This spam run didn't lead to a worm, trojan, virus or other infection - but to an IAC website, webfetti.com.
One thing they all have in common, aside from the IAC connection? Well, that would be Twivert. A site that advertises itself as a "Twitter advertising network". Quite why publishers such as IAC, who are presently trying to convince everyone they've gone legit, would think this kind of behaviour was a good thing, is beyond me.
You'll no doubt be surprised to learn, Twivert is run by an Indian based "company" (I'm beginning to wonder if there's so much as a single legit company over there, all of those I've come across have been involved in spam or phishing);
Registrant:
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
Domain Name: TWIVERT.COM
Created on: 25-May-09
Expires on: 25-May-11
Last Updated on: 25-May-09
Administrative Contact:
Sundaresan, Vignesh vignesh.isquare@gmail.com
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
00971554906134 Fax --
Technical Contact:
Sundaresan, Vignesh vignesh.isquare@gmail.com
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
00971554906134 Fax --
Domain servers in listed order:
NS35.DOMAINCONTROL.COM
NS36.DOMAINCONTROL.COM
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
Domain Name: TWIVERT.COM
Created on: 25-May-09
Expires on: 25-May-11
Last Updated on: 25-May-09
Administrative Contact:
Sundaresan, Vignesh vignesh.isquare@gmail.com
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
00971554906134 Fax --
Technical Contact:
Sundaresan, Vignesh vignesh.isquare@gmail.com
ISquare
280-A LLoyds Road
Gopalapuram
Chennai, Tamil Nadu 600086
India
00971554906134 Fax --
Domain servers in listed order:
NS35.DOMAINCONTROL.COM
NS36.DOMAINCONTROL.COM
I highly suspect IAC will blame this on rogue affiliates, but personally, I'll not be convinced.
No comments:
Post a Comment