Re: [WG-Spam] Re: Again a spammer

Hello Barry,

At 04:04 08.03.2003 +0000, you wrote:
-------------------------
>Stefan,
>
>If you forward (not cut/paste) all of the spams to me (not the list), I
>am > 90% sure I can give you solid information on the origin of them.

I am not so much interested to know where it comes from - since this does
not help much. The owner of that domain is easily found in whois for
duongquanganh.com:

Quang Anh, Duong duongquanganh@hehe.com
32 Hang Be
Ha noi, 773300
Vietnam
0913519971

I am mainly interested in knowing where they get the eMail addresses from.
I am using since many years only redirected addresses, e.g. my mail address
above, not the eMail address of my POP3 box with my ISP. Yet, most of the
Vietnamese spam mail comes directly to my POP3 box. Means: Either they use
an address list, which is very old, or they get the addresses directly from
the ISP ....

BTW: the implementation was that stupid (e.g. several "test mails" to the
whole list), that I suspect, that the guy did not download the mailing SW
by himself, but got it from somebody. Now, the sender says
"webmaster@vol.vnn.vn". If the guy would really know how to configure the
SW, he would never put in that address. Means: I suspect, that he got at
least the SW (if not the whole eMail list) from somebody in "vol.vnn.vn"
(which is VASC, a Vietnamese company, closely affiliated with my ISP).

We tried another time to ask the owner of a company which was sending spam
around, and he said, that "a friend of him" was doing all this eMail stuff.
He would however not name that "friend". In order to stop this via the
police would cost some money. The easier way to do it, is to find the
"culprit(s)" by ourselves, and to take action ...

Stefan