geek notes for advice seekers / / rambaud maurice / spam

If you’re a system admin, this guy may have broken your balls. After being kicked from several hostings, his sites are still alive.

Name    E.Micro
Type    bulkmailer or list vendor
Count    37
First sent    09.10.2007
Last sent    10.12.2008

Name      Domain     Count
E.Micro    37    0    0    0    0    0    0    0    0    0    0    0
Air Email    22    0
E.Micro    5    1    1
Total     (17 sites)     66

You can also add those to the list:

Interestingly, and other sites redirect to:

Which is the site of his Mac reselling company . is also his home or work dsl, but his ISP refused to disable his account claiming the spams aren’t sent directly from his dsl connection.

His email marketing company is, do NOT buy from him, his emails are NOT opt-in even if he claims so, this will get your domain blacklisted and less than 1% of the mails will be read.

After exchanging mails with the abuse, where he sent spams for some days, they deleted his account, but he now sends them from Turkey:

Received: from (unknown []).

Here is more info about him:

SARL au capital de 1000 € – RCS Grenoble 504213521 – Siège social : Les Barillats – 38160 Saint Romans (France)

person:      Maurice Rambaud
address:     E . MICRO
address:     les Barillats
address:     38160 Saint-Romans
country:     FR
phone:       +33 4 76 38 84 09
fax-no:      +33 4 76 38 84 09
liste-r:     N
nic-hdl:     MR643-FRNIC
mnt-by:      OVH-MAINTAINER01
changed:     04/08/2004
source:      FRNIC

Feel free to spam him at or .

For the record, here’s the latest spam i got from them:

Received: from (unknown [])
by *********** (Postfix) with ESMTPS id D899A33100A7
for <***********>; Wed, 21 Jan 2009 00:54:06 +0100 (CET)
Received: from serveur95 (unknown [])
by (Postfix) with ESMTP id C6AC215187
for <***********>; Wed, 21 Jan 2009 01:05:34 +0100 (CET)
Received: from workstation ([])
by (Merak 8.0.3) with SMTP id UB106958
From:”Communication” <>
To: ***********
Subject: Energie solaire, c’est le moment !
Message-ID: <***********>
Date: Wed, 21 Jan 2009 00:58:40 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
X-Priority: 3
X-Mailer: Office Outlook 12.0

This is a multi-part message in MIME format.

Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Si vous ne visualisez pas correctement ce message, Cliquez ici=0D=0A =0D=
=0ASi vous ne souhaitez plus recevoir d’email de notre part, =
nous nous excusons de la g=C3=AAne occasionn=C3=A9e,=0D=0Aet =
nous vous proposons de vous supprimer de notre liste de diffusion.=0D=0A=
Pour d=C3=A9sinscrire *********** de notre NewsLetter =
: Cliquez ici

Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC “-//W3C//DTD HTML 4.0 Transitional//EN”>=0D=0A<H=
TML><HEAD>=0D=0A<META http-equiv=3DContent-Type content=3D”text/html; =
charset=3Diso-8859-1″>=0D=0A<META content=3D”MSHTML 6.00.2900.2180″ =
name=3DGENERATOR></HEAD>=0D=0A<BODY style=3D”TEXT-ALIGN: center”><FONT=
size=3D-1>Si vous ne visualisez pas correctement ce message, =
<A href=3D””>Cliquez ici=0D=0A<P><=
/P></A></FONT><IMG height=3D842 alt=3D”” src=3D”http://www.lesmails4.f=
r/693_4454.jpg” width=3D593 useMap=3D#Map border=3D0> <MAP name=3DMap>=
<AREA shape=3DRECT coords=3D119,812,473,838 href=3D”http://www.lesmail=***********&amp;clic1=3DClic1&=
amp;client=3D4454″><AREA shape=3DRECT coords=3D234,653,355,670 =
href=3D”***********&amp;clic2=3DClic2&amp;client=3D4454″><AREA shape=3DRECT =
coords=3D232,391,355,408 href=3D”
54″><FONT face=3DGeneva,Arial,Helvetica,sans-serif color=3D#666666 =
size=3D2>=0D=0A<P></P>Si vous ne souhaitez plus recevoir d’email =
de notre part, nous nous excusons de la g=C3=AAne occasionn=C3=A9e,=0D=
=0A<P></P>et nous vous proposons de vous supprimer de notre =
liste de diffusion.<FONT size=3D-2></FONT>=0D=0A<P></P><FONT =
face=3DGeneva,Arial,Helvetica,sans-serif color=3D#666666 size=3D2>Pour=
d=C3=A9sinscrire *********** de notre NewsLetter : </FONT><FONT=
size=3D2><A href=3D”
scribehide=***********”>Cliquez ici=0D=0A<P></P>=0D=0A<P></P></FO=


UPDATE: 17/02/2009

Still spamming! I will update below the list of the (new) servers/domains he is using, and his customers:

  • Servers sending spam: [] ( (unknown [])

  • Servers hosting the spam images: ( redirects to ( redirects to which resolves to: ( ( redirecting to

  • Servers hosting the pages to unsubscribe: resolves to (Free/Proxad), same IP as before.

  • His customers: (yes he spams for himself)

UPDATE: May 2009

No more spam from him and all his servers, sites including the hosting space and are dead!

UPDATE: 8 June 2009

Still spamming, according to a comment on the blog:

UPDATE: 10 June 2009

New domain:

7 Responses to “ / / rambaud maurice / spam”

Leave a Reply

Your email address will not be published.