I’ve decided to start naming and shaming the people who spam me. I have an email address hidden in the code of one of my web sites. It doesn’t display to visitors but robots will read it. To give the spammers a sporting chance, the email address is nospam@….mydomain… I then email them to ask where they got the address from.
Their response to asking where they got the email address from?
They never responded.
Whilst this is the first time they’ve been caught in my current spam trap, scraping web sites and sending spam seems to be their method of operation to sell advertising space. They appear to have set up servers just to send spam. I say this because mhglobalmc3.co.uk doesn’t have a public website and displays a default virtual server login. They also run their own name servers. From an IT perspective, they seem pretty switched on – although their web server has been hacked so they’re not that good. I wouldn’t wish that on my worst enemy let alone spammers like this company. I’d email them and tell them, except I guess they wouldn’t read that either.
They are based in Kent, not so far from us, so back in 2009 I took the time to phone them and ask them to stop spamming us. I spoke to ‘Paul’ who promised to look into it. I’m assuming that was Paul Attwood. He was and is the owner of the domain sending spam back then;
Domain name: pamediasolutions.co.uk Registrant: Paul Attwood Registrant type: UK Individual Registrant's address: 47-48 Hawley Square margate CT9 1NY United Kingdom
Is the owner of the domain currently sending the spam;
Domain name: mhglobalmc3.co.uk Registrant: Paul Attwood Registrant type: UK Individual Registrant's address: 347a Margate Road Ramsgate Kent CT12 6SG United Kingdom
The destination, randrnews.co.uk, is owned by a dissolved company, MH Media Solutions Ltd of which Paul Attwood was a director. I guess they transferred it to a current company and forgot to tell the registry.
Domain name: randrnews.co.uk Registrant: MH Media Solutions Ltd Registrant type: UK Individual Registrant's address: Lead Centre Dane Valley Road Broadstairs CT10 3JJ United Kingdom
randrnews.co.uk has a link to what I guess would be a parent company; http://mhmediaglobal.com/ except my browser wouldn’t let me visit;
I’m beginning to think the publishing industry like sending spam, seeing as Archant have started spamming again.
Delivered-To: nospam@.... Received: by 10.76.88.49 with SMTP id bd17csp150210oab; Tue, 6 Aug 2013 06:01:27 -0700 (PDT) X-Received: by 10.180.74.210 with SMTP id w18mr1934845wiv.20.1375794086684; Tue, 06 Aug 2013 06:01:26 -0700 (PDT) Return-Path: <email@example.com> Received: from plesk.mhglobalmc3.co.uk ([188.8.131.52]) by mx.google.com with ESMTPS id f5si722923wjx.46.2013.08.06.06.01.08 for <nospam@...> (version=TLSv1 cipher=RC4-SHA bits=128/128); Tue, 06 Aug 2013 06:01:26 -0700 (PDT) Received-SPF: pass (google.com: domain of firstname.lastname@example.org designates 184.108.40.206 as permitted sender) client-ip=220.127.116.11; Authentication-Results: mx.google.com; spf=pass (google.com: domain of email@example.com designates 18.104.22.168 as permitted sender) firstname.lastname@example.org X-No-Relay: not in my network X-Antivirus-Status: Clean Received: from ADVENT1 (host31-51-58-179.range31-51.btcentralplus.com [22.214.171.124]) by plesk.mhglobalmc3.co.uk (Postfix) with ESMTPA id 244805968D1 for <nospam@...>; Tue, 6 Aug 2013 14:01:04 +0100 (BST) From: "Ryan Bunce" <email@example.com> To: <nospam@....> Subject: Editorial Opportunity Date: Tue, 6 Aug 2013 13:53:45 +0100 Message-ID: <firstname.lastname@example.org> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_8A9F_01CE92AD.47D63060" X-Mailer: Microsoft Outlook 14.0 Thread-Index: Ac6SkO5QeOa53URdSzqFQjxDYyR4CQ== Content-Language: en-gb X-Antivirus: avast! (VPS 130806-0, 06/08/2013), Outbound message X-Antivirus-Status: Clean This is a multipart message in MIME format. ------=_NextPart_000_8A9F_01CE92AD.47D63060 Content-Type: multipart/alternative; boundary="----=_NextPart_001_8AA0_01CE92AD.47D63060" ------=_NextPart_001_8AA0_01CE92AD.47D63060 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Description: Description: Description: Description: cid:image001.jpg@01CE8A0C.A0729EB0 We are currently putting together the September edition of the Refurb & Renovation News publication, which will for this issue have an added = bonus of an extra 5,000 circulation at the Grand Designs Live exhibition and = the 100% Design show. =20 I am tasked with closing off some of the editorial positions within this issue and as I feel you would be really relevant for this I wanted to = see if you have something you would like to promote we could include. =20 =B7 Exclusive total 63,000 Circulation=20 =B7 15,000 glossy A4 hard copies =B7 48,000 Digital Versions of the publication =B7 8 Week Circulation period (bi-monthly publication) =B7 Media Partner with all the main UK Exhibitions =B7 Extra 5,000 copies of this edition =20 Specifiers that we target include; Building Contractors - Builders Merchants - RIBA Registered Architects = and Large Architecture practices =96 Heating & Plumbing Engineers - BIID Registered Interior Designers - Property Developers - Health Authorities = - Education Based Specifiers & Local Authorities. =20 We run just 6 editorials per page giving you a good sized space with 1 = full colour image, 120-140 words of text as well as full company contact = details. I am currently able to offer you a 1/6th of a page editorial at =A395. =20 Please respond by Wednesday 14th August at the latest if you would like = to take one of these positions. =20 Best Regards =20 Ryan Bunce Sales Manager Refurb & Renovation News =20 Refurb & Renovation News Suite 1, The Lead Centre, Dane Valley Road, = St Peters, Broadstairs, Kent CT10 3JJ Tel: 01843 601705