Fonecta Oy: Emailing dead addresses, not respecting opt-out

Fonecta Oy, a Finnish media agency, continues to spam addresses at a domain that has changed hands two years ago via their CRM tool despite endless e-mail opt-outs, phone calls, etc. Fonecta have assured the domain owner on a number of occasions that all old addresses have been removed, but actions speak louder than words: the spam continues.

Sending IP: 87.108.54.133

Spam headers:

From noreply@kontaktikone.fi  Wed Oct 12 14:34:18 2011
Return-Path: <noreply@kontaktikone.fi>
Received: from ironhide.roottori.fi (mail133.kontaktikone.fi [87.108.54.133])
by mail.atrotossavainen.fi (Postfix) with ESMTP id 0F1CE794DCB
for <erkki.partanen@atro.fi>; Wed, 12 Oct 2011 14:34:18 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; t=1318419258;
s=default; d=kontaktikone.fi; i=noreply@kontaktikone.fi;
h=Date:From:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Message-ID:To;
bh=7T3gPHQtM3wCroTtRlyLI9g/2x4swaqGSgBksggOr7E=;
b=OgKYPTDpxqDZy0spHDmhu4RPa1R2uIo6Fs8TYGyce3sdXqg5CXjYilwZzf3ZL+hF
AZyFDvPOPSHkUnso3zEQ6w==
Date: Wed, 12 Oct 2011 14:34:17 +0300 (EEST)
From: Fonecta <noreply@kontaktikone.fi>
Subject: =?utf-8?B?QXNpYWthc3RpZWRvdGUgcGFsdmVsdW11dXRva3Nlc3Rh?=
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=mimepart_4e95754e41c35_481ea33b92c12a0; charset=UTF-8
Precedence: bulk
Content-Transfer-Encoding: 8bit
Message-ID: <40428.114577402.VSJC7UI2ZBQDYB@moutique.com>
To: erkki.partanen@atro.fi

5 Responses to Fonecta Oy: Emailing dead addresses, not respecting opt-out

  1. More of the same, from a different spamming IP: the central MXes of Saunalahti.fi. The facts that tie this back to Fonecta are “Suuri Palkintokysely”, kontaktikone.fi, and moutique.com.


    Return-Path: <mediasales@elisa.fi>
    Received: from gw03.mail.saunalahti.fi (gw03.mail.saunalahti.fi [195.197.172.111])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id 1223915FAB8
    for <x@atro.fi>; Thu, 20 Oct 2011 08:45:07 +0300 (EEST)
    Received: from gradientti.saunalahti.fi (gradientti.saunalahti.fi [62.142.117.46])
    by gw03.mail.saunalahti.fi (Postfix) with ESMTP id C5ECE21684D
    for <x@atro.fi>; Thu, 20 Oct 2011 08:45:04 +0300 (EEST)
    From: Saunalahti/ Suuri Palkintokysely <noreply@kontaktikone.fi>
    Subject: =?utf-8?B?U3V1cmkgUGFsa2ludG9reXNlbHk6IFZhbGl0c2UgaXRzZWxsZXNpIMOkbHlwdWhlbGluIQ==?=
    MIME-Version: 1.0
    Date: Thu, 20 Oct 2011 08:38:17 +0300 (EEST)
    Content-Type: multipart/alternative; boundary="=-1319025076-619222-22361-8577-5-="
    Message-ID: <J398FHPXBOGQ63OVCYZYBUOCGO8MTN@moutique.com>
    Content-Transfer-Encoding: 8bit
    Precedence: bulk
    To: x@atro.fi

  2. Gave them another call this morning. Mentioned names of people who have previously handled the issue. Let’s see…

  3. More spam. Why would I have expected anything else?

    From mediasales@elisa.fi Tue Nov 1 12:51:33 2011
    Return-Path:
    Received: from gw01.mail.saunalahti.fi (gw01.mail.saunalahti.fi [195.197.172.115])
    by mail.atrotossavainen.fi (Postfix) with ESMTP id 78E85794DC2
    for ; Tue, 1 Nov 2011 12:51:33 +0200 (EET)
    Received: from gradientti.saunalahti.fi (gradientti.saunalahti.fi [62.142.117.46])
    by gw01.mail.saunalahti.fi (Postfix) with ESMTP id 3BC02151E11
    for ; Tue, 1 Nov 2011 12:51:32 +0200 (EET)
    From: Saunalahti/A-lehdet
    Subject: =?utf-8?B?U2F1bmFsYWhkZW4gYXNpYWthc2V0dW5hIGxlaHRpbGFoamF0IGlzw6RsbGUgcHVvbGVlbiBoaW50YWFu?=
    MIME-Version: 1.0
    Date: Tue, 1 Nov 2011 12:51:32 +0200 (EET)
    Content-Type: multipart/alternative; boundary=”=-1319793358-224178-26501-6102-10-=”
    Message-ID:
    Content-Transfer-Encoding: 8bit
    Precedence: bulk
    To: x@atro.fi

  4. A Finnish vendor/manufacturer of security software (gee, how many are there) has bought a list from Fonecta and spammed atro.fi addresses. Domain wide opt-out sent. Let’s see if it elicits a reaction. If not… they’re next in line for a mention of their own here.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top