Is Parallels spamming me???

A

ATXP

Member
I'm received this message three times!

Dear ATXP,

Your account on Parallels Support Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 74.53.243.34

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://forum.parallels.com/login.php?do=lostpw

All the best,
Parallels Support Forum
Click to expand...

Why?
 
I got the same message - only once, with the same IP... Weird. It's from Chicago. I changed my password because I thought it was a little weird. And then I thought that maybe I should change all my passwords. Maybe not.

B
 
Unsolicited Spam

I, too, am suspicious.

If you look at the full headers of the message, you get this:
Code: 
Return-Path: <nobody@forum.parallelz.com>
Received: (qmail 19445 invoked from network); 8 Aug 2007 20:47:29 -0000
Received: from forum.parallelz.com ([66.197.12.178]) by ***.***.edu with ESMTP; 08 Aug 2007 15:47:29 -0500
Received: from forum.parallelz.com (forum.parallelz.com [127.0.0.1]) by forum.parallelz.com (8.12.11.20060308/8.12.11) with ESMTP id l78KlSET013577 for <****@***.edu>; Wed, 8 Aug 2007 16:47:28 -0400
Received: (from nobody@localhost) by forum.parallelz.com (8.12.11.20060308/8.12.11/Submit) id l78KlR4t013570; Wed, 8 Aug 2007 16:47:27 -0400

My email address and server addresses have been censored to ****@***.edu and ***.***.edu ;)

What the hell is parallelz.com? A whois.org lookup shows this:
Code: 
Registrant:
Joseph Jurczyk
10022 Gatewood Dr.
Brecksville, OH 44141
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: PARALLELZ.COM
Created on: 20-Apr-05
Expires on: 20-Apr-08
Last Updated on: 

Administrative Contact:
Jurczyk, Joseph jurczyk@yahoo.com
10022 Gatewood Dr.
Brecksville, OH 44141
United States
4405460183

Technical Contact:
Jurczyk, Joseph jurczyk@yahoo.com
10022 Gatewood Dr.
Brecksville, OH 44141
United States
4405460183

Domain servers in listed order:
CPNS01.SECURESERVER.NET
CPNS02.SECURESERVER.NET

Which has NOTHING to do with the real parallels.com Whois data:

Code: 
Domain Name: PARALLELS.COM

Registrant [25956]:
parallels
13755 Sunrise Valley Drive
Herndon
VA
20171
US


Administrative Contact [734553]:
*** *** ***@parallels.com
parallels

Billing Contact [25956]:
*** *** ***@parallelssoft.com
parallels

Technical Contact [25956]:
*** *** ***@parallelssoft.com
parallels

Domain servers in listed order:

NS1.PARALLELS.COM 64.131.89.***
NS2.PARALLELS.COM 64.131.89.***
NS3.PARALLELS.COM 66.197.38.***

Record created on: 2000-11-20 09:00:07.0
Database last updated on: 2007-06-29 08:52:21.98
Domain Expires on: 2008-11-20 09:00:07.0

Parallels employee personal information has been censored to prevent spamming.

What do you think?

_________________________________

Sorry, I have removed all names and covered IP's with asterisks. (Parallels Moderator)

My mistake. I thought I caught all the sensitive data. (aldango)
 
Last edited:
I've gotten this message a bunch of times too. Apparently someone is trying to brute force the passwords of a bunch of users?
 
I have gotten this message multiple times so far! Is someone at Parallels investigating this or what?!
 
Parallels - what is going on. Let's have a comment or something.

Is there a process to have an account DELETED - not just disabled, but totally removed?

And how were the email addresses found? I thought my registration data was private.

Thank you
 
Last edited:
Again - somewhere out there - someone that can represent Parallels.
I have two - make that three - simple questions and I want an answer.

1. How was my email address associated with my user name?
2. How can I delete this account?
3. Were you hacked?
 
I dont represent Parallels, but...
1. you gave them your email when you signed up for the account, probably because it was required (no one has access to it unless they successfully guess your password)
2. sorry, donno
3. so far it looks like this person (or bot) has not successfully guessed a password, but in time it probably will
 
bayz - you are partially correct. I did give them a password and user name when I signed up. It was not given to anyone else. It is required to sign up. Check and see - you have no way by looking at member information to get the email address.

Take a close look back at the beginning post and notice that the email sent has ATXP's user name at the top, as did the one I received. That was sent to an email account that should not be public knowledge. I want to know how that information got out.

Regards.
 
I also have gotten two of these emails.

I don't think it is Parallels, because they have the password, right? I changed my password automatically to eight numbers, but I don't like what's going on. Parallels better find out what's going on and report to us.
 
You must log in or register to reply here.
Back
Top