Saw your iWOWWE site..Would like to join!!

We had some spam from  an iWOWWE affiliate a while back. I think the spammer may have been terminated as there has been none since. This email is kinda puzzling though, as it indicates that iWOWWE is some sort of MLM. It looks some sort of business that seems to concentrate more on recruiting downline members than selling an actual product, which is some sort of video-by-email thing.

So this spam seems to be about recruiting downlines. It comes via 173.192.74.130 [smtp.com] but actually originates from 75.77.148.134. It's no surprise to find that this is an email address in Orlando, Florida, a state that seems to derive a great deal of business from scams and spam.

Let's look at 75.77.148.134 more closely. It's a Windstream Nuvox IP suballocated to:

network:ID:NUVOX-IPV4-20-01-16-9663.75.77.148.134.31
network:Network-Name:NUVOX-IPV4-20-01-16-9663
network:City:Orlando
network:State:FL
network:IP-Network:75.77.148.134/31
network:Organization;I:RED ROOF INN - KISSIMMEE -  -  KYNG'S HEATH RD - VOXIP WAN

It looks like the spammers are on holiday though, because "Phil & Bev Collins" don't seem to exist. The real owner of lnpsuccess5@gmail.com seems to be Greg Drake of Colorado, who sent this previous spam. Well.. that might be their real name because in that case the domains they were spamvertising were 54321action.com and dostepsnow.com with inconsistent WHOIS details:

      Elletson, Gene  homefreelikeme@yahoo.com
      9674 E. Arapahoe Rd. #120
      Greenwood Village, Colorado 80112
      United States
      +1.8885701039      Fax -- +1.8885701039

and

   Administrative Contact:
      Perry, Gene  homefreelikeme@yahoo.com
      9674 E. Arapahoe Rd. #120
      Greenwood Village, Colorado 80112
      United States
      +1.8885701039      Fax -- +1.8885701039

Gene Perry? Gene Elletson?

We can do a bit of research on the 303-385-3010 number in the previous spam.. and voila, a spammy MLM page at leadnetpromarketingsystem.com/landingpage5.php?user=geneperry which contains the text "LNP Success - 303-385-3010 - icpsuccess8@gmail.com". So, 303-385-3010 does seem to tie up with the name "Gene Perry" of Greenwood Village, Colorado.

The thing is.. we've had several other spammy emails from this crew as well, all with the  75.77.148.134 IP address in Florida. So perhaps, this crew is based in both Orlando and Colorado. Nonetheless, it's spam and should be ignored..

From: Phil & Bev Collins lnpsuccess5@gmail.com via smtp.com
Reply-To: icpsuccess8@gmail.com
To: donotemail@wearespammers.com
Date: 8 October 2012 20:05
Subject: Saw your iWOWWE site..Would like to join!!
Signed by: smtp.com

Hello again...
(We saw your info online a while back)
How's your iWOWWE business going?

Please send us your ~"Cell Phone"~ number
so that we can communicate further...

Looking forward to joining iWowWe and
building a huge team under you!!

Thanks Again
Phil & Bev Collins