the sheep and see the wolf in lambswool jumper. Ask yourself - how does spamming via a computer in Brazil help an American citizen who is nowhere near the disaster zone ? The answer is it does not.

No charity has ever comfirmed any donation either publically. So I assume that no donations where made.

4 July: From http://www.wawd.uscourts.gov/calendars/JudgeMarshaP.PechmanCalendar.htm content changes every week so here is a pdf.


US Court
Sentencing schedule

U.S. Federal Courthouse | District Court | Calendar | Print
                         Page 1 of 1


 United States District Court Calendar
           Honorable Marsha J. Pechman
           Courtroom 14206
           Friday, July 11, 2008
           Eileen Scollard, Courtroom Deputy


 9:00am   CR07-187MJP     U.S. VS ROBERT ALAN SOLOWAY         
                Kathryn Warma           

Sentencing                        Richard Troberman          					  Richard Cowan
                                  on bond
   All day                            Court Reporter: y

OK see you all soon.

27 June: Its been seven days since a sentence was due to be passed/considered in Seattle, i seem to be drawing blanks on the progress of this case (timezone 12:00 gmt). If you know whats going on please drop us a note.

20 March: Thanks to John Levine at http://www.circleid.com/posts/83207_more_the_soloway_spam_case/ we have a copy of the plea. - A copy of the pdf document is here.

As mentioned on Opsan: no Tony Capozzola 'hotshot' lawyer link (where he go ? pasta problems* ? '*Italian lawyer'). Troberman the first lawyer seems to be back in control. It implies that assets are still hidden and that Soloway and family have withheld information.

It is worth a read http://thisfool.com/soloway-73.pdf.

15 March:Newsflash: GUILTY PLEA !!!!!

FOR IMMEDIATE RELEASE March 14, 2008 SEATTLE SPAMMER PLEADS GUILTY TO MAIL FRAUD, SPAM AND TAX CHARGES Man Sold Spamming Software and Spamming Services Impacting Millions of Computers ROBERT ALAN SOLOWAY, 28, the owner of NEWPORT INTERNET MARKETING CORPORATION of Seattle, Washington, pleaded guilty today in U.S. District Court in Seattle to Mail Fraud, Fraud in Connection with Electronic Mail, and Willful Failure to File a Tax Return. SOLOWAY was indicted in May 2007. SOLOWAY, dubbed the “Spam King” by investigators will be sentenced by U.S. District Judge Marsha J. Pechman on June 20, 2008. According to records filed in the case, between November 2003, and May 2007, SOLOWAY operated NEWPORT INTERNET MARKETING CORPORATION (NIM) which offered a “broadcast email” software product and “broadcast email” services. These products and services constituted “spam” i.e. bulk high volume commercial email messages that contained false and forged headers and that were relayed using networks of proxy computers (including “botnets”). SOLOWAY and NIM made a number of false and fraudulent claims about the products and services on their website. Among them was a claim that the e-mail addresses used for the product and services were “opt-in” email addresses. The website promised a satisfaction guarantee with a full refund to customers who purchased the broadcast email product. However, customers who later complained about the goods and services they had purchased, or who asked for refunds, were threatened with additional financial charges and referral to a collection agency. SOLOWAY spammed tens of millions of email messages to advertise the NIM websites from which he sold his product and services. Soloway constantly “moved” this website, which was hosted on at least 50 different domains. In the plea agreement, SOLOWAY further admits that in tax year 2005 he earned $309,725 in gross revenue, but failed to file an income tax return. Mail Fraud is punishable by up to twenty years in prison and a $250,000 fine. Fraud in Connection with Electronic Mail is punishable by up to five years in prison and a $250,000 fine. Willful Failure to File Tax Returns in punishable by up to a year in prison and a $25,000 fine. At the time of sentencing Judge Pechman will determine the loss amount and the amount of restitution, and the items to be forfeited to the government as proceeds of crime. SOLOWAY agrees in his plea agreement to submit to a polygraph examination regarding his assets. The case was investigated by the FBI, US Postal Inspection Service and Internal Revenue Service Criminal Investigations (IRS-CI) in conjunction with the Computer Hacking and Intellectual Property (CHIP) Task Force. The case is being prosecuted by Assistant United States Attorney Kathryn Warma.

Roll on June, It is my intention to continue to watch Robert Soloway as a fraudster and as a menance to anybody with an email address it needs to be done.

The evidence in this file of his activites will also remain. It has taken a year and twenty days from May last year to the judgement at this point.

A message for Judge Pechman

Robert Soloway has caused damage and fraud worldwide as an observer of the person you will have in your court may i please point out that he is not just a 'menance' to americans but to anyone with an internet connection which means that europe,india,south america and many other places have had to deal with and clean up his mess in some form. I hope that you will see fit to use the upper limits of the sentencing guidelines. Bananas in the Falklands

with 3/40 (other 37 charges dropped as part of the deal). Robert has the self admitted title of fraudster. - Its been a good day. I wonder how Tony Capozzola is going to explain this one ?

4 March: Related news that Jeremy Jaynes (a spammer) tried to use the 'free speech' arguement and lost in court, I wonder if Robert's motley legal team will use this ?

People seem to forget that freedom of speech means just that nothing more. Now with computer crimes commited worldwide by Robert, and that Robert had to rely on Chinese isps, not forgetting the theft charges. Means that nobodies rights have been abused.

Freedom of speech should be cherished, and if the 'advertising industry/pracitioners' ever needs this protection you know theres a problem.

21 January:Reading an interesting book about our friends the chinese which may explain why spammers in China switch from China telecom to netcom and China Mobile (things that Robert certainly did)

In Will Hutton's book the writing on the wall - china in the 21st century isbn: 9780316730181 on page 150 (Chapter six) quotes an economist article of 2005.

The soe* supervisory boards do not make this decisions. In the recent past the ceos of China Telecom,Netcom, Mobile and Unicom were arbitrarily swapped arround because the party was concerned that the companies were becoming too competitive and wanted to to encourage a more collaborative culture

*soe means critical chinese industry to the communist party ** party here means little red books, not dancing and drinking.

Its an interesting read.

11 January: Paul Shukovsky at the Seattle PI writes that the charges against Robert Soloway now number 40, and the event in March shall have a little of an 'international flavour' missing until now from us trial. In http://seattlepi.nwsource.com/local/346878_spamking11.html We have a non american victim (no not i)

Paul also writes that Robert is apparently 'reviled' by many - hmmm i wonder why. Perhaps somebody might explain this to me (humour btw).

A number of spammers try to defend Soloway here in the sound off section.

8 January: Our Kung Foo friend in opsan (Sensei) informs us that things have been set back further

Fraud and Related Activity in Connection with Electronic Mail 1 charge Pending Mail Fraud - Frauds and swindles 10 charges Pending Fraud by wire, radio, or television 5 charges Pending Laundering monetary instruments to promote specified unlawful activity 13 charges Pending Aggravated identity theft 6 charges Pending Falsifies header information in multiple commercial electronic mail messages 1 charge Pending Internal Case Number: 2006R01674 Court Docket Number: CR07-0187 A trial is scheduled before Judge MARSHA J. PECHMAN on March 24, 2008, 09:00 AM at United States District Courthouse, 700 Stewart Street, Seattle, WA 98101 in the case which involves ROBERT SOLOWAY.

In doc 295 The swedish connection becomes clear

Mr. Soloway has dual United States/Swedish citizenship by virtue of birth, pursuant to Swedish law (a child born to a Swedish mother is automatically a Swedish citizen) that went into effect nine days before his birth. Robert's mother obtained Robert's first Swedish passport in 1991 (at age 11) based on advice she received from a U.S. Customs -6- official. See declaration of Rachelle Soloway, attached hereto as Exhibit B. To avoid losing his Swedish citizenship, it was necessary for Robert to make application to the Swedish government for permanent citizenship before age 22. Accordingly, Robert submitted an application in 2001, just prior to his 22nd birthday. The application was approved on July 10, 2001.... As set forth in his Motion for Review, Robert's connections to Sweden are quite tenuous. His only "close" relative in Sweden is his eighty-five year old grandmother, who he has seen only once in the last twenty years (on a trip with his mother to celebrate his grandmother's eightieth birthday). Robert does not speak Swedish, and his grandmother does not speak English.

Sounds like the money/tax connection is under control by the Swedish and US tax authorites.

We all (from Opsan) get a healthy credit in the court document care of Mr Troberman - my comment about his possible 'retarded' cd-r skills gets a mention.

Countdown timer reset again - Robert still has time to leave and flee, so place your bets now! I'd like to say hello to Tony Capozzola who if our geolocation service is correct means he is visiting us - hi Tony, I assume to that the other one is listenting in.

Opsan - Should we move to use email ?

6 January: One day to Court (will he or wont he turn up and be called a loon?) But the 35 charges have become 37 (+2 from the irs)

At this week's arraignment he will face additional counts of wire fraud and aggravated identity theft, as well as two misdemeanor charges stemming from his failure to file income-tax returns. The IRS says Soloway had a gross income of $309,725 in 2005 and $294,334 in 2006, yet failed to file returns.

Source Seattle times (link opens in new window). They also confirm the Tourette's syndrome claim.

3 January: A happy new year. Being an idiot i fixed the countdown script thing (january is 0, not 1) The fun and games in court begin on Monday.

I hope to see you all soon.

12 December: Being that Christmas came early (June) this year for a lot of us. I was inspired to pen this based upon the carol.

On the first day of Christmas,
Robert Soloway did send to me
28 million email addresses for free.


On the second day of Christmas,
Robert Soloway did send to me
two Country music bands a spamming
and 28 million email addresses for free.

On the third day of Christmas,
Robert Soloway did send to me
Three logo designers designing logos for free
two Country music bands a spamming
and 28 million email addresses for free

On the forth day of Christmas,
Robert Soloway did send to me
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the fith day of Christmas,
Robert Soloway did send to me
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the six day of Christmas,
Robert Soloway did send to me
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the seventh day of Christmas,
Robert Soloway did send to me
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eight day of Christmas,
Robert Soloway did send to me
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the ninth day of Christmas,
Robert Soloway did send to me
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the tenth day of Christmas,
Robert Soloway did send to me
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the eleveth day of Christmas,
Robert Soloway did send to me
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

On the twelfth day of Christmas,
Robert Soloway did send to me
Twelve drummers a diet pilling,
Eleven pipers seo-ing,
Ten lords a- MLMing,
Nine ladies offering free us government grants,
Eight maids a-mortgage spamming,
Seven Africians a 419-ing,
Six sex drive fake drug dealers,
Five fake swiss watches,
Four stock fraud scam schemes
Three logo designers designing logos for free,
two Country music bands a spamming
and 28 million email addresses for free

Rergardless of what do please, enjoy the new year and please come back in January when Robert faces trial in federal court.

5 December: In Danny Westneat of the Seattle Times takes up a media 'whats been happening since May 31 with Robert' in a roundabout oped peice.

While its nice to know that Bob is out of the picture lest we forget the other spammers out there.

Robert was plebeian than king.

Perhaps one king of many ?, a note as to why Robert got let out of pre trial detention reported was

A judge let Soloway out of detention because he has Tourette's syndrome. Without his meds, he was racked with "uncontrollable tics" and went days without sleep. He became suicidal.

Well i think we can add deranged loonatic to the what makes Robert Soloway 'tics' list dont you. Nice to see Trobermann and Capozzola are consistenty playing the 'my clients a mentally challenged moron' defence. Anyhow Mondays for us have not been the same since Soloway had his assets frozen in June - they got better.

How 'really insane' Robert is remains a point of discussion. I note that a recent search for him (4/dec/2007)seems to put him in the care of his parents in Califonia. We all know the address.

Anyhow stay tuned later on this month for a specially adapted Robert Soloway carol 'the twelve days of christmas' which should lighten the mood here.

Anyhow that's enough insults for one day dont you think ?. we have January to wait for when the real fun starts.

16 November: Plans and promises.

Announcing as promised court.html (new window open) and a new front page (new window open) have been released. Comments welcome on both. I am 'working' on them still but they seem good enough to start using despite spelling issues.

The aim of the front page is a speedier loading file, and something that gently introduces Robert to people who may wish to find out more in January without looking at dig reports and going '?'.

The court file should also be a lot faster to load. Rather than sticking new stuff in the broadcastspam.html file which is becoming rather a monster to load.

This file (broadcastspam.html) will be updated in 2008 after the trial. Its only fair that somebody keeps an ear to the ground.

Comments/thoughts welcome. Theres a month and bit for you to collect them.

12 November: Bot Herder news from Slashdot John Schiefer, 26 an it security consultant (*nudge nudge wink wink) working for 3G Communications, from Los Angeles has been convicted of making trojan computers. A better link is this.

8 November: A hunt last week seems to indicate that the Court has 'sealed' Robert Soloways proceedings. In plain english that appears to mean no more news from them until the trial.

Future plans: Thisfool.com will be getting a short executive summary front page soon (this page will remain as broadcastspam.html) and a court procedings page for the 2008 trial will be created which should be a more pleasant experience to load up compared to this monster.

Anyhow its been much better with Soloway in Prison and whatever he is up to now lets hope I dont need to advise you all of Bobs doings. However if have news sightings/photos/stories and would love them to be aired, or shared only by the trusted soloway watchers drop me line, or contact us all via Opsan.

Remember the comedy starts in Janaury 2008.

15 October: Robert Soloway has left his 'known' myspace.com account

Ongeldige vriend-ID. Deze gebruiker heeft zijn/haar lidmaatschap opgezegd, of zijn account is verwijderd.

Translation: Invalid friend-ID. This user has canceled its/her membership, or its account has been removed. Im sure hes on myspace again somewhere.

Will he skip bail - if only I was a betting monkey.

14 October: Hello again - In a stealth move by the Judge who it seems has decided Robert is not a flight list despite being dual nationality whatever he was released on the 20 September prision reigister Lets hope if he does skip bail the Russian mafia have a go at finding him.

1. ROBERT ALAN SOLOWAY 37427-086 28 White M 09-20-2007 RELEASED

That's 112 days behind bars, so if you see an increase spam, im blaming Bob (russian mafia take note please). Coverage in nanea. So lets all hope Bob turns up for his trial in January for the Judges sake.

Theres more going on here.

06 August: Missing it ? http://web.archive.org/web/*/http://emailbroadcastingcompany.com. An extra Youtube Soloway News Medely.

I like the later reporter who did a free peoplefinder search and made it sound 'so' authoritive even though thats about all he appeared to do (or got an intern to do it). Go Wayne who also discovered botnet's just three weeks ago!

Bananas in the Falklands thanks Wayne Havrelly for also discovering botnets for us all.

1 August: In seattle times newspaper we have a Robert Soloway Go Daddy server (Bob Parsons) link up.

The pile of potential evidence in Soloway's case grew in late June, when the government seized six hard drives from server computers maintained by GoDaddy.com, an Internet hosting provider. According to a search-warrant affidavit filed by the FBI on June 21, Soloway leased the six hard drives from March 30 until his arrest May 30. It is not known what the government found on the servers. According to the affidavit, Ben Butler, network-abuse administrator for GoDaddy.com, confirmed to the FBI a few days after Soloway's arrest that Soloway had leased the six servers, and that the "Dark Mailer" software program had been installed on each of them.

Nothing to with this kill ? change of ownership ?

whois -hwhois.register.com nim-company.com 
[Querying whois.register.com]
[whois.register.com]

The data in Register.com's WHOIS database is provided to you by Register.com 

   Registrant: 
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Email: domainregistrar@register.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Sat, Jul 28, 2007

   Administrative,Technical Contact:
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Phone: +1.9027492701
      Email: domainregistrar@register.com

   DNS Servers:

   ns2.expireddomains.register.com
   ns1.expireddomains.register.com

Make up your own minds - the link is spamsuite.com/node/218 PDF document. Address used: Robert Solowa, with an address of 1200 Western Avenue, Seattle, WA

12. During the week of June 4, 2007, I spoke by telephone with Ben Butler, Network Abuse Administrator for GoDaddy.com. He advised me that Robert Soloway had rented a total of six dedicated servers from GoDaddy. Mr. Butler indicated that GoDaddy was interested in determining whether the servers that had been rented by Soloway had been used to transmit or distribute spam. Mr. Butler indicated further that if GoDaddy determined that the servers that had been rented by Soloway had been used in spamming activity, GoDaddy would turn those servers over to the FBI.

Appears boxes just had ip address allocations, no nameservering. Anybody confirm ?

Mr Parsons (godaddy founder) im surprised*. Not being privy to Soloways billing and bank records its interesting to see the hint of an back office address collection operation, but on godaddy.com who sell domains that's 'cocky'

Admin wise Some links clean up on this page. * i don't partically like Mr Parsons views (winge's really) on domain names (generic terms in europe etc) or trade with his operation in any capacity now, or in the past. Whether you can believe that 'anti spam bull' that godaddy.com state remains to be seen. Robert Soloway is (and was) a Rokso class spammer who it appears used his own address and name on the godaddy billing system.

23 July: Robert Soloway decided to spend some more time in Federal prison after waiving pdf 7/20/2007 - WAIVER of Speedy Trial which was agreed by all concerned pdf STIPULATION Continuing Motions, Filing Deadline, and Trial Date (The 20th July [Friday] was the last date to submit Filings in the Case if it was to have started on the 6 August).

So the first document listed seems to have been signed by Robert, Discovery to finished by 3rd December and the Trial date seems to be moved to the 7 January (some time up to 31 January 2008 in original request)

OK what is Tony Capozzola doing - I note much from troberman but nothing from the 'Italian' side.

Admin note: Countdown to Federal Trial and contact forms on this page have been added A big thank you to Andy for the 'proper' forms. - Change from 6 August to 7 January 2008 made to the countdown timer.

12 July: An aquaintance of Robert confirms the myspace site is Robert Soloway.

Everybody please meet somebody new called Kelly Horton who (and being a civilian in anti-spamming circles) does something in Oregon called tothepointtv.org: (link to source in new window requires flash). Who has a noteable view on Mr Soloway

Rachelle Soloway (his mother) it appears has a link with the http://www.swea.org/ Swedish Womens educational association based in: 5928 Balfour Court, Suite B - Carlsbad, California 92008 - USA - E-post: office@swea.org

Being that's in Swedish which im not familair with except for the swedish chef in the Muppets - The Wayback machine assists and says

... Swedish Women's Educational Association International, Inc. is a world-wide non-profit organization for Swedish and Swedish-speaking women (living abroad) with the purpose to promote Swedish culture and traditions, and encourage friendship and personal growth among its members.

Rachelle Soloway - rsoloway1@verizon.net gets a mention see swea.org - pdf file needs translating into English - note a variant of rsoloway'xx' at verizon was used in a usenet posting by Robert telling Microsoft and Mr Braver in a 'im not paying your court awarded fines' message. Seems fair game here.

update: Henrik (with the honourable title of 'Super Fan') does a quick and dirty translation and says the text has no value. Anyhow a 'big thank you' to Henrik is in order.

Perhaps most revealing is when searching for Robert the use of some software on the windows platform called 'proxychain' which it appears is traceable to Robert and 'fits in' with his known activities.

An interesting swedish website that (a summary will do) and that pdf document needs translating (if valid) so if anybody can help out - it would be much appreciated.

6 July: Robert
Soloways
Myspace page ?

A chance discovery by moi in wikipedia, but Henrik in opsan picks up the batton and swims in the myspace design sewage.

open dump file in new window

Robbie is a friends with: www.myspace.com/ryancurran (Robbie appears under friends and have also made comments) male. another guy: www.myspace.com/sillyrabbit73 (Appears under friends and have also made comments) (this time a woman): www.myspace.com/mazcooper plus more men: www.myspace.com/tinaloulou, www.myspace.com/jaredplus www.myspace.cn/seattlepartyboi (Robbie describe himself as Adonis = god known for it's beauty... hehehe they like pretty boys in prison Robbie !!!) www.myspace.com/24229317 www.myspace.com/alexgarcia Notice something special about some of those myspace profiles ?

If any of the links don't work, take a look at an Internet archive like google cache, or wayback machine.

Then take a look at this blog from one of them:

blog.myspace.com/index.cfm?fuseaction=blog.ListAll&friendID=24229317&MyToken=71b0b005-7e70-46f7-b3b4-12682c2cb7a8ML. Notice the line "Robbie Rob-Such elegance and class at the same time. Yet I still havent found you that big cock you wanted."

I think you can make up your own minds. Anyhow want some more ? I found

on sillyrabbit73 is 'illuminating' Robert wrote "i had a dream with you in it. does that excite you or what?" seatlepartyboi tells much in comments where Robert wrote: "i'll be gay for you anytime chris..don't feel alone.. i'm always thinking about myself.. i know how it feels.. i always think about me at 2am too.. i even miss myself when i go to sleep.. it's tough being an adonis"

Want more ? you know the urls and the people. Please remember that being 'friends' with Robert does not indicate a business relationship. Its nice to get a name to a face, and a sort out of genders being Roberts been both male and female in domain registrations.

5 July: I hope you all enjoyed independence day (regardless of where) with Robert behind bars so let's go take a trip down memory lane. Also lets make Tony continue to provide us with some entertainment. After all why not.

According to the comrades at dailybreeze.com Roberts High School is (pvhigh.com Palos Verdes High School address: 600 Cloyden Road Palos Verdes Estates, CA 90274-1869

The Palos Verdes Peninsula Unified School District serves the communities of Palos Verdes Estates, Rancho Palos Verdes, Palos College Verdes Peninsula, Rolling Hills and Rolling Hills Estates. The Attendance Rates area is 21 miles southwest of metropolitan Los Angeles and draws predominantly middle to high-income business and professional residents. The school district’s reputation for having superior educational system

This amuses us from the aricle

He wasn't involved in student government or athletics. Oddly, considering where life took him, the 1997 graduate wasn't even a member of the computer club.

Oddly not too much new here but its rather humourous to get Tony Capozzola's take on the case. I don't see the relationship between the fbi and microsoft in this case. So (thinking aloud) where would be a safe place 'free of microsoft's sphere ?' - that i think would make the moon or another planet the place to hold the trial. This entertaining was provided by Tony Capozzola.

I would like to say that en.wikipedia.org Palos_Verdes_High_School seems is in a need of an update.

27 June: News from comrade Ed that the spammer persons named.

Federal jury convicted James R. Schaffer, of Paradise Valley, Arizona, and Jeffrey A. Kilbride, of Venice, California, on multiple charges including conspiracy, money laundering, fraud and transportation of obscene materials."

More details Sound familiar ? to our federal prisioner id 37427-086 ?

Perhaps of more interest is this 21 June missive which many of us missed is that China might start to be worrying about its rather widespread spam problem that it either promotes (bullet proof) or thus deems that one yahoo email to be a 'national security' problem. It might be pure 101% chinese bollocks (face saving) and nothing will be done but in the meantime I can recommend cn.countries.nerd.dk or the blackholes.us dnsbl to stop that chinese crap be it 'paid' or 'unauthorised' unpaid chinese spam.

China has a major image problem - 'saving face' isnt the the solution anymore, mind you they rather liked Robert Soloways 'debt'. I personally expect little to change.

23 June: More news about Robert 'Solon' (Soloway in Swedish I believe). Which was Posted by Mr Braver on his website, and cc'ed to Nanae. Is this Appear Pro Hac Vice (pdf) which in non legal goboblygook means another lawyer on the scene. Mr Trobermann (lawyer one) it appears is not working out.

So who is this 'new brain' whom we discover is a "long term aqquantance" of the Soloways? Well 23 days is it appears a bit of stretch for the above claim but thats joke one for today inserted.

Meet Carl A. Tony Capozzola (image credit to Ed see Italian American lawyers Association * Tony is standing on the left hand side)the name not ring any bells?.

A well-known South Bay attorney ventured into the world's biggest criminal case Tuesday by filing briefs with the state Supreme Court on behalf of Michael Jackson that allege the pop star is the target of an overzealous prosecution.

It is interesting to note while the above motion failed for wacko jacko, Robert and Michael Jackson fall into to the category 'foolish', I like the professors commenting in the article that 'it's good pr'. I suppose Mr Capozzola has to sing and dance and this certainly won't be the last occassion that the fool is abused for Mr Capozzola's benefit.

His expected line of attack is pitifull. Anyhow what do we know about Roberts new freind of 23 days California bar 44441 (links provided by Ed and Sky) is that for six years he was suspended and did something else. Sounds interesting so lets dig some more shall we this is from March 2003.

"Scotti pulled out a .38-caliber handgun, shot and killed Feldman and committed suicide," police Sgt. Peter Grimm said. Capozzola, who witnessed the shootings, was not hurt.

Keeping some interesting company there Carl A. Tony Capozzola - then again having to google this Ted Binion. But i suppose thats the price of 'fame'. * has a 'mirthfull' connotation.

Court it will appear will be very entertaining on the 6th August.

19 June: Henrik in Opsan informs us all of Spamsuite.com document 153 Essentially that answers a number of questions.

A drug dealer like dirty money operation where assets moved from the USA to Sweden where Robert apparently has family and Swedish nationality (Robert always claimed this but never mention the origin - but I was way off base from my 'Hungary' record search).

An interesting use of impressionable people.

Items admitted for trial use with generally no objections by Soloway's Lawyer - it be interesting to see if he ever gets paid. Anyhow I feel a letter to the swedish embassy c/o the swedish tax authorities coming along.

I do recommend a read of document 153, for all the things that I did not mention. The thought 'bank fraudster' seems to be a new on reflection concur ?.

18 June: After seeking counsel and hearing nothing negative i present ... At home with the Soloways I doubt mtv will pick it up. (humour).

Herb S Marc Soloway (67) and Rachelle D Soloway (59) now live in Palm Desert, California USA . It appears that a Henry Soloway (age 90) lives with them along with a person named Karin B Soloway (aged 64).

A map Google Maps OK - Want a telephone number ? easy phonebook: Soloway Palm Desert,CA (opens in new window). Some results just in case they get removed (760) 772-1148 (760) 772-2638 (760) 772-3618 (760) 345-7389. - Remember those are american numbers, your going to need international access codes and country id's if your not America based.

Sons and Daughters wise - it appears theres three (3 is conjecture) a Thomas Paul Soloway age 40 who lives in San Francisco, an easy association (with less conjecture more confidence) is for a female named Jill K Soloway (no not the Hollwood writer (different mother by the name of Elane - thats somewhere in Chicago i think).

Finally back on topic we get to Robert Soloway age 27 is is junior son to Rachelle (thats the easy confirmation). My assumptions

Thank you to peoplefinder.com Where i base this 'evidence' on.

Bananas in the Falklands would like to wish Herb Soloway a welcome to the page since he seems most likey a candidate for the title 'Father'. Ancient history (1999) appended to the bottom of the file.

13 June: Are you thinking this ? somebody else was

Thanks to Mr Lindford for spotting.

Oh my the entertainment continues! Ed in Opsan jast happens to mention that Robert is Named as a 'bot herder' by our friends in the fbi, which sounds quite kinky considering that Robert was refused bail again. A big thank you must be said here for Mr Schmutz.

The FBI has also charged numerous individuals with cyber crimes around the nation as a direct result of the coordinated operation, including: * Robert Alan Soloway of Seattle, Washington, is accused of using botnets to send tens of millions of spam messages touting his website; * James C. Brewer of Arlington, Texas, is accused of infecting tens of thousands of computers worldwide, including some at Chicago-area hospitals; and * Jason Michael Downey of Covington, Kentucky, is charged with using botnets to disable other systems.

Now then, court today too and back to pokey Spamsuite.com document 140 Rachel Soloway lives in Palm Desert, California. But rejected by the Judge (seattle times) source. Credit to Super fan Henrik and Ed over at opsan.

Judge James Donohue sided with the government in ordering that Soloway should be detained until his trial, which is scheduled to begin Aug. 6.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293 The Robert Soloway Locator url.

Hehe !

12 June: No Digging today - look my wellies are clean !

But an Opsan update on Roberts Lawyer Richard J. Troberman..

I have asked http://www.ait.com/ for there views on on being a Bob Soloway support (think Chinese front man). Ive yet to ask Cologuys (2005) seems to be Korea hosting, MDMS (Seattle ISP seems very pro spam) or Nobullservers also points to China (as a sales front man). Gasper the owner didn't wish to talk shop when I broached the subject.

I suggest that these suppliers be treated with caution as possibly spam friendly. Links to Mr Soloway and them can be identified in the many pdf documents referenced to recently in this document.

08 June: Henrik informs us in Opsan about http://spamsuite.com/node/123 - see 130 131 also Trial is set for 6 August 2007 (might change re yesterday). Good news is Robert has no computers, money, or spam lists (unless hidden) should he be granted bail.

2nd court impression.

Where is Robert ? http://www.bop.gov/iloc2/InmateFinderServlet?Transaction=NameSearch&
need ingMoreList=false&LastName=Soloway&Middle=&FirstName=Robert&
Race=U&Sex=U& Age=&x=333&y=293v From Nanea.

DC SeaTac The Federal Detention Center (FDC) - Sea Tac in Seattle, Washington, is an administrative facility housing male and female inmates.

FDC SeaTac is located 12 miles south of Seattle and 16 miles north of Tacoma, 1 mile west of Interstate 5 (200th Street exit).

Judicial District: Western Washington

INMATE NAME & REGISTER NUMBER
ROBERT ALAN SOLOWAY  	37427-086
FDC SEATAC
FEDERAL DETENTION CENTER
P.O. BOX 13900
SEATTLE, WA  98198
USA
 

you know what to send.....

07 June: Super Fan Henrik informs us via Opsan (see top link) here (kndo.com) that things are delayed until next Monday (11th) since it would appear that Robert legal 'team' are seeking extra time.

Komo TV's take on the matter: (link to source in new window requires flash)

Thank you to Bernzilla.com for the xhtml valid tip.

Flood the Spambox also has been told that the case has a federal dimension rather than a state only prosecution.

Admin notes: Thank you to Andy for the new domain name thisfool.com and the hosting off googlepages. I have backups of the page, and will continue to update both as long as i have ftp access. The map projects (or geo-location) are essentially dead projects. The map files will remain available for viewing.

05 June: Last style of message before our friends at the fbi shut our spammer down, notice user who recieves the mail also sent it, the diferent ip addresses and that 222.255.2.134 is somewhere in Vietnam which belongs to the VietNam Data Communication Company.

Delivered-To: user&gmail.com
Received: by 10.114.240.2 with SMTP id munged;
        Tue, 29 May 2007 20:40:12 -0700 (PDT)
Received: by 10.100.13.12 with SMTP id munged.grunge;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Return-Path: <user&gmail.com>
Received: from 209.85.133.114 ([222.255.2.134])
        by mx.google.com with SMTP id munged.2007.05.29.20.40.02;
        Tue, 29 May 2007 20:40:11 -0700 (PDT)
Received-SPF: neutral (google.com: 222.255.2.134 is neither permitted nor denied by domain of munged&gmail.com)
Date: Tue, 29 May 2007 20:40:11 -0700 (PDT)
Message-Id: <munged.SMTPIN_ADDED&mx.google.com>
To: <user&gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--"

----
Content-Transfer-Encoding: quoted-printable

<html><body bgcolor=3D"#AFCDFF"><div align=3D"center"><center>
<table border=3D"1" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-co=
llapse: collapse" bordercolor=3D"#111111" width=3D"65%" id=3D"AutoNumber1"=
 height=3D"217" bgcolor=3D"#FFFFFF">
<tr><td width=3D"100%" align=3D"center" height=3D"217">
<p align=3D"center"><font size=3D"5" face=3D"Arial">We Email Advertise You=
r Charity Web Site to<BR>
<font color=3Dred><b>15,000,000 PEOPLE FOR FREE!</font></a></p><p align=3D=
"center"><font size=3D"5" face=3D"times new roman">
<a href=3D"http://www.emailbroadcastauthority.com">[CLICK HERE]</a></font>=
</p>
</td></tr></table></center></div></body></html>

------

For the record you know - that html sucks big time.

04 June:

Sorry no digging today cheers!

nim-company.com (seo op of mr Soloway) which is still with us, if you want to have some fun ring InternetNamesForBusiness in the USA on (954)-323-0075 and tell them Robert won't be paying his hosting bill. Dont dive them your email since they might well be ok sending you spam and they are Florida based which bodes badly in spam circles.

More on the case against Robert as i get it. Seattlepi reports lots of luxury goods found (rumour he was ebaying them in nanea) so they might be fakes, and he just bought a new Mercedes Benz (im told from an anon source). Something to look out for at the government IRS auction i think if your so inclined and live in WA/OR west coast states in the usa.

Anyhow thats all for now, cheers ! I still want a picture of Robert Soloway, Racheal Soloway (mother) and any of other family Soloway clan if you can help I would be very pleased.

01 June: A big hello to all the new visitors and welcome but for some of us the work continues.

There are a number of outstanding domains with hosting from monday (China and Bangladesh) that we need to account for since the taxman,post office,fbi etc seized Roberts assets.

Along with the search optimizing engine businesses (two) which have there own bits of dubious fame. China/Bangladesh bases: emailbroadcastauthority.com submit-me-now.com (seo spam op) permissionemailcorp.com emailsolutioncorp.com emailmarketingassociates.com theemailadvertisingcompany.com emailbroadcastingcompany.com and american based hoster nim-company.com (seo spam op).

lets start with the seo operations first

;; Query time: 550 msec
;; SERVER: boris
;; WHEN: Thu May 31 17:06:45 2007
;; MSG SIZE  rcvd: 164

Registrant: 
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Email: d595683c0a1e672a00a6d77116f9399f@domaindiscreet.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: nim-company.com

      Created on..............: Wed, Jul 26, 2006
      Expires on..............: Thu, Jul 26, 2007
      Record last updated on..: Mon, May 21, 2007

   Administrative Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683c0a1e672a01ba25e6a0694171@domaindiscreet.com

   Technical Contact:
      Domain Discreet
      ATTN: nim-company.com
      P.O. Box 278 
      Yarmouth, NS B5A 4B2
      CA
      Phone: 1-902-7495331
      Email: d595683d0a1e672a002d22dfd5791c5d@domaindiscreet.com

   DNS Servers:

   dns11.register.com
   dns12.register.com

dig www.nim-company.com

; <<>> DiG 9.3.4 <<>> www.nim-company.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52016
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.nim-company.com.           IN      A

;; ANSWER SECTION:
www.nim-company.com.    14400   IN      CNAME   nim-company.com.nim-company.com.
nim-company.com.nim-company.com. 14400 IN A     69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns11.register.com.
nim-company.com.        43200   IN      NS      dns12.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     17812   IN      A       216.21.234.76
dns12.register.com.     30945   IN      A       216.21.226.76

 whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com

US Based - down in spammy Florida. Host up. Now lets do the other which was in China if I remember correctly (it as some time ago) was called submit-me-now.com

 whois submit-me-now.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]

[whois.dns.com.cn]

Domain Name.......... submit-me-now.com
  Creation Date........ 2006-11-21 03:30:28
  Registration Date.... 2006-11-21 03:30:28
  Expiry Date.......... 2007-11-21 03:30:28
  Organisation Name.... liu fei
  Organisation Address. nan chang
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 321000
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu fei
  Admin Address........ nan chang
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 321000
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@makemelogo.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu fei
  Tech Address......... nan chang
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 321000
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@makemelogo.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu fei
  Bill Address......... nan chang
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 321000    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@makemelogo.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns1.dns.com.cn
  Name Server.......... ns2.dns.com.cn

;; ANSWER SECTION:
www.submit-me-now.com.  3600    IN      A       124.42.8.163

whois 124.42.8.163
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

Nobody home in China have our friends the Maoist's killed his connections already ?. Thats the seo out of the way. Now the main event.

 whois emailbroadcastauthority.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastauthority.com
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang     
  Bill Address......... 210002    
  Bill Address......... JX     
  Bill Address......... CN   
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.emailbroadcastauthority.com
  Name Server.......... ns3.emailbroadcastauthority.com
  Name Server.......... ns2.emailbroadcastauthority.com
  Name Server.......... ns1.emailbroadcastauthority.com

dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

 dig www.emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

;; ANSWER SECTION:
ns1.emailbroadcastauthority.com. 27774 IN A     218.106.165.183

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 43126 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns3.emailbroadcastauthority.com.
emailbroadcastauthority.com. 43126 IN   NS      ns4.emailbroadcastauthority.com.

China (218.106.165.160 - 218.106.165.191 beijing-shengang-corp) says goodbye to Bob - no www. Lets try permissionemailcorp.com next

 whois permissionemailcorp.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

Nobody home there either never mind plenty more. Lets take a look at emailsolutioncorp.com

>> whois emailsolutioncorp.com -hwhois.dns.com.cn[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

emailsolution.com. is bye bye never fear for emailmarketingassociates.com has to be bullet chinese spam proof. You know the routine....

whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com

[sjwest@mail2 ~]$ dig  emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

Nobody home there either dont worry two more left so lets try theemailadvertisingcompany.com

Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63456
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME super2007.gnway.net.
super2007.gnway.net.    60      IN      A       127.0.0.1

;; AUTHORITY SECTION:
gnway.net.              3600    IN      NS      ns1.gnway.cn.
gnway.net.              3600    IN      NS      ns1.gnway.com.

;; ADDITIONAL SECTION:
ns1.gnway.cn.           1198    IN      A       210.51.190.207
ns1.gnway.com.          30540   IN      A       211.154.44.236

;; Query time: 2788 msec
;; SERVER: 212.23.3.100#53(212.23.3.100)
;; WHEN: Thu May 31 18:02:49 2007
;; MSG SIZE  rcvd: 183

No luck there - we are running out of magic spam bullets here. Lets all say the magic words (email advertise for free) )as we try the last emailbroadcastingcompany.com.

 whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>> DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

Damm you didnt say the magic bullet proof words dead too. Well our Chinese spam friends work fast when they need to.

31 May: New visitors hello - further updates from 31 may onwards can be seen by pressing the 'page up' key - This page takes a long time to load. but Woohoo !!!!!! its a start http://www.king5.com/localnews/stories/
NW_05307WABinternetspamindictmentTP.26000383.html and http://seattlepi.nwsource.com/
local/317795_soloway31.html not convicted yet but a start a more cluefull news item from nntp and spamhaus sayeth:

U.S. Department of Justice

United States Attorney
Western District of Washington

700 Stewart Street, Suite 5220Tel: (206) 553-7970
Seattle, Washington 98101-1271Fax: (206) 553-0882


FOR IMMEDIATE RELEASE
May 30, 2007

PRESS CONFERENCE ON SPAM KING INDICTMENT

The U.S. Attorneys Office will hold a press conference following the 
arrest of 27-year-old ROBERT ALAN SOLOWAY. SOLOWAY was indicted last 
week by a federal grand jury in Seattle in connection with his illegal 
spamming activities.

The press conference will begin at 1:30 in the Wales Conference Room of 
the U.S. Attorneys Office. United States Attorney Jeffrey C. Sullivan 
will be joined by representatives from the United States Postal 
Inspection Service (USPIS), FBI, FTC, Internal Revenue Service Criminal 
Investigations (IRS-CI), and Washington State Attorney Generals Office.

SOLOWAY will make his initial appearance in U.S. District Court at 2:30 
today. Copies of the indictment will be available at the press 
conference or are online via the PACER system.

Now thats good news and six governmental bodies wanting a piece of Bob. Futher stuff Detention Order (PDF) Indictment (PDF) and press release (seen above PDF)

Indictment is a great read and details wire fraud,id theft, sezure of funds etc - Pontential for 65 years !!!. MDS (Seattle isp) get a mention (noted here), 'Colo Guys' and NoBull yet to be be mentioned. I will dig more on those two names.

Big Thanks to the inner sanctum, and everybody whom helped maked this happen eventually.

? support@cologuys.com Cologuys Phone: 1-866-510-5799,Fax: 1-866-218-1533 8101 Chapin Rd,Fort Worth, TX 76116,USA other NoBull Server Hosting - nobullservers.com (usa 586) 5560823

28 May: There seem to be a lot of Mondays in May and yes its digging day again. Start time:

;; Query time: 486 msec
;; SERVER: Boris
;; WHEN: Mon May 28 13:02:12 2007
;; MSG SIZE  rcvd: 197

Dns bot net (only one this week again).

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183 [china-netcom.com]
;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns4.926817a885d86e1.com. 43200  IN      A       68.188.83.59 [usa: charter.net]

Supplementary: 
ns1.926817a885d86e1.com. 43200  IN      A       87.243.166.122 [austria (eu): abuse@ainet.at]

;; AUTHORITY SECTION:
926817a885d86e1.com.    43200   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    43200   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns2.926817a885d86e1.com. 43200  IN      A       66.66.32.40   [usa: rr.com]
ns3.926817a885d86e1.com. 43200  IN      A       70.235.18.100 [usa: at&t]
ns4.926817a885d86e1.com. 43200  IN      A       71.81.227.244 [usa: charter.net]

Normal dns with spammy providers (most seen before)

dig emailbroadcastauthority.com

; <<>> DiG 9.3.4 <<>> emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37812
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       124.254.29.136 [cn: 163.com marcom@service.netease.com]

;; AUTHORITY SECTION:
emailbroadcastauthority.com. 23026 IN   NS      ns4.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns1.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns2.emailbroadcastauthority.com.
emailbroadcastauthority.com. 23026 IN   NS      ns3.emailbroadcastauthority.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastauthority.com. 23026 IN A     218.106.165.183 china-netcom.com
ns2.emailbroadcastauthority.com. 23026 IN A     124.254.29.136 [cn: 163.com marcom@service.netease.com]
ns3.emailbroadcastauthority.com. 23026 IN A     221.194.44.60   cn: cnc-noc.net
ns4.emailbroadcastauthority.com. 23026 IN A     202.92.63.166  [bd * seen before]


ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn: 163.com marcom@service.netease.com (Nasdaq:NTES)]

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn: cnc-noc.net]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn: Chinese govt:wangwl@bsw.gov.cn seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bd * seen before]

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [cn: cnc-noc.net]

;; AUTHORITY SECTION:
emailsolutioncorp.com.  43200   IN      NS      ns1.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns2.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns3.emailsolutioncorp.com.
emailsolutioncorp.com.  43200   IN      NS      ns4.emailsolutioncorp.com.

;; ADDITIONAL SECTION:
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82 [cn: Chinese govt:wangwl@bsw.gov.cn *seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60 cn: cnc-noc.net
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166 [bd: *seen before]

Unloved but still hosted in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007052302 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

Query time: 4548 msec
;; SERVER: boris
;; WHEN: Mon May 28 13:08:24 2007
;; MSG SIZE  rcvd: 113

Of note: New hoster not seen before from Austria (part of the bot net)

inetnum:        87.243.166.0 - 87.243.166.255
netname:        KOEFLACH-TV
descr:          Ainet Telekommunikations-Netzwerk Betriebs GmbH
country:        AT
admin-c:        ANOC9-RIPE
tech-c:         ANOC9-RIPE
status:         ASSIGNED PA
mnt-by:         AINET-MNT
source:         RIPE # Filtered

role:           Ainet Network Operations Center
address:        Ainet Telekommunikations-Netzwerk Betriebs GmbH
address:        Burggasse 15
address:        A-8750 Judenburg
address:        Austria
e-mail:         noc@ainet.at

Usual suspects - Bangalesh seems to be developing a long term problem.

24 May: Sky at Opsan (see top link) informs us that 163.com 's parent company netease.com (Nasdaq: NTES) in China would love to hear from us all at marcom@service.netease.com.

Thank you again for the spam cop reports.

21 May: Its the Chelsea Flower show for some, but for Bananas in the Falklands it's not for me and its digging day again. Start time:

;; Query time: 388 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:24:57 2007
;; MSG SIZE  rcvd: 197

Normal dns with spammy providers (most seen before)

emailbroadcastauthority.com. 3600 IN    A       124.254.29.136
ns1.emailbroadcastauthority.com. 25911 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 25911 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 25911 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 25911 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Dns bot net (only one this week) not the usual two.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.31.75.60

Unloved but still hosted in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

An end time.

;; Query time: 401 msec
;; SERVER: boris
;; WHEN: Mon May 21 12:34:22 2007
;; MSG SIZE  rcvd: 113

Fin.

17 May: Two 'new and improved retard proof' spam messages ahoy from comrade Robert i see from Spamcop (Thank you).

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

http://www.emailbroadcastauthority.com

advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.
advertise your web site to 15,000,000 people. free.

non-commercial offer is for charity web sites only.

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

http://www.theemailbroadcastingcompany.com

advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.
advertise your web site to 7,500,000 people. free.

non-commercial offer is for charity web sites only.

Nice to have a change.

16 May: emailbroadcastauthority.com up after its hiccup I note

ns4.emailbroadcastauthority.com. 3600 IN A      124.254.29.136
ns1.emailbroadcastauthority.com. 42119 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 42119 IN A     124.254.29.136
ns3.emailbroadcastauthority.com. 42119 IN A     221.194.44.60

Atg and Ed dig beyond the ip address and location for the company behind 163.com who help Robert.

163.com.                1903    IN      NS      ns.nease.net.
163.com.                1903    IN      NS      ns3.nease.net.
;; ADDITIONAL SECTION:
ns.nease.net.           40545   IN      A       202.106.185.75
ns3.nease.net.          19216   IN      A       220.181.28.3

Registrant:
   	Netease.com, Inc. 
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
  	 
Domain Name: NEASE.NET
 
   	Administrative Contact , Technical Contact : 	 
   	Netease.com, Inc. 
   	nsadmin@corp.netease.com
   	36/F Peace World Plaza, No.362-366
   	Huan Shi Dong Road
   	Guangzhou, Guangdong 510060
   	CN
   	Phone: +86-20-85525516
   	Fax: +86-20-85525535
  	 
   	Record expires on 04-Apr-2009 	
   	Record created on 06-Jul-1997
   	Database last updated on 27-Jun-2006
 

Its very Chinese affair, listed on Nasdaq as NTES (NetEase.com, Inc) try the bottom links for English which it says it was founded by a William Ding (William Lei Ding) who also is its Chief Executive morfe follows...

NetEase also remains the largest email provider in China, approved by the Chinese authorities to operate as an Internet content provider along with the Ling Yi company ... legally owned by three citizens of China: the principal shareholder of the Company, his brother and a former employee of the Group.

Prior link to Rupert Murdoch (The News Corporation Limited “Newscorp”) and PricewaterhouseCoopers do there auditing. Employee numbers it appears are unstated.

14 May: Gardening time usual Lets start with a start time.

;; Query time: 32 msec
;; SERVER: boris
;; WHEN: Mon May 14 18:37:21 2007
;; MSG SIZE  rcvd: 155

A down domain name emailbroadcastauthority.com

<<>> DiG 9.3.4 <<>> ns1.emailbroadcastauthority.com
;; global options:  printcmd
;; connection timed out; no servers could be reached

Going bot net ? next up is permisisonemailcorp.com - ns1.permissionemailcorp.com. 43200 IN A 124.254.44.66 not happy

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bot nets ahoy (the usual 2)

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns3.926817a885d86e1.com. 43200  IN      A       75.0.146.214

;ns1.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
ns1.emailbroadcastingcompany.com. 180 IN A      24.175.186.203
ns1.emailbroadcastingcompany.com. 180 IN A      64.22.246.49
ns1.emailbroadcastingcompany.com. 180 IN A      69.219.226.151
ns1.emailbroadcastingcompany.com. 180 IN A      69.227.22.150
ns1.emailbroadcastingcompany.com. 180 IN A      71.203.52.220
ns1.emailbroadcastingcompany.com. 180 IN A      74.100.247.81
ns1.emailbroadcastingcompany.com. 180 IN A      85.210.159.149
ns1.emailbroadcastingcompany.com. 180 IN A      12.208.154.35
ns1.emailbroadcastingcompany.com. 180 IN A      24.72.226.61
ns1.emailbroadcastingcompany.com. 180 IN A      24.137.86.117

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

Unloved but in China

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

The end

;; Query time: 296 msec
;; SERVER: Boris
;; WHEN: Mon May 14 18:50:57 2007
;; MSG SIZE  rcvd: 298

7 May: Gardening time usual suspects it appears (thats Bangladesh and China). Lets start with a start time

;; Query time: 44 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:24:20 2007
;; MSG SIZE  rcvd: 181

Our bot net, and (one new one from last monday) which Sky over at Opsan notes as all american hosts. God bless George W Bush for 'can-spam'.

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 38720  IN      A       68.206.193.209
ns2.926817a885d86e1.com. 22547  IN      A       75.71.156.72
ns3.926817a885d86e1.com. 38720  IN      A       24.12.137.170
ns4.926817a885d86e1.com. 38720  IN      A       68.114.199.93

emailbroadcastingcompany.com.  IN      A

;; ANSWER SECTION:
emailbroadcastingcompany.com. 180 IN    A       172.191.195.119
emailbroadcastingcompany.com. 180 IN    A       213.6.229.100
emailbroadcastingcompany.com. 180 IN    A       24.116.250.66
emailbroadcastingcompany.com. 180 IN    A       58.106.118.114
emailbroadcastingcompany.com. 180 IN    A       65.190.181.102
emailbroadcastingcompany.com. 180 IN    A       66.67.219.205
emailbroadcastingcompany.com. 180 IN    A       68.77.55.65
emailbroadcastingcompany.com. 180 IN    A       69.4.104.153
emailbroadcastingcompany.com. 180 IN    A       69.105.139.212
emailbroadcastingcompany.com. 180 IN    A       76.188.39.239

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns2.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailbroadcastingcompany.com. 43200 IN  NS      ns4.926817a885d86e1.com.

no A, nameservered

ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

The unloved and a finish time

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

;; Query time: 226 msec
;; SERVER: boris
;; WHEN: Mon May  7 12:30:24 2007
;; MSG SIZE  rcvd: 294

6 May: I will be digging tomorrow (bet your all excited by that), but i note from the spamcop reports I am getting that Robert is doing it for 'FREE' Hmmm something going on ? Speaking of president@usakia.org has gone very quiet. Thank you for the spamcop reports for the map * is looking very colourfull now for those of you who prefer graphical things to lists.

* The number of countries whom have a claim that america is invovled in terrorising them is growing, lets hope Finland declares war (my latest read flag) on Seattle and Washington state for the damage caused in the Robert Soloway name.

Personally speaking i'm looking forward to seeing a Robert Spam sent from a computer in Zimbabwe in africa.

Remember to bring spades and wellington boots for the gardening if your going to join us tomorrow.

1 May: Time to go gardening, Spade in hand and the Chinese plant book in the other let go and discover that species known as the bullet proof spam hoster (ilikeeyspammer).

Boring stuff follows

emailbroadcastauthority.com. 3600 IN    A       124.254.29.140
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.140
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

Bob's Bot net

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.
;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       206.188.126.28
ns2.926817a885d86e1.com. 43200  IN      A       68.54.156.163
ns3.926817a885d86e1.com. 43200  IN      A       91.105.34.191
ns4.926817a885d86e1.com. 43200  IN      A       24.12.0.46

Unloved by Bob, but tended to by a china man, and a dns time stamp.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   SOA     ns2.prioritydns.info. hostmaster.prioritydns.info. 29 900 600 86400 3600

;; Query time: 374 msec
;; SERVER: boris
;; WHEN: Tue May  1 16:58:39 2007
;; MSG SIZE  rcvd: 113

Concludes so you can wake up now.

28 April: Well well well make of this what you please.

Name: Vincent Bartning
E-mail: president@usakia.org
City: San Jose
Country: CA
Homepage: http://usakia.org

I don't think you should be listing charities

without confirming the accusation.  We would

like ours removed.

Those of you 'lost' as to what this refers to charities 'helped' by the great man (thats Robert) i would like to remind Vincent that i contacted his organisation (and the others i could id) to ask them about the claim but heard nothing back.

So Mr Bartning the link remains - please do feel free to ignore this, - or write me something so i can justify removing it. I look forward to hearing from you whenever.

As to the other message - Bob is rather 'impotent' on that matter. Analogy: more gas, no power - refer your friend to Opsan my friend the point is made there.

24 April: Its tuesday so its a digging day. Fun stuff first - botnet (1) update.

emailmarketingassociates.com. 180 IN    A       76.168.228.180
emailmarketingassociates.com. 180 IN    A       76.178.75.250
emailmarketingassociates.com. 180 IN    A       203.45.14.119
emailmarketingassociates.com. 180 IN    A       60.224.128.45
emailmarketingassociates.com. 180 IN    A       68.74.207.182
emailmarketingassociates.com. 180 IN    A       71.71.27.75
emailmarketingassociates.com. 180 IN    A       71.155.233.43
emailmarketingassociates.com. 180 IN    A       71.206.87.0
emailmarketingassociates.com. 180 IN    A       75.9.58.249
emailmarketingassociates.com. 180 IN    A       75.41.66.71

;; AUTHORITY SECTION:
emailmarketingassociates.com. 43200 IN  NS      ns3.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns4.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns1.926817a885d86e1.com.
emailmarketingassociates.com. 43200 IN  NS      ns2.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 41759  IN      A       76.177.123.116
ns4.926817a885d86e1.com. 41759  IN      A       69.231.73.91

Usual suspects below - Bangladesh and China mostly

ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailbroadcastingcompany.com. 34962 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 34962 IN A    124.254.29.136
ns3.emailbroadcastingcompany.com. 34962 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 34962 IN A    202.92.63.166

Comparitively unloved (1) compared to the above and the date stamp. Again its China.

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007041901 3600 600 604800 3600

WHEN: Tue Apr 24 09:48:11 2007
;; MSG SIZE  rcvd: 198

This concludes the gardening, of interest (should you be awake) is that while thats a number of variations on the name theme, we only have one botnet (see previous entry for details of its status then) rather than several to deal with. All domains registered in China too.

Thank you for the spamcop reports, it would be nice for some Bob spam to come from Africa if you take a look at spam bot map but overall things are filling up nicely if your into graphical rather textual lists of where.

19 April: Depending upon your dns Ed reports we have a new spambot for dns on emailbroadcastingcompany.com called 926817a885d86e1.com so copy and paste those random letters and let the fun begin.

whois 926817a885d86e1.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... 926817a885d86e1.com
  Creation Date........ 2007-03-12 22:25:21
  Registration Date.... 2007-03-12 22:25:21
  Expiry Date.......... 2008-03-12 22:25:21
  Organisation Name.... xiaowen
  Organisation Address. No.12 chang'an road
  Organisation Address.
  Organisation Address. beijing
  Organisation Address. 100001
  Organisation Address. BJ
  Organisation Address. CN

Admin Name........... ash wen
  Admin Address........ No.12 chang'an road
  Admin Address........
  Admin Address........ beijing
  Admin Address........ 100001
  Admin Address........ BJ
  Admin Address........ CN
  Admin Email.......... 112@126.com
  Admin Phone.......... +86.109838384
  Admin Fax............ +86.109838387

Tech Name............ ash wen
  Tech Address......... No.12 chang'an road
  Tech Address.........
  Tech Address......... beijing
  Tech Address......... 100001
  Tech Address......... BJ
  Tech Address......... CN
  Tech Email........... 112@126.com
  Tech Phone........... +86.109838384
  Tech Fax............. +86.109838387

Bill Name............ ash wen
  Bill Address......... No.12 chang'an road
  Bill Address.........
  Bill Address......... beijing     
  Bill Address......... 100001    
  Bill Address......... BJ     
  Bill Address......... CN   
  Bill Email........... 112@126.com
  Bill Phone........... +86.109838384
  Bill Fax............. +86.109838387
  Name Server.......... ns4.926817a885d86e1.com
  Name Server.......... ns3.926817a885d86e1.com
  Name Server.......... ns2.926817a885d86e1.com
  Name Server.......... ns1.926817a885d86e1.com

dig 926817a885d86e1.com

; <<>> DiG 9.3.4 <<>> 926817a885d86e1.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3281
;; flags: qr rd ra; QUERY: 1, ANSWER: 10, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;926817a885d86e1.com.           IN      A

;; ANSWER SECTION:
926817a885d86e1.com.    180     IN      A       72.241.80.119  -BUCKEYECOM.NET usa
926817a885d86e1.com.    180     IN      A       75.46.59.116   -sbc - usa
926817a885d86e1.com.    180     IN      A       75.73.225.114  -comcast usa
926817a885d86e1.com.    180     IN      A       76.181.187.227 -rr.com usa
926817a885d86e1.com.    180     IN      A       24.155.47.188  -Grande Communications Networks, Inc ? usa ?
926817a885d86e1.com.    180     IN      A       68.126.198.229 -sbc usa
926817a885d86e1.com.    180     IN      A       71.9.38.229    -charter usa
926817a885d86e1.com.    180     IN      A       71.198.13.0    -comcast usa
926817a885d86e1.com.    180     IN      A       71.205.236.169 -comcast usa
926817a885d86e1.com.    180     IN      A       72.184.82.147  -rr.com usa

;; AUTHORITY SECTION:
926817a885d86e1.com.    28148   IN      NS      ns2.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns3.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns4.926817a885d86e1.com.
926817a885d86e1.com.    28148   IN      NS      ns1.926817a885d86e1.com.

;; ADDITIONAL SECTION:
ns1.926817a885d86e1.com. 43200  IN      A       76.181.187.227 -rr.com usa
ns2.926817a885d86e1.com. 28148  IN      A       68.39.83.198   -comcast usa
ns3.926817a885d86e1.com. 43200  IN      A       68.126.198.229 -sbc usa
ns4.926817a885d86e1.com. 28148  IN      A       76.181.187.227 -rr.com usa

;; Query time: 257 msec
;; SERVER: boris
;; WHEN: Thu Apr 19 18:10:48 2007
;; MSG SIZE  rcvd: 333

Robert powz's quite a few americans pcs there. I'd guess theres a big spam run in the 'tubes' - and quite a few Japanese spambotted pc's too.

18 April: In the spirit of the file EMAILS.1519 (which i have a copy of) is re-activated in spirit. You know unsubscribe request that started this rather page - well Robert re-spammed the domain owner again and twice - (Sky in Opsan) gets credit for first mentioning this recently.

Image opens a closeup/

Once on, never off. - or for the clueless 'Once a spammer always a spammer'. I conclude that the 14 spams cleared by the user where also sent by Robert. Those doughnuts must be good - I would urge all WA state voters to elect a less fat State Attorney General.

17 April: Gardening time dont you think ?

emailbroadcastauthority.com. 3600 IN A     124.254.29.141
ns1.emailbroadcastauthority.com. 43200 IN A     218.106.165.183
ns2.emailbroadcastauthority.com. 43200 IN A     124.254.29.141
ns3.emailbroadcastauthority.com. 43200 IN A     221.194.44.60
ns4.emailbroadcastauthority.com. 43200 IN A     202.92.63.166

theemailadvertisingcompany.com. 3600 IN SOA     dns13.hichina.com. hostmaster.hichina.com. 2007030501 3600 600 604800 3600

emailbroadcastingcompany.com. 3600 IN   A       124.254.29.141
ns1.emailbroadcastingcompany.com. 21235 IN A    218.106.165.183
ns2.emailbroadcastingcompany.com. 21235 IN A    124.254.29.141
ns3.emailbroadcastingcompany.com. 21235 IN A    221.194.44.60
ns4.emailbroadcastingcompany.com. 21235 IN A    202.92.63.166

Below just have name servers

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166

ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166

ns1.emailmarketingassociates.com. 43200 IN A    218.106.165.183
ns2.emailmarketingassociates.com. 43200 IN A    124.254.29.141
ns3.emailmarketingassociates.com. 43200 IN A    221.194.44.60
ns4.emailmarketingassociates.com. 43200 IN A    202.92.63.166

Result datestamp:
;; Query time: 348 msec
;; SERVER: boris
;; WHEN: Tue Apr 17 22:18:18 2007
;; MSG SIZE  rcvd: 198

Most of those ip's and hosters I recognise, and have been already documented here.

16 April: Dereliction of duty - somebody shoot me I failed to list emailbroadcastingcompany.com as Bob domain and not 'theemailbroadcastingcompany.com', in my defence it also was masked by some dns bots which kept the domain off the main lists by obsurity - it however got a mention on 23/01/2007 in the blog section. Sorry

I report as the domain is now spamming - updated stuff follows for emailbroadcastingcompany.com

whois emailbroadcastingcompany.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailbroadcastingcompany.com
  Creation Date........ 2006-11-17 21:42:46
  Registration Date.... 2006-11-17 21:42:46
  Expiry Date.......... 2007-11-17 21:42:46
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailbroadcastingcompany.com
  Name Server.......... ns3.emailbroadcastingcompany.com
  Name Server.......... ns2.emailbroadcastingcompany.com
  Name Server.......... ns1.emailbroadcastingcompany.com

dig www.emailbroadcastingcompany.com

; <<>>  DiG 9.3.4 <<>> www.emailbroadcastingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34978
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;www.emailbroadcastingcompany.com. IN   A

;; ANSWER SECTION:
www.emailbroadcastingcompany.com. 1004 IN A     124.254.29.141 *new 

;; AUTHORITY SECTION:
emailbroadcastingcompany.com. 28231 IN  NS      ns1.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns2.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns3.emailbroadcastingcompany.com.
emailbroadcastingcompany.com. 28231 IN  NS      ns4.emailbroadcastingcompany.com.

;; ADDITIONAL SECTION:
ns1.emailbroadcastingcompany.com. 28231 IN A    218.106.165.183 [cn seen before]
ns2.emailbroadcastingcompany.com. 28231 IN A    124.254.29.141  *new see below
ns3.emailbroadcastingcompany.com. 28231 IN A    221.194.44.60   [cn seen before]
ns4.emailbroadcastingcompany.com. 28231 IN A    202.92.63.166   [bangladesh * seen before]

;; Query time: 59 msec
;; SERVER: Boris
;; WHEN: Mon Apr 16 19:51:02 2007
;; MSG SIZE  rcvd: 202

Thank you for the spamcop reports - host 124.254.29.141 is fresh to this page. - Gardening later this week. Admin note: Japan entries will not be shown on the map because the whois is rather vague if you dont read the local langauge. Japan spambots are still listed on this page, otherwise northern japan will look like a pork major processing plant. This bug affects ip to geolocation services too, if using 'western langauges.

 whois 124.254.29.141
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

11 April: Ed says opsan is ok, and Robert gains a few more fans here, and here too. so it's not just one or two people and an angry dog which somebody somewhere will no doubt claim.

Oddly enough a person by the name of Mark Pryor (us senate) starts thinking - see slashdot. Whether this is just only co2 emmissions or something else we will have to observe. Poltics wise i am keeping to the 'local' SAG race for 2008 - Washington State voters can probably do better than what they have now.

10 April: Gardening - usual suspects again (spam not seo)on quick glance and compare. Opsan's blog appears down here for posting to.

5 April: Minding ones business comrade Ed hints me about somthing called theemailadvertisingcompany.com. which is a brand new domain name and not something old and dealt with before.

This registrar used here before in 23/11/2006 might also be of interest to Soloway watchers

[grs.hichina.com]
Domain Name ..................... theemailadvertisingcompany.com
Name Server ..................... dns13.hichina.com
                                  dns14.hichina.com
Registrant ID ................... hc380703102-cn
Registrant Name ................. ff ff
Registrant Organization ......... fff
Registrant Address .............. shanxi
Registrant City ................. shanxi
Registrant Province/State ....... shanxi
Registrant Postal Code .......... 100000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.0101000000 - 
Registrant Fax .................. +86.100000000000 - 
Registrant Email ................ leohosting@hotmail.com
Administrative ID ............... hc880703102-cn
Administrative Name .............  DaGang
Administrative Organization ..... 
Administrative Address .......... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Administrative City ............. Beijing
Administrative Province/State ... Beijing
Administrative Postal Code ...... 100085
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.01062969470 - 
Administrative Fax .............. +86.01062969470 - 
Administrative Email ............ postmaster@2ndDNS.com
Billing ID ...................... hc367443358-cn
Billing Name ....................  DaGang
Billing Organization ............ 
Billing Address ................. No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100085
Billing Country Code ............ CN
Billing Phone Number ............ +86.01062969470 - 
Billing Fax ..................... +86.01062969470 - 
Billing Email ................... postmaster@2ndDNS.com
Technical ID .................... hc680703102-cn
Technical Name ..................  DaGang
Technical Organization .......... 
Technical Address ............... No.11 Xinxi Rd, Shangdi Information Industry Base, Haidian District, Beijing, China
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100085
Technical Country Code .......... CN
Technical Phone Number .......... +86.01062969470 - 
Technical Fax ................... +86.01062969470 - 
Technical Email ................. postmaster@2ndDNS.com
Expiration Date ................. 2008-02-27 10:13:25

http://2nddns.com/ is a very Chinese affair - they appear to the registrar/reseller for hichina.com I might be 100% wrong there. This is interesting

dig www.theemailadvertisingcompany.com

; <<>> DiG 9.3.4 <<>> www.theemailadvertisingcompany.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40207
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.theemailadvertisingcompany.com. IN A

;; ANSWER SECTION:
www.theemailadvertisingcompany.com. 3600 IN CNAME catalyst3550.meibu.com.
catalyst3550.meibu.com. 20      IN      A       58.17.245.130

;; AUTHORITY SECTION:
meibu.com.              43020   IN      NS      ns3.meibu.com.
meibu.com.              43020   IN      NS      ns2.meibu.com.

;; Query time: 1389 msec
;; SERVER: boris
;; WHEN: Fri Apr  6 19:24:59 2007
;; MSG SIZE  rcvd: 137

if your awake and not bored yet meibu.com was last seen in 01/11/2005 I note. Its China 'paging the pandas'

whois 58.17.245.130
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      58.17.128.0 - 58.17.255.255
netname:      CNCGROUP-CQ
descr:        CNC Group Chongqing province network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       CH455-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-CQ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20050215
changed:      hm-changed@apnic.net 20050218
source:       APNIC

route:        58.17.128.0/17
descr:        CNC Group CHINA169 Chongqing Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

I will update the map later on, gardening tuesday

2 April: Gardening time, so one two three and shovels at dawn.

Just the spam stuff today. somebody else can do the seo domains if the feel like it. No major changes - all ip's listed have been seen here previously, the order that there shown is somthing i have not checked since we last went gardening.

 dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2399
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43194 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 6396 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:30:51 2007

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     202.92.63.166   [bangladesh * seen before]
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.106.165.183 [china * seen before]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     210.76.106.82   [china * seen before]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.60   [china * seen before]

Less dns clarity from

 

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [china * seen before]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [china * seen before]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [china * seen before]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166  [bangladesh * seen before]

? bad dns skills ? - somebody mentioned in opsan an rfc 1918 setup (local - non routable ranges of ip addresses, it would appear that this is not a spambot controller

dig emailsolutioncorp.com

; <<>> DiG 9.3.4 <<>> emailsolutioncorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29674
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailsolutioncorp.com.         IN      A

;; ANSWER SECTION:
emailsolutioncorp.com.  3600    IN      A       210.76.106.82   [china * seen before (www) server]

;; AUTHORITY SECTION:
ns1.emailsolutioncorp.com. 43200 IN     A       218.106.165.183 [china * seen before]
ns2.emailsolutioncorp.com. 43200 IN     A       210.76.106.82   [china * seen before]
ns3.emailsolutioncorp.com. 43200 IN     A       221.194.44.60   [china * seen before]
ns4.emailsolutioncorp.com. 43200 IN     A       202.92.63.166   [bangladesh * seen before]

;; Query time: 1355 msec
;; SERVER: boris
;; WHEN: Mon Apr  2 11:35:40 2007
;; MSG SIZE  rcvd: 127

One more

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3604
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212 [china * seen before]

;; AUTHORITY SECTION:
emailmarketingassociates.com. 1293 IN   NS      ns1.prioritydns.info.

;; ADDITIONAL SECTION:
ns1.prioritydns.info.   881     IN      A       218.106.165.183 [china *seen before]

;; Query time: 1401 msec
;; SERVER: boris_the_bear
;; WHEN: Mon Apr  2 11:37:06 2007
;; MSG SIZE  rcvd: 112

admin: I do like this mapping nonsense - I've added a link in the the main menu i use for this page, other features on map 3 now include Robert's old haunts, and isp. Map 4 needs some more spamcop reports, but south america is looking good recently.

28 March: Sky over at Opsan reports a new domain imaginatively named 'emailmarketingassociates.com'. Registered to our friend in China named Liu. Usual garbage starts below.

 whois emailmarketingassociates.com -hwhois.dns.com.cn
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailmarketingassociates.com
  Creation Date........ 2006-11-17 21:43:12
  Registration Date.... 2006-11-17 21:43:12
  Expiry Date.......... 2007-11-17 21:43:12
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailmarketingassociates.com
  Name Server.......... ns3.emailmarketingassociates.com
  Name Server.......... ns2.emailmarketingassociates.com
  Name Server.......... ns1.emailmarketingassociates.com

dig emailmarketingassociates.com

; <<>> DiG 9.3.4 <<>> emailmarketingassociates.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24514
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;emailmarketingassociates.com.  IN      A

;; ANSWER SECTION:
emailmarketingassociates.com. 3600 IN   A       218.106.165.212

;; AUTHORITY SECTION:
emailmarketingassociates.com. 42698 IN  NS      ns3.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns4.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns1.emailmarketingassociates.com.
emailmarketingassociates.com. 42698 IN  NS      ns2.emailmarketingassociates.com.

;; ADDITIONAL SECTION:
ns1.emailmarketingassociates.com. 9687 IN A     218.106.165.183 [cn * seen before]
ns2.emailmarketingassociates.com. 924 IN A      210.76.106.82 [cn * seen before]
ns3.emailmarketingassociates.com. 924 IN A      221.194.44.60 [cn * seen before]
ns4.emailmarketingassociates.com. 924 IN A      202.92.63.166 [bd * seen before]

;; Query time: 968 msec
;; SERVER: boris
;; WHEN: Tue Mar 27 12:20:52 2007
;; MSG SIZE  rcvd: 198

Locations: www- 218.106.165.212 (china), dns 75% china 25% Bangladesh. - i thus procliam Bangladesh to be a spam sewer. I also note some subtle change to the website - millions of us are not.

Anyhow spamcop reports most welcome. - maps have been updated thank you, more reports always welcome.

27 March: Admin note: before i bore you all to death with the 'where' theres been some nastiness in the world of 'counting' should any outside link (not that use i them much) might add spyware etc, and if you think it was inserted via here please do let me know. As per my defaults most links on this page link to stuff we provide. But do let me know and we will rethink the approach.

Now wheres that dog gone....

ns1.emailsolutioncorp.com. 38746 IN     A       218.106.165.183 [cn was 207]
ns2.emailsolutioncorp.com. 38746 IN     A       210.76.106.82   [cn china govt was 241]
ns3.emailsolutioncorp.com. 38746 IN     A       221.194.44.60   [cn - no change]
ns4.emailsolutioncorp.com. 38746 IN     A       202.92.63.166   [bd - no change]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66   [cn - no change]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60   [cn - no change]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241  [cn - no change]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166   [bd - no change]

ns1.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     218.57.8.93     [cn - no change]
ns2.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     221.194.44.62   [cn - no change]
ns3.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     222.76.212.175  [cn - no change]
ns4.EMAILBROADCASTAUTHORITY.COM. 24967 IN A     208.2.150.150   [usa - no change medecison]

;; Query time: 1522 msec
;; SERVER: boris
;; WHEN: Mon Mar 26 17:57:01 2007

No change in the world of seo to report either and usual suspects. Interestingly now playing whack a mole is ns2.emailsolutioncorp.com and our friends in the chinese government aka 'Beijing Software Industry Productivity Center' and fuy@bsw.gov.cn So china gets a gold spam with 9/12 dns spots, silver goes to Bangladesh with 2/12, and usa fails miserably with bronze with 1/12 so no gold medals for america.

That concludes the gardening.

22 March: Latest map map3e Robert Soloway Map (version 5). should be for your consideration. It features two maps on a page, however something better would be desirable - this was achieved with a bit of searching and no book help.

Your spamcop reports are most welcome, your spamcop report (with the spamming ip) could be added to the map.

help: If there be any googlemap experts willing to drop a hint - please drop me a note. I need to visit a library before I can progress further with maps.

news wise: In Opsan robert is compared to failed marriage partner in reference to his telephone manner a Florist observes. Thank you to Green Cottage for that observation.

plans: Speaking of gardens - I plan to do some gardening soon - have you seen my spade ?.

17 March: Have a go with http://sjwest01.googlepages.com/map3.html Robert Soloway Map very very very beta. Thank you for the spamcop reports. SEO Section moved up the document a little it annoyed us where it was.

New! - http://sjwest01.googlepages.com/map4.html Robert Soloway Spambot Map (also very beta).

15 March: Dns update - (yawn) Medecision make another appearance hmmmm.

ns1.emailsolutioncorp.com. 9245 IN      A       218.106.165.207 [cn]
ns2.emailsolutioncorp.com. 9245 IN      A       210.76.106.241 [cn]
ns3.emailsolutioncorp.com. 9245 IN      A       221.194.44.60 [cn]
ns4.emailsolutioncorp.com. 9245 IN      A       202.92.63.166 [bd]

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 [Medecison, usa]

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66 [cn]
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60 [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [bd]

;; SERVER: boris
;; WHEN: Thu Mar 15 17:20:58 2007
;; MSG SIZE  rcvd: 191

admin note: Strangley i find out this page is Great Firewall of China 'friendly'.

14 March: Thank you for the spamcop reports. We need better roach killer, some might say thats very christian that. Anyhow the two domains who lost there 'where' have returned.

Before i bore you all to death Our chinese government friends make yet anoher appearance (you see China does loves spam) and we all take a holiday to Bangladesh which is a new destination for us, its another stamp in the passport folks.

whois 202.92.63.166
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.92.48.0 - 202.92.63.255
netname:      AIRNET
descr:        Dekko Airnet Ltd.
descr:        Internet Service Provider
descr:        Dhaka
descr:        Bangladesh
country:      BD
admin-c:      FR17-AP
tech-c:       FR17-AP
changed:      hm-changed@apnic.net 20030121
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-BD-DEKKO-AIRNET
source:       APNIC

person:       Faisal Rahman
nic-hdl:      FR17-AP
e-mail:       faisal@danl.com.bd
address:      Dekko Airnet Ltd.
address:      13 Kawran Bazar
address:      T.K. Bhaban (17th Floor)
address:      Dhaka 1215
phone:        +880 2 9110296
fax-no:       +880 2 8123608
country:      BD
changed:      faisal@danl.com.bd 20040320
mnt-by:       MAINT-BD-DEKKO-AIRNET
source:       APNIC

One meets many 'old friends' while doing this page. Boring stuff follows sorry.

ns1.permissionemailcorp.com. 43200 IN   A       124.254.44.66  [cn]
;; ADDITIONAL SECTION:
ns2.permissionemailcorp.com. 43200 IN   A       221.194.44.60  [cn]
ns3.permissionemailcorp.com. 43200 IN   A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.permissionemailcorp.com. 43200 IN   A       202.92.63.166 [Dhaka, Bangladesh, BD]

ns1.emailsolutioncorp.com. 10794 IN     A       124.254.44.66  as above
ns2.emailsolutioncorp.com. 10794 IN     A       221.194.44.60
ns3.emailsolutioncorp.com. 10794 IN     A       210.76.106.241 [cn - Beijing Software Industry Productivity Center]
ns4.emailsolutioncorp.com. 10794 IN     A       202.92.63.166

;; Query time: ???
;; SERVER: boris
;; WHEN: Tue Mar 13 15:15:40 2007

13 March: Sky in opsan thinks Roberts been a dns botneting again - this time on roach runner (rr.com). So it's time to do some gardening again one, two, three spades at the ready and go.

We have a new dns supplier meet strawberyaudk.org and somebody called Aquil A. Naeem, 110 Arrowcreek Drive, 28273, Charlotte, North Carolina USA. Geeky people will also notice the change in in Gandi lookup.

whois strawberyaudk.org -hwhois.gandi.net
[Querying whois.gandi.net]
[whois.gandi.net]
% GANDI Registrar whois database for .COM, .NET, .ORG., .INFO, .BIZ, .NAME
% Acces et utilisation soumis a la legislation francaise sur
% les donnees personnelles.
% yada yada ye....
% Date: 2007/03/12 12:38:01
domain:         strawberyaudk.org
owner-address:  2110 Arrowcreek Drive #303
owner-address:  28273
owner-address:  Charlotte
owner-address:  North Carolina
owner-address:  United States of America
admin-c:        AAN19-GANDI
tech-c:         AAN19-GANDI
bill-c:         AAN19-GANDI
nserver:        ns1.strawberyaudk.org 217.70.185.0
nserver:        ns2.strawberyaudk.org 217.70.185.0
nserver:        ns5.strawberyaudk.org 217.70.185.0
nserver:        ns3.strawberyaudk.org 217.70.185.0
nserver:        ns4.strawberyaudk.org 217.70.185.0
reg_created:    2007-02-28 20:26:37
expires:        2008-02-28 20:26:37
created:        2007-02-28 21:25:05
changed:        2007-03-12 11:52:34

person:         Aquil A. Naeem
nic-hdl:        AAN19-GANDI
address:        2110 Arrowcreek Drive #303
address:        28273
address:        Charlotte
address:        North Carolina
address:        United States of America
phone:          +1.4406102907
e-mail:         6cc3e844b11b50948e6aab86be40905d-aan19@contact.gandi.net
lastupdated:    2007-02-28 21:23:07

Summarising the below changes be (withdrawals) that our Chinese government friends at 210.76.96.0 - 210.76.115.255, (Beijing Software Industry Productivity Center) dont like Bob it appears - surprising that.

Additions now: Medecision make a reapperance from 25 Feb 2007 They do seem to be a bit clueless. Lots of usa dsl boxes here, of note (and close to Robert home?) is Charter Communications KNWK-WA, usa on 68.189.136.87 (see below).

Of more interest: Australia makes an appearance via unwiredaustralia.com.au which would appear to be a dsl supplier too. Most importantly is new Chinese dns provider by the name of XIAMEN-TELECOM-IDC-XIAMEN-FJ

whois 222.76.212.175
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      222.76.208.0 - 222.76.223.255
netname:      XIAMEN-TELECOM-IDC-XIAMEN-FJ
country:      CN
descr:        Xiamen Telecom IDC
descr:        Xiamen Fujia Province
admin-c:      CA67-AP
tech-c:       CA67-AP
changed:      fjnic@fjdcb.fz.fj.cn 20040719
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CHINANET-FJ
source:       APNIC

role:         CHINANETFJ IP ADMIN
address:      7,East Street,Fuzhou,Fujian,PRC
country:      CN
phone:        +86-591-3333169-293
fax-no:       +86-591-3371954
e-mail:       fjnic@fjdcb.fz.fj.cn
trouble:      send spam reports  and abuse reports
trouble:      to abuse@fjdcb.fz.fj.cn
trouble:      Please include detailed information and
trouble:      times in UTC
admin-c:      FH71-AP
tech-c:       FH71-AP
nic-hdl:      CA67-AP
mnt-by:       MAINT-CHINANET-FJ
changed:      fjnic@fjdcb.fz.fj.cn 20020719
source:       APNIC

Boring stuff now sorry.

ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93    [cn]
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62  [cn]
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 [cn - ?new?]
ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150  [medecison, usa]

ns1.permissionemailcorp.com. 180 IN     A       24.126.126.177 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       67.166.181.124 [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       69.47.53.127   [WideOpenWest, il,usa]
ns1.permissionemailcorp.com. 180 IN     A       24.6.233.172   [comcast usa]
ns1.permissionemailcorp.com. 180 IN     A       24.125.160.190 [comcast usa]
;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns1.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns2.strawberyaudk.org.
permissionemailcorp.com. 43200  IN      NS      ns3.strawberyaudk.org.

emailsolutioncorp.com.  180     IN      A       24.23.125.215  [comcast, usa]
emailsolutioncorp.com.  180     IN      A       67.9.165.164   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       67.10.13.218   [rr.com, usa]
emailsolutioncorp.com.  180     IN      A       68.189.136.87  [Charter Communications KNWK-WA, usa]
emailsolutioncorp.com.  180     IN      A       125.63.139.70  [unwiredaustralia. com.au]
;; AUTHORITY SECTION:
emailsolutioncorp.com.  28387   IN      NS      ns2.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns3.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns4.strawberyaudk.org.
emailsolutioncorp.com.  28387   IN      NS      ns1.strawberyaudk.org.

;; Query time: 2740 msec
;; SERVER: boris
;; WHEN: Mon Mar 12 11:24:09 2007
;; MSG SIZE  rcvd: 272

Sky was right. - I imagine websites point to China as usual via these proxies. Update: only one domain seems to work, Robert has broken his internet thingy again. - up host is

ns1.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     218.57.8.93
ns2.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     221.194.44.62
ns3.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     222.76.212.175
ns4.EMAILBROADCASTAUTHORITY.COM. 15557 IN A     208.2.150.150

Most of those point east to that red book waving country, whose name aludes me. Imagine breaking the internet on a monday morning. Anyhow more fun and gardening (come smell the roses) soon.

Admin: Have had a little 'fun' with the Bob screen dumps - all are now clickable and printable (provided you can handle png) without right clicking.

10 March: Friend cc's us a bob craplet, other news I am using this on the right hand menu. Which might be usefull/useless, the right hand menu is never printed out of you use our print css file. This sort of function usually strikes me as pointless until recently, Views welcome.

9 March: With the recent link to smd (spam of mass destruction) in this page I can widen my focus a little but still keeping to my objective as mostly remaining a Robert Soloway spam document.

The US SEC (stock exchange) have decided to block trading in spams promoting stock trading. A quote i think.

He said the SEC is investigating the companies themselves as well as outsiders, and that the same people are likely behind multiple spam campaigns. The suspensions will last for 10 days. The S.E.C. said that further investigation could lead to arrests.

Recent offenders fingered by the us sec and have had there trading stopped included.

Quite what this means for Robert is something we can all speculate about. What the SEC thinks about can-spam legislation is pretty clear. I hope that this action by the sec continues. If it does not then its value as a statement only about 'can-spam' effectiveness was worth a mention here.

8 March: Sky confirms and informs us via opsan that the comrades in Chinas government are aware there hosting Robert Soloway in several forms, quite how 'anti spam' that makes them is something you can all think about.

7 March: Thank you for the spamcop reports, more always welcome. I will be doing some Robert Soloway 'gardening' soon when the time makes itself free.

Seo domains first, submit-me-now.com no change with dns services supplied by China Telecom, and Beijing Feihua Communication Technology Co.Ltd. and hosted in China at Beijing Guanghuan Xinwang Digital Technology co.Ltd

nim-company.com (other seo) also shows no changes in status with its american hosting as before.

spam domains now, we have a mix of Korea and China here

EMAILBROADCASTAUTHORITY.COM - NS2.EMAILBROADCASTAUTHORITY.COM changes from 211.155.132.228 to

ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62

Thats China (still) CNCGROUP Hebei Province Network, no other changes. to emailbroadcastauthority.com. Next one strikes me a mildly humourous new hoster in guess ... China.

dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43079
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       210.76.106.241

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 431 msec
;; SERVER: boris
;; WHEN: Wed Mar  7 16:45:44 2007
;; MSG SIZE  rcvd: 129

Meet Beijing Software Industry Productivity Center on 210.76.106.241 (you will be seeing a lot of them) is this the Chinese Government/peoples liberation army (pla) ?

whois 210.76.106.241
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-AP
tech-c:       YF124-AP
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       APNIC

person:       Yi Fu
nic-hdl:      YF124-AP
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       APNIC

inetnum:      210.76.96.0 - 210.76.115.255
netname:      BESTINFONET
country:      CN
descr:        Beijing Software Industry Productivity Center
descr:        F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
admin-c:      YF124-CN
tech-c:       YF124-CN
status:       ASSIGNED NON-PORTABLE
mnt-by:       MAINT-CNNIC-AP
changed:      dongyan@cnnic.cn 20040906
changed:      hm-changed@apnic.net 20040927
source:       CNNIC

person:       Yi Fu
nic-hdl:      YF124-CN
e-mail:       fuy@bsw.gov.cn
address:      F12, Baiyan Building, NO.238, Beisihuanzhong Road, Haidian District, Beijing, P.R. China
phone:        +86-010-82331717-863
fax-no:       +86-010-82332323
country:      CN
changed:      dongyan@cnnic.cn 20040906
mnt-by:       MAINT-NEW
source:       CNNIC

Dns points to

ns4.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns3.permissionemailcorp.com. 43200 IN   A       222.122.56.49 * korea
ns2.permissionemailcorp.com. 3600 IN    A       210.76.106.241
ns1.permissionemailcorp.com. 43144 IN   A       218.57.8.93

In China - CNCGROUP-SD, Beijing Software Industry Productivity Center x 2

And finally .... emailsolutioncorp.com... (never forgotten)

emailsolutioncorp.com.  3600    IN      A       210.76.106.241
ns4.emailsolutioncorp.com. 6171 IN      A       88.146.0.57 * czech - eu
ns1.emailsolutioncorp.com. 6171 IN      A       218.57.8.93
ns2.emailsolutioncorp.com. 6171 IN      A       210.76.106.241
ns3.emailsolutioncorp.com. 6171 IN      A       222.122.56.49 * korea

In China - CNCGROUP-SD, and Beijing Software Industry Productivity Center x2 (see above), plus our czech friends from last time, and Korea. Gardening time is finished for now.

6 March: admin note: Well George and Tony have wmd so Bananas must have 'smd' theories. Thats spam of mass destruction.

5 March: globustravelclub.info will be added to the domain list after looking at this (google) and Ed finds a link to aristocratroyal.info also a Google link which links it to drug sales of spam type that we all love.

Thank you also for the recent spamcop reports. Its very nice to have an original of the Robert mess up noted below.

3 March: Ed over at Opsan spots some Robert confusion. Now if this does not say something to shady then I'm a teapot called George. Excerpt from Roberts spam (I have copies of spamcop.net) for authenticity*.

Check out this new website i have found:

http://www.globustravelclub.info

everything you needed in one place.
we email advertise your charity web site to 7,500,000 people. free.

http://www.emailsolutioncorp.com 

Two in one email that is deserving of a lookup i think...

whois globustravelclub.info
[Querying whois.afilias.info]
[whois.afilias.info]
Yada yada ye 

Domain ID:D16446387-LRMS
Domain Name:GLOBUSTRAVELCLUB.INFO
Created On:09-Feb-2007 20:00:33 UTC
Last Updated On:20-Feb-2007 20:17:54 UTC
Expiration Date:09-Feb-2008 20:00:33 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:F4BA58C1E307310F
Registrant Name:Sierra Prine
Registrant Organization:
Registrant Street1:1080 Lake Front Dr Apt 718
Registrant Street2:
Registrant Street3:
Registrant City:Sacramento
Registrant State/Province:CA
Registrant Postal Code:95831
Registrant Country:US
Registrant Phone:+1.9164287480
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: greitsai@yahoo.com
Admin ID:F4BA58C1E307310F
Admin Name:Sierra Prine
Admin Organization:
Admin Street1:1080 Lake Front Dr Apt 718
Admin Street2:
Admin Street3:
Admin City:Sacramento
Admin State/Province:CA
Admin Postal Code:95831
Admin Country:US
Admin Phone:+1.9164287480
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:greitsai@yahoo.com
Billing ID:F4BA58C1E307310F
Billing Name:Sierra Prine
Billing Organization:
Billing Street1:1080 Lake Front Dr Apt 718
Billing Street2:
Billing Street3:
Billing City:Sacramento
Billing State/Province:CA
Billing Postal Code:95831
Billing Country:US
Billing Phone:+1.9164287480
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:greitsai@yahoo.com
Tech ID:F4BA58C1E307310F
Tech Name:Sierra Prine
Tech Organization:
Tech Street1:1080 Lake Front Dr Apt 718
Tech Street2:
Tech Street3:
Tech City:Sacramento
Tech State/Province:CA
Tech Postal Code:95831
Tech Country:US
Tech Phone:+1.9164287480
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:greitsai@yahoo.com
Name Server:NS1.RABBITANDTIGER.NET
Name Server:NS2.RABBITANDTIGER.NET
Name Server:NS3.RABBITANDTIGER.NET
Name Server:NS4.RABBITANDTIGER.NET
Name Server:NS5.RABBITANDTIGER.NET

admin note: We now have a working local html validator, and this should mean one update, rather than several where i fixed stupid stuff with euro; signs, etc. So an update is an update, rather than a html check.

Also we are attempting our yearly spell check

*An authentic Robert Soloway spam ? and not a fake does appear to have a level of comic value here to my brain.

27 February: Getting bored ? - falling asleep while ploughing through the last of the recent date entries - well so was I. Anyhow how Robert lightens the tones with a new domain, so fire up that J S Bach music in your telephone system as we introduce a new Robert Soloway domain of... emailsolutioncorp.com.

whois -hwhois.dns.com.cn emailsolutioncorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... emailsolutioncorp.com
  Creation Date........ 2006-11-17 21:43:07
  Registration Date.... 2006-11-17 21:43:07
  Expiry Date.......... 2007-11-17 21:43:07
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns4.emailsolutioncorp.com
  Name Server.......... ns3.emailsolutioncorp.com
  Name Server.......... ns2.emailsolutioncorp.com
  Name Server.......... ns1.emailsolutioncorp.com

OK good old liu feng and guang zhou there, for domain look up spade the nameserver not the domain name

--- resolving host "ns1.emailsolutioncorp.com", please wait...
ns1.emailsolutioncorp.com [218.57.8.93]
--- 02/27/07 00:43:53 GMT Standard Time
--- resolving host "ns2.emailsolutioncorp.com", please wait...
ns2.emailsolutioncorp.com [221.194.44.60]
(ns1.prioritydns.info [221.194.44.60] )
--- 02/27/07 00:43:58 GMT Standard Time
--- resolving host "ns3.emailsolutioncorp.com", please wait...
ns3.emailsolutioncorp.com [222.122.56.49]
--- 02/27/07 00:44:04 GMT Standard Time
--- resolving host "ns4.emailsolutioncorp.com", please wait...
ns4.emailsolutioncorp.com [88.146.0.57]

Servers (dns) listed as

[218.57.8.93] - China
[221.194.44.60] - China
[222.122.56.49] - South Korea - Please Kim Jong-il nuke kornet and South Korea please please
[88.146.0.57] - Our czech friends again (eu)

Funny (humour) from opsan now from Comrade 'Flood the Spambox' whose activities to unsubscribe spam, and try and purchase his spam package (via non ssl) finally got a response. I love Roberts odd logic and lack of understanding of jurisdiction. Standard pure bull shit.

I'm sure the owner of robmckenna.org which not like to get Roberts Soloways Spam - I do hope some nice republican supporter will visit Mr Soloways website and unsubscribe that domain - after can-spam sorted out the spam problem didn't it.

Thank you for the spamcop reports.

26 February: admin note: have added link at the top of this document to cover the 2008 elections. Any help with links and comments by made by the SAG quoted in the press most welcome. After all it is an election year.

Thank you for the spam cop reports, Spamhaus have assigned sbl's to Czech isps (see couple of days ago entry) for details

Sky reports Robert is Havesting email from domains again over at Opsan.

A message to me (smoke signals) informs me that 221.194.44.61 (China) reportedly has port 3389 open - which apparently has a terminal service on a windows box. This box also hosts Roberts spamming websites of EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com which I referred to here on the 23/02/2007.

This seems to fits Robert windows platform preference observered here before in this page.

Should you wish to have fun do please take care, Robert has yet another 'fan'. Thank you for your tip (unverified).

25 February:Whois 'MEDecision' ? which was the name in look from yesterday - apparently

MEDecision provides software, services and clinical content that allows for increased administrative efficiency and improved quality

url:medecision.com
Nasdaq symbol: MEDE
Address: MEDecision Corporate Headquarters, 601 Lee Road, Chesterbrook Corporate Center, Wayne, PA, US,19087
phone: 610-540-0202

DNS to range indicates a breaking via sprint rather than a hack to MEDecisions webhoster (Qwest). Quite why Medecison need a another range i leave for them to explain. Websites hosted on Qwest

whois 72.165.244.1
[Querying whois.arin.net]
[whois.arin.net]
Qwest Communications Corporation QWEST-INET-37 (NET-72-164-0-0-1) 
                                  72.164.0.0 - 72.166.255.255
Medecision, Inc. Q0427-72-165-244-0 (NET-72-165-244-0-1) 
                                  72.165.244.0 - 72.165.244.255

Internal range of Medecision, Inc (range below has Robert Soloway dns server - see yesterdays entry) appears to be:

 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

Interesting - I'd like to hear an explanation anyhow.

24 February: Boring entry today - sorry but permissionemailcorp.com dns changes from

ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93 #
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49 #
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57 €

to

ns1.permissionemailcorp.com. 24967 IN   A       218.57.8.93 #
ns2.permissionemailcorp.com. 24967 IN   A       221.194.44.62 #
ns3.permissionemailcorp.com. 24967 IN   A       222.122.56.49 # *
ns4.permissionemailcorp.com. 24967 IN   A       88.146.0.57 €**

Lets do the other shall - why not i hear from those of you whom be awake.

ns4.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     208.2.150.150 USA
ns1.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     218.57.8.93 #
ns2.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     221.194.44.62 #
ns3.EMAILBROADCASTAUTHORITY.COM. 43200 IN A     222.76.212.175 #

key:
# China,
€ Czech (eu)
* new china
- ** see yesterday,
USA america
New spambot setup in progress ? A look up of 222.122.56.49 follows

whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

The other dns of note - america.

 whois 208.2.150.150
[Querying whois.arin.net]
[whois.arin.net]
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1) 
                                  208.0.0.0 - 208.35.255.255
Medecision, Inc. SPRINTLINK (NET-208-2-150-0-1) 
                                  208.2.150.0 - 208.2.150.255

23 February: spam update for EMAILBROADCASTAUTHORITY.COM and permissionemailcorp.com both point to 221.194.44.61 Go Chinese Pandas!

dig permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 11737
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43200  IN      NS      ns3.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43200  IN      NS      ns2.permissionemailcorp.com.

;; Query time: 2867 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:07:31 2007
;; MSG SIZE  rcvd: 129

dig EMAILBROADCASTAUTHORITY.COM

; <<>> DiG 9.3.4 <<>> EMAILBROADCASTAUTHORITY.COM
;; global options:  printcmd
;; Got answer:
;; -<<HEADER<<- opcode: QUERY, status: NOERROR, id: 54442
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;EMAILBROADCASTAUTHORITY.COM.   IN      A

;; ANSWER SECTION:
EMAILBROADCASTAUTHORITY.COM. 3600 IN    A       221.194.44.61

;; AUTHORITY SECTION:
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns1.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns2.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns3.EMAILBROADCASTAUTHORITY.COM.
EMAILBROADCASTAUTHORITY.COM. 43200 IN   NS      ns4.EMAILBROADCASTAUTHORITY.COM.

;; Query time: 3121 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:08:13 2007
;; MSG SIZE  rcvd: 133

whois 221.194.44.61
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

SEO operations now of submit-me-now.com (seo spam op) and nim-company.com

dig submit-me-now.com

; <<>> DiG 9.3.4 <<>> submit-me-now.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:
;submit-me-now.com.             IN      A

;; ANSWER SECTION:
submit-me-now.com.      3600    IN      A       124.42.8.146

;; AUTHORITY SECTION:
submit-me-now.com.      3600    IN      NS      ns1.dns.com.cn.
submit-me-now.com.      3600    IN      NS      ns2.dns.com.cn.

;; ADDITIONAL SECTION:
ns1.dns.com.cn.         2772    IN      A       218.30.114.205
ns1.dns.com.cn.         2772    IN      A       218.30.114.204
ns2.dns.com.cn.         286     IN      A       218.244.47.6
ns2.dns.com.cn.         286     IN      A       218.244.47.5

;; Query time: 3282 msec
;; SERVER: boris
;; WHEN: Thu Feb 22 21:17:32 2007
;; MSG SIZE  rcvd: 161

[sjwest@mail2 ~]$ whois 124.42.8.146
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-AP
tech-c:       WH271-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNNIC-AP
changed:      hm-changed@apnic.net 20060109
source:       APNIC

person:       Chen hao
nic-hdl:      CH471-AP
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

person:       Wang Huijun
nic-hdl:      WH271-AP
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.cn 20060104
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.42.0.0 - 124.42.127.255
netname:      SINNET
descr:        Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr:        2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr:        Dong Cheng Dstrict,Beijing
country:      CN
admin-c:      CH471-CN
tech-c:       WH271-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MANT-CN-SINNET
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060112
source:       CNNIC

person:       Chen hao
nic-hdl:      CH471-CN
e-mail:       lichao@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20030328
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

person:       Wang Huijun
nic-hdl:      WH271-CN
e-mail:       chenbin@sinnet.com.cn
address:      Beijing Guanghuan Xinwang Digital Technology co.Ltd
address:      2/F,Tower A,East Gate Plaza,No.9 Dongzhong Street,
address:      Dong Cheng District,Beijing
phone:        +86-010-64181150
fax-no:       +86-010-64181819
country:      CN
changed:      ipas@cnnic.net.cn 20060313
mnt-by:       MAINT-CNNIC-AP
source:       CNNIC

not forgetting ... nim-company.com being servered in spammy florida still.

No spambots from gandi (France) i notice, Thank you for the spamcop reports dns in Czech (eu) - probably hijacked.

ns4.permissionemailcorp.com [88.146.0.57] 
inetnum:        88.146.0.0 - 88.146.0.255
netname:        ADSLCOLNETWORK2
descr:          ADSL POP
descr:          Czech On Line a.s.
country:        CZ
admin-c:        VOL-RIPE
tech-c:         VOL-RIPE
status:         ASSIGNED PA
mnt-by:         VIDEOONLINE-MNT
mnt-lower:      VIDEOONLINE-MNT
source:         RIPE # Filtered
 
role:           Video On Line Hostmaster Role
address:        Czech On Line a.s.
address:        U Nakladoveho nadrazi 8
address:        130 00, Prague 3
phone:          +420 246000222
phone:          +420 246000400
fax-no:         +420 246000113
remarks:        trouble:      
------------------------------------------
remarks:        trouble:      Operational issues: hostmaster@vol.cz
remarks:        trouble:      Abuse and SPAM:     abuse@vol.cz

update (26/2/2007) Spamhaus add this for the above range and host ost1-v-5-57.static.adsl.vol.cz - at time of writing 6 open tickets for this isp listed here (vol.cz) sbl's

21 February: An anon contact (verified) says Santa Monica California is apparently his original roots - happy digging, and thank you very much

Elections for 2008 - Washington State (WA) not DC (politics1.com) is covering the state - Incumbent State Attorney General appears to be running again Rob McKenna (campaign site) is running, whom i discover is a republican by nature - ?spam is good?

lets go do a whois shall we ?

Domain ID:D25135944-LROR
Domain Name:ROBMCKENNA.ORG
Created On:18-Apr-2000 03:03:37 UTC
Last Updated On:17-Oct-2006 18:07:27 UTC
Expiration Date:18-Apr-2009 03:03:37 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:tuH8oQWrYdeDUm5R
Registrant Name:Rob McKenna
Registrant Organization:Committee to Re-Elect Attorney General Rob McKenna
Registrant Street1:6021 - 118th Avenue SE
Registrant Street2:
Registrant Street3:
Registrant City:Bellevue
Registrant State/Province:WA
Registrant Postal Code:98507
Registrant Country:US
Registrant Phone:+1.4256206337
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:robmckenna@robmckenna.org
Admin ID:tumOyn2iq2eavsIL
Admin Name:Craig Wright
Admin Organization:Committee to Re-Elect Attorney General Rob McKenna
Admin Street1:9039 SE 59th Street
Admin Street2:
Admin Street3:
Admin City:Mercer Island
Admin State/Province:WA
Admin Postal Code:98040
Admin Country:US
Admin Phone:+1.2063902978
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:cbwright@speakeasy.net
Tech ID:tupS4IVNiIChwDfZ
Tech Name:Support Easy CGI
Tech Organization:Easy CGI
Tech Street1:99 Main Street
Tech Street2:
Tech Street3:
Tech City:Nyack
Tech State/Province:NY
Tech Postal Code:10960
Tech Country:US
Tech Phone:+1.8453487698
Tech Phone Ext.:
Tech FAX:+1.8457277777
Tech FAX Ext.:
Tech Email:support@easycgi.com
Name Server:NS1.EASY-CGI.COM
Name Server:NS2.EASY-CGI.COM

Oddly Mr McKennas campaign site is based in New York State phobos.easy-cgi.com (66.245.186.32) Easy CGI, Inc.,EASYCG, 99 Main Street,Nyack,NY,10960 US - there must be something wrong with WA webhosters I assume ?

Consider that a Bananas in the Falklands exclusive.

19 February: General page cleanup (its a bit of a monster to maintain). Recent dns terminations of dns moved from yellow to red colour in domain table. Added the other seo domain name to the 'up host' table too.

admin: Since we are buying hats (a metaphor) recently I do hope that that our friends will perform on the day of the dance. Since my hats getting quite full can anybody recommend a decent big hat because mine is getting quite full.

Anyhow despite a perceived hat problem, i look forward to the dance and i trust someone will send me a 'ticket'.

14 February: Ed writes me that a NANEA post that gandi (the french) trashed MOUSESTYLEE.NET, Beergoggles reports to that phone number does not reach 'George Jones'. So its Chinese dns (very anti spam) again for Robert.

dig permissionemailcorp.com

; >><< DiG 9.3.4 >><< permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37539
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 3

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.61

;; AUTHORITY SECTION:
permissionemailcorp.com. 43199  IN      NS   ns4.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns1.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns2.permissionemailcorp.com.
permissionemailcorp.com. 43199  IN      NS   ns3.permissionemailcorp.com.

;; ADDITIONAL SECTION:
ns1.permissionemailcorp.com. 30127 IN   A       218.57.8.93
ns3.permissionemailcorp.com. 30127 IN   A       222.122.56.49
ns4.permissionemailcorp.com. 8831  IN   A       88.146.0.57

;; Query time: 437 msec
;; SERVER: boris
;; WHEN: Wed Feb 14 22:33:22 2007
;; MSG SIZE  rcvd: 177

name servers locate to 88.146.0.57 = eastern europe,
222.122.56.49 = south korea (kim nukem please!)
218.57.8.93 = China (both CNCGROUP-HE and CNCGROUP-SD).

12 February: Ed writes me that a NANEA post that we have a new dns bot MOUSESTYLEE.NET for permissionemailcorp.com - a short look up

 whois permissionemailcorp.com 
[Querying whois.verisign-grs.com] [whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: PERMISSIONEMAILCORP.COM
   Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
   Whois Server: whois.dns.com.cn
   Referral URL: http://www.dns.com.cn
   Name Server: NS1.MOUSESTYLEE.NET
   Name Server: NS2.MOUSESTYLEE.NET
   Name Server: NS3.MOUSESTYLEE.NET
   Name Server: NS4.MOUSESTYLEE.NET
   Status: clientTransferProhibited
   Updated Date: 11-feb-2007
   Creation Date: 17-nov-2006
   Expiration Date: 17-nov-2007

Some ips: permissionemailcorp.com. 65.185.91.199 (rr.com usa), 68.42.251.58 (comcast Michigan usa), 70.125.129.82 (rr.com usa), 71.118.101.91 (Verizon usa), 65.184.18.110 (rr.com usa). Good old Roach Runner with 3/5 of those

Hello to the French, and George Jones of Dallas. I wonder what happened to Mr Brown ?

domain: mousestylee.net
  reg_created: 2007-02-10 18:22:09
  expires: 2008-02-10 18:22:09
  created: 2007-02-10 19:20:52
  changed: 2007-02-10 20:00:44
  ns0: ns1.mousestylee.net
  ns1: ns2.mousestylee.net
  ns2: ns3.mousestylee.net
  ns3: ns4.mousestylee.net
  ns4: ns5.mousestylee.net
  transfer-prohibited: yes
  owner-c:
    owner-name: George Jones
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  admin-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  tech-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active
  bill-c:
    organisation: ~
    nic-hdl: GJ928-GANDI
    person: George Jones
    address: 4425 Emerson Ave.
    zipcode: 75205
    city: dallas
    country: United States of America
    phone: +1.9729222970
    fax: ''
    email: f70c901870516d7b8b874144f3fe543a-gj928@contact.gandi.net
    lastupdated: 2007-02-10 17:10:43
    statut: active

permissionemailcorp.com - probably still points to China. Thank you for spamcop reports.

8 February: Domain update (as promised) - went through the list - i think that domains advertisingemailcorporation.com and permissionemailcorporation.com have no dns. There status is now set to yellow

Roberts Domains up: EMAILBROADCASTAUTHORITY.COM - china same host and permissionemailcorp.com (China) plus 'new' SEO spamming ops

7 February: Thank you for the spam report. Time permitting i will rescan dns sometime this week and report findings back here.

admin note: Those of you wondering why I have this large page is because it is really interesting to watch an individual spammer in action, if one is thinking while reading this page one can make very informed choices. take..

He is a spammer

is ok but an assumption, but below is better

He is, since he is using ..., blocked also by ... etc

3 February: Well meet permissionemailcorp.com - if it where a song it be a mix of the best (and worst) of Bobs domains listed elsewhere. Credit to Ed who was also spammed.

whois -h whois.dns.com.cn permissionemailcorp.com
[Querying whois.dns.com.cn]
[whois.dns.com.cn]

Domain Name.......... permissionemailcorp.com
  Creation Date........ 2006-11-17 21:43:02
  Registration Date.... 2006-11-17 21:43:02
  Expiry Date.......... 2007-11-17 21:43:02
  Organisation Name.... liu feng
  Organisation Address. guang zhou
  Organisation Address.
  Organisation Address. guang zhou
  Organisation Address. 321000
  Organisation Address. GD
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ guang zhou
  Admin Address........
  Admin Address........ guang zhou
  Admin Address........ 321000
  Admin Address........ GD
  Admin Address........ CN
  Admin Email.......... admin@advertisingemailcorporation.com
  Admin Phone.......... +86.20321000232
  Admin Fax............ +86.20321000232

Tech Name............ liu feng
  Tech Address......... guang zhou
  Tech Address.........
  Tech Address......... guang zhou
  Tech Address......... 321000
  Tech Address......... GD
  Tech Address......... CN
  Tech Email........... admin@advertisingemailcorporation.com
  Tech Phone........... +86.20321000232
  Tech Fax............. +86.20321000232

Bill Name............ liu feng
  Bill Address......... guang zhou
  Bill Address.........
  Bill Address......... guang zhou     
  Bill Address......... 321000    
  Bill Address......... GD     
  Bill Address......... CN   
  Bill Email........... admin@advertisingemailcorporation.com
  Bill Phone........... +86.20321000232
  Bill Fax............. +86.20321000232
  Name Server.......... ns2.permissionemailcorp.com
  Name Server.......... ns1.permissionemailcorp.com
  Name Server.......... ns3.permissionemailcorp.com
  Name Server.......... ns4.permissionemailcorp.com

; <<>> DiG 9.3.4 <<>> permissionemailcorp.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31380
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;permissionemailcorp.com.       IN      A

;; ANSWER SECTION:
permissionemailcorp.com. 3600   IN      A       221.194.44.62

;; AUTHORITY SECTION:
permissionemailcorp.com. 43197  IN      NS      ns4.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns1.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns2.permissionemailcorp.com.
permissionemailcorp.com. 43197  IN      NS      ns3.permissionemailcorp.com.

;; Query time: 2627 msec
;; SERVER: boris
;; WHEN: Sat Feb  3 17:18:30 2007
;; MSG SIZE  rcvd: 129

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

Go Chinese pandas yay!!! Haters of Spam oh yeah - sbl reference http://www.spamhaus.org/SBL/sbl.lasso?query=SBL47895.

2 February: Ed mails and notes some hosting changes ahoy. Also kanjerimada.info as a nameservice bot for advertisingemailcorporation.com - 14 days to go - god bless the french

Domain ID:D15682005-LRMS
Domain Name:KANJERIMADA.INFO
Created On:13-Dec-2006 06:58:09 UTC
Last Updated On:13-Dec-2006 07:29:09 UTC
Expiration Date:13-Dec-2007 06:58:09 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:O-1069683-GANDI
Registrant Name:clarence Brown
Registrant Organization:clarence Brown
Registrant Street1:39 linden ave. n
Registrant Street2:
Registrant Street3:
Registrant City:westbrook
Registrant State/Province:Connecticut
Registrant Postal Code:06498
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:716d8553e2f50049c16849a27e126be6-1071472@owner.gandi.net
Admin ID:CB3541-GANDI
Admin Name:clarence Brown
Admin Organization:
Admin Street1:39 linden ave. n
Admin Street2:
Admin Street3:
Admin City:westbrook
Admin State/Province:Connecticut
Admin Postal Code:06498
Admin Country:US
Admin Phone:+1.8606695398
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email: 316c1edc8824ac9ac9aea73301fab99a-cb3541@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: support@gandi.net
Name Server:NS1.KANJERIMADA.INFO
Name Server:NS2.KANJERIMADA.INFO
Name Server:NS3.KANJERIMADA.INFO
Name Server:NS4.KANJERIMADA.INFO
Name Server:NS5.KANJERIMADA.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Dns queries for that all over the place, a big hi to clarence Brown i think. - Is Clarence Scott Richers (spammer of the ye olden days) possibly the technical cohort who was once named 'Charlie Brown' - which sounded strange to me even then in a media feature on Mr Richers house with a basement full of pcs spewing spam ? - if i may throw a spanner in.

Domain time and time for 'where is it now' game we like playing, stay tuned and we will right back after these adverts...

I confirm with ed that theemailbroadcastingcompany.com has no dns & emailbroadcastauthority.com is up (pay attention now)

dig emailbroadcastauthority.com
; >><< DiG 9.3.4 >><< emailbroadcastauthority.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56854
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;emailbroadcastauthority.com.   IN      A

;; ANSWER SECTION:
emailbroadcastauthority.com. 3600 IN    A       221.194.44.62

 whois 221.194.44.62
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      221.192.0.0 - 221.195.255.255
netname:      CNCGROUP-HE
descr:        CNCGROUP Hebei Province Network
descr:        China Network Communications Group Corporation
descr:        No.156,Fu-Xing-Men-Nei Street,
descr:        Beijing 100031
country:      CN
admin-c:      CH455-AP
tech-c:       JL2284-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-HE
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040329
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20060125
source:       APNIC

route:        221.192.0.0/14
descr:        CNC Group CHINA169 Hebei Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

role:         CNCGroup Hostmaster
e-mail:       abuse@cnc-noc.net
address:      No.156,Fu-Xing-Men-Nei Street,
address:      Beijing,100031,P.R.China
nic-hdl:      CH455-AP
phone:        +86-10-82993155
fax-no:       +86-10-82993102
country:      CN
admin-c:      CH444-AP
tech-c:       CH444-AP
changed:      abuse@cnc-noc.net 20041119
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       jinyuan lu
nic-hdl:      JL2284-AP
e-mail:       jinyuan_lu@heinfo.net
address:      hebei province shijiazhuang
phone:        +86-311-86685210
fax-no:       +86-311-86051214
country:      CN
changed:      lujinyuan@msn.com 20060821
mnt-by:       MAINT-CNCGROUP-HE
source:       APNIC

This concludes.

1 February: Changes to Robert's spam invoices scheme i note from the various spamcop reports i see (more always welcome) current scheme seems to be 123456LETTER, which is a slight variation 12345LETTER7 and then an end for this scam i note again. Its the small things that make Bob happy it seems.

Speaking of friends with 'imaginary work colleagues with email' with a new system (as designed) he's been saving the spams and can probably point out what your average soloway spammee gets quite easily. Should i be interested enough to get my finger out it might make another interesting feature for this page. - anybody think this might be fun ?

I'm beginning to think perhaps Rob McKenna (AG of WA 2004-2008) is on Robert Soloways payroll? - oh well its nice to know the position of such persons. His four year term of office ends in 2008.

admin note: I will publically lynch the next person who suggests that a class action suite be initiated against retard spammer known as robert or occasionally bob. I will have to learn the dark art of lynching first and i don't care what your skin colour (equal opportunity lynching sounds good) is either. Should anybody have an decent websites dedicated to the art of lynching (certified lynchers preferred) then I'd love to hear from you. So don't expect a quick lynch. While civil litigation might have a place it helps if both parties recognise each other should that not be the case then others are needed.

As to that person who thinks Robert is giving email marketers a bad name - welcome to the the party. Spamcop reports always welcome thank you for todays.

29 January: My domain owning friend emails and informs me like others at Opsan do that he finds that fake users (using catchall@domain.dom) are being created by Robert Soloway and then being used by pill pushers. Since it is recognised fact by followers of intelligent design theory (that's death to monkeys too) that we all need to take more asprin* as it is a well known fact in order to make intelligent design make sense is best when stoned.

So (hopefully you all got the joke in the above) what can we say now ? Anyhow your priest would probally recommend cystall meth instead apparently as its better than asprin but that's apparently illegal under the usa patriot act - Bin ladin,wmd and Meth now that's a reach but i suppose if being George Bushes public enemy numero uno your going to need some help from Robert Soloway.

So if inventing email addresses is optin then it raises some interesting questions for thedma.org for if nobody signed up, how might they optout (should that even be technically possible). I'd like an answer to that quandary by them.

Anyhow I doubt spammers r us (thedma.org) will respond. but I'm sure they would happily market meth too. One learns much in these short entries.

Thank you for the spamcop reports too, Sky at Opsan (see main links) notes a striking sameness about a website page design. - Which i added to the dmca section.

26 January: Thank you for the spamcop reports I notice that its now free again.

x] Invoice #: 12345LETTER7 - AMOUNT OWED: $0.00 
We Email Advertise Your Charity Web Site to 7,500,000 People

Odd so nothing new then there. Further unknown skills of Robert include selling fake watches (see opsan). Does Robert know no bounds? What further skills will he perform - stay tuned.

25 January: Super size portions of spamcop reports can be found today Thank you all. Super Fan Henrik returns and I will adding a new section called 'seo spammage' soon. Do Roberts 'talents' have no bounds ? mind you since I bet he can probably give you all 1009 variations on how the drug asprin is spelt and I look forward to seeing them in msn search real soon now.

I was just about to watch a nice dvd (Ballet Russes) when these activities come to my attention, first off the domains of webpositionexpert.com and nim-company.com come into the radar look very close to webpositionexpert.com who really is a seo spammer.

Pictures ? hell why not ! spot the difference.



and the original
Spot the difference (images can also be viewed full size) , seo spammers will note that neither has a url link.

That Looks like design theft from Robert (mail link to newportcorp@mailshack.com here. Apparently Bob has been certified since 2004 - Sigmund must had a large queue of more deserving nut jobs to certify first - a shrinks job is never done ho hum. Robert being a crap emailer needs the services of mailshack.com - that's another cheap jibe but quite funny.

Owner, Administrative Contact, Technical Contact, Billing Contact of the thefted domain is: Simon Skinner (ID00127660) PO Box W908 WoodsCentre St Johns, WI 00000 Antigua and Barbuda Phone: +268.5609733 Email: simon@webpositionexpert.com. Is make no comments about his operation but Roberts latest domain registration is:

whois nim-company.com
[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]

Whois Server Version 2.0

   Domain Name: NIM-COMPANY.COM
   Registrar: REGISTER.COM, INC.
   Whois Server: whois.register.com
   Referral URL: http://www.register.com
   Name Server: DNS11.REGISTER.COM
   Name Server: DNS12.REGISTER.COM
   Status: clientTransferProhibited
   Updated Date: 02-aug-2006
   Creation Date: 26-jul-2006
   Expiration Date: 26-jul-2007

Registrant:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA

Email: 4559a7b10a1e672a010ec780f8713151@domaindiscreet.com

Registrar Name....: REGISTER.COM, INC.
Registrar Whois...: whois.register.com
Registrar Homepage: www.register.com

Domain Name: nim-company.com

Created on..............: Wed, Jul 26, 2006
Expires on..............: Thu, Jul 26, 2007
Record last updated on..: Sun, Jan 14, 2007

Administrative Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7a60a1e672a0108df5d9cf350be@domaindiscreet.com

Technical Contact:
Domain Discreet
ATTN: nim-company.com
P.O. Box 278
Yarmouth, NS B5A 4B2
CA
Phone: 1-902-7495331
Email: 4559a7b70a1e672a01ac888d69003f00@domaindiscreet.com

DNS Servers:

dns11.register.com
dns12.register.com


Register your domain name at http://www.register.com

American dns registrar servers

dig nim-company.com

; >> DiG 9.3.3rc3 << nim-company.com
;; global options:  printcmd
;; Got answer:
;; -<<HEADER - opcode: QUERY, status: NOERROR, id: 37276
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;nim-company.com.               IN      A

;; ANSWER SECTION:
nim-company.com.        14400   IN      A       69.49.96.12

;; AUTHORITY SECTION:
nim-company.com.        43200   IN      NS      dns12.register.com.
nim-company.com.        43200   IN      NS      dns11.register.com.

;; ADDITIONAL SECTION:
dns11.register.com.     20132   IN      A       216.21.234.76
dns12.register.com.     10782   IN      A       216.21.226.76

;; Query time: 424 msec
;; SERVER: ?#53(?)
;; WHEN: Thu Jan 25 19:08:02 2007
;; MSG SIZE  rcvd: 130

Its spammy florida too

whois 69.49.96.12
[Querying whois.arin.net]
[whois.arin.net]

OrgName:    InternetNamesForBusiness.com 
OrgID:      INFB
Address:    500 East Broward Boulevard
Address:    Suite 1700
City:       Fort Lauderdale
StateProv:  FL
PostalCode: 33394
Country:    US

NetRange:   69.49.96.0 - 69.49.127.255 
CIDR:       69.49.96.0/19 
NetName:    MEGA-3
NetHandle:  NET-69-49-96-0-1
Parent:     NET-69-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MEGANAMESERVERS.COM
NameServer: NS3.MEGANAMESERVERS.COM
Comment:    
Comment:    -
RegDate:    2003-05-22
Updated:    2004-12-13

RTechHandle: ZI51-ARIN
RTechName:   InternetNamesForBusiness 
RTechPhone:  +1-954-323-0075
RTechEmail:  admin@internetnamesforbusiness.com 

OrgTechHandle: ZI51-ARIN
OrgTechName:   InternetNamesForBusiness 
OrgTechPhone:  +1-954-323-0075
OrgTechEmail:  admin@internetnamesforbusiness.com 

# ARIN WHOIS database, last updated 2007-01-24 20:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Trademark (dmca) theft Further Image copyright abuse (thanks to Andy) has been tracked down. Please go see dynamicbizserv.com for original shaking hands zombies (see images of websites for evidence) and effinop.com (which is nearly a form of verbal abuse in england)

update (29 Jan 07) spot something different effinop.com Clone see image, which Sky over at opsan cannot a company called http://www.curanow.com/ seems to maintain it. At least he changed the ceo picture on his copy - and how do you do - 'Hello did you know were strangely linked to a spammer called Robert Soloway' is what there thinking should a photograph ever do that after all the camera never lies does it.

24 January: Another superfan Andy drops in and informs that i have been rather lacking in reporting the ex Robert Soloway domains of catsdogsandpets.com, and the other easy to remember name of phone-example.net on this page for i humbly apologise being a lowly fan and missing although in my defence i've heard mention of them but no more than that.

Andy reports that they now 'rent' these domains and not Robert Soloway - which it is reported he still claims them on various website offering evil stuff. So if your visiting hello, its time to mug up on our favourite spammer (robert that is).

admin note: I don't object to links but when the referrer says (robert_soloway.domain x many visits) you do start to wonder.

Anyhow I hope that Andy 'makee workee' for thba (his china spam provider) and the ex Robert the domains will be added to the list and be greyed out to indicate a new owner as is my sop. That's enough of that background stuff.

Dull ? - here never tomorrow I announce where saddams wmd went so stay tuned.

23 January: Powned!

Nice! (google groups) Robert using MANGOORANGEE.ORG (google groups)our friends at Gandi

emailbroadcastingcompany.com

  Name Server.......... ns4.mangoorangee.org
  Name Server.......... ns3.mangoorangee.org
  Name Server.......... ns2.mangoorangee.org
  Name Server.......... ns1.mangoorangee.org

Thank you for the spamcop reports

22 January: Big dollop of spamcop addresses, Thank you - I also seem to be officially recognised by Robert in some capacity or other.

Screen shot well I'm not sure where and in what context. The link will not take you to Roberts spam offering.

'Super Fan' Henrik has dazzled us recently with some bits of information - which i hopefully credited properly by the latest is that http://70.85.187.88/ was reconfigured through a Chinese dns bug and is no doubt causing young Robert a few problems - Robert now using a bot net on 221.194.44.62.

Bananas humbly salutes Henrik and offers the Title of distinction 'head super fan' should it desired. Bananas feels unworthy to be called a fan and will continue to write this and continue to document his sightings as and when they appear.

Its nice to know that my views (along with opsans blog, and the rokso record too) have been fully endorsed by Robert Soloway (if he can lie about wikipedia quotes on website, then i have no problem doing it) Nice one Bob!

As ever - looking forward to tomorrow!

21 January: 'Please sir can we have some more spamcop reports please*' have been added. My Domain owner friend sends me ip addresses too.

admin note: Meebo (flash plug in) has been trashed since it did not work in all flavours of ie, and firefox uses another html method to load the flash that is different to ie if your trying write valid xhtml code. Since i don't approve of flash and it is was rather of slow, I can do without it. Should meebo provide a non flash plug in that works with valid xhtml and in all the popular browsers then it might return.

* Oliver Twist ? Charles Dickens reference - better check that you still have your hankerchief (blowing nose cloth).

20 January: Spamcop reports added Danke, Robert Seems to be giving his junk away* and not 'frauding' persons of $15 a spam email. I note from those Spamcop reports,

* you will pay. But it seems Roberts invoice phase has finished for now.

19 January: admin: Added Roberts home isp link and 'recent sightings' to main menu. Lets make it it fun for mdm.net shall we ? big hello to Tim Ensley. But on with the show.

Sky over at Opsan says 'submit-me-now.com' strangely shares some similarities with liu fei/nan chang whois entries documented elsewhere in this page. Is Bob getting out of spam and into seo spamming ? don't worry its been sbl'ed hgc.com.hk And Dog reports that 'emailbroadcastingcompany.com' is also using Gandi's phduaisarida.com for dns fun and games but it still points to [124.254.44.*] which has been documented before.

Thank you for the spamcop reports.

18 January: Thank you for the spamcop reports more always welcome. Henrik over at Opsan reports that Robert appears to use a hoster in Seatle for ordering and opens a file of html - think i understand you - nice one Henrik. Think you might have fingered Roberts cable tv connection/stuff OK that new isp fingered is http://www.mdm.net/ or http://www.mdmbusiness.com/ Have a chat with Washington & Oregon Tim Ensley Commercial Services Account Executive mdmbusiness.com 3633 136th Pl SE Suite 107 Bellevue, WA 98006 425.945.1759 800.829.2225 x1159 Email: mdmbusiness_nw@mdm.net Millennium Digital Media is a privately held company headquartered in St. Louis, MO

whois 66.235.10.215
[Querying whois.arin.net]
[whois.arin.net]
Millenium Digital Media MDM-BLOCK-1 (NET-66-235-0-0-1) 
                                  66.235.0.0 - 66.235.63.255
Millennium Digital Media SEATTLE-MILLENNIUM-DIGITAL-MEDIA (NET-66-235-8-0-1) 
                                  66.235.8.0 - 66.235.11.255

CustName:   Millennium Digital Media
Address:    4316 S104 PL
City:       Seattle
StateProv:  WA
PostalCode: 98178
Country:    US
RegDate:    2005-05-04
Updated:    2005-05-04

NetRange:   66.235.8.0 - 66.235.11.255 
CIDR:       66.235.8.0/22 
NetName:    SEATTLE-MILLENNIUM-DIGITAL-MEDIA
NetHandle:  NET-66-235-8-0-1
Parent:     NET-66-235-0-0-1
NetType:    Reassigned
Comment:    
RegDate:    2005-05-04
Updated:    2005-05-04

RAbuseHandle: MAN23-ARIN
RAbuseName:   MDM Abuse Northwest 
RAbusePhone:  +1-314-802-2400
RAbuseEmail:  abuse-nw@mdm.net 

RNOCHandle: MNN-ARIN
RNOCName:   MDM National NOC 
RNOCPhone:  +1-314-802-2400
RNOCEmail:  nnoc@mdm.net 

RTechHandle: MIA7-ARIN
RTechName:   MDM IP Administrators 
RTechPhone:  +1-314-802-2400
RTechEmail:  ipadmins@mdm.net 

OrgAbuseHandle: MAN23-ARIN
OrgAbuseName:   MDM Abuse Northwest 
OrgAbusePhone:  +1-314-802-2400
OrgAbuseEmail:  abuse-nw@mdm.net

OrgNOCHandle: MNN-ARIN
OrgNOCName:   MDM National NOC 
OrgNOCPhone:  +1-314-802-2400
OrgNOCEmail:  nnoc@mdm.net

OrgTechHandle: MNN-ARIN
OrgTechName:   MDM National NOC 
OrgTechPhone:  +1-314-802-2400
OrgTechEmail:  nnoc@mdm.net

Henrik Thank you! seems to make sense.

17 January: Usual operations from Robert a friend notes to me. Other Opsan reports speak of stock 'pimp n dump' spams to known soloway 'get his spam addresses'. Well nothing unusual there then anyhow i was getting bored of viagra spam's anyhow.

Spamhaus sbl's for those of you interested in such matters vol.cz (europe) kornet.net Korea with another relationship with the Polyakov's ? (mentioned before), Roberts range now gwbn.net.cn (not the whois owners apparently Beijing THBA Technology Co,.Ltd), and finally not forgeting CNCGROUP Shandong province network

 whois gwbn.net.cn
[Querying whois.cnnic.net.cn]
[whois.cnnic.net.cn]
Domain Name: gwbn.net.cn
ROID: 20021209s10021s00016816-cn
Domain Status: ok
Registrant Organization: 中国长城计算机集团公司
Registrant Name: 潘志
Administrative Email: panzhi2000@yahoo.com.cn
Sponsoring Registrar: 北京中科三方网络技术有限公司
Name Server:ns2.gwbn.net.cn
Name Server:ns1.gwbn.net.cn
Registration Date: 2000-04-07 00:00
Expiration Date: 2007-04-07 00:00

I think we have all seen many of those mentioned here before in this rather long file. - of note PHDUAISARIDA.COM and Gandi's spam policy don't seem to work since its still with us.

Oh well god bless mba management bullshit.

m'excusent - I thought gandi was that indian registrar and not my european neighbors. A 'Freudian slip' on my part. I must ask Sigmund about my relationship with Bananas while I'm at it next time.

Apparently he died so i wont ask him damm - (readers tag under humour) Thanks Ed

15 January: Goodness gracious me - Gandi seem now to hate spam, lets see how long there anti spam stance lasts (not long imho sounds like short term bullshit) anyhow Ed spots that advertisingemailcorporation.com is down for a minute but added as well the domain EMAILBROADCASTAUTHORITY.COM.

Domain Name.......... EMAILBROADCASTAUTHORITY.COM
  Creation Date........ 2006-09-12 22:42:08
  Registration Date.... 2006-09-12 22:42:08
  Expiry Date.......... 2007-09-12 22:42:08
  Organisation Name.... liu feng
  Organisation Address. jian xi
  Organisation Address.
  Organisation Address. nan chang
  Organisation Address. 210002
  Organisation Address. JX
  Organisation Address. CN

Admin Name........... liu feng
  Admin Address........ jian xi
  Admin Address........
  Admin Address........ nan chang
  Admin Address........ 210002
  Admin Address........ JX
  Admin Address........ CN
  Admin Email.......... admin@broadcastadvertisenow.com
  Admin Phone.......... +86.79132100023
  Admin Fax............ +86.79132100023

Tech Name............ liu feng
  Tech Address......... jian xi
  Tech Address.........
  Tech Address......... nan chang
  Tech Address......... 210002
  Tech Address......... JX
  Tech Address......... CN
  Tech Email........... admin@broadcastadvertisenow.com
  Tech Phone........... +86.79132100023
  Tech Fax............. +86.79132100023

Bill Name............ liu feng
  Bill Address......... jian xi
  Bill Address.........
  Bill Address......... nan chang
  Bill Address......... 210002
  Bill Address......... JX
  Bill Address......... CN
  Bill Email........... admin@broadcastadvertisenow.com
  Bill Phone........... +86.79132100023
  Bill Fax............. +86.79132100023
  Name Server.......... ns4.phduaisarida.com
  Name Server.......... ns3.phduaisarida.com
  Name Server.......... ns2.phduaisarida.com
  Name Server.......... ns1.phduaisarida.com

Ed reports dns fun and games from phduaisarida.com which is Indian registered. see what you mean Ed !

domain: phduaisarida.com
  reg_created: 2007-01-09 17:30:36
  expires: 2008-01-09 17:30:36
  created: 2007-01-09 18:29:48
  changed: 2007-01-09 18:32:04
  ns0: ns1.phduaisarida.com
  ns1: ns2.phduaisarida.com
  ns2: ns4.phduaisarida.com
  ns3: ns3.phduaisarida.com
  ns4: ns5.phduaisarida.com
  transfer-prohibited: yes
  owner-c:
    owner-name: Joe Johnson
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  admin-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  tech-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42
  bill-c:
    organisation: ~
    nic-hdl: JJ1005-GANDI
    person: Joe Johnson
    address: 321 Spring Ave.
    zipcode: 87124
    city: Rio Rancho
    country: United States of America
    phone: +1.5058914081
    fax: ''
    email: c8ab71f432c689db7714f7c52d685847-jj1005@contact.gandi.net
    lastupdated: 2007-01-09 16:54:42

My geography of the west coast of america is improving but that does sound odd, other domain should ring a telephone bell too.

Ed says: advertisingemailcorporation.com [124.254.44.10] & theemailbroadcastingcompany.com [124.254.44.10] & emailbroadcastauthority.com [69.212.194.93] - botnet - so round robin revolves. Lets do a whois shall we !

whois 124.254.44.10
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

No surprises there - Hello again are the hills alive with Song Wang ? it seems so. Can a 'fan' port scan 124.254.44.10 please all for science as they say.

13 January:Somebody (no not i) Port scanned advertisingemailcorporation.com and reported it - results below - what's slightly freaky here is that it appears to be running smtp - Robert does not like usually getting email so I'm thinking that helpfull (pro spam) China hosting company think this boy is the real deal reputable american businessboy. An open smtp (that's email for any beauty comestic journalists reading this) port does not mean its configured - but it is verging into odd Robert Soloway territory here. Anyhow another fan reports the following.

advertisingemailcorporation.com - 124.254.44.41

PORT STATE SERVICE VERSION
21/tcp open ftp WS FTPd 4.0.0
25/tcp open smtp IMail NT-ESMTP 8.05 37868-1
26/tcp open tcpwrapped
43/tcp open whois?
53/tcp open domain Microsoft DNS
79/tcp open finger?
80/tcp open http Microsoft IIS webserver 6.0
106/tcp open pop3pw IPSwitch Imail pop3 password change daemon 8.05
110/tcp open pop3 IMail pop3d 8.05 596833-37
113/tcp filtered auth
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1023/tcp filtered netvenuechat
1025/tcp filtered NFS-or-IIS
1030/tcp open msrpc Microsoft Windows RPC
1032/tcp open iad3?
1033/tcp open msrpc Microsoft Windows RPC
2000/tcp open ssl/http RemotelyAnywhere remote PC management webserver 6.20.467
3306/tcp open mysql MySQL 5.0.18-nt-max
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
8888/tcp filtered sun-answerbook

Its a windows box too it appears. So if your into whatever go have fun should you feel inclined to.

For instance Microsoft China might be inclined to check if the copy of windows license is legit im sure that Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN would like to hear from them.

Other thoughts i leave to your imaginations (health and beauty journalists) that is called 'pretend'. I'm no windows add-on product expert (iis cal's etc) but there might be more violations on some of that stuff.

Anyhow Robert likes Windows as an os is the one impression i think we can all walk away with here which considering his spamis rantings from a couple of years ago is slightly strange. So nothing new there then.

12 January: Added Spamcop report, thank you. Just to remind you that Bobs bullet proof (and hate spam chinese folk) at Beijing THBA Technology Co,.Ltd. No68 WanQuanHe road,Haidian district,Beijing CN is still his hosting provider. Make your own mind up* about Chinas anti spam 'initiatives' (* fox news viewers should ask Bill O'reilly and Rupert Murdoch for Guidance instead)

10 January: Added Spamcop reports, thank you. Lets hope some fraudster decides to phish for american express card details using Roberts email lists you know: 'please update your details' scam. That would be karmic after all American Express appear approve of that sort of thing.

Speaking of scammers: A big hi to the Nigerian who visits here and never finds anything of value.

9 January: Added Spamcop reports thank you - since a friend was lucky enough to get one (which they strangely also sent too) - I got a copy

Return-Path: user @ domain
Received: from adsl-ull-220-254.50-151.net24.it ([151.50.254.220]) for user  @ domain; date
To: user@domain
X-SA-Exim-Connect-IP: 151.50.254.220
From: user @ domain
[user@domain] Invoice #: 12345 - TOTAL: $15.00
We Email Advertise Your Web Site to 8,000,000 People

VIEW TRANSACTION BELOW:
http://www.advertisingemailcorporation.com/

Well my friend was surprised that he has an office in Italy, and sending spam to himself and i am pleased too. Its been a while since I've seen a robert spam with complete headers.

What does this say ? - very spammerish, and beware that you clean out user and domains when dealing with Mr Soloway. I will keep this civil - I think the actions of Bob speak more eloquently than a Bananas rant can ever achieve.

'RS' another new Robert 'fan' over at opsan notes that Robert can only process American Express cards these days, Visa and Mastercard seem to have withdrawn his ability to process visa and mastercard payments* at this time based on his website. No doubt this will change but it seems American Express like purveyors of spam.

* chargebacks ?

7 January: Added Spamcop reports thank you - the $15 spam tracking system seems to be a complete Robert screw up. Sky over at Opsan says

I'm receiving about 3-10 a day. Every one of them has different invoice numbers, even the ones that arrive in batches. The spam (and considering he's sending false invoice statements constitutes fraud) 

So my conclusion too is it is just a fraud then, and not a spam tracking system like spf. Sky has the 'advantage' of getting spams to an individual account where the consistency of the numbers ca be checked. That is something i am unable to do due to the actions of a certain person.

Anyhow enough of my gripes.

5 January: Added Spamcop reports thank you - the $15 per spam scam continues. Guess of latest up time for emailadvertisinginc.com made, highly speculative based from reports i have (see 3rd Jan Entry) which should be below.

3 January: Added spam cop reports latest tracking method by Robert Slimeball Soloway is using invoice number with a low $ sum which points you to his website, varying quantities of spammage offered by Robert from 3 million to 9 million id'ed by Sky at Opsan. (all of which are high quality targeted leads - that's humour btw)

Invoice #: 12345 TOTAL: $15.00
We Email Advertise Your Web Site to 3,000,000 People

Example (from spamcop report) If your reporting spam number '12345' is my creation and does change as noted - beware its bit like Roberts spf exploit he did of olden times.

Moving onwards - (stay awake) dns switch for emailadvertisinginc.com which is using round robin dns fun and games compliments of MADAPGYRJ.INFO report host list is extensive but 83.42.160.135, 67.166.215.4, 71.134.191.251, 70.114.194.125, 12.178.131.98, 12.214.232.112, 66.176.188.221 and 71.228.236.208 got fingered by the comrades at spamcop.net as places of where that domain 'lived'.

Robert still here though.

124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN

Whether the dns fun and games are working is a judgement call others can make - his last attempt at this got rather fucked up. For the record lets get the new dns providers whois info in here.

Domain ID:D15660292-LRMS
Domain Name:MADAPGYRJ.INFO
Created On:12-Dec-2006 17:50:15 UTC
Last Updated On:02-Jan-2007 10:12:44 UTC
Expiration Date:12-Dec-2007 17:50:15 UTC
Sponsoring Registrar:Gandi Sarl (R191-LRMS)
Status:CLIENT HOLD
Status:TRANSFER PROHIBITED
Registrant ID:O-1069542-GANDI
Registrant Name:Richard Sheldon
Registrant Organization:Richard Sheldon
Registrant Street1:781 Pleasant St.
Registrant Street2:
Registrant Street3:
Registrant City:Rochdale
Registrant State/Province:Massachusetts
Registrant Postal Code:01542
Registrant Country:US
Registrant Phone:
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:af337cb29bb0b8e08ea0664b485533b1-1071331@owner.gandi.net
Admin ID:RS2121-GANDI
Admin Name:Richard Sheldon
Admin Organization:
Admin Street1:781 Pleasant St.
Admin Street2:
Admin Street3:
Admin City:Rochdale
Admin State/Province:Massachusetts
Admin Postal Code:01542
Admin Country:US
Admin Phone:+1.5088929138
Admin Phone Ext.:
Admin FAX:+33.1
Admin FAX Ext.:
Admin Email:c4691c4eaf205b67eef46ac289fd01be-rs2121@contact.gandi.net
Billing ID:C1249598-LRMS
Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Organization:GANDI sarl
Billing Street1:see also whois.gandi.net
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:
Billing Postal Code:F-75003
Billing Country:FR
Billing Phone:
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:support@gandi.net
Tech ID:C1249598-LRMS
Tech Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Tech Organization:GANDI sarl
Tech Street1:see also whois.gandi.net
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:
Tech Postal Code:F-75003
Tech Country:FR
Tech Phone:
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:support@gandi.net
Name Server:NS1.MADAPGYRJ.INFO
Name Server:NS2.MADAPGYRJ.INFO
Name Server:NS3.MADAPGYRJ.INFO
Name Server:NS4.MADAPGYRJ.INFO
Name Server:NS5.MADAPGYRJ.INFO
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 
Name Server: 

Massachusetts is in France ? - that's americans and geography for you. Big hi to Richard Sheldon who now has no hosting for it.

Regrettably no one submitted an entry for my Competition, so its a pot of banana compost the next competition i have. Well that appears to be all - advertisingemailcorporation.com and theemailbroadcastingcompany.com still up 124.254.44.41 (see above) Go Chinese Panadas go.

As to Roberts latest spam procedure (having seen more), I be in two minds - it could be perceived as a fraud or a sign of desperation. Fraud thinking is: Should not the Seattle (of Washington State) tax collectors might in involved since having no corporation registered and theoretically taking money would assume that state taxes would need to be paid? From a consumer point of view if anybody could pay to be removed to raises the point that unsubscribing from the spam list never is going to happen, so I'd imagine they would also go join the queue of wronged person in a civil court. Perhaps i go visit his website, then again perhaps i wont.

Personally i prefer my 'desperation view'. Over the new year there was some great fun in nanea where Robert gained yet another 'fan'. Love him or loathe him hes class entertainment.

2007

24 December My Compliments to all the helpers of this page I hope that whatever you do, you also have a good new year. Robert should Santa not visit you this might help explain a few things. Image credit Shamelessly stolen from some Australian called Russell Coker ages ago.

If your flying today please ask the pilot to be carefull. Our default Robert games of 'up and down domain name', 'what regional registry', and not forgeting 'is that the china panda' party games that this webpage enjoys inventing will resume from tomorrow onwards.

Suggestions for Christmas Robert Soloway games welcome. We have songs.

22 December Surprise no dns fun and games but a simple change of chinese supplier: these idiots seem new to the Soloway empire (well it is China) prioritydns.info is dns supplier (dubious? views) up Robert domain is THEEMAILBROADCASTINGCOMPANY.COM which has taken a back number (SBL46638) advertisingemailcorporation.com and also points here. Thats it 'up' domain name wise at current time (as far as i know).

apnic.net with "124.254.44.41"...
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW623-AP
tech-c:       SW623-AP
status:       ALLOCATED PORTABLE
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CNNIC-AP
mnt-routes:   MAINT-CNCGROUP-RR
changed:      ipas@cnnic.cn 20060703
source:       APNIC

person:       Song Wang
nic-hdl:      SW623-AP
e-mail:       luyanhe@163.com
address:      17floor ,Zijin Plaza ,No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060515
mnt-by:       MAINT-CNNIC-AP
source:       APNIC

inetnum:      124.254.0.0 - 124.254.63.255
netname:      THBA
descr:        Beijing THBA Technology Co,.Ltd.
descr:        No68 WanQuanHe road ,Haidian district ,Beijing
country:      CN
admin-c:      SW1-CN
tech-c:       SW1-CN
mnt-by:       MAINT-CNNIC-AP
mnt-lower:    MAINT-CN-THBA
changed:      ipas@cnnic.cn   20060703
status:       ALLOCATED PORTABLE
source:       CNNIC

person:       Song Wang
nic-hdl:      SW1-CN
e-mail:       luyanhe@163.com
address:      No68 WanQuanHe road ,Haidian district ,Beijing
phone:        +86-10-62373038
fax-no:       +86-10-82659915
country:      CN
changed:      ipas@cnnic.cn 20060912
mnt-by:       MAINT-NEW
source:       CNNIC

Spamcop reports added, thanks!

21 December Spot the connection ? from http://www.spamhaus.org/SBL/sbl.lasso?query=SBL49240 221.194.111.54/31 is listed on the Register Of Known Spam Operations (ROKSO) database as being assigned to, under the control of, or providing service to a known professional spam operation run by Robert Soloway - Newport Internet Marketing. theemailbroadcastingcompany.com .55 is already occupied by Alex Blood SBL listing, so we'll document Robert Soloway's site in this listing as a /31. (The whole /24 is listed, anyway.)

Spamcop reports added. thanks,

19 December DNS posting (stay awake please) advertisingemailcorporation.com points to 221.194.111.55/32 and (Polyakov) SBL47267 Reading that indicates that our Soloway 'polonium-210' friends are 'sending the spam before DNS is live to prevent body-checks, and Hijacking virus-infected PCs to proxy-relay spam from 66.185.126.155' (thats Serverflo look below) links in that range here to Finance scams and all things non Robert related like i don't track.

OK wake up now, some spamcop reports added. Above sort of explains a few things, that still seems dumb. Anyhow both several and Poyakov have honourable mentions in this page. That's the same isp CNCGROUP-HE robert is hosting from (on one ip address)

rumour/bananas bad assumption time: one might infer from this situation that Robert Soloway is unable to directly purchase spam support from our friends the Panda's, and has to resort to spammers with better 'tricks' to get hosting ? Is Bob a spammer - yes, and does Bob need other spammers help - yes.

Views please.

18 December Sorry but its time for a dns nameserver posting (sorry), normal service will resume soon. The dns of advertisingemailcorporation.com points to managednameservers.com ROK6101 which links to spammy indian called Daniel Mankani (ROK3533) being of Indian origin, who reportedly according to spamhaus does his spamming from Singapore of interest perhaps is this Michigan lawsuit The good news is hes yet another spammer doing things with another spammer. Feel free to adjust your views on indians.

Now should you be still awake also added a couple of spamcop reports. Robert seems to picked up a european spambot supplier. Also like to remind you about the competition, you could be the proud winner of a very exclusive banana skin - so what are you waiting for.

Regardless of your views the Image of Kkaran Bahree (google him) just fits perfectly that not everything from India is good. Either 'exported' or domestic.

admin: I screwed up so I'm re-adding advertisingemailcorporation.com to domain list summary and removing advertisingemailcompany.com as an 'up' host- duh companies/corporations it blurs at times. Having funny five minutes here excuse me. 'Close' but wrong same number of 'up' hosts remain.

Opsan update: Mother Natures ice storm apparently knocked out Opsan and everybody else too for that matter, ert: Tuesday (usa time zone) for electrical power restoration.

17 December silly question: You think Santa gets Robert Soloway spam ?. Anyhow with Opsan in a state of flux. Its time for a fun game of up and down domain. Polyakov (fellow spammer) link still active according to Ed but issues with service (from a spamcop report) - www.advertisingemailcorporation.com (checking ip) IP not found. If they cant find it don't expect us to.

;; WHEN: Sun Dec 17 18:25:36 2006

theemailbroadcastingcompany.com. 43195 IN A     221.194.111.55
advertisingemailcorporation.com. 352 IN A       221.194.111.55

Which seems to be it (domain wise) that's China (seen before here ) 221.192.0.0 - 221.195.255.255 CNCGROUP-HE. It appears Roberts sudden domain fun and games have cooled down.

Updates to domains status changed - using historical evidence from 5th december to generate 'uptimes'. Whatever you think one can hardly say Robert is a consistent 86400x365 spam operation. That says too much.

So if you send spam to Santa - does he still come? oh the mysteries of life*. If you know contact us it might explain why Bob does what he does even on christmas day.

* = humour for those whom don't get it

15 December Spamcop reports added, it seems Robert is looking for new botmister, since some of us report a drying up of south american owned pcs doings Satan's (sorry) soloways spam. Anyhow having just started christmas preparations i was wondering if Bob would be working over the christmas period. Somehow i think he will be.

admin: html 'code' might get a bit screwed up while i add a 2007 daily planner over the weekend - table work

its been a good year here since Bob has not really been able to keep domains up and running for long and the dns games of recent become a complete failure since half the time the thing didn't work. Then i finally got my hands on the spam package and was able to debunk a few of those Soloway fibs - if that's 'opt in' then George W Bush is a communist party member. So overall whatever you think about the state of play its been an interesting year with some interesting developments. Of note to those of you expecting 'progress' and not 'getting it' please do note that the continued links to spambotted pc's worldwide, association with other spammers (or isps with other spammers on) and the dns fun and games means Roberts pool of usual haunts is remaining the same.

Here end that rather long paragraph on the year. But whatever happens im in no doubt that the spamlist part of Robert Soloway is a spammer, if this rather large page of logging where when and how Robert is does not work for you then perhaps you can offer me a better explanation* - So bananas in the falklands is proud to have its first competition

COMPETITION * in this competiton please explain why my use of an isp for over a 12 months period is strange and Robert Soloways switching of dns/hosting and utilising random pcs world wide is better than my usage of the internet. Should you find that example 'limiting' then compare Soloways operation to a large corporation (lets take google here) and asks the question how often do they switch providers. The best entry plus your email will be featured on this page.

The winner will also receive a used banana skin in the post if they provide there postal address. So go get writing send your entry in by the 31st December 2006. Bananas judgement is final so no whining.

Good luck.

14 December Been busy with other nonsense, back to usual nonsense Spamcop reports added, Ed in Opsan (plus Dog and Sky) note SPAMHAUS SBL48865 = tinyurl.com/ynff7r Source of proxy/botnet hijack spamming TCP stream analysis of a virus-infected/trojaned PC reveals that it is being hijacked on proprietary high ports from the spammers illegal proxy-mailing server on 66.185.126.88 serverflo.com (current spam listing) reputation What is interesting to note that hes been here before, and the domain names additions had since dried up. Rev BeerGoggles also notes that our high princes of spam (indian robots at gandi) have finally done something about haufna.biz for now whom where providing Bob with dns services. Maybe we will be seeing both gandi, and sevrflo soon here ?

9 December admin: spamcop display changed (sorry).

8 December Back on the Charity scam again, ever since Robert removed all his charities he would like to think he 'supported' from his spams - Sky reports that a made for robert email address got hit with a charity spam for savechilds.net - which has an odd domain name look uk of chinese and russia info - it null routes but the point is that after Sky unsubscribed the address* the spam started to roll in.

* Evidence of this can be seen from the opsan link, an indication that unsubscribing from Robert = more spam can be seen from my now defunct pages which the internet wayback machine has an record of, and i still do have the original files somewhere before i called time on the experiment.

Those of you unaware i have an original spam package which was donated to me for documenting, the link can be found on this page, it starts to explain why the Robert unsubscribe (for more spam) form looks the way it does. Whatever your views on spam/advertising I ask you to visit the link (if you so interested) and make up your own mind.

Add to about bob section.

Spamcop reports added - now with id views please.

6 December I'll keep this short (rather than bore you to death). Lets make opendns.com explain it "You typed www.emailadvertisinginc.com, which doesn't currently resolve."

The haufna.biz dns operation might be 'clever' at obscuring Roberts chinese hosts but when they don't work (and i know that robert has chinese hosting) then I see little point to these servers - if there not going to relay the request back to China.

So is emailadvertisinginc.com up? technically maybe but for some of the time only and cannot be described as 24x7 hosting. If opendns cant find it well just this suits ok. If opnedns cant figure it out where it might be, im not going to. Spamcop sightings added. Happy Wednesday all - Fin.

5 December Delayed from Monday (extra non Soloway fun n games) Another 'quiet weekend' for Robert. Latest lovers who be the Polyakov (Alex Blood/Alexander Mosh/AlekseyB/Alex Polyakov) spam gang (spamhaus: SBL47267 link tinyurl.com/y2g34u ) Well scum with villainy together is something i approve of I refer to.

ns1.optinemailcorp.com. 2D IN A 221.194.111.55 - SBL47267

OK think I've discovered a 'bullet proof' (others have been informed of) technique, and 'bullet proof' should mean something Robert. A method to stop the dns man in the middle* fun and games which continues. The extra villinary factor just makes it it too good to ignore. Anyhow I'll be testing it out this week since im really interested in where things are hosted, rather than who bob would like pretend it is and is but technically not there.

So please do excuse me while i check the new technique for bugs. Roberts Old fiends of haufna.biz has been reported for bad dns according to Ed at Opsan. The moral is that once ignored name has attracted some unwanted fame and linked other spammers to Robert. using my domain list (?nbs? = Robert's mentally retarded fan club) means i should ignore those other fools - who of note Name King sound a fishy outfit.

;; WHEN: Mon Dec  4 09:10:44 2006
dig theemailbroadcastingcompany.com

; <<>> DiG 9.2.4 <<>> theemailbroadcastingcompany.com

;; ANSWER SECTION:
theemailbroadcastingcompany.com. 86400 IN A     221.194.111.55
advertisingemailcorporation.com.  3600 IN A     211.155.132.206
permissionemailcorporation.com.   3600 IN A     211.155.132.206
broadcastemailingagency.com.      3600 IN A     211.155.132.206

First One CNC Group CHINA169 Hebei Province Network, remaining three (still China) and hosted by old friends of Beijing Haidian Broadcast & TV Netowrk Information Co. Ltd - (not a spelling mistake Dns games seem only to be with emailadvertisinginc.com first three american dupes, forth ip is a bogon and is unreachable, other points to the middle east - likely to change too but all probably redirect to above 211.155.132.206 or 221.194.111.55 (both china)

ANSWER SECTION:
emailadvertisinginc.com. 	180    IN A       68.79.49.138
emailadvertisinginc.com. 	180    IN A       68.81.168.165
emailadvertisinginc.com. 	180    IN A       71.137.236.199
emailadvertisinginc.com. 	180    IN A       121.72.7.78
emailadvertisinginc.com. 	180    IN A       212.118.8.74

Last three, Germany, China, ?american ? enom, dont look like Bob - emailadvertisingagency.com status unknown ? Bob is Nils Buurman ?

Registration Service Provided By: BlueYellow
Contact: info@blueyellow.nl
Visit: http://www.blueyellow.nl

Domain name: emailadvertisingagency.com

Registrant Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Administrative Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Technical Contact:
   BlueYellow
   Nils Buurman (dns@blueyellow.nl)
   +31.622944497
   Fax: +31.842229760
   Plantage 257
   Oude Wetering,  2377 AW
   NL

Status: Locked

Name Servers:
   ns1.sedoparking.com
   ns2.sedoparking.com

Creation date: 21 Apr 2005 16:00:47
Expiration date: 21 Apr 2007 16:00:47

emailadvertisingagency.com. 	  600 IN A      212.227.34.3 (sedo)
broadcastemailcorporation.com.   3600 IN A      221.10.254.97 (sedo)
emailadvertisingcorporation.com. 1800 IN A      69.25.142.8 ?not bob ?

* old hacker technique: how do I really know (or you) that say www.whitehouse.gov really hits the server at the other washington, rather than say Osama's cave bunker in Crawford,Texas www server ?. Anyhow go think about it

Main Event time what is going on with emailadvertisinginc.com well im getting host not found. Its either a: screw up by the Polyakov persons, b: my technique needs refining, or c: my dns is screwed (looks likely) Juri is out on that since i cannot even update this page.

Mass of spamcog ips added too, thanks!

admin note: tinyurl links will be replaced with full urls from now on.

1 December Spamcop report added with the amazing observation from Robert that there be 25 days (now less) to Christmas. Since Bob has spammed on Christmas day you get to wonder what christmas is like in the Soloway household in his mothers Cotati residence / or his Seattle one man non registered corporation and his voicemail machine - perhaps it does not happen ?, or he and the voicemail thing do something?

Anyhow with that display of Robert brain power will wonders ever cease?

A solution to the dns games might have been found. Things still (as i suspected) point to China 211.155.132.206 The good news is that new method seems consistent.

30 November Musical chairs continues (party games too) and trip to estonia took place - did you enjoy it ? from a spamcop report.

Host www.emailadvertisinginc.com (checking ip) = 62.65.236.113
    host 62.65.236.113 (getting name) = pc113.host1.trt.starman.ee.

So how is this happening, i don't particularly wish to dilute this page with other stuff but it seems that that's a battle lost, anyhow lets just say Comrade soloway is using the dns at haufna.biz, the dns refresh tricks are just that - consider them a supplier to Bob. Quite how 'willing' 62.65.236.113 was to host emailadvertisinginc.com is another discussion too.

whois haufna.biz
Domain Name:                                 HAUFNA.BIZ
Domain ID:                                   D15124532-BIZ
Sponsoring Registrar:                        GANDI SARL
Sponsoring Registrar IANA ID:                81
Domain Status:                               clientTransferProhibited
Registrant ID:                               O-1056924-GANDI
Registrant Name:                             nancy j wasiuk
Registrant Organization:                     nancy j wasiuk
Registrant Address1:                         22 rockledge terrace
Registrant City:                             pompton plains
Registrant State/Province:                   New Jersey
Registrant Postal Code:                      07444
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.9736169759
Registrant Email:                            d6e3129d8c7267c16edc77bef4ce6567-1058713@owner.gandi.net
Administrative Contact ID:                   NJW3-GANDI
Administrative Contact Name:                 nancy j wasiuk
Administrative Contact Address1:             22 rockledge terrace
Administrative Contact City:                 pompton plains
Administrative Contact State/Province:       New Jersey
Administrative Contact Postal Code:          07444
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.9736169759
Administrative Contact Facsimile Number:     +33.1
Administrative Contact Email:                716c88e34150afa0fbb6b5964a122a04-njw3@contact.gandi.net
Billing Contact ID:                          AR41-GANDI
Billing Contact Name:                        CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Contact Organization:                Gandi SARL
Billing Contact Address1:                    38 rue Notre-Dame de Nazareth
Billing Contact City:                        Paris
Billing Contact Postal Code:                 75003
Billing Contact Country:                     France
Billing Contact Country Code:                FR
Bil