Noel Leemings Database...

Forums › Off topic › Noel Leemings Database...

mdav056

424 posts

Ultimate Geek

Subscriber

#139047 25-Jan-2014 22:24

So, I get this email from Noel saying that my online purchase of a Galaxy Note 3 (at quite a good price, I might say) has been approved. While I shall be very happy to receive this, I did not order it, nor is my name Andrea, not does Andrea share my email address. She clearly has good taste.

I think their data base is screwed up. This worries me, and should worry everyone.

Now I'm waiting for the Note 3 to arrive; and checking my bank accounts!

gml

1 | 2

BDFL - Memuneh
67049 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#974370 25-Jan-2014 22:38

I doubt it has come from NL and I doubt they have access to NL's "database". It's just spam and the sender used NL in the email. He could have used Dick Smith, Whitccouls or whatever without problem as email sender spoofing is easy to do and require no access to any of theirs systems.

johnr

19282 posts

Uber Geek
Inactive user

#974385 25-Jan-2014 22:58

Just delete it

Batman

Mad Scientist
22158 posts

Uber Geek

Trusted

Lifetime subscriber

#974417 26-Jan-2014 00:23

Wait ... The prince of nigeria is about to give you all his wealth any minute now ...

Involuntary autocorrect in operation on mobile device. Apologies in advance.

AidanS

458 posts

Ultimate Geek

#974418 26-Jan-2014 00:25

joker97: Wait ... The prince of nigeria is about to give you all his wealth any minute now ...

Any chance that I can grab a share of this? Say 50%? Wait; 50% of $0, is...

-A

Coil

6615 posts

Uber Geek
Inactive user

#974434 26-Jan-2014 00:38

joker97: Wait ... The prince of nigeria is about to give you all his wealth any minute now ...

mdav056

424 posts

Ultimate Geek

Subscriber

#974725 26-Jan-2014 18:07

Interesting how this thread developed; the first post suggested it might not be from NL but actually spam, and everyone else followed obediently.

I am pretty sure it was from NL (standard acknowledgement form email; OK easily spoofed) and that not was not spam or malicious -- because it did not ask me to reply, click anywhere, send money, do anything. If anyone can explain how anyone could gain anything from sending me such an acknowledgement, maybe even sending me a free Note 3, I'd be glad to hear (and, if effective, maybe...)

Another pro: They screwed up before with me, allocating me a totally different and unknown physical address.

NL screwed up. Looks to me like a bad sort. Don't like it when this happens -- what gets leaked to other users?

Geekzone should take such reports rather more seriously.

gml

AidanS

458 posts

Ultimate Geek

#974728 26-Jan-2014 18:20

OP, could you please advise what server the email was sent from? Be Careful not to be fooled by the displayed domain, but rather the actual domain/server it was sent from.

-A

mattwnz

16168 posts

Uber Geek

#974729 26-Jan-2014 18:22

mdav056: Interesting how this thread developed; the first post suggested it might not be from NL but actually spam, and everyone else followed obediently.

I am pretty sure it was from NL (standard acknowledgement form email; OK easily spoofed) and that not was not spam or malicious -- because it did not ask me to reply, click anywhere, send money, do anything. If anyone can explain how anyone could gain anything from sending me such an acknowledgement, maybe even sending me a free Note 3, I'd be glad to hear (and, if effective, maybe...)

Another pro: They screwed up before with me, allocating me a totally different and unknown physical address.

NL screwed up. Looks to me like a bad sort. Don't like it when this happens -- what gets leaked to other users?

Geekzone should take such reports rather more seriously.

Have you looked at the header information in the email, as that should show if it was sent from their server or not. If so you should contact them and bring up your concerns. based on the problems they had with their bond and bond website last year selling things cheaper than they have been, and then not honouring orders, nothing would surprise me,

RunningMan

5918 posts

Uber Geek

#974735 26-Jan-2014 18:44

mdav056:If anyone can explain how anyone could gain anything from sending me such an acknowledgement, maybe even sending me a free Note 3, I'd be glad to hear (and, if effective, maybe...)

Easy. You reply to the email and say "I'm not Andrea, didn't order this product".

They email you back, and say "give us your bank account number and name, and DOB and mother's maiden name and we'll give you your money back"

You (or someone more gullible than you) do as they ask.

EDIT: Also, why on earth would NL approve a purchase - you don't have to apply to be eligible to buy something from them, you just give them your credit card details and they send you whatever you ordered. As above, what's the originating SMTP server?

scottjpalmer

Minimalist
5625 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#974819 26-Jan-2014 20:58

mdav056: Geekzone should take such reports rather more seriously.

Huh? Why should GZ care about a single user with an unsubstantiated claim?

How did Noel Leeming respond? Surely that is far more relevant.

freitasm

BDFL - Memuneh
67049 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#974830 26-Jan-2014 21:30

I already gave the most likely scenario. Phishing email with spoofed sender. Most likely the scammer is such an idiot that he forgot to configure the email with the links to the phishing site.

johnr

19282 posts

Uber Geek
Inactive user

#974868 26-Jan-2014 22:33

Provide us with the email headers and why do we on Geekzone need to do anything? Speak to NL

TwoSeven

1456 posts

Uber Geek

#974902 27-Jan-2014 08:32

I would phone said company by using their phonebook listed telephone number (not the one provided in the email) and tell them they have sent you another customers order confirmation. At the very least, one can get ones own data verified for correctness.

Also, I would expect any organisation to take potential spam as a serous issue rather than telling the consumer what they think it is and ignoring the issue.

What can the site do, at the very least, make a note of it, encourage others to look out for the issue and potentially report it to the appropriate organisation (a media query often prompts an organisation to look into something a little more in-depth) - it gives that organisation the opportunity to improve their process and potentially provide a better quality of service to the consumer (the same one that is using this site).

Software Engineer
(the practice of real science, engineering and management)

mdav056

424 posts

Ultimate Geek

Subscriber

#978365 31-Jan-2014 22:37

I did, of course, inform NL, and this is part of what I received:

"There seems to be an in isolated issue which occurs with our internet order notification system after we perform a rare process to amend an internet sale.
After receiving your email I have logged the case as an urgent matter with our IT department. They are currently working on a resolution and fixing the error."

So, just a rare IT issue. Clearly I shouldn't worry my little head, and they'll fix it. So glad it is isolated.
But it is the rare, isolated, bug that is the most worrisome. Surely, testing amendments to an internet sale should have been essential when the system was built?

gml

Zeon

3583 posts

Uber Geek

Trusted

#978388 1-Feb-2014 00:44

Seriously Why do people not use SPF more to stop spoofed emails... Xtra?

Speedtest 2019-10-14

1 | 2