Vistaprint: it’s not a company, it’s a remorseless spamming machine
I mentioned them here about a month ago. They have yet another spam^Wemail service provider, and it’s business as usual at Vistaprint: spam, even after the recipient has opted out. That’s illegal spam, in case you didn’t know.
In case anybody’s wondering about the title…
Verkkokauppaa.fi is owned by the sole proprietorship Suunnittelutoimisto Jotain… [Literally, “Design Agency Something…”] who are the current spam service provider, through the services they purchase from somebody in India.
Spamming IP: 64.191.37.53 (Hostnoc, suballocated to anonymous customer)
Spam headers:
From bounce@ecastserv108.info Wed Nov 23 20:47:59 2011 Return-Path: <bounce@ecastserv108.info> Received: from host.labooo.in (unknown [64.191.37.53]) by mail.atrotossavainen.fi (Postfix) with ESMTP id 6078F794FEE for <the same old address>; Wed, 23 Nov 2011 20:47:58 +0200 (EET) Received: from ecastserv108.info ([64.191.37.54] helo=jotain.mailbox247.info) by host.labooo.in with esmtpa (Exim 4.69) (envelope-from <bounce@ecastserv108.info>) id 1ROsmG-0006Jd-SO for the same old address; Fri, 11 Nov 2011 10:12:24 -0500 To: the same old address Subject: =?UTF-8?B?VmlzdGFwcmludCBwYWluYWEgMjUwIGvDpHludGlrb3J0dGlhIHZlbG9pdHVrc2V0dGEhICsgaWxtYWluZW4gbGVpbWFzaW4=?= Message-ID: <bac18009ccaaba56e030c55caf6ec5bb@jotain.mailbox247.info> Date: Fri, 11 Nov 2011 03:27:10 -0500 From: "Verkkokauppa Pro" <pro@verkkokauppaa.fi> Reply-To: pro@verkkokauppaa.fi MIME-Version: 1.0 X-Mailer-LID: 10 List-Unsubscribe: <http://jotain.mailbox247.info/unsubscribe.php?M=x&C=y&L=10&N=23> X-Mailer-RecptId: x X-Mailer-SID: 23 X-Mailer-Sent-By: 2 Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_10d21365cfb932a4f0cf0e0c2678c6ea" Content-Transfer-Encoding: 8bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - host.labooo.in X-AntiAbuse: Original Domain - infinitemho.fi X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ecastserv108.info Status: O Content-Length: 12762 Lines: 343
Human-readable spam content:
Saat 250 käyntikorttia ilmaiseksi. Painatus on ilmaista, maksat vain
käsittely- ja toimituskulut.Kokeilulahjana Vistaprintillä annamme sinulle ilmaiseksi 250 kpl
käyntikortteja ja leimasimen!Toimi nopeasti sillä Etusi on voimassa enää huomiseen!
http://jotain.mailbox247.info/link.php?M=x&N=23&L=4&F=T
Viestin
peruutus:http://jotain.mailbox247.info/unsubscribe.php?M=x&C=y&L=10&N=23Osoitelähde ja lisätiedot: Verkkokauppaa.fi , PL 301, 00101 Helsinki
At one point Vistaprint was supposed to be working with somebody on the team to cut down on spam. I believe that I will ask how that is supposed to be going, with a link to this blog.
http://www.spamhaus.org/sbl/listings.lasso?isp=vistaprint.com shows the White Star of Approval.
The comment in the very first blog post on this site suggests otherwise.
What gives?
Software glitch. Any domain listed in our database of “feeds” (ISPs or other entities responsible for one or more direct IP allocations from an RIR) shows up as “white star” if they have no current SBL listings assigned to that feed. Most spammers don’t own their own feeds, so this sort of thing fortunately doesn’t happen often. I’ve suggested that it should be fixed. We’ll see when/if somebody finds time to do it.
I also checked the SBL for listings for Vistaprint spam. There are considerably over 100 for spam sent to advertise Vistaprint, most of it snowshoe spam that abuses their affiliate network. None of that is assigned to the Vistaprint feed because it was sent from IPs that Vistaprint doesn’t own. The IP for http://www.vistaprint.com itself is on a Vistaprint IP, and is in and out of the SBL. Most recently, it was listed in November 2011.
Pingback: Suunnittelutoimisto Jotain…: Illegally spamming for spamming services » MainSleaze