Avecto: sending to outdated addresses

Avecto may have had the previous owners of the domain as customers.  I couldn’t tell.  This is the first I hear of them during my ownership of the domain spanning Dec 29, 2009 to present, so they’re most definitely mailing to outdated addresses.  The ESP here is Marketo.

Spamming IP: 94.236.119.14

Spam headers:

From mail034@eu-em012.mktomail.com  Wed Dec 21 16:02:15 2011
Return-Path: <mail034@eu-em012.mktomail.com>
Received: from eu-em014.mktomail.com (eu-em014.mktomail.com [94.236.119.14])
by mail.atrotossavainen.fi (Postfix) with ESMTP id 9DE01794CDB
for <x>; Wed, 21 Dec 2011 16:02:15 +0200 (EET)
Received: from mktomail.com ([10.130.52.192])
by eu-em014.mktomail.com (StrongMail Enterprise 4.1.1.4(4.1.1.4-47689));
Wed, 21 Dec 2011 08:02:14 -0600
X-VirtualServer: eu-vsg12, eu-em014.mktomail.com, 172.28.5.14
X-VirtualServerGroup: eu-vsg12
X-MailingID: 1258595149::avectoBetacust-1232-898-0-1036-prod-30::30::0::87546::25164
X-SMHeaderMap: mid="X-MailingID"
X-Destination-ID: x
X-SMFBL: c3VwcG9ydEBhdHJvLmZp
Content-Transfer-Encoding: 7bit
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_AEA6_74B0DC51.19495CFF"
X-Report-Abuse: Please report abuse here: http://www.marketo.com/policy
Reply-To: rebecca.wood@avecto.com
MIME-Version: 1.0
Message-ID: <1258595149.25164@avecto.com>
Subject: Jeremy Moskowitz - Leveraging the Power of Group Policy
Date: Wed, 21 Dec 2011 08:02:14 -0600
To: x
From: "Rebecca Wood" <rebecca.wood@avecto.com>
Content-Length: 10950
Lines: 179

Part of the human-readable content:

Jeremy Moskowitz – Leveraging the Power of Group Policy

Join Jeremy in this hour long, LIVE webinar and gain some great insights into the â<80><98>Nuts & Boltsâ<80><99> of Group Policy. Â
       Â
Group Policy is what you â<80><9C>doâ<80><9D> with Active Directory, day-to-day. Yet, most people have no idea how Group Policy actually â<80><9C>worksâ<80><9D>, what the moving parts are, or whatâ<80><99>s even possible in Group Policy. Â

3 Responses to Avecto: sending to outdated addresses

  1. I appreciate it that it’s the holiday season, but if you’re mailing, you should be listening to the comments as well. Mailed a report on this to Marketo abuse and the sender on Dec 23 – no response, no effect, more spam just in.


    From mail034@eu-em012.mktomail.com Wed Dec 28 13:43:24 2011
    Return-Path: <mail034@eu-em012.mktomail.com>
    Received: from eu-em014.mktomail.com (eu-em014.mktomail.com [94.236.119.14])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id D4DDA7DC105
    for <x>; Wed, 28 Dec 2011 13:43:23 +0200 (EET)
    Received: from mktomail.com ([10.130.52.192])
    by eu-em014.mktomail.com (StrongMail Enterprise 4.1.1.4(4.1.1.4-47689)); Wed, 28 Dec 2011 05:43:22 -0600
    X-VirtualServer: eu-vsg12, eu-em014.mktomail.com, 172.28.5.14
    X-VirtualServerGroup: eu-vsg12
    X-MailingID: 1258595936::avectoBetacust-1268-984-0-1053-prod-45::45::0::87546::4940
    X-SMHeaderMap: mid="X-MailingID"
    X-Destination-ID: x
    X-SMFBL: c3VwcG9ydEBhdHJvLmZp
    Content-Transfer-Encoding: 7bit
    Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_AEA6_74B0DC51.19495CFF"
    X-Report-Abuse: Please report abuse here: http://www.marketo.com/policy
    Reply-To: rebecca.wood@avecto.com
    MIME-Version: 1.0
    Message-ID: <1258595936.4940@avecto.com>
    Subject: Benefits of Eliminating Admin Rights - Live Webinar
    Date: Wed, 28 Dec 2011 05:43:22 -0600
    To: x
    From: "Rebecca Wood" <rebecca.wood@avecto.com>
    Content-Length: 7758
    Lines: 112

  2. We have been working with this customer to get them to stop sending to opt-out addresses. You should receive no such further messages from them.

  3. Let me correct myself. They sent to the same domain on April 23, 2010. I don’t seem to have reacted to it right away. At that time, their ESP was createsend.com, and I’ve told the ESP on May 11, 2010 that the domain has changed hands and all addresses must be removed. I don’t think I got a reply. After that, they went silent for over a year and a half before they started spamming from Marketo.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top