ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Chen Yu (AKA Sprincy)

Evidence Menu:

Chen Yu (AKA Sprincy) Index


Country: China
State: Jiangsu
Changshu-based Chen Yu (陈宇) mostly sends digital image retouching and refinishing ("Photo Retouching Services", "Video Editing", etc) spam, but "Application Development" and Textile products spam have also been observed, and some mailings directly advertise spamming services.

Before July 2014 (and since at least Spring 2010) he operated without Internet assets of his own except dropboxes, relying on throwaway webmail accounts, open proxies and open relay sending sources. He hijacked several thousand servers all over the world to have his spam delivered, becoming one of the most serious problem on the Internet and inflicting massive costs to thousands of companies across the world.

After July 2014 he switched to a standard snowshoe distribution method and started to purchase low-cost VPSes from ISPs across the world.


Chen Yu (AKA Sprincy) SBL Listings History
Current SBL Listings
Archived SBL Listings

email addresses and throwaway domains


Some dropboxes observed in spams (message bodies and Reply-To headers):

Before October 2013 [Netease terminated all of them]:

anicontact@yeah.net
animationtech@163.com
animationwork@126.com
animationwork@163.com
aniremove@yeah.net
anremove@yeah.net
cadremove@yeah.net
contactedit@126.com
contactrick@126.com
contactrick@yeah.net
dandevelop@126.com
deedit@163.com
deimages@163.com
deimagestudio@163.com
deimagework@163.com
deimaging@163.com
dephotography@163.com
dephotos@163.com
dephotostudio@163.com
dephotowork@163.com
deretouching@163.com
dontechit@yeah.net
ibalextech@yeah.net
ibanicontact@yeah.net
ibanimation@126.com
ibanimation@yeah.net
ibautocad@yeah.net
ibcadtech@126.com
ibdandevelop@126.com
ibdandevelop@163.com
ibedit@163.com
ibimages@163.com
ibimaging@163.com
ibjonathan@yeah.net
ibphoto@163.com
ibphotography@163.com
ibphotostudio@163.com
ibphotowork@163.com
ibretouching@163.com
ibsoftware@126.com
ibsoftware@yeah.net
ibstudio@163.com
ibwallace@yeah.net
icimagework@163.com
icimaging@163.com
imagecontact@126.com
imageretouch@163.com
imagingedit@163.com
imagingservice@163.com
imagingwork@163.com
imremove@yeah.net
kindljohasthan@msn.com
koremoveid@yeah.net
koremoveideat@yeah.net
koremoveideit@yeah.net
koremovereick@yeah.net
koremovericko@yeah.net
koremovrick@yeah.net
mobileibtech@yeah.net
photocontact@126.com
photoediting@yeah.net
photoremove@yeah.net
photoretouch@163.com
rickcontact@yeah.net
rickimage@yeah.net
softremove@yeah.net
studiocontact@126.com
studioimage@126.com
textileenquiry@yeah.net
wallacecontact@yeah.net
websiteremove@yeah.net
websprsou@yeah.net

After October 2013, until July 2014:

beiyuming@139.com
bunjiroo@yahoo.co.jp
fsgryteyra@yahoo.co.jp
gangboren@139.com
hamasakiwantang@139.com
hamasakiwomw@aol.jp
hamasakiwow@zoho.com
hamasakiwoww@gmx.de
hamsaksiwiw@inbox.com
ishikawadb@yahoo.co.jp
jeffoneto@sina.com
jpmarketing@inbox.com
kevinmrqin@sina.com
kevinmrzack@21cn.com
kevinmrzack@sina.com
kevinmrzack@sohu.com
kevinmrzack@yahoo.co.jp
kevinzackqun@139.com
kurikilin@inbox.com
kurikilin@mail.com
kurikilin@sina.com
kurikilin@yahoo.co.jp
kurikilin@zoho.com
markeing@mail.com
marketingcontact@sina.com
marketingking@aol.jp
marketingremove@sina.com
mikecontact@139.com
morienzi@mail.com
morienzi@sina.com
morienzi@sohu.com
morienzi@yahoo.co.jp
morienzi@yandex.com
nicksampeter@mail.com
nicktomtao@yandex.com
pandengzhumu@yahoo.co.jp
pasamenzi@sina.com
tadahisaa@inbox.com
tadahisaa@mail.com
tadahisaa@sina.com
tadahisaa@yahoo.co.jp
xiaofengcontact@139.com
xiaozhuangphoto@139.com
yamasakiwow@mail.ru
yinkokubun@mail.com
yinkokubun@yahoo.co.jp
yinkokubun@yandex.com

After July 2014:

alexliucontact@sina.com
amurosakia@yahoo.co.jp
arinayuma@21cn.com
arinayuma@inbox.com
arinayuma@sina.com
arinayuma@sohu.com
arinayuma@yahoo.co.jp
arlanwantex@inbox.com
ayumisakia@yahoo.co.jp
frankayumi@inbox.com
fujiiyuuka@21cn.com
fujiiyuuka@mail.com
fujiiyuuka@sina.com
gmleadscon@sina.com
hadamichiko@inbox.com
hashijuria@yahoo.co.jp
hondanying@139.com
hondanying@21cn.com
hondanying@aol.jp
hondanying@inbox.com
hondanying@mail.com
hondanying@sina.com
hondanying@sohu.com
hondanying@yahoo.co.jp
hondanying@yandex.com
jackwangtex@sohu.com
jerrytantex@sina.com
jonathanmain@sina.com
jonathanmain@yandex.com
jurisaki66@yahoo.co.jp
kiyoshiakura@yahoo.co.jp
kojimakanak@mail.com
kojimakanak@sina.com
kojimakanak@yandex.com
mikeayumi@inbox.com
mikiyokummaa@yahoo.co.jp
morieikisara@yahoo.co.jp
namiekiro@21cn.com
namiekiro@inbox.com
namiekiro@mail.com
namiekiro@sina.com
namiekiro@yahoo.co.jp
namiekiro@yandex.com
ralfcontact@sina.com
samwangai@sina.com
softwareexpert@inbox.com
softwareexperts@sina.com
softwareexperts@sohu.com
tanemurario@yahoo.co.jp
textileconten@sina.com
tommylutex@yandex.com
yamaerikaa@yahoo.co.jp

Seen in domain registrations (before July 2014):

33149130@qq.com
945314424@qq.com
mrcycs@yahoo.com.cn

Seen in domain registrations for throwaway domains (used after July 2014):

authenticxosl@gmail.com
brittleufde@gmail.com
chargejgfc@gmail.com
customstdaf@gmail.com
deaccessgxpf@gmail.com
enhancewklz@gmail.com
erkela8557@163.com
gaoaiping4262@163.com
haollaiai@163.com
huandang32688119@163.com
innovatorpgbg@gmail.com
liangsanju9770@163.com
lichongli8212@163.com
lichunguan3295@163.com
mainstaykarq@gmail.com
mechanismmgle@gmail.com
principalvphm@gmail.com
purveyornzoz@gmail.com
radiationuwhq@gmail.com
radicallyxerh@gmail.com
renengui6811@163.com
rudimentjgef@gmail.com
shouliangding93@163.com
slimevzlo@gmail.com
steamerqxve@gmail.com
sterilejpjl@gmail.com
tiansipan6890@163.com
tuodun7299@163.com
yesunzi9526@163.com
yuzhouzei2741@163.com
zhao2555626206@163.com
zhongguode2571@163.com

Throwaways domains (used after July 2014):

0215l.com
0btzv.com
0f4ys.com
0nu6j.com
0p6eb.com
17vqt.com
2145p.com
4486t.com
6985o.com
6c8fc.com
6kova.com
6ntc7.com
82bn3.com
9c6xd.com
9lbf5.com
9zoto.com
abo321.org
agrmmqe.com
aqnrabv.com
arvmuqw.com
avwvvkv.com
awvwrkh.com
axetwrx.com
axp4h.com
bdefunt.com
beyondseo.cn
bnrrqmv.com
bt8zr.com
bw9ni.com
c72gd.com
chenguoqiang.net
chinacpa.org
ci9b1.com
crkqhuk.com
csvgxrq.com
ctwebbs.com
cwujngg.com
d2ze7.com
delijixie.net
dflr7.com
dsbfthp.com
dvwkpqv.com
ea0o1.com
eejjbmn.com
emufjtd.com
f6cae.com
ffql1.com
fgpkefu.com
fjrvqjn.com
frrhnhx.com
g2c08.com
g5dpc.com
gpkefqm.com
gpwur.com
gurw7.com
h8nfn.com
hc2v1.com
hdk2f.com
hjsnftd.com
hsntdhv.com
i4ivd.com
ja5fe.com
jnccuwf.com
jsj15.com
kdptpnr.com
kl5xm.com
l5d16.com
laigoule.net
lelegouwu.cn
lonvren.com
nmkqnae.com
npwnsvf.com
o9dz4.com
okbad.org
patsvmc.com
pbjbbpd.com
pwebvaj.com
qgnscxv.com
rd4ph.com
rppewsw.com
rtknz.com
rxmjjx.com
s2oon.com
sbvqbwk.com
schooldog.cn
skbsnxg.com
sxubwrr.com
tazhmy.com
tctxgm.com
tgpptz.com
top188.net
tpzde.com
ug76e.com
uv817.com
uwabgmw.com
vbgbb.com
vbqxdsu.com
vmjkmja.com
w2zu3.com
wwufr.com
wxmtass.com
x296l.com
x3p0x.com
xxdtfep.com
xy70p.com
znv6n.com
zuixun.net

Private addresses he uses for one-to-one correspondence:

danielsprincy@hotmail.com
imagingwork@126.com
sprincycs@gmail.com
sprincydani@gmail.com
sprincydaniel@gmail.com
sprincytech@163.com
spsrevo@gmail.com

Other:

mrcycs@hotmail.com
mrlouischen@yahoo.com.cn
ssfcydk-textile@yahoo.com.cn


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK10059/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy