Bluebiit: Spamming to sell electronic gadgets

Bluebiit (see earlier post) have moved house and are now spamming from the network of, to purchased lists obtained from Suomen Markkinointirekisteri Oy and Digimediatoimisto Haikuu as before. The spam-advertised domain is hosted by Suncomet at the IP address that sent the spam.  The domain is hosted at [] (rDNS “”) by LeaseWeb in the Netherlands.  The domain is hosted at [] (“”) by Nebula, as before.  The spam-advertised online shop is hosted by Sigmatic at [] (“”).

Spamming IP:
Spam headers:

Return-Path: <>
Received: from ( [])
        by x (Postfix) with ESMTP id x
        for <x>; Mon,  3 Dec 2012 21:mm:ss +0200
Received: from tabletka by with local (Exim 4.80)
        (envelope-from <>)
        id x
        for x; Mon, 03 Dec 2012 20:mm:ss +0100
To: x
Subject: Tablet-tietokoneet joululahjaksi suoraan maahantuojalta tarjoushintaan
Date: Mon, 3 Dec 2012 20:mm:ss +0100
Message-ID: <>
X-Priority: 3
X-Mailer: PHPMailer ( [version 2.0.4]
MIME-Version: 1.0
Content-Type: multipart/alternative;
X-AntiAbuse: This header was added to track abuse, please include it with any
        abuse report
X-AntiAbuse: Primary Hostname -
X-AntiAbuse: Original Domain - x
X-AntiAbuse: Originator/Caller UID/GID - [500 500] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: authenticated_id:

Human-readable contents:

Suoraan maahantuojalta tarjoushintaan vain 2 päivän ajan!

Lahjavinkki 1:
SIRO-tablet vain 139eur (norm. 199eur)

Lahjavinkki 2:
Bluebiit Big Chocolate vain 219eur (norm. 369eur)

Bluebiitin ideana on yhdessä asiakkaiden, urheilijoiden ja yhteistyökumppaneiden kanssa tukea nuorten liikuntaa ja vanhusten virkistäymistä!

Bluebiit 2012
Osoitelähde Suomen markkinointirekisteri ja Haiku Digitoimisto
Poista osoitteesi listalta:

6 Responses to Bluebiit: Spamming to sell electronic gadgets

  1. Spamming from French ESP now. SendInBlue reported on June 19 that the customer would no longer be able to send from this platform, but spam is continuing as of July 1.

  2. Spamming with a Gmail return address from Saunalahti consumer servers today.

  3. Spamming with the same Gmail return address from their own dedicated IP

    Received: from ( [])


  4. According to their record at the Finnish Business Information System “Bluebiit” (aka Greenbiit Ltd) is in Chapter 11 as of May 15, 2015.

    The natural course of a spamming business is to go bankrupt. Rules of Spam, Rule #4.

  5. Still spamming, this time from SendGrid through Message refers to the customer file of a fictitious business that has never even existed in the YTJ. Building a textbook case for Why Proper Vetting Matters, incidentally.

    • Hello,

      I spoke with Campayn about their customer. We made an agreement that their mail could no longer flow through SendGrid. Just wanted to tie up any loose ends.


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top