I am on a RIM device, so I apologize in advance for not being able to address all of 
your issues immediately.

All abuse@ complaints are read by me and are not forwarded to the sender. 

The only case in which I would do this, is if you requested that I do so, or if you 
processed them through spamcop and selected boxes indicating that you wanted the 
message forwarded.

We do not show people detailed complaint information in the dashboard.  I will be 
happy to figure out a way to give you access so that you may see this yourself.

I urge you to send complaints.  This is the best way for us to tell that something is 
wrong with a bonded sender.

Also, I would be happy to provide anyone here my emergency contact information.  Let 
me know if you need it.  

Cyan

 -----Original Message-----
From:   Matt [mailto:[EMAIL PROTECTED]
Sent:   Sun Jan 18 13:54:03 2004
To:     [EMAIL PROTECTED]
Subject:        Re: [Declude.JunkMail] BONDEDSENDER, spam hit on Virtumundo

Cyan,

Please forgive me for being brash here.  I will not use your abuse system because of 
the following reason:


http://www.bondedsender.com/commercial.jsp
Get real-time data on deliverability measures. Bonded Sender provides a free 
personalized dashboard to monitor your complaint levels and alert you if you have been 
added to one of the 15 most widely deployed blacklists. 



I do not want to participate in a system that will share my abuse reports with a known 
spam house.  I neither want to give Virtumundo the benefit of this knowledge, nor do I 
want to expose myself any more than I already have because spam houses have been known 
to seek retribution, regardless of how slim that possibility may be.

IronPort has something like 10,000 mail gateways in service from which you collect 
real-time data, much of this data is exposed through your SenderBase site, along with 
Google's newsgroup archives, and even Virtumundo's own site, it shouldn't take but a 
second to confirm the true nature of the company in question.  I will provide a zip of 
the full messages in private only if it is not to be shared with this client, though I 
can't imagine why that would be necessary.  My expectation here is that Bonded Sender 
should have all it needs without my involvement to do the right thing, and in the 
future, be more proactive in signing on clients of this sort.

Again, please excuse my tone, but what I am trying to do here is force a change by 
voicing my honest opinion in a public forum, for whatever effect that may have.  If 
others feel that I am wrong to do so, I would encourage them to voice their opinions 
as well.

Thanks,

Matt



Cyan Callihan wrote:


Please send all of your complaints about virtumundo to [EMAIL PROTECTED]



I will investigate.



Cyan



 -----Original Message-----

From:   Matt [mailto:[EMAIL PROTECTED]

Sent:   Sun Jan 18 10:49:12 2004

To:     [EMAIL PROTECTED]

Subject:        Re: [Declude.JunkMail] BONDEDSENDER, spam hit on Virtumundo



Orin,



I found a total of 8 bonded messages from Virtumundo in my capture accounts in the 
last 5 days (all to the same user).  It's likely that some others were passed, or even 
deleted considering, so the total was probably 12-16 messages from this one source to 
this one user in all (passed entries were missed for two days).  Those IP's are as 
follows:





vl208-45.vmlocal.com [216.21.208.45] - Turn the email on your screen into a fax in 
their hand.

vl208-44.vmlocal.com [216.21.208.44] - Make your windows as pretty as the view.

vl208-52.vmlocal.com [216.21.208.52] - Too many shoes? Never heard of such a thing.

vl208-54.vmlocal.com [216.21.208.54] - Get help, and get out of debt.

vl208-67.vmlocal.com [216.21.208.67] - Answer all questions with a DNA test.

vl208-75.vmlocal.com [216.21.208.75] - When it comes to refinancing, there really is 
no time like the present.

vm208-78.adknow-net.com [216.21.208.78] - Low interest credit cards to get you back on 
your feet.

vm208-66.adknow-net.com [216.21.208.66] - Need student loan consolidation?



There's two things to note here; 1) the first 6 were held because I have a filter from 
Kami that tracked the REVDNS entry, but not the last two, 2) these are posted in order 
of being received, and they clearly were moving up their list of IP's in order to 
avoid detection, and then they changed their reverse DNS name as well (which worked in 
totality when bonded on my system).



My point really is that if Bonded Sender really cared about "guaranteed legitimate 
E-mail", they would have done 10 minutes of due diligence and figured out what 
Virtumundo really was before ever listing them in the first place.  The Bonded Sender 
site in fact reads like a brochure for bulk-mailers talking about how many systems 
they are whitelisted on, but they then turn around and protect companies like 
Virtumundo, either by design, or by a lack of quality control.  Either way, they need 
to seriously rethink their business strategy because if they keep slipping up like 
this, they won't be able to claim any value to their paying customers.



Personally, I feel like I was scammed.  No big deal, it was easy enough to fix.  I 
might suggest that some consideration be made to Declude's default inclusion and/or 
weighting of this test (scored at -20 currently).



Matt







Orin Wells wrote:





Forgive me if this has been addressed before, but I would like to hear



from Cyan what the policy and procedures are for de-listing a Bonded



Sender when it is apparent they have disseminated spam. If I were running



the show I would not only de-list them immediately, but I would bar the



company from ever re-gaining certification under any name.







Of course it has to be investigated to make sure the origin had not been



spoofed to protect the innocent from false spamming charges.



---



[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]







---



This E-mail came from the Declude.JunkMail mailing list.  To



unsubscribe, just send an E-mail to [EMAIL PROTECTED], and



type "unsubscribe Declude.JunkMail".  The archives can be found



at http://www.mail-archive.com.







  



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to