MainSleaze

This is a refresh of the earlier post on the same spamming operation and spammer.  Their Web of Trust rating is still about as poor as it can be.  The McAfee SiteAdvisor contains comments suggesting it’s a phish.  I can’t say I have information to disprove that.  Their spam has been noticed in Romania, too, and even as far as in Japan.  Would everybody receiving this spam please let Netrics and DomainFactory know.

Date: Mon, 11 Feb 2013 08:02:42 +0100
X-Mailer: Isonet Messaging Manager
From: "netrics hosting ag helpdesk" <helpdesk@netrics.ch>
To: me
Subject: Euwifo spammer Ticket: NE-00121070 TXP:{3a84fefa-2e4e-4277-958b-14bd06979f54}:PXT
X-Priority: 3
X-Auto-Response-Suppress: AutoReply

Dear N N

Did the spam from Euwifo stop?

Guess.

Return-Path: <survey@euwifomonitor.ch>
Received: from swissvc510110v1.swissv.ch (SwissVC510110V1.swissv.ch [81.18.24.177])
        by x (Postfix) with ESMTP id x
        for <x>; Thu, 21 Feb 2013 hh:mm:ss +0000 (UTC)
Received: from localhost (unknown [46.4.22.46])
        by swissvc510110v1.swissv.ch (Postfix) with ESMTP id x
        for <x>; Thu, 21 Feb 2013 hh:mm:ss +0100 (CET)
MIME-Version: 1.0
From: "Stefan J. Lang" <survey@euwifomonitor.ch>
Subject: Osallistumiskutsu EUWIFO Business Monitor -kyselyyn helmikuussa 2013
X-Mailer: Microsoft Office Outlook 12.0
Date: Thu, 21 Feb 2013 hh:mm:ss +0100
Priority: normal
X-Priority: 3 (Normal)
X-Message-Code: x-x-x---
Content-Type: multipart/alternative;
        boundary="=_x"
To: x
Message-Id: <20130221hhmmss.x@swissvc510110v1.swissv.ch>

And here’s the latest from DomainFactory. I suppose I should offer them consulting services on updating their 11 year old installation of Request Tracker.

Subject: [domainfactory.de #3540733] EUWIFO spammer 
From: "Martin Schiftan" <abuse@df.eu>
Reply-To: abuse@df.eu
In-Reply-To: 
Precedence: bulk
X-RT-Loop-Prevention: domainfactory.de
RT-Ticket: domainfactory.de #3540733
Managed-by: RT 2.0.14 (http://bestpractical.com/rt/)
RT-Originator: mschiftan at domainfactory.de
To: me
Date: Thu, 15 Nov 2012 15:07:26 +0100


Dear Sirs,

thank you for the Link.

Were are sorry about that, but we could not block a complete Domain with
only 1 Complaint from a Spam-Trap.

When we received more Complaints, we can send our Customer warning with
cost sheet and ofter 2 or 3 more complaints from a new newsletter, we
can terminate the domain.