MainSleaze

Korpela Paper Ky (www, biz reg) is spamming to advertise bulk sales of loo roll directly from the factory.

I kid you not.

Seriously.

Spam to wipe your butt to. And they’re spamming with SendBlaster from their domestic IP address, which is indicated in the spam, and which appears to be live. I wouldn’t do anything with that knowledge, but other annoyed spam recipients just might, which is why it may not be such a smart idea.

They’re spamming via the mail server cluster of Saunalahti, a local consumer ISP (a d/b/a of Elisa plc, ex Helsinki Telephone Co), who turn a blind eye to spam (which is not all that surprising given that a few years ago, they illegally blocked their customers from mailing the regexps “myuserid@a few domains” and “myfirstname.mylastname@”, yes, at any domain, including their own and those of their customers, in order to stop the flow of spam from their servers to my address, never mind the fact that legitimate communications not only to me but to anybody else with the same name at any other domain were also blocked).

This time, Korpela Paper have bought an address list from My Favourite Spammer-Boi, that is, Tavoite Media (btw, www.tavoite.com is back in business on 85.17.126.206 (and a TUCOWS provided obfuscated domain registration) thanks to Webholder and LeaseWeb B.V. – with a blank page save for Error establishing a database connection) / Lateralus Enterprise / Bisnesrekisteri.fi. Prior to this, they were using address lists bought from Fonecta (yes, them of SBL166774 fame) for at least a year. I don’t have any visibility to the spam of Korpela Paper Ky before that, but others report that Korpela Paper Ky were spamming already in February 2011, to spam address files purchased from Suomen Markkinointirekisteri Oy.

Spamming IP: Saunalahti’s mail cluster at

Received: from emh01.mail.saunalahti.fi (emh01.mail.saunalahti.fi [62.142.5.107])
Received: from emh02.mail.saunalahti.fi (emh02.mail.saunalahti.fi [62.142.5.108])
Received: from emh03.mail.saunalahti.fi (emh03.mail.saunalahti.fi [62.142.5.109])
Received: from emh04.mail.saunalahti.fi (emh04.mail.saunalahti.fi [62.142.5.110])
Received: from emh06.mail.saunalahti.fi (emh06.mail.saunalahti.fi [62.142.5.116])

Recent spam headers:

From tarjous@korpelapaper.fi Fri Apr 12 21:mm:ss 2013
Return-Path: <tarjous@korpelapaper.fi>
Received: from emhX.mail.saunalahti.fi (emhX.mail.saunalahti.fi
        [62.142.5.X])
        by x (Postfix) with ESMTP id x
        for <x>; Fri, 12 Apr 2013 21:mm:ss +0300 (EEST)
Received: from saunalahti-vams (vsX-X.mail.saunalahti.fi [62.142.5.X])
        by emhX.mail.saunalahti.fi (Postfix) with SMTP id x
        for <x>; Fri, 12 Apr 2013 21:mm:ss +0300 (EEST)
Received: from emhX.mail.saunalahti.fi ([62.142.5.X])
        by vsX-XX.mail.saunalahti.fi ([62.142.5.X])
        with SMTP (gateway) id x; Fri, 12 Apr 2013 21:mm:ss +0300
Received: from a88-114-163-39.elisa-laajakaista.fi
        (a88-114-163-39.elisa-laajakaista.fi [88.114.163.39])
        by emhX.mail.saunalahti.fi (Postfix) with ESMTP id x
        for <x>; Fri, 12 Apr 2013 21:mm:ss +0300 (EEST)
MIME-Version: 1.0
From: Korpela-Paper Ky <tarjous@korpelapaper.fi>
Reply-To: tilaus@korpelapaper.fi
To: x
Subject: Tilaa WC-ja talouspaperit suoraan tehtaalta
Content-Type: multipart/related;
        type="text/html";
        boundary="----=_NextPart_x_x_x.x"
X-Mailer: SmartSend.2.0.116
Date: Fri, 12 Apr 2013 21:mm:ss +0300
Message-ID: <x@korpela2>
X-Antivirus: avast! (VPS 130412-0, 12.04.2013), Outbound message
X-Antivirus-Status: Clean
X-Antivirus: VAMS
Content-Length: 85219
Lines: 1130

The loo roll pitch: There’s never been a plaintext part at all. Just a bit of HTML and two images. Images omitted, HTML included:

Säästä rahaa ja vaivaa tilaamalla WC-ja talouspaperit suoraan paperitehtaalta
perille toimitettuna. Kuljetus on ilmainen ja saat maksuaikaa
Tehdas sijaitsee Kokemäellä
www.korpelapaper.fi

Jos mainos ei näy oikein klikkaa tästä

http://www.korpelapaper.fi/uusi/index.php?sivu=Tilaus&kieli=1&r_id=x

 

Lähde: Bisnesrekisteri

Jos ette halua vastaisuudessa postia ilmoitattehan siitä.

 

 

 

Reilu ale myös tilausmääristä