Oct
12
Fonecta Oy: Emailing dead addresses, not respecting opt-out
Fonecta Oy, a Finnish media agency, continues to spam addresses at a domain that has changed hands two years ago via their CRM tool despite endless e-mail opt-outs, phone calls, etc. Fonecta have assured the domain owner on a number of occasions that all old addresses have been removed, but actions speak louder than words: the spam continues.
Sending IP: 87.108.54.133
Spam headers:
From noreply@kontaktikone.fi Wed Oct 12 14:34:18 2011 Return-Path: <noreply@kontaktikone.fi> Received: from ironhide.roottori.fi (mail133.kontaktikone.fi [87.108.54.133]) by mail.atrotossavainen.fi (Postfix) with ESMTP id 0F1CE794DCB for <erkki.partanen@atro.fi>; Wed, 12 Oct 2011 14:34:18 +0300 (EEST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; t=1318419258; s=default; d=kontaktikone.fi; i=noreply@kontaktikone.fi; h=Date:From:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Message-ID:To; bh=7T3gPHQtM3wCroTtRlyLI9g/2x4swaqGSgBksggOr7E=; b=OgKYPTDpxqDZy0spHDmhu4RPa1R2uIo6Fs8TYGyce3sdXqg5CXjYilwZzf3ZL+hF AZyFDvPOPSHkUnso3zEQ6w== Date: Wed, 12 Oct 2011 14:34:17 +0300 (EEST) From: Fonecta <noreply@kontaktikone.fi> Subject: =?utf-8?B?QXNpYWthc3RpZWRvdGUgcGFsdmVsdW11dXRva3Nlc3Rh?= Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=mimepart_4e95754e41c35_481ea33b92c12a0; charset=UTF-8 Precedence: bulk Content-Transfer-Encoding: 8bit Message-ID: <40428.114577402.VSJC7UI2ZBQDYB@moutique.com> To: erkki.partanen@atro.fi
More of the same, from a different spamming IP: the central MXes of Saunalahti.fi. The facts that tie this back to Fonecta are “Suuri Palkintokysely”, kontaktikone.fi, and moutique.com.
Return-Path: <mediasales@elisa.fi>
Received: from gw03.mail.saunalahti.fi (gw03.mail.saunalahti.fi [195.197.172.111])
by mail.atrotossavainen.fi (Postfix) with ESMTP id 1223915FAB8
for <x@atro.fi>; Thu, 20 Oct 2011 08:45:07 +0300 (EEST)
Received: from gradientti.saunalahti.fi (gradientti.saunalahti.fi [62.142.117.46])
by gw03.mail.saunalahti.fi (Postfix) with ESMTP id C5ECE21684D
for <x@atro.fi>; Thu, 20 Oct 2011 08:45:04 +0300 (EEST)
From: Saunalahti/ Suuri Palkintokysely <noreply@kontaktikone.fi>
Subject: =?utf-8?B?U3V1cmkgUGFsa2ludG9reXNlbHk6IFZhbGl0c2UgaXRzZWxsZXNpIMOkbHlwdWhlbGluIQ==?=
MIME-Version: 1.0
Date: Thu, 20 Oct 2011 08:38:17 +0300 (EEST)
Content-Type: multipart/alternative; boundary="=-1319025076-619222-22361-8577-5-="
Message-ID: <J398FHPXBOGQ63OVCYZYBUOCGO8MTN@moutique.com>
Content-Transfer-Encoding: 8bit
Precedence: bulk
To: x@atro.fi
Gave them another call this morning. Mentioned names of people who have previously handled the issue. Let’s see…
More spam. Why would I have expected anything else?
From mediasales@elisa.fi Tue Nov 1 12:51:33 2011
Return-Path:
Received: from gw01.mail.saunalahti.fi (gw01.mail.saunalahti.fi [195.197.172.115])
by mail.atrotossavainen.fi (Postfix) with ESMTP id 78E85794DC2
for ; Tue, 1 Nov 2011 12:51:33 +0200 (EET)
Received: from gradientti.saunalahti.fi (gradientti.saunalahti.fi [62.142.117.46])
by gw01.mail.saunalahti.fi (Postfix) with ESMTP id 3BC02151E11
for ; Tue, 1 Nov 2011 12:51:32 +0200 (EET)
From: Saunalahti/A-lehdet
Subject: =?utf-8?B?U2F1bmFsYWhkZW4gYXNpYWthc2V0dW5hIGxlaHRpbGFoamF0IGlzw6RsbGUgcHVvbGVlbiBoaW50YWFu?=
MIME-Version: 1.0
Date: Tue, 1 Nov 2011 12:51:32 +0200 (EET)
Content-Type: multipart/alternative; boundary=”=-1319793358-224178-26501-6102-10-=”
Message-ID:
Content-Transfer-Encoding: 8bit
Precedence: bulk
To: x@atro.fi
A Finnish vendor/manufacturer of security software (gee, how many are there) has bought a list from Fonecta and spammed atro.fi addresses. Domain wide opt-out sent. Let’s see if it elicits a reaction. If not… they’re next in line for a mention of their own here.
True to their colour, Fonecta are mailing out to addresses that have been dead for a decade…