Search found 2620 matches

by A440
Tue Jul 19, 2011 4:15 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - 07.20.11

The latest spam: Received: from 211.48.62.163 (211.48.62.163) at KTMAIL with ESMTP Hanmir by ktmail1;Wed, 20 Jul 2011 00:05:06 +0900 Received: from [112.171.12.235] ([112.171.12.235]) by relay3.kornet.net ([211.48.62.163]) with ESMTP id 2011072000:05:05:951306.304.10 for <whomre@kornet.net>; Wed, 20...
by A440
Sun Jul 17, 2011 4:16 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

a last example in an ongoing spam career

More of the same for those that doubt: Received: from 211.48.62.163 (211.48.62.163) at KTMAIL with ESMTP Hanmir by ktmail8;Mon, 18 Jul 2011 00:05:51 +0900 Received: from [112.171.12.235] ([112.171.12.235]) by relay3.kornet.net ([211.48.62.163]) with ESMTP id 2011071800:05:51:231305.304.97215 for <_x...
by A440
Fri Jul 15, 2011 2:10 am
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - 07.15.11

More of the same: Received: from 211.48.62.162 (211.48.62.162) at KTMAIL with ESMTP Hanmir by ktmail8;Fri, 15 Jul 2011 00:05:00 +0900 X-MsgID: 1310655900864520.0.ktmail8 Message-ID: <1310655900864520.0.ktmail8@ktmail8> Received: from [112.171.12.235] ([112.171.12.235]) by relay2.kornet.net ([211.48....
by A440
Tue Jul 12, 2011 3:51 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers

As of 07.13.11, more of the same: Received: from 211.48.62.161 (211.48.62.161) at KTMAIL with ESMTP Hanmir by ktmail5;Wed, 13 Jul 2011 00:05:58 +0900 Received: from [112.171.12.235] ([112.171.12.235]) by relay1.kornet.net ([211.48.62.161]) with ESMTP id 2011071300:05:57:557917.25774.17915 for <xxx[a...
by A440
Tue Jul 12, 2011 12:42 am
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers


Pictures also come from suspicious website, I guess.

I left the link to the pictures simply to show the nature of the spam since the URLs were encoded and the link to shinsegae was not obvious. I don't have any webspace to post samples of content either so . . .
by A440
Mon Jul 11, 2011 12:46 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers

Thanks "uhka tutka" for the samples but when I changed the code from "https://" to "hxxps://" the link would somehow change back to the original "https://" in the HTML on the forum. I'm not sure why that occurs but I did change that. Now I altered the "ahref" links more so that they only give 404's.
by A440
Sun Jul 10, 2011 6:02 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

RE: www.istarbucks.co.kr - 07.11.11

. . . and yet another spam from Shinsegae/Starbucks in South Korea Notice the HTML at the end that links back to the franchise owner: sems2.shinsegae.com/servlet/ReceiveConfirmEM?SEND_MODE=R&CAMPAIGN_NO=000000000000476&RESULT_SEQ=1310410010770304&START_DATE=20110711000000&END_DATE=20110718235900&LIS...
by A440
Sun Jul 10, 2011 12:23 pm
Forum: Reputation discussions
Topic: ViaGrow
Replies: 128
Views: 4703

RE: ViaGrow

Another variation popped up: Domain Name: MAXXVIAGROWS.COM = [188.229.95.27] Creation Date: 08-Jul-2011 Modification Date: 08-Jul-2011 Expiration Date: 08-Jul-2012 Domain servers in listed order: ns1.seven77.ru ns2.seven77.ru ns3.monday-thuesday.ro Registrant: Svetlana Poltavceva poltavtzeva.svetlan...
by A440
Thu Jul 07, 2011 4:23 pm
Forum: Reputation discussions
Topic: www.istarbucks.co.kr - Starbucks Coffee Korea Spammers
Replies: 34
Views: 4329

another sample - 07.08.11

Here is yet another sample sent today. There is a bit of code that links back to the owner of this franchise: <a href="http://www.robtex.com/dns/shinsegae.com.html#whois">shinsegae.com</a> sems2.shinsegae.com/servlet/ReceiveConfirmEM?SEND_MODE The spam is below. Please rate this source of spam accor...