You are not logged in. Login Now
 0-4   5-16         
 
Author Message
keesan
International internet Mark Unseen   Dec 1 16:10 UTC 2002

How does the internet affect people outside of the United States?  How are
people in the United States affected by the rest of the world via the
internet?  Is there an international internet culture or language?  
One of the more obvious effects is that you can now send junk mail all over
the world for nearly free.
16 responses total.
keesan
response 1 of 16: Mark Unseen   Dec 1 16:18 UTC 2002

I wonder how many people in how many countries are sending out
English-language porn spam.  This one appears to have originated in
Brazil.  Can anyone summarize the responses from two Brazilian ISPs, or
whatever they are?  I was surprised to get three emails in one day in
Portuguese, but I have also received SPAM report confirmations in
French-Flemish-German-English.  Some spams seems to travel through five
other countries on their way to me (often Korea) - do certain countries
simply not care about their open relays?  What countries produce the most
spam of different types (porn seems to be common in international spam).
Is there Nigeria type spam (come collect your share of forty million
dollars) from countries outside of Africa?  What sort of spam tends to
come from the former Soviet Union?  Can you spot any trends?

From terra.networks@terra.com.br Sun Dec  1 10:05:44 2002
Date: Sat, 30 Nov 2002 14:36:17 -0200 (BRST)
From: terra.networks@terra.com.br
To: keesan@grex.cyberspace.org
Subject: [Mensagem Automatica] Mensagem recebida

Mensagem [THIS IS THE PLACE TO GET DISCREET "SEX ON THE SIDE" 1136-4
(fwd)] recebida. 

          Prezado(a) Cliente,

Seu e-mail foi recebido com sucesso pelo Departamento de Abuse do Terra.
Estaremos lhe respondendo no prazo maximo de tres dias uteis, para que
possamos analisar a mensagem e tomar as devidas providencias. 

Saiba mais sobre SPAM, esses e-mails indesejados e como combate-los
visitando o site
https://www.terra.com.br/centraldoassinante/abuse/combaterspam.htm

PROTEJA SUA CAIXA POSTAL CONTRA VIRUS E SPAMs - Simples e facil de ser
configurado, o E-mail Protegido Terra funciona sem que voce precise fazer
o download de programas, protegendo sua caixa postal contra virus e spam.
Alem disso, voce nao precisa se preo cupar com atualizacoes porque o
antivirus e atualizado automatica e constantemente aqui nos servidores do
Terra. Conheca estah nova solucao no site
http://www.emailprotegido.terra.com.br
 
Para maiores informacoes sobre as medidas adotadas em relacao a usuarios
que utilizam a rede de forma ilicita, acesse as Condicoes Gerais de Uso do
Portal TERRA no link abaixo, observando os itens 3.3, 3.5, 3.6 e 9
http://www.terra.com.br/avisolegal.htm

Permanecemos a disposicao para a investigacao e resolucao dos casos reportados.

Atenciosamente,

Equipe de Segurança Terra - Depto. de Abuse
abuse@terra.com.br
SAN - Servico de Atendimento Nacional
------------------------------------------------------------
Depto. Abuse - www.terra.com.br/centraldoassinante/abuse
------------------------------------------------------------

######################

From abuse@terra.com.br Sun Dec  1 10:29:15 2002
Date: Sun, 1 Dec 2002 00:19:50 -0300
From: Departamento de Abuse - Terra Networks <abuse@terra.com.br>
To: Sindi Keesan <keesan@cyberspace.org>
Cc: abuse@telesp.net.br
Subject: Re: THIS IS THE PLACE TO GET DISCREET "SEX ON THE SIDE" 1136-4 (fwd)

    [The following text is in the "ISO-8859-15" character set]
    [Your display is set for the "ISO-8859-1" character set]
    [Some characters may be displayed incorrectly]


Prezado(a) Sr(a).


O Terra esta a sua disposicao para a investigacao e resolucao 
destes casos.

Apos analise da mensagem, identificamos que o referido autor 
pertence a REDE TELECOMUNICACAO DE SAO PAULO S/A - TELESP, 
a qual esta recebendo copia dessa mensagem.

Novas incidencias relacionadas a este caso poderao ser enviadas
diretamente a area responsavel da Empresa citada acima, atraves 
do endereco abuse@telesp.net.br.

Ficamos gratos de sua atencao.


Fabio Longarai
Equipe de Segurança Terra - Depto. de Abuse
abuse@terra.com.br
SAN - Servico de Atendimento Nacional
Fax: (51) 3287-9087
-------------------------------------------------------------------
Previna-se de e-mails indesejáveis!
E-mail protegido: www.emailprotegido.terra.com.br
-------------------------------------------------------------------
###################
[most of the addresses in the header did not actually exist - did this
mail originate in Korea?  Note yahoo, yahoo, and yahui.]

> ---------- Forwarded message ----------
> Received: from yahoo.com (nobody@200-207-3-8.terra.com.br [200.207.3.8]) by
grex.cyberspace.org (8.6.13/8.6.12) with SMTP id SAA08661 for
<keesan@grex.org>; Fri, 29 Nov 2002 18:07:48 -0500 > Received: from
mail.gimmixx.net ([44.64.102.181]) >         by m10.grp.snv.yahui.com with
local; 30 Nov 2002 02:05:01 +0300 > Received: from [210.136.173.74] by
smtp-server.tampabayr.com with QMQP; Sat, 30 Nov 2002 04:59:14 -0400 >
Received: from [141.1.207.78] by anther.webhostingtotalk.com with SMTP; Sat, 30
Nov 2002 00:53:27 -0500 > Received: from unknown (39.28.196.70) >         by
smtp013.mail.yahou.com with SMTP; Fri, 29 Nov 2002 19:47:40 -0000 > Received:
from [147.183.80.240] by symail.kustanai.co.kr with SMTP; 29 Nov 2002 19:41:53
+0300 > Reply-To: "horny and Lonely" <wifealoneks835@yahoo.com> > Message-ID:
<001a05a62c0c$5781a1b2$5de07be3@xwqvtd> > From: "horny and Lonely"
<wifealoneks835@yahoo.com> > To: <keesan@grex.org> > Subject: THIS IS THE PLACE
TO GET DISCREET "SEX ON THE SIDE" 1136-4 > Content-Type: text/html;
charset="iso-8859-1"

> Look at finehornywives today
> <p>How have you been? You would not
> believe what I found but it is true. There is a site for fine horny wives to
talk, chat, > see each others pictures, and even meet each other as close as
next door > that I found.But that's not the best part, here > is why it's so
unbelievable, not all the people are single, in fact, > a lot of them are even
married, looking to > satisfy their hungriest desires. > Look at finehornywives
today > You would not believe what is > going on and what people are saying
about this site, check this out!</p>

> <p><a
href="http://sexyadultpages.net/fhwnck/">www.finehornywives.com</a></p> >
<p><font color="#FFFFFF">p</font></p> [fiftenn of the above line - why?]

> Look at finehornywives todayfor no more offers write
nomoremessages111@excite.com 
> 0503yZaa4-421UQRB1954rIOY3-761szMol32


   
 
keesan
response 2 of 16: Mark Unseen   Dec 4 20:55 UTC 2002

For those who want to be able to talk about spam in French, here is a
response to my reporting a Nigeria-type spam from Togo, where they
apparently speak French, sent via a French-language free email service. 
The real Nigeria spams are in terrible English and tend to be from Yahoo. 
I am surprised at the good English of this one.  Larry Kestenbaum, aka
polygon@grex.org, is collecting Nigeria spams so forward them to him.
I think someone must have published a template for this sort of spam.
Half of them have the subject line URGENT BUSINESS PROPOSAL, and they all
have certain requisite elements, explaining how the original owner of the
money died, and there is 100% no risk, and it must be kept confidential.  

From abuse@tiscali.fr Wed Dec  4 15:48:22 2002
Subject: Re: URGENT BUSINESS PROPOSAL (fwd) [#1374471]

[ceci est une reponse automatique]
[english text below]

Madame, Monsieur,

Nous accusons reception de la plainte que vous venez d'envoyer a notre
service Abuse. Elle sera traitee aussi vite que possible. 

Merci de verifier que vous nous avez envoye les elements ci-dessous :

- en cas de probleme concernant un mail : l'en-tete complete du message
(comprenant l'adresse IP de l'emetteur, la date, l'heure et le fuseau
horaire de l'envoi), ainsi que son contenu. 

- en cas de probleme sur groupe de news : l'en-tete du post (comprenant
une ligne X-trace qui contient tous les elements indispensables a
l'identification de l'emetteur), ainsi que le contenu du message. 

- en cas de hack : l'adresse IP de l'ordinateur distant, la date, l'heure
et le fuseau horaire de l'attaque. 

Dans tous les cas veuillez expliquer brievement le motif de votre plainte.
Sans ces informations cette derniere ne pourra etre traitee correctement. 

Apres etude de votre message, nous appliquerons les mesures en rapport
avec le type d'incident rapporte, conformement a nos conditions generales
d'utilisation de nos services. 

Cordialement,

Le Service Abuse de Tiscali 

PS : cliquez sur "repondre a l'auteur" pour tout envoi d'informations
complementaires. 


[french text above]
[this is an automated response]


Dear Madam, dear Sir,

We hereby acknowledge receipt of your message. It will be dealt with by our
Abuse Investigation Service as soon as possible. 

Please make sure that your mail contains the elements below : 

- in case of mail issue : the complete header of the message (containing
the IP address of the sender, the date, time and time zone of the
sending), as well as the body of the message

- in case of Newsgroup issue : the complete header of the post, which
includes an X-trace line containing all the informations required to
identify the sender

- in case of hack : the IP address of the remote computer, the date, time
and time zone of the attack. 

Please always add a few words of explanation.
We won't be able to treat your complaint without the required information.

After investigation we'll act against our customer according to our Terms
of Service contract.

Best regards,

Tiscali  Abuse Service

PS : to help us provide you with the best service possible please make a
reply of this message for further correspondence concerning this matter.


---------- Forwarded message ----------
Received: from nomade.fr (192.168.10.29) by mail.libertysurf.net (6.5.026)
        id 3DDCB4A1000F8408; Wed, 4 Dec 2002 06:17:04 +0100
Subject: URGENT BUSINESS PROPOSAL
From: "Aduza Bovi"<glosec@nomade.fr>
To: glosec@nomade.fr

FROM: MR ADUZA BOVI
AUDITING AND ACCOUNTING UNIT.
FOREIGN OPERATIONS DEPARTMENT.
BANQUE TOGOLAISE POUR LE COMMERCE ET L'INDUSTRIE,
LOME- TOGO.
TEL:(228) 912 94 82

Dear friend,

I am MR ADUZA BOVI, the director in charge of auditing
and accounting section of Banque Togolaise Pour Le
Commerce Et L'Industrie Lome-Togo in West Africa with due
respect and regard. I have decided to contact you on a
business transaction that will be very beneficial to both
of us at the end of the transaction .

During our investigation and auditing in this bank, my
department came across a very huge sum of money belonging
to a deceased person who died on November 1st 1999 in a
plane crash and the fund has been dormant in his account
with this Bank without any claim of the fund in our
custody either from his family or relation before our
discovery to this development.Although personally, I keep
this information secret within myself and partners to
enable the whole plans and idea be Profitable and
successful during the time of execution. The said amount
was (U.S $15M UNITED STATES DOLLARS).

Meanwhile all the whole arrangement to put claim over
this fund as the bonafide next of kin to the deceased,
get the required approval and transfer this money to a
foreign account has been put in place and directives and
needed information will be relayed to you as soon as you
indicate your interest and willingness to assist us and
also benefit your self to this great business opportunity.

In fact I could have done this deal alone but because of
my position in this country as a civil servant(A
Banker),we are not allowed to operate a foreign account
and would eventually raise an eye brow on my side during
the time of transfer because I work in this bank. This is
the actual reason why it will require a second party or
fellow who will forward claims as the next of kin with
affidavit of trust of oath to the Bank and also present a
foreign account where he will need the money to be re-
transferred into on his request as it may be after due
verification and clarification by the correspondent
branch of the bank where the whole money will be remitted
from to your own designation bank account.

I will not fail to inform you that this transaction is
100% risk free. On smooth conclusion of this
transaction, you will be entitled to 30% of the total sum
as gratification, while 10% will be set aside to take
care of expenses that may arise during the time of
transfer. while 60% will be for me and my partners.

Please, you have been adviced to keep "top secret" as we
are still in service and intend to retire from service
after we conclude this deal with you. I will be
monitoring the whole situation here in this
bank until you confirm the money in your account. and ask
us to come down to your country for subsequent sharing of
the fund according to percentages previously indicated
and further investment, either in your country or any
country you advice us to invest in.

 All other necessary vital information will be sent to
you when I hear from you.I suggest you get back to me as
soon as possible stating your wish in this deal.

I look forward to hear from you asap.

Yours faithfully,

MR Aduza Bovi

-------------------
L'e-mail gratuit pas comme les autres.
NOMADE.FR, pourquoi chercher ailleurs ?






debayan1
response 3 of 16: Mark Unseen   Dec 18 12:53 UTC 2002

One thing is common for all spam porn mail--- its started with "FREE" and
ended with "CREDIT CARD NO." or "Cheque no." etc.
keesan
response 4 of 16: Mark Unseen   Dec 21 02:32 UTC 2002

My latest spam (which had some rather strange looking html in it - I will
post that next) appears to have come from Brazil, disguised as
Rocketmail.com.  Can anyone tell me what the following reply means?  I can
make out download, mailbox, virus, spam, and server (servidor).


From terra.networks@terra.com.br Fri Dec 20 21:27:39 2002
Date: Sat, 21 Dec 2002 00:21:35 -0200 (BRST)
From: terra.networks@terra.com.br
To: keesan@grex.cyberspace.org
Subject: [Mensagem Automatica] Mensagem recebida

Mensagem [fw:get out of debt in 36 months or less (fwd)] recebida.

          Prezado(a) Cliente,

Seu e-mail foi recebido com sucesso pelo Departamento de Abuse do Terra.
Estaremos lhe respondendo no prazo maximo de tres dias uteis, para que
possamos analisar a mensagem e tomar as devidas providencias. 

Saiba mais sobre SPAM, esses e-mails indesejados e como combate-los
visitando o site
https://www.terra.com.br/centraldoassinante/abuse/combaterspam.htm

PROTEJA SUA CAIXA POSTAL CONTRA VIRUS E SPAMs - Simples e facil de ser
configurado, o E-mail Protegido Terra funciona sem que voce precise fazer
o download de programas, protegendo sua caixa postal contra virus e spam.
Alem disso, voce nao precisa se preo cupar com atualizacoes porque o
antivirus e atualizado automatica e constantemente aqui nos servidores do
Terra. Conheca estah nova solucao no site
http://www.emailprotegido.terra.com.br
 
Para maiores informacoes sobre as medidas adotadas em relacao a usuarios
que utilizam a rede de forma ilicita, acesse as Condicoes Gerais de Uso do
Portal TERRA no link abaixo, observando os itens 3.3, 3.5, 3.6 e 9
http://www.terra.com.br/avisolegal.htm

Permanecemos a disposicao para a investigacao e resolucao dos casos reportados.

Atenciosamente,

Equipe de Segurança Terra - Depto. de Abuse
abuse@terra.com.br
SAN - Servico de Atendimento Nacional
------------------------------------------------------------
Depto. Abuse - www.terra.com.br/centraldoassinante/abuse
------------------------------------------------------------
   
 

 0-4   5-16         
Response Not Possible: You are Not Logged In
 

- Backtalk version 1.3.30 - Copyright 1996-2006, Jan Wolter and Steve Weiss