Author: iseeyou

Categories
SPAM

SPAM: kuteshoes.com

Do you like buying shoes from SPAM emails? We don’t.

FROM: kuteshoes.com vuvantrong1210@gmail.com
SUBJECT: Have you ever bought a pair of shoes and t-shirts at wholesale prices $9?

Hi,

The economic situation is difficult, so we decided to sell shoes, sandals at wholesale prices from $5, and high-quality printed, plain t-shirts for only $9.99.

You can visit our website: kuteshoes.com or see some of the products below:

The domain records are hidden but the contact details from the website are in Newark which seems to be mixed office space.

Kute Shoes Shop IP Manager
39899 Balentine Drive
Newark, CA 94560
copyright@kuteshoes.com

Australian Communications and Media Authority
https://www.acma.gov.au/avoid-sending-spam

Categories
SPAM

SPAM: mymedicaremktg.com

We love a good bit of poorly targeted honest SPAM.

This time it’s SPAM from Edgar Arvelo from YHWH Trade, LLC.
The phone number in the email does connect and you can call and leave Edgar a nice voicemail message.

FROM: Edgar Arvelo info@mymedicaremktg.com
SUBJECT: New to Medicare Act Now

Dear Medicare Beneficiary,

We are trying to reach you regarding your eligibility for a Medicare Advantage plan that may include additional benefits.

Please Call: 888-281-3113

to speak to a licensed insurance agent

or Apply Here to enroll in plans from highly-rated insurance companies in your area as a one-stop shop.

As a Medicare beneficiary in your state, you may have the ability to choose a Medicare Advantage plan that gives you more benefits than Original Medicare without paying more.

As a Medicare recipient, you may be eligible to receive extra benefits such as:

Hearing Aids

Dental Benefits

Vision Care

Monthly Over-the-Counter Allowances

Wellness Programs such as Gym Memberships

Transportation Benefits

Prescription Drug Coverage and More

Please reply as soon as possible to confirm your eligibility for a $0 Monthly Plan Premium that may be available in your area.

Sincerely,

Edgar Arvelo
Licensed Insurance Agent
National Producer ID Number: 613498
1652 Bragg Drive #203
Celebration, FL 34747
Phone: 888-281-3113

Please Call: 888-281-3113

to speak to a licensed insurance agent

or Apply Here to enroll in plans from highly-rated insurance companies in your area as a one-stop shop.

Not affiliated with the U.S. government or federal Medicare program

To be removed from this list please visit manage subscription to unsubscribe.

YHWH Trade, LLC
1652 Bragg Dr, Apt 203 Celebration, FL 34747

The domain records show Edgar at the same address with a different phone number. This number just says goodbye and hangs up.

Domain Name: mymedicaremktg.com
Registry Domain ID: 2675815396_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2022-02-18T07:00:00Z
Creation Date: 2022-02-17T07:00:00Z
Registrar Registration Expiration Date: 2023-02-17T07:00:00Z
Registrar: NameSilo, LLC
Registrar IANA ID: 1479
Registrar Abuse Contact Email: email@namesilo.com
Registrar Abuse Contact Phone: +1.4805240066
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: Edgar Arvelo
Registrant Organization: YHWH Trade, LLC
Registrant Street: 1652 Bragg Dr, Apt 203 N/A
Registrant City: Celebration
Registrant State/Province: FL
Registrant Postal Code: 34747
Registrant Country: US
Registrant Phone: +1.8448570165
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: email@contactprivacyservice.com
Registry Admin ID: 
Admin Name: Edgar Arvelo
Admin Organization: YHWH Trade, LLC
Admin Street: 1652 Bragg Dr, Apt 203 N/A
Admin City: Celebration
Admin State/Province: FL
Admin Postal Code: 34747
Admin Country: US
Admin Phone: +1.8448570165
Admin Phone Ext: 
Admin Fax: 
Admin Fax Ext: 
Admin Email: email@contactprivacyservice.com
Registry Tech ID: 
Tech Name: Edgar Arvelo
Tech Organization: YHWH Trade, LLC
Tech Street: 1652 Bragg Dr, Apt 203 N/A
Tech City: Celebration
Tech State/Province: FL
Tech Postal Code: 34747
Tech Country: US
Tech Phone: +1.8448570165
Tech Phone Ext: 
Tech Fax: 
Tech Fax Ext: 
Tech Email: email@contactprivacyservice.com
Name Server: NS1.MYMEDICAREMKTG.COM
Name Server: NS2.MYMEDICAREMKTG.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2022-03-10T07:00:00Z <<<

Australian Communications and Media Authority
https://www.acma.gov.au/avoid-sending-spam

Categories
SCAM

SCAM: Amazon Prime subscription robocall

The international robocall SCAM volume has had a noticeable increase over the past 6 months.

The scams are still the same, either being the purchase of an expensive Apple iPhone or an Amazon Prime subscription.
The call is from a local number and a robotic voice reads you a message, obviously programmed with no punctuation as it rattles it off at a record pace.

You are always given the option to press 1 to speak to an operator if you want to cancel the order. Amusingly, they often don’t know which scam they’re talking to you about and often starting talking to you about something different from the robo message.
The people you speak are reading from scripts and often trip over their own words and are easily stumped when you don’t respond the way they would expect. Questioning who they are or where they are from almost always results in the call being terminated.

In a recent call, whilst playing along, we were directed to go to an Amazon cancellation form at http://amazonformcancel.ukit.me

Ukit.me is a free hosting platform out of Russia and is being abused for SCAM and SPAM campaigns regularly. (just do a Google search)

On this fake Amazon page, you’ll find a few things.

First, the cancel order button helpfully points you to a download of the UltraViewer (ultraviewer.net) remote access software.
Just in case that doesn’t work, there are also Support links to point you to download their other regular favorite, AnyDesk (anydesk.com).

Now, just in case you can’t download the above remote access software so they can access your computer (maybe your work has blocked these tools as a sensible precaution), they helpfully have a link to a Google form where they can collect personal information about you.

Going by the legitimate Amazon links on this fake page, this SCAM is operating out of India (amazon.in) which does seem to match the accent type we often hear.

TIPS:

  • Never respond to unsolicited automated or robocalls asking you to take action on something. If you’re concerned, login to your account or visit the vendors website directly to investigate.
  • If you’re called by an actual person, never be afraid to ask them to verify their identity BEFORE you hand over any of your personal information. If in doubt, let them know you will contact them back through their publicly advertised contact number. Most legitimate companies won’t have any concern with this and won’t try to coerce you into talking to them.
  • NEVER allow someone to remotely access your computer unless you implicitly trust them. If you have a work computer, this will be against your company policy. There is no legitimate reason a company like Amazon would need to access your computer to deal with an account issue.

But really, if in doubt, just hang up.

Categories
SPAM

SMS SPAM: lifeinsurancecomparison.com.au

We received SMS SPAM from lifeinsurancecomparison.com.au.

A reminder, never click on links in unsolicited SMS.

FROM: +61485864251
LINK: http://bit.ly/licX50
REDIRECTED LINK: https://lifeinsurancecomparison.com.au

<Name>,

Life insurance prices go up year on year. Switch and save on your life covers with Life Insurance Comparison.

Cllick:bit.ly/licX50

‘STOP’ to optout

The domain is registered to COMPARE CLUB AUSTRALIA PTY LTD.

Domain Name: LIFEINSURANCECOMPARISON.COM.AU
Registry Domain ID: D407400000002327876-AU
Registrar WHOIS Server: whois.auda.org.au
Registrar URL:
Last Modified: 2021-11-24T04:02:22Z
Registrar Name: DROP.com.au Pty Ltd
Registrar Abuse Contact Email: email@drop.com.au
Registrar Abuse Contact Phone: +61.395897946
Reseller Name:
Status: serverRenewProhibited https://afilias.com.au/get-au/whois-status-codes#serverRenewProhibited
Status Reason: Not Currently Eligible For Renewal
Registrant Contact ID: DS525085682530
Registrant Contact Name: Jonathan Leane
Tech Contact ID: DS525085683224
Tech Contact Name: Jonathan Leane
Name Server: NS-1070.AWSDNS-05.ORG
Name Server: NS-378.AWSDNS-47.COM
Name Server: NS-1952.AWSDNS-52.CO.UK
Name Server: NS-581.AWSDNS-08.NET
DNSSEC: unsigned
Registrant: COMPARE CLUB AUSTRALIA PTY LTD
Registrant ID: ACN 634600007
Eligibility Type: Company

It appears the tech contact Jonathan Leane is a founder.

Compare Club has a complaints page with contact information
How to complain to Compare Club – Compare Club

Compare Club seems to run a lot of comparison businesses

Australian Communications and Media Authority
https://www.acma.gov.au/avoid-sending-spam

Categories
SPAM

SPAM: SocialStanceMedia.com Instagram Colab – Abbie Herbert

Unsolicited SPAM from Social Stance Media offering to let us colab with a social media influencer’s followers.

We continue to receive SPAM and haven’t been able to validate any of the previous colab have gone ahead. It still seems odd to be buying followers. I also wonder if the followers would know their information was being passed onto other companies (as promoted) and if would actually meet SPAM or privacy compliance.

FROM: Abby@socialstancemedia.com
SUBJECT: <instagram handle> & Abbie Herbert (1.4M on IG)

Hey happy Monday!

I hope that you’re having a great start to the new year! We have a collab we’re running with Abbie Herbert (@abbieherbert_) on February 1st. Abbie will be asking her IG fans to follow a group of accounts to qualify. Those accounts gain tons of exposure from her post. If you’re interested in participating please let me know!

Abby Joyce | COO
Social Stance Media



Abby Joyce

1075 S. 500 W., Bountiful, UT 84010