๐บ๐ธ
miralishahidi.ir
2026-07-25 13:06:40
(1 month ago)
Pig Butchering Scam Domain Report
This domain is suspected of being part of a "Pig Butchering" scam ...
show more
Pig Butchering Scam Domain Report
This domain is suspected of being part of a "Pig Butchering" scam โ a form of cyber-enabled investment fraud involving manipulation, deception, and large-scale financial exploitation, often through fake cryptocurrency platforms. The case is submitted for review and enforcement action by relevant U.S. authorities and partners, including but not limited to:
FBI, USSS, CCIPS, UNODC, DOJ, FTC, SEC, CFTC, FinCEN, IRS-CI, DHS, HSI, ICE, USDT, USPIS, NCIJTF, CISA, IC3, OCC, OFAC, FDIC, FINRA, CFPB, USMS, DS, NSA, CIA, DEA, DC3, USAO, NW3C, MS-ISAC, and APWG.
We request that all relevant technical, financial, and operational data tied to this domain be reviewed and investigated under the appropriate statutes and interagency cooperation frameworks.
show less
Fraud Orders
Phishing
๐ฏ๐ต
pota
2025-02-01 02:33:00
(1 year ago)
*** Phishing website Spoofing TS CUBIC CARD
genuine site: https://ts3card.com/
category: Credit Ca ...
show more
*** Phishing website Spoofing TS CUBIC CARD
genuine site: https://ts3card.com/
category: Credit Card
e-mail receive date _ URL _ IP:
Sat, 18 Jan 2025 04:09:01 +0900
https://mytscubic-billling.wppdq.cn/account/login
2606:4700:3032::ac43:8513 / 2606:4700:3036::6815:dc0 / 172.67.133.19 / 104.21.13.192
Sat, 1 Feb 2025 02:28:31 +0900
https://mytscubic-archeoose.bryan-fields.net/account/login
2606:4700:3033::ac43:abdc / 2606:4700:3036::6815:1dd6 / 172.67.171.220 / 104.21.29.214
country: USA
hosting: Cloudflare, Inc (Phishing Site GIGA Factory)
contact form: https://www.cloudflare.com/abuse
e-mail: [email protected] , [email protected] , [email protected]
show less
Phishing
Email Spam
Spoofing
Anonymous
2022-03-15 18:48:08
(4 years ago)
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimon ...
show more
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimonials โrepetitive scammer address, no entity: 1806 Summit Ave 325, Richmond, Virginia 23230
UBE 89.144.26.25 (EHLO qawl.bllackfriday.xyz) GHOSTnet GmbH
Header bllackfriday.xyz = 89.144.14.50 GHOSTnet GmbH
Spam link offersfri.duckdns.org = 199.231.188.170 Interserver โ redirects:
- www.biggvalues.com = 70.37.99.62 Microsoft
- www.therblights.com = no DNS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- www.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
- tracking.buygoods.com = 172.66.43.22, 172.66.40.234 Cloudflare
- unsub: www.fourfootwheel.com = 20.72.223.126 Microsoft
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2022-03-13 13:00:46
(4 years ago)
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimon ...
show more
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimonials โrepetitive scammer address, no entity: 1806 Summit Ave 325, Richmond, Virginia 23230
UBE 89.144.12.236 (EHLO ro9f.trainner.xyz) GHOSTnet GmbH
Header trainner.xyz = 85.93.28.251 GHOSTnet GmbH
Spam link offersfri.duckdns.org = 199.231.188.170 Interserver โ redirects:
- www.biggvalues.com = 70.37.99.62 Microsoft
- www.therblights.com = no DNS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- www.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
- tracking.buygoods.com = 172.66.43.22, 172.66.40.234 Cloudflare
- unsub: www.fourfootwheel.com = 20.72.223.126 Microsoft
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2022-03-12 09:01:40
(4 years ago)
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimon ...
show more
From: Herpes Secrets <[email protected] >
HerpaGreens/BuyGoods scamvertising โ fake health testimonials โrepetitive scammer address, no entity: 1806 Summit Ave 325, Richmond, Virginia 23230
UBE 89.144.4.241 (EHLO kbx9.trainner.xyz) GHOSTnet GmbH
Header trainner.xyz = 85.93.28.251 GHOSTnet GmbH
Spam link offersfri.duckdns.org = 199.231.188.170 Interserver โ redirects:
- www.biggvalues.com = 70.37.99.62 Microsoft
- www.therblights.com = no DNS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- www.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
- tracking.buygoods.com = 172.66.43.22, 172.66.40.234 Cloudflare
- unsub: www.fourfootwheel.com = 20.72.223.126 Microsoft
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2022-01-07 08:50:16
(4 years ago)
From: STD Elimination Secrets <[email protected] >
RU Herpa Greens/BuyGoods fake health testi ...
show more
From: STD Elimination Secrets <[email protected] >
RU Herpa Greens/BuyGoods fake health testimonials/phishing - blacklisted redirect URL www.therblights.com - click tracking
UBE 89.144.36.61 (EHLO deal.dronne.shop) GHOSTnet GmbH
Header SPF deal.dronne.shop = ditto
Spam link deal.dronne.shop โ redirects: www.therblights.com, get.herpagreens.com, www.buygoods.com, display.buygoods.com, tracking.buygoods.com, go.maxweb.com, static.cloudflareinsights.com, unsub: www.twostringwire.com, maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-12-18 18:17:53
(4 years ago)
From: รฐยยโฆ <[email protected] >
HerpaGreens/BuyGoods fake testimonials โ RU scamvertising โ click ...
show more
From: รฐยยโฆ <[email protected] >
HerpaGreens/BuyGoods fake testimonials โ RU scamvertising โ click tracking
UBE 85.93.30.119 (EHLO saffety.shop) GHOSTnet GmbH
Header SPF saffety.shop = ditto
Spam link bit.ly/3rVGAB3 redirects: www.myhomestrack.com, get.herpagreens.com, display.buygoods.com, www.buygoods.com, tracking.buygoods.com, go.maxweb.com, static.cloudflareinsights.com
Spam link www.twostringwire.com tracking: maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
Spam links hollidays.duckdns.org, erabit.duckdns.org
Repetitive spam address โ no entity: 1806 Summit Ave,,325,Richmond,Virginia,23230
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-12-13 09:32:03
(4 years ago)
From: รฐยโฆ <[email protected] >
HerpaGreens/BuyGoods fake testimonials โ RU scamvertising
UBE ...
show more
From: รฐยโฆ <[email protected] >
HerpaGreens/BuyGoods fake testimonials โ RU scamvertising
UBE 89.144.15.41 (EHLO 3cas.nationall.shop) GHOSTnet GmbH
Header SPF nationall.shop = 85.93.30.121 GHOSTnet GmbH
Spam link bit.ly redirects: www.myhomestrack.com, get.herpagreens.com, display.buygoods.com, www.buygoods.com, tracking.buygoods.com, go.maxweb.com
Spam link www.twostringwire.com tracking: maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
Spam links hollidays.duckdns.org, erabit.duckdns.org
Repetitive spam address โ no entity: 1806 Summit Ave, 325,Richmond, Virginia 23230
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-12-02 16:34:40
(4 years ago)
Spam link bit.ly/3oxkz8b -> www.stockersit.com, get.herpagreens.com, display.buygoods.com, www.buygo ...
show more
Spam link bit.ly/3oxkz8b -> www.stockersit.com, get.herpagreens.com, display.buygoods.com, www.buygoods.com, tracking.buygoods.com, go.maxweb.com
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 89.144.12.239 (EHLO choiice.shop) GHOSTnet GmbH
Header SPF choiice.shop = ditto
Spam link -> www.twostringwire.com -> maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
Spam link - offersdeals.duckdns.org
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-27 07:44:17
(4 years ago)
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 89.144 ...
show more
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 89.144.16.145 (EHLO oh48.hotdealls.xyz) GHOSTnet GmbH
Header SPF hotdealls.xyz = 85.93.6.204 IP Interactive
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- tracking.buygoods.com = 169.61.196.27 SoftLayer Technologies
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-26 12:30:26
(4 years ago)
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 85.9 ...
show more
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 85.93.23.166 (EHLO pj4g.completee.co.uk) GHOSTnet GmbH
Header SPF completee.co.uk = 85.93.3.18 GHOSTnet GmbH
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- tracking.buygoods.com = 169.61.196.27 SoftLayer Technologies
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-24 18:12:49
(4 years ago)
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 85.9 ...
show more
From: Beat Herpes <[email protected] >
Health scamvertising โ HerpaGreens/BuyGoods
UBE 85.93.23.166 (EHLO pj4g.completee.co.uk) GHOSTnet GmbH
Header SPF completee.co.uk = 85.93.3.18 GHOSTnet GmbH
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- tracking.buygoods.com = 169.61.196.27 SoftLayer Technologies
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-23 12:22:35
(4 years ago)
From: Beat Herpes <[email protected] >
Health scamvertising - HerpaGreens/BuyGoods
UBE 89.144. ...
show more
From: Beat Herpes <[email protected] >
Health scamvertising - HerpaGreens/BuyGoods
UBE 89.144.45.229 (EHLO 30f0.offerscare.co.uk) GHOSTnet GmbH
Header SPF offerscare.co.uk = 89.144.10.251 GHOSTnet GmbH
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- tracking.buygoods.com = 169.61.196.27 SoftLayer Technologies
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-20 12:39:52
(4 years ago)
From: Beat Herpes <[email protected] >
fake health news HerpaGreens - RU/BuyGoods scamvertising
...
show more
From: Beat Herpes <[email protected] >
fake health news HerpaGreens - RU/BuyGoods scamvertising
UBE 193.0.178.166 (EHLO agharass.xyz) PE Viktor Tyurin
Header Reply-To: <[email protected] > = ditto
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
2021-11-17 14:53:22
(4 years ago)
From: Beat Herpes <[email protected] >
fake health news/testimonials HerpaGreens - RU/BuyGoods sc ...
show more
From: Beat Herpes <[email protected] >
fake health news/testimonials HerpaGreens - RU/BuyGoods scamvertising
UBE 193.0.178.166 (EHLO agharass.xyz) PE Viktor Tyurin
Header Reply-To: <[email protected] > = ditto
Spam link bit.ly/3oxkz8b = 67.199.248.10, 67.199.248.11 Bitly โ redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- get.herpagreens.com = 104.21.29.214, 172.67.171.220 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
Spam link www.twostringwire.com = 40.64.49.241 Microsoft โ tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116, 54.149.225.160, 52.34.249.254 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot