PDA

View Full Version : Who the heck is this Kwik.net.nz that is spamming me?



Billy T
22-09-2003, 07:34 PM
Hi Team

I run some free.net.nz addresses for my children and they occasionally pick up some spam, but tonight we received a batch for their regular addresses, and another identical batch for [theirnames]@kwik.net.nz.

How the heck can I receive emails at addresses I don't own? I checked the details under "Options" and unlike the usual spam spoofing, this lot looks absolutely genuine.

Cheers

Billy 8-{)

Poppa John
22-09-2003, 07:41 PM
Billy. I had a look on Google & they are there. A new ISP?? PJ

Jim B
22-09-2003, 09:44 PM
You can't receive emails unless they are addressed to you.

You will find your email address is on the email somewhere, possibly hidden in BCC field or all of the addresses are not showing.

Billy T
22-09-2003, 10:22 PM
I don't know about that Jim, take a look at these:

Correct address:

Return-path: <vizleuwrlvcq@hotmail.com>
Received: from smtp2.compass.net.nz (unverified [203.97.100.4]) by free.net.nz
(Rockliffe SMTPRA 5.3.4) with ESMTP id <B0003675463@saint.free.net.nz> for <xxxx@free.net.nz>;
Mon, 22 Sep 2003 17:06:50 +1200
Received: from mx4.hotmail.com (dialup-76.137.220.203.acc01-arge-bro.comindico.com.au [203.220.137.76])
by smtp2.compass.net.nz (8.11.6/8.11.2) with ESMTP id h8M5Ha307801
for <xxxx@free.net.nz>; Mon, 22 Sep 2003 17:17:37 +1200
From: vizleuwrlvcq@hotmail.com
Message-Id: <200309220517.h8M5Ha307801@smtp2.compass.net.nz>
Subject: Want to work from home and be your own boss?
nzyps
To: <xxxx@free.net.nz>;
Content-Type: text/html
Date: Mon, 22 Sep 2003 15:16:51 +1000
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106


Incorrect Address:

Return-path: <kjzsewlzcbzvydnuzw@hotmail.com>
Received: from smtp1.compass.net.nz (unverified [203.97.100.11]) by free.net.nz
(Rockliffe SMTPRA 5.3.4) with ESMTP id <B0003675285@saint.free.net.nz> for <xxxx@kwik.net.nz>;
Mon, 22 Sep 2003 17:04:31 +1200
Received: from mx4.hotmail.com (dialup-76.137.220.203.acc01-arge-bro.comindico.com.au [203.220.137.76])
by smtp1.compass.net.nz (8.11.6/8.11.2) with ESMTP id h8M5FN131023
for <xxxx@kwik.net.nz>; Mon, 22 Sep 2003 17:15:23 +1200
From: kjzsewlzcbzvydnuzw@hotmail.com
Message-Id: <200309220515.h8M5FN131023@smtp1.compass.net.nz>
Subject: Want to work from home and be your own boss?
sovrig
To: xxxx@kwik.net.nz
Content-Type: text/html
Date: Mon, 22 Sep 2003 15:14:38 +1000
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

They look pretty ordinary to me, though I may be missing something.

Cheers

Billy 8-{)

godfather
22-09-2003, 10:23 PM
I have done the research for you Billy.

The listed directors of Kwik.net.nz are the same as the directors for free.net.nz, as listed in the Companies register.

Therefore you probably have had e-mails generated in the correct names as it will be a marketing ploy to get you to sign up for a paying service.

Its hard to cover tracks these days. Too many databases have web access.

-=JM=-
22-09-2003, 10:28 PM
Kwik Net seems to be run by Compass Communications which are the people that run FreeNet. Try sending emails to those addresses and see if you get it.

Billy T
22-09-2003, 10:38 PM
Great minds think alike JM, I just sent myself an email at "my" kwik.net address and it was duly delivered.

Also confirming Godfather's post, I note on their home page that Compass Communications are the operators of kwik.net.nz so it seems that they have dumped part or the whole of their subscriber email list to their new service.

Now, since I did not request or sign up for this service, and I still have the free.net service I paid for so it is not a substitution, does this mean that I can use unlimited time on kwik.net at no cost to myself ?:|

Thinks: I'd better go back and check the fine print. :(

Cheers

Billy 8-{) :D
[b][pre]Don't need them anyway, free.net is just a backup
as I am on Jetstream for my main connection.

Thomas
23-09-2003, 07:57 AM
Oh what a tangled web we weave.

Greg S
23-09-2003, 10:00 AM
Admin Contact Auckland Internet Exchange Limited Karim Hussona PO Box 2533 PO Box 2533 Auckland Auckland NZ NZ

Email: soa@compass.net.nz Email: soa@compass.net.nz Phone: +64-9-359 8900 Phone: +64-9-359 8900

Technical Contact Domainz Compass Communications Ltd Private Bag 1810 PO Box 2533 Wellington, NZ Auckland, New Zealand Email: 4service@domainz.net.nz Email: soa@compass.net.nz Phone: +64-4-918-1740 Phone: +64-9-359 8900

Blue Druid
23-09-2003, 11:26 AM
I wonder how isp quik.co.nz will respond to this?

Billy T
23-09-2003, 01:59 PM
Bugger me Thomas :O

If you must persist in trying to be funny rather than helpful, at the very least could you please attempt to be relevant?

Don't try so hard and one day you might actually get there.

Cheers

Billy 8-{) :|

Thomas
23-09-2003, 05:12 PM
As long as you and your team are happy,what more could you want.

Chris Randal
24-09-2003, 09:44 AM
The rest of the quotation is "When first we practice to deceive" which is eactly what free.net appears to be doing......

Billy T
24-09-2003, 01:18 PM
> As long as you and your team are happy,what more
> could you want.

*_________* :D

Graham L
24-09-2003, 02:09 PM
You will find that kwik.net.nz will resolve to the same IP address as free.net.nz. That's just an entry in a DNS server. It may be something temporary so they can test things while they build some real hardware for a new service.

They are probably not spamming you ... someone else is sending the spam, but if it's addressed to you @kwik.net.nz, it will be delivered, because the mail server at IP address xxx.yyy.zzz.aaa knows you exist and can give it to you. It knows you exist because it is the server for free.net.nz, which lives at IP address xxx.yyy.zzz.aaa, and you are registered as @free.net.nz.

Billy T
24-09-2003, 04:17 PM
Thank you Graham, that is a very logical explanation and clarifies things nicely. I guess it is FreeNet's setting up procedures for their new operation that are at fault.

I would have received the FreeNet spam anyway as those are the addresses that either had previous owners or are vulnerable to automatic address generators.

Cheers

Billy 8-{) :)

Gordon.
25-09-2003, 11:50 AM
203.220.137.76 = abuse@comindico.com.au

Send a spam complaint to the above link containing the full message headers.

From the information shown, it appears that this is where the spam has started from.