This is a paid VPN account from this site:
https://www.vpntunnel.com/
The company is in Sweden, I will try reporting an error. That will not
kill the originating account, but will waste a little bit of money for
this spammer.
Here is the "whois" output for the IP from which this spam was sent.
$ whois 5.254.131.55
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See
http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '5.254.131.0 - 5.254.131.255'
inetnum: 5.254.131.0 - 5.254.131.255
netname: VPNTUNNEL-INET
descr: Webhosting Services
country: SE
admin-c: NA3801-RIPE
tech-c: NA3801-RIPE
status: ASSIGNED PA
mnt-by: MNT-NETALIA
source: RIPE # Filtered
role: Netalia Admin
address: BOX 54, 12121 Stockholm
admin-c: NA3801-RIPE
tech-c: NA3801-RIPE
nic-hdl: NA3801-RIPE
mnt-by: MNT-NETALIA
source: RIPE # Filtered
% Information related to '
5.254.131.0/24AS42708'
route:
5.254.131.0/24
descr: VPNTunnel IP Range
origin: AS42708
mnt-by: MNT-NETALIA
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.58.1
(WHOIS3)
--
http://mgogala.byethost5.com