Caught in my spam trap - paramountbathrooms.com / .co.uk

Posted on Thu 14 March 2013 in Spam wars

I've decided to start naming and shaming the people who spam me. I have an email address hidden in the code of one of my web sites. It doesn't display to visitors but robots will read it.  To give the spammers a sporting chance, the email address is nospam@....mydomain... I then email them to ask where they got the address from.

Their response to asking where they got the email address from?

sales\@paramountbathrooms.com - asked twice, they never responded.

Observations

Their third spam email actually used someone elses domain (A foreign exchange business) as the sending address. I suspect that was an error rather than deliberate.

However, they are using multiple domain names to send the emails, probably so the spam filters don't associate the main domain name with the spam they are sending. You can see them using tradeonlyfurniture.com and parabath.asia

Email headers

Delivered-To: nospam@...
Received: by 10.76.167.167 with SMTP id zp7csp32517oab;
        Wed, 23 Jan 2013 12:37:15 -0800 (PST)
X-Received: by 10.68.200.228 with SMTP id jv4mr6271839pbc.139.1358973435326;
        Wed, 23 Jan 2013 12:37:15 -0800 (PST)
Return-Path: <bounce@parabath.asia>
Received: from smtp8.parabath.asia ([69.163.35.79])
        by mx.google.com with ESMTP id y9si21951485paw.333.2013.01.23.12.37.15;
        Wed, 23 Jan 2013 12:37:15 -0800 (PST)
Received-SPF: neutral (google.com: 69.163.35.79 is neither permitted nor denied by domain of bounce@parabath.asia) client-ip=69.163.35.79;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 69.163.35.79 is neither permitted nor denied by domain of bounce@parabath.asia) smtp.mail=bounce@parabath.asia;
       dkim=neutral (bad format) header.i=sales@tradeonlyfurniture.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=tradeonlyfurniture.com;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=sales@tradeonlyfurniture.com;
 bh=MfK1igzDiEHCErhHt425qJHnp9U=;
 b=4echPfnHqn2ifY7Xaj+DldwWQ+nivZa5wkBuiyZgzNgieicGahcw4s5O21+BDZiL2vv2RikvyhiT
   x91MY6LZAmmtEzdmxA3+lR9dHHZZ3oawyMjbexrG00L4V/dfyV6hJSMY3OG0rMbCw1Yn9+nyT9+q
   IT0F17OUd7GwYEAmsAk=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=tradeonlyfurniture.com;
 b=ePacO6003esB+1NpbkhcBQXBt136pmZoMYK0CZXhkmPwM2EVvD8JjDpmHUgg9LmHI6kblMkGbOtL
   6yc+xjwN2lp+SsHBQ/05sW3aEiP5lAFPST0tiJ7mw9AGQC67w0M9y9H1WW3kdUELIGSfk6zUgPAs
   S40ZGeeVnnxnwqyuBuw=;
To: nospam@....
Subject: Trade only furniture prices
Message-ID: <839dd245850f86aabd86a30cfa0b42e5@tradeonlyfurniture.com>
Return-Path: bounce@parabath.asia
Date: Wed, 23 Jan 2013 06:50:15 -0700
From: "Trade only furniture" <sales@tradeonlyfurniture.com>
Reply-To: sales@paramountbathrooms.com
MIME-Version: 1.0
X-Mailer-LID: 10
List-Unsubscribe: <%%HEADER_UNSUBSCRIBELINK%%>
X-Mailer-RecptId: 62235
X-Mailer-SID: 16
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_65aaffd92098ab741635a3be8d1c70fa"
Content-Transfer-Encoding: 8bit

--b1_65aaffd92098ab741635a3be8d1c70fa
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Paramount
Bathrooms
The UK's number 1 furniture supplier

www.paramountbathrooms.co.uk
sales@paramountbathrooms.co.uk
Dear nospam@....

----------The best quality furniture at TRADE ONLY prices-------

These prices are ongoing prices and not just a special offer.
At lot of our customers make a tidy sum each month just from
supplying

And another

Delivered-To: nospam@....
Received: by 10.76.167.167 with SMTP id zp7csp157377oab;
        Tue, 29 Jan 2013 12:16:01 -0800 (PST)
X-Received: by 10.68.209.230 with SMTP id mp6mr5645209pbc.8.1359490561457;
        Tue, 29 Jan 2013 12:16:01 -0800 (PST)
Return-Path: <bounce@tradeonlyfurniture.com>
Received: from smtp8.parabath.asia ([69.163.35.79])
        by mx.google.com with ESMTP id rg4si13467235pbc.323.2013.01.29.12.15.59;
        Tue, 29 Jan 2013 12:15:59 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of bounce@tradeonlyfurniture.com: DNS timeout) client-ip=69.163.35.79;
Authentication-Results: mx.google.com;
       spf=temperror (google.com: error in processing during lookup of bounce@tradeonlyfurniture.com: DNS timeout) smtp.mail=bounce@tradeonlyfurniture.com;
       dkim=neutral (bad format) header.i=sales@tradeonlyfurniture.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=tradeonlyfurniture.com;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=sales@tradeonlyfurniture.com;
 bh=C1fm2Xc58QbaHwLIozse44OOv2k=;
 b=eDKzKplg11sZC9VZ9BDdd8akalLTBTTwkq9UCoZ1q8YIcvGhK/42579pdUlfqbq5RRa+7yrZJDVx
   aUO9YHH5YxTzyW9CwYgFMBPK+7JJbDn0sxysm2VoVpTOn9elCJB2NEemaGqgLWGhekyOTgCaiFV2
   RCmp521KMsbff5ytDhM=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=tradeonlyfurniture.com;
 b=qwM01mq514iC3cPtNSY0wirabc77kDoDHlVwUxAniXnbTcScmfutrGfNdBk9uPTluUHqScisj56I
   16mUtss2YGGnu1tZigV1HD2oNyYWpb3Ye8/obDqvB38GivekgphvJ7AkzNbRsLmIpz1lrTnp7kvk
   gyxgqrQT2BugCifKflo=;
To: nospam@....
Subject: Trade only furniture prices
Message-ID: <df6a8af754cbc985f3203fb731b52eb7@tradeonlyfurniture.com>
Return-Path: bounce@tradeonlyfurniture.com
Date: Tue, 29 Jan 2013 05:44:08 -0700
From: "Trade only furniture" <sales@tradeonlyfurniture.com>
Reply-To: sales@paramountbathrooms.com
MIME-Version: 1.0
X-Mailer-LID: 11
List-Unsubscribe: <%%HEADER_UNSUBSCRIBELINK%%>
X-Mailer-RecptId: 66944
X-Mailer-SID: 18
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_f7c7d8b7d4c760c1fb02191f3bbcd7bf"
Content-Transfer-Encoding: 8bit

--b1_f7c7d8b7d4c760c1fb02191f3bbcd7bf
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Paramount
Bathrooms
The UK's number 1 furniture supplier

www.paramountbathrooms.co.uk
sales@paramountbathrooms.co.uk
Dear nospam@....

----------The best quality furniture at TRADE ONLY prices-------

These prices are ongoing prices and not just a special offer.
At lot of our customers make a tidy sum each month just from
supplying

And even after asking twice where they got the email address from they continue. Obviously I'm being too subtle.

Delivered-To: nospam@....
Received: by 10.76.80.100 with SMTP id q4csp149267oax;
        Tue, 12 Feb 2013 07:59:52 -0800 (PST)
X-Received: by 10.50.88.228 with SMTP id bj4mr4140815igb.85.1360684792036;
        Tue, 12 Feb 2013 07:59:52 -0800 (PST)
Return-Path: <bounce@tradeonlyfurniture.com>
Received: from smtp2.parabath.asia ([69.163.35.207])
        by mx.google.com with ESMTP id d6si1343494paw.260.2013.02.12.07.59.50;
        Tue, 12 Feb 2013 07:59:50 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of bounce@tradeonlyfurniture.com: DNS timeout) client-ip=69.163.35.207;
Authentication-Results: mx.google.com;
       spf=temperror (google.com: error in processing during lookup of bounce@tradeonlyfurniture.com: DNS timeout) smtp.mail=bounce@tradeonlyfurniture.com;
       dkim=neutral (bad format) header.i=tradeonly@trade.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=trade.com;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=tradeonly@trade.com;
 bh=8Uo4IJnEM6oSi3E92G1oYiNtO34=;
 b=lyn+8E1YRksUlkjO8KrBZHKd2tN+gE3Zzn7ZaggHoyWXB/6I1KiMoUy/OLjR8eAInODFG78Db1zT
   h9CxZjb3pK3kQFN/+1dGmV7l/cSAlYzS9xevch/k/ajJnxItJ46jHDAMQSWChZmWpo0ht7U/hHEt
   KsZ1hSEFAgGdWBFwm5s=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=trade.com;
 b=K/b9Slma+Ee6IbDL+B6k26rX3vULqOg61cmaXbndp6CeSkJKUwwSWL8kVw0SD4BlTyGccaO00wQ8
   JyJ6cYYO4CKPe7E4RVcSICAoNh4hgWBZy3Y74JHVSSFn92UCeMUOXBovMJF9zZuhovxQcpIltQj9
   A1bDsdr+gBr3ydoujEs=;
To: nospam@....
Subject: Why use anyone else?
Message-ID: <e5c5f6bf9ad026910436816c1c1cde83@tradeonlyfurniture.com>
Return-Path: bounce@tradeonlyfurniture.com
Date: Tue, 12 Feb 2013 01:30:29 -0700
From: "Why use anyone else for bathrooms?" <tradeonly@trade.com>
Reply-To: sales@paramountbathrooms.com
MIME-Version: 1.0
X-Mailer-LID: 11
List-Unsubscribe: <%%HEADER_UNSUBSCRIBELINK%%>
X-Mailer-RecptId: 66944
X-Mailer-SID: 32
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_8bce6dbe71b7111c29a83ae3a319f45e"
Content-Transfer-Encoding: 8bit

--b1_8bce6dbe71b7111c29a83ae3a319f45e
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Having trouble reading this email?
[http://tradeonlyfurniture.com/display.php?M=66944&C=a9ef5551407eef3445e5d28533ecfc6e&S=32&L=11&N=10]http://tradeonlyfurniture.com/display.php?M=66944&C=a9ef5551407eef3445e5d28533ecfc6e&S=32&L=11&N=10

[http://tradeonlyfurniture.com/link.php?M=66944&N=32&L=2&F=T]
www.paramountbathrooms.co.uk
email:sales@paramountbathrooms.co.uk       Tel:02392 586616

Newsletter
February 2012