HansaLeads: yet another new Finnish B2B spammer (NOT RESOLVED!)

HansaLeads Oy is using Rackspace’s Mailgun arm to send out Finnish B2B spam suggesting that recipients purchase B2B spamming services from them. That’s so ’90’s.

The spam message fails the Section 25 (Personal Data Act) test: there is nothing about the address file that they used to send out the spam or its data controller. The data file fails the Section 9 test, of course, as outdated and erroneous personal information are involved, which is hardly surprising given the provenance (it is Finnish Biz Info System sourced data in one way or the other). That also means the spam is illegal according to Section 200 of the Information Society Code (earlier, Section 26 of the Act on the Protection of Privacy in Electronic Communications), because you can’t legally spam natural people here. They should also have mentioned their VAT ID in the spam, which means it fails the Section 15 (Business Information Act) test.

Do you want your business to collaborate with these people? I didn’t think so.

11 Responses to HansaLeads: yet another new Finnish B2B spammer (NOT RESOLVED!)

  1. Mailgun have terminated HansaLeads Oy and so this matter has been marked “resolved.”

  2. hansaleads.hlo.fi spamming from Mailgun today (Jul 19, 2016), so removed the “RESOLVED” label from the post. Fresh domain registered only a month ago.


    [whois.ficora.fi]

    domain: hlo.fi
    descr: HansaLeads Oy
    descr: 26318957
    address: Hansaleads Oy
    address: Vattuniemenkatu 21
    address: 00210
    address: Helsinki
    phone: +358-468102202
    status: Granted
    created: 13.6.2016
    modified: 16.6.2016
    expires: 13.6.2017
    nserver: dns19.ovh.net [Ok]
    nserver: ns19.ovh.net [Ok]
    dnssec: no

  3. Mailgun termed them again. The matter can’t be marked resolved because as long as Hansaleads are in this business… It is resolved for Mailgun, for now, and they’ve found a new home with a favourite of other Finnish spammers.

    A most interesting trolling phone call was received this morning from 0400 357741, which is the number of Timo Tontti. The call has been recorded and can be posted online if Mr Tontti so wishes.

  4. Not to be deterred by terminations, HansaLeads registered yet another new domain name last week


    Domain Name: hll1.net
    Registry Domain ID: 2052429706_DOMAIN_NET-VRSN
    Registrar WHOIS Server: whois.ovh.com
    Registrar URL: http://www.ovh.com
    Updated Date: 2016-08-15T10:08:24.0Z
    Creation Date: 2016-08-15T10:06:11.0Z
    Registrar Registration Expiration Date: 2017-08-15T10:06:11.0Z
    Registrar: OVH, SAS
    Registrar IANA ID: 433
    Registrar Abuse Contact Email: abuse@ovh.net
    Registrar Abuse Contact Phone: +33.972101007
    Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
    Registry Registrant ID:
    Registrant Name: HansaLeads Oy

    and promptly signed up with Mailgun again, having in the meantime perhaps suffered yet another termination in the hands of the Greeks in Britain, and spammed again.

  5. Received: from smtp01.ei05.eu (smtp15.emailinvest.com [188.40.248.17])
    From: Nicole Holmberg <nicole.holmberg@hansaleads.hle1.net>
    Subject: Myynnin tehostamisesta
    

    This is the Bulgarian ISP Hot Group Ltd, obtaining services from Hetzner.

    [whois.ovh.com]
    Domain Name: hle1.net
    Registry Domain ID: 2059073619_DOMAIN_NET-VRSN
    Registrar WHOIS Server: whois.ovh.com
    Registrar URL: http://www.ovh.com
    Updated Date: 2016-11-02T15:09:09.0Z
    Creation Date: 2016-09-13T05:50:12.0Z
    Registrar Registration Expiration Date: 2017-09-13T05:50:12.0Z
    Registrar: OVH, SAS
    Registrar IANA ID: 433
    Registrar Abuse Contact Email: abuse@ovh.net
    Registrar Abuse Contact Phone: +33.972101007
    Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
    Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
    Registry Admin ID:
    Admin Name: HansaLeads Oy

  6. inetnum:        188.40.22.224 - 188.40.22.231
    netname:        HOT-GROUP-LTD
    descr:          Hot Group Ltd
    country:        DE
    
    inetnum:        188.40.248.16 - 188.40.248.23
    netname:        HOT-GROUP-LTD
    descr:          Hot Group Ltd
    country:        DE
    
    inetnum:        46.4.152.224 - 46.4.152.255
    netname:        NEVUP-LTD
    descr:          NEVUP Ltd
    country:        DE
    

    All on Hetzner, of course.

  7. Two DigitalOcean VPSes, 37.139.31.50 and 95.85.58.219, are rented out to Nevi Koeva, a Bulgarian entity that provides services to HansaLeads.

    But it looks like they felt the need to branch out, because outi dot piiparinen at elkraft dot live was spamming the usual HansaLeads content from Moosend yesterday. Note the past tense; the UK/Greek ESP Moosend is a MAAWG member.

  8. https://tietopalvelu.ytj.fi/yritystiedot.aspx?yavain=2668827&tarkiste=EC406D7C6434A81AD4050071FC77DBE294839145http://www.yritystele.fi/yrityksen-tiedot/sender-suomi-oy/taloustiedot/1363354 – HansaLeads have registered a new company
    purchased a pre-created company and renamed it Sender Suomi Oy, on 25 Aug 2017. The new company is “untainted” by any association to the previous two, but it quacks like a duck and walks like a duck.

Leave a Reply

Go back to top