I received the same package, but I did not subscribe to anything. So, I was afraid even to open it.
You are asking where they got the address:
I think they got it through months of sending spam to our email accounts. Now they have sophisticated algorithms where they compile your data bit by bit until it records a full and valid address.
Another idea is that they may steal it from commercial databases such as intellius. Intellius has all addresses and cell phone numbers.
I to got this box. but it was a week after I noticed this charge on my bank account. I contacted the company and they had ALL my information including my credit card number except for the right e-mail address. The e-mail address was from a porn site Shemail.com. I then reported my card as stolen. yes it's a hassle but better that than they get my money. It's called fishing, if you don't catch it they will take all you money.
I didn't receive a call, However, I received unsolicited package in the mail from Wu Yi Source, which had a phone number on the box to call before opening. I called the number, 1-877-417-2511, and listened to a message from "Sarah Nicolson" At the end of the message, she left the number for her "private line," 718-569-1619, I called only to get a busy tone. So - I am returning the package.