MainSleaze

One of the many parties who spam the ten year old boxes are Vistaprint, whom I have discussed here before. The ESP is Relation & Brand, a Swedish operator.

It’s not the first time Vistaprint have spammed through Relation & Brand (my notes on that count go back to October 2010), but it may be the first time I’ve spotted them doing it during the existence of the Mainsleaze blog. Now what’s really surprising is that I have an email confirmation from the CEO of Relation & Brand dated October 25, 2011 that says they’ve closed the account of Vistaprint.

It turns out that there are a handful of business registrations in the Finnish Business Information System where the contact e-mail address is amongst my recent collection of ancient spamtraps. You’d think business owners would specify a new email that works once the old one died. You’d think business owners would notice the old one died. Not all did, so a few of our new traps get “legitimate” and fresh (as in, “B2B addresses freshly harvested from the BIS” kind of fresh) spam. Some of these businesses are sole individuals trading (“private persons carrying on trade” in the BIS parlance) and some of these email addresses clearly belong to natural persons (as in “firstname.lastname@domain.example” rather than “sales@business.domain.example”). So, whoever spams them is not just spamming, but illegally processing outdated and erroneous personal data as well.

Spamming IP: 213.174.90.233, 213.174.90.234, 213.174.90.235, 213.180.95.188

Spam headers:

Return-Path: <bounce_X@clickredirect.com>
Received: from mail-10.relationbrand.com (mail-10.relationbrand.com [213.180.95.188])
        by x (Postfix) with ESMTP id x
        for <x>; Tue, 14 Feb 2012 17:2x:xx +0200 (EET)
Received: from jEDMailer (mail-3x.relationbrand.com [195.178.171.156])
        by mail-10.relationbrand.com (Postfix) with ESMTP id x
        for <tx>; Tue, 14 Feb 2012 16:2x:xx +0100 (CET)
From: "Vistaprint" <professionalprinting@vistaprint.com>
To: <x>
Reply-To: "Vistaprint" <noreply.vistaprint@edirectweb.se>
Subject: X, saat 250 käyntikorttia + bonuksen - ilman sitoumuksia
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_moc.dnarbnoitaler.www"
Message-Id: <20120214152133.60C2A795615@mail-10.relationbrand.com>
Date: Tue, 14 Feb 2012 16:21:33 +0100 (CET)

Human-readable spam content: The text/plain part only has the opt-out and data controller information.

Jos viesti ei näy kunnolla, klikkaa täst
http://www.clickredirect.com/lr3.asp?mKey=x&cKey=x&mail=x

Tietosi salataan SSL 128bit -salauksella.
Osoitelähde: Euro Contact Pool SE 11970 Stockholm

Haluan poistaa osoitteeni Vistaprintin postituslistalta.
http://www.clickredirect.com/u.asp?yKey=x&email=x&rURL=http://e2.relationbrand.com/par_k88/_unsubscribe-default/mail.html