Date: Sun, 22 Jun 2014 07:53:10 +0200 [06/22/14 01:53:10 EDT]
From: Domain Notification [firstname.lastname@example.org]
Subject: re: Domain Listing Expired
Attention: Important Notice
Please ensure that your contact information is correct or make the necessary changes above
DOMAIN SERVICE NOTICE
Domain Name: [redacted].COM
Search Engine Submission
PART I: REVIEW SOLICITATION
As a courtesy to domain name holders, we are sending you this notification for your business Domain name search engine registration. This letter is to inform you that it's time to send in your registration and save.
Failure to complete your Domain name search engine registration by the expiration date may result in cancellation of this offer making it difficult for your customers to locate you on the web.
Privatization allows the consumer a choice when registering. Search engine subscription includes domain name search engine submission. You are under no obligation to pay the amounts stated below unless you accept this offer. Do not discard, this notice is not an invoice it is a courtesy reminder to register your domain name search engine listing so your customers can locate you on the web.
This Notice for: [redacted].COM will expire on June 15,2014 Act today!
DETAIL OF SERVICE: ANNUAL WEBSITE SEARCH ENGINE SUBMISSION FOR DOMAIN NAME [redacted].COM
Detail of Service:
Act by Date:
Your Existing Domain
1year Valid for 1 Year CLICK TO RENEW 06/15/2014 - 06/15/2015 $75.00
2year Valid for 2 Year CLICK TO RENEW 06/15/2014 - 06/15/2016 $119.00
3year Valid for 3 Year CLICK TO RENEW 06/15/2014 - 06/15/2017 $199.00
4year -Most Recommended- CLICK TO RENEW 04/04/2014 - 04/04/2024 $295.00
5year Limited time offer - Best value! CLICK TO RENEW Lifetime $499.00
Payment by Credit Card
Select the term and complete the form above, (do not reply this mail with your credit card details on this mail , just click on pay above. once we receive your pay we will send you details and report after payment is successful, also make sure you provide us with your correct information at time of signup.
Unsubscribe me from this list
Powered by Interspire
This is where the spam moves from being annoying to being a more of a scam. The use of the word "Renew" implies that you already have a relationship with these people but you do not. There is nothing to renew, but stating that this is something you already use is not only incorrect but in my personal opinion it is a fraudulent misrepresentation.
The link in the email goes to 18.104.22.168 (OVH Canada, not surprisingly) and then onto a landing page at ibulkmailer.incom on 22.214.171.124 (Websitewelcome, US).
The WHOIS details for ibulkmailer.com are as follows:
Registry Registrant ID:
Registrant Name: kumar, chandan
Registrant Street: DDA FLAT NO 556 PKT B HASTSAL
Registrant City: New Delhi
Registrant State/Province: Delhi
Registrant Postal Code: 110059
Registrant Country: IN
Registrant Phone: 7838808080
Registrant Phone Ext:
Registrant Fax Ext:
Registrant Email: email@example.com
WHOIS details can easily be faked, but the "Chandan" name in the registration details tallies with the address firstname.lastname@example.org in the spam itself.
An examination of the sites co-hosted with ibulkmailer.com along with several other identifying factors identity this website as belonging to Chandan Kumar of CNS Web Technologies Pvt Ltd (U72300DL2009PTC191574) of India.
To save you from having to do the analysis yourself, a shortcut is to visit Chandan Kumar's LinkedIn page which links through to ibulkmailer.com in one of the "Company Website" links.
CNS Web Technologies Private Limited
625 LIG HASTSAL
If you get these spam messages (and the link still leads to ibulkmailer.com) then one effective way of dealing with it would be to forward the message to the webhost abuse department at abuse -at- websitewelcome.com.
Doing business with spammers is never a good idea, and doing business with spammers who misrepresent your relationship with them is likely to be a very bad idea indeed. Avoid.
The following domains are also associated with CNS Web Technologies and Chandan Kumar. Do with them what you will.