lumilahti.fi / ilmainentuote.fi: Spamming to sell spamming services
I’m getting to this a little late, but it’s only because I was notified of the same happening again by somebody else.
ilmainentuote.fi, maapallo.fi and lumilahti.fi, all three registered to a private person (see FICORA web-based WHOIS for the identity of said person – also indicated below in recent spam text) are involved in what pretends to be B2B spam. Only there isn’t a B on the left hand side of the 2. I wonder what it should be called then. Clearly it’s not C2B, because the sender is operating in a way that resembles a business. Maybe they don’t want to tell the taxman. There clearly is a business, because you can’t rent PO Boxes in Finland without a business ID.
They spammed my biz’ WWW published address on Monday, January 14, via SendGrid, who, true to their usual standard, informed me right away that not only had they termed the account, they had done so even before I had sent in a complaint.
Now they’re spamming through the newsletter services of Nebula Oy, a local hosting service provider, who made the somewhat unusual decision of relaxing their AUP last year in such a way as no longer to forbid uses of the service that are against good manners.
Human-readable spam content from a month ago:
Hei!
Mikäli tämä posti tuli vahingossa väärälle henkilölle, ohjaattehan sen oikealle taholle, kiitos!
Suomen suurin mainosjakopalvelu pystyy toimittamaan yrityksenne, verkkokauppanne tai tuotteenne mainoksen yli 60 000 suomalaiselle ihmiselle 24 tunnin sisällä tilauksestanne… siis vaikka jo heti huomenna jos varauskalenterissamme vain on tilaa. Tarjoamme palvelun kertakustannuksella rajoitetun ajan nimelliseen 199 euron hintaan. Hinta sisältää kaiken, ja kyseessä on siis vain kertakustannus. Pidä kuitenkin kiirettä, sillä pystymme ottamaan vain enintään yhden asiakkaan per päivä.
Teimme teille mainosvideon josta selviää miten ja miksi voimme tarjota laajamittaista mainontaa lähes ilmaiseksi. Videon voit katsoa kotisivuiltamme http://www.ilmainentuote.fi (yrityksellenne suunnattu mainosvideo löytyy alasivulta “Yrityksille”). Sähköpostin lopussa on myös suora linkki YouTubeen, jos haluatte katsoa videon sieltä.
Kiitos ja menestystä vuodelle 2013
Ystävällisin terveisin,
Mikko Aaltonen
Maapallo.fi
Ilmainentuote.fi
kampanja@maapallo.fiMainosvideon suora osoite YouTubeen: http://www.youtube.com/watch?feature=player_embedded&v=2pqUG-1xbtM&noredirect=1
Human-readable recent spam content:
Hei!
Pikkulinnut kertoivat että kaipailisitte uutta mainoskanavaa?
Tiesittekö, että 199 eurolla toimitamme mainoksenne jopa 60 000
suomalaiselle lähes henkilökohtaisesti?Osoitteesta http://www.lumilahti.fi löydätte videon jossa kerromme
asiasta hieman enemmän.Yhteistyöterveisin,
Juha Vainio
juha@lumilahti.fi
posti@lumilahti.fi
http://www.lumilahti.fi
Hämeentie, Turku
PL 85, 20321 TurkuLähde: Haikun yritysrekisteri
http://link.hosting.fi/x.x.x-REMOVE/
More spam from the same, and again through SendGrid, which is a little surprising. Not that they didn’t respond quickly indicating it had been terminated again, but the fact that the same spammer managed to slip through the cracks is a little worrisome. On the other hand, when the information at hand is insufficient to draw any connections between the previous and the current instance, what do you do? (Collect more information at signup?)
Now spamming through Elastic Email.
Spamming through Nebula again, hosted by Louhi.net. Now also involving something that resembles a real business (in their pathetic excuse for a description of personal data file, they announce “Sinatra Oy”; while a business with this name does not exist in the Finnish Business Information System, a search with Ol’ Blue Eyes’ name reveals Sinatra-Suomi Oy, registered as a business on March 6, 2013, and resident in the appropriate P.O. Box in Turku. Further checks at yritystele.fi indicate that Juha Mikael Vainio is the sole board member and Charejaa Tran is the required vice board member of this new business.)
Spam content (original was all HTML, this is with all tags removed):
Same stuff goes round and roud again:
And headers:
Thanks. Unfortunately including angle brackets (< >) within a comment makes the content interpreted as a HTML tag. If you post comments that have those characters, and you’d like to keep the content inside visible, you need to replace them with the corresponding HTML entities < and >…