Spam from Open Host / Umbrellar

Forums › New Zealand Broadband › Spam from Open Host / Umbrellar

1 | 2

Linux

11391 posts

Uber Geek

Trusted

Lifetime subscriber

#1848031 17-Aug-2017 12:53

MichaelNZ:
Linux: Make sure the DIA is contacted about the SPAM

Linux

DIA seem to be good for passports and marriages... No complaints there. But my impression is pretty weak on spam.

networkn:

I have had miserable experiences with Umbrellr and actively move clients who use them to other hosts. Even their management are belligerent and rude in my experience.

Agreed - they seem to me to be totally oblivious to the industry norms.

I reported some SMS SPAM about 4 years back that came from a well known spammer located here in Auckland (forgot his name) but investigation person flew up from Wellington to interview me

The spammer around the same time registered on Geekzone and got the ban hammer in the matter of minutes

Linux

Edit: Was Brendan Battles

rscole86

4973 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#1851380 23-Aug-2017 16:42

[tinfoil hat]Coincidence... or not. This is the second time I have received an email from *@swittch.nz I cannot remember what was in the first, but this one has a pdf, and that has a dropbox logo and a bit.ly url. Obviously I ain't going to click on it, but thought I would check out the whois for the swittch.nz domain.

registrar_name: Umbrellar Limited t/a Domain Agent

[/tinfoil hat]

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1885866 18-Oct-2017 18:28

More spam from an Umbrellar customer-

Hi [redacted],

Plans for building consent, either now or one day when you need them.

A new home or alterations to your existing home.

The automation has now arrived in New Zealand that can help you design your project and take it through to getting the building consent much faster and more cost-effectively and with less fuss than conventional draughting methods.

PlansMachine.co.nz is the website behind this new technology. Please put this web address aside for future or hand it on to friends or family who are looking to build in future.

Kind Regards,
Paul from PlansMachine
PH: 021 2244 808

version: 8.0
query_datetime: 2017-10-18T18:27:01+13:00
domain_name: plansmachine.co.nz
query_status: 200 Active
domain_dateregistered: 2015-10-27T20:56:53+13:00
domain_datebilleduntil: 2018-10-27T20:56:53+13:00
domain_datelastmodified: 2017-09-12T10:30:40+12:00
domain_delegaterequested: yes
domain_signed: no
%
registrar_name: Umbrellar Limited t/a Freeparking
registrar_address1: Level 2, 2 Devon St East
registrar_address2: www.freeparking.co.nz
registrar_city: New Plymouth
registrar_country: NZ (NEW ZEALAND)
registrar_phone: +64 6 7572881
registrar_fax: +64 6 7572883
registrar_email: domains@freeparking.co.nz
%
registrant_contact_name: Paul Rivers
registrant_contact_address1: P.O. Box 81
registrant_contact_address2: Woodville
registrant_contact_city: Woodville
registrant_contact_postalcode: 4945
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +64 6 3765555
registrant_contact_fax: +64 6 3755551
registrant_contact_email: paul-rivers@xtra.co.nz

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1898582 10-Nov-2017 03:55

Another spammer hosted by this company -

version: 8.0
query_datetime: 2017-11-10T03:49:57+13:00
domain_name: growdigitalmarketing.co.nz
query_status: 200 Active
domain_dateregistered: 2017-09-11T13:53:58+12:00
domain_datebilleduntil: 2018-09-11T13:53:58+12:00
domain_datelastmodified: 2017-09-11T13:53:58+12:00
domain_delegaterequested: yes
domain_signed: no
%
registrar_name: Umbrellar Limited t/a Freeparking
registrar_address1: Level 2, 2 Devon St East
registrar_address2: www.freeparking.co.nz
registrar_city: New Plymouth
registrar_country: NZ (NEW ZEALAND)
registrar_phone: +64 6 7572881
registrar_fax: +64 6 7572883
registrar_email: domains@freeparking.co.nz

Quote from their spam:

"With over 60,000 kiwi businesses on our records, we can extend your reach in a cost-effective way, to help kiwi businesses grow."

So by their account, this is a large scale spam operation.

The company name is: Grow NZ Business Ltd https://app.companiesoffice.govt.nz/companies/app/ui/pages/companies/6325414

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

Oblivian

7296 posts

Uber Geek

ID Verified

#1898938 10-Nov-2017 14:41

The thread was not about customers who have accounts/domains with them sending spam.

But the actual company itself cold calling using customer database details.

Spam generated elsewhere for NZ based companies is pretty much the norm, just one rubbish method a lot of SEO, statistical domain information companies and otherwise promise leads for on your behalf.

Wires crossed *red faced*

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1898942 10-Nov-2017 14:45

Oblivian: The thread was not about customers who have accounts/domains with them sending spam.

But the actual company itself cold calling using customer database details.

As the thread starter, I am pretty sure I know what the thread is about.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

Oblivian

7296 posts

Uber Geek

ID Verified

#1898944 10-Nov-2017 14:49

Mybad, wires crossed with the other where they were cold calling customers for .nz sales pitch

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1898957 10-Nov-2017 15:01

Oblivian:

Mybad, wires crossed with the other where they were cold calling customers for .nz sales pitch

From what I have seen there is quite a few issues with this company. The latest is a doozy. The previous spammers have promoted their own gigs. The latest spammer is using spam to promote their spamming services.

In some instances these companies use overseas mail servers to send the actual spam and these are not necessarily operated by Open Host / Umbrellar. But the common connection is still there.

But, in any case, what really gets me is their "don't give a damn" attitude.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1899281 11-Nov-2017 16:05

timbee:

Not sure if you're aware but a registrar doesn't actually mean they host their emails etc. From your previous replies looks like you have some sort of history / grudge with Umbrellar , but you should look into and learn how DNS works to get a better grasp on whos to blame here.

If you had read the previous posts before launching into an attack you would know the history. Also - I work professionally with DNS and have no interest in your n00b links or advice. Maybe you should read them and learn something.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

irpegg

142 posts

Master Geek

#1899286 11-Nov-2017 16:20

Sorry, this was meant to be constructive not to be an attack. Although i see your childish response and even going further to edit in "n00b" from your original post pretty much means i shouldn't really bother responding to the 'above rhetoric', but i will just so you can take away and learn from it. :)

The links are propagation checks, sure i could just paste my own CLI dig mx but i was just trying to be unbiased here to show you the propagation on differing ISP's cache, which clearly outlines you're witch hunting the wrong parties here whilst posting someones registrant information unnecessarily online.

MichaelNZ

1385 posts

Uber Geek

Trusted

Integrity Tech Solutions

#1899289 11-Nov-2017 16:35

timbee:

The links are propagation checks, sure i could just paste my own CLI dig mx but i was just trying to be unbiased here to show you the propagation on differing ISP's cache, which clearly outlines you're witch hunting the wrong parties here whilst posting someones registrant information unnecessarily online.

What it appears you have missed -

I have previously complained to this company about an incident where their client appeared to be using their service to perpetrate the spam (even their client claimed as much) and they didn't give a stuff.

This is combined with the sheer number of NZ spammers who are using their service (whether directly for spamming or to host websites promoted this way etc) seems to me to be way above the norm.

WFH Linux Systems and Networks Engineer in the Internet industry | Specialising in Mikrotik | APNIC member | Open to job offers

1 | 2