avgustina spam

Rar se mai intampla zilele astea sa primesc spam care sa treaca de filtrele gmail. Cand se-ntampla, e prilej de sarbatoare. Sa analizam, asadar.

Spamul meu are si poza, precum spammer-ul I, II, III si cel de Oscar.. Citeste-l pe muzica Beastilor, fiindca-s convins ca deja te-ai delectat cu Monty Python.

Header-ele vizibile, cum e de asteptat, nu spun mare lucru. Asa ca ne uitam la ce-i curat si-adevarat:

Delivered-To: <mah gmail>
Received: by 10.229.219.207 with SMTP id hv15cs16888qcb;
        Sat, 21 May 2011 17:41:40 -0700 (PDT)
Received: by 10.224.187.73 with SMTP id cv9mr732806qab.26.1306024900657;
        Sat, 21 May 2011 17:41:40 -0700 (PDT)
Return-Path: <crollastick@hotmail.it>
Received: from mta1144.mail.sk1.yahoo.com (mta1144.mail.sk1.yahoo.com [74.6.140.108])
        by mx.google.com with SMTP id k10si9528172qcu.205.2011.05.21.17.41.39;
        Sat, 21 May 2011 17:41:40 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning crollastick@hotmail.it does not designate 74.6.140.108 as permitted sender) client-ip=74.6.140.108;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning crollastick@hotmail.it does not designate 74.6.140.108 as permitted sender) smtp.mail=crollastick@hotmail.it; dkim=neutral (body hash did not verify) header.i=@yahoo.com
Received: (qmail 37387 invoked by uid 6007); 22 May 2011 00:41:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1306024899; bh=acjJkU56M8XCZky+Q9+Q7M+7+invf0GeEWu3zi3JnUo=; h=X-Yahoo-Forwarded:Return-Path:X-YahooFilteredBulk:Received-SPF:X-YMailISG:X-Originating-IP:Authentication-Results:Received:Received:X-Originating-IP:X-Originating-Email:Message-ID:Return-Path:From:To:Reply-To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:Importance:X-Mailer:X-MimeOLE:X-OriginalArrivalTime; b=RePfkVIWUv8FaWaPZdZTXFLrdStwDusOpU59lZo6TlIWwSNvQcYD77Al2VLRt+EDS2qKcEYuZW1NUoUMJea5vYUJ/5XdR2bTYSv6fTHLnE8lF4Gu5xuYk+17BLRKjmlRUetOFNoultXrgfB32Eq+pbhI34+EWFjkGyKbIjcMe7U=
X-Yahoo-Forwarded: from <mah yahoo> to <mah gmail>
Return-Path: <crollastick@hotmail.it>
X-YahooFilteredBulk: 157.55.0.213
Received-SPF: pass (mta1144.mail.sk1.yahoo.com: domain of crollastick@hotmail.it designates 157.55.0.213 as permitted sender)
X-YMailISG: (..)--
X-Originating-IP: [157.55.0.213]
Authentication-Results: mta1144.mail.sk1.yahoo.com  from=hotmail.it; domainkeys=neutral (no sig);  from=hotmail.it; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO dub0-omc1-s14.dub0.hotmail.com) (157.55.0.213)
  by mta1144.mail.sk1.yahoo.com with SMTP; Sat, 21 May 2011 17:41:39 -0700
Received: from DUB106-DS2 ([157.55.0.237]) by dub0-omc1-s14.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
  Sat, 21 May 2011 17:41:36 -0700
X-Originating-IP: [190.238.251.221]
X-Originating-Email: [crollastick@hotmail.it]
Message-ID: <DUB106-ds2FE426CD9C8983008E800CA730@phx.gbl>
Return-Path: crollastick@hotmail.it
From: Ray Hernandez <crollastick@hotmail.it>
To: <burlhelms@yahoo.com>
Reply-To: avgustina.avgust@aol.com
Subject: So it is pleasant to write to you
Date: Sun, 22 May 2011 04:41:53 +0400
MIME-Version: 1.0
Content-Type: multipart/related;
 type="multipart/alternative";
 boundary="----=_NextPart_000_000B_DE3AB8A3.5B8F6858"
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8064.206
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206
X-OriginalArrivalTime: 22 May 2011 00:41:36.0923 (UTC) FILETIME=[01BBB6B0:01CC1819]

This is a multi-part message in MIME format.

------=_NextPart_000_000B_DE3AB8A3.5B8F6858
Content-Type: text/plain;
 charset="utf-8"
Content-Transfer-Encoding: binary

Ce ne intereseaza aici este de unde a originat spam-ul. Primul X-Originating-IP, 190.238.251.221, este in Peru:

avgustina-spam[3]netnum:     190.238/15
status:      allocated
owner:       Telefonica del Peru S.A.A.
ownerid:     PE-TPSA-LACNIC
responsible: Administrador de Red
address:     Jorge Basadre, 592, 505
address:     L27 - Lima - LI
country:     PE
phone:       +51 1 2109687 []
owner-c:     JOR
tech-c:      JOR
abuse-c:     JOR
created:     20110118
changed:     20110118
nic-hdl:     JOR
person:      System Admin
spam-fake-headerse-mail:     
address:     Jorge Basadre 592, 592, 505
address:     L27 - Lima - LI
country:     PE
phone:       +51 01 2109687 []
created:     20020926
changed:     20030829

Al doilea, 157.55.0.213 apartine de Microsoft si este probabil un nod hotmail. In concluzie, emailul a originat in Peru de la IP-ul mai sus mentionat, de dialup si a fost trimis prin hotmail (collastick@hotmail.it) catre o adresa a mea de Yahoo, de unde a fost forwarded catre adresa de gmail. E ciudat ca nici Yahoo si in special nici Google n-au reusit sa prinda spamul.

Ce zice in traducere avtomaticeskaia Goagal?

Good afternoon!
I am happy you can read my mail now.
My name is Avgustina. I am from a awesome
country that won Eurovision this year.
If you can recall we were chatting once on the site dating
But I don't go to this kind of sites anymore. I saved your
e-mail address.
And I would like to continue our friendship if you
don’t mind.
I hope you are still searching for a partner of your life.
We can try,
can’t we?
BUT I want to state you one thing.
I was chatting with a man in March, he seemed to be interested in me at first.
But then, some days after we met he asked me to show him my naked
images.
Even though we did now know each other well.
I did not show him my photos, 'coz
I don’t want to play this game.
‘Coz I am sure that a girl that appreciates
herself and her culture would never send these pictures
throught the Internet.
As it’s like humiliation.  I was not anymore interested in the
this person. And
never again I wrote him a letter. 2 months passed from that moment.
But I hope you are different. I hope you value females.
And I believe you would never make such an offer to a lady.
I don’t like to write lots of things about myself in the first
letter. But what I intend to say is that I am versatile
and take care of myself. I like sports and I also have lots of hobbies.
Do you have a wife or a partner?
If you do, please disregards this message.
You don’t need to reply me at all. But if you are really searching for
stable relationships and don’t want to play through Internet, I would be very happy to
hold our friendship.
I hope you will like me.
I attach you my photograph and a hige hug from Azerbaijan.
Looking forward to your  reply and your  picture.
Avgustina!!!

Buna ziua!
Sunt fericit puteti citi mail-mi acum.
Numele meu este Avgustina. Sunt dintr-un minunat
tara care a câstigat Eurovision de anul acesta.
Daca va puteti aminti am fost pe chat, o data pe site de dating
Dar eu nu merg la acest tip de site-uri mai. Am salvat
e-mail.
Si as dori sa-si continue prietenia noastra, daca
nu minte.
Sper ca sunteti înca în cautarea unui partener de viata.
Putem încerca,
nu putem?
Dar vreau sa se afirme un singur lucru.
Am fost pe chat cu un barbat in luna martie, el parea sa fieinteresat de mine la început.
Dar apoi, la câteva zile dupa ce ne-am întâlnit mi-a cerut sa-iarate gol meu
imagini.
Chiar daca am sti acum fiecare alte bine.
Nu am arata-i fotografiile mele, "var
Nu vreau sa joace acest joc.
"Coz Sunt sigur ca o fata care apreciaza
ea si cultura ei nu s-ar trimite aceste imagini
gândit Internet.
Cum e ca umilire. Eu nu am fost mai interesat de
aceasta persoana. Si
niciodata nu l-am scris o scrisoare. 2 luni au trecut de la acel moment.
Dar sper ca voi sunt diferite. Sper sa va femele valoare.
Si cred ca niciodata nu ar face o astfel de oferta pentru o doamna.
Nu-mi place sa scrie o multime de lucruri despre mine în primul
scrisoare. Dar ceea ce am de gând sa spun este ca eu suntversatil
si sa aiba grija de mine. Imi place de sport si am, de asemenea, o multime de hobby-uri.
Ai o sotie sau un partener?
Daca nu, va rugam sa nu ia în considerare acest mesaj.
Nu aveti nevoie sa-mi raspunda la toate. Dar daca sunteti într-adevar cautati
relatii stabile si nu doresc sa joace prin Internet, as fi foarte fericitsa
detin prietenia noastra.
Sper ca ma veti dori.
Anexez ai fotografia mea si o îmbratisare hige din Azerbaidjan.
Asteapta cu nerabdare sa raspunsul dumneavoastra si imagineata.
Avgustina!

Now you know. Iubeste-o pe Avgustina daca simti nevoia. Are stima de sine, ti-a salvat emailul si nu-si trimite poze pe Internet. Doar vine dintr-o tara care-a castigat Eurovision.

(Sincer sa fiu, ma-ndoiesc ca Azerbaidjan participa la Eurovision fiindca nu-i taman europeana tara, dar de cand cu Borat nu se mai stie..)

N-am stat sa trimit email la abuse@ fiindca-i pierdere de timp, iar cu datele trecute aici poate face oricine asta. Chiar si tu!

Sources / More info: ch-spam

2 comments:

  1. VladTuesday, 7 June 2011 at 02:29:00 GMT-4

    I have the same letters.
    How to act? What to do?

    ReplyDelete
  2. zamo.caTuesday, 7 June 2011 at 06:34:00 GMT-4

    What you need to do is use email software that offers an adequate protection against spam. Google Mail has some of the best filters in the industry and there are some add-ons even for Outlook.
    You could also send an email-complaint including the full headers to the person in charge of the network where the spam originated - in my case, the address in blue.

    ReplyDelete

Thank you for commenting, but comments entered in this version may not appear.
Felicitări pentru decizia de a comenta! Orice comentariu este bine-venit :).
Din moment ce vezi acest mesaj, accesezi pagina printr-o metoda alternativa si este posibil sa comentezi neobservat(a). Metoda preferabila este prin pagina normala, care contine Disqus; odata inregistrat, acesta iti permite sa comentezi prin reply la email.
Dacă ai intrebări, există răspunsuri - FAQ.
Baftă!