cancel
Showing results for 
Search instead for 
Did you mean: 

Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

HolaPussycat
Grafter
Posts: 50
Registered: 29-03-2011

Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

Last night at 22:53 I received an email BCC'ed to the email address used only for the Plus.net Service Status emails (very specific email address registered with the service status system in May 2012)
Some headers below (this is obviously incomplete):
From - Thu Jan 21 23:35:42 2016
Return-path: <[Sender id removed in case it is faked] @vodafone.it>
Envelope-to: [My very specific email address for this service only]
Delivery-date: Thu, 21 Jan 2016 22:53:55 +0000
Received: from smtpout03-vf.aruba.it ([62.149.179.203]:53253)
by [My server here]
(envelope-from <[Sender id removed in case it is faked] @vodafone.it>)
id [just an ID]
for [My very specific email address for this service only]; Thu, 21 Jan 2016 22:53:55 +0000
Received: from localhost ([173.8.91.174])
by smtpcmd01.vf.aruba.it with bizsmtp
id [just an ID]; Thu, 21 Jan 2016 23:53:14 +0100
Date: Thu, 21 Jan 2016 22:53:08 +0000
From: Will Moody <[Sender id removed in case it is faked]@vodafone.it>
Subject: Will Moody
MIME-Version: 1.0
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
An interesting point about this email is that it was so poorly formed that the message itself was not displayed. (Without looking hard, probably the MIME boundaries not correctly specified)
I've removed the sending address in case this does belong to a real user, who is innocent in this situation, as we don't want the sending address being harvested from this forum.
Would it be possible, this time, to have a proper investigation made into (and a list given to us of):

  • the companies that handle the disposal of your old hard drives

  • the third parties that you allow to handle our email addresses and other identifying data

  • any losses of data that have occurred


I appreciate that sometimes an attack can compromise data, but would far rather be told what went wrong in explicit detail than just be left to find out that something went wrong later.
James
5 REPLIES
HolaPussycat
Grafter
Posts: 50
Registered: 29-03-2011

Re: Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

Just to be clear, this is the mailing list:
http://usertools.plus.net/status/email.php
I note the wording on the page currently includes:
Quote
I am a bit concerned about giving you my email address.
Once you have subscribed to this service, the only emails you will be sent will be from the automatic script which sends the updates. However, if you are concerned that you may receive Junk Email ("Spam") to the address, then I recommend you create either a new mailbox or an Alias in the "Email Settings" section of the Portal. This means that if the address gets Junk Mail you can divert it to the Black Hole.

Which doesn't instil a great deal of confidence.
I should add this is a one off, so far, in over 3 and a half years.
EventSenderSent TimeSpam ScoreRecipientResult
successstatus@servicestatus.plus.comJan 22, 2016 3:53:15 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successpaesal@vodafone.itJan 21, 2016 10:53:22 PM3plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 20, 2016 4:03:16 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 19, 2016 2:33:14 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 18, 2016 12:33:12 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 15, 2016 5:01:17 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 15, 2016 4:58:16 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 15, 2016 2:48:14 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 14, 2016 8:53:08 AM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 11, 2016 10:03:10 AM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 10, 2016 3:53:15 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted
successstatus@servicestatus.plus.comJan 8, 2016 5:13:17 PM0plusnet.serv... @ a sub domain of one of my domainsAccepted

HolaPussycat
Grafter
Posts: 50
Registered: 29-03-2011

Re: Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

The next spam email coming in at 10:09 today (25/01/2016) to that address.
No response from Plus.net at all?
[I left the address in on that second post, as that email address is already in the wild, as tested by a quick Google search]
Community Veteran
Posts: 4,729
Registered: 04-04-2007

Re: Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

Quote from: HolaPussycat
No response from Plus.net at all?

The service status mailing list as managed by the PlusNet Usergroup, not PlusNet staff;
Quote
Note: PlusNet Support can not provide any support for the tools offered on this website. Questions regarding these tools should be sent to the Author using the Contact the Author link on the appropriate tool.

Unfortunately the link referred to is dead! the whole site shows little activity since 2014!
You could try;
Quote
You can contact the maintainer of this Mailing List by emailing status@servicestatus.plus.com.

HolaPussycat
Grafter
Posts: 50
Registered: 29-03-2011

Re: Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

I did spot that line about, "managed by the PlusNet Usergroup, not PlusNet staff," but there must be someone on the forum who represents the PlusNet Usergroup.
I've resisted contacting the address address so far, as I figured the damage, once again, (http://community.plus.net/forum/index.php/topic,133959.0.html) is already done.
I also should add that I received the email, came here first and posted, then only the following day managed to find that link again, with all the corresponding info.
J
Community Veteran
Posts: 5,472
Thanks: 292
Fixes: 4
Registered: 11-08-2007

Re: Spam to Plus.net Service Status specific email address @ 2016/01/21 22:53

Quote from: HolaPussycat
I did spot that line about, "managed by the PlusNet Usergroup, not PlusNet staff," but there must be someone on the forum who represents the PlusNet Usergroup.


Quote from: spraxyt
The UserTools Service Status mailing list is managed by the UserGroup. Subscribers sign up and unsubscribe using the application on the website which was written and is maintained by the UserGroup.
The MySQL server which holds the database is administered by Plusnet.