For years I’ve been tracking spam from Argentina that is using yopmail.com \/ yopmail.net disposable sender addresses. <\/p>\n
Unlike a lot of spam sent from other countries, the advertised companies are mostly legitimate businesses, some of whom may be clueless that mail is being sent to unwilling recipients all over the globe who may not even speak Spanish.<\/p>\n
The sender IPs tend to be on cablevision.com.ar, for example from the 190.188.0.0\/15, 190.190.0.0\/15 and 181.164.0.0\/14 ranges.<\/p>\n
The spamming company owns several domains, but these don’t normally show up in sender addresses or links, e.g.:<\/p>\n
mktnegocios.net:<\/p>\n
Domain name: mktnegocios.net
\nRegistry Domain ID: 186887
\nRegistrar WHOIS Server: whois.dattatec.com
\nRegistrar URL: http:\/\/dattatec.com
\nUpdated Date: 2017-09-20T01:00:53Z
\nCreation Date: 2011-09-19T11:24:51Z
\nRegistrar Registration Expiration Date: 2018-09-19
\nRegistrar: dattatec.com SRL
\nRegistrar IANA ID: 1388
\nRegistrar Abuse Contact Email: abuse@dattatec.com
\nRegistrar Abuse Contact Phone: +54.3415169000
\nDomain Status: OK
\nRegistry Registrant ID: DC282919DTT
\nRegistrant Name: Cid Ricardo Ernesto
\nRegistrant Organization: Cid Ricardo Ernesto
\nRegistrant Street: Islandia 4393
\nRegistrant City: Lanus Oeste
\nRegistrant State\/Province: Buenos Aires
\nRegistrant Postal Code: 1824
\nRegistrant Country: ar
\nRegistrant Phone: +54.42679611
\nRegistrant Phone Ext:
\nRegistrant Fax:
\nRegistrant Fax Ext:
\nRegistrant Email: ricardocid@hotmail.com<\/code><\/p><\/blockquote>\nmktnegocios.info:<\/p>\n
Domain Name: MKTNEGOCIOS.INFO
\nRegistry Domain ID: D42311407-LRMS
\nRegistrar WHOIS Server:
\nRegistrar URL: http:\/\/dattatec.com
\nUpdated Date: 2017-09-19T22:22:35Z
\nCreation Date: 2011-09-19T11:25:09Z
\nRegistry Expiry Date: 2018-09-19T11:25:09Z
\nRegistrar Registration Expiration Date:
\nRegistrar: Dattatec.com SRL
\nRegistrar IANA ID: 1388
\nRegistrar Abuse Contact Email:
\nRegistrar Abuse Contact Phone:
\nReseller:
\nDomain Status: ok https:\/\/icann.org\/epp#ok
\nDomain Status: autoRenewPeriod https:\/\/icann.org\/epp#autoRenewPeriod
\nRegistry Registrant ID: C114356985-LRMS
\nRegistrant Name: Cid Ricardo Ernesto
\nRegistrant Organization: Cid Ricardo Ernesto
\nRegistrant Street: Islandia 4393
\nRegistrant City: Lanus Oeste
\nRegistrant State\/Province: Buenos Aires
\nRegistrant Postal Code: 1824
\nRegistrant Country: AR
\nRegistrant Phone: +000.42679611
\nRegistrant Phone Ext:
\nRegistrant Fax:
\nRegistrant Fax Ext:
\nRegistrant Email: ricardocid@hotmail.com
\nRegistry Admin ID: C114356985-LRMS
\nAdmin Name: Cid Ricardo Ernesto
\nAdmin Organization: Cid Ricardo Ernesto
\nAdmin Street: Islandia 4393
\nAdmin City: Lanus Oeste
\nAdmin State\/Province: Buenos Aires
\nAdmin Postal Code: 1824
\nAdmin Country: AR
\nAdmin Phone: +000.42679611
\nAdmin Phone Ext:
\nAdmin Fax:
\nAdmin Fax Ext:
\nAdmin Email: ricardocid@hotmail.com
\nRegistry Tech ID: C114356985-LRMS
\nTech Name: Cid Ricardo Ernesto
\nTech Organization: Cid Ricardo Ernesto
\nTech Street: Islandia 4393
\nTech City: Lanus Oeste
\nTech State\/Province: Buenos Aires
\nTech Postal Code: 1824
\nTech Country: AR
\nTech Phone: +000.42679611
\nTech Phone Ext:
\nTech Fax:
\nTech Fax Ext:
\nTech Email: ricardocid@hotmail.com
\nRegistry Billing ID: C114356985-LRMS
\nBilling Name: Cid Ricardo Ernesto
\nBilling Organization: Cid Ricardo Ernesto
\nBilling Street: Islandia 4393
\nBilling City: Lanus Oeste
\nBilling State\/Province: Buenos Aires
\nBilling Postal Code: 1824
\nBilling Country: AR
\nBilling Phone: +000.42679611
\nBilling Phone Ext:
\nBilling Fax:
\nBilling Fax Ext:
\nBilling Email: ricardocid@hotmail.com
\nName Server: NS21.DATTATEC.COM
\nName Server: NS22.DATTATEC.COM
\nName Server: NS3.HOSTMAR.COM
\nName Server: NS4.HOSTMAR.COM
\nDNSSEC: unsigned
\nURL of the ICANN Whois Inaccuracy Complaint Form: https:\/\/www.icann.org\/wicf\/<\/code><\/p><\/blockquote>\nmktnegocios.com.ar:<\/p>\n
Datos del dominio
\nNombre y Apellido: DALLAVIA FERNANDO LUCIANO VICTOR LUCIANO VIVTOR
\nCUIT\/CUIL\/ID: 20220483895
\nFecha de Alta: 23\/01\/2017
\nFecha de \u00faltima Actualizaci\u00f3n: 24\/01\/2017
\nFecha de vencimiento: 23\/01\/2018<\/code><\/p><\/blockquote>\nOn their website<\/a> they explain to their prospective customers that they will spam to harvested addresses:<\/p>\n
BASE DE DATOS :\t<\/p>\n
Contamos con bases de datos argentinas y del exterior validadas la totalidad de las mismas cada 15 dias, asegurandonos asi la completa funcionalidad y validez de los emails. Los datos se obtienen a traves de extracciones de emails por medio de software en la web. <\/p><\/blockquote>\n
Translation:<\/p>\n
Databases<\/p>\n
We have Argentine and foreign databases completely validated every 15 days, thus ensuring the full functionality and validity of emails. The data is obtained through extraction of emails through software on the web.<\/b> <\/p><\/blockquote>\n
Owners of harvested addresses have by definition not signed up to receive bulk mail. Their various mailing package go as high as 16,000,000 emails…<\/p>\n
See also:<\/p>\n
\n
- Spam Gang Argentina<\/a><\/li>\n
- Spam Gang Argentina<\/a> (Blogspot)<\/li>\n<\/ul>\n
If you’re a business in Argentina trying to decide on online advertising, hiring a spammer like this will damage your reputation and may end up getting your domains blacklisted.<\/p>\n","protected":false},"excerpt":{"rendered":"
For years I’ve been tracking spam from Argentina that is using yopmail.com \/ yopmail.net disposable sender addresses. Unlike a lot of spam sent from other countries, the advertised companies are mostly legitimate businesses, some of whom may be clueless that … Continue reading