I just received an unsolicited commercial e-mail from a company named, ironically, PermissionEmailCorp.com. They did not receive my permission before sending me the e-mail. Their site states that they provide "choice / opt-out" for recipients. Funny, the spam message they sent me didn't contain any such option.
Apparently they provide "free advertising for charities." They also promise not to collect any customer information. Wow, how nice of them. But if they really cared about your charity, they wouldn't use "third-parties" to "advertise and collect information about customers." The company appears to be based out of China and related to AdvertisingEmailCorporation.com.
PermissionEmailCorp.com retrieved the e-mail address from my Godaddy account. Not from my public DNS who-is information, but from my GoDaddy account itself. GoDaddy needs to set-up their customer protection.
Update 13-March-2007: I started receiving e-mail messages to the address I use in my domain name whois information. Every domain has to have a contact e-mail address and it must be shared (unless your pay your registrar to make is private.) This is information is not allowed to be used for this purpose, but obviously this company is not playing by the rules. Once your e-mail address is out there for them to use, there is nothing you can do to get it hidden again. Either setup a spam filter or change your e-mail address (which may be found again.) Be careful about using a false e-mail address for your domain contact information. Your registrar may charge you an administrative fee if someone reports not being able to contact you because of that. To see you public whois information for your domain, try the Network Solutions Whois Lookup page.
shit, I forgot that my lessthan / greaterthan signs were filtered out !
so it will look like
mail from:lessthan YourmailAdress greaterthan
rcpt to:lessthan cont…@mailshack.com greaterthan
(no blanks/whitespace between address and lessthan/greaterthan signs)
Tom
The purveyor of this SPAM i sRobert Soloway; listed high atop the lists of professional spammers.
He uses false information in hi sWhoIs information so people can't do to him what he's doing to everyone else; farming email addresses from ICANN.
Keep an eye on this site:
http://blog.opsan.com/archive/2006/05/25/28138.aspx#38176
They have been tracking Soloway for some time. Robert Soloway lives in Seattle, WA, so if anyone has the opportunity to pay him a personal visit I think the entire Internet will applaud you. Apparently he hangs up on people asking to be "opted out" of his SPAMS, he's even been sued by Microsoft but has somehow managed to elude paying a dime to them. A shady character who has admitted in court that when customers pay for 20,000,000 "broadcase emails" that may actually get as few as 10,000 sent after paying for the larger number.
The best bet is to use proxy IP addresses and place phony orders on his website. Eventually, after about 200 fake orders, he posts a page saying your IP is blocked. Grab a new proxy and hit him again. It's time well spent while maybe listening to a baseball game or something that doesn't require your visual attention. I do it twice nightly, and I'm sure eventually his credit cards will drop him for making too many chargebacks.
The website is just one of many. Don't bother trying to track down the WHOIS data on the domain name… it's all forged. The spams that you are receiving is all from one person: Robert Alan Soloway of Seattle Washington. Soloway is one of the worst spamnmers in the world and sells illegally harvested email addresses. He has opened scores of websites and they usually end up getting shut down after a few weeks but he just goes on and opens more. Some fo these are newportcorp.cn, advertisingemailcorporation.com, emailadvertisinginc.com, permissionemailcorporation.com, broadcastemailingagency.com, broadcastemailinc.com, emailadvertisingcorporation.com, broadcastemailgroup.com, theemailbroadcastingcorporation.com, broadcastemailcorporation.org, emailsolutioncorp.com and countless others.
There's plenty of info on that criminal, and it's amazing that he can spam so freely within the USA. Just do a Google search and you'll find plenty about that scum.
Blah. It would appear not one of you read messages 41 through 44. If you read it, then you didn't understand it. If you didn't understand it, then why didn't you ask questions? If you understood it, why didn't you do it and post your results here?
to Dudely:
Yes you are right, some of us (including me) did NOT really understand what you said.
And after I understood, I'm honest, I could not really realize and accept it
It was a desperate try to do something against this " f…ng a…hole " immediately !
And it is really hard to understand, that we can NOT do anything against him
in a fast and quick way
When Robert Soloway is so powerful, that even MS is fighting against him,
we all should follow your hint and sent polite and respectful mail to the
respective admin addresses.
I'll do this right now and will inform you whenever something happens …
Thanx again
Tom
to All:
Just for your information:
after sending the polite and respectful mail (in my own words) to
lit…@dns.com.cn, …
… I immediatley (5 seconds) received an autogenerated answer mail with the following content:
From: lit…@dns.com.cn
To: webm…@o-possum.com
Subject: Re: worlwide spam problem with client registered by you
Tom
OK, at least someone actually tried. It would help if someone had a friend or spoke Chinese themselves to translate it. It could be a vacation message. It might say to contact someone else at a different address. It might say F-off. There's no way to tell. If nobody here speaks Chinese, and nobody has a friend who does so, then I'm sure there's a forum or other newsgroup where Chinese gather, and someone who would be willing to translate for us. Simply give them the email address and let them get the auto-response themselves, unless you can present it in the original Chinese (you have to have the proper display software installed).
That's the ideal way to start this off. If we know what it says, we can tailor our next step accordingly. I know everybody is in a rush, so I guess y'all are going to skip that step.
In that event, the next step is to go over the head of that administrator, and complain to HIS feed, that you can't get any cooperation from him, just an auto-generated message that isn't at all helpful.
Being as how they are an accredited registrar, the only recourse at this point is for ALL OF US to go to ICANN's website and file a complaint AGAINST THE REGISTRAR.
If ICANN receives enough complaints, they might be inclined to take action and VOID that registrar's accredidation.
More in the next message.
Start here http://wdprs.internic.net/ by filing a complaint, that the Administrative Email contact, litao[at]dns[dot]com[dot]cn is merely an autoresponder for the domain dns.com.cn and not a real person. Also complain that there is no technical contact information whatsoever.
Everybody should file this complaint. The more people that file, the more attention they’ll pay to it. We need at least 200 people to file.
Don’t bother explaining the spam issue, it’s not important at this level and will not be addressed. You’ll just be ignored if you complain about spam. This is not the proper place to complain about spam. The effort here, is focused on getting a real person to respond to emails addressed to that address. In the long run, nothing will come of it. But that’s OK. The goal here is to establish a trail of non-compliance with ICANN’s own policies, that each registrar signed. That gives ICANN the legal authority to kick them out. What we really want, is for ICANN to pressure dns.com.cn to boot any and all spammer domains, but we have to do it the long way around. This is that way.
ICANN needs in its hands, a list of complaints in order to file a lawsuit.
More in the next message.
Next, go to http://public.icann.org/help and READ the page. UNDERSTAND the page. Then register for an account. Start posting your spam complaints. BE POLITE. Be legible. Be coherent. Be professional. ICANN is reading your posts at that page, and no other. Inform them of the entire problem in a professional and well-written manner.
Finally, as a potential last step: contact the following attorneys about a class action lawsuit against 1) the spammer, 2) the registrar (dns.com.cn)
These are the attorneys ICANN themselves use to initiate lawsuits. I would recommend only contacting them if in fact you have a list of committed people willing to pursue a class action lawsuit. DO NOT HARASS THESE PEOPLE or you will find yourself in a world of legal hurt. I seriously doubt they will work for free. Be prepared to pay a whole lot of money should you decide to go the legal route. There is no guarantee they will take the case, however in my opinion they are best suited for it as they already understand many of the issues involved – that’s a huge benefit.
Jeffrey A. LeVee (State Bar No. 125863) jlevee [at] jonesday [dot] com
Samantha S. Eisner (State Bar No. 230344) seisner [at] jonesday [dot] com
JONES DAY
555 South Flower Street
Fiftieth Floor
Los Angeles, CA 90071-2300
Telephone: (213) 489-3939
Facsimile: (213) 243-2539
Attorneys for The Internet Corporation for Assigned Names and Numbers (ICANN)
IMPORTANT UPDATE!
dns.com.cn has changed their whois data. It is now:
Registrar Name: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Address: 20/F,Block A,SP Tower,Tsinghua Science Park Building 8,No.1 Zhongguancun East Road Haidian District,Beijing 100084,P.R.China, Beijing, China 100084, CN
Phone Number: + 86 10-82151122
Email: v…@dns.com.cn
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Admin Contact: Wei . Li
Phone Number: + 86 10-82151122
Email: liw…@dns.com.cn
Admin Contact: April . Hu
Phone Number: +86-10-8215-1122
Email: HUV…@DNS.COM.CN
Billing Contact: Wei . Li
Phone Number: + 86 10-82151122
Email: liw…@dns.com.cn
Technical Contact: Feng . Zhai
Phone Number: + 86 10-82601212
Email: zhai…@dns.com.cn
The proper email addresses to politely complain to are:
liw…@dns.com.cn
zhai…@dns.com.cn
HUV…@DNS.COM.CN
Address one email to all 3. Wait 48 hours for a response before moving on to the next step.
Post any responses here in the event they do in fact respond to your POLITE letter informing them of the problem.
I've rewritten the sample letter. This one is MUCH better.
Dear Sir,
I would like to bring to your attention a problem with one of your clients – emailmarketingassociates.com, who has been registered by your organization. This domain is responsible for millions of SPAM emails all over the world. They are forging email headers and promoting these same services to others for a fee. They do not respond to emails to their admin address, nor do they respond to phone calls. They continue to abuse the Internet and are disrespectful of the rights of others.
I believe that Whois data was used as the source of address data for their mailings. I would like to remind you that use of Whois data to send spam is a violation of every ICANN-accredited registrar's terms of use for Whois data.
The exact terms from the agreement are:
3.3.5 In providing query-based public access to registration data as required by Subsections 3.3.1 and 3.3.4, Registrar shall not impose terms and conditions on use of the data provided, except as permitted by policy established by ICANN. Unless and until ICANN establishes a different policy according to Section 4, Registrar shall permit use of data it provides in response to queries for any lawful purposes except to: (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass, unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of any Registry Operator or ICANN-Accredited registrar, except as reasonably necessary to register domain names or modify existing registrations.
You are hereby notified you are in violation of this section of the agreement you signed.
If you do not remove their domain from your DNS servers your organization will not only lose face in the eyes of the world as being co-conspirators in their illegal activities, but I will have no other option than to report your refusal to cooperate to ICANN, and urge ICANN to revoke your accredidation agreement for being in violation.
Respectfully,
(your name)
The above is again, just a sample but similar wording should probably be used that gets the same point across. As some people may be aware, the Chinese are big on "face" and honor, which is why I added that phrase – I wouldn't use it if the registrar were Americans or Europeans, etc.
Anyway, it's likely that the above should have a magical effect. The only problem is, it has to be done every time a new domain pops up.
In the event the magic doesn't happen, the only recourse is to contact and petition ICANN to remove dns.com.cn as an accredited registrar. They may pressure the registrar to remove the domain, and/or they may revoke their accreditation. Of course, ICANN will need massive pressure from we, the people in order to do such a thing. It's best if the registrar takes action instead.
Also, it's best to constantly check WHOIS to make sure you're writing to the most current email address. Those addresses are current as of April 12, 2007 but could change at any minute.
A final word.
I only listed one domain in the above email. It's best to include a complete list of those used by "the spammer who I shall not name".
Make sure dns.com.cn is still their registrar – they may have already been kicked, in which case you should write to the new registrar instead of dns.com.cn
Also, as mentioned, make sure you're always working with current whois data, it could change at any time.
Also, I missed one of the addresses when I summarized. There are actually 4 addresses listed above. Feel free to add it to your CC list.
Good luck. Keep us informed of your progress on all fronts.
Oh, one more thing.
It's best if you can provide proof that what you're saying is true. Email body, headers, whois data, etc. Establish the trail that leads back to the spammer when you write your letter. It will be much more effective – otherwise why should they believe you?
To Dudely:
Principally I agree with you, but
Isn't there the "danger" that the more text we write the more boring the reader will be ?
I (for my own) would not be happy if I have to read an email with 500 lines of text.
I estimate the number of lines at a first glance, and when too many, I throw away.
Not interesting…
In my opinion, the text should only contain what you originally said in your quotes 41-44.
The "face" and "honour" of chinese people, … ok, thats right, but, this will not
work (I guess) if the text is too long. Your first proposal was quite good.
I think our only chance is to be as many complain-"writers" as possible.
If thousands of people complain, the text-content of the complain gets less important.
More important is, that we are enough people who complain.
What do you think ?
This was my text (used your proposal of course,
hope my English is not too bad …
—————————————–
Dear Sir,
I would like to inform you about a problem with one of your clients:
he uses for example the following domains:
- emailmarketingassociates.com
- emailsolutioncorp.com
- emailbroadcastauthority.com
and a lot more similar domains…
This client is responsible for millions of SPAM emails all over the world. He is faking email headers and promoting these same services to others, some of the victims suffer from more than 100 spam mails per day. This client's admin email address in "whois" is faked, he does not respond to any try of contact, nor does he respond to phone calls. He is abusing the Internet and is disprectful of the rights of others. ( He is in violation of your own spam policies. ) If you don't remove his domains your organization may lose face in the eyes of the world, as being co-consipirators in his illegal activities.
Respectfully,
and politely waiting for a feedback
best regards
Why not just flood your state representatives? These people are in China, the worldwide home of piracy. What do they care? Send letters to the BBB, governor, mayor, atty general, et al in Seattle and you'll probably get faster results.
Funny! They are in Seattle! I live in Seattle! What do you guys want me to do to them? I'd like to piss on their door for all the messages they send me!!!
Try this.
1. Load Google AutoFil with fictitious information.
2. Whenever you get one of these emailmarketingassociates.com spams, use the AutoFil to answer the email.
3. Let the spammers use their resources to run the fictitious information.
4. If everyone does it, maybe that will annoy them a bit.
Here's the Outlook 2003 solution to DELETE the spam:
Apply this rule after the message arrives
with yourname(at)yourdomainnameDOTcom in the sender's address
and with 7,500,000 in the body
delete it
Note: The yourname(at)yourdomainnameDOTcom IS what you see under the FROM in your Inbox.
Good luck!
Kill the spammers! All of them!
Response to Msg 63:
I have no real disagreement with you, however it has been my experience that when you show someone you have a very real ability to affect them, they listen much more closely. I have used the procedures I outlined to affect problem users in years past. My first email of "Please help" didn't work. My second email of "Please help or I'll have you shutdown and here's proof that I know who to contact to have it done" did. People react when you show you're serious and that you are in a position to hurt them.
(Please note, that the registrar's info. went from incomplete to complete very quickly, because I took the time to complain to ICANN about a DIFFERENT registrar. I assume ICANN then checked all registrar records (there aren't that many) and issued warnings to all registrar's not in compliance.)
It is very easy to delete even 1000 msgs. However if ONE of those msgs says "I know where you live and I'm watching you" and then provides the correct address, that is ONE SCARY MSG! That single msg will have more effect than all of the other 999 pleading for help.
And so, if you demonstrate to the registrar that you understand how the system works, and that you're serious about affecting their business (read "income") and know the proper steps to actually do so, this is much more effective than "Ow… I'm in pain… please help me."
Wouldn't you agree?
One other point. I believe that the Chinese registrars are authorized by the Chinese government. So, in the event that the registrars lose their accredidation with ICANN, their gov't will ask WHY?
The answer, will probably not please the gov't. Therefore, the people who are running the registrar might possibly be EXECUTED. No joke. They did it to a bunch of bankers over there, there is no reason to believe they won't take this situation just as seriously.
And that my friends, is much more incentive to do something about the spam, than any other reason anyone can provide.
Based on the lack of posts here stating otherwise, it would appear that nobody is truly interested in doing the small amount of work it would take to fix the problem. Clearly people would rather complain than work. Such is life.
Now you know the secrets of the Internet. Use them or don't, it's your choice. But don't complain if you don't use the knowledge I've provided you with.
One last item of note. http://www.knujon.com claims to be having an effect on spam sites.
Project Honeypot also has some interesting information http://www.projecthoneypot.org
You may want to join one or both, they're free.
Preach it brother Dudely!
Lead us uninitiated lead by the unknowing into the light. ;D
Keiser, I hope we are able to let the discussion stay constructive ;D
Dudely, maybe we both are right. We should merge "the proof we can stop you"
with "only using a few words"
One try with your long version
and after that the following:
One of your clients is abusing the … internet.
(Millions of spam from emailmarketingassociates.com and similar domains)
If you don't stop him. you are complicit in his illegal activities.
You did'nt react on friendly words.
If you again don't react, we are forced to contact
ICANN which will stop you.
Best rgards.
MyName
The discussion has been quite constructive, for me at least. After following Dudely's advise, the spam bastard has only gotten 1 in this week as apposed to as many as 10-20 a day. So once again I say; "Preach it brother Dudely!" :> I have also implimented your advise, preemptivly as it were, by using a smaller "nicer" version. This almosty always works with anly a few exceptions. I am working on an intermediate version also. ie. "Nice", "Not sooo nice" and "BOOM!" :> Only had to use BOOM! on 1 so far because as stated "Nice" works.
The discussion has been quite constructive, for me at least. After following Dudely's advise, the spam bastard has only gotten 1 in this week as apposed to as many as 10-20 a day. So once again I say; "Preach it brother Dudely!" :> I have also implimented your advise, preemptivly as it were, by using a smaller "nicer" version. This almosty always works with anly a few exceptions. I am working on an intermediate version also. ie. "Nice", "Not sooo nice" and "BOOM!" :> Only had to use BOOM! on 1 so far because as stated "Nice" works.
Ooops sorry for the double!!
It's actually best if you put things into your own words. However, the paragraph I copied was from the ACTUAL AGREEMENT that all registrars must sign.
When you quote that paragraph, they assume one or more of the following 1) you're associated with ICANN (hey, you didn't say you were, it's not your fault they made the wrong assumption) 2) you know what you're talking about and/or 3) you have the power.
If you'd like to thank me, 10% of your earnings may be sent to: brot…@brotherDudely.org
Just remember to always check WHOIS immediately before emailing your complaint, as you never know when changes will be made.
One further interesting item of note. Some of you in the USA may remember when the junk fax law was created. Congress – until a certain point in time – couldn't care less about junk faxes. Then, some people made sure that certain members of congress were put on certain junk fax lists. When congress became inundated with junk faxes, they passed the law. Suddenly, they understood.
I certainly wouldn't advocate putting any registrars on anyone's spam lists, but if it were to happen, said registrar would probably be more likely to situp and take notice of said spammer. In fact, that would probably Nip it in the Bud!
So what other world problems can I help you all solve?
Ramin & Bryan: Your found mail-addresses (Ramin's found flaw)
unfortunately all are NOT valid
I emailed mailshack, and requested that this email address (cont…@mailshack.com) be shut down.
They said that they have had problems with this company in the past, and have removed them before. So, if you ever find that one of this company's email addresses are attached to mailshack, just email mailshack, and they will remove it.
Keiser: Sorry when I misunderstood you.
Your comment to Brother Dudely sounded so ironical.
Sorry again, my English is not good enough to understand all little things between the lines …
I get them from http://www.emailbroadcastingcompany.com . I got them to respond from this email:
emai…@msbx.net
also it it reg to
adm…@advertisingemailcorporation.com
Lets all just fwd their email right back to them!
Got another email address:
seat…@hotpop.com
As of April 26, 2007, the following is the DNS data for "broadcastemailingagency.com"
(Here's the command I used, you can do this yourself now.)
nslookup -type=any broadcastemailingagency.com ns1.dns.com.cn
Server: ns5.dns.com.cn
Address: 218.30.114.205
broadcastemailingagency.com
primary name server = ns2.dns.com.cn
responsible mail addr = root.ns2.dns.com.cn
serial = 2007042322
refresh = 3600 (1 hour)
retry = 3600 (1 hour)
expire = 68400 (19 hours)
default TTL = 180 (3 mins)
broadcastemailingagency.com nameserver = ns1.dns.com.cn
broadcastemailingagency.com nameserver = ns2.dns.com.cn
ns1.dns.com.cn internet address = 218.30.114.204
ns1.dns.com.cn internet address = 218.30.114.205
ns2.dns.com.cn internet address = 218.244.47.6
ns2.dns.com.cn internet address = 218.244.47.5
Don't know how to read the DNS data? It's simple when you know how. So here's how.
serial = 2007042322
The serial number is used by a secondary server to determine if it requires a zone transfer from the primary server. If the secondary server's number is lower, then the secondary server knows that its records are out of date. In this example, the convention used can identify when the last change was made, but other administrators may use different conventions. The first 8 digits denote YYYYMMDD. The other two numbers are the number of changes made by day or as a whole (Albitz & Liu, 89).
refresh = 3600 (1 hour)
retry = 3600 (1 hour)
expire = 68400 (19 hours)
default TTL = 180 (3 mins)
Refresh, retry and expire intervals deal directly with the primary-secondary server relationship. The TTL interval deals with the cached records on other servers. In this case, other servers are told to keep this data for 3 minutes and then flush it. 3 hours is the normal default.
The refresh interval tells a slave for the zone how often to check that the data for this zone is up to date. In this case, slaves must check every hour.
The retry interval tells a slave how often it must try to reach the master server, if the master server becomes unavailable. In this case a slave will try to reach the master every hour.
The expire interval gives the amount of time that a slave server will try to reach a master server before it expires the zone and will no longer give information about that zone. The amount of time in this record is 19 hours.
So, anyone who wanted to write a script to check when the above data changes should query the dns server no less than every 19 hours, and no more than every 3 minutes – although personally I would not do it more than once an hour, unless it is determined by testing that the data changes more frequently.
If someone does get a script going I'll host the file for us all to d/l. Im assuming that all the interaction it would require would be to ask for the host name being searched for. Then just display the results, perhaps w/a time/date stamp also, to be able to copy/paste the whole thing in the email as more evidence.
Who wants to find robert with me and give him an american style beat down?
Just show that not matter how many people are affected there's nothing we can do.
But we are doing something about it ANT. Read above 1st.
Actually, I was thinking more along the lines of a seperate file containing a list of domains to be checked, rather than having to type in each one. The script would read the list, checking each domain for changes. The ideal way to do it would be to setup a mySQL database to maintain the domains prior information to compare against for changes – in particular, changes to the DNS nameservers.
There needs to be a mechanism that figures out who the registrar is, and then automatically email the registrar a complaint.
That way, the whole thing is automatic. Let cron fire it up once a day, and forget about it. I say once a day, because you don't want to have it email the registar more than once a day. Even once a day may be too often if you want to stay on the registar's good side.
By the way… I started out talking about "whois" and gravitated towards "nslookup". What I should of noticed earlier, is that the whois data doesn't necessarily match the nslookup data.
Because whois data is more of a convenience rather than something required (from a technical standpoint), that data can be ignored, other than to figure out who you're supposed to complain to.
What actually matters, is what the DNS records show, because that's the only way things will actually work right. If you want people to be able to access your website, and/or send you email – DNS must be correct. Therefore, the only thing that matters is what nslookup tells us.
With that said, if you lookup any of the spammer domains in the posts above, you'll notice ALL of them are using dns.com.cn as their name servers.
Therefore, all letter writing campaigns should be directed to them, at this time. Should the name server information change, then the new host of those DNS records should be the target of your POLITE & RESPECTFUL complaint as outlined in previous posts above.
In the event that BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. doing business as DNS.COM.CN
is non-cooperative (and please, please give them a chance to cooperate) then yet another avenue to pursue is http://gsyj.saic.gov.cn/wcm/WCMData/pub/saic/english/Contact%20Us/t20060225_14607.htm
which is The State Administration for Industry & Commerce (SAIC) of the People’s Republic of China. They are the competent authority directly under the State Council in charge of market supervision/regulation and related law enforcement through administrative means. Its functions are as follows: (go to the website, look under "About Us" and then click on "mission" to see it's long list of functions.
I would add this agency's name to my complaint letter when writing to dns.com.cn
Again – it's always better to show the bottom dog that you know who the top dog to contact is, and threaten to contact them. In the event you actually have to go to the top dog, you have a WORSE chance of getting what you want done, because if the top dog says "we don't care", that's it you're done. There is no place else to go. So it's better to make the bottom dog FEAR that you'll go to the top dog, without actually doing it. Let the bottom dog fix the problem.
As luck would have it, someone else has taken on the task of writing software to automate the first step of the process I've previously outlined. I have not tried the software myself yet, but it sounds decent. Here's the link:
http://www.spamtrackers.eu/wiki/index.php?title=Robert_Soloway
There is more iformation on Soloway and his scam at
http://www.spamtrackers.eu/wiki/index.php?title=Robert_Soloway
http://www.spamtrackers.eu/wiki/index.php?title=Broadcast_Email_Service
**** ROKSO Spammer Robert Soloway Arrested ****
Robert Soloway, one of the most persistent professional spammers listed since 2003 on Spamhaus's Register Of Known Spam Operations (ROKSO) database, has been arrested in Seattle Washington in a joint operation conducted by the Washington State Attorney General's Office, the FBI, FTC, Internal Revenue Service Criminal Investigations (IRS-CI) and the United States Postal Inspection Service (USPIS).
more:-
http://www.spamhaus.org/news.lasso?article=611
&
http://groups.google.co.uk/group/news.admin.net-abuse.email/browse_frm/thread/d25c6d58e900d8ed/3a97ef62e533128b?hl=en#3a97ef62e533128b
!!! Y E S !!!
A very good message for the world
Thanks to all people who made the arrest possible
I am receiving up to 3000 bounce-back spoofed messages a day from someone spoofing e-mail spam from my domain. Every website they are advertising is registered to Beijing Innovative Linkage Technology.
This has GOT to stop.
me too. I used to get hundreds per day, then they stopped for awhile. They started again the day after Soloway was arrested, but then stopped again a week ago or so. I think these losers just rotates the 'from' addresses they spoof and they're taking a break from using my email address right now. I'm sure I'll be getting hundreds a day again soon enough.
i received a scam email from email address "i…@microsoft.co.uk" Sounds legit doesnt it?
Promising money won (large amount), so WHAT do i do now to stop them, they have the right header for the email, but i was alerted by the 'not quite right' sentences and grammar. Can someone please help me?
Thankyou.
Jeff.
P.S. Can't find a direct email address to microsoft to alert them of this new scam using their name (and Bill Gates!)
Jeff: It's extremely simple to make the FROM e-mail address be anything the spammer wants. What you have to do is go inside the header details and look at the originating IP address for the e-mail and see if it is a Microsoft IP address or not (I can tell you, it's not.) You can use spamcop.net to process the entire header and tell you all sorts of things about the e-mail.
http://spamcop.net/fom-serve/cache/22.html
i hate these scam emails
i always double check my emails at
http://www.scamemail.co.uk
some of them look surprisingly real
brian
Robert Alan Soloway is reaponsible for all of this spam.
He was arrested, pled guilty and will be going to jail for decades.
Google his name and read all about him.