Carbon Market Data: hitting outdated addresses, not respecting opt out, RFC 5321 violation
Carbon Market Data is trying to reach their old contacts at Savon Voima‘s outdated addresses, not respecting opt out, they don’t have a postmaster, their ISP doesn’t care.
They were told in April 2010 (to the “news@” address); no effect. They and their ISP BlueHost were told in June 2010; they don’t have a postmaster and BlueHost is not interested.
Spamming IP: 69.89.22.20 (Nov 1, 2011); others both in same network and other networks earlier, see below.
Spam headers: (Interestingly, the receiving server had to generate a Message-ID as they didn’t have one.)
From news3@carbonmarketdata.com Tue Nov 1 10:24:14 2011 Return-Path: <news3@carbonmarketdata.com> Received: from oproxy8-pub.bluehost.com (oproxy8-pub.bluehost.com [69.89.22.20]) by mail.atrotossavainen.fi (Postfix) with SMTP id A395B794DC2 for <x@atro.fi>; Tue, 1 Nov 2011 10:24:13 +0200 (EET) Received: (qmail 31118 invoked by uid 0); 1 Nov 2011 08:24:11 -0000 Received: from unknown (HELO box500.bluehost.com) (74.220.219.100) by oproxy8.bluehost.com with SMTP; 1 Nov 2011 08:24:11 -0000 Received: from localhost ([127.0.0.1] helo=box500.bluehost.com) by box500.bluehost.com with esmtp (Exim 4.76) (envelope-from <news3@carbonmarketdata.com>) id 1RL9dj-0007rA-3Z for x@atro.fi; Tue, 01 Nov 2011 02:24:11 -0600 Date: Tue, 01 Nov 2011 02:24:11 -0600 To: x@atro.fi Subject: California ETS and New Zealand ETS data From: news3@carbonmarketdata.com Reply-To: news3@carbonmarketdata.com MIME-Version: 1.0 X-Mailer: neXus MIME Mail - PHP/5.2.17 Content-Type: multipart/alternative; boundary="=-nxs_alt_504f918fe5a1601818e81841421f2e66" X-Identified-User: {:box500.bluehost.com:carbonm1:box500.bluehost.com} {sentby:program running on server} Message-Id: <20111101082413.A395B794DC2@mail.atrotossavainen.fi> Status: O Content-Length: 3793 Lines: 125
All envelope-from’s and dates:
From news@carbonmarketdata.com Fri Apr 9 10:50:25 2010 From news2@carbonmarketdata.com Fri Apr 16 06:08:46 2010 From news3@carbonmarketdata.com Fri Jun 11 18:09:20 2010 From news3@carbonmarketdata.com Mon Jun 21 09:16:17 2010 From news3@carbonmarketdata.com Fri Sep 10 15:00:02 2010 From news3@carbonmarketdata.com Mon Dec 6 08:56:08 2010 From news3@carbonmarketdata.com Mon Feb 7 15:52:26 2011 From news3@carbonmarketdata.com Wed Apr 6 18:48:20 2011 From news3@carbonmarketdata.com Wed May 18 17:04:15 2011 From news3@carbonmarketdata.com Tue Nov 1 10:24:14 2011
and their corresponding sending IPs (perhaps not in order)
Received: from box500.bluehost.com (box500.bluehost.com [74.220.219.100]) Received: from outbound-mail-313.bluehost.com (cpoproxy3-pub.bluehost.com [67.222.54.6]) Received: from outbound-mail-158.bluehost.com (cpoproxy2-pub.bluehost.com [67.222.39.38]) Received: from cpoproxy1-pub.bluehost.com (cpoproxy1-pub.bluehost.com [69.89.21.11]) Received: from cpoproxy1-pub.bluehost.com (cpoproxy1-pub.bluehost.com [69.89.21.11]) Received: from oproxy2-pub.bluehost.com (oproxy2-pub.bluehost.com [67.222.39.60]) Received: from oproxy3-pub.bluehost.com (oproxy3-pub.bluehost.com [69.89.21.8]) Received: from cpoproxy1-pub.bluehost.com (cpoproxy1-pub.bluehost.com [69.89.21.11]) Received: from oproxy6-pub.bluehost.com (oproxy6-pub.bluehost.com [67.222.54.6]) Received: from oproxy8-pub.bluehost.com (oproxy8-pub.bluehost.com [69.89.22.20])
Pingback: TT Consulting, s.r.o. / Komoditná burza Bratislava, a.s. (Slovakia): spamming outdated addresses, not respecting opt-out » MainSleaze