MainSleaze

Still going on as before. Processing erroneous personal data (list harvested from web pages, including things that nobody but spiders would notice), not indicating the address source, not indicating who is behind the operation, not indicating how to be removed from the list, the list of illegal aspects of this spam goes on and on.

Spam headers:

From tiina@ilmainenseo.com  Wed May  8 hh:mm:ss 2013
Received: from seopersona.net (unknown [198.144.186.176])
 by x (Postfix) with ESMTP id x
 for <a bogus address>; Wed,  8 May 2013 hh:mm:ss +0300 (EEST)
Date: Wed, 8 May 2013 hh:mm:ss +0000
To: x
From: Tiina Laine <tiina@ilmainenseo.com>
Subject: Veloitukseton linkkien vaihto
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_x"
Message-Id: <20130508hhmmss.x@seopersona.net>

Human-readable spam contents:

Hei,

Nimeni on Tiina,

Haluaisin ehdottaa ilmaista linkkien vaihtoa domain.example -sivustosi tai muun omistamasi sivuston kanssa. Tulet varmasti ilahtumaan kuullessasi, että minulla on nyt useita tuottoisia laatuprojekteja ilmaista linkkien vaihtoa varten, joiden uskon hyödyttävän meitä molempia.

Ilmoitathan minulle, jos olet kiinnostunut kuulemaan lisää yksityiskohtia tai sinulla muuta mielessä aiheeseen liittyen.

Vastaustasi odottaen,

Tiina Laine
http://www.seofinland.net

Domain registrations clearly involved:

[whois.moniker.com]

Domain Name: ILMAINENSEO.COM
Registrar: MONIKER

Registrant [4116114]:
        Maria R. Clark Tiina@ilmainenseo.com
        4163 Twin Oaks Drive
        Grand Rapids
        ME
        49503
        US

Domain servers in listed order:

        NS1.MONIKERDNS.NET         207.189.109.117
        NS2.MONIKERDNS.NET         63.149.176.25
        NS3.MONIKERDNS.NET         207.189.109.118
        NS4.MONIKERDNS.NET         63.149.176.26

        Record created on:        2013-01-23 08:26:34.0
        Database last updated on: 2013-01-24 09:54:00.627
        Domain Expires on:        2014-01-23 08:26:54.0

[whois.moniker.com]

Domain Name: SEOFINLAND.NET
Registrar: MONIKER

Registrant [4223115]:
        Kery Nieminen kery.nieminen@seofinland.net
        Snellmaninkatu 83
        ESPOO
        ESPOO
        02760
        FI

Domain servers in listed order:

        NS1.MONIKERDNS.NET         207.189.109.117
        NS2.MONIKERDNS.NET         63.149.176.25
        NS3.MONIKERDNS.NET         207.189.109.118
        NS4.MONIKERDNS.NET         63.149.176.26

        Record created on:        2012-05-20 10:53:51.0
        Database last updated on: 2013-05-06 08:04:07.05
        Domain Expires on:        2014-05-20 10:53:52.0

Domain registrations possibly involved:

[whois.moniker.com]

Domain Name: SEOPERSONA.NET
Registrar: MONIKER

Registrant [3812816]:
        Laura Matthews laura.matthews@seopersona.net
        2898 Archwood Avenue
        Hamilton Dome
        Hamilton Dome
        82427
        UK

Domain servers in listed order:

        NS1.MONIKERDNS.NET         207.189.109.117
        NS2.MONIKERDNS.NET         63.149.176.25
        NS3.MONIKERDNS.NET         207.189.109.118
        NS4.MONIKERDNS.NET         63.149.176.26

        Record created on:        2012-03-20 10:19:08.0
        Database last updated on: 2013-03-19 13:26:59.33
        Domain Expires on:        2014-03-20 10:19:09.0

Network registrations involved – sending IP:

[whois.arin.net]

ColoCrossing CC-05 (NET-198-144-176-0-1) 198.144.176.0 - 198.144.191.255
New Wave NetConnect, LLC CC-198-144-186-128-25 (NET-198-144-186-128-1) 198.144.186.128 - 198.144.186.255

NetRange:       198.144.186.128 - 198.144.186.255
CIDR:           198.144.186.128/25
OriginAS:       AS36352
NetName:        CC-198-144-186-128-25
NetHandle:      NET-198-144-186-128-1
Parent:         NET-198-144-176-0-1
NetType:        Reallocated
RegDate:        2012-10-03
Updated:        2012-10-03
Ref:            http://whois.arin.net/rest/net/NET-198-144-186-128-1

OrgName:        New Wave NetConnect, LLC
OrgId:          NWNL-1
Address:        2200 Busse RD
City:           Elk Grove Village
StateProv:      IL
PostalCode:     60007
Country:        US
RegDate:        2011-08-24
Updated:        2013-02-22
Ref:            http://whois.arin.net/rest/org/NWNL-1

OrgTechHandle: FABOZ55-ARIN
OrgTechName:   Fabozzi, Chris 
OrgTechPhone:  +1-716-435-7305 
OrgTechEmail:  chris@nwnx.net
OrgTechRef:    http://whois.arin.net/rest/poc/FABOZ55-ARIN

OrgNOCHandle: NOC12487-ARIN
OrgNOCName:   NOC
OrgNOCPhone:  +1-716-435-7305 
OrgNOCEmail:  engineering@chicagovps.net
OrgNOCRef:    http://whois.arin.net/rest/poc/NOC12487-ARIN

OrgAbuseHandle: ABUSE3146-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-716-435-7305 
OrgAbuseEmail:  abuse@chicagovps.net
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE3146-ARIN

Other hosts and networks involved:

$ host www.seofinland.net
www.seofinland.net has address 174.121.207.2
$ host www.ilmainenseo.com
www.ilmainenseo.com has address 199.192.231.250