Kiwi spammers: Smartmailpro and Mercury Subs

, posted: 31-Aug-2006 11:37

Despite complaining about unsolicited email from Mercury Subs in April this year, I got another spam to my IDG address. Mercury Subs' dirty address list doesn't even have the right first names, as you can see:

Mercury Subs

Full message headers:
Return-path:
Envelope-to: xxxxx@xxxx.xxxx
Delivery-date: Thu, 31 Aug 2006 10:19:02 +1200
Received: from idgnz1.idg.co.nz ([210.48.100.3])
by
(envelope-from ) id 1GIYOe-000HNW-HJ for xxxxx;
Thu, 31 Aug 2006 10:19:02 +1200
Received: from d2s.iconz.co.nz ([210.48.22.37])
by idgnz1.idg.co.nz (Lotus Domino Release 6.5.5)
with SMTP id 2006083110200343-4486 ;
Thu, 31 Aug 2006 10:20:03 +1200
Received-SPF: none (mercurysubs.co.nz)
Received: from smtp.smartmailpro.co.nz (smtp.smartmailpro.co.nz [202.191.34.68])
by d2s.iconz.co.nz (Death2Spam SMTP Sentinel Server 2.5.4 (31-Jul-06))
for ;
Thu, 31 Aug 2006 10:18:49 +1200
Received: from smartmailpro.co.nz ([202.191.34.65]) by 202.191.34.68 with SMTP (Lyris MailEngine v2.2e);
Thu, 31 Aug 2006 09:47:57 +1200
X-BounceID: 3327128,95605
From: Mercury Subs
To: "juha@idg.co.nz"
Date: Thu, 31 Aug 2006 09:48:03 +1200
MIME-Version: 1.0 Message-Id:
X-Virus-Scanned:
D2S-AV Samurai at d2s.iconz.co.nz; probability=0.2902 [11ms]
X-MIMETrack: Itemize by SMTP Server on Postal/NZWeb(Release 6.5.5|November 30, 2005)
at 31/08/2006 10:20:03,
Serialize by Router on Postal/NZWeb(Release 6.5.5|November 30, 2005) at 31/08/2006 10:20:08,
Serialize complete at 31/08/2006 10:20:08
Content-Type: multipart/alternative;
boundary="----=_NextPart_1217754e_e928_4788_8396_2615d1447dd8"
Last time around, Mercury Subs was spamming for Mother's Day subscriptions gifts.

Out of curiosity, I had a look at "my account" over at Smartmailpro's website:

Smartmailpro

Fascinating. I have never set up an account with Smartmailpro. Wonder who "Ann-Marie Richardson" is?

Mercury Subscriptions somewhat broken website with spelling errors and pages without content says they're located at:

The PMP Office
Ground Floor
106 Customs Street West,
Viaduct Harbour
Auckland
New Zealand

The whois data for mercurysubs.co.nz says:

registrant_contact_name: Mercury Subs Ltd
registrant_contact_address1: P.O Box 91549
registrant_contact_address2: AMSC
registrant_contact_city: AUCKLAND
registrant_contact_province: Not Applicable
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +64 9 9792562
registrant_contact_fax: +64 9 9792561
registrant_contact_email: stuart@mercurysubs.co.nz


They appear to be hosted by Auckland ISP Maxnet, or one of their VISPs.

The people who spam for Mercury Subs, Smartmailpro, seem to be located in Ponsonby:

registrant_contact_name: Jericho Ltd
registrant_contact_address1: P.O.Box 47 125
registrant_contact_address2: Ponsonby
registrant_contact_city: Auckland
registrant_contact_country: NZ (NEW ZEALAND)
registrant_contact_phone: +64 9 3606463
registrant_contact_fax: +64 9 3601654
registrant_contact_email: jeff@jericho.co.nz

Smartmailpro's mail server seems to be hosted on iServe's network in Wellington.

Looking at their website, Smartmailpro/Jericho has these companies as customers:

Telecom
3M
Tower
GIB
Pink Batts
Tegel
Cancer Society
LiveSmart
The Warehouse
Vero

Very disappointing...

Other related posts:
Video: Kim Dotcom and Mathias Ortman at the IITP Mega breakfast
Two-factor authentication broken
The problem with naming and shaming






comments powered by Disqus


Writing

Google News search
Wired
Guardian
IT News
PC World New Zealand
Computerworld NZ
PC World and Computerworld Australia
PC World US
Computerworld US
NZ Herald
Virus Bulletin

Content copyright © Juha Saarinen. If you wish to use the content of my blog on your site, please contact me for details. I'm usually happy to share my material as long as it's not for spamblogs and content farms. Please attribute with a link back to this blog. If you wish to advertise on my blog, please drop me an email to discuss the details.
Comments policy All comments posted on this blog are the copyright and responsibility of the submitters in question. Comments commercial and promotional in nature are not allowed. Please ensure that your comments are on topic and refrain from making personal remarks.