We see a lot of B2B spam coming from IPs on the Comcast business network that never seem to get blacklisted (comcastbusiness.net: 173.166.91.134 and nearby IPs). The spam subject lines read like:
- 2011 Expert’s Guide to ERP Implementations
- Expert’s Report on ERP Success
- 2011’s Top Hosted CRM Systems
- 2011’s CRM Leaders Evaluated for You
- Top Hosted CRM Systems Evaluated
- 2011 ERP Evaluation Guide
- 2011 VoIP Evaluation Guide
These spams typically have a link to systemssoftwareevaluations.com or rainmaker-partners.com and resemble some spam we’ve seen from emarketer.com, although we’re told it’s probably not related.
The sender addresses used in these spams is usually a throwaway domain instead of the client’s real domain name; for example:
erpaffiliates.comerpevaluations.comphonesystemevaluations.cominside-erp.comsherpaerp.comcrmaffiliates.com
The senders don’t seem to notice or care that all the mail they send to our network gets sent back to them, day after day. Presumably, they get paid to send it, and it doesn’t matter where it ends up!
We also block most of the 216.24.225.* IP range, another group of throwaway email domains.