Doge's research on Twitch Viewer / Chat Botting "Companies"

I've worked in the IT / IP Security field for around 15 years and decided to get to the bottom of the Twitch Viewbot Companies and unmask there true identities and who they actually are.

At first I thought it would be incredibly hard to compile all the data when really it wasn't most of the companies are all founded by the same individuals who use the same set of backend servers

This is my compilation of all the gathered information the botting companies and who there founders are as well as unmasked ip addresses backend and frontend routing etc.

Whois Record for Twitch-ViewerBot.com
How does this work?
 Whois & Quick Stats
Email	 is associated with ~1,436,435 domains
 is associated with ~3 domains

Registrant Org	Sjaak Crop is associated with ~2 other domains
Registrar	KEY-SYSTEMS GMBH
Registrar Status	ok
Dates	Created on 2014-07-08 - Expires on 2017-07-08 - Updated on 2016-07-09
Name Server(s)	MIKI.NS.CLOUDFLARE.COM (has 1,476,297 domains)
NORM.NS.CLOUDFLARE.COM (has 1,476,297 domains)

IP Address	104.18.54.242 - 75 other sites hosted on this server
IP Location	United States - Arizona - Phoenix - Cloudflare Inc.
ASN	United States AS13335 CLOUDFLARENET - CloudFlare, Inc., US (registered Jul 14, 2010)
Domain Status	Registered And Active Website
Whois History	50 records have been archived since 2014-07-08
IP History	7 changes on 7 unique IP addresses over 2 years
Registrar History	1 registrar with 2 drops
Hosting History	4 changes on 3 unique name servers over 2 years
Whois Server	whois.rrpproxy.net
 Website
Website Title	  Twitch Viewer Bot - Get popular now!
Server Type	cloudflare-nginx
Response Code	200
SEO Score	95%
Terms	1280 (Unique: 472, Linked: 25)
Images	8 (Alt tags missing: 0)
Links	14   (Internal: 12, Outbound: 2)
Whois Record ( last updated on 2016-07-10 )
Domain Name: twitch-viewerbot.com
Registry Domain ID: 1866095620_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.rrpproxy.net
Registrar URL: http://www.transip.nl
Updated Date: 2016-07-08T01:23:09.0Z
Creation Date: 2014-07-08T23:04:20.0Z
Registrar Registration Expiration Date: 2017-07-08T23:04:20.0Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 269
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +49.68949396850
Domain Status: ok https://icann.org/epp#ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Sjaak Crop
Registrant Organization:
Registrant Street: Lilian Ngoyiweg 365
Registrant City: Rotterdam
Registrant State/Province:
Registrant Postal Code: 3065 SC
Registrant Country: NL
Registrant Phone: +31.641256988
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID: Not Available From Registry
Admin Name: Sjaak Crop
Admin Organization:
Admin Street: Lilian Ngoyiweg 365
Admin City: Rotterdam
Admin State/Province:
Admin Postal Code: 3065 SC
Admin Country: NL
Admin Phone: +31.641256988
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID: Not Available From Registry
Tech Name: Sjaak Crop
Tech Organization:
Tech Street: Lilian Ngoyiweg 365
Tech City: Rotterdam
Tech Postal Code: 3065 SC
Tech State/Province:
Tech Country: NL
Tech Phone: +31.641256988
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Registry Billing ID: Not Available From Registry
Billing Name: Sjaak Crop
Billing Organization:
Billing Street: Lilian Ngoyiweg 365
Billing City: Rotterdam
Billing State/Province:
Billing Postal Code: 3065 SC
Billing Country: NL
Billing Phone: +31.641256988
Billing Phone Ext:
Billing Fax:
Billing Fax Ext:
Billing Email:
Name Server: miki.ns.cloudflare.com
Name Server: norm.ns.cloudflare.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: https://wdprs.internic.net/

TransIP BV
Real-time domeinregistratie en -beheer vanaf 4.99 Euro!
http://www.transip.nl/products/domain/

Twitch-ViewerBot.com founder registered under an attempted masked home address / location but on Google Maps it's a really registered Business available here

https://www.google.com/maps/place/3065+SC+Rotterdam,+Netherlands/@51.9206149,4.5274899,49m/data=!3m1!1e3!4m5!3m4!1s0x47c432dae90f011f:0x1300de5a70a01ba2!8m2!3d51.9216135!4d4.5503489

The phone number is a real phone number that's currently out of service but was his own personal VOIP number.

The next one is ViewBot.net the founder of this botting website attempted to use a No-IP ip masking company to protect his identity but was stupid enough to not realize that we can all just report him to Sponsoring Registrar: Vitalwerks Internet Solutions, LLC / No-IP.com as they do not support any unlawful content.

Whois Record for ViewBot.net
How does this work?
 Whois & Quick Stats
Email

Registrant Org	Registration Privacy, No-IP.com is associated with ~11,979 other domains
Registrar	VITALWERKS INTERNET SOLUTIONS LLC DBA NO-IP
Registrar Status	clientTransferProhibited
Dates	Created on 2014-04-04 - Expires on 2018-04-04 - Updated on 2016-04-04
Name Server(s)	GINA.NS.CLOUDFLARE.COM (has 1,476,297 domains)
PAUL.NS.CLOUDFLARE.COM (has 1,476,297 domains)

IP Address	104.18.38.174 - 77 other sites hosted on this server
IP Location	United States - Arizona - Phoenix - Cloudflare Inc.
ASN	United States AS13335 CLOUDFLARENET - CloudFlare, Inc., US (registered Jul 14, 2010)
Domain Status	Registered And Active Website
Whois History	47 records have been archived since 2001-06-08
IP History	19 changes on 12 unique IP addresses over 12 years
Registrar History	3 registrars with 4 drops
Hosting History	21 changes on 11 unique name servers over 12 years
Whois Server	whois.no-ip.com
 Website
Website Title	None given.
Whois Record ( last updated on 2016-07-10 )
Whois Server Version 2.0

Domain Name: VIEWBOT.NET
Created On: 04-Apr-2014 07:00:00 UTC
Last Updated On: 04-Apr-2016 07:55:22 UTC
Expiration Date: 04-Apr-2018 23:21:15 UTC
Sponsoring Registrar: Vitalwerks Internet Solutions, LLC / No-IP.com
Registrant Name: Registration Privacy, No-IP.com
Registrant Organization:
Registrant Street1: ATTN: viewbot.net, c/o No-IP.com Registration Privacy
Registrant Street2: P.O. Box 19083
Registrant City: Reno
Registrant State/Province: NV
Registrant Postal Code: 89511
Registrant Country: US
Registrant Phone: +1.7758531883
Registrant FAX:
Registrant Email: 3f3499cc84cea09e-856384@privacy.no-ip.com

Admin Name: Registration Privacy, No-IP.com
Admin Street1: ATTN: viewbot.net, c/o No-IP.com Registration Privacy
Admin Street2: P.O. Box 19083
Admin City: Reno
Admin State/Province: NV
Admin Postal Code: 89511
Admin Country: US
Admin Phone: +1.7758531883
Admin FAX:
Admin Email: 3f3499cc84cea09e-856384@privacy.no-ip.com

Tech Name: Registration Privacy, No-IP.com
Tech Organization:
Tech Street1: ATTN: viewbot.net, c/o No-IP.com Registration Privacy
Tech Street2: P.O. Box 19083
Tech City: Reno
Tech State/Province: NV
Tech Postal Code: 89511
Tech Country: US
Tech Phone: +1.7758531883
Tech FAX:
Tech Email: 3f3499cc84cea09e-856384@privacy.no-ip.com

Billing Name: Registration Privacy, No-IP.com
Billing Organization:
Billing Street1: ATTN: viewbot.net, c/o No-IP.com Registration Privacy
Billing Street2: P.O. Box 19083
Billing City: Reno
Billing State/Province: NV
Billing Postal Code: 89511
Billing Country: US
Billing Phone: +1.7758531883
Billing FAX:
Billing Email: 3f3499cc84cea09e-856384@privacy.no-ip.com

Name Server: GINA.NS.CLOUDFLARE.COM
Name Server: PAUL.NS.CLOUDFLARE.COM

I eventually started to notice a pattern of failure and how anyone and their mother can start a company usually using very unmonitored servers like OVH servers for example or temporary Digital Ocean servers not having to invest much and making twice as much back for broken promises led me to believe every company was just a very basic individual running a basic service and for the most part it was correct.

One of the biggest ones is StreamBot.net and at this point I realized that the majority of the botting companies where either founded or registered in the Netherlands this is because the regulations there are lack luster at best because piracy runs rampant and isn't a big deal because free speech and open software is huge there.

But it wasn't so much that I realized they were registered in the Netherlands as a whole I noticed they were registered all in the same general area

HomeWhois LookupStreamBot.com
Whois Record for StreamBot.com
How does this work?
 Whois & Quick Stats
Email	 is associated with ~182,467 domains
 is associated with ~5,047 domains

Registrant Org	Whois Privacy Protection Foundation is associated with ~5,157 other domains
Registrar	HOSTING CONCEPTS B.V. D/B/A OPENPROVIDER
Registrar Status	clientTransferProhibited
Dates	Created on 2002-08-16 - Expires on 2019-08-16 - Updated on 2016-05-30
Name Server(s)	IGOR.NS.CLOUDFLARE.COM (has 1,476,297 domains)
JEAN.NS.CLOUDFLARE.COM (has 1,476,297 domains)

IP Address	104.27.148.50 - 77 other sites hosted on this server
IP Location	United States - Arizona - Phoenix - Cloudflare Inc.
ASN	United States AS13335 CLOUDFLARENET - CloudFlare, Inc., US (registered Jul 14, 2010)
Domain Status	Registered And Active Website
Whois History	80 records have been archived since 2000-01-09
IP History	16 changes on 14 unique IP addresses over 11 years
Registrar History	3 registrars
Hosting History	9 changes on 6 unique name servers over 9 years
Whois Server	whois.registrar.eu
 Website
Website Title	  Twitch Viewer Bot | Quit your job Today and Partner Up!
Response Code	200
SEO Score	73%
Terms	363 (Unique: 217, Linked: 20)
Images	23 (Alt tags missing: 22)
Links	15   (Internal: 2, Outbound: 5)
Whois Record ( last updated on 2016-07-10 )
Domain Name: streambot.com
Registry Domain ID: 89413543_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.registrar.eu
Registrar URL: http://www.registrar.eu
Updated Date: 2016-05-31T00:15:25Z
Creation Date: 2002-08-17T00:47:21Z
Registrar Registration Expiration Date: 2019-08-16T22:47:21Z
Registrar: Hosting Concepts B.V. d/b/a Openprovider
Registrar IANA ID: 1647
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone: +31.104482297
Domain Status: clientTransferProhibited
Registry Registrant ID: WF903118-NL
Registrant Name: Whois Privacy Protection Foundation
Registrant Organization: Whois Privacy Protection Foundation
Registrant Street: Willem Buytewechstraat 40
Registrant City: Rotterdam
Registrant State/Province: Zuid-Holland
Registrant Postal Code: 3024 BN
Registrant Country: NL
Registrant Phone: +31.104482295
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:
Registry Admin ID: WF903118-NL
Admin Name: Whois Privacy Protection Foundation
Admin Organization: Whois Privacy Protection Foundation
Admin Street: Willem Buytewechstraat 40
Admin City: Rotterdam
Admin State/Province: Zuid-Holland
Admin Postal Code: 3024 BN
Admin Country: NL
Admin Phone: +31.104482295
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:
Registry Tech ID: WF903118-NL
Tech Name: Whois Privacy Protection Foundation
Tech Organization: Whois Privacy Protection Foundation
Tech Street: Willem Buytewechstraat 40
Tech City: Rotterdam
Tech State/Province: Zuid-Holland
Tech Postal Code: 3024 BN
Tech Country: NL
Tech Phone: +31.104482295
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:
Name Server: igor.ns.cloudflare.com
Name Server: jean.ns.cloudflare.com
DNSSEC: unsigned

URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Once again registered in Rotterdam so I decided that I was going to contact Rotterdam police and explain the situation to them after contacted them via email and getting no where I tried contacting them by phone but the translation would have been impossible to do even if I was able to contact someone I was not able to all numbers to the Rotterdam Police are blocked unless called from that country zone so I attempted to call from a Holland based VOIP which they don't accept either.

I then noticed that every postal code was within 10-50 numbers of each other 3024-3074 so I decided to Google this location and sure enough it's a location that's basis is masking and hiding data a part of Holland that's core purpose is tech security.

At that point I decided if no one was going to take action I would so I started doing research about the individuals that were registers of the sites the first one I looked up was Sjaak Crop thinking there's no way this guy can be that open with his personal information how wrong I was I managed to find his personal email address incredibly easy his home phone numbers as well as an address which I believed could not possibly be his home address how wrong I was Lilian Ngoyiweg 365 Rotterdam 3065 SC NL  http://website.informer.com/Sjaak+Crop.html

At this point I came to the conclusion that every botting "company" was just an individual attempting to make a quick buck and after looking at the lawsuit Twitch had filed I realized that all the companies were just single individuals.

After realizing that nearly everyone I had tried to find data on was already listed in the Lawsuit Twitch was filing against them I decided to just stop doing research on it but still handed all additional information I had to Twitch through a support ticket.

If people think these businesses are huge corporations just no they are not every "corporation" is just run by humans and these are some of the stupidest mediocre amateur humans looking for a quick buck.