Boerse.de: Stock Exchange Reports for a Spamtrap
German financial news portal Boerse.de (aka TM Börsenverag A.G.) has just begun to send bulk emails to an email address that, if it ever existed at all, closed in 2002. The ESP is Optivo.
Sending IP: 193.169.181.126
Spam Sample:
Actual Headers:
Received: from mail18-126.srv2.de (mail18-126.srv2.de [193.169.181.126])
by <xxx> (Postfix) with ESMTP id <xxx>
for <xxx>; Thu, 12 Jul 2012 16:xx:xx -0000 (UT)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Message-ID: <re-<xxx>@mailer.boersenverlag.de>
Date: Thu, 12 Jul 2012 18:xx:xx +0200 (CEST)
From: "boerse.de-Dailymail" <versand@mailer.boersenverlag.de>
Reply-To: re-<xxx>@mailer.boersenverlag.de
To: <xxx>
Subject: boerse.de-Dailymail
MIME-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
List-Id: <<xxx>.mailer.boersenverlag.de>
X-CSA-Complaints: whitelist-complaints@eco.de
X-ulpe: re-<xxx>@mailer.boersenverlag.de
Readable Email:
From: boerse.de-Dailymail <versand@mailer.boersenverlag.de>
To: <spamtrap>
Subject: boerse.de-Dailymail
Reply-To: re-<xxx>@mailer.boersenverlag.de
Sehr geehrte Damen und Herren,
wir freuen uns, Ihnen die neueste Ausgabe von boerse.de DAILY zu übersenden.
Inhalt
- boerse.de Expertenmeinungen
- boerse.de Top-Stories
- boerse.de Marktbericht
- Intraday DAX-Chart
- boerse.de Tops/Flops
<removed>
Impressum:
boerse.de DAILY (früher DailyMail) erscheint im zehnten Jahrgang und informiert börsentäglich über das Geschehen an den globalen Finanzmärkten.
boerse.de DAILY wird herausgegeben von der:
boerse.de Finanzportal GmbH
Dr.-Steinbeißer-Str. 10
83026 Rosenheim
Telefon: 08031 / 2033 – 200
Fax: 08031 / 2033 – 30
Internet: http://www.boerse.de
Email: kontakt@boerse.de
Geschäftsführer: Thomas Müller (V.i.S.d.P.)
Sitz der Gesellschaft: Rosenheim
Registergericht: AG Traunstein HRB 13847
Redaktion: Thomas Müller, Stephan Eicher
Haftungsausschluss: Die Mitteilungen in boerse.de DAILY beruhen auf Quellen, die wir für ertrauenswürdig halten. Trotz sorgfältiger Bearbeitung können wir für die Richtigkeit der Angaben und Kurse keine Gewähr übernehmen. boerse.de DAILY, sämtliche darin veröffentlichten grafischen Darstellungen und sonstigen Inhalte sind urheberrechtlich geschützt. Alle Rechte vorbehalten.
My notes for this sender on mailboxes that were dead for ten years in the meantime go back a little further. We started receiving this stuff pretty much right away in February, and it’s been pretty much daily ever since as you’d expect from a Dailymail.
Interesting. Usually when a company suddenly starts spamming old email addresses that you know have not heard from them previously for many years, that means that somebody purchased a list. That appears quite possible here, although I wasn’t going to make that allegation on the basis of a single spamtrap hit.
It’s also possible that they just don’t have a clue about bounce processing. There’s no way to tell if the original owners of the traps subscribed. As far as I can tell with my limited understanding of German and some help from automatic translators, the messages don’t contain anything in the way of informing the recipient of how and why it happened.
The spam was a straightforward stock report on the main German stock exchange and (as I recall) a few others where Germans often invest. (I speak German, no need to consult Google Translate.) 😉 In this case, the email address might have belonged to a legitimate subscriber over ten years ago. If Boerse.de can’t be bothered to process bounces, however, I’m surprised that I don’t see a lot ore spam from them. I have spamtraps that have belonged to me since the beginning that receive a great deal of German-language email and were owned by German speakers before they were donated to me or the domains lapsed.
So maybe it was just an error on their part. If I were receiving many such emails from them, I wouldn’t believe that it was just an error. 🙂