So who’s selling email addresses today? The same people as usual! (and using ever-changing names and domain names, as always).
The “Sloan Marketing/Data Champions” group just sent us spam using return addresses from mailsi.biz, intersoftech.com, and infinity-intellectual.com.
One of them was sent from a new spam server: texserver13.net (we had seen their texasserver.net spam server before). texserver13.net was just registered two weeks ago and doesn’t have a web site. It doesn’t need one since it’s just a spam server.
Of course, we get more B2B spam than just these offers of lists of email addresses from India. We’ll probably talk about those other B2B spams here one day soon…
We’ve updated our SpamAssassin rules that we use for this B2B spam
describe B2BL_SL B2B Email addresses for sale (SL)
full B2BL_SL /(winn?consolutions?|(infinity|web)-intellectual|jaguarsus|emaillean|leadspackage|intersoftech|e(lead|source)|(infoe|edg|iba|co|infoe|send4|p-d)mails?|trackmye|usdatatrust|futuristicinc|krystallistonline|crystalcommunicationinc|express-mails|newsproexpress|(b2b|email)(data|lists?)(group|planet|web|division|source)|targetleadz|mercurydesk|businessinvites|invitebusinesses|initiateventure|database-media|prospect(advert|unlimited)|e(globesearch|mailslist)|specificroi|roi(emails|marketingcenter)|mails([i1]|eone)|globalitsearch|itdataweb|stillvisitmedium|(eddy|auth)mailer|webinarsrule|acquiredatanetworking|paper2green|worldwidemailaccess|erpusers|atcontactworld|(crunch|(the|my)green|ez|uslist|tailored)market(ers)?)\.(com|biz|net|us|org)/i
score B2BL_SL 20
describe B2BL_SL_SRV Domain touches/sends B2B spam (SL)
full B2BL_SL_SRV /((eddy|auth|iba)mailer|serveridream|idreambiz|salespass|superiorns|interactiveone|(tex(as)?|data|e)server2?|authsender|host(key53|hat|server045)|dns342|webhosting(cloud|noida)|srteck|stechblr|mail-zap|mailhostbox|mailbox29|nseasy)\.(com|net|info|biz|us)/i
score B2BL_SL_SRV 20