The email originates from 176.31.245.142 [valuemail.info], unsuprisingly hosted by OVH (I guess they have a pink contract). The spammer behind this has attempted to use a privacy protection service to hide their name.. but, if you know how to look past these things it turns out to be:
Registrant ID:DI_20570283
Registrant Name:Gopal Tripathi
Registrant Organization:Telesys Soft Solution
Registrant Street1:F - 317,
Registrant Street2:Lado Sarai
Registrant Street3:
Registrant City:New Delhi
Registrant State/Province:Delhi
Registrant Postal Code:110030
Registrant Country:IN
Registrant Phone:+011.46106945
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:tss@telesyssoftsolution.com
The email then gets relayed via 50.115.163.86 [wonderpaperz.in] (DNSSlave, US) registered as follows:
Registrant ID:DI_23748812
Registrant Name:Mr Siddharth
Registrant Organization:Wonder Paperz
Registrant Street1:A-56, Sector-52
Registrant Street2:
Registrant Street3:
Registrant City:Noida
Registrant State/Province:Uttar Pradesh
Registrant Postal Code:201301
Registrant Country:IN
Registrant Phone:+91.9899890413
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:sirastogi@gmail.com
The link in the email goes to sony-ent.org (hahah, lawsuit anyone?) hosted on 85.195.126.107 (Velia.net, Germany) registered to:
Registrant ID:CR_23391330
Registrant Name:Amya Das
Registrant Organization:Creation Advertising
Registrant Street1:L-178, Mahipalpur Extantion,
Registrant Street2:
Registrant Street3:
Registrant City:New Delhi
Registrant State/Province:Delhi
Registrant Postal Code:110037
Registrant Country:IN
Registrant Phone:+91.32315335
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:info.creation@creationadvertising.in
The sony-ent.org link then goes back to valuemail.info where it comes up with a spam page that pulls a load of images from hyphentechnologies.co.uk (69.163.195.67, New Dream Network LLC, US) registered to:
Registrant:
Hyphen Technologies
Registrant type:
Unknown
Registrant's address:
289, Site-1
Vikas Puri
New Delhi
Delhi
110018
India
Finally, there's a link to click through to moviemart.in (72.18.156.53, Wehostwebsites, US) registered to:
Registrant ID:N5R-2356376
Registrant Name:SURESH MANSHARAMANI
Registrant Organization:MOVIE MART
Registrant Street1:138A First Flr,Taimoor Nagar,New Friends Colony
Registrant Street2:
Registrant Street3:
Registrant City:NEW DELHI
Registrant State/Province:DL
Registrant Postal Code:110065
Registrant Country:IN
Registrant Phone:+91.1126917777
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:suresh@moviemart.in
The people behing the moviemark.in site also sell questionable perfume, so these DVDs may be questionable too. In any case, you should never buy from spammers as it just encourages them..
From: Movie Mart moviemart@sony-ent.org
Reply-To: moviemart@sony-ent.org
To: donotemail@wearespammers.com
Date: 15 October 2012 03:58
Subject: Re: Your Entertainment Partner - MovieMart.in
 |
 |
 |
 |
 |
No comments:
Post a Comment