ROKSO: Carlos Fabian Torre - The Spamhaus Project

ROKSO Home | ROKSO FAQs & Policies | About Spamhaus | FAQs

Carlos Fabian Torre

Carlos Fabian Torre Index

Country: Brazil
State: Bahia

Spamming harvested and non-existing addresses, to advertise lists of addresses and spam sending services. In action since at least October 2004. At the beginning, he started spamming to advertise his "Chron control de horarios" software business. Later, around 2005/2006, spam services apparently became his core business, using the brand "ISA E-Marketing".

While most domains are registered using Argentinian addresses in the Buenos Aires area, this operation is actually based in Salvador, Bahia, Brazil.

Carlos Fabian Torre SBL Listings History

Current SBL Listings

Archived SBL Listings

spam sample (2012/08) (open relay hijacking)

In summer and autumn 2012, Torre hijacked several open relay servers to deliver his spam. This is an example.

=======================================================================
Received: from correo.fulldata.com.ec (HELO correo.fulldata.com.ec) (186.42.98.10)
by x (x) with ESMTP; Fri, 10 Aug 2012 09:xx:xx +0000
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.fulldata.com.ec (Postfix) with ESMTP id x
for <x>; Fri, 10 Aug 2012 xx:xx:xx -0500 (ECT)
X-Virus-Scanned: amavisd-new at fulldata.com.ec
Received: from correo.fulldata.com.ec ([127.0.0.1])
by localhost (correo.fulldata.com.ec [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id x for <x>;
Fri, 10 Aug 2012 xx:xx:xx -0500 (ECT)
Received: from correo.fulldata.com.ec (localhost.localdomain [127.0.0.1])
by correo.fulldata.com.ec (Postfix) with ESMTP id x
for <x>; Fri, 10 Aug 2012 xx:xx:xx -0500 (ECT)
Received: from Unknown ([177.82.192.82] helo=CAPTURADOR)
by correo.fulldata.com.ec with ESMTP id x;
Fri, 10 Aug 2012 xx:xx:xx -0500
Received: from [127.0.0.1] by CAPTURADOR
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.1.9)); Fri, 10 Aug 2012 xx:xx:xx -0300
Thread-Topic: Indirizzi Email Aziendali da ITALIA - 99 EUR - id= x
thread-index: x==
From: "Offerta Indirizzi Email Aziendali" <clickandgotowebsite@gmail.com>
To: <x>
Subject: Indirizzi Email Aziendali da ITALIA - 99 EUR - id= x
Date: Fri, 10 Aug 2012 xx:xx:xx -0300
Message-ID: <x@CAPTURADOR>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="x"
Content-Location: file://C:\ISA E-Marketing\HTML Templates\BD IT 2010\b1_isashort_itit.htm
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6090
X-SpamTest-Envelope-From: clickandgotowebsite@gmail.com
X-SpamTest-Info: Profiles 35508 [Aug 10 2012]
X-SpamTest-Method: none
X-SpamTest-Rate: 0
X-SpamTest-SPF: neutral
X-SpamTest-Status: Not detected
X-SpamTest-Status-Extended: not_detected
X-SpamTest-Version: SMTP-Filter Version 3.0.0 [0285], KAS30/SDK/Release
X-Anti-Virus: Kaspersky Mail Gateway, version: 5.6.28/RELEASE, bases: 20120805T003135 #8317580, check: 20120804 clean

Banche dati dell'Italia
1,5 MILIONI DI EMAIL DELL'ITALIA
EDIZIONE 2012 - AGGIORNATO

99 Euro
SAPERE COME ACQUISTARE
Accettiamo Paypal, MoneyGram, Western Union e Trasferimento Bancario
<http://www.combosoftware.com.ar/isaemarketing_itit_bd_pedido.htm>

Rimuovere il tuo indirizzo e-mail
<http://www.combosoftware.com.ar/isaemarketing_it_bd_remover.htm>

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.

The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK9731/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.