MainSleaze

Sendloop.com, a Turkish ESP (a d/b/a of Oktet Bilisim Ltd), provides services to a group of Finnish spammers sending mail to addresses that have been dead for two years plus and ignores complaints.

First spam seen July 15, 2011, first complaint sent July 25, 2011. No response. Filled in their web-based abuse form today (Oct 12), let’s see if that elicits a response. Also no response from The Planet. At least erikoisetu.com was recently de-cloaked and suspended by Go Daddy… Not that it stops the owner from spamming. Update Oct 14: The web based complaint was responded to, and after a few rounds of conversation, Sendloop both offered to reveal the sender’s contact details (which they haven’t done despite two responses saying yes please; update Oct 19 – they did, but it’s all bogus, of course) as well as indicated they had cancelled the account.  The conversation said they had unsubscribed my address in July – but the address from which I sent the complaint never was on a list, and I didn’t identify the recipient, only indicated the need for a domain-wide opt-out, so much good did it do.

Sending IP: 207.44.148.18

WHOIS:

[rwhois.theplanet.com]
%rwhois V-1.5:003eff:00 whois.theplanet.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-EV1-9
network:Auth-Area:207.44.128.0/17
network:Network-Name:TPIS-BLK-207-44-148-0
network:IP-Network:207.44.148.16/28
network:IP-Network-Block:207.44.148.16 - 207.44.148.31
network:Organization-Name:Oktet Bilisim Ltd.
network:Organization-City:Istanbul
network:Organization-Zip:34147
network:Organization-Country:TUR
network:Description-Usage:customer
network:Server-Pri:ns1.theplanet.com
network:Server-Sec:ns2.theplanet.com
network:Tech-Contact;I:abuse@theplanet.com
network:Admin-Contact;I:abuse@theplanet.com
network:Created:20071031
network:Updated:20071031

Spam headers:

From bounce-10032-21861900-1260-1129584@sendloop-8.com  Wed Oct 12 17:34:37 2011
Return-Path: <bounce-10032-21861900-1260-1129584@sendloop-8.com>
Received: from sendloop-1.com (unknown [207.44.148.18])
        by mail.atrotossavainen.fi (Postfix) with ESMTP id 67FBB794DCB
        for <arvi.kaariainen@atro.fi>; Wed, 12 Oct 2011 17:34:37 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=sl; d=erikoisetu.com;
 h=Message-ID:Date:Subject:From:Reply-To:To:MIME-Version:Content-Type:list-unsubscribe; i=info@erikoisetu.com;
 bh=no8p08Ii0CsfX6EcDoqV0yyOlAA=;
 b=lF8IyioDcQfUE+AC73gUTUx/l6zaga1TuxMijmGuCeLIad1b76lFyzf/mGe1F4cCkUnwjNoI8+UG
   90G7PbD3AhJuIkxNF7M6OihpySeNVwcn+sRicC8VaWu87qiiT6wXqwL5oo+EOm0bLBYhAXsfCyin
   nx42BkBUmaEvoV2F/q8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=sl; d=erikoisetu.com;
 b=XoOkwahXGI/lJj18/yACq3QgV23f6RlvNkvy9Fn5CU87fnuwXoYBr1M+6M9a2aRcbpMxO3y7RBQk
   SaeAuRmJEBrUHmsQau+eV88rMPPFiFZkJ6g3nQhWDkW5VXHE3L1VVYgO5ruyU+ecWdelI6RoYViH
   ArZaZLRkFdTJIxgHpr0=;
Message-ID: <1318430075.thing4e95a57b7b64f@sendloop.com>
Date: Wed, 12 Oct 2011 17:34:35 +0300
Subject: Olet saanut laatubokserit ilmaiseksi
From: Minna Laine <info@erikoisetu.com>
Reply-To: Minna Laine <info@erikoisetu.com>
To: arvi.kaariainen@atro.fi
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="_=_swift_v4_13184300754e95a57b7c5ee_=_"
x-fblid: 1jm-NDl8fHx8MTA3MTY2fHx8fGFydmkua2FhcmlhaW5lbkBhdHJvLmZpfHx8fDZ8fHx8NTUzNw%3D%3D
X-MessageID: NDl8fHx8MTA3MTY2fHx8fGFydmkua2FhcmlhaW5lbkBhdHJvLmZpfHx8fDZ8fHx8NTUzNw%3D%3D
Precedence: bulk
x-sl-score: -1
list-unsubscribe: <mailto:unsubscribe-10032-21861900-1260-1129584@sendloop-1.com>,
 <http://erikoisetu.sendloop.com/unsubscribe.php?Version=2&Params=MmJnbS9yeS90NS9ycw%3D%3D>
x-job: 5537
x-sl1: 5537
X-Priority: 3 (Normal)
X-Report-Abuse: <http://sendloop.com/report_abuse/proceed/NDl8fHx8MTA3MTY2fHx8fGFydmkua2FhcmlhaW5lbkBhdHJvLmZpfHx8fDZ8fHx8NTUzNw%3D%3D>
x-mailer: Sendloop.com
x-virtual-mta: sendloop-1
x-complaints-to: abuse@sendloop.com
Status: O
Content-Length: 5893
Lines: 131