"Herbal King" domains

Guest

"Herbal King" domains

Post by Guest » Tue Sep 07, 2010 11:11 pm

Aliases include V.E.P. Virility Enlarge Pills, Power Gain+, MaxGain+, VPXL, Express Herbals, Elite Herbal, MaxHerbal, and Herbal King, MaxGentleman, Dr.MaXman

Victims are defrauded through sale and delivery (or sometimes nondelivery) of fake drugs, and appropriation of their personal details for use in future fraud
Phish / Scam
actcow.ru
adultsoap.ru
aircake.ru
antdream.ru
arealion.ru
armyearth.ru
babegin.ru
babyblock.ru
bandhat.ru
bankstamp.ru
bathdream.ru
bathelf.ru
bearpose.ru
beastboat.ru
beastsalt.ru
bedocean.ru
blockboy.ru
bogjoke.ru
bogside.ru
bossbelt.ru
boxson.ru
boyshome.ru
brainsolo.ru
bulljazz.ru
cafearms.ru
cakewire.ru
casepit.ru
echopod.ru
enlargepenis4u.com
fightgrain.com
hilldiary.ru
kinggirls.ru
singerspa.ru
wearworld.ru
whilefiction.ru


See Also: http://www.spamtrackers.eu/wiki/index.php/Herbal_King

Figure10
Posts: 270
Joined: Sun Jun 20, 2010 9:46 pm

Thanks

Post by Figure10 » Wed Sep 08, 2010 2:03 am

I shall check these and rate accordingly

Guest

MaxGentleman scam/spam

Post by Guest » Sun Feb 27, 2011 4:35 am

new "MaxGentleman" fake herbal remedies/ sexual enhancements pills /promoted though spam


[url=https://www.mywot.com'http://img24.imageshack.us/i/maxshort.jpg/' t='_blank']Image[/url]


List of domains/hosts

tehovatebu.boilingcopy.com
ryryligora.boilingcopy.com
boilingcopy.com
nomilacope.opinionchance.com
opinionchance.com
[phishing or other scam] fake herbal remedies / sexual enhancements pills /fake mc afee secure seal /no SSL encyrption

body of the spam message contains different links to hide the real domain
ohk.im/links/?r=1i7
ohk.im/links/?r=1f3

so
ohk.im
[SPAM]


[url=https://www.mywot.com'http://img228.imageshack.us/i/maxgc.jpg/' t='_blank']Image[/url]

http://whois.domaintools.com/boilingcopy.com

http://whois.domaintools.com/opinionchance.com

RSP: China Springboard Inc.
URL: hxxp://www.namerich.cn

Name Server :NS2.PROTOPSITE.RU
Name Server :NS1.PROTOPSITE.RU


namerich.cn scorecard

http://www.mywot.com/en/scorecard/namerich.cn

some informations more:
http://geo.flagfox.net/?ip=121.127.129.176&host=tehovatebu.boilingcopy.com
http://geo.flagfox.net/?ip=121.127.129.176&host=nomilacope.opinionchance.com

[edit to add]
NS1.PROTOPSITE.RU
ns2.protopsite.ru
http://www.mywot.com/en/scorecard/NS1.PROTOPSITE.RU
http://www.mywot.com/en/scorecard/ns2.protopsite.ru


[edit to add]

foud a new one and added to the list

ryryligora.boilingcopy.com

A440
Posts: 4522
Joined: Sat Nov 20, 2010 1:56 am

RE: "Herbal King" domains

Post by A440 » Sun Feb 27, 2011 7:40 am

I've gotten a lot from these guys in the past. The spam link goes to a fake blog landing page that links to the real drug site.
The hosting is either in China or South Korea and KISA never seems to be able to put an end to Hanaro/SKTelecom hosting this crap.

Guest

RE: "Herbal King" domains

Post by Guest » Sun Feb 27, 2011 5:49 pm

here is another protected shortened url they use

protect.vearchive.net

Guest

RE: "Herbal King" domains

Post by Guest » Thu Apr 07, 2011 4:26 pm

MaxGain

Warning: websites contain explicit material, not for children

[url=https://www.mywot.com'http://img715.imageshack.us/i/maxgain.jpg/' t='_blank']Image[/url]

Uploaded with [url=https://www.mywot.com'http://imageshack.us' t='_blank']ImageShack.us[/url]

http://www.spamtrackers.eu/wiki/index.php/MaxGain

tinfemale.ru ( only www.tinfemale.ru loads here)

List of domains/hosts

a.tinfemale.ru
b.tinfemale.ru
f.tinfemale.ru
g.tinfemale.ru
h.tinfemale.ru
i.tinfemale.ru
l.tinfemale.ru
p.tinfemale.ru
q.tinfemale.ru
s.tinfemale.ru
t.tinfemale.ru
y.tinfemale.ru
aa.tinfemale.ru
dd.tinfemale.ru
ee.tinfemale.ru
gg.tinfemale.ru
hh.tinfemale.ru
ii.tinfemale.ru
mm.tinfemale.ru
oo.tinfemale.ru
pp.tinfemale.ru
qq.tinfemale.ru
tt.tinfemale.ru
uu.tinfemale.ru
zz.tinfemale.ru
yy.tinfemale.ru
It is likely there are some more, I listed only the domains I could reach

Whois

http://whois.domaintools.com/tinfemale.ru

domain: TINFEMALE.RU
nserver: ns1.marketcapital.ru.
nserver: ns1.marketdns.ru.
nserver: ns2.marketcapital.ru.
nserver: ns2.marketdns.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person


http://www.robtex.com/dns/tinfemale.ru.html#result

Guest

RE: "Herbal King" domains

Post by Guest » Thu Apr 07, 2011 4:56 pm


herbalmed.org
menreviewed.com

Guest

RE: "Herbal King" domains

Post by Guest » Wed Jun 29, 2011 11:52 pm

Max Gentleman

universityoil.ru

http://www.spamtrackers.eu/wiki/index.php/Herbal_King

eCatXP
Posts: 37
Joined: Mon Aug 23, 2010 7:05 am

RE: "Herbal King" domains

Post by eCatXP » Fri Jul 08, 2011 6:01 am

i am getting this spam on lavabit.com

Guest

RE: "Herbal King" domains

Post by Guest » Mon Jul 25, 2011 4:14 am

Max Gentleman

List of domains/hosts


zett.awardchemist.ru
awardchemist.ru
xasl.shophusband.ru
shophusband.ru

List of domains/hosts


Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 3 guests