1
Nov 4, 2007
Received a text msg saying to go to goheremp3.com.
2
Nov 7, 2007
Text (SMS) msg received 11/6/07 from 9712401855, message contents:
www.goheremp3.com:Check out goheremp3.com. All songs only 10 cents each. Entire Albums only 99 cents. iTunes compatible! 2 opt out go 2 goheremp3.com.
Never opted in, never communicated with goheremp3.com or associated possible services prior to receipt of SMS.
"goheremp3.com" is hosted on secureserver.net, operated by GoDaddy, using proxy domain registration (registrant information obscured). Reported for spam abuse at GoDaddy.com to have site isolated/offlined, reported to Sprint cellular services to have SMS messaging blocked from this sender number and investigated under both CAN SPAM and Consumer Technology Protection Act, per the FCC 2004 ruling.
www.goheremp3.com:Check out goheremp3.com. All songs only 10 cents each. Entire Albums only 99 cents. iTunes compatible! 2 opt out go 2 goheremp3.com.
Never opted in, never communicated with goheremp3.com or associated possible services prior to receipt of SMS.
"goheremp3.com" is hosted on secureserver.net, operated by GoDaddy, using proxy domain registration (registrant information obscured). Reported for spam abuse at GoDaddy.com to have site isolated/offlined, reported to Sprint cellular services to have SMS messaging blocked from this sender number and investigated under both CAN SPAM and Consumer Technology Protection Act, per the FCC 2004 ruling.
3
Nov 7, 2007
Supplemental: "gotheremp3.com" is a redirection site to "mp3fiesta.com", which is hosted in Moscow (IP address 81.19.81.84, reverse DNS is "mx.mp3fiesta.com"). Whois information for "mp3fiesta.com":
TDN, Ltd.
Torgoviy Dom Nadejda Ltd.
20, B. Gruzinskaya str.
Moscow 123242
RU
+7 495 5029960
office@mp3fiesta.com
The registrar and web host are both in Russia. Best we can do at present is shut down the current 9712401855 SMS spam on all the carrier networks (Sprint is working on it; I'll leave it to other networks' subscribers to handle their own complaints), and have the redirecting web site shut down for abuse investigation. Incidentally, the 971-240-1855 number is a PCS number registered in Salem, Oregon, USA, which may give them United States nexus; pursuing original subscriber information with carrier to determine if the originating SMS number was spoofed or legitimate, and if legitimate, if the contract holder can be identified (not information I'll be privy to, but information the carrier can then act on independently). Added complaint at IC3.GOV for statistical aggregation; who knows, might eventually tie into some other action.
TDN, Ltd.
Torgoviy Dom Nadejda Ltd.
20, B. Gruzinskaya str.
Moscow 123242
RU
+7 495 5029960
office@mp3fiesta.com
The registrar and web host are both in Russia. Best we can do at present is shut down the current 9712401855 SMS spam on all the carrier networks (Sprint is working on it; I'll leave it to other networks' subscribers to handle their own complaints), and have the redirecting web site shut down for abuse investigation. Incidentally, the 971-240-1855 number is a PCS number registered in Salem, Oregon, USA, which may give them United States nexus; pursuing original subscriber information with carrier to determine if the originating SMS number was spoofed or legitimate, and if legitimate, if the contract holder can be identified (not information I'll be privy to, but information the carrier can then act on independently). Added complaint at IC3.GOV for statistical aggregation; who knows, might eventually tie into some other action.