MainSleaze

The old Military Industrial Buyer’s Guide spammers that I blogged about back in November 2011 are back under new domains (dodsupplier.com and dodworld.com) and slightly modified name (Federal Buyer’s Guide). Their ESP is still SendGrid.

As before, this organization is spamming a long-closed role address that never sent any email to anybody, and never received email except to deal with web site issues. I noted in early January that the spam from this sender had resumed after stopping for a few weeks over the holidays.

Sending IP: 208.115.239.82

Spam Sample:

Actual Headers:

Received: from o1.email.dodsupplier.com (o1.email.dodsupplier.com [208.115.239.82])
        by <xxx> (Postfix) with SMTP id <xxx>
        for <xxx>; Tue, 28 Feb 2012 12:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by 10.41.xx.xx with SMTP id <xxx>
        Tue, 28 Feb 2012 18:xx:xx +0000 (UTC)
Received: from durmstrang (unknown [10.41.xx.xx])
        by <xxx> (SG) with ESMTP id <xxx>
        for <xxx>; Tue, 28 Feb 2012 17:xx:xx +0000 (UTC)
Received: from localhost.localdomain (localhost [127.0.0.1])
        by durmstrang (Postfix) with ESMTP id <xxx>
        for <xxx>; Tue, 28 Feb 2012 10:xx:xx -0800 (PST)
MIME-Version: 1.0
Content-Transfer-Encoding: binary
Content-Type: multipart/alternative; boundary="<xxx>"
Date: Tue, 28 Feb 2012 10:xx:xx -0800
From: "Federal Buyers Guide" <ListingUpdate@dodsupplier.com>
To: <xxx>
Subject: 2012 ${v_Company} No cost updates Government Buyers Guide
list-unsubscribe: <http://email.dodsupplier.com/wf/unsubscribe?<xxx>
X-Mailer: Postfix (v2.7.1) Durmstrang
Message-Id: <<xxx>@durmstrang>
X-Sendgrid-EID: <xxx>
X-Sendgrid-ID: <xxx>

Readable Email:

From: Federal Buyers Guide <ListingUpdate@dodsupplier.com>
To: <spamtrap>
Subject: 2012 <xxx> No cost updates Government Buyers Guide

You must complete and return the attached application to list your company as available for government contracting and sales opportunities in www.gov-world.com. The information you provide will be made available to state, county, federal and military buyers.

There is no cost involved.

Link to application below:
http://www.dodworld.com/r20/index.cfm?<xxx>

Deadline for registration 03/06/2012
Client Services
ID: <xxx>

For more information write to us at:

Federal Buyers Guide, 228 West Carrillo Street, Santa Barbara, CA 93101

If you would like to unsubscribe and stop receiving these emails click here:

http://email.dodsupplier.com/wf/unsubscribe?<xxx>