Mahmoud Kassem

SETTEC LTD sends SPAM daily to Egyptians using Random Arabic/Egyptian names and emails.
Changing the domain name almost every week (158 domains detected). Geeks could not accept this, we have to request the termination of Internet services (Internet Connection and Domain Service) for SETTEC. We should fight SPAM before it starts to be a normal act in Egypt.

Did you ever get SPAM messages with a Random Egyptian name in the from addresses every day?
That's SETTEC LTD way of doing business, buying your email addresses from others, sending SPAM and may be selling your email addresses too. They are usually advertising their training events. More details below

Unsubscribe script does not work?
Of course, because they just add it to the message to bypass SPAM checkers like SPAM Assassin and to make sure your Email is correct.

How can I count the emails I get from SETTEC?
I have more than 136 emails from them for 2 months (more in my archives)
The simplest way is to search for messages (body) that contains “No.asp?Email=”
I can not assure that this will always work, they can rename files but you can always find them

With a new domain almost every week they think that they can go undetected. But its actually very easy to detect and block their emails using Email Client like Mozilla Thunderbird and MS Outlook. Let me show you more information

SETTEC LTD Contact Information:
Agouza Police Tower, Nawal Street
Cairo, Agouza
Egypt
Cellular: +20.12-217-2809
Fax: +20.2-761-4343

Owned by Mohamed Fahmy (mohamed.fahmy@settecltd.com)
Owns IP Range: 196.204.140.16 to 196.204.140.23 from Raya Telecom

settecltd.com name service managed by Raya Telecom (Star Net) DNS:
NS1.RAYATELECOM.COM
NS2.STARNET.COM.EG

Of course, they do not send SPAM from their company's domain. They use more than 155 domains for this purpose. As I said previously, almost a domain per week spending about $40 per month to send you SPAM. Every expensive by the way, They must be earning $1000s per month.

HTTP Server:
These huge number of domains are currently divided into 4 different IP Addresses in Egypt owned by SETTEC

At least 44 domains pointing to 196.204.140.18
At least 41 domains pointing to 196.204.140.19
At least 41 domains pointing to 196.204.140.20
At least 32 domains pointing to 196.204.140.21
More are registered weekly, Please see the attached files for the list of domains per IP Address.

All these domains are registered through an Enom.com reseller and with the following registrant information and using fake Email Address:
Mohamed Fahmy
+20.0104564058
20 hindawi st, dokki

Some are not hosted locally like:
settecltd.com
importantismost.com

SMTP Server:
Of course they can not be sending this through an ISP SMTP Server without being blocked. They use a local SMTP service installed on a PC with dynamic Internet IP address still through Raya Telecom though.

DNS Server:
They use Enom.com DNS Service except for settecltd.com

What can we do online?
You have the right not to receive SPAM, so report this abuse of service: 0. Mark these Messages as SPAM/Junk and do not delete them. Keep them in your Junk Folder to be used as evidence. This also helps your SPAM detector learning. 1. Report Internet Connection and IP Abuse to Raya Telecom Abuse Department ( abuse%rayatelecom.net)
2. Report Domain and DNS Service Abuse to Enom.com Abuse Department (abuse%enom.com)
3. Report the SPAM messages to Anti-SPAM sites ex. spamcop.net
replace % by @

June 28th, 2006 updates: A new domain detected: Readytemplatez.com on Server .18
June 29th, 2006 updates: Sent Abuse Report Email messages to both Raya Telecom and Enom.
June 29th, 2006 updates: Two new domains detected: Yougeneral.com and Itspurpose.com on Server .19

Attachment	Size
SPAMdomains-20.csv.txt	927 bytes
SPAMdomains-21.csv.txt	725 bytes
SPAMdomains-18.csv.txt	1002 bytes
SPAMdomains-19.csv.txt	922 bytes