Legit or not? 'We're Upgrading Your Plan For Free'

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Legit or not? 'We're Upgrading Your Plan For Free'

Jarno

270 posts

Ultimate Geek

#61651 20-May-2010 19:20

Being an ISP, I'm sure Orcon is all too aware about phishing, right? So why is it using some third party marketing firm to send out emails about a plan upgrade, complete with clickable links pointing to several different websites well outside of Orcon's domain?

Is it legit? Is it not? How am I supposed to know?

johnr

19282 posts

Uber Geek
Inactive user

#332554 20-May-2010 19:39

other orcon customers are saying the same thing must be real

nate

6473 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#332565 20-May-2010 20:03

Jarno: Being an ISP, I'm sure Orcon is all too aware about phishing, right? So why is it using some third party marketing firm to send out emails about a plan upgrade, complete with clickable links pointing to several different websites well outside of Orcon's domain?

It does seem alittle dodge.

Sounddude

I fix stuff!
1928 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#332577 20-May-2010 20:24

Its legit.

dan

1134 posts

Uber Geek

Lifetime subscriber

#332599 20-May-2010 20:51

when you send a mailout as "support=orcon.net.nz@mcsv138.net" it kinda seems half assed

So who is getting this deal? i have customers on the same plan and only some got it and others did not, whats with that?

who exactly is getting the extra 10GB per month?

duncanblair

248 posts

Master Geek

Trusted

#332905 21-May-2010 13:00

Hi guys,

As Simon said, this is legit. Not sure why it would have come from that weird address, we didn't outsource it, was all done internally. Did anyone else notice that it came from a weird address?

There is some more information about the changes to the data caps here: http://www.orcon.net.nz/about/article/orcon_increases_data_caps

Hope you enjoy the extra data!

Jarno

270 posts

Ultimate Geek

#332930 21-May-2010 13:41

Some selective snips from the message header:

Received: from Debian-exim by mx9.orcon.net.nz with local (Exim 4.69)
(envelope-from <bounce-1573513-64749-jarno=orcon.net.nz@mcsv138.net>)
id 1OExkI-0007IQ-Gn
Received: from mcsv138.net ([69.20.90.13])
by mx9.orcon.net.nz with esmtp (Exim 4.69)
(envelope-from <bounce-1573513-64749-jarno=orcon.net.nz@mcsv138.net>)
id 1OEwkz-0008Uw-Dn

Received: by mcsv138.net (PowerMTA(TM) v3.5r15) id huioji0lj3gh
List-Unsubscribe: <http://orcon.us1.list-manage.com/unsubscribe?u=blablabla>
Sender: "Orcon" <support=orcon.net.nz@mcsv138.net>

and from the message body:

[2]Unsubscribe | [3]Update Profile | [4]Forward to a Friend
Links:
2. http://orcon.us1.list-manage.com/unsubscribe?u=blablabla
3. http://orcon.us1.list-manage.com/profile?u=blablabla
4. http://us1.forward-to-friend.com/forward?u=blablabla

and from the HTML part:

<meta name="author" content="Tim Dawson - http://www.reconfine.com" />

So yeah, pretty much all over the place with different addresses to whoknowswhere.

Athlonite

1828 posts

Uber Geek
Inactive user

#333285 22-May-2010 15:33

(Asked whois.onlinenic.com:43 about reconfine.com)
Registrant:
Tim Dwason reconfine@gmail.com
64.212603762
Tim Dawson
238 Burgoyne St
Auckland - NZ 1021
Domain Name: reconfine.com
Record last updated at 2009-04-21 20: 11: 37
Record created on 2003/5/7
Record expired on 2012/5/7
Domain servers in listed order:
ns2.mediatemple.net
ns1.mediatemple.net
Administrator: Name-- Tim Dwason
EMail-: reconfine@gmail.com

tel --: 64.212603762
org: Tim Dawson
238 Burgoyne St
Auckland - NZ 1021
Technical Contactor: Name-- Kim Thibault
EMail-: admin@maxnet.co.nz

tel --: 49300722.493007222
org: Maximum Internet Limited
PO Box 8006
Auckland AK AF 1035
Billing Contactor:
Name-- Tim Dwason
EMail-: war_against_the_wind@hotmail.com

tel --: 64 7 829-4841
org: Tim Dwason
17 Hurrell Rd
Hamilton Hm New Zealand 1035
Registration Service Provider:
name: Maximum Internet Limited
tel: 64.93007222
fax: 64.93007227
http://www.maxnet.co.nz

Results from a samspade.org look up

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

willnz

573 posts

Ultimate Geek

Trusted

#334065 24-May-2010 14:37

This is why you should never hide your name in company HTML

Tim was a web developer at Orcon when I was working there, and reconfine.com is one of his personal domains. And as Duncan said, the offer is legit.

reconfine

4 posts

Wannabe Geek

#334083 24-May-2010 15:13

Hi Guys,

As the aforementioned HTML email author (Tim Dawson) , I thought i'd drop in this convo:

Working in my role as a contracter to Orcon (I was also previously employed as their inhouse Web Designer), Orcon has contracted me to create the email template it appears they used to send out this offer (which is legit as Duncan Blair, the Orcon marketing manager has stated), and as a troubleshooting / contact reference included my domain & name as the author in the template, which is my personal standard practice.

Arguably, this has worked, however, coupled with the headers generated by the email campaign software orcon is using, it was never my intention to confuse people as to sender authenticity.

my apologies.