Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)
For a laugh, take a look at this spammer site, www.ushplans.com, currently hosted by Net Access Corporation. It claims to be "US Health Plans Inc., The Nations (sic) Leading Dental Plan" but its head office appears to be a mail drop box in New Jersey and its only known employee appears to be a telephone answering machine in Georgia. The domain name registration details give a fake address. NAC has been hosting this site for the last year, I've asked them three times to investigate and remove it, but I didn't get any constructive response.
From: william+nanog@hq.dreamhost.com (Will Yardley) To: nanog@merit.edu Subject: Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?) Date: Mon, 28 Jul 2003 11:43:43 -0700 MIME-Version: 1.0 Received: from mc9-f35.bay6.hotmail.com ([65.54.166.42]) by mc9-s18.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 2003 11:45:32 -0700 Received: from trapdoor.merit.edu ([198.108.1.26]) by mc9-f35.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 2003 11:45:32 -0700 Received: by trapdoor.merit.edu (Postfix)id E06BF9124D; Mon, 28 Jul 2003 14:43:48 -0400 (EDT) Received: by trapdoor.merit.edu (Postfix, from userid 56)id A9FBA9124E; Mon, 28 Jul 2003 14:43:48 -0400 (EDT) Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])by trapdoor.merit.edu (Postfix) with ESMTP id 6C42B9124Dfor <nanog@trapdoor.merit.edu>; Mon, 28 Jul 2003 14:43:45 -0400 (EDT) Received: by segue.merit.edu (Postfix)id 4C2835DDF2; Mon, 28 Jul 2003 14:43:45 -0400 (EDT) Received: from mail.hq.newdream.net (mail.hq.newdream.net [66.33.200.10])by segue.merit.edu (Postfix) with ESMTP id C3F025DDF0for <nanog@merit.edu>; Mon, 28 Jul 2003 14:43:44 -0400 (EDT) Received: from 127.0.0.1 (zugzug.hq.newdream.net [127.0.0.1])by drama.hq.newdream.net (Postfix) with SMTP id E6AB93B2EDfor <nanog@merit.edu>; Mon, 28 Jul 2003 11:43:43 -0700 (PDT) Received: by mail.hq.newdream.net (Postfix, from userid 1012)id D84513B2EB; Mon, 28 Jul 2003 11:43:43 -0700 (PDT) X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC Delivered-To: nanog-outgoing@trapdoor.merit.edu Delivered-To: nanog@trapdoor.merit.edu Delivered-To: nanog@merit.edu Message-ID: <20030728184343.GC29468@hq.newdream.net> Mail-Followup-To: nanog@merit.edu References: <Law12-F88E2sCRBHZXF0000ea4c@hotmail.com> In-Reply-To: <Law12-F88E2sCRBHZXF0000ea4c@hotmail.com> Organization: New Dream Network X-Message-Flag: Why are you reading this? User-Agent: Mutt/1.5.3i Sender: owner-nanog@merit.edu Precedence: bulk Errors-To: owner-nanog-outgoing@merit.edu X-Loop: nanog Return-Path: owner-nanog@merit.edu X-OriginalArrivalTime: 28 Jul 2003 18:45:32.0357 (UTC) FILETIME=[6C832750:01C35538]
On Mon, Jul 28, 2003 at 08:56:01AM +0000, Peter Gray wrote:
On the subject of host security issues and spam, try doing a search of the Usenet archive for '"Net Access Corporation" spam'. You get 328 results. And those are just the spams which people have traced to NAC, never mind the millions of untraced ones....
The fact that their abusebot automatically forwards complaints to the spammer^Wcustomer (even setting the 'From' address on the autoresponse to the customer's address) may have something to do with this.
-- "Since when is skepticism un-American? Dissent's not treason but they talk like it's the same..." (Sleater-Kinney - "Combat Rock")
_________________________________________________________________ On the move? Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile
At 01:00 AM 7/29/2003, Peter Gray wrote:
For a laugh, take a look at this spammer site, www.ushplans.com, currently hosted by Net Access Corporation. It claims to be "US Health Plans Inc., The Nations (sic) Leading Dental Plan" but its head office appears to be a mail drop box in New Jersey and its only known employee appears to be a telephone answering machine in Georgia. The domain name registration details give a fake address. NAC has been hosting this site for the last year, I've asked them three times to investigate and remove it, but I didn't get any constructive response.
This is nanog. spam-l is down the corridor thataway ----> (google if you can't find it) jc
participants (2)
-
JC Dill
-
Peter Gray