Slashdot Mirror


Confession For Two: A Spammer Spills it All

defender writes "Rejo Zenger, well known Dutch anti-spam activist, recently had a very frank talk with a (now retired) spammer. He got information as to how and why S. Pammer started, where and why he was kicked out, who helped him get his bulletproof hosting, his open proxy mailings etc. It gives a nice and concise view of what the costs for a smalltime spammer are. About 200 Euros for the hosting and ability to spam at least half a million addresses (in a months time). That's for a turnover of 6 times and a net profit of well over twice those initial spam-related costs. Complete with screenshots, of course."

15 of 389 comments (clear)

  1. Re:So for a month's worth of work... by radish · · Score: 4, Informative

    Actually, 523 euro is more like US$650, so it's even worse. For me, it's approaching "won't get out of bed" levels. Which is handy, seeing as you can spam from anywhere in the house :)

    I really can't see why anyone would bother...

    --

    ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

  2. Re:So for a month's worth of work... by tekiegreg · · Score: 2, Informative

    Well let me re-phrase to clarify, thanks for the nit tho

    $8/hr * 40hrs/week * 4weeks/month = $1280. Happy now :-p

    --
    ...in bed
  3. send-safe.com whois entry by simdan · · Score: 2, Informative

    domain: SEND-SAFE.COM
    owner-address: Ibragimov Ruslan
    owner-address: 12 Krasnokazarmennaya
    owner-address: 111250
    owner-address: Moscow
    owner-address: Russia
    owner-phone: +7.957235641
    owner-e-mail: b35ed568876bf16d66d15c298b2159a8-564687@owner.gand i.net
    admin-c: IR14-GANDI
    tech-c: IR14-GANDI
    bill-c: IR14-GANDI
    nserver: dns.send-safe.com 217.107.162.252
    nserver: dns2.send-safe.com 217.107.162.200
    reg_created: 2001-11-14 04:31:54
    expires: 2005-11-14 04:31:54
    created: 2001-11-14 10:31:55
    changed: 2004-04-27 11:56:07

    person: Ibragimov Ruslan
    nic-hdl: IR14-GANDI
    address: 12 Krasnokazarmennaya
    address: 111250
    address: Moscow
    address: Russia
    phone: +7.0953632111
    e-mail: 184925540b0f833661410d380e699d0c-ir14@contact.gand i.net
    lastupdated: 2004-03-16 20:30:07

  4. Honey Pot Hunter?!?!? by EggMan2000 · · Score: 3, Informative

    Did the Honey Pot Hunter link on the screenshot get anyone else's attention?

    screenshot

    It seems to me that there is some level of sophisitication to these spammer sites. I'm guessing they are really ripping off the poor shmucks who sign up.

    --
    what? what I thought we were in the trust tree in the nest, were we not?
  5. send-safe.com email addresses and custumer support by simdan · · Score: 3, Informative

    support@send-safe.com
    techsupport@send-safe.com
    good@send-safe.com
    orders@send-safe.com
    For pre-sale only questions please call 813-747-9677.

    heh heh heh, not for "pre-sale only" anymore.

  6. Re:The real money... by torinth · · Score: 2, Informative

    The value of a mailing list corresponds to it's accuracy as well as any supplementary information it contains (interests, habits, geography, etc.).

    When you say actual reachability is a moot point you're completely wrong. Actual reachability is a very important point.

    If a spammer knows that an address is good, that the person on the receiving end reads the messages, and that they're generally interested in the kind of product being pitched, they'll pay a lot more.

    If a spammer doesn't know anything about an address, or suspects it's just a generated address, they'll pay a lot less. At least if they're reasonably savvy marketers.

  7. Re:Is the spammer really selling 'Spam'? by Cerv · · Score: 2, Informative

    "Due to my promise to S. Pammer that I would not disclose his name in this report, some facts have been anonymised. S. Pammer is of course not his real name, nor does he sell canned meat. Besides, his identity isn't relevant (there are more small spammers who operate in this manner): the real meat is in the numbers and methods involved. And the numbers and methods are truthfully reported."

    Do you only read alternate paragraphs as a time saving measure?

    --
    sig
  8. Re:Is the spammer really selling 'Spam'? by beeplet · · Score: 2, Informative

    It's just a silly way of changing any identifying details... From the 3rd paragraph: "S. Pammer is of course not his real name, nor does he sell canned meat."

  9. Re:Green Economics and the Net by UnrepentantHarlequin · · Score: 3, Informative

    For residential users, who do not pay a per-GB bandwidth transfer fee, spam costs nothing more than time just like telemarketers.

    Where does that residential user's ISP get the money to buy the hardware and bandwidth to handle all that spam? The 4 out of 5 emails that their customers would do anything to avoid? Someone has to pay for it. Two words: end users. Just because you don't pay per GB for bandwidth doesn't mean you're not paying for it. It all gets worked into the monthly bill.

  10. Actually, read Ukraine, esp. Chernobyl by MickLinux · · Score: 3, Informative

    When he says that the meat comes from the former Soviet Union, the cheapest food I know of [having lived in Lithuania], seems to come from Belarus or Ukraine, especially from the region around Chernobyl.

    Now, if you buy (for example) those add-water-and-heat noodles from the Ukraine, you're going to get a good bit of Cesium(Cs-137?) in it, because -- and this is according to Lithuanian natives, who probably got it in their news -- the Ukrainian government has limits on the amount of Cs that can be in it, but accepts companies taking contaminated grain and mixing it down with uncontaminated grain, to meet the required levels.

    Point being, I probably wouldn't suggest that this meat is good to eat, any more than I'd eat lamb from the Scottish moors (sorry, same problem: Chernobyl's Cs-137. It seems that the plants have been recycling the Cs back to the top.)

    --
    Correct Horse Battery Staple: 72 bits of entropy. Enter "Correct H" into google. When it generates the phrase, that's
  11. Re:Fscking God! by ktakki · · Score: 5, Informative
    Would somebody PLEASE just kill those fuckers?

    Okay, who owns send-safe.com?
    domain: SEND-SAFE.COM
    owner-address: Ibragimov Ruslan
    owner-address: 12 Krasnokazarmennaya
    owner-address: 111250
    owner-address: Moscow
    owner-address: Russia
    owner-phone: +7.957235641
    owner-e-mail: b35ed568876bf16d66d15c298b2159a8-564687@owner.gan di.net
    admin-c: IR14-GANDI
    tech-c: IR14-GANDI
    bill-c: IR14-GANDI
    nserver: dns.send-safe.com 217.107.162.252
    nserver: dns2.send-safe.com 217.107.162.200
    reg_created: 2001-11-14 04:31:54
    expires: 2005-11-14 04:31:54
    created: 2001-11-14 10:31:55
    changed: 2004-04-27 11:56:07
    Gah! The Russian Mob! Well, I'm all for killing spammers, but in SOVIET RUSSIA spammer kills YOU!

    Okay, who owns that netblock?
    $ whois 207.107.162.252
    Sprint Canada Inc. NETBLK-SPRINTCAN-BLK3
    (NET-207-107-0-0-1) 207.107.0.0 - 207.107.255.255
    Western Inventory Service NET-WESTERNIN-107-163 (NET-207-107-162-0-1)
    207.107.162.0 - 207.107.163.255
    Canadians! Back-bacon eating, toque-wearing, Stanley-Cup-losing Canadians. I'd rather take on 25,000,000 Canadians any day than mess with the Russkie Mafia.

    Now, who hosts www.send-safe.com?
    $ whois 65.210.168.34
    UUNET Technologies, Inc. UUNET65
    (NET-65-192-0-0-1)
    65.192.0.0 - 65.223.255.255
    MTI SOFTWARE UU-65-210-168-32-D9
    (NET-65-210-168-32-1)
    65.210 .168.32 - 65.210.168.39
    Hmmm...I knew UUNET would pop up somewhere. There are a couple of MTI Software results on Google; one sells support and service for OpenVMS systems, the other sells bulk e-mail software. I think it's the latter...
    Registrant:
    MTI Software
    4577 Gunn Highway #161
    Tampa, FL 33624
    US

    Domain name: EMAILEMAILEMAIL.COM

    Administrative Contact:
    Bentley, Nick nick@mtisoftware.com
    4577 Gunn Highway #161
    Tampa, FL 33624
    US
    813-968-1531
    Technical Contact:
    Li, Jonathan jonathan@123cheapdomains.com
    920 Cranbrook Court, Suite #7
    Davis, Ca 95616
    US
    1-415-682-3859
    Florida. It figures. First in spam, first in hanging chads, first in the hearts of the nation.

    So, to sum up, we have an Axis of Evil: Russians, Canadians, and Floridians, all conspiring to deploy Weapons of Mass E-mail Destruction. Gimme a couple of days to throw together a Powerpoint presentation for the UN Security Council and maybe we can get a posse...err, a coalition together.

    k.
    --
    "In spite of everything, I still believe that people are really good at heart." - Anne Frank
  12. Re:Green Economics and the Net by UnrepentantHarlequin · · Score: 4, Informative

    First-class mail rates significantly subsidize the cost of bulk mail.

    Nope, it's the other way around. Bulk snail costs the postal service very little to process. It's delivered to the sending post office sorted by zip code and pre-coded; basically, all the system has to do is truck it where it's going and put it in the right bag. Your last birthday card, on the other hand, had to be picked up from the snailbox by a carrier, its address deciphered, bar-coded, sorted by destination, etc. For doing all of that, basically everything but the hauling and final delivery, they get a discount of a whopping six cents -- 30.9 cents instead of 37 cents. Bulk mail supports first class, not the other way around.

  13. Re:Green Economics and the Net by stilwebm · · Score: 2, Informative

    Oh, but you do. First-class mail rates significantly subsidize the cost of bulk mail. The USPS knows better than to antagonize some of its largest customers. Ditto for the good folk at the RBOCs.

    Actually, that is incorrect. First class is low volume and collected in many places. Bulk mailings are high volume and usually collected at either one location or several locations regionally (like national periodicals). Bulk mailings for the USPS must meet strict guidelines. The more guidelines a mailing meets, the cheaper it is per item. With magazines, for example, if the cover is approved by the USPS, it is cheaper than an unapproved periodical cover because it is easier for machines and letter carriers to read the address. Bulk mailings are cheaper because their collection is streamlined, they are sorted for further discounts, and they have lower priority than first class.

  14. Re:Fscking God! by wkjel · · Score: 2, Informative

    You miss-typed one whois address. It's not the Canadians, its the Russians.

    whois 217.107.162.252
    % This is the RIPE Whois server.
    % The objects are in RPSL format.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/ripencc/pub-services/db/copyri ght.html

    inetnum: 217.107.162.0 - 217.107.162.255
    netname: OGBUS-NETWORK
    descr: Oil and Gas Business
    country: RU
    admin-c: MA2574-RIPE
    tech-c: MA2574-RIPE
    status: ASSIGNED PA
    notify: avd@ogbus.com
    notify: registry@rt.ru
    mnt-by: AS8342-MNT
    changed: rus@rt.ru 20020121
    changed: luda@rt.ru 20031010
    changed: luda@rt.ru 20031016
    source: RIPE

    route: 217.106.0.0/15
    descr: RTCOMM-RU
    origin: AS8342
    notify: ncc@rtcomm.ru
    mnt-by: AS8342-MNT
    changed: rus@rt.ru 20001221
    changed: rus@rt.ru 20031105
    source: RIPE

    person: Maksim Alexandrov
    address: M-STUDIO_CANAL_5-NETWORK
    address: Multimedia Studio
    address: 29a, Sofia-Perovskja str,
    address: 450000, Ufa, Russia
    address: Russia
    phone: +7 3472 519556
    e-mail: noc@intragroup.net
    nic-hdl: MA2574-RIPE
    changed: luda@rt.ru 20031010
    source: RIPE
  15. Re:Don't bother reading the article... by leomekenkamp · · Score: 2, Informative

    For those using bash, that would probably be something like:

    while true ; do `wget -k -p -m http://www.send-safe.com/ --delete-after` ; done

    --
    Wenn ist das Nunstueck git und Slotermeyer? Ja! Beiherhund das Oder die Flipperwaldt gersput.