ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Abdul Sattar

Evidence Menu:

Abdul Sattar Index


Country: Pakistan
State:
Spammer-for-hire that uses throwaway domains in the .TK and .CF TLDs to send email for customers from many parts of the world, and domains in .COM or .BIZ TLDs to host spammed material. At least one ROKSO-listed spammer, MK Ärilahendused OÜ, has used his services.


Abdul Sattar SBL Listings History
Current SBL Listings
Archived SBL Listings

Spam Evidence


The spam evidence archived here includes spam that applies to the following incidents:

* April 2015 responseplateform.cf SBL254452 (live)
* April 2015 aktunamilonaoujl.cf SBL254451 (live)
* April 2015 umedbharae.cf SBL254449/SBL254450 (live)
* April 2015 umedbharae.cf SBL254446 (live)
* April 2015 caspenan.info SBL253666 (live)
* April 2015 chalpaglidewana.tk SBL252908/SBL252912 (ISP terminated)
* April 2015 3nikoliatk.tk SBL252905 (ISP terminated)
* April 2015 romanticthe.com SBL252432 (ISP terminated)


===== BEGIN April 2015 responseplateform.cf SBL254452 =====

Received: from srv.aktunamilonaoujl.cf (static.171.229.9.5.clients.your-server.de [5.9.229.171])
Date: Fri, 17 Apr 2015 13:##:## +0200
From: "SYNERGISE PCB INC" <synergisepcb@synergisepcb.com>
Subject: Revolution on PCB, FPC & PCBA Promotion

<x>

MURPHY DAWOOD
Director, Engineering/Sales & Marketing
Synergise PCB Inc
Chicago, IL, USA
Tel # (1) 847-219-6294
Viber # 1847-219-6294
Website : www.synergisepcb.com
Email synergisepcb@yahoo.com
Skype ID : synergisepcb
LinkedIn : 11,000 Connections

<snip>

URI: http://responseplateform.cf/iem1/link.php?<x>

----------

Received: from aktunamilonaoujl.cf (static.172.229.9.5.clients.your-server.de [5.9.229.172])
Date: Mon, 20 Apr 2015 14:##:## +0200
From: "SYNERGISE PCB INC" <synergisepcb@synergisepcb.com>
Subject: Revolution on PCB, FPC & PCBA Promotion

<snip>

MURPHY DAWOOD
Director, Engineering/Sales & Marketing
Synergise PCB Inc
Chicago, IL, USA
Tel # (1) 847-219-6294
Viber # 1847-219-6294
Website : www.synergisepcb.com
Email synergisepcb@yahoo.com
Skype ID : synergisepcb
LinkedIn : 11,000 Connections

<snip>

URI: http://responseplateform.cf/iem1/link.php?<x>

----------

Received: from aktunamilonaoujl.cf (static.170.229.9.5.clients.your-server.de [5.9.229.170])
Date: Tue, 21 Apr 2015 14:##:## +0200
From: "SYNERGISE PCB INC" <synergisepcb@synergisepcb.com>
Subject: Revolution on PCB, FPC & PCBA Promotion

<snip>

MURPHY DAWOOD
Director, Engineering/Sales & Marketing
Synergise PCB Inc
Chicago, IL, USA
Tel # (1) 847-219-6294
Viber # 1847-219-6294
Website : www.synergisepcb.com
Email synergisepcb@yahoo.com
Skype ID : synergisepcb
LinkedIn : 11,000 Connections

<snip>

URI: http://responseplateform.cf/iem1/link.php?<x>

----------

Received: from aktunamilonaoujl.cf (unknown [5.9.229.169])
Date: Wed, 22 Apr 2015 14:##:## +0200
From: "SYNERGISE PCB INC" <synergisepcb@synergisepcb.com>
Subject: Revolution on PCB, FPC & PCBA Promotion

<snip>

MURPHY DAWOOD
Director, Engineering/Sales & Marketing
Synergise PCB Inc
Chicago, IL, USA
Tel # (1) 847-219-6294
Viber # 1847-219-6294
Website : www.synergisepcb.com
Email synergisepcb@yahoo.com
Skype ID : synergisepcb
LinkedIn : 11,000 Connections

<snip>

URI: http://responseplateform.cf/iem1/link.php?<x>

===== END April 2015 responseplateform.cf SBL254452 =====

===== BEGIN April 2015 aktunamilonaoujl.cf SBL254451 =====

Received: from aktunamilonaoujl.cf (unknown [5.9.229.182])
Received: from umedbharae.cf (5.189.135.168)
Date: Wed, 22 Apr 2015 10:##:## +0200
From: "Lunasta 20 ilmaista arpaa - voitto joka kolmannessa" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://goo.gl/<x>
Redirects to => http://www.primescratchcards.com/<x>

----------

Received: from static.162.181.9.176.clients.your-server.de (static.166.181.9.176.clients.your-server.de [176.9.181.166])
Received: from umedbharae.cf (5.189.135.168)
Date: Wed, 22 Apr 2015 10:##:## +0200
From: "Lottovoitto" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://goo.gl/<x>
Redirects to => http://www.primescratchcards.com/<x>

===== END April 2015 aktunamilonaoujl.cf SBL254451 =====

===== BEGIN April 2015 umedbharae.cf SBL254449/SBL254450 =====

Received: from hst-61-48-25-185.ist.lt (unknown [23.94.33.36])
Received: from umedbharae.cf (5.189.135.168)
Date: Tue, 21 Apr 2015 07:##:## +0200
From: "Firmastmaha.ee" <bounce@umedbharae.cf>
Reply-To: firmastmaha@easymarketsolutions.eu
Subject: Firmast maha 24 tunniga !

URI: http://goo.gl/<x>
Redirects to => [Disabled -- thanks, Google!]

Mailto URI: firmastmaha@gmail.com

Unsubscribe URI: http://umedbharae.cf/iem3/unsubscribe.php?<x>

----------

Received: from hst-61-48-25-185.ist.lt (unknown [23.94.33.26])
Received: from umedbharae.cf (5.189.135.168)
Date: Tue, 21 Apr 2015 07:##:## +0200
From: "Firmastmaha.ee" <bounce@umedbharae.cf>
Reply-To: firmastmaha@easymarketsolutions.eu
Subject: Firmast maha 24 tunniga !

URI: http://goo.gl/<x>
Redirects to => [Disabled -- thanks, Google!]

Mailto URI: firmastmaha@gmail.com

Unsubscribe URI: http://umedbharae.cf/iem3/unsubscribe.php?<x>

===== END April 2015 umedbharae.cf SBL254449/SBL254450 =====

===== BEGIN April 2015 umedbharae.cf/bulkmailsmtp.com SBL254446 =====

Received: from static.162.181.9.176.clients.your-server.de (static.167.181.9.176.clients.your-server.de [176.9.181.167])
Received: from umedbharae.cf (5.189.135.168)
Date: Wed, 22 Apr 2015 11:##:## +0200
From: "Lunasta 20 ilmaista arpaa - voitto joka kolmannessa" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://goo.gl/<x>
Redirects to => http://www.primescratchcards.com/<x>

----------

Received: from static.162.181.9.176.clients.your-server.de (static.167.181.9.176.clients.your-server.de [176.9.181.167])
Received: from umedbharae.cf (5.189.135.168)
Date: Thu, 23 Apr 2015 07:##:## +0200
From: "Asiakaspalvelu" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://goo.gl/<x>
Redirects to => http://www.primescratchcards.com/<x>

----------

Received: from static.161.181.9.176.clients.your-server.de (static.161.181.9.176.clients.your-server.de [176.9.181.161])
Received: from umedbharae.cf (5.189.135.168)
Date: Thu, 23 Apr 2015 08:##:## +0200
From: "Lottovoitto" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://www.primescratchcards.com/<x>

----------

Received: from static.162.181.9.176.clients.your-server.de (static.185.181.9.176.clients.your-server.de [176.9.181.185])
Received: from umedbharae.cf (5.189.135.168)
Date: Thu, 23 Apr 2015 11:##:## +0200
From: "Lottovoitto" <bounce@umedbharae.cf>
Reply-To: bounce@umedbharae.cf
Subject: Lunasta 20 ilmaista arpaa - voitto joka kolmannessa

Fake "Report Spam" URI: http://bit.ly/<x>
Redirects to => http://bulkmailsmtp.com/report_abuse.php

Unsubscribe URI: http://umedbharae.cf/iem4/unsubscribe.php?<x>

Payload URI: http://www.primescratchcards.com/<x>

===== END April 2015 umedbharae.cf/bulkmailsmtp.com SBL254446 =====

===== BEGIN April 2015 caspenan.info SBL253666 =====

Received: from mail.caspenan.info (unknown [198.49.79.132])
Date: Fri, 03 Apr 2015 16:##:## +0530
From: "Massadverts" <mailer@caspenan.info>
Reply-To: mk@easymarketsolutions.eu
Subject: Saadame Teie reklaampakkumise Euroopa mistahes riigi juriidiliste isikute meiliaadressidele

URI: http://goo.gl/<x>
Redirects to => http://www.personal.ee/?<x>

<snip>

Pakume masspostituse saatmist üle kogu Euroopa:
Eesti (125 000 ärikontakti) – 125 EUR
Parim pakkumine Eestis
Läti (83 000 ärikontakti) - 200 EUR
Leedu (102 000 ärikontakti) - 200 EUR
Soome (250 000 ärikontakti) - 350 EUR
Soome XXL (450 000 ärikontakti) - 500 EUR
Rootsi (90 000 ärikontakti) - 250 EUR
Rootsi XXL (1 200 000 ärikontakti) - 1000 EUR
Norra (150 000 ärikontakti) - 300 EUR
Norra XXL (550 000 ärikontakti) - 700 EUR
Poola (510 000 ärikontakti) - 385 EUR
Saksamaa (300 000 ärikontakti) – 350 EUR
Saksamaa XXL (5 300 000 ärikontakti) – 3500 EUR
Taani (173 000 ärikontakti) – 250 EUR
Venemaa (700 000 ärikontakti) – 300 – 700 EUR
Suurbritannia (130 000 ärikontakti) – 250 EUR
Suurbritannia XXL (1 200 000 ärikontakti) – 1000 EUR

<snip>

Nikolai Timofejev
Klienditeenindaja

Punane 16, Tallinn 13620
Tel. (+372)55 18 958

<snip>

URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (unknown [198.49.79.132])
Date: Sun, 05 Apr 2015 17:##:## +0530
From: "=?UTF-8?B?VGlpdS1SZWV0IEvDtXJ2ZW5pIGtvb2xpdHVz?=" <mailer@caspenan.info>
Reply-To: personal@easymarketsolutions.eu
Subject: Dokumendihalduse intensiivkursus kuni reedeni 99eur

URI: http://goo.gl/<x>

----------

Received: from mail.caspenan.info (unknown [198.49.79.132])
Date: Mon, 06 Apr 2015 23:##:## +0530
From: "=?UTF-8?B?RVJBTlRIRSBPw5w=?=" <mailer@caspenan.info>
Reply-To: eranthe@easymarketsolutions.eu
Subject: RAAMATUPIDAMISE TEENUS

Image URI: http://easymarketsolutions.eu/er1.jpg
ALT TXT: www.eranthe.eu

URI: http://goo.gl/<x>
Redirects to: http://www.eranthe.eu

URI: http://e-kampaania.com/kampaania/link.php?<x>

Mailto URI: eranthe@easymarketsolutions.eu

Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (mail.caspenan.info [198.49.79.132])
Date: Tue, 14 Apr 2015 18:##:## +0530
From: "Heidi Ants" <mailer@caspenan.info>
Reply-To: torudeabi24@easymarketsolutions.eu
Subject: =?UTF-8?B?S8O8c2ltdXM=?=

URI: http://goo.gl/<x>">

Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (mail.caspenan.info [198.49.79.132])
Date: Wed, 15 Apr 2015 04:##:## +0530
From: "EasyUP" <mailer@caspenan.info>
Reply-To: easyup@easymarketsolutions.eu
Subject: Soodsad laadatelgid

Image URI: http://www.image-pr-now.eu/<x>

URI: http://goo.gl/<x>
Phone: +372 56 488 544
+372 655 0810

Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (mail.caspenan.info [198.49.79.132])
Date: Thu, 16 Apr 2015 13:##:## +0530
From: "Laura S., Praktikud_meeskond" <mailer@caspenan.info>
Reply-To: mailer@caspenan.info
Subject: Seoses maksudega ...

URI: http://goo.gl/<x>

Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (mail.caspenan.info [198.49.79.132])
Date: Fri, 17 Apr 2015 14:##:## +0530
From: "Italyna King" <mailer@caspenan.info>
Reply-To: mailer@caspenan.info
Subject: =?UTF-8?B?S8OVSUdFIFNVVVJFTSBLSU5HQSBWQUxJSyBFRVNUSVMh?=

Image URI: http://easymarketsolutions.eu/<x>

Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

----------

Received: from mail.caspenan.info (mail.caspenan.info [198.49.79.132])
Date: Mon, 20 Apr 2015 16:##:## +0530
From: "Pif Paf" <mailer@caspenan.info>
Reply-To: pifpaf@easymarketsolutions.eu
Subject: =?UTF-8?B?U8OcTk5JUMOERVZBIFBBS0tVTUlORSBMQVNURUxFISBNw4ROR1VUVUJBK1PDlsOWSz03NWV1cg==?=

URI: http://goo.gl/<x>
Image URI: http://easymarketsolutions.eu/<x>
Unsubscribe URI: http://caspenan.info/unsubscribe.php?<x>

===== END April 2015 caspenan.info SBL253666 =====

===== BEGIN April 2015 chalpaglidewana.tk SBL252908/SBL252912 =====

Received: from srv.chalpaglodewana.com (217.ip-92-222-6.eu [92.222.6.217])
Received: from 2nikoliatk.tk (93.188.161.183)
Date: Mon, 06 Apr 2015 03:##:## -0400
From: "Terveyslehti" <admin@2nikoliatk.tk>

URI: http://fi.np.dreamzdeals.com/offer1?<x>
Unsubscribe URI: http://2nikoliatk.tk/iem1/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (234.ip-92-222-6.eu [92.222.6.234])
Received: from chalpaglidewana.tk (5.44.100.104)
Date: Mon, 06 Apr 2015 04:##:## -0400
From: "Taavi Tammpere" <admin@2nikoliatk.tk>
Reply-To: socialfly@easymarketsolutions.eu
Subject: Invitation

URI: http://goo.gl/<x>
Unsubscribe URI: http://chalpaglidewana.tk/iem2/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (215.ip-92-222-6.eu [92.222.6.215])
Received: from chalpaglidewana.tk (5.44.100.104)
Date: Tue, 07 Apr 2015 05:##:## -0400
From: "Telemarkkinointiesto" <admin@2nikoliatk.tk>
Subject: =?UTF-8?B?TG9wdWxsaXNlc3RpIGVyb29uIHB1aGVsaW5teXlqaXN0w6Q/IFRpbGFhIHRlbGVtYXJra2lub2ludGllc3RvLg==?=

URI: http://www.telemarkkinointiesto.fi/?<x>
URI: http://goo.gl/<x>
Image URI: http://api.netb11.com/b/?<x>
Unsubscribe URI: http://chalpaglidewana.tk/iem2/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (217.ip-92-222-6.eu [92.222.6.217])
Received: from 183.ip-92-222-6.eu (5.189.135.168)
Date: Thu, 09 Apr 2015 13:##:## +0200
From: "=?UTF-8?B?VMO1bmlzIEpha29iaSBmaW5hbnRza29vbGl0dXM=?=" <bounce@umedbharae.cf>
Subject: UUS - Dividendide ja omakapitali maksustamine kuni 10.04 ainult 99eur

URI: http://goo.gl/<x>
Mailto URI: Abuse@bulkmailsmtp.com
Unsubscribe URI: http://umedbharae.cf/iem2/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (226.ip-92-222-6.eu [92.222.6.226])
Received: from 183.ip-92-222-6.eu (5.189.135.168)
Date: Thu, 09 Apr 2015 15:##:## +0200
From: "=?UTF-8?B?QmFzaWMgS29udG9yaW3DtsO2YmVs?=" <bounce@umedbharae.cf>
Reply-To: basic@easymarketsolutions.eu
Subject: =?UTF-8?B?4pa64pa64pa6IGtvbnRvcmltw7bDtmJlbCBrdW5pIDQxJSBTT09EU0FNQUxUIOKXhOKXhOKXhA==?=

Image URI: http://www.basickontorimoobel.info/<x>
Mailto URI: Abuse@bulkmailsmtp.com
Unsubscribe URI: http://umedbharae.cf/iem3/unsubscribe.php?<x>
Image URI: http://easymarketsolutions.eu/<x>
URI: http://goo.gl/<x>

===== END April 2015 chalpaglidewana.tk SBL252908/SBL252912 =====

===== BEGIN April 2015 3nikoliatk.tk SBL252905 =====

Received: from srv.chalpaglodewana.com (static.6.179.9.176.clients.your-server.de [176.9.179.6])
Received: from chalpaglidewana.tk (5.44.100.104)
Date: Tue, 07 Apr 2015 05:##:## -0400
From: "Konteinerid . ee" <bounce3@3nikoliatk.tk>
Reply-To: konteinerid@easymarketsolutions.eu
Subject: Merekonteiner - sobib laoks!

URI: http://goo.gl/<x>
Phone: 6700172
Mobile: 5088764
Mailto URI: konteinerid@easymarketsolutions.eu
Raw URI: Konteinerid .ee
Unsubscribe URI: http://chalpaglidewana.tk/iem3/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (static.3.179.9.176.clients.your-server.de [176.9.179.3])
Received: from chalpaglidewana.tk (5.44.100.104)
Date: Tue, 07 Apr 2015 06:##:## -0400
From: "Kassetitankla" <bounce3@3nikoliatk.tk>
Reply-To: kassetitankla@easymarketsolutions.eu
Subject: Printeri Originaal tooner hulgi hinnaga

<snip>

Laser printeri tooneri transport üle Eesti tasuta.

Lugupidamisega
Kassetitankla OÜ
tel: 6461 061

<snip>

Unsubscribe URI: http://chalpaglidewana.tk/iem3/unsubscribe.php?<x>

----------

Received: from srv.chalpaglodewana.com (static.7.179.9.176.clients.your-server.de [176.9.179.7])
Received: from naslipunjabo.cf (5.196.5.66)
Date: Tue, 07 Apr 2015 23:##:## +0200
From: "Gigato" <info@naslipunjabo.cf>
Subject: 1 GB at no cost mobile data for you

URI: http://naslipunjabo.cf/iem1/link.php?<x>
Image URI: http://termimachmiki.cf/<x>

Unsubscribe URI: http://naslipunjabo.cf/iem1/unsubscribe.php?<x>

Scope Mailings
2805 Oakland Park Blvd #<x>
Fort Lauderdale, FL 33306

Mailto URI: abuse@bulkmailsmtp.com

===== END April 2015 3nikoliatk.tk SBL252905 =====

===== BEGIN April 2015 romanticthe.com SBL252432 =====

Received: from <x>.romanticthe.com (unknown [206.72.193.168])
Received: from 2nikoliatk.tk (93.188.161.183)
Date: Fri, 03 Apr 2015 12:##:## -0400
From: "Taavi Tammpere" <admin@2nikoliatk.tk>
Reply-To: socialfly@easymarketsolutions.eu
Subject: Invitation

URI: http://goo.gl/<x>
URI: http://www.socialfly.ee
Unsubscribe URI: http://2nikoliatk.tk/iem1/unsubscribe.php?<x>

----------

===== END April 2015 romanticthe.com SBL252432 =====


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK11121/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy