"Herbal King" domains
"Herbal King" domains
Aliases include V.E.P. Virility Enlarge Pills, Power Gain+, MaxGain+, VPXL, Express Herbals, Elite Herbal, MaxHerbal, and Herbal King, MaxGentleman, Dr.MaXman
Victims are defrauded through sale and delivery (or sometimes nondelivery) of fake drugs, and appropriation of their personal details for use in future fraud
Phish / Scam
actcow.ru
adultsoap.ru
aircake.ru
antdream.ru
arealion.ru
armyearth.ru
babegin.ru
babyblock.ru
bandhat.ru
bankstamp.ru
bathdream.ru
bathelf.ru
bearpose.ru
beastboat.ru
beastsalt.ru
bedocean.ru
blockboy.ru
bogjoke.ru
bogside.ru
bossbelt.ru
boxson.ru
boyshome.ru
brainsolo.ru
bulljazz.ru
cafearms.ru
cakewire.ru
casepit.ru
echopod.ru
enlargepenis4u.com
fightgrain.com
hilldiary.ru
kinggirls.ru
singerspa.ru
wearworld.ru
whilefiction.ru
See Also: http://www.spamtrackers.eu/wiki/index.php/Herbal_King
Victims are defrauded through sale and delivery (or sometimes nondelivery) of fake drugs, and appropriation of their personal details for use in future fraud
Phish / Scam
actcow.ru
adultsoap.ru
aircake.ru
antdream.ru
arealion.ru
armyearth.ru
babegin.ru
babyblock.ru
bandhat.ru
bankstamp.ru
bathdream.ru
bathelf.ru
bearpose.ru
beastboat.ru
beastsalt.ru
bedocean.ru
blockboy.ru
bogjoke.ru
bogside.ru
bossbelt.ru
boxson.ru
boyshome.ru
brainsolo.ru
bulljazz.ru
cafearms.ru
cakewire.ru
casepit.ru
echopod.ru
enlargepenis4u.com
fightgrain.com
hilldiary.ru
kinggirls.ru
singerspa.ru
wearworld.ru
whilefiction.ru
See Also: http://www.spamtrackers.eu/wiki/index.php/Herbal_King
Thanks
I shall check these and rate accordingly
MaxGentleman scam/spam
new "MaxGentleman" fake herbal remedies/ sexual enhancements pills /promoted though spam
[url=https://www.mywot.com'http://img24.imageshack.us/i/maxshort.jpg/' t='_blank']
[/url]
ryryligora.boilingcopy.com
boilingcopy.com
nomilacope.opinionchance.com
opinionchance.com
[phishing or other scam] fake herbal remedies / sexual enhancements pills /fake mc afee secure seal /no SSL encyrption
body of the spam message contains different links to hide the real domain
ohk.im/links/?r=1i7
ohk.im/links/?r=1f3
so
ohk.im
[SPAM]
[url=https://www.mywot.com'http://img228.imageshack.us/i/maxgc.jpg/' t='_blank']
[/url]
http://whois.domaintools.com/boilingcopy.com
http://whois.domaintools.com/opinionchance.com
RSP: China Springboard Inc.
URL: hxxp://www.namerich.cn
Name Server :NS2.PROTOPSITE.RU
Name Server :NS1.PROTOPSITE.RU
namerich.cn scorecard
http://www.mywot.com/en/scorecard/namerich.cn
some informations more:
http://geo.flagfox.net/?ip=121.127.129.176&host=tehovatebu.boilingcopy.com
http://geo.flagfox.net/?ip=121.127.129.176&host=nomilacope.opinionchance.com
[edit to add]
NS1.PROTOPSITE.RU
ns2.protopsite.ru
http://www.mywot.com/en/scorecard/NS1.PROTOPSITE.RU
http://www.mywot.com/en/scorecard/ns2.protopsite.ru
[edit to add]
foud a new one and added to the list
ryryligora.boilingcopy.com
[url=https://www.mywot.com'http://img24.imageshack.us/i/maxshort.jpg/' t='_blank']

List of domains/hosts
tehovatebu.boilingcopy.comryryligora.boilingcopy.com
boilingcopy.com
nomilacope.opinionchance.com
opinionchance.com
body of the spam message contains different links to hide the real domain
ohk.im/links/?r=1i7
ohk.im/links/?r=1f3
so
ohk.im
[SPAM]
[url=https://www.mywot.com'http://img228.imageshack.us/i/maxgc.jpg/' t='_blank']

http://whois.domaintools.com/boilingcopy.com
http://whois.domaintools.com/opinionchance.com
RSP: China Springboard Inc.
URL: hxxp://www.namerich.cn
Name Server :NS2.PROTOPSITE.RU
Name Server :NS1.PROTOPSITE.RU
namerich.cn scorecard
http://www.mywot.com/en/scorecard/namerich.cn
some informations more:
http://geo.flagfox.net/?ip=121.127.129.176&host=tehovatebu.boilingcopy.com
http://geo.flagfox.net/?ip=121.127.129.176&host=nomilacope.opinionchance.com
[edit to add]
NS1.PROTOPSITE.RU
ns2.protopsite.ru
http://www.mywot.com/en/scorecard/NS1.PROTOPSITE.RU
http://www.mywot.com/en/scorecard/ns2.protopsite.ru
[edit to add]
foud a new one and added to the list
ryryligora.boilingcopy.com
RE: "Herbal King" domains
I've gotten a lot from these guys in the past. The spam link goes to a fake blog landing page that links to the real drug site.
The hosting is either in China or South Korea and KISA never seems to be able to put an end to Hanaro/SKTelecom hosting this crap.
The hosting is either in China or South Korea and KISA never seems to be able to put an end to Hanaro/SKTelecom hosting this crap.
RE: "Herbal King" domains
here is another protected shortened url they use
protect.vearchive.net
protect.vearchive.net
RE: "Herbal King" domains
MaxGain
Warning: websites contain explicit material, not for children
[url=https://www.mywot.com'http://img715.imageshack.us/i/maxgain.jpg/' t='_blank']
[/url]
Uploaded with [url=https://www.mywot.com'http://imageshack.us' t='_blank']ImageShack.us[/url]
http://www.spamtrackers.eu/wiki/index.php/MaxGain
tinfemale.ru ( only www.tinfemale.ru loads here)
b.tinfemale.ru
f.tinfemale.ru
g.tinfemale.ru
h.tinfemale.ru
i.tinfemale.ru
l.tinfemale.ru
p.tinfemale.ru
q.tinfemale.ru
s.tinfemale.ru
t.tinfemale.ru
y.tinfemale.ru
aa.tinfemale.ru
dd.tinfemale.ru
ee.tinfemale.ru
gg.tinfemale.ru
hh.tinfemale.ru
ii.tinfemale.ru
mm.tinfemale.ru
oo.tinfemale.ru
pp.tinfemale.ru
qq.tinfemale.ru
tt.tinfemale.ru
uu.tinfemale.ru
zz.tinfemale.ru
yy.tinfemale.ru
It is likely there are some more, I listed only the domains I could reach
Whois
http://whois.domaintools.com/tinfemale.ru
domain: TINFEMALE.RU
nserver: ns1.marketcapital.ru.
nserver: ns1.marketdns.ru.
nserver: ns2.marketcapital.ru.
nserver: ns2.marketdns.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
http://www.robtex.com/dns/tinfemale.ru.html#result
Warning: websites contain explicit material, not for children
[url=https://www.mywot.com'http://img715.imageshack.us/i/maxgain.jpg/' t='_blank']

Uploaded with [url=https://www.mywot.com'http://imageshack.us' t='_blank']ImageShack.us[/url]
http://www.spamtrackers.eu/wiki/index.php/MaxGain
tinfemale.ru ( only www.tinfemale.ru loads here)
List of domains/hosts
a.tinfemale.rub.tinfemale.ru
f.tinfemale.ru
g.tinfemale.ru
h.tinfemale.ru
i.tinfemale.ru
l.tinfemale.ru
p.tinfemale.ru
q.tinfemale.ru
s.tinfemale.ru
t.tinfemale.ru
y.tinfemale.ru
aa.tinfemale.ru
dd.tinfemale.ru
ee.tinfemale.ru
gg.tinfemale.ru
hh.tinfemale.ru
ii.tinfemale.ru
mm.tinfemale.ru
oo.tinfemale.ru
pp.tinfemale.ru
qq.tinfemale.ru
tt.tinfemale.ru
uu.tinfemale.ru
zz.tinfemale.ru
yy.tinfemale.ru
Whois
http://whois.domaintools.com/tinfemale.ru
domain: TINFEMALE.RU
nserver: ns1.marketcapital.ru.
nserver: ns1.marketdns.ru.
nserver: ns2.marketcapital.ru.
nserver: ns2.marketdns.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
http://www.robtex.com/dns/tinfemale.ru.html#result
RE: "Herbal King" domains
Max Gentleman
universityoil.ru
http://www.spamtrackers.eu/wiki/index.php/Herbal_King
universityoil.ru
http://www.spamtrackers.eu/wiki/index.php/Herbal_King
RE: "Herbal King" domains
i am getting this spam on lavabit.com
RE: "Herbal King" domains
Max Gentleman
zett.awardchemist.ru
awardchemist.ru
xasl.shophusband.ru
shophusband.ru
List of domains/hosts
zett.awardchemist.ru
awardchemist.ru
xasl.shophusband.ru
shophusband.ru
List of domains/hosts
Кто сейчас на конференции
Сейчас этот форум просматривают: нет зарегистрированных пользователей и 4 гостя