MainSleaze

Vivint, a company that develops and sells wireless home automation and home security systems, is sending bulk emails to an email address that as best I know never existed. The domain was a small domain and only one email address there normally receives any spam but pump’n’dump, botnet style pills, porn, and pirated goods. This isn’t that email address. The ESP is Lyris.

Sending IP: 208.66.205.25

Spam Sample:

Actual Headers:

Received: from mail33.up0.net (mail33.up0.net [208.66.205.25])
        by <xxx> (Postfix) with ESMTP id <xxx>
        for <xxx>; Sun, 11 Dec 2011 07:xx:xx -0600 (CST)
Received: from [10.0.xx.xx] ([10.0.xx.xx:xx] helo=<xxx>)
        by <xxx> (envelope-from <newsletter@up0.net>)
        (ecelerity 2.2.2.45 r(34222M)) with ESMTP
        id <xxx>; Sun, 11 Dec 2011 05:xx:xx -0800
To: <xxx>
Subject: =?utf-8?Q?Remote=20control=20lights,=20locks,=20thermostat=20and=2024x7=20security=20monitoring:=20$99=20activation?=
Date: Sun, 11 Dec 2011 05:xx:xx -0800
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
X-EmailAdvisor: <xxx>
X-Delivery: <xxx>
Reply-To: reply-<xxx>@up0.net
List-Unsubscribe: <mailto:unsubscribe-<xxx>@up0.net?subject=<xxx>>
Content-description: <xxx>
X-Complaints-To: abuse@up0.net
Message-Id: <<xxx>@up0.net>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="<xxx>6"
From: "=?utf-8?Q?Vivint?=" <reply-<xxx>@up0.net>

Readable Email:

From: Vivint <reply-<xxx>@up0.net>
To: <spamtrap>
Subject: Remote control lights, locks, thermostat and 24×7 security monitoring: $99 activation
Reply-To: reply-<xxx>@up0.net

Always be home for the holidays.

Call 855.616.6592 to enjoy enhanced security through home automation and $99 activation and $0 installation for a limited time

<removed>

This message was sent by:
Vivint Inc. | simply smarter | 4931 North 300 West, Provo, UT 84604 | 855.616.6592
Copyright © 2011 Vivint Inc. All rights reserved.

Privacy policy.
http://www.up0.net/ct.html?&ltxxx>

Unsubscribe
To unsubscribe from all of our mailings, send an email to: globalunsub-&ltxxx>@up0.net with the adddress: &ltxxx> in the subject line.