The CRN Test Center security test network has seen an upswing in the amount of spam being pushed through SMTP. The domain, realgreatgifts.com is a repeat offender. Pisumikta.com is hawking the department store, Kohl's shopping card via spam. Also, there are lots of offers for singles hook-ups via dating sites from lakedefine.com and friendtelephone.com
Additionally, there is quite a number of ecomony- centric spam messages. leadelope.com is sending spam about applying for federal grants. Others are promoting ways to cash in on Twitter. Snowlead.com is spamming about consolidating debt while oxygencocoa.com is providing information on $100.00 visa gift cards.
Remember the recent media coverage on thousands of Americans receiving those "your car warranty is about to expire" phone calls? Well, since the media shed light on the obnoxious callers, it seems that the parties responsible for them have shifted to using spam to solicit the same messages. Here's a sample of the message data:
From: Extend Your Warranty
ExtendYourWarranty@bestuplink.com
To: slynn@ectestlab.com
Subject: Vehicle Warranty - 60% OFF
We also see evidence of an IP address that geolocates to Argentina, looking for a VNC exploit on the test network. And finally, TCP SYN scans are commonplace in the CRN Test Center security test network but lately, we have been seeing port scanning coming from domains that appear to be legitimate business domains. One is acbamerican.com. An internet search on this domain shows that it's an Accounts Receivable Solutions Provider.
