Note 1: repetitive spammer address, no entity: 6130 W Flamingo Rd, Las Vegas, NV 89103 (NOTE: per BBB activity, Postal Annex claims fraudulent use of drop-box address)
Note 2: RU Reward fraud - message URL redirect: "errasershirt.com is a survey service…" - content + terms consistent with previous surveys: divergesneek.com, vapourstinger.com, ENTREEMASTER.COM, winnertodaywho.com, YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
Spam link vetaraja.co.uk – redirects: urgentuslime.com, witteddriade.com, errasershirt.com, trk-tempore.com, a.mgid.com
Image spam link vopmerno.com = 5.161.88.225 Hetzner Online show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
NOTE message URL redirect marked as malicious: "woodedsting.com is a survey service…" - content + ... show moreNOTE message URL redirect marked as malicious: "woodedsting.com is a survey service…" - content + terms consistent with previous surveys: DIVERGESNEEK.COM, vapourstinger.com, ENTREEMASTER.COM, winnertodaywho.com, YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
Sams Club spoofing - Repetitive RU reward fraud/phishing
"ENTREEMASTER.COM is a surve ... show moreSams Club spoofing - Repetitive RU reward fraud/phishing
"ENTREEMASTER.COM is a survey service…" - content + terms consistent with previous surveys: winnertodaywho.com, YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time script – click tracking
From: Sams Club <[email protected]>
UBE 62.171.173.112 (EHLO a.wewe.digital) Contabo Gmbh
Header news.timberland.com = 136.147.189.214 Salesforce.com
Header wewe.digital = 62.171.172.182 Contabo Gmbh
Spam link mernashok.co.uk = 45.134.173.96 Virtual Systems LLC – redirects: urgentuslime.com, witteddriade.com, landing: entreemaster.com, trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
Lowes spoofing - Repetitive RU reward fraud/phishing – "ENTREEMASTER.COM is a survey service…" - ... show moreLowes spoofing - Repetitive RU reward fraud/phishing – "ENTREEMASTER.COM is a survey service…" - content + terms consistent with previous surveys: winnertodaywho.com, YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
From: Dyson Vacuum <[email protected]>
UBE 45.12.2.170 (EHLO quisfziik.goo.ne.jp) Virtual Systems LLC
Header news.timberland.com = 136.147.189.244 Salesforce.com
Header goo.ne.jp = 202.217.72.126 INTERVIA
Spam link jaaybikom.org.uk = 23.170.246.21 IPXO UK Limited – redirects: urgentuslime.com, witteddriade.com, landing: entreemaster.com, trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Repetitive RU reward fraud/phishing – "STAGNINGTRUMP.COM is a survey service…" - content + terms consistent with previous surveys: YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with hard-scripted "current" time – click tracking
Reference Top Job Market 23105 N Ashland Ave Suite 254, Chicago IL 60657
UBE 89.163.151.209 (EHLO etlsehj.pfizerinc.org) Myloc Managed It Ag
Spam link triumfator-m.com = 51.158.191.35 Online SAS – redirects: xilosong.com (previous IP 69.51.5.18), warmenbrace.com, stagningtrump.com, trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: "Walgreens Shopper Feedback" <[email protected]>
Repetitive RU reward fraud/phishin ... show moreFrom: "Walgreens Shopper Feedback" <[email protected]>
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 192.3.127.106 (EHLO illoxkzav.mekrashop.org.uk) ColoCrossing
Header Message-ID news.timberland.com = 136.147.189.214 Salesforce.com, Inc.
Spam link mernashok.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: Confirmation Needed <[email protected]>
Bogus Subj:, repetitive RU reward fraud/phishin ... show moreFrom: Confirmation Needed <[email protected]>
Bogus Subj:, repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
Spam link nermachos.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: MUAMA Ryoko <[email protected]>
Bogus Subj: - redirect to reward fraud/phishing<br ... show moreFrom: MUAMA Ryoko <[email protected]>
Bogus Subj: - redirect to reward fraud/phishing
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 208.64.228.35 (EHLO eumwssxv.id.wikipedia.org) MULTACOM CORPORATION
Header Message-ID news.timberland.com = 136.147.189.214 Salesforce.com, Inc.
Spam link mernashok.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: Dyson Vacuum <[email protected]>
Lowes spoofing; repetitive RU reward fraud/phishing – ... show moreFrom: Dyson Vacuum <[email protected]>
Lowes spoofing; repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 192.3.127.105 (EHLO mekrashop.org.uk) ColoCrossing
Header Message-ID news.timberland.com = 136.147.189.214 Salesforce.com, Inc.
Spam link nermachos.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: "Miracle CBD Gummies" <[email protected]>
Bogus Subj: - redirect to reward fraud/ph ... show moreFrom: "Miracle CBD Gummies" <[email protected]>
Bogus Subj: - redirect to reward fraud/phishing
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 208.64.228.35 (EHLO eumwssxv.id.wikipedia.org) Multa-asn1
Header Message-ID news.timberland.com = 136.147.189.214 Salesforce.com, Inc.
Spam link mernashok.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamBad Web Bot
Anonymous
From: Sams Club <[email protected]>
Repetitive RU reward fraud/phishing – "YETTMARINA.C ... show moreFrom: Sams Club <[email protected]>
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 208.64.228.44 (EHLO vitaeuwjgg.id.wikipedia.org) Multa-asn1
Header Message-ID news.timberland.com = 136.147.189.214 Salesforce.com, Inc.
Spam link mernashok.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: Macbook Pro > <<>
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey s ... show moreFrom: Macbook Pro > <<>
Repetitive RU reward fraud/phishing – "YETTMARINA.COM is a survey service…" - content + terms consistent with previous surveys: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
UBE 192.3.127.105 (EHLO mekrashop.org.uk) ColoCrossing
Header comms.aol.net = 159.127.187.11 Epsilon Interactive LLC
Spam link mernashok.co.uk – redirects: zakatsnose.com, warmenbrace.com, yettmarina.com, trk-tempore.com, event.trk-tempore.com, a.mgid.com show less
Fraud OrdersPhishingWeb SpamEmail SpamSpoofingBad Web Bot
Anonymous
From: Macbook Pro > <<>
RU reward fraud/phishing - YETTMARINA.COM is a survey service - conte ... show moreFrom: Macbook Pro > <<>
RU reward fraud/phishing - YETTMARINA.COM is a survey service - content consistent with previous: YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM – repetitive fake testimonials with "current" time – click tracking