View difference between Paste ID: fNt86ruV and GD7ZHgm5
SHOW: | | - or go back to the newest paste.
1-
Below please find notes detailing a counterfeit ring peddling fake UGG gear via e-mail.  These scammers use a RetailMeNot.com template and use services from Linode and Alibaba to facilitate their criminal enterprise.
1+
Below please find notes detailing a counterfeit ring peddling fake Canada Goose gear via e-mail.  These scammers use a RetailMeNot.com template and use services from Linode, Alibaba, and Global Frag Networks to facilitate their criminal enterprise.
2
3
This same crew runs counterfeit rings for other gear as well.  Learn more about their other scams here:
4
https://pastebin.com/Bn09agfE - Fake Birkenstock
5
https://pastebin.com/JvFEGPN5 - Fake Christian Louboutin
6
https://pastebin.com/BEp6raet - Fake Louis Vuitton
7
https://pastebin.com/nv09GKaK - Fake Michael Kors
8
https://pastebin.com/8zqnUJiV - Fake Moncler
9
https://pastebin.com/5mwVjYVw - Fake Nike
10
https://pastebin.com/zJuMcPGv - Fake Ray-Ban
11
12-
Subjects used in their typical e-mails peddling fake UGG include:
12+
Subjects used in their typical e-mails peddling fake Canada Goose include:
13-
- Greetings from Willow, Black Friday Special Deals! - Winter Snow Boots 60% OFF!
13+
- Cyber Week Huge Discount!!! - Goose Coats 70% OFF.!
14
15-
20191126
15+
20201215
16-
SPAM Domain: dxbw.xyz
16+
SPAM Domain: hwsjw.cn
17
SPAM Registrar: China Internet Network Information Center (CNNIC)
18-
SPAM IP: 52.77.237.236
18+
SPAM IP: 23.228.120.6
19-
SPAM ISP: Amazon Technologies Inc.
19+
SPAM ISP: LayerHost
20-
Counterfeit website: http://dxbw.xyz/special/boots.html
20+
Counterfeit website: http://suxrmoyya.wang/edme/tl.php?p=TEXT_STRING_HERE
21-
Counterfeit website IP: 47.252.76.215
21+
Counterfeit website IP: 47.88.85.92
22
Counterfeit website ISP: AliCloud
23
24
20191203
25
SPAM Domain: lisyai.top
26
SPAM Registrar: Chengdu west dimension digital technology Co., LTD
27
SPAM IP: 104.223.155.164
28
SPAM ISP: Global Frag Networks
29
Counterfeit website: http://yuorey.top/mtaf/tl.php?p=TEXT_STRING_HERE
30
Counterfeit website IP: 47.90.205.22
31
Counterfeit website ISP: AliCloud