MainSleaze

Below is another example of B2B spam sent by a large, legitimate company, this time by Oracle. This spam was sent to a pristine spamtrap that follows the format of normal email addresses at the company in question, but does not actually belong to the person that received the spam. Unlike the IBM B2B prospecting spam I reported a few days ago, Oracle sent this spam from its ESP, the Oracle Marketing Cloud.

NOTE [5/19/2017]: An Oracle representative notified me that the IP address that sent the spam is NOT part of the Oracle Marketing Cloud, although that IP belongs to Oracle.

In other words, a company that owns its own ESP and knows the rules of the road for bulk email is sending what appears to be blatant spam to a purchased or appended list. Oracle should be ashamed of itself.

Sending IP: 142.0.162.55

Actual Headers:

Received: from mail03.response.oracle-mail.com (HELO 
mail03.response.oracle-mail.com) (142.0.162.55)
   by <xxx> with DHE-RSA-AES256-SHA 
encrypted SMTP; 16 May 2017 15:##:## -0000
DKIM-Signature: <xxx>
Received: from [10.34.##.##] ([10.34.##.##:##] helo=P03SNJ011)
         by msm-mta07-dc6 (envelope-from <bounces@response.oracle-mail.com>)
         (ecelerity 3.6.9.48312 r(Core:3.6.9.0)) with ESMTP
         id <xxx>; Tue, 16 May 2017 11:##:## -0400
Message-ID: <xxx>
X-Binding: <xxx>
X-elqSiteID: <xxx>
X-elqPod: <xxx>
X-cid: <xxx>-2017/05/16 15:##:##
MIME-Version: 1.0
From: "Oracle SMB Marketing" <replies@oracle-mail.com>
To: <xxx>
Reply-To: "Oracle SMB Marketing" <replies@oracle-mail.com>
Date: 16 May 2017 11:##:## -0400
Subject: 3 reasons IT and finance should be buddies
Content-Type: multipart/alternative;
  boundary=--boundary_<xxx>

Readable Email:

From: <strongOracle SMB Marketing <replies@oracle-mail.com>
To: <removed>
Subject: 3 reasons IT and finance should be buddies

<Message body not provided>