Marcus Evans Conferences: Emailing dead addresses, not giving a damn about opt out

Marcus Evans Conferences are spamming addresses they know to be dead as of Aug 31, 2009 via ESP sendgrid.com. They’ve been informed on March 17, 2010 and several times afterwards, most recently on Oct 3, 2011. In response to the latest one, Caroline Nielsen of linguarama.com told me just to unsubscribe on Oct 3, 2011. I have no idea how many of these addresses they have in their files, and in accordance with the Data Protection Act, they have a duty to rid their registers of erroneous and outdated data.

Spamming IP: 208.117.51.19

Spamming ESP:

[whois.arin.net]

SendGrid, Inc. SENDGRID-1 (NET-208-117-48-0-1) 208.117.48.0 - 208.117.63.255

Spam headers:

From bounces+a-b-x=atro.fi@mail.marcusevanseurope.com  Mon Oct 10 18:03:59 2011
Return-Path: <bounces+a-b-x=atro.fi@mail.marcusevanseurope.com>
Received: from o5.mail.marcusevanseurope.com (o5.mail.marcusevanseurope.com [208.117.51.19])
by mail.atrotossavainen.fi (Postfix) with SMTP id E901D794DCB
for <x>; Mon, 10 Oct 2011 18:03:58 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=marcusevanseurope.com; h=
mime-version:from:to:date:subject:content-type
:content-transfer-encoding:message-id:sender; s=smtpapi; bh=cAaX
qkYHTVGKF3zHbbmkXHx4QZA=; b=n8V7yQ8IRwLjcF31eUU+Xo0tyOMXxFRAOOJs
EFswQ0V1HfeqRFdBs/3jnPNrIcIdJwYDNHRE5NhNoSXXLGiTDtYQueM86JiFrh2Y
80ysFkT7Sk+ZPdIV+jJynH3a7EvBB6UosUbZAr5T20po6saKf3mCzrwCMPmmvyp2
o5Sv6Xg=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=marcusevanseurope.com; h=
mime-version:from:to:date:subject:content-type
:content-transfer-encoding:message-id:sender; q=dns; s=smtpapi; b=
P/kDAMjU9RcC2KyF92Ep5JvVS/3N+3rgE/arzsKDe3jhTEX3rcTIskjAUJLxooNa
oz1MZj4EWgUkbOMa5vgCdDvLrB6Bn8NQ4xJxmvMuUllZwY3RCl2WTBVRgwBn/pt4
Tv8hJrcLIM0lV2+w97blm+iZSoZgoImp3iP5uofjxqc=
Received: by 10.16.69.92 with SMTP id mf27.14219.4E9309542A
Mon, 10 Oct 2011 10:03:48 -0500 (CDT)
Received: from Lon-s29 (unknown [10.9.180.5])
by mi10 (SG) with ESMTP id 4e930953.e80.80bd58
for <mailer@marcusevans.com>; Mon, 10 Oct 2011 10:03:47 -0500 (CST)
MIME-Version: 1.0
From: "marcus evans Conferences" <marketing2@marcusevansuk.com>
To: x@atro.fi
Date: 10 Oct 2011 16:03:42 +0100
Subject: Business Process & Operational Excellence
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
Message-ID: <1318259028.8221569426536962@mf27.sendgrid.net>
X-Sendgrid-EID: oW9Hcqt5SP+Jd+DUPRbY86GnozqEtUq4gW8iVlT2cKSXLEuESsc/lEPfWn3Nj39e2JJ8/FOfN/ajkupMVY9klZQzmEsyP+6AhdIAWROFgMYA4GwEAZUWCQqk1OudNJHoTnI2xUmQAAfCJTU1zfkv5tphU6QSaJ9OXTFMgk96A4g=
X-Sendgrid-ID: 0TR6qjlD9QQHf3xnnOf1wTro8/hps8vIZ/3B8Vz0IXsvS8BYXch3uGNAjktzQyvWirfpeepObwNq6hmYdNek2w==
Sender: marcus evans Conferences <marketing2=marcusevansuk.com@marcusevanseurope.com>

6 Responses to Marcus Evans Conferences: Emailing dead addresses, not giving a damn about opt out

  1. As of October 12, more spam from Marcus Evans, this time from their own network.

    Received: from smtp.marcusevansemailcampaigns.com (unknown [188.39.40.66])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id B5371794DCB
    for <x>; Wed, 12 Oct 2011 20:50:51 +0300 (EEST)

  2. Enta.net demand that the spams’ unsubscribes must be clicked (somewhat contrary to Spamhaus advice, Word to the Wise advice, Trend Micro MAPS advice…) and this young fellow responding to abuse @ enta dot net seems to have an unusually hard time acknowledging the fact that domain-wide removal is both the right thing to do AND the sender has a Data Protection Act related obligation to remove erroneous and outdated information.

    As an aside, they’re mailing to an address that can never have existed (think “Käthrin Dzeffösan” for “Catherine Jefferson”). Now since it didn’t exist, how would it possibly have confirmed opt-in? Enta.net’s AUP clearly requires confirmed opt-in.

  3. It goes on. The most recent message is in perfect Finnish, so the sender, Caroline Nielsen, received a reply in Finnish (only) as well. As did abuse at enta.net, the ICO, and the Finnish Data Protection Ombudsman.

    Received: from smtp.marcusevansemailcampaigns.com (unknown [188.39.40.66])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id 2055F794DC1
    for <x1@atro.fi>; Wed, 26 Oct 2011 22:55:03 +0300 (EEST)

    Received: from smtp.marcusevansemailcampaigns.com (unknown [188.39.40.66])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id AE3D8794DC1
    for <x2@atro.fi>; Thu, 27 Oct 2011 00:08:32 +0300 (EEST)

    Received: from smtp.marcusevansemailcampaigns.com (unknown [188.39.40.66])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id AFC01794DC1
    for <x3@atro.fi>; Thu, 27 Oct 2011 00:08:50 +0300 (EEST)

  4. Marcus Evans appears to have stopped. But Thought Leader Global is picking up where Marcus Evans left off. How can I tell? Similarity of spam content helps, but hitting the “Käthrin Dzeffösan” misspelled address is a dead giveaway. The ESP is emailIQ.com, who have been notified.

  5. Pingback: (Mostly resolved) Thought Leader Global: Mailing a pure spamtrap – smells of Marcus Evans » MainSleaze

  6. Marcus Evans managed to listwash Atro.fi, but they are also spamming addresses that haven’t been live in ten years.


    Received: from o4.mail.marcusevansapac.com (o4.mail.marcusevansapac.com [208.117.51.135])
    by x (Postfix) with SMTP id x
    for <x>; Tue, 28 Feb 2012 11:5x:xx +0200 (EET)

Leave a Reply

Go back to top