Caramail - rogue network, redirects complaints to /dev/null (but even that they do very incompetently)! caramail.com, caramail.fr, [213.193.13.0 - 213.193.13.255]: Access denied! === My complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Subject: [email] Spam (illegal 419-Nigerian scam, NO LOSS)! [Fwd: BUSINESS PROPOSAL] Date: Fri, 15 Nov 2002 06:35:43 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rmazzeo@PANAMSAT.COM, postmaster@cosmotech.com, postmaster@caramail.com, cs@caramail.fr, abuse@colt.net, abuse@mail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200211150635.43077@2002.dolphinwave.org> Status: R X-Status: N Spam on my e-mail address, used for spam complaints in this year only (abuse@2002... - tagged) and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please terminate the spammer's accounts as soon as possible! Thanks! ======= Hey, Suresh! Another dropbox for you to kill. One wonders, why those scammers still like to abuse the Outblaze services so much - their dropboxes there have one of the shortest "half-life" longevity (thanks to the Outblaze abuse desk). Spammer: [216.139.170.171] Cosmos Technologies IP block [216.139.168.0 - 216.139.170.255]. Mail from: frankjoe@caramail.com Collects replies to: israel9@email.com ---------- Forwarded Message ---------- Received: from mail4.caramail.com (mail4.caramail.com [213.193.13.95]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAEN0UG15055 for ; Fri, 15 Nov 2002 01:00:37 +0200 Received: from caramail.com (www32.caramail.com [213.193.13.42]) by mail4.caramail.com (Postfix) with SMTP id 4316510813; Fri, 15 Nov 2002 00:00:09 +0100 (MET) From: frankjoe joef To: frankjoe@caramail.com Message-ID: <1037314681002781@caramail.com> X-Mailer: Caramail - www.caramail.com X-Originating-IP: [216.139.170.171] Mime-Version: 1.0 Subject: BUSINESS PROPOSAL Date: Thu, 14 Nov 2002 23:58:01 GMT+1 Content-Type: multipart/mixed; boundary="=_NextPart_Caramail_0027811037314681_ID" Status: R X-Status: N FROM: DR.ISRAEL MOMODU. TEL/FAX: 234 1 759 0379. E-MAIL:israel9@email.com BUSINESS PROPOSAL ATTN: PRESIDENT/CEO, My name is ISRAEL MOMODU, a member of the Presidential Task Force on Oil Spillage Clean-up. Early last year there was a major oil spillage in the Niger Delta Region of Nigeria which rendered over 70% of the communities homeless.The contract was handled by a foreign firm but because of the huge monetary profit we envisaged we decided to over-invoice the contract sum. Now the contract has been completed and the original contractor has since been paid,but the contract balance of US$38 million,which resulted from the over invoiced contract sum that has been left in a suspense account with the CENTRAL BANK of NIGERIA,is what me and my partners are planning to take out of the country for ourselves.The problem is as government officials,we are not suppose to own fat bank accounts,talk less of having foreign ones. To this end, we are soliciting your assistance as a foreign partner who can assist us and receive this amount into your account. We are ready to share this money with you on the basis of participation. We also have plans to invest part of this money in any viable business in your country under your care,as we are nearing our retirement age. In any case, I received a reference of you/organization from the Nigeria Chambers of Commerce and Industry ‘Foreign Trade Division’ as a reputable organ that can assist us on this transaction. Please if you accept my proposal do not hesitate to send me a fax on 234 1 759 0379 or send me an e-mail on: israel9@email.com , so that I can provide you with the basic procedures for the release of the fund. It does not matter whether you or your company does contract project of the nature described here, the assumption is that you won a major contract and subcontracted it to another company, more often than not, big trading companies or individuals of unrelated field win major contracts here in Nigeria and subcontracts same to more specialized firms for execution. BENEFIT: For providing the account where we shall remit this money, you will be entitled to 25% of the entire funds, 70% will be for me and my partners,while 5% has been set aside to cover any expenses that may be incurred by both parties during this transaction, both local and international. Please I enjoin you to handle this transaction with utmost degree of maturity and confidentiality because I am still in active government service with the “NIGERIAN NATIONAL PETROLEUM CORPORATION”. If I receive your response on time, this whole transaction could be accomplished within the shortest possible time based on your interest and determination,since the money is already in transit. Please, try to call me up to confirm the receipt of this e-mail.The lines may be busy,but keep trying till you get through. Yours faithfully, ISRAEL MOMODU (MNIM). _________________________________________________________ Gagne une PS2 ! Envoie un SMS avec le code PS au 61166 (0,35 ------------------------------------------------------- === Dev-nulling complaints evidence === Received: from bouncer02.lyceu.net (mailbox-2.caramail.com [213.193.12.52] (may be forged)) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAI3qLg08729 for <###>; Mon, 18 Nov 2002 05:52:23 +0200 Received: from mailbox11.caramail.com (m11.caramail.com [213.193.13.81]) by bouncer02.lyceu.net (Postfix) with ESMTP id 92B7AE5B834 for <###>; Mon, 18 Nov 2002 01:11:06 +0100 (CET) Received: by mailbox11.caramail.com (Postfix) id E72FEB49D2; Sat, 16 Nov 2002 17:42:32 +0100 (MET) Date: Sat, 16 Nov 2002 17:42:32 +0100 (MET) From: MAILER-DAEMON@caramail.com (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: ### MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="A485F2088E.1037464952/mailbox11.caramail.com" Message-Id: <20021116164232.E72FEB49D2@mailbox11.caramail.com> Status: R X-Status: N This is a MIME-encapsulated message. --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Notification Content-Type: text/plain I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. : QUOTA EXCEEDED --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Delivery error report Content-Type: message/delivery-status Reporting-MTA: dns; mailbox11.caramail.com Arrival-Date: Fri, 15 Nov 2002 05:37:08 +0100 (MET) Final-Recipient: rfc822; devnull@caramail.com Action: failed Status: 5.0.0 Diagnostic-Code: X-Postfix; user unknown --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Undelivered Message Content-Type: message/rfc822 Received: from mail.dolphinwave.org (cust-62-219-88-94.cust.bezeqint.net [62.219.88.94]) by mailbox11.caramail.com (Postfix) with ESMTP id A485F2088E for ; Fri, 15 Nov 2002 05:37:04 +0100 (MET) Received: from localhost (localhost [[UNIX: localhost]]) by mail.dolphinwave.org (8.11.6/8.11.6) id gAF4Zh016991; Fri, 15 Nov 2002 06:35:43 +0200 Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.### Organization: Private person Subject: [email] Spam (illegal 419-Nigerian scam, NO LOSS)! [Fwd: BUSINESS PROPOSAL] Date: Fri, 15 Nov 2002 06:35:43 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rmazzeo@PANAMSAT.COM, postmaster@cosmotech.com, postmaster@caramail.com, cs@caramail.fr, abuse@colt.net, abuse@mail.com X-Complaints-To: abuse@dolphinwave.### (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200211150635.43077@2002.dolphinwave.org> Spam on my e-mail address, used for spam complaints in this year only (abuse@2002... - tagged) and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please terminate the spammer's accounts as soon as possible! Thanks! ======= === More spams from the same Caramail spammers, my another complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Subject: [email] Spam (illegal Nigerian-419 scam, NO LOSS!) [Fwd: SAVE A SOUL !] Date: Sun, 24 Nov 2002 06:28:01 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rotimi@cosmotech.com, postmaster@cosmotech.com, rmazzeo@PANAMSAT.COM, postmaster@PANAMSAT.COM, postmaster@caramail.com, hostmaster@imaginet.net, abuse@fr.colt.net, cs@caramail.fr X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200211240628.01975@2002.dolphinwave.org> Status: R X-Status: N Illegal Nigerian-419 scam on my e-mail address, used for spam complaints in this year only, and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer: [216.139.168.252] Cosmos Technologies IP block [216.139.168.0 - 216.139.170.255] which is in the Pan Am Sat IP range [216.139.160.0 - 216.139.191.255]. Abused webmail: caramail.com Mail from: barrister.williams2@caramail.com ---------- Forwarded Message ---------- Received: from mail2.caramail.com (mail2.caramail.com [213.193.13.93]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gANMx8411338 for ; Sun, 24 Nov 2002 00:59:21 +0200 Received: from caramail.com (www24.caramail.com [213.193.13.34]) by mail2.caramail.com (Postfix) with SMTP id 0388510AA0; Sat, 23 Nov 2002 23:58:51 +0100 (MET) From: barrister williams To: barrister.williams2@caramail.com Message-ID: <1038092330005468@caramail.com> X-Mailer: Caramail - www.caramail.com X-Originating-IP: [216.139.168.252] Mime-Version: 1.0 Subject: SAVE A SOUL ! Date: Sat, 23 Nov 2002 23:58:50 GMT+1 Content-Type: multipart/mixed; boundary="=_NextPart_Caramail_0054681038092330_ID" Status: R X-Status: N BARRISTER WILLIAMS DEDE& CO BLOCK 804-LAW HOUSE BUILDING, LEGAL PRACTITIONERS/NOTARY PUBLIC) LAGOS-NIGERIA DEAR FRIEND , IT IS MY PLEASURE TO WRITE YOU THIS LETTER IRRESPECTIVE OF THE FACT THAT YOU DO NOT KNOW ME. HOWEVER, I GOT YOUR NAME THROUGH YOUR COUNTRY BUSSINESS ATTACHEE HERE IN MY SEARCH FOR A RELIABLE AND TRUST WORTHY PERSON THAT CAN HANDLE SUCH A CONFIDENTIAL TRANSACTION OF THIS NATURE. I AM BARRISTER WILLIAMS DEDE, A FAMILY LAWYER TO OUR LATE MILITARY RULER, GENERAL SANI ABACHA WHO DIED SUDDENLY IN POWER ON THE 8TH OF JUNE 1998. SINCE HIS UNTIMELY DEMISE THE FAMILY HAS SUFFERED A LOT OF HARRASSMENT FROM THE REGIME THAT SUCCEEDED HIM.THE REGIME AND THE CIVILIAN. RECENTLY, THE WIFE WAS BANNED FROM TRAVELLING OUTSIDE NIGERIA BEING A FALL OUT FROM THE SEIZURE OF 38 SUIT CASES CONTAINING CASH MONEY (800 eight hundred million USD) FROM HER AT THE MURTALA MOHAMMED INTERNATIONAL AIRPORT ON HER WAY TO SAUDI ARABIA. ALSO HUGE AMOUNT OF MONEY HAS BEEN RECOVERED FROM HER SON WHO IS IN INCARCERATION NOW. THERE ARE STILL LARGE AMOUNT OF MONEY IN HARD CURRENCY SAVED WITH SOME SECURITY COMPANIES AND MRS ABACHA HAS SHOW ME DOCUMENTS OF WHERE THEY DEPOSITED USD 35.5MILLION IN A SECURITY VAULT FOR SAFE KEEPING. HOWEVER, THE FAMILY IS NOW BANKRUP FOLLOWING THE INCARCRATION OF MOHAMMED HER SON WHO WAS CHARGED FOR THE MURDER OF KUDIRAT ABIOLA THE WIFE OF LATE CHIEF MOSHOOD ABIOLA, RECENTLY THE FAMILY APPROACHED ME TO GET A RELIIABLE PERSON WHO WILL CLAIM THE MONEY ON OUR BEHALF IN THE SECURITY COMPANNY. THIS MONEY IS DEPOSITED IN DIPLOATIC BOXES, AS ARTIFACTS AND PERSONAL EFFECTS.IT IS ONLY BOTH OF US THAT KNOW IT CONTAINS CASH MONEY. IF YOUR CONDITIONS ARE ACCEPTABLE, WE WILL PREPARE YOU AS THE BENEFICIARY OF THE BOXES. WE HAVE ALL THE DOCUMENTSWITHS US.THE SECURITY COMPANY HAVE CALLED US TO DO SOMETHING ABOUT CLAIMING THESE BOXES WHICH WE HAVE EXPLAINED TO THEM THAT WE SHALL GET IN TOUCH WITH THEM AS SOON AS POSSIBLES.REMEMBER THAT WE ARE MAKING THIS CONTACT BECAUSE WE CANNOT LEAVE THE COUNTRY UNTILL AFTER THE COURT CASES. NOTE: THERE IS NO RISK INVOLVED BECAUSE I AM ALSO INVOLED AS THE ABACHA’S ATTORNEY. THEREFORE, CONTACT ME ON MY DIRECT EMAIL ADDRESS AS STATED ABOVE. PLEASE, IF YOU ARE NOT INTERESTED JUST DESTROY THIS INFORMATION, AS THIS IS A TOP SECRET.WE SHALL BE PREPARED TO DO MORE BUSINESS WITH YOU AT THE END OF THIS TRANSACTION. I AWAIT YOUR URGENT RESPONSE. BEST REGARDS, BARR.WILLIAMS DEDE. Ph.d _________________________________________________________ Gagne une PS2 ! Envoie un SMS avec le code PS au 61166 (0,35 ------------------------------------------------------- === Colt.fr auto-responce === Received: from request-tracker.fr.colt.net (request-tracker.fr.colt.net [195.68.86.27]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAO4W7421814 for ; Sun, 24 Nov 2002 06:32:09 +0200 Received: (from rt@localhost) by request-tracker.fr.colt.net (8.9.1b+Sun/8.8.8) id FAA16722; Sun, 24 Nov 2002 05:24:34 +0100 (MET) Date: Sun, 24 Nov 2002 05:24:34 +0100 (MET) Message-Id: <200211240424.FAA16722@request-tracker.fr.colt.net> Subject: [Request #484292] (abuse) [email] Spam (illegal Nigerian-419 scam, NO LOSS!) [Fwd: SAVE A SOUL !] Reply-To: Colt Operations Internet From: Colt Operations Internet To: abuse@2002.dolphinwave.org X-Request-ID: 484292 X-RT-Loop-Prevention: Request X-Sender: _rt_system X-Managed-By: Request Tracker 1.0.2 (http://www.fsck.com/projects/rt) Precedence: bulk Status: R X-Status: N Bonjour, Nous contactons actuellement notre client afin qu il resolve au plus vite le probleme. Merci de nous avoir signale le probleme. Cordialement, ------------- Hello, We're contacting our customer to resolve the probleme on his network. Thank you for reporting to us this problem. Regards, ------------------------------------------------------------------------- Illegal Nigerian-419 scam on my e-mail address, used for spam complaints in this year only, and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= === Another Colt responce === Received: from request-tracker.fr.colt.net (request-tracker.fr.colt.net [195.68.86.27]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAP8WBN02331 for ; Mon, 25 Nov 2002 10:33:05 +0200 Received: (from rt@localhost) by request-tracker.fr.colt.net (8.9.1b+Sun/8.8.8) id JAA09627; Mon, 25 Nov 2002 09:24:25 +0100 (MET) Date: Mon, 25 Nov 2002 09:24:25 +0100 (MET) Message-Id: <200211250824.JAA09627@request-tracker.fr.colt.net> Subject: [Request #484292] (abuse) [email] Spam (illegal Nigerian-419 scam, NO LOSS!) [Fwd: SAVE A SOUL !] Reply-To: Jean-Marc Boursat From: Jean-Marc Boursat To: abuse@2002.dolphinwave.org X-Request-ID: 484292 X-RT-Loop-Prevention: Request X-Sender: jboursat X-Managed-By: Request Tracker 1.0.2 (http://www.fsck.com/projects/rt) Precedence: Status: R X-Status: N Hello, Please use the RIPE Database for European IP Address and send yopur complaint to the right abuse mailbox. Regards Security Operations Center % This is the RIPE Whois server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-services/db/copyright.html inetnum: 213.193.13.0 - 213.193.13.255 netname: CARAMAIL-NETBLOCK descr: Caramail descr: For abuse issues contact abuse@caramail.fr ONLY. descr: Netblock contact see route object. country: FR admin-c: CS559-RIPE tech-c: CS559-RIPE status: ASSIGNED PA mnt- by: MULTIMANIA-MNT changed: leland@taranta.discpro.org 20020829 source: RIPE === My responce === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person To: Jean-Marc Boursat Subject: Re: [Request #484292] (abuse) [email] Spam (illegal Nigerian-419 scam, NO LOSS!) [Fwd: SAVE A SOUL !] Date: Tue, 26 Nov 2002 00:57:33 +0200 User-Agent: KMail/1.4.1 References: <200211250824.JAA09627@request-tracker.fr.colt.net> In-Reply-To: <200211250824.JAA09627@request-tracker.fr.colt.net> Cc: abuse@2002.dolphinwave.org X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200211260057.33820@2002.dolphinwave.org> Status: R X-Status: N Dear Colt FR. You are being contacted because of this spam cause your downstream customer, Caramail, automatically deletes any kind of complaints (or any other e-mails, directed to their postmaster), redirecting them to /dev/null (and even that they did incompetently). The proof of my previous spam complaint, sent to them, that they've tried (quite incompetent) to /dev/null, is below. Please, deal with this unacceptable behaviour of your downstream, before it's too late, and their (and your's) IP ranges will be widely blocked by other mail admins. Another reason why you receive complaints, directed to Caramail, is cause your e-mail box is registered as one of the responsible persons for caramail.com abuse on the abuse.net database: $ whois -h whois.abuse.net caramail.com [whois.abuse.net] postmaster@caramail.com (for caramail.com) hostmaster@imaginet.net (for caramail.com) abuse@fr.colt.net (for caramail.com) cs@caramail.fr (for caramail.com) abuse@caramail.fr (for caramail.com) You might need to contact Abuse.net admins to update this info, if it isn't correct anymore. Caramail tried (incompetently) to /dev/null complaints: Received: from bouncer02.lyceu.net (mailbox-2.caramail.com [213.193.12.52] (may be forged)) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAI3qLg08729 for <=ME=>; Mon, 18 Nov 2002 05:52:23 +0200 Received: from mailbox11.caramail.com (m11.caramail.com [213.193.13.81]) by bouncer02.lyceu.net (Postfix) with ESMTP id 92B7AE5B834 for <=ME=>; Mon, 18 Nov 2002 01:11:06 +0100 (CET) Received: by mailbox11.caramail.com (Postfix) id E72FEB49D2; Sat, 16 Nov 2002 17:42:32 +0100 (MET) Date: Sat, 16 Nov 2002 17:42:32 +0100 (MET) From: MAILER-DAEMON@caramail.com (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: =ME= MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="A485F2088E.1037464952/mailbox11.caramail.com" Message-Id: <20021116164232.E72FEB49D2@mailbox11.caramail.com> Status: R X-Status: N This is a MIME-encapsulated message. --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Notification Content-Type: text/plain I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. : QUOTA EXCEEDED --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Delivery error report Content-Type: message/delivery-status Reporting-MTA: dns; mailbox11.caramail.com Arrival-Date: Fri, 15 Nov 2002 05:37:08 +0100 (MET) Final-Recipient: rfc822; devnull@caramail.com Action: failed Status: 5.0.0 Diagnostic-Code: X-Postfix; user unknown --A485F2088E.1037464952/mailbox11.caramail.com Content-Description: Undelivered Message Content-Type: message/rfc822 Received: from mail.dolphinwave.org (cust-62-219-88-94.cust.bezeqint.net [62.219.88.94]) by mailbox11.caramail.com (Postfix) with ESMTP id A485F2088E for ; Fri, 15 Nov 2002 05:37:04 +0100 (MET) Received: from localhost (localhost [[UNIX: localhost]]) by mail.dolphinwave.org (8.11.6/8.11.6) id gAF4Zh016991; Fri, 15 Nov 2002 06:35:43 +0200 Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Subject: [email] Spam (illegal 419-Nigerian scam, NO LOSS)! [Fwd: BUSINESS PROPOSAL] Date: Fri, 15 Nov 2002 06:35:43 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rmazzeo@PANAMSAT.COM, postmaster@cosmotech.com, postmaster@caramail.com, cs@caramail.fr, abuse@colt.net, abuse@mail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200211150635.43077@2002.dolphinwave.org> Spam on my e-mail address, used for spam complaints in this year only (abuse@2002... - tagged) and harvested from the news.admin.net-abuse.sightings Usenet newsgroup! Please terminate the spammer's accounts as soon as possible! Thanks! ======= On Monday 25 November 2002 10:24 am, Jean-Marc Boursat wrote: > Hello, > > Please use the RIPE Database for European IP Address and send yopur > complaint to the right abuse mailbox. > > Regards > Security Operations Center > > % This is the RIPE > Whois server. > % The objects are in RPSL format. > % > % Rights restricted by copyright. > % > See http://www.ripe.net/ripencc/pub-services/db/copyright.html > > inetnum: > 213.193.13.0 - 213.193.13.255 > netname: CARAMAIL-NETBLOCK > descr: Caramail > descr: For > abuse issues contact abuse@caramail.fr ONLY. > descr: Netblock contact see route > object. > country: FR > admin-c: CS559-RIPE > tech-c: CS559-RIPE > status: ASSIGNED PA > mnt- > by: MULTIMANIA-MNT > changed: leland@taranta.discpro.org 20020829 > source: RIPE === The spam still flows from the same abuser, my another complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Subject: [email] Long-time Caramail/cosmotech.com spammer (Nigerian-419 scam, NO LOSS!) [Fwd: Seeking for your Assistance] Date: Sun, 1 Dec 2002 01:04:09 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rotimi@cosmotech.com, webmaster@cosmotech.com, rmazzeo@PANAMSAT.COM, postmaster@cosmotech.com, abuse@secure.net, bsg@PANAMSAT.COM, DOC@PANAMSAT.COM, postmaster@caramail.com, hostmaster@imaginet.net, abuse@fr.colt.net, cs@caramail.fr, abuse@caramail.fr X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200212010104.09147@2002.dolphinwave.org> Status: R X-Status: N Spammer: [216.139.168.252] Cosmos Technologies IP block [216.139.168.0 - 216.139.170.255] which is in the Pan Am Sat IP range [216.139.160.0 - 216.139.191.255]. Mail from: 1432nduka@caramail.com ---------- Forwarded Message ---------- Received: from mail1.caramail.com (mail1.caramail.com [213.193.13.92]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gAUMpmV07180 for <###>; Sun, 1 Dec 2002 00:52:41 +0200 Received: from caramail.com (www14.caramail.com [213.193.13.24]) by mail1.caramail.com (Postfix) with SMTP id 0A8509D82D; Sat, 30 Nov 2002 23:51:04 +0100 (MET) From: Usman Nduka <1432nduka@caramail.com> To: 1432nduka@caramail.com Message-ID: <1038696654023395@caramail.com> X-Mailer: Caramail - www.caramail.com X-Originating-IP: [216.139.168.252] Mime-Version: 1.0 Subject: Seeking for your Assistance Date: Sat, 30 Nov 2002 23:50:54 GMT+1 Content-Type: multipart/mixed; boundary="=_NextPart_Caramail_0233951038696654_ID" Status: R X-Status: N From Mr. Andreas Usman Chief Accountant of the Nigerian National Petroleum Corporation, 34 Wemco Road, Ikoyi, Lagos Nigeria Dear Sis, I am Mr. Andreas Usman, the Chief Accountant of the Nigerian National Petroleum Corporation (NNPC) headquarters in Lagos, Nigeria. I reliably got your contact from Nigeria Chamber of Commerce. I have no reason to doubt your honesty and credibility hence I make this proposal to you. Please, treat with utmost confidence and excuse me for the embarrassment this letter might cause you as we have not met or known each other before. I have the mandate of my colleagues Mr. Williams Okere to solicit for your assistance for a deal we want to execute, My Corporation (NNPC) awarded a contract of US$86,700,000.00 (Eighty - Six Million, Seven Hundred Thousand U.S Dollars) to a Foreign firms to supply Rig & Drilling Equipment for Kaduna Refinery here in Nigeria but because of my position, this contract was over invoiced to US$115,300,000.00 (One Hundred and Fifteen Million, Three Hundred Thousand United State Dollars). The original contract sum has been paid to the contractors that executed the project, now we are left with the over- invoice sum of US$28,600,000.00 (Twenty Eight Million, Six Hundred Thousand U.S. Dollars Only). All arrangements have been concluded on how this money would be moved. Our constraints lie on the fact that we required a foreign firm or individual account number where the money will be paid into; whose owner will be portrayed as a contract beneficiary of fund. Infact this is why I am writing you this letter. NOTE: - There is no risk involved as we have taken care, loopholes covered. As a civil servant, we are aware that some financial assistance would be required to conclude this job, we are prepared to give as much as 30% of the total sum to for your involvement, while 60% of the total sum will go for me and my colleagues. To this effect, 10% would be earmarked to cover all the expenses (Local and International). This is because the process would pass through some Directors in the Ministry of Finance and Central Bank of Nigeria (CBN). These officials might require some tips to facilitate payment without delay since they are not aware of the deal. Please, should you be willing to assist, we shall require the following information to enable us put claim immediately. Your bank name, Address and Account Number, Fax number of the Bank where the money will be transferred. But should you not be in a position to assist, this deal has to remain a secret till the end of time. It is important I mention that the officials involved in this transaction are top Government Functionaries who have put in years of service to this Country. For the maintenance of personal integrity and prestige of all persons involved in this transaction, you are implored to exhibit utmost secrecy throughout the duration of the transaction. You are strongly advice to avoid discussing this transaction with a third party as that could jeopardize the entire transaction. You may open a separate bank account in any Country for this purpose if you wish. All arrangements of this transfer for this quarter payment for the year, 2002 have been properly organized and further action awaits your immediate response. Hurry and send to me the Account Number where the money will be transferred into, so that we can start to process for the approval of this payment. I look forward to hearing from you. Best Regards, Mr. Andreas Usman. _________________________________________________________ Gagne une PS2 ! Envoie un SMS avec le code PS au 61166 (0,35 ------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === And another one === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2002.dolphinwave.org Organization: Private person Subject: [email] Long-time persistent caramail.com Nigerian-419 scammer (NO LOSS)! [Fwd: GOOD DAY] Date: Tue, 3 Dec 2002 06:36:56 +0200 User-Agent: KMail/1.4.1 To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - South Africa" , "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, rmazzeo@PANAMSAT.COM, bsg@PANAMSAT.COM, DOC@PANAMSAT.COM, postmaster@caramail.com, hostmaster@imaginet.net, abuse@fr.colt.net, cs@caramail.fr, abuse@caramail.fr X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200212030636.56702@2002.dolphinwave.org> Status: R X-Status: N Spammer: [216.139.164.139] Telemobile Nigeria IP block [216.139.164.136 - 216.139.164.143] which is in the Pan Am Sat IP range [216.139.160.0 - 216.139.191.255]. Mail from: nkem.oge@caramail.com ---------- Forwarded Message ---------- Received: from mail1.caramail.com (mail1.caramail.com [213.193.13.92]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id gB33U7V04032 for ; Tue, 3 Dec 2002 05:30:09 +0200 Received: from caramail.com (www15.caramail.com [213.193.13.25]) by mail1.caramail.com (Postfix) with SMTP id 92158A5F03; Tue, 3 Dec 2002 04:30:01 +0100 (MET) From: nkem oge To: nkem.oge@caramail.com Message-ID: <1038885993008921@caramail.com> X-Mailer: Caramail - www.caramail.com X-Originating-IP: [216.139.164.139] Mime-Version: 1.0 Subject: GOOD DAY Date: Tue, 03 Dec 2002 04:26:33 GMT+1 Content-Type: multipart/mixed; boundary="=_NextPart_Caramail_0089211038885993_ID" Status: R X-Status: N ENITH BANK PLC, LAGOS FROM: DR. NKEM OGE(MANAGER) URGENT BUSINESS PROPOSAL ATTN:MANAGING DIRECTOR /CEO. First I must solicit your confidence in this transaction, this is by virtue of its nature as being utterly confidential and top secret. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that will be well at the end of the day. We have decided to contact you due to the urgency of this transaction, as we have been reliably informed of your discreetness and ability in transaction of this nature. Let me start by introducing myself properly to you. I am Dr.Nkem Oge the manager with the Zenith Bank Plc, Lagos. I came to know you in my Private Search for a Reliable and Reputable Person to handle this Confidential Transaction, which involves the transfer of Huge sum of Money to a Foreign Account requiring Maximum Confidence. THE PROPOSITION: A Foreigner an Australia, Late Engr. Steve Moore (Snr.) an Oil Merchant with the Federal Government of Nigeria, until his death years ago in Kenya Air Bus (A310- 300) Flight KQ431, Banked with us at Zenith Bank Plc, Lagos and had a closing balance as at the end of September, 2000 worth US$35,500,000.00 (thirty five Million five hundred thousand United State Dollars), The bank now expects a next of kin as beneficiary. Valuable efforts are being made by the Zenith Bank Plc to get in touch with any of the Moore's family or relatives but to no success. It is because of the perceived possibility of not being able to locate any of Late Engr. Steve Moore (Snr.)' s next kin (He had no wife or children that is know to us). The Management under the influence of our Chairman and Members of the Board of Directors, that arrange has been made for the fund to be declared "Unclaimed" and subsequently be donated to the trust fund for arms and ammunition to further enhance the course of War in Africa and the World in General. In order to avert this negative development some of my trusted colleagues and I now seek your permission to have you stand as next of kin to Late Engr. Steve Moore (Snr.) so that the fund US$35.5 Million will be released and paid into your account as the beneficiary's next of kin. All documents and proves to enable you get his fund will be carefully worked out. We have secure from the probate an order of madamus to locate any of deceased beneficiaries, and more so we are assuring you that this business is 100% Risk Free involvement. Your share stays while the rest be for myself and my colleagues for investment purpose. According to agreement within both parties. As soon as we receive an acknowledgement of receipt of this message in acceptance of our mutual busines proposal, we would furnish you with the necessry modalities and disbursement ratio to suite both parties with out any conflict. While replying furnish me with your private fax and phone numbers for easy communication. If this proposal is acceptable by you, do not make undue advantage of the trust we have bestowed in you. Best regards, Dr. Nkem Oge _________________________________________________________ Gagnes une PS2 ! Envoies un SMS avec le code PS au 61166 (0,34 ------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === And the same caramail illegal spammer still tries to spam me (GMT+0200) === Dec 7 07:36:37 orca sendmail[7190]: gB75aaw07190: ruleset=check_rcpt, arg1=<200211250420.gap4j2429714@dolphin.ath.cx>, relay=mail2.caramail.com [213.193.13.93], reject=550 5.0.0 <200211250420.gap4j2429714@dolphin.ath.cx>... Access denied - devnulling and ignoring multiple complaints - http://www.DolphinWave.org/spam/caramail.txt Dec 7 07:36:40 orca sendmail[7190]: gB75aaw07190: from=, size=4125, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mail2.caramail.com [213.193.13.93] Dec 7 07:36:37 orca sendmail[7191]: gB75aaw07191: ruleset=check_rcpt, arg1=, relay=mail2.caramail.com [213.193.13.93], reject=550 5.0.0 ... Access denied - devnulling and ignoring multiple complaints - http://www.DolphinWave.org/spam/caramail.txt Dec 7 07:36:38 orca sendmail[7191]: gB75aaw07191: from=, size=4125, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mail2.caramail.com [213.193.13.93] === And they are still /dev/nulling === Path: uni-berlin.de!fu-berlin.de!newsfeed.mathworks.com!wn13feed!wn14feed !worldnet.att.net!204.127.198.203!attbi_feed3!attbi.com !rwcrnsc51.ops.asp.att.net.POSTED!not-for-mail Message-ID: <3DF2B894.F6269D64@attbi.com> From: Brian Bay Organization: The email brought to you by the letters O and S and the number 2 X-Mailer: Mozilla 4.79 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: news.admin.net-abuse.email,news.admin.net-abus.sightings Subject: [email] caramail abuse complaints Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 49 NNTP-Posting-Host: 65.96.166.91 X-Complaints-To: abuse@attbi.com X-Trace: rwcrnsc51.ops.asp.att.net 1039317164 65.96.166.91 (Sun, 08 Dec 2002 03:12:44 GMT) NNTP-Posting-Date: Sun, 08 Dec 2002 03:12:44 GMT Date: Sun, 08 Dec 2002 03:12:44 GMT Xref: uni-berlin.de news.admin.net-abuse.email:1874327 Return-Path: <> Received: from mailbox15.caramail.com ([213.193.13.85]) by rwcrgwc55.attbi.com (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP id <20021208030724.LGAE5929.rwcrgwc55.attbi.com@mailbox15.caramail.com> for ; Sun, 8 Dec 2002 03:07:24 +0000 Received: by mailbox15.caramail.com (Postfix) id D55DDB3C7; Sun, 8 Dec 2002 04:02:15 +0100 (MET) Date: Sun, 8 Dec 2002 04:02:15 +0100 (MET) From: MAILER-DAEMON@caramail.com (Mail Delivery System) Subject: Undelivered Mail Returned to Sender To: brianabay@attbi.com MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="BEAC6B6D9.1039316535/mailbox15.caramail.com" Message-ID: <20021208030215.D55DDB3C7@mailbox15.caramail.com> X-Mozilla-Status: 0000 X-Mozilla-Status2: 00000000 X-UIDL: <20021208030215.D55DDB3C7@mailbox15.caramail.com> I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. : QUOTA EXCEEDED === And the same "419-Nigerian" spammers still trying to spam me (GMT+0200) === Dec 16 06:45:22 orca sendmail[29707]: gBG4jLd29707: ruleset=check_rcpt, arg1=, relay=[217.78.73.160], reject=550 5.0.0 ... Access denied - devnulling and ignoring multiple complaints - http://www.DolphinWave.org/spam/caramail.txt Dec 16 06:45:23 orca sendmail[29707]: gBG4jLd29707: lost input channel from [217.78.73.160] to MTA after rcpt -- Dec 19 19:33:33 orca sendmail[15975]: gBJHXWd15975: ruleset=check_rcpt, arg1=, relay=mail3.caramail.com [213.193.13.94], reject=550 5.0.0 ... Access denied - devnulling and ignoring multiple complaints - http://www.DolphinWave.org/spam/caramail.txt Dec 19 19:33:34 orca sendmail[15975]: gBJHXWd15975: from=, size=4258, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mail3.caramail.com [213.193.13.94] === Other people also report the same "dev/null" problems, and the same === === "419-Nigerian" spammers on Caramail === Path: uni-berlin.de!fu-berlin.de!newsfeed.news2me.com !newsfeed-west.nntpserver.com!hub1.meganetnews.com!nntpserver.com !news-west.rr.com!cyclone.austin.rr.com!twister.austin.rr.com.POSTED!53ab2750 !not-for-mail From: despam@houston.despamrr.com (Steve M -remove despam before rr for reply-) Newsgroups: news.admin.net-abuse.email Subject: Question about caramail.com Message-ID: <3e02b8de.75564165@localhost> Cancel-Lock: sha1:MMaySxNjkVPvrqFKmEjE4DOVYUU= X-Newsreader: Forte Free Agent 1.21/32.243 X-NFilter: 1.2.0 Lines: 18 Date: Fri, 20 Dec 2002 06:32:05 GMT NNTP-Posting-Host: 67.10.69.116 X-Complaints-To: abuse@rr.com X-Trace: twister.austin.rr.com 1040365925 67.10.69.116 (Fri, 20 Dec 2002 00:32:05 CST) NNTP-Posting-Date: Fri, 20 Dec 2002 00:32:05 CST Organization: Road Runner - Texas Xref: uni-berlin.de news.admin.net-abuse.email:1884017 Early this evening, I sent a LART for a variation on Nigerian 419 scam/spam, this time from South Africa. It requested a response to: jmaroga2@caramail.com So, like abuse.net says, I notified postmaster@caramail.com A few minutes ago I got this answer: I'm sorry to have to inform you that the message returned below could not be delivered to one or more destinations. : QUOTA EXCEEDED Does it mean that caramail.com's system is broken, that they're plain spam supporters, or what? Steven