newcheonji.info — sexual enhancement drug spammer

A440
Posts: 4771
Joined: Sat Nov 20, 2010 1:56 am

newcheonji.info — sexual enhancement drug spammer

Post by A440 » Thu Feb 24, 2011 1:29 am

Please evaluate newcheonji.info. I keep getting spam that uses a redirect to this site.
Here is a sample spam (content is encoded in Korean):

Received: from 211.48.62.161 (211.48.62.161) at KTMAIL with ESMTP Hanmir by ktmail5;Thu, 24 Feb 2011 09:58:28 +0900
Received: from [206.53.53.77] ([206.53.53.77]) by relay1.kornet.net ([211.48.62.161]) with ESMTP id 2011022409:58:27:572607.25774.7940 for <xxxx@kornet.net>; Thu, 24 Feb 2011 09:58:27 +0900 (KST)
Date: Wed, 23 Feb 2011 19:58:29 -0500
Subject: =?UTF-8?B?KzE1JyDsi7gnJ+ydtOymiOydmCDrgqgn7ISxIOqxsOy5oOqygyDsl4bsnY3ri4jri6QuLi4uLg==?=
From: "bmhq@fki.or.kr" <bmhq@fki.or.kr>
To: "xxxx" <xxxx@kornet.net>
X-MsgID: 1298509108371266.0.ktmail5
Message-ID: <1298509108371266.0.ktmail5@ktmail5>
X-RECEIVED-IP: 211.48.62.161
X-TERRACE-SPAMMARK: NO (SR:1.12) (by Terrace)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: multipart/mixed; boundary="n2hzw3b8pg00"

--n2hzw3b8pg00



--n2hzw3b8pg00
Content-Type: text/plain ; name="";
Content-transfer-encoding: quoted-printable
Content-disposition: attachment

495613
=EC=A7=84=EC=A0=95 =EC=9D=B4=EC=8B=9C=EB=8C=80 =EC=97=AC'=EC=84=B1=EC=9D=
=B4 =EC=A0=9C=EC=9D=BC =EA=B8=B0=EB=8C=80=ED=95=98=EB=8A=94 =EA=B2=83
=EB=8F=88=EC=9E=85=EB=8B=88=EA=B9=8C? =EB=AA=85=EC=98=88=EC=9A=94? =EC=
=95=84=EB=8B=99=EB=8B=88=EB=8B=A4,=EC=9A=B0=EC=84=A0 +15'=EC=B9=AB'=EC=
=88=98=EC=9D=98 =EB=82=A8''=EC=84=B1
=EA=B7=B8=EB=9F=B0=EA=B2=83=EB=93=A4=EC=9D=80 =EA=B7=B8=EB=8B=A4=EC=9D=
=8C =EC=9E=85=EB=8B=88=EB=8B=A4,
=EC=9D=B4=ED=98=BC=ED=95=98=EA=B2=8C=EB=90=98=EB=8A=94 =EC=B2=AB=EB=B2=
=88=EC=A7=B8 =EC=82=AC=EC=9C=A0=EB=8A=94 =EC=97=AD=EC=8B=9C =EC=84=B1'=
"=EC=A0=81"'=EC=B0=A8=EC=9D=B4
ZZONG07.INFO
=EC=A7=80=EC=B3=90=EB=B2=84=EB=A6=B0 =EC=A7=80=EB=82=9C =EC=84=B8=EC=9B=
=94=EB=93=A4
=EC=97=89=EB=9A=B1=ED=95=9C =EA=B2=83=EC=97=90 =EC=8B=A0=EA=B2=BD=EC=93=
=B0=EB=8B=A4 =ED=97=88=EC=86=A1=EC=84=B8=EC=9B=94 =ED=96=88=EC=9D=8D=EB=
=8B=88=EB=8B=A4
=EB=8B=A8 =EB=91=90=EB=8B=AC=EB=A7=8C=EC=97=90 =ED=95=B4'=EA=B2=B0 =EB=
=90=98=EC=97=88=EC=9D=8D=EB=8B=88=EB=8B=A4
2'=EC=A0=95=EB=8F=84 =EC=BB=A4=EC=A1=8C=EA=B3=A0,=EB=8D=94 =EB=8A=98=EA=
=B3=A0 =EC=9E=88=EC=9D=8D=EB=8B=88=EB=8B=A4
=EB=8A=90=EB=8A=94 =EC=9E=90=EC=A1=B4=EC=8B=AC,=ED=8C=8C=EC=9A=B0=EC=96=
=B4,=EA=B8=B8=EC=96=B4=EC=A7=84=EC=8B=9C'=EA=B0=84,=EB=AA=A8=EB=93=A0=EA=
=B2=83 =EC=B5=9C'=EA=B3=A0 =EC=9E=85=EB=8B=88=EB=8B=A4
chaereien 42. mariuins

WIPYVW

[--- ETCETERA ---]

The spam link points to:

ZZONG07.INFO

which redirects to:

newcheonji.info/system/productView.php?productCode=90021&type=bestItem

Domain ID:D35958486-LRMS
Domain Name:NEWCHEONJI.INFO = [64.5.49.195]
Created On:21-Dec-2010 04:30:06 UTC
Last Updated On:04-Jan-2011 11:58:45 UTC
Expiration Date:21-Dec-2011 04:30:06 UTC
Sponsoring Registrar:GoDaddy.com Inc. (R171-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CR70358928
Registrant Name:elis auah
Registrant Organization:
Registrant Street1:737woodbridge
Registrant Street2:414
Registrant Street3:
Registrant City:vaughan
Registrant State/Province:Ontario
Registrant Postal Code:l4l6u7
Registrant Country:CA
Registrant Phone:+1.9056675432
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:@gmail.com
Admin ID:CR70358930
Admin Name:elis auah
Admin Organization:
Admin Street1:737woodbridge
Admin Street2:414
Admin Street3:
Admin City:vaughan
Admin State/Province:Ontario
Admin Postal Code:l4l6u7
Admin Country:CA
Admin Phone:+1.9056675432
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:@gmail.com
Billing ID:CR70358931
Billing Name:elis auah
Billing Organization:
Billing Street1:737woodbridge
Billing Street2:414
Billing Street3:
Billing City:vaughan
Billing State/Province:Ontario
Billing Postal Code:l4l6u7
Billing Country:CA
Billing Phone:+1.9056675432
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:@gmail.com
Tech ID:CR70358929
Tech Name:elis auah
Tech Organization:
Tech Street1:737woodbridge
Tech Street2:414
Tech Street3:
Tech City:vaughan
Tech State/Province:Ontario
Tech Postal Code:l4l6u7
Tech Country:CA
Tech Phone:+1.9056675432
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:@gmail.com
Name Server:SNS289.WEBSITEWELCOME.COM
Name Server:SNS290.WEBSITEWELCOME.COM

Hosted at:

NetRange: 64.5.32.0 - 64.5.63.255
CIDR: 64.5.32.0/19
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-5
NetHandle: NET-64-5-32-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
NameServer: NS2.THEPLANET.COM
NameServer: NS1.THEPLANET.COM
RegDate: 2002-12-31
Updated: 2009-03-10
Ref: http://whois.arin.net/rest/net/NET-64-5-32-0-1


OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-822-4204
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-822-4204
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

Guest

RE: newcheonji.info — sexual enhancement drug spammer

Post by Guest » Thu Feb 24, 2011 1:50 am

Thanks
they also "sell" MMS.
Rated and commented.

thank you for reporting

Guest

RE: newcheonji.info — sexual enhancement drug spammer

Post by Guest » Thu Feb 24, 2011 3:51 am

@ A440.

Just curious . . . you seem to be getting a lot of spam. Why do you think that is?

A440
Posts: 4771
Joined: Sat Nov 20, 2010 1:56 am

RE: newcheonji.info — sexual enhancement drug spammer

Post by A440 » Thu Feb 24, 2011 4:03 am

"bobjam", I don't get that much spam now since a certain Russian spammer was kicked out of Russia. The last two I posted have been pernicious spammers that have been hosing me repeatedly and are the only two (crossed fingers) I keep getting over and over again. If I counted the samsung credit card spam, there might be a little more.

Should I infer from your question that you don't get much spam?

Guest

RE: newcheonji.info — sexual enhancement drug spammer

Post by Guest » Thu Feb 24, 2011 4:03 am

A440

Your message is too long and so hard to understand, perhaps because I am not a native english speaker. But, could you discribe your situation with this site more accurately? Well... not really get what's written.

Guest

Correct

Post by Guest » Thu Feb 24, 2011 4:51 am

@ A440,

"Should I infer from your question that you don't get much spam?"
Yes. Well . . . sort of. I have an email account I dedicate to newsletters and registrations, and that is the one I get most of the spam in.

I have another I use for correspondence with friends and family, and that is relatively clean.

I don't check the "spam" dedicated account that often, but when I do there's usually one or two in there.

A440
Posts: 4771
Joined: Sat Nov 20, 2010 1:56 am

RE: newcheonji.info — sexual enhancement drug spammer

Post by A440 » Thu Feb 24, 2011 4:54 am

I have been receiving spam (in Korean) that uses a link that redirects to this site. The site is in English and Korean and advertises sexual enhancement drugs. The site is apparently hosted in the U.S. as well.

A440
Posts: 4771
Joined: Sat Nov 20, 2010 1:56 am

RE: Correct

Post by A440 » Thu Feb 24, 2011 4:57 am

You are clearly better off than I am then but, as I had mentioned, since this one Russian spammer was kicked out of Russia, I have had a dramatic drop in spam to my kornet account, which is used for business and personal correspondence.

Kraftwerk
Posts: 7981
Joined: Thu Nov 05, 2009 12:30 pm

RE: more email addresses

Post by Kraftwerk » Thu Feb 24, 2011 10:51 am

Yahoo has a nice feature. Next to your main address you can set up up to 500 spam addresses. Adminitration and everything else in one account but they don´t bother you. If you don´t use your main address they can´t steal your acc.

If you want to check a certain cite you could use the site´s name as a keyword. If you get spam from a diffeent domain on the address you know they spam..

Just a thought.

Sogtul
Posts: 212
Joined: Sun Jul 25, 2010 10:13 am

RE: newcheonji.info — sexual enhancement drug spammer

Post by Sogtul » Thu Feb 24, 2011 11:35 am

rated

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests