It's a corporate, static IP and usually when I see those related to a signup attempt it is a proxy server, and most likely fraud.
The owner of that IP address is "GalaxyVisions" in Brooklyn, a hosting company so most likely someone has a VPN set up on their server so they can hack and/or spam without revealing their real location.
Previously a domain called "dvdmagnet.com" was set up on that IP but changed in Sept 2013 when it appears the domain was parked. Maybe the previous owner of that domain still has control of the server, but who knows really. Possibly someone has a squid server running there to leverage the IP's for black hat stuff or potentially its just an exploit and the owner of the box has no idea his shit is being used to hack.
__________________
- As soon as I think up a good sig it's going here.
|