MainSleaze

Back in November, I noted that my favourite spammer-boi had moved househis Bidniz HQ. It appears from the Finnish Business Information System that as of March 25, the Spam HQ is back in Espoo, at Kaskipuunkaari 7 M 38, 02340 ESPOO, which is a “right-of-occupancy” housing estate. According to the two results of a Fonecta Finder reverse lookup, the ownership of the phone number 040-594 0756 indicates the corresponding change both for Tavoite Media and the owner.

I wonder what happened to tavoite.com. I was trying to check whether the physical address change was indicated there, but…

$ host tavoite.com
tavoite.com has address 127.0.0.1
tavoite.com mail is handled by 0 tavoite.com.

The NS is provided by Hostgator.com. I really wonder what happened.

It’s good to have friends, though.

[whois.ficora.fi]

domain:   tavoitemedia.fi
descr:    Latreralus Enterprise
descr:    21129735
address:  -
address:  Valliniemankatu 6 F 59
address:  48900
address:  Kotka
phone:    0405940756
status:   Granted
created:  13.9.2012
modified: 28.2.2013
expires:  13.9.2013
nserver:  ns3.webholder.net [Ok]
nserver:  ns4.webholder.net [Ok]
nserver:  ns2.webholder.net [Ok]
nserver:  ns1.webholder.net [Ok]
dnssec:   no

webholder.net belongs to Webholder, another private person carrying on trade (biz reg). Alexander Lemberg is well aware of the spamming activities of his buddy and chooses to ignore them. Likewise for their ISP:

$ for i in 1 2 3 4; do host ns${i}.webholder.net; done
ns1.webholder.net has address 85.17.154.28
ns2.webholder.net has address 95.211.111.40
ns3.webholder.net has address 85.17.126.206
ns4.webholder.net has address 95.211.111.12

$ for i in 85.17.154.28 95.211.111.40 85.17.126.206  95.211.111.12; do host $i; done
28.154.17.85.in-addr.arpa domain name pointer server.webholder.net.
40.111.211.95.in-addr.arpa domain name pointer anubis.webholder.net.
206.126.17.85.in-addr.arpa domain name pointer monk.webholder.net.
12.111.211.95.in-addr.arpa domain name pointer ns4.webholder.net.

$ for i in 85.17.154.28 95.211.111.40 85.17.126.206  95.211.111.12; do whois $i@whois.ripe.net | egrep -v '^%|^ *$' | head -5; done
[Querying whois.ripe.net]
[whois.ripe.net]
inetnum:        85.17.154.0 - 85.17.154.255
netname:        LEASEWEB
descr:          LeaseWeb
[Querying whois.ripe.net]
[whois.ripe.net]
inetnum:        95.211.109.0 - 95.211.111.127
netname:        LEASEWEB
descr:          LeaseWeb
[Querying whois.ripe.net]
[whois.ripe.net]
inetnum:        85.17.126.0 - 85.17.126.255
netname:        LEASEWEB
descr:          LeaseWeb
[Querying whois.ripe.net]
[whois.ripe.net]
inetnum:        95.211.109.0 - 95.211.111.127
netname:        LEASEWEB
descr:          LeaseWeb