Is anyone else noticing the increase in Spam promoting .nz domains? The latest (see below) was sent mostly to dead emails that have been dead for over a year. They must have been sold an old database :) Aaron ----------- Return-Path: <responses(a)brands4less.co.nz> Received: from 206-225-90-32 (206-225-90-32.dedicated.abac.net [206.225.90.32] (may be forged)) by kiwi.wise.net.nz (8.13.4/8.13.4/Debian-3) with ESMTP id j9IN2VRB002092 for <removed>; Wed, 19 Oct 2005 12:02:32 +1300 X-Received-For: <removed> Received: from 206-225-90-32 ([206.225.90.32]) by 206-225-90-32 with Microsoft SMTPSVC(6.0.3790.1830); Wed, 19 Oct 2005 11:01:08 -0700 Message-ID: <9902366.1129744868187.JavaMail.transport(a)kliksend.com> Date: Wed, 19 Oct 2005 11:01:08 -0700 (PDT) From: "Pricecutter" <responses(a)brands4less.co.nz> Reply-To: responses(a)brands4less.co.nz To: removed Subject: **LOWEST PRICES LIMITED STOCKS** Mime-Version: 1.0 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Mailer: KliksendSender X-OriginalArrivalTime: 19 Oct 2005 18:01:08.0187 (UTC) FILETIME=[14CB92B0:01C5D4D7] X-Virus-Status: No X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on kiwi.wise.net.nz X-Spam-Level: ** X-Spam-Status: No, score=2.3 required=5.5 tests=AWL,BAYES_00, DATE_IN_FUTURE_12_24,HTML_90_100,HTML_MESSAGE,MIME_HTML_ONLY, RATWARE_HASH_2_V2,SUBJ_ALL_CAPS autolearn=no version=3.0.3 <html> <body> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td colspan="2"><table bgcolor="#FFFFF0" border="0" cellpadding="0" cellspacing="0" width="100%"> <tr> <td colspan="2"><table border="0" cellpadding="0" cellspacing="0"> <tr> <td colspan="2"><p></p></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/arrow_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p> To forward this email to a friend,<a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40winz.co.nz&password=90552&jobid=25537658">click here</a> </p></td> </tr> </table></td> </tr> <tr> <td /> </tr> </table></td> </tr> <tr> <td align="center"><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500435.gif " width="100%" border="0" /></a></td> </tr> </table> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25344386.gif " border="0" usemap="#Map1" /></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500436.gif " border="0" /></td> </tr> <tr> <td><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500438.gif " border="0" /></a></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25344386.gif " border="0" usemap="#Map2" /></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500439.gif " border="0" /></td> </tr> </table> <table width="600" border="0" align="center" cellspacing="0" bgcolor="#ffffff"> <tr> <td><a href="http://www.pricecutter.co.nz"><img src="http://brands4less.nzpostoffice.co.nz/org/20243013/banners/25500440.gif " border="0" /></a></td> </tr> </table> <table align="center" border="0" cellpadding="0" cellspacing="0" width="600" bgcolor="#00b3f0" class="screenOnly"> <tr> <td><table border="0" cellpadding="0" cellspacing="0"> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/arrow_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p>To forward this email to a friend, <a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40removed&password=90552&jobid=25537658">click here</a></p></td> </tr> <tr> <td><img src="http://brands4less.nzpostoffice.co.nz/templateassets/cross_gold.gif" width="16" height="14" alt="" border="0" /></td> <td><p>To unsubscribe, <a href="http://brands4less.nzpostoffice.co.nz/nzm/nzm/unlocked/Login.jsp?usern ame=phils%40removed&password=90552">click here</a>. We process all requests immediately.</p></td> </tr> </table></td> </tr> </table> <map name="Map1"> <area shape="rect" coords="1,21,38,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=847 19" /> <area shape="rect" coords="38,21,76,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 58" /> <area shape="rect" coords="76,21,114,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=847 19" /> <area shape="rect" coords="114,21,151,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 60" /> <area shape="rect" coords="151,21,188,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="188,21,226,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="226,21,263,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 01" /> <area shape="rect" coords="263,21,301,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="301,21,337,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="337,21,374,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="374,21,412,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 02" /> <area shape="rect" coords="412,21,449,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=855 03" /> </map> <map name="Map2"> <area shape="rect" coords="1,21,38,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="38,21,76,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=854 08" /> <area shape="rect" coords="76,21,114,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="114,21,151,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 97" /> <area shape="rect" coords="151,21,188,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=853 98" /> <area shape="rect" coords="188,21,226,45" href="http://www.brands4less.co.nz/products/viewCategory.aspx?categoryId=828 85" /> </map> </body> </html>
Aaron Nielsen wrote:
Is anyone else noticing the increase in Spam promoting .nz domains? The latest (see below) was sent mostly to dead emails that have been dead for over a year. They must have been sold an old database :)
Possibly they are getting semi-intelligent and parsing the destination email address for the TLD which is appended to a random-fantastically-awesome domain name like brands4less ? - Drew
Drew Broadley wrote:
Possibly they are getting semi-intelligent and parsing the destination email address for the TLD which is appended to a random-fantastically-awesome domain name like brands4less ?
I believe it's the same spammer as: http://www.computerworld.co.nz/news.nsf/UNID/0F66D27BD6B799F0CC256F92001FED8... ;; ANSWER SECTION: brands4less.co.nz. 2752 IN NS kliksend. ;; AUTHORITY SECTION: brands4less.co.nz. 2752 IN NS kliksend. Kliksend PO Box 74-380 Market Road Auckland, Auckland 5 NZ Domain Name: KLIKSEND.COM Administrative Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Technical Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Billing Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Record updated date on: 2005-02-08 04:09:18 Record created date on: 2003-02-21 Record will be expiring on date: 2006-02-21 Database last updated on: 2005-10-18 21:34:33 EST Domain servers in listed order: DNS1.DEDICATEDNS.COM 65.109.255.100 DNS2.DEDICATEDNS.COM 206.16.197.8 TransferGuard LOCK Status => ENABLED -- Juha Oh! Oh! Un affrontement intercommunitaire!
http://brands4less.nzpostoffice.co.nz/nzm/index.html Domain: nzpostoffice.co.nz Registrant Contact Name: Michael Keane Address Line 1: 18 Victoria Street West Address Line 2: City: Auckland Anyone think he will care/react if we inform him he's hosting a spammer? I am considering marking anything from either domain as [Probable Spam] -----Original Message----- From: Juha Saarinen [mailto:juha(a)saarinen.org] Sent: Wednesday, 19 October 2005 2:35 p.m. To: Drew Broadley Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] .nz Spam on the increase Drew Broadley wrote:
Possibly they are getting semi-intelligent and parsing the destination email address for the TLD which is appended to a random-fantastically-awesome domain name like brands4less ?
I believe it's the same spammer as: http://www.computerworld.co.nz/news.nsf/UNID/0F66D27BD6B799F0CC256F92001FED8 8 ;; ANSWER SECTION: brands4less.co.nz. 2752 IN NS kliksend. ;; AUTHORITY SECTION: brands4less.co.nz. 2752 IN NS kliksend. Kliksend PO Box 74-380 Market Road Auckland, Auckland 5 NZ Domain Name: KLIKSEND.COM Administrative Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Technical Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Billing Contact:: Admin Admin: sales(a)kliksend.com Kliksend PO Box 74380 Market Road, Auckland 5 NZ Phone:: Fax:: Record updated date on: 2005-02-08 04:09:18 Record created date on: 2003-02-21 Record will be expiring on date: 2006-02-21 Database last updated on: 2005-10-18 21:34:33 EST Domain servers in listed order: DNS1.DEDICATEDNS.COM 65.109.255.100 DNS2.DEDICATEDNS.COM 206.16.197.8 TransferGuard LOCK Status => ENABLED -- Juha Oh! Oh! Un affrontement intercommunitaire! _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
On 10/19/05, Mark Karena <administrator(a)enlightenhosting.com> wrote:
http://brands4less.nzpostoffice.co.nz/nzm/index.html
Domain: nzpostoffice.co.nz
Registrant Contact Name: Michael Keane Address Line 1: 18 Victoria Street West Address Line 2: City: Auckland
Anyone think he will care/react if we inform him he's hosting a spammer?
From the web site at www.nzpostoffice.co.nz:
"NZPostOffice provides email marketing services tailored to retailers." If it looks like compressed meat and comes in a funny looking tin can... -- Andrew Stephen http://www.evil.geek.nz/ Sarchasm: The gulf between the author of sarcastic wit and the person who doesn't get it.
participants (5)
-
Aaron Nielsen -
Andrew Stephen -
Drew Broadley -
Juha Saarinen -
Mark Karena