"Herbal King" domains

[Guest]

Aliases include V.E.P. Virility Enlarge Pills, Power Gain+, MaxGain+, VPXL, Express Herbals, Elite Herbal, MaxHerbal, and Herbal King, MaxGentleman, Dr.MaXman

Victims are defrauded through sale and delivery (or sometimes nondelivery) of fake drugs, and appropriation of their personal details for use in future fraud
Phish / Scam
actcow.ru
adultsoap.ru
aircake.ru
antdream.ru
arealion.ru
armyearth.ru
babegin.ru
babyblock.ru
bandhat.ru
bankstamp.ru
bathdream.ru
bathelf.ru
bearpose.ru
beastboat.ru
beastsalt.ru
bedocean.ru
blockboy.ru
bogjoke.ru
bogside.ru
bossbelt.ru
boxson.ru
boyshome.ru
brainsolo.ru
bulljazz.ru
cafearms.ru
cakewire.ru
casepit.ru
echopod.ru
enlargepenis4u.com
fightgrain.com
hilldiary.ru
kinggirls.ru
singerspa.ru
wearworld.ru
whilefiction.ru

See Also: http://www.spamtrackers.eu/wiki/index.php/Herbal_King

[Figure10]

I shall check these and rate accordingly

[Guest]

new "MaxGentleman" fake herbal remedies/ sexual enhancements pills /promoted though spam


[url=https://www.mywot.com'http://img24.imageshack.us/i/maxshort.jpg/' t='_blank'][/url]

List of domains/hosts

tehovatebu.boilingcopy.com
ryryligora.boilingcopy.com
boilingcopy.com
nomilacope.opinionchance.com
opinionchance.com

[phishing or other scam] fake herbal remedies / sexual enhancements pills /fake mc afee secure seal /no SSL encyrption

body of the spam message contains different links to hide the real domain
ohk.im/links/?r=1i7
ohk.im/links/?r=1f3

so
ohk.im
[SPAM]


[url=https://www.mywot.com'http://img228.imageshack.us/i/maxgc.jpg/' t='_blank'][/url]

http://whois.domaintools.com/boilingcopy.com

http://whois.domaintools.com/opinionchance.com



namerich.cn scorecard

http://www.mywot.com/en/scorecard/namerich.cn

some informations more:
http://geo.flagfox.net/?ip=121.127.129.176&host=tehovatebu.boilingcopy.com
http://geo.flagfox.net/?ip=121.127.129.176&host=nomilacope.opinionchance.com

[edit to add]
NS1.PROTOPSITE.RU
ns2.protopsite.ru
http://www.mywot.com/en/scorecard/NS1.PROTOPSITE.RU
http://www.mywot.com/en/scorecard/ns2.protopsite.ru


[edit to add]

foud a new one and added to the list

ryryligora.boilingcopy.com

[A440]

I've gotten a lot from these guys in the past. The spam link goes to a fake blog landing page that links to the real drug site.
The hosting is either in China or South Korea and KISA never seems to be able to put an end to Hanaro/SKTelecom hosting this crap.

[Guest]

here is another protected shortened url they use

protect.vearchive.net

[Guest]

MaxGain

Warning: websites contain explicit material, not for children

[url=https://www.mywot.com'http://img715.imageshack.us/i/maxgain.jpg/' t='_blank'][/url]

Uploaded with [url=https://www.mywot.com'http://imageshack.us' t='_blank']ImageShack.us[/url]

http://www.spamtrackers.eu/wiki/index.php/MaxGain

tinfemale.ru ( only www.tinfemale.ru loads here)

List of domains/hosts

a.tinfemale.ru
b.tinfemale.ru
f.tinfemale.ru
g.tinfemale.ru
h.tinfemale.ru
i.tinfemale.ru
l.tinfemale.ru
p.tinfemale.ru
q.tinfemale.ru
s.tinfemale.ru
t.tinfemale.ru
y.tinfemale.ru
aa.tinfemale.ru
dd.tinfemale.ru
ee.tinfemale.ru
gg.tinfemale.ru
hh.tinfemale.ru
ii.tinfemale.ru
mm.tinfemale.ru
oo.tinfemale.ru
pp.tinfemale.ru
qq.tinfemale.ru
tt.tinfemale.ru
uu.tinfemale.ru
zz.tinfemale.ru
yy.tinfemale.ru

It is likely there are some more, I listed only the domains I could reach

Whois

http://whois.domaintools.com/tinfemale.ru



http://www.robtex.com/dns/tinfemale.ru.html#result

[Guest]

herbalmed.org
menreviewed.com

[Guest]

Max Gentleman

universityoil.ru

http://www.spamtrackers.eu/wiki/index.php/Herbal_King

[eCatXP]

i am getting this spam on lavabit.com

[Guest]

Max Gentleman

List of domains/hosts

zett.awardchemist.ru
awardchemist.ru
xasl.shophusband.ru
shophusband.ru

List of domains/hosts