cancel
Showing results for 
Search instead for 
Did you mean: 

Spam to plusnet-specific Email address.

sandjwa1
Dabbler
Posts: 15
Registered: ‎26-11-2014

Re: Spam to plusnet-specific Email address.

Quote from: Anotherone
… full headers from any of those emails

From - Thu Nov 13 06:15:58 2014
X-Account-Key: account4
X-UIDL: 0000d9674b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@cardnews.co.uk>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Thu, 13 Nov 2014 06:10:19 +0000
Received: from [74.221.215.104] (helo=cardnews.co.uk)
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1Xonbm-00021O-Ud
for xxxx@xxxx.co.uk; Thu, 13 Nov 2014 06:10:19 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=cardnews.co.uk;
h=From:To:Date:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type; i=news@cardnews.co.uk;
bh=lFwJozC+ajHc4QVgLsfbv80/k08bvB+GcsV6vyK/xFE=;
b=AgjJ506JCtGN8f4L4rxbmXhBZJYdsl6KCH+MSZXx1zRFXxpyIC4RCKXl4oFmlfux8Qjd1up7QGyx
  9H41QiHHIRpW/Xlm4VdWKRKA42XfhadItP6i1vTsPkmnbqLHgH73wt/5BpzFLkBuoErHM0IZTqJe
  TyuJIlhM5rvqZbXVsJ8=
Received: by cardnews.co.uk id hchcl60001g2 for <xxxx@xxxx.co.uk>; Thu, 13 Nov 2014 02:10:04 -0500 (envelope-from <news@cardnews.co.uk>)
Received: from cardnews.co.uk (cardnews.co.uk. [74.221.215.104]) by cardnews.co.uk with SMTP id ff3ca4cbb63ac130a5efefddc7679497.1415858702; Thu, 13 Nov 2014 01:05:02 -0500
From: "Maria Medium" <news@cardnews.co.uk>
To: xxxx@xxxx.co.uk
Date: Thu, 13 Nov 2014 01:05:02 -0500
Subject: (xxxx@xxxx.co.uk) Friday the 13th is your big day...
Reply-to: news@cardnews.co.uk
Message-ID: <ff3ca4cbb63ac130a5efefddc7679497@cardnews.co.uk>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"


From - Thu Nov 13 18:36:17 2014
X-Account-Key: account4
X-UIDL: 0000d9814b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@liveuknews.co.uk>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Thu, 13 Nov 2014 18:17:44 +0000
Received: from liveuknews.co.uk ([138.128.1.76])
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1Xoyxk-00021Q-4u
for xxxx@xxxx.co.uk; Thu, 13 Nov 2014 18:17:44 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=liveuknews.co.uk;
h=From:To:Date:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type; i=news@liveuknews.co.uk;
bh=SEpvy6XCquAfCD6G2cw5vTpPdUs0fV13tl5cfgf2umE=;
b=EJbNoUBfDt7z7IOw6LbMAAjebd9DooesPPPjDgk6xkNlCUb7EJue/mPELD3+nicAMkDQp24tQuQV
  qBudqvlgmFbJhas9HkcDSert8G8JOyyRRaNS4NyaCn+7ePqSEN/jd9/xO4E1HW5RB4YKwQakgd3U
  PAlAA4NrGfiJelcIRXk=
Received: by liveuknews.co.uk id hcjqsa0001gj for <xxxx@xxxx.co.uk>; Thu, 13 Nov 2014 10:56:39 -0500 (envelope-from <news@liveuknews.co.uk>)
Received: from liveuknews.co.uk (liveuknews.co.uk. [138.128.1.76]) by liveuknews.co.uk with SMTP id 85c781a84d70394de919eb4e3d96b037.1415891993; Thu, 13 Nov 2014 10:19:53 -0500
From: "FosterCare" <news@liveuknews.co.uk>
To: xxxx@xxxx.co.uk
Date: Thu, 13 Nov 2014 10:19:53 -0500
Subject: (xxxx@xxxx.co.uk) Looking for a challenge with great rewards?
Reply-to: news@liveuknews.co.uk
Message-ID: <85c781a84d70394de919eb4e3d96b037@liveuknews.co.uk>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"


From - Tue Nov 18 20:31:55 2014
X-Account-Key: account4
X-UIDL: 0000da214b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@newsnationals.net>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Tue, 18 Nov 2014 20:26:08 +0000
Received: from [74.221.215.108] (helo=newscrunk.com)
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1XqpLj-0006JE-Np
for xxxx@xxxx.co.uk; Tue, 18 Nov 2014 20:26:08 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=newsnationals.net;
h=From:To:Date:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type; i=news@newsnationals.net;
bh=CsefyGsuFl5I2WXqVAWdlJu1Fha07xM8BcoTwm+4dt0=;
b=Mjkf/XiHVyxFGnoOxDW5AqcGMc3yL1xnTagw6kFGXQ/0mRL/RqNLxlaE/YbHkvhdb2EkjF1ZJiaB
  ozpOPZ2LvC3npCGmVWWvVQhz21CKDO4PoLHvIglOxiPDbLiMHEEUUcqear4bjo7eHujI17jCBSKr
  M1quaLHUXV4kqNTXc1k=
Received: by newscrunk.com id hdesnc0001g4 for <xxxx@xxxx.co.uk>; Tue, 18 Nov 2014 14:25:12 -0500 (envelope-from <news@newsnationals.net>)
Received: from newsnationals.net (newsnationals.net. [74.221.215.108]) by newsnationals.net with SMTP id 6fcf150259f1acc892ef7b5fe30c0135.1416335067; Tue, 18 Nov 2014 13:24:27 -0500
From: "Eco News" <news@newsnationals.net>
To: xxxx@xxxx.co.uk
Date: Tue, 18 Nov 2014 13:24:27 -0500
Subject: (xxxx@xxxx.co.uk) 50% drop in your energy bills - newsletter
Reply-to: news@newsnationals.net
Message-ID: <6fcf150259f1acc892ef7b5fe30c0135@newsnationals.net>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"


From - Wed Nov 19 13:51:05 2014
X-Account-Key: account4
X-UIDL: 0000da3c4b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@ukbrandnews.co.uk>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Wed, 19 Nov 2014 13:44:03 +0000
Received: from mx2.ukbrandnews.co.uk ([138.128.1.70])
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1Xr5YA-0001PR-SD
for xxxx@xxxx.co.uk; Wed, 19 Nov 2014 13:44:03 +0000
Received: by mx2.ukbrandnews.co.uk id hdif9i0001gb for <xxxx@xxxx.co.uk>; Wed, 19 Nov 2014 07:52:34 -0500 (envelope-from <news@ukbrandnews.co.uk>)
Received: from mx2.ukbrandnews.co.uk (mx2.ukbrandnews.co.uk. [138.128.1.70]) by ukbrandnews.co.uk with SMTP id 9956cb08ac3eca2da0e12b7f1b75faec.1416379280; Wed, 19 Nov 2014 01:41:20 -0500
From: "Fantastic discounts" <news@ukbrandnews.co.uk>
To: xxxx@xxxx.co.uk
Date: Wed, 19 Nov 2014 01:41:20 -0500
Subject: (xxxx@xxxx.co.uk) Winter news - Up to 80% off your items
Reply-to: news@ukbrandnews.co.uk
Message-ID: <9956cb08ac3eca2da0e12b7f1b75faec@ukbrandnews.co.uk>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"


From - Wed Nov 19 22:10:22 2014
X-Account-Key: account4
X-UIDL: 0000da4b4b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@newstorun.com>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Wed, 19 Nov 2014 22:01:32 +0000
Received: from [138.128.146.25] (helo=newstorun.com)
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1XrDJc-0000xB-3l
for xxxx@xxxx.co.uk; Wed, 19 Nov 2014 22:01:32 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=newstorun.com;
h=From:To:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:Date; i=news@newstorun.com;
bh=J+rec+sbJRfbrtDd65gyBUoYYXMDW45Q02J5J9Akdg4=;
b=rb9zeTEe9VTS3ABPa9ZP4o+ijqP02+j2/ti4pRlgkDlxYXizt0HL4UV9oQnJeBPjPKim3SoFjG33
  e6p0dcRzod0o+Oa2J42qIZw3iRmDUZRWnbCgce1BadcPb4YwJtTngfpqWe4Vbm42podECOctnkv+
  nnpnczz1ol03+oj96Rw=
Received: by newstorun.com id hdkglc0001gg for <xxxx@xxxx.co.uk>; Wed, 19 Nov 2014 16:51:36 -0500 (envelope-from <news@newstorun.com>)
Received: from newstorun.com (newstorun.com. [74.221.215.109]) by newstorun.com with SMTP id 5b513299e386e1fdddcdf7676745879a.1416429561; Wed, 19 Nov 2014 15:39:21 -0500
From: "Eco News" <news@newstorun.com>
To: xxxx@xxxx.co.uk
Subject: (xxxx@xxxx.co.uk) 50% drop in your energy bills - newsletter
Reply-to: news@newstorun.com
Message-ID: <5b513299e386e1fdddcdf7676745879a@newstorun.com>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Wed, 19 Nov 2014 16:51:36 -0500


From - Fri Nov 21 12:41:23 2014
X-Account-Key: account4
X-UIDL: 0000da8b4b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@onepoundnews.co.uk>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Fri, 21 Nov 2014 12:36:28 +0000
Received: from onepoundnews.co.uk ([23.229.2.10])
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1XrnRr-0000sy-Ee
for xxxx@xxxx.co.uk; Fri, 21 Nov 2014 12:36:28 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=onepoundnews.co.uk;
h=From:To:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:Date; i=news@onepoundnews.co.uk;
bh=Jv6bykuLw3xVrZw0QGX9n7UPLjy25xkCuOzKIk55Qt4=;
b=D6aJZ52JofF49xpKUsO5/QPty0Gq89wmp66WWwrOVCWGZUQmk8jck61NocpeHlfinYViiSzabZd5
  nFEOWat+r/GGH/75bVR21OZ3VqGncgadf2ubJv0+xhb+Bd1hdshcIwaNPl5nAp4ppY11PRf/UFZO
  2bSAirfUBIQ72d+70RA=
Received: by onepoundnews.co.uk id hdsvui0001g2 for <xxxx@xxxx.co.uk>; Thu, 20 Nov 2014 20:53:58 -0500 (envelope-from <news@onepoundnews.co.uk>)
Received: from onepoundnews.co.uk (onepoundnews.co.uk. [23.229.2.10]) by onepoundnews.co.uk with SMTP id b341b70043f71594605734aa59ac49b2.1416510264; Thu, 20 Nov 2014 14:04:24 -0500
From: "Wowcher & E-Market Labs" <news@onepoundnews.co.uk>
To: xxxx@xxxx.co.uk
Subject: (xxxx@xxxx.co.uk) Wowcher
Reply-to: news@onepoundnews.co.uk
Message-ID: <b341b70043f71594605734aa59ac49b2@onepoundnews.co.uk>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Thu, 20 Nov 2014 20:53:58 -0500


From - Tue Nov 25 21:36:43 2014
X-Account-Key: account4
X-UIDL: 0000db284b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@rockmsockmnews.com>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Tue, 25 Nov 2014 21:32:40 +0000
Received: from rockmsockmnews.com ([23.229.2.14])
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1XtNix-0003J1-TI
for xxxx@xxxx.co.uk; Tue, 25 Nov 2014 21:32:40 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=rockmsockmnews.com;
h=From:To:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:Date; i=news@rockmsockmnews.com;
bh=kKVdMzVjW+NAGfK9AWYvtOQmqnT9dJslRoJXAclGL+0=;
b=CAMqfg/MFxapS1SSEBv5JYrjVCkSa3+li/oOI1aC9BeEVaXbKR0F90feYDy49SPUbQkwJbLr2+dV
  op6r9ZT4FfIAEdOxPOh48CnktFxXcfU7/l+6fIADrT/np++3VbuaN9yLoKvVM37fJ4T2RNaO6y82
  vzrZ+XrDwevgSlXS5SM=
Received: by rockmsockmnews.com id hek1q20001g3 for <xxxx@xxxx.co.uk>; Tue, 25 Nov 2014 14:42:27 -0500 (envelope-from <news@rockmsockmnews.com>)
Received: from rockmsockmnews.com (rockmsockmnews.com. [23.229.2.14]) by rockmsockmnews.com with SMTP id 4909143cc92df5260aff599a1f6194f4.1416940926; Tue, 25 Nov 2014 13:42:06 -0500
From: "The Claims Guys" <news@rockmsockmnews.com>
To: xxxx@xxxx.co.uk
Subject: (xxxx@xxxx.co.uk) 30 second application to reclaim your mis-sold PPI - News
Reply-to: news@rockmsockmnews.com
Message-ID: <4909143cc92df5260aff599a1f6194f4@rockmsockmnews.com>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Tue, 25 Nov 2014 14:42:27 -0500


From - Tue Nov 25 22:17:17 2014
X-Account-Key: account4
X-UIDL: 0000db2c4b902b45
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                               
Return-path: <news@liveuknews.co.uk>
Envelope-to: xxxx@xxxx.co.uk
Delivery-date: Tue, 25 Nov 2014 22:12:07 +0000
Received: from liveuknews.co.uk ([138.128.1.76])
by mail42.extendcp.com with esmtp (Exim 4.80.1)
id 1XtOL9-0007La-NS
for xxxx@xxxx.co.uk; Tue, 25 Nov 2014 22:12:07 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=liveuknews.co.uk;
h=From:To:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:Date; i=news@liveuknews.co.uk;
bh=gD1znfXr7dQr1No2eXGNX7XzIeTkOM/X0Z8oX1oXHDU=;
b=jNC7V9+8NMuC25oGiGqj7phv59epTXW+vdpTa8R68Hnq6iSxBJPZ+HrUFoNs0iPREY3wH6+mokk2
  2yGm9b6QXUQoeIEsAueRuOITAhs1AiPLEcZJ3+IxAU57EQjNo3CJfx8kdr6SUuffy2nuZxiWzfmg
  RKmdkp267KEIApEZkC0=
Received: by liveuknews.co.uk id hejvaa0001g2 for <xxxx@xxxx.co.uk>; Tue, 25 Nov 2014 15:45:55 -0500 (envelope-from <news@liveuknews.co.uk>)
Received: from liveuknews.co.uk (liveuknews.co.uk. [138.128.1.76]) by liveuknews.co.uk with SMTP id 66a947971df539c5b378a25d42a01cd6.1416939504; Tue, 25 Nov 2014 13:18:24 -0500
From: "Black Diamond Visa Card" <news@liveuknews.co.uk>
To: xxxx@xxxx.co.uk
Subject: (xxxx@xxxx.co.uk) The Black Diamond Visa Credit Card News
Reply-to: news@liveuknews.co.uk
Message-ID: <66a947971df539c5b378a25d42a01cd6@liveuknews.co.uk>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Tue, 25 Nov 2014 15:45:55 -0500

Grampus
Newbie
Posts: 5
Registered: ‎24-11-2014

Re: Spam to plusnet-specific Email address.

........... full headers from any of those emails .....
This header is from a new address:
Return-Path: news@originalknowledgedropper.com
Received: from originalknowledgedropper.com ([23.229.2.11]) by
mx.kundenserver.de (mxeue004) with ESMTP (Nemesis) id
0MZalV-1XbfPp3c3J-00LDhC for <redacted>; Sat, 29 Nov 2014
14:06:41 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=originalknowledgedropper.com;
h=From:To:Subject:Reply-to:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:Date; i=news@originalknowledgedropper.com;
bh=3h/W/NO6BiAn60qO6kbHsOFQLBqrxubxkUNDWRo2WGA=;
b=hsmLumguYk0pjt0Ef6F7fnjI2w7L+EMPQGLBvXK5zJCgKhDhWhEYoVJmuKZ9dwhHipxa51H7dtYI
  zJ0/7WOvfMl2PpaO9lV/vA/cT+ggKfPCzeLKSmHhY4pI0QM4hhkozoy+B1tEuwWI9maKw8k7oL/n
  FzFQGc/RLLZOIwsPi+Y=
Received: by originalknowledgedropper.com id hf72ec0001g8 for <redacted>; Fri, 28 Nov 2014 22:32:04 -0500 (envelope-from <news@originalknowledgedropper.com>)
Received: from originalknowledgedropper.com (originalknowledgedropper.com. [23.229.2.11]) by originalknowledgedropper.com with SMTP id 4cdf1960bdad4d93f34dde0e214c3766.1417231520; Fri, 28 Nov 2014 22:25:20 -0500
From: "Eco News" <news@originalknowledgedropper.com>
To: redacted
Subject: (redacted) 50% drop in your energy bills - newsletter
Reply-to: news@originalknowledgedropper.com
Message-ID: <4cdf1960bdad4d93f34dde0e214c3766@originalknowledgedropper.com>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Fri, 28 Nov 2014 22:32:04 -0500
Envelope-To: <redacted>
X-UI-Filterresults: notjunk:1;V01:K0:PvVkaoFJ7C0=:/ZCHyrln2XKGsvqTVO+89at3pP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=
=
X-Antivirus: avast! (VPS 141129-1, 29/11/2014), Inbound message
X-Antivirus-Status: Clean
ianjpn
Newbie
Posts: 4
Registered: ‎30-11-2014

Re: Spam to plusnet-specific Email address.

Hi,
I also have a unique address for PlusNet at mydomain.com which was created around November 2012.  It has had:
Administrative emails from PN,
One from ICM Research 18 months ago,
PlusNet marketing ref OC03 in Aug/13,
PlusNet survey (no ref)  also Aug/13,
"Changes to PlusNet package" email on 01/08/2014 Ref APEM04. 
"Why limit yourself with old technology" email on 19/09/2014 (No Ref.)
"Why limit yourself with old technology" email on 30/10/2014 (No Ref.) - identical.
Then on November 14th a stream of spam started, same as everyone else. 
I logged a complaint and got the stock, " we are comfortable there has been no compromise." reply after 8 days,
Clearly something closely connected with PlusNet has been compromised.  I appreciate that the breach almost certainly cannot be undone but I expect a better response than I've had so far.  Frankly, if PN can't work out how it happened then how can we be expected to believe that it won't happen again?
LordFox
Rising Star
Posts: 226
Thanks: 13
Registered: ‎10-03-2008

Re: Spam to plusnet-specific Email address.

I tend to be a bit quick off the mark to criticise at times, so I've been trying to be a bit more relaxed about this situation, despite the annoyance I feel. Only PN know how much is being done internally about this, it might be a lot, but we as usual are the poor consumers who are generally kept in the dark as much as possible. That doesn't help.
I find the fact that my ISP itself has let my details out to a spammer, however it might have happened, to be outrageous and possibly legally actionable. (Hence, I guess, PN not saying much.)
I take my online security very seriously, hence the unique email address system that I pay for and have used almost since the internet started. To have my security breached by my ISP is simply not on. "Stuff happens" and I can accept that to an extent and move on, but not until the matter has been dealt with in a manner that leaves me feeling better about it than I do right now.
I have the inconvenience of dealing with yet another source of spam that will now come into my email account continually, forever more probably. That is PN's fault, however it has happened. PN needs to step up to the mark here and do something proper about it, not just say that they are 'satisfied'.
Perhaps I need to complain to my MP, seriously. The government often goes on about monitoring us and censoring the internet, it's about time some effort was put into things that would be to our benefit, like protection of our privacy and prevention of spam. (wow, a paragraph that didn't start with "I").

KevinG
Rising Star
Posts: 998
Thanks: 7
Fixes: 1
Registered: ‎05-11-2008

Re: Spam to plusnet-specific Email address.

Quote from: LordFox
I have the inconvenience of dealing with yet another source of spam that will now come into my email account continually, forever more probably.

I got them between 14 and 21 November. Nothing since. Am I alone?
Anonymous
Not applicable

Re: Spam to plusnet-specific Email address.

Yes !  -  I had eight on Friday (29th)  Angry
LordFox
Rising Star
Posts: 226
Thanks: 13
Registered: ‎10-03-2008

Re: Spam to plusnet-specific Email address.

Yep - a load on the 29th here too.
Thiing is, our addresses are "in the wild" now, so it's probably only a matter of time until they make another spam list.
KevinG
Rising Star
Posts: 998
Thanks: 7
Fixes: 1
Registered: ‎05-11-2008

Re: Spam to plusnet-specific Email address.

Strange, I wonder why mine have stopped. I agree about them being "in the wild" - I am still planning to delete them and set up new addresses, I was just waiting a bit longer to give Plusnet more time to investigate, but it sounds as though they have pretty much given up on it.
ianjpn
Newbie
Posts: 4
Registered: ‎30-11-2014

Re: Spam to plusnet-specific Email address.

I had six more on Saturday.  Tried the unsubscribe last night - will see if it works.
KevinG
Rising Star
Posts: 998
Thanks: 7
Fixes: 1
Registered: ‎05-11-2008

Re: Spam to plusnet-specific Email address.

Unless that is a disposable email address that is probably not a good idea as you have now confirmed that the email address is live, which is likely to result in even more spam. Looking at the unsubscribe links on the emails I have received, they all go to either onepoundnews.co.uk, ukbrandnews.co.uk or liveuknews.co.uk. All three of these are registered to "Gamer SEO" at 237 South Delsea Drive, Suite 302, Vineland, NJ 08360, United States, which is the same as the address that appears at the bottom of the emails. So, in my case at least, the leak has been to one specific company.
picbits
Rising Star
Posts: 3,432
Thanks: 23
Registered: ‎18-01-2013

Re: Spam to plusnet-specific Email address.

237 South Delsea Drive corresponds to "The UPS Store" - I wonder if they know people are registering websites to their address.
LFaulkner
Dabbler
Posts: 20
Registered: ‎13-11-2007

Re: Spam to plusnet-specific Email address.

"The Claims Guys" <news@newsieline.com>
and
"ProductTestingUK" <news@newsieline.com>
yesterday
burble
Dabbler
Posts: 15
Registered: ‎20-03-2014

Re: Spam to plusnet-specific Email address.

Quote from: Bob
Plusnet has conducted a thorough investigation into this issue.  Our investigations confirm that Plusnet’s Core Systems and Networks, including our subscriber and billing databases, have been verified and we are comfortable there has been no compromise.
Plusnet takes its obligations regarding our customer data very seriously – we ensure we comply with the guidance of the data protection regulator as well as the requirements of the Data Protection Act. All companies that Plusnet work with are required to ensure data is processed securely and in accordance with the Data Protection Act.
Plusnet will continue to monitor its security controls to ensure all data, including customer data, is protected. If we have any further updates on this we will of course let you know.

Thanks for the reply, but it's not really good enough. It's one thing for e-mail addresses to be leaked - spam filters will help, and some of us can just shut the address down - but surely you have a responsibility to find out where they did leak from? If you can't answer that basic question, how can you possibly assure us that our information is somehow now more secure that it was when the leak occurred? And more to the point, how can you have any idea what other information leaked with it? Names? Addresses? Billing information?
Given you haven't found the source, that means this is potentially an ongoing leak of unknown proportion. Perhaps it's a bit premature to write it off.
KevinG
Rising Star
Posts: 998
Thanks: 7
Fixes: 1
Registered: ‎05-11-2008

Re: Spam to plusnet-specific Email address.

Got my first one for nearly two weeks yesterday. From Insured PMI <news@newsinfowire.com> "Searching for the best Medical Insurance? Cover starting from 9.92 per month." Same address in New Jersey as all the others, newsinfowire.com also registered to Gamer SEO at the same address.
mikeb
Rising Star
Posts: 463
Thanks: 15
Registered: ‎10-06-2007

Re: Spam to plusnet-specific Email address.

I'm fairly sure that I can add an [aol] Me Too[/aol] to this thread Sad
Despite still suffering the consequences of the previous PN webmail hacking that leaked all of my email addresses even though I'd never used PN webmail, I now appear to be getting varying amounts of 'different' spam to a particular PN address as of just recently.  The messages being received are fundamentally 'different' in terms of style and content to the general spam still being received on all addresses previously compromised by PN. There is no doubt whatsoever in my mind that my email address has been acquired yet again from someone somewhere and it would seem from this thread that PN are quite likely to have been involved along the way despite 'assurances' to the contrary.
I've not done much in the way of any investigation to date but it all looks more than a bit suspicious ... and I'm far from happy to even suspect that there might have been yet another breach. I'm even less happy to note that I also appear to have recently received some spam containing my full name as well rather than just the email address itself.  
Grrrrrrrrrrrrrrrrrr  Angry
Remember the stats and pretty graphs ?

All spam ever received due to PN breach(es) is archived so conclusions can and will be drawn in due course Wink

PS: Just a thought but ... didn't PN somehow managed to 'accidentally' provide BT with an e-mail database around the time of the takeover ?  I seem to remember receiving a whole stack of unsolicited e-mails from BT at some point in the past and I think the address could only realistically have come from PN  Undecided  Can't remember the date off-hand but maybe someone else can if they got them as well.  Otherwise I'll have to trawl back through Ye Olde Archives for BT-specific spam !


B T Plusnet, a bit kinda like P T Barnum ...

... but quite often appears to feature more clowns Tongue