Eksenbilgisayar: A Turkish Computing and Electronics Store Spams an American… Spamtrap?
Eksenbilgisayar, an online computing equipment and electronics store based in Istanbul, Turkey, a few weeks ago started to spam an email address that, if it ever existed, was closed in 2002. Most of the content of the email is in remotely-hosted images. The ESP is MadMimi.
The spams are in Turkish, but I was able to get the sense of them thanks to Google’s helpful and increasingly accurate Translate service. Since the email address to which these spams were sent has not been valid for a decade, and since in this case a typo appears unlikely, I suspect that Eksenbilgisayar might have purchased a list.
NOTE: MadMimi’s bulk emails are normally sent from a domain with the name mimimail#.com, where # stands for a one- or two-digit number. Tagged URLs in their emails use the hosts mim.io and go.madmimi.com.
Sending IP: 207.210.122.237
Spam Sample:
Actual Headers:
Received: from mimimail9.com (mimimail9.com [207.210.122.237])
by <xxx> (Postfix) with ESMTP id <xxx>
for <xxx>; Thu, 24 May 2012 12:xx:xx -0000 (UT)
DKIM-Signature: <xxx>
Received: by mimimail9.com (PowerMTA(TM) v3.5r15) id <xxx>
for <xxx>; Thu, 24 May 2012 08:xx:xx -0400
(envelope-from <mailman@mimimail9.com>)
Date: Thu, 24 May 2012 08:xx:xx -0400
From: Eksenbilgisayar <kampanya@eksenposta.com>
Sender: Eksenbilgisayar <kampanya=eksenposta.com@mimimail9.com>
To: <xxx>
Message-Id: <<xxx>@worker9.madmimi.managedmachine.com.tmail>
Subject: =?utf-8?Q?Yaz=C4=B1c=C4=B1_F=C4=B1r?=
=?utf-8?Q?satlar=C4=B1n=C4=B1_?=
=?utf-8?Q?Ka=C3=A7=C4=B1rmay=C4=B1n?=
=?utf-8?Q?=2E=2E=2E?=
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=<xxx>
Precedence: bulk
Mimiaid: <xxx>
List-Unsubscribe: <mailto:mailman@mimimail1.com?subject=Unsubscribe <xxx>>,
<http://go.madmimi.com/opt_out?<xxx>>
Readable Email:
From: Eksenbilgisayar <kampanya@eksenposta.com>
To: <spamtrap>
Subject: Yazıcı Fırsatlarını Kaçırmayın…
Bu e-postayı görüntülemekte zorluk mu yaşıyorsunuz? Tarayıcınızda açmak için buraya tıklayın.
<removed>
Mail gönderim listemizden çıkmak için buraya tıklayın.
Bu mail i arkadaşlarınız ile paylaşmak istermisiniz.
They’re hitting a spamtrap at $DAYJOB too. I’ll see if they are hitting any traps at Spamhaus and if they are, list them. I don’t expect that MimiMail will let the issue drag on. They annoyed a few antispammers years ago, but have become quite a good ESP with a solid antispam team.
Cool. Let us know what you find.
Hi there! Thanks for reporting this and for saying nice things about Mad Mimi. I’m sorry you received this, and that we didn’t see this report in May on spambouncer soon enough, so that I could tell you what was happening and take your report into account as well.
We worked with these senders starting in mid-May to improve sending practices, however, these senders are no longer with us as of just this afternoon.
We’re still reviewing what occurred in this particular account approval process and are putting in some improvements as a result.
I’m still at sally@madmimi.com if you would like more info.
Thanks for the update, Sally. I don’t need more information; I’ll just watch for more spam from your customers, whom I suspect left because MadMimi won’t let them email a dirty list. <wry grin> It really is a pity that so many companies don’t do a better job of listening to ESPs about spam and deliverability. You’d think that people who pay for expert advice would take that advice. :/ But many companies don’t want to hear what they need to hear.