An open letter to Filip Poutintsev / Lateralus Enterprise / Tavoite Media
This was sent in private email on Feb 12 in response to a spam. No response has been received so far.
Filip Poutintsev / Lateralus Enterprise,
Would you kindly supply me (and the Data Protection Ombudsman, while you are at it) with the Description of Personal Data File of the “Lateralus Enterprise B2B register” you refer to in the spam below.
As you know, you are legally required (Personal Data Act, Section 10) to have one, and to keep it available to anyone.
The spam you sent today violates Section 15 of the Business Information Act by not containing the legally required information on the business that sent it. I know it’s you, of course, and so do a lot of people all around the world now that Spamhaus singled you out and Mikko Hyppönen from F-Secure tweeted the news to his followers:
http://www.spamhaus.org/rokso/spammer/SPM1313/filip-poutintsev
The register you have violates Section 9.2 of the Personal Data Act because it contains outdated and erroneous personal information. It is also likely that it contains fictitious (and therefore erroneous by definition) personal data – at least your spam has been seen in such addresses before.
The spam you sent today violates Section 26 of the Act on the Protection of Privacy in Electronic Communications by having been sent to natural persons without prior consent, prior business contact, or business position justification. It also violates Section 28 of the same Act through the fact that the sender’s identity is deliberately hidden.
Please consider dropping out of the email business, for at least six months. See http://www.spamhaus.org/faq/section/ROKSO%20FAQ#4 for the reason why. I know you have tons of useful skills in electronic media otherwise, and in marketing in general, but now that you have come to the ROKSO spotlight, your spamming days are as good as over. You need to reinvent yourself and your business if you want to stay in business. You can’t go on like this. Every single ISP on the planet monitors the ROKSO. You have no future in email for as long as you are on the ROKSO, and even after that, if you were to resume spamming, it appears to be Spamhaus policy that all dormant ROKSO records would be made visible again.
Best regards, Atro.
On Wed, Feb 12, 2014 at 04:mm:ss PM +0400, Panosta sähköpostimarkkinointiin! wrote: > Tahdotko yrityksellesi lisää oikeita asiakkaita? Oletko jo käyttänyt > perinteisiä mainosmenetelmiä ilman riittävän hyvää tulosta, ja nyt > olisi aika kokeilla jotain uutta? Suoramarkkinointi on todistetusti > yksi tehokkaimmista markkinointimuodoista. Sähköisellä > suoramarkkinoinnilla tavoitat uudet asiakkaat nopeasti, helposti ja > ennen kaikkea kustannustehokkaasti! > > Meillä on Suomen laajin ja kattavin yritys- ja päättäjärekisteri! > > » Kontakteja sekä sähköpostiosoitteita on rekisterissä yhteensä yli > 500'000 joista noin puolet on yritysten päättäjien. > » Rekisterissä voi olla useampi päättäjä yhdestä yrityksestä. > » Tiedot on päivitetty viimeksi syksyllä 2013 aikana. > » Tietolähteinä ovat julkiset yritysrekisterit ja yrityshakemistot. > » Tiedot toimitetaan Excel tai CSV -tiedostona. > » Kaikki sähköpostit toimitetaan erillisenä tekstitiedostona. > » Mahdollisuus ostaa myös tietty osa rekisteristä (esim. alue tai > toimiala). > > Tarjous! Hinta vain 1990 € + alv. - normaalisti 2900 € + alv. > > Klikkaa tästä ja lue lisää! > > http://klassegehalt.com/link.php?M=x&N=2&L=1&F=T > > Neljä eri rekisteriä: > Tuote koostuu neljästä eri rekisteristä, joista kolme on > yritysrekisteriä ja yksi päättääjärekisteri. Rekistereissä on eri > tietoja yrityksistä ja niissä on hieman päällekkäisyyksiä. > > Rekisteri sisältää perustiedot yrityksistä, mm. > » Yrityksen nimi, postiosoite, puhelinnumero, sähköpostiosoite, > verkkosivut, toimiala. > > Sekä tiedot päättäjistä, mm. > » Päättäjän nimi, sähköpostiosoite, päättäjän titteli ja > vastuualue. > > Tarjoamme ajankohtaiset ja kattavat tiedot tiedot yrityksistä sekä > päättäjien yhteystiedot. Rekisteri soveltuu erinomaisesti tukemaan B2B > markkinointia. Voit poimia rekisteristä helposti tarvitsemasi tiedot > hakuominaisuuksien avulla ja kohdentaa viestisi oikeille tahoille. > > Tehokasta B2B sähköpostimarkkinointia! > > Saat tuhansia kävijöitä päivässä mille tahansa sivustolle. > Verrattuna > muuhun Internet mainontaan kustannukset ovat useita kertoja > alhaisemmat! > > Tilaamalla yritysrekisterin voit tehdä tuloksellista > sähköpostimarkkinointia. Markkinointirekisterin avulla > suoramarkkinointi on kustannustehokasta ja helppoa: poimit laajasta > yrityshakemistosta kontaktit ja lähetät B2B markkinointikampanjasi > vaivattomasti. > > Osoitelähde: Lateralus Enterprise B2B rekisteri > > Poistu listalta. > > > > Your email client cannot read this email. > To view it online, please go here: > http://klassegehalt.com/display.php?M=x&C=x&S=2&L=1&N=2 > > > To stop receiving these > emails:http://klassegehalt.com/unsubscribe.php?M=x&C=x&L=1&N=2
The things Filip does were also mentioned in Kauppalehti yesterday, although no names were named.
Not much has changed; Poutintsev has registered himself a new domain to replace the now dead tavoite.com; tavoite-media.com (Creation Date: 02-mar-2014, Admin Email: filip.poutintsev@gmail.com ) and is spamming using obfuscated links and what appears to be open proxies or botnets or whatnot, advertising his ‘website services’.
I’ll gladly forward couple of his spams if they’re of interest to someone.
[whois.domain.com]
Domain Name: TAVOITE-MEDIA.COM
Registry Domain ID: 1848857285_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.domain.com
Registrar URL: http://www.domain.com
Updated Date: 2014-03-02 19:10:11
Creation Date: 2014-03-03 00:10:11
Registrar Registration Expiration Date: 2015-03-03 00:10:11
Registrar: Domain.com, LLC
Registrar IANA ID: 886
Registrar Abuse Contact Email: compliance@domain-inc.net
Registrar Abuse Contact Phone: +1.6027165396
Reseller: FatCow
Reseller: support@fatcow.com
Reseller: 888-278-9780
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Filip Poutintsev
Registrant Organization: Filip Poutintsev
Registrant Street: Kaskipuunkaari 7 M 38
Registrant City: Espoo
Registrant State/Province: NA
Registrant Postal Code: 02340
Registrant Country: FI
Registrant Phone: +1.0405940756
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: filip.poutintsev@gmail.com
Registry Admin ID:
Admin Name: Filip Poutintsev
Admin Organization: Filip Poutintsev
Admin Street: Kaskipuunkaari 7 M 38
Admin City: Espoo
Admin State/Province: NA
Admin Postal Code: 02340
Admin Country: FI
Admin Phone: +1.0405940756
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: filip.poutintsev@gmail.com
Registry Tech ID:
Tech Name: Eric White
Tech Organization: FatCow
Tech Street: 10 Corporate Dr., Suite 300
Tech City: Burlington
Tech State/Province: MA
Tech Postal Code: 01803
Tech Country: US
Tech Phone: +1.8882789780
Tech Phone Ext:
Tech Fax: +1.7812726550
Tech Fax Ext:
Tech Email: support@fatcow.com
Name Server: NS2.FATCOW.COM
Name Server: NS1.FATCOW.COM
DNSSEC: Unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2014-03-02 19:10:11 <<< Registration Service Provider: FatCow, support@fatcow.com
888-278-9780
“Uhri”, if you don’t mind posting IPs and domain names used, those can be used to correlate stuff with materials received by others.
If I had to guess, I’d say
Received: from server.advida.net (unknown [69.10.35.135])
had something to do with it.
Indeed they did. And so does 213.252.244.179 / klasseleben.com.
I forwarded a couple of his latest spams with full headers to you guys.
Have fun.
[whois.verisign-grs.com]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
No match for domain “TAVOITE-MEDIA.COM”.
>>> Last update of whois database: Wed, 05 Mar 2014 17:15:44 UTC <<<
Noticed the same thing, earlier the domain or hosting service was suspended by fatcow.
Efficient!
Sadly enough,though, we’ll probably just see Poutintsev pop up with another registry / host / domain tomorrow.
This guy sure wants to be a pain in the ass (for as many people as he can).
Received: from 82mx.in (unknown [173.214.179.94])
http://bit.ly/1cao8sM takes to http://tavoite-media.net/verkkosivupaketti
$ host tavoite-media.net
tavoite-media.net has address 50.31.162.83
tavoite-media.net mail is handled by 0 tavoite-media.net.
$ host 50.31.162.83
83.162.31.50.in-addr.arpa domain name pointer server201.webhostingpad.com.
[whois.enom.com]
Domain Name: TAVOITE-MEDIA.NET
Registry Domain ID: NA
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2014-03-05 09:45:58Z
Creation Date: 2014-03-05 17:45:00Z
Registrar Registration Expiration Date: 2015-03-05 17:45:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: FILIP POUTINTSEV
Registrant Organization: LATERALUS ENTERPRISE
Registrant Street: 5005 NEWPORT DR SUITE 503
Registrant City: ROLLING MEADOWS
Registrant State/Province: IL
Registrant Postal Code: 60008
Registrant Country: US
Registrant Phone: +1.3103162744
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: FILIP.POUTINTSEV@GMAIL.COM
Registry Admin ID:
Admin Name: FILIP POUTINTSEV
Admin Organization: LATERALUS ENTERPRISE
Admin Street: 5005 NEWPORT DR SUITE 503
Admin City: ROLLING MEADOWS
Admin State/Province: IL
Admin Postal Code: 60008
Admin Country: US
Admin Phone: +1.3103162744
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: FILIP.POUTINTSEV@GMAIL.COM
Registry Tech ID:
Tech Name: FILIP POUTINTSEV
Tech Organization: LATERALUS ENTERPRISE
Tech Street: 5005 NEWPORT DR SUITE 503
Tech City: ROLLING MEADOWS
Tech State/Province: IL
Tech Postal Code: 60008
Tech Country: US
Tech Phone: +1.3103162744
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: FILIP.POUTINTSEV@GMAIL.COM
Name Server: NS1.WEBHOSTINGPAD.COM
Name Server: NS2.WEBHOSTINGPAD.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-03-05 09:45:58Z
Poutintsev has gotten the hosting account for his .fi (http://www.tavoite-media.fi) domain suspended as well; did he use this for spamming after .net got closed, as expected?
He doesn’t even need to. Being on ROKSO, all of his IPs are immediately eligible for SBL listing merely by association.
Next up?
http://www.tavoite.net
tavoite.net A 198.38.82.100
Name: mocha3010.mochahost.com
Address: 198.38.82.100
Updated Date: 10-mar-2014
tavoitemedia.biz
Domain Registration Date: Wed Mar 05 18:24:43 GMT 2014
Registrant Name: Filip Poutintsev
Registrant Organization: Lateralus Enterprise
tavoitemedia.biz A 67.227.230.24
Name: svr139.fastwebhost.com
At the moment tavoite.net contains a browsable directory index linking it to Poutintsev:
Index of /
_vti_bin/
bisnesrekisteri.net/
cgi-bin/
Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.0-fips DAV/2 mod_python/3.3.1 Python/2.7.2 mod_bwlimited/1.4 mod_jk/1.2.35 mod_fcgid/2.3.6 mod_perl/2.0.6 Perl/v5.10.1 Server at http://www.tavoite.net Port 80
Would suspect tavoite.net to be the next host in use; the contents have now been replaced:
http://www.tavoite.net
Index of /
cgi-bin/
tavoitenew.zip
The .zip file is about 700Mb and possibly contains the actual WordPress site Poutintsev’ references in his spams..
Now: “Error establishing a database connection”. So he is definitely setting up the next Tavoite Media spamtarget site to tavoite.net :P.
Next up?
Domain Name:TAVOITEMEDIA.ORG
Domain ID: D171302255-LROR
Creation Date: 2014-03-05T17:32:20Z
Updated Date: 2014-03-05T17:32:20Z
Registry Expiry Date: 2015-03-05T17:32:20Z
Sponsoring Registrar:PDR Ltd. d/b/a PublicDomainRegistry.com (R27-LROR)
Sponsoring Registrar IANA ID: 303
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited
Domain Status: serverTransferProhibited
Registrant ID:DI_34549206
Registrant Name:Filip Poutintsev
Registrant Organization:Lateralus Enterprise
Registrant Street: Kaskipuunkaari 7 M 38
Registrant City:Espoo
Registrant State/Province:Uusimaa
Registrant Postal Code:02340
Registrant Country:FI
Registrant Phone:+358.0405940756
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:filip.poutintsev@gmail.com
Not suspended yet; hosted at Name: server21.nocdata9.com
Comment: Please Use abuse@interserver.net for all abuse complaints
Index of /
cgi-bin/
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 Server at http://www.tavoitemedia.org Port 80
CL-Yhtiöpalvelu Oy (see other post) confirmed today that they had purchased a batch from Tavoite Media (Filip Poutintsev), who spammed away in his usual fashion from 66.96.201.94 using the domain name 82mx.in. Soon to be seen at a ROKSO near you, no doubt.
Sheikh Ahmed, from the Colombian district of Karachi, is at it again. (And “Sheikh” had the nerve to ask that his name be stricken from this blog post! No way, José… I mean “Sheikh”!)
The IPs are already covered by http://www.spamhaus.org/sbl/query/SBL219661
Nombre del Dominio TAVOITE-MEDIA.CO
ID del Dominio D55949578-CO
Entidad responsable del Registrador DOMAIN.COM LLC
ID del Registrador 886
URL (Servicio Registro) Registrador whois.domain.com
Estado del Dominio ok
Variant TAVOITE-MEDIA.CO
Numero Identificación de Registrante TULC0D8LTRAFHGNN
Nombre del Registrante SHEIKH AHMED
Compañía/Organización de Registrante SHEIKH AHMED
Dirección del Registrante bldg 14c sunset lane 2 DHA pha
Ciudad del Registrante karachi
Departamento/Ciudad del Registrante NA
Código Postal del Registrante 75500
País de Registrante Pakistan
Código de País del Registrador PK
Teléfono de Registrante +1.1555365560
Correo electrónico del Registrante textharis@gmail.com
Numero Identificación de Contacto Administrativo TULC0D8LTRAFHGNN
Nombre de Contacto Administrativo SHEIKH AHMED
Compañía/Organización de Contacto Administrativo SHEIKH AHMED
Dirección de Contacto Administrativo bldg 14c sunset lane 2 DHA pha
Ciudad de Contacto Administrativo karachi
Estado/Provincia de Contacto Administrativo NA
Código Postal de Contacto Administrativo 75500
País de Contacto Administrativo Pakistan
Código de País de Contacto Administrativo PK
Teléfono de Contacto Administrativo +1.1555365560
Correo electrónico de contacto administrativo textharis@gmail.com
Numero Identificación de Contacto de Pago TULC0D8LTRAFHGNN
Nombre de Contacto de Pago SHEIKH AHMED
Compañía/Organización de Contacto de Pago SHEIKH AHMED
Dirección de Contacto de Pago bldg 14c sunset lane 2 DHA pha
Ciudad de Contacto de Pago karachi
Estado/Provincia de Contacto de Pago NA
Código Postal de Contacto de Pago 75500
País de Contacto de Pago Pakistan
Código de País de Contacto de Pago PK
Teléfono de Contacto de Pago +1.1555365560
Correo electrónico del Contacto de Pago textharis@gmail.com
Número Identificación del Contacto Técnico TUEHFVNBZOCSE41C
Nombre del Contacto Técnico Eric White
Compañía/Organización del Contacto Técnico Domain.com, LLC
Dirección del Contacto Técnico 10 Corporate Dr., Suite 300
Ciudad del Contacto Técnico Burlington
Departamento/Ciudad del Contacto Técnico MA
Código Postal del Contacto Técnico 01803
País del Contacto Técnico United States
Código de País del Contacto Técnico US
Teléfono del Contacto Técnico +1.8004033568
Fax del Contacto Técnico +1.7812726550
Correo electrónico del Contacto Técnico support@domain.com
Name Server NS1.TAVOITE-MEDIA.CO
Name Server NS2.TAVOITE-MEDIA.CO
Creado por el Registrador DOMAIN.COM LLC
Ultima fecha de actualización por el Registrador DOMAIN.COM LLC
Fecha de Registro del Dominio Fri Apr 18 18:13:09 GMT 2014
Expiración del Dominio Fri Apr 17 23:59:59 GMT 2015
Ultima fecha de actualización del Dominio Thu Apr 24 12:29:37 GMT 2014
DNSSEC false
>>>> Whois database was last updated on: Mon Apr 28 20:12:22 GMT 2014 <<<<