Phuck all spammers.
An unscrupulous spammer, blasting millions of emails daily, is using cheap .US registrations at NameCheap for his mass spamming.
When domain registrars offer domain registrations below the $1 dollar threshold, spammers reap the benefits.
Hiding behind a Cloudflare proxy DNS, the cybercriminals are using hosts in Russia, Estonia and elsewhere.
Just like in the case of dot .TOP domains, cheap domain registrations enable spammers to proliferate.
NameCheap should clean up house, particularly when it can audit the purchases made by the same account using other, fake WHOIS info.
For the time being, here is a list of .US domains used in this spam campaign, all of them registered on January 2nd:
aadfair.us
aadmute.us
aadslim.us
aadsuch.us
abletye.us
actogey.us
aelisia.us
ahrenis.us
almostweightlossgood.us
babysdr.us
bankgge.us
blankqo.us
bulkoea.us
bxchewy.us
bxshiny.us
bxshort.us
bxwrong.us
calledmyweightloss.us
carwarrantyinforate.us
cehable.us
cehanti.us
cehdeep.us
cehlean.us
curetoenailfungusright.us
dearweh.us
deepweh.us
diabetesactivity.us
dietxjs.us
diseasetreated.us
dooncuredforheart.us
dscumen.us
eatenqo.us
eddilar.us
eightxp.us
enddiabetescompose.us
errapom.us
eutelad.us
evenjmm.us
facheat.us
fiendhm.us
fifinal.us
findifw.us
footfdw.us
grasphm.us
greatbenefitspureoil.us
hewesto.us
hurtjmm.us
impyted.us
informationhealthissues.us
issplie.us
itemoea.us
jchosen.us
jeangge.us
jinhale.us
jjefirm.us
jjerich.us
jjesafe.us
jnibble.us
jollytt.us
lastfea.us
legoong.us
lessgge.us
listcarwarrantyinfo.us
loudfae.us
lqgiven.us
lqjumbo.us
lqowned.us
maxixjs.us
memoryfocustakes.us
microqo.us
milksno.us
mobunto.us
moosett.us
mostjmm.us
muchxjs.us
myhearingcuredzone.us
nailfunguscuredand.us
nervecuresupport.us
oncejmm.us
openweh.us
poquick.us
pseafer.us
pureoilbenifitshaving.us
qbailey.us
qchorus.us
qclause.us
qsudden.us
reapsdr.us
recognizeourbrainhealth.us
reversenervepainyap.us
rougett.us
rummytt.us
sandsdr.us
shamehm.us
shedmms.us
shellxp.us
snentio.us
snipea.us
sweetqo.us
tollsdr.us
tycouch.us
unheden.us
uobroom.us
voidweh.us
ywndone.us
ywnlive.us
ywnpink.usbrainfocusqualify.us
bzbrown.us
bzbudge.us
bzpilot.us
bzslice.us
datekso.us
dbathed.us
dfumble.us
drefuse.us
heartattackcuresome.us
indicatednerverenew.us
linkkso.us
lyawait.us
lybased.us
lyexist.us
lygrave.us
millsza.us
pullyjh.us
rdamage.us
recognizefreeenergydevice.us
rsquish.us
wakekso.us
wjbuilt.us
wjmetal.us
wjnurse.us
wjwheel.us
Here is a list of other .US domains, presumably utilized in a former spam campaign, under the same account:
acebnj.us
adviseloseweight.us
balldzz.us
beatdzz.us
besphea.us
bizcashcompetition.us
bowlbnj.us
casmion.us
cerodis.us
codebnj.us
dallae.us
darsim.us
dateasianbeautiesnice.us
ebellyfatnecessary.us
electricityaccording.us
electricityopinion.us
factbloodsugar.us
favalif.us
finddzz.us
flatbellyadvertise.us
gatoet.us
grubbnj.us
jetocky.us
jinxbnj.us
joybnj.us
judgeen.us
kapoir.us
katewin.us
kklevil.us
kneelxc.us
lacebnj.us
ledenir.us
lowerlf.us
marryen.us
mudbnj.us
mudorab.us
neptia.us
nihloan.us
nihmiss.us
nihwell.us
onfreeenergydevicewant.us
pagelit.us
papeght.us
patrus.us
petbnj.us
pointedspybook.us
pucensk.us
putdzz.us
pyrger.us
qjmplow.us
qjmride.us
qjmsend.us
radasom.us
reasonablebizcash.us
regardspysecrets.us
renasor.us
rfbeach.us
rfclock.us
rfgauze.us
rfgreek.us
rfmeans.us
rfpiper.us
rftruck.us
rhthrew.us
rhupset.us
sensitivespysecrets.us
setbnj.us
societyelectricity.us
solarquotesthey.us
solarquoteszone.us
ssodate.us
stateen.us
surecuredigestivetoxins.us
timesharesellguard.us
titlelf.us
tonedzz.us
torcii.us
tubebnj.us
untielf.us
usuallydiabetes.us
voiddzz.us
woodworkinginfotime.us
workbnj.us
yarodan.us
zaabbey.us
zacrepe.us
zadeuce.us
zadoggy.us
zagrace.us
zamorse.us
zaouter.us
zapulse.us
zaunity.us
zegface.us
zegmake.us
zegtick.us
zompay.usactfd.us
aetima.us
alkenne.us
biriomb.us
bloodsugarunderstand.us
cellresearchus.us
certaindiabeteshelp.us
cilatue.us
clapcf.us
colurbs.us
coolspysecrets.us
couldconstipationcured.us
cuddleo.us
cureddigestiveseffective.us
cyreree.us
diabeteshelped.us
disuera.us
dozendi.us
dupefd.us
dutrud.us
eceasy.us
fipedal.us
frogfjp.us
gatoupi.us
geekcf.us
givenra.us
gokwell.us
gooeyra.us
gradedo.us
hashcf.us
hidecf.us
hureato.us
joltcf.us
justlottowinner.us
kireahn.us
knitfd.us
limbin.us
limmal.us
loselic.us
lowlyra.us
mazepve.us
medicareplanssupport.us
mitheog.us
napfjp.us
neriloh.us
nifever.us
nmycry.us
nmyflat.us
nmygrey.us
nmyjazz.us
nmyrain.us
nmysav.us
paircf.us
particulartimeshare.us
pixfjp.us
pomialc.us
providedsurvivalfoods.us
rathea.us
recognizecuredsnoring.us
renesor.us
responseelectricity.us
ribios.us
rlclost.us
rlcover.us
rlcrude.us
sandyra.us
shakeno.us
spyfjp.us
srishau.us
suldic.us
tabseh.us
tanuram.us
tiedpss.us
tiltfjp.us
tinsela.us
tinypss.us
tiredra.us
tookpve.us
trekfjp.us
uevdeep.us
ueviced.us
uevmean.us
vatreb.us
wominup.us
yasises.us
zilloar.us
zincfungusawareness.us
Many thanks to DomainTools for providing an indispensable domain research tool analyzing domain ownership, in order to combat cybercrime.
