MainSleaze

This is a totally boring spammer, but it’s hitting Finnish “B2B” addresses obtained from the Business Information System, and the messages sent to Finnish spamtraps are in unusually credible Finnish for a foreign spammer.  It is advertising translation services, booking assistance for hotels &c, and the provision of online shops, among other things.

It identifies itself as Promohouse Ltd. 307 Victoria House, Victoria, Mahe, Seychelles. This text is in all spams and could be used as content-based filter fodder if somebody was so inclined.  Personally, I view content-based spam filters as a waste of CPU cycles and would rather see this operation bumped off the edge of the Internet…

Spamming IPs: Probably not an exhaustive list.

• [78.31.69.217] (myLoc managed IT AG, Düsseldorf, Germany)
• [85.25.141.184] (BSB Service GmbH, part of intergenia AG, Hürth, Germany)
• [178.238.227.12] (Giga-Hosting GmbH, München, Germany)
• [193.164.131.57] (Giga-Hosting GmbH)
• [193.164.133.194] (Giga-Hosting GmbH)
• [200.106.145.42] (Hosting Panama)
• [200.106.146.122] (Hosting Panama)
• [213.239.225.236] (Hetzner Online AG, Gunzenhausen, Germany)

Domain names involved in spam (another non-exhaustive list):

• booking-generator.com, booking-generator.org
• company-network.org, company-network.info
• company-network-europe.info
• company-network-sy.info
• company-solutions.org
• guest-generation.org
• guest-promo.com, guest-promo.net, guest-promo.org
• increase-booking.com, increase-booking.net, increase-booking.org
• network-agencies.org
• tourism-marketing-service.com, tourism-marketing-service.net
• tourism-promotion.com
• tourism-solution.com
• utilization-manager.net