Fake / Counterfeit Nike Website Tracking

Below please find notes detailing a counterfeit ring peddling fake Nike shoes via e-mail.  These scammers use a RetailMeNot.com template and use services from Linode, Digital Ocean, and, Alibaba to facilitate their criminal enterprise.

This same crew runs counterfeit rings for other gear as well.  Learn more about their other scams here:
https://pastebin.com/Bn09agfE - Fake Birkenstock
https://pastebin.com/JvFEGPN5 - Fake Christian Louboutin
https://pastebin.com/zJuMcPGv - Rake Ray-Ban

Subjects used in their typical e-mails peddling fake Ray-Ban include:
- Sneaker New Arrival! Nike & Air Max Shoes 60% OFF
- New Arrival! Nike Air Max Sneakers Up To 60% OFF

20190909
SPAM Domain: kaiyuanshi.top
SPAM Registrar: Chengdu west dimension digital technology Co., LTD
SPAM IP: 45.33.62.55
SPAM ISP: Linode LLC
Counterfeit website: http://ckjk.kaiyuanshi.top/edmg/tl.php?p=TEXT_STRING_HERE
Counterfeit website IP: 47.252.5.90
Counterfeit website ISP: AliCloud

20190908
SPAM Domain: jiangdaxian.top
SPAM Registrar: Chengdu west dimension digital technology Co., LTD
SPAM IP: 50.116.3.150
SPAM ISP: Linode LLC
Counterfeit website: http://qhcs.jiangdaxian.top/edmg/tl.php?p=TEXT_STRING_HERE
Counterfeit website IP: 47.252.5.90
Counterfeit website ISP: AliCloud

20190907
SPAM Domain: honghexian.top
SPAM Registrar: Chengdu west dimension digital technology Co., LTD
SPAM IP: 45.79.75.104
SPAM ISP: Linode LLC
Counterfeit website: http://mnk.honghexian.top/edmg/tl.php?p=TEXT_STRING_HERE
Counterfeit website IP: 47.252.5.90
Counterfeit website ISP: AliCloud

20190831
SPAM Domain: apwappi.top
SPAM Registrar: Chengdu west dimension digital technology Co., LTD
SPAM IP: 157.230.241.157
SPAM ISP: DigitalOcean, LLC
Counterfeit website: http://das.apwappi.top/edms/tl.php?p=TEXT_STRING_HERE
Counterfeit website IP: 47.252.5.90
Counterfeit website ISP: AliCloud