PDA

View Full Version : 2L now trolling websites to Spam?



kolding
2008-07-29, 09:27
This morning, I received 2 emails from a music company 2L (2L.no). One of these came to an email address that I only use to receive email about some SqueezeCenter plugins that I've worked on, and never sign up for any lists. Clearly, 2L is scraping SlimDevices website and forums for email addresses, and using them to create what are essentially spam lists. This type of behavior is totally unacceptable for a legitimate company.

The mail, of course, didn't bother to explain where it got my email address, or even to offer a way to get off of their mailing list.

2L has reduced themselves to the level of fake viagra/cialis, fake rolex, and male enlargement product pushers. So sounds like a good company to be avoiding in the future.

All they've done with this is guarantee that I won't be purchasing anything from them. Ever.

Eric

bklaas
2008-07-29, 09:40
This morning, I received 2 emails from Linn's music subsidary, 2L (2L.no). One of these came to an email address that I only use to receive email about some SqueezeCenter plugins that I've worked on, and never sign up for any lists. Clearly, Linn/2L is scraping SlimDevices website and forums for email addresses, and using them to create what are essentially spam lists. This type of behavior is totally unacceptable for a legitimate company.

The mail, of course, didn't bother to explain where it got my email address, or even to offer a way to get off of their mailing list.

Linn/2L has reduced themselves to the level of fake viagra/cialis, fake rolex, and male enlargement product pushers. So sounds like a good company to be avoiding in the future.

All they've done with this is guarantee that I won't be purchasing anything from them. Ever.

Eric

I got the same spam, Eric. Not that I'd ever be buying anything from 2L, but that certainly cinches it. Email harvesting = bottom feeding.

#!/ben

Mark Lanctot
2008-07-29, 10:02
Same here. This is completely unprofessional behaviour and besmirches the whole company.

Phil Leigh
2008-07-29, 10:26
Perhaps you guys better check your facts - what makes you think that there is any connection between Linn Products, a UK company founded by a Dane and 2L (a Norwegian record label owned by Morten Lindberg under the incorporated vehicle Lindberg Lyd Ltd)? The only connection I can find is that some 2L recordings were licensed to Linn Records for distribution several years ago...

I very much doubt that Linn has anything to do with your spam emails...perhaps you could forward one on to Linn if there is something in there that makes it look like Linn are doing this as they will be very angry...

Also, I believe the thread title might be libellous...

(If I'm wrong I'm wrong)

pippin
2008-07-29, 10:53
well, at least the spam is real. I also got two of those, one of them to coolio's email address which I only use iPeng related. Yet it is up on the website...

Phil Leigh
2008-07-29, 10:54
well, at least the spam is real. I also got two of those, one of them to coolio's email address which I only use iPeng related. Yet it is up on the website...

what does this spam say?

kolding
2008-07-29, 10:56
Perhaps you guys better check your facts - what makes you think that there is any connection between Linn Products, a UK company founded by a Dane and 2L (a Norwegian record label owned by Morten Lindberg under the incorporated vehicle Lindberg Lyd Ltd)? The only connection I can find is that some 2L recordings were licensed to Linn Records for distribution several years ago...

I very much doubt that Linn has anything to do with your spam emails...perhaps you could forward one on to Linn if there is something in there that makes it look like Linn are doing this as they will be very angry...

Also, I believe the thread title might be libellous...

(If I'm wrong I'm wrong)

My bad. I thought I saw I'd read before that Linn and 2L were associated, but I can't seem to see where I read that. My apologies to Linn, and I've removed there reference from the original post.

However, 2L still appears to be spamming web-scraping trolls.

Eric

Phil Leigh
2008-07-29, 10:57
My bad. I thought I saw I'd read before that Linn and 2L were associated, but I can't seem to see where I read that. My apologies to Linn, and I've removed there reference from the original post.

However, 2L still appears to be spamming web-scraping trolls.

Eric

Eric - agreed! Looks like 2L need to "reconsider" their marketing strategies!

kolding
2008-07-29, 11:01
what does this spam say?

Buy our music? Some Mozart recording in FLAC by artists I've never heard of. Sorry, not going to quote their annoying advertising to pump them up.

Eric

Phil Leigh
2008-07-29, 11:36
Buy our music? Some Mozart recording in FLAC by artists I've never heard of. Sorry, not going to quote their annoying advertising to pump them up.

Eric

No - absolutely not!

Mnyb
2008-07-29, 12:51
2L must have harvested email addresses from this forum ? I also got this spam ?

seanadams
2008-07-29, 13:53
I got this spam too. I contacted 2L about it and promptly received an apology, stating that all such addresses have been removed from their list.

Mark Lanctot
2008-08-13, 08:48
I got this spam too. I contacted 2L about it and promptly received an apology, stating that all such addresses have been removed from their list.

I just received more spam from them a few minutes ago.

bpa
2008-08-13, 09:10
I received a 2nd message as well. It looks like they got the address from bugzilla.

seanadams
2008-08-13, 09:22
This appears to be their ISP: http://www.powertech.no/

Mnyb
2008-08-13, 09:28
And here to, now they are in my firefox junk filter never to be seen again.
what a great campaign ;-)
Annoy almost every plausible customer.
Hopefully there "business" go belly up soon.

Mnyb
2008-08-13, 09:43
This appears to be their ISP: http://www.powertech.no/

Thanks, i wrote an email to powertech, explaining that 2L are spamming, but due to my lack of technical insight i didn't provide any technical evidence.
I had already erased the email and have not traced this in any way.

trulskarlsen
2008-08-13, 10:34
Hi.

Regarding the sending of spam to you guys, when it comes to viagra and rolex-spam it's usually a virus and not spam sent out intentionally. Viruses can harvest email-addresses by crawling around on the web by itself or by watching what the users of the computer are doing. It might also be sent from computers having no connections to l2.no at all, but sent with a fake originator - the email-protocol was made when the internet was 12 guys that knew eachother personally and unfortnatly has lots of flaws.

In all emailclients theres a way to see the full header of an email, which contains lots of information. Please watch the full header of your recieved spam and look for ip-addresses or hostnames. If you see any ip's that starts with 195.159 or any hostname that ends with .powertech.no please forward the email to abuse at powertech dot no and we'll contact the customer. If you find other ips than ours you can use tools to find out which isp it is and every isp should have contact info for abuse-matters.
American ips can be looked up at http://www.arin.net/whois/
European ips can be looked up at http://www.ripe.net and
Asian ips can be looked up at http://www.apnic.com/ .

So remember that it's not only a chance, it's probable that this is a virus and not l2.no spamming.

If you have any more questions about this matter or have a report of spam originating from 195.159.x.x or x.powertech.no feel free to email us!

Regards,
Truls Karlsen
PowerTech Information Systems AS
+47 23 01 00 20

kdf
2008-08-13, 10:43
Trulskarlsen,

The spam emails in question are not ads for viagra, they are ads for 2L and their products. They are very clearly from, or on behalf of 2L.

I'll be sending you a copy of the header shortly.

thanks,
kdf

trulskarlsen
2008-08-13, 10:44
Hi again.

I misunderstood the first post, mentioning just that. :)

Send me full headers and we'll take it from there.

Thanks again!

Regards,
Truls Karlsen
PowerTech Information Systems AS
+47 23 01 00 20

kdf
2008-08-13, 10:50
A copy of the header source should be in your abuse inbox shortly (from my
email, slim-mail at deane-freeeman dot com).

Thanks for your prompt response.
-kdf

seanadams
2008-08-13, 10:58
So remember that it's not only a chance, it's probable that this is a virus and not l2.no spamming.


Truls,

Thank you for your reply, but there is no chance that these were unintentional or sent by someone else. Indeed, Morten Lindberg at 2L has twice acknowledged sending them. Here are the headers indicating that they originated directly from your netblock. Your customer has continued to do this even after apologizing and saying that they would remove us from their list. Under the circumstances, I would suggest terminating their service. Otherwise you run the risk of having your address space added to the RBLs.

From: music@2L.no
Subject: 2L - High Definition Music Download
Date: July 29, 2008 7:56:24 AM PDT
To: --my_email_address--
Return-Path: <music@2L.no>
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mail.dmz.slimdevices.com
X-Spam-Level:
X-Spam-Status: No, score=-1.0 required=5.0 tests=BAYES_05,HTML_MESSAGE, RDNS_NONE autolearn=no version=3.2.4
X-Original-To: --my_email_address--
Delivered-To: --my_email_address--
Received: from portal.2l.no (unknown [195.159.7.170]) by mail.slimdevices.com (Postfix) with ESMTP id C4099FD806F for <--my_email_address-->; Tue, 29 Jul 2008 07:57:12 -0700 (PDT)
Received: from 2L.no ([192.168.1.50]) by portal.2l.no (Sun Java(tm) System Messaging Server 6.3-0.15 (built Feb 9 2007)) with ESMTP id <0K4R004EYW0S4M90@portal.2l.no> for s--my_email_address--; Tue, 29 Jul 2008 16:53:16 +0200 (CEST)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="Boundary_(ID_zqX6cwmh6pHTeAkVxqmglw)"
Message-Id: <291e18d6cfeab84c91d302a29960b2f7@2L.no>
X-Priority: 3
X-Mailer: Email Sender 2.0
X-Clamav-Status: Virus Free

Milhouse
2008-08-13, 13:13
I received a 2nd message as well. It looks like they
got the address from bugzilla.

The Maemo project also had email addresses harvested from it's Bugzilla, they have now patched[1][2] Bugzilla to hide email addresses when viewed by
anonymous users. Slim Devices might want to do likewise and protect the email addresses of reporters, commenters etc. from harvesters.

1. https://bugs.maemo.org/show_bug.cgi?id=1383
2. https://bugs.maemo.org/show_bug.cgi?id=2580

pippin
2008-08-13, 23:44
I received a 2nd message as well. It looks like they got the address from bugzilla.

Not all of them.
I also got it to an adress that I didn't use on bugzilla, but I did use in the forum, albeit NOT in mailto format! I think they must also be manually harvesting some addresses, after all, this is pretty well targeted!

johanneswh
2008-09-12, 02:34
I generaly ABHOR spam, and this is a sad example of bad judgement on 2L's part. That being said: This company offers some truly remarkable recordings. As far as I can see 2L is all the good things the big recors companies SHOULD be, and they actualy deserve your money.

I will not hold it against anyone if they take actions against spammers, but keep in mind that this is a small company offering some of the best recordings the world has ever seen; reasonably priced, without DRM and soon (at least thats what Morten Lindberg told me in an email recently) downloadable in the quality the customer chooses.

This is NOT RIIA/Microsoft/Apple/Spawn of Satan; it's a genuine treasure chest for music lovers. Feel free to boicot them, but know that it's your own loss...

(No, I am in no way whatsoever associated with, employed by or in any other way in coupled with 2L. Just a happy customer.)

Mnyb
2008-09-12, 07:52
Well would you entrust your credit card number to one that has the "bad judgment" to spam ?
"Bad judgement" is seldom limited, people with this problem seems to have it in all other situations to : )
The records might be just fine, who knows ? but thats not the point.

Bizarroterl
2008-10-10, 14:41
I'm getting spam from my account I use for this forum. It's all coming from Logitech though. :(