MainSleaze

TT Consulting, s.r.o. of Slovakia (whois) and/or Komoditná burza Bratislava, a.s. (perhaps two separate organisations, but the same person as prime mover) is/are spamming addresses at a domain that has changed hands despite the fact that they’ve been told this is the case. Domains involved in the spamming are kbb.sk, scholtz.sk, ttconsulting.sk, carbonplace.eu. This may be related to a similar operation elsewhere that has also been reported here.

Spamming IP: 92.240.245.194 (was 92.240.237.141 and .142 earlier)

Most recent spam headers:

From secretary@kbb.sk  Fri Dec 23 14:15:48 2011
Return-Path: <secretary@kbb.sk>
Received: from mail.scholtz.sk (unknown [92.240.235.194])
        by mail.atrotossavainen.fi (Postfix) with ESMTP id 27BE27951C2
        for <x@atro.fi>; Fri, 23 Dec 2011 14:15:48 +0200 (EET)
Received: by mail.scholtz.sk (Postfix, from userid 1001)
        id CBB0940630; Fri, 23 Dec 2011 13:15:43 +0100 (CET)
To: x@atro.fi
Subject: PF 2012
MIME-Version: 1.0
To: x@atro.fi
From: CEB Secretary general <secretary@kbb.sk>
Content-Type: multipart/mixed; boundary="60a3cc14ad0ba13944a953197d7354b3"
Message-Id: <20111223121543.CBB0940630@mail.scholtz.sk>
Date: Fri, 23 Dec 2011 13:15:43 +0100 (CET)
Content-Length: 601
Lines: 14

Opt-out message on March 25, 2010:

Date: Thu, 25 Mar 2010 21:09:19 +0200
From: Atro Tossavainen <atro.tossavainen@atro.fi>
To: director@ttconsulting.sk
Subject: atro.fi has changed owners
Message-ID: <20100325190919.GA8694@1655mc-node1.atrotossavainen.fi>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.2i
Status: RO
Content-Length: 655
Lines: 14

You're trying to mail something to addresses @atro.fi.

Savon Voima (a power generation company in eastern Finland) gave up
this domain name on August 31, 2009.  It properly expired after the
three month probationary period on November 30, 2009.  On December
29, 2009, I registered it for myself as a private person.

In a bit, I will be turning on catchall on the domain and all mail sent
to those addresses will feed the spam database of a fairly well known
international DNSBL.  Sending any mail at all to previous addresses of
Savon Voima employees will result in DNSBL listings for spam after that.

Thank you for attending to this.
Atro Tossavainen

All dates, senders and subject lines of messages seen so far:

2010:
   1     Mar 25 Ludovit Scholtz (  37) Business proposal
   2     May 14 Ludovit Scholtz (  62) EUA market information (14th may)
   3     Oct 12 Ludovit Scholtz (4268) Carbon market overview (12th October)
   4     Oct 29 Ludovit Scholtz (4264) Carbon market overview (29th October)
   5     Dec 23 Ludovit Scholtz (6506) Carbon market overview (23rd December)
2011:
   6     Mar 16 Ludovit Scholtz (  34) Carbon market news - SCC Registry
   7     Mar 23 Ludovit Scholtz ( 127) Carbon market news - March 23th
   8     Apr 20 Ludovit Scholtz ( 160) Carbon market news - April 20th
   9     May 19 Ludovit Scholtz ( 118) Carbon market news - May 19th
  10     May 31 CEB Secretary g (21092) CEB will be present at Carbon Expo
  11     Aug 24 Ludovit Scholtz (21231) Carbon market news - August 24th
  12     Sep 13 CEB Secretary g (21230) CO2 Expo in Rome
  13     Dec 12 Ludovit Scholtz (7015) Carbon market news - December 12th 2011
  14     Dec 23 CEB Secretary g (  14) PF 2012