UKangaroo Marketing: Selling Marketing Services to a BUNCH of Spamtraps :(
UKangaroo Marketing, an search engine and social media marketing company, sent bulk email advertisements for their services to a number of spamtraps last night. Some of these spamtraps are pure spamtraps; they never existed at all. This company appears to have spammed a purchased list; with this number of spamtrap hits, other explanations are simply too implausible. The ESP is Sendgrid.
The domain ukangaroomarketing.com is registered with Whois Privacy Protection Service, a whois cloaking service much favored by spammers. That fact left me thinking about whether this company should qualify as a mainsleaze company at all rather than simply a spammer spamming to market their own services, but I giving them the benefit of the doubt. However, take note: if you want me or most antispammers to see you as a legitimate company, registering your mailserver domain with any sort of Whois cloaking service is NOT how to do it.
Sending IP: 50.31.33.207
Spam Sample:
Actual Headers:
Received: from o1.mail.ukangaroomarketing.com (o1.mail.ukangaroomarketing.com [50.31.33.207])
by <xxx> (Postfix) with SMTP id <xxx>
for <xxx>; Tue, 7 Feb 2012 12:xx:xx -0600 (CST)
DKIM-Signature: <xxx>
DomainKey-Signature: <xxx>
Received: by 10.36.xx.xx with SMTP id <xxx>
Tue, 07 Feb 2012 11:xx:xx -0600 (CST)
Received: from 127.0.0.1 (unknown [<xxx>])
by <xxx>.sendgrid.net (SG) with ESMTP id <xxx>
for <xxx>; Tue, 07 Feb 2012 11:xx:xx -0600 (CST)
Content-Type: multipart/alternative;
boundary="<xxx>"
MIME-Version: 1.0
From: ukangaroo <promotions@ukangaroomarketing.com>
To: <xxx>
Reply-To: replies@ukangaroomarketing.com
Subject: Put your business on Google and get more calls
Message-ID: <xxx>
Date: Tue, 07 Feb 2012 11:xx:xx -0600 (CST)
X-Sendgrid-EID: <xxx>
X-Sendgrid-ID: <xxx>
list-unsubscribe: <http://mail.ukangaroomarketing.com/wf/unsubscribe?<xxx>>
Readable Email:
From: ukangaroo <promotions@ukangaroomarketing.com>
To: <spamtrap>
Subject: Put your business on Google and get more calls
Email not displaying correctly? View it (http://sendgrid.com/wf/webmail?<xxx> ) in your browser
GOOGLE FRONT PAGE PLACEMENT FOR YOUR BUSINESS!
No Hassle. We put your business on the front page of Google within 10 minutes.
<removed>
ukangaroo is a Google Engage Partner
————————————————————
To unsubscribe please click here (http://mail.ukangaroomarketing.com/wf/unsubscribe?<xxx> )
ukangaroo
3651 Lindell Road, Las Vegas, NV, 89103
BTW, I tweeted about this to @Sendgrid. They tweeted back; their compliance team is on it.
Hello,
My name is Ryan. I am SendGrid’s Lead Abuse Engineer. I have Suspended this account. Your report is congruent with what we see the account doing.
Thank you for your report on this. It is especially good to know that they sent to addresses that have never existed.
Terribly sorry for the inconvenience.
Ryan
Thanks for the update, Ryan, and nicely handled. I think that this is not a customer that you (or any sane ESP) would want. 😉