Audi Norbert Kowalski, the American kingpin behind Filipino Netflix/CashApp/CBD Gummy scams

Popup - https://sdsdfjhsdufhai.iamfrolov.com/Tm3Fpc

Registered by Roman Frolov of Frolov Productions in Moscow, Russia via Reg.Ru on July 19, 2019 (Updated July 31, 2024) - Whois iamfrolov.com

The email came from [email protected], though I was asked to unsubscribe on List Armor, which the scammers used to try and circumvent violations of the CAN-SPAM Act. User complaints on TrustPilot indicates that the company doesn’t actually unsubscribe users from their fraudulent emails.

The popup redirects users to https://hefa.smsstoreonline.com/sacawa/vuyoga/mibejowe/index.php

Registered via Epik, LLC on April 8, 2024 - Whois smsstoreonline.com

After filling out a fake survey, users will be asked to complete “special deals” for

SureShot Innovations was reported by Snopes’ senior reporter Jordan Liles for being associated with a CashApp email scam alongside additional fraudulent products, such as Keto Ascend ACT/Adapt Slim Keto Gummies.

The Hype Style Co. also operates as ActivCiti Gadgets and was previously reported on May 31, 2022 for fraudulently posing as AT&T to send soliciting text messages from spoofed phone numbers.

All of the products are being promoted through Sling Ads, LLC, an affiliate marketing company listed on the Better Business Bureau with an A+ grade as operating under the leadership of Audi Norbert Kowalski at 20 Lake Wire Drive, Suite 150, Lakeland, Florida, 33815-1507

Kowalski is also listed as the owner of Save Rack, LLC, a dropshipping and 3PL fulfillment company listed as operating out of 3025 Whitten Rd, Lakeland, FL 33811, and TMDK Ventures, LLC

Associated Facebook Accounts:

Associated Instagram Accounts:

Associated TikTok Account - TikTok - Make Your Day

Associated LinkedIn Accounts:

Associated X Accounts:

Associated Phone Numbers:

  • +7 9777786899
  • (727) 255-4885 (AT&T mobile line for Sling Ads, LLC listed on the BBB listing for Save Rack)
  • (863) 937-6690 (Bright House Networks line for Sling Ads, LLC)
  • (515) 717-0429 (Bandwidth.com via Google Voice line for Save Rack)
  • (855) 227-2221 (Bandwidth.com line for Save Rack)
  • (833) 562-9291 (Incontact Inc. line for TrueTrack Systems, Filipino call center)
  • (833) 607-1040 (Incontact Inc. line for SureShot Innovations)
  • (866) 360-1222 (Incontact Inc. line for SKL Dynamics)
  • (877) 886-7311 (PNG Telecom line for Hype Style Co.)
  • (866) 379-9764 (Incontact Inc. line for PowerFlex Vision)
  • (888) 593-4768 (Incontact Inc. line for SKL Dynamics)
  • (866) 851-4165 (Incontact Inc. line for Powerflex Vision)
  • (855) 262-8014 (Twilo line for Vantage Technology, LLC, Indian call center)
  • (833) 607-1035 (Incontact Inc. line for CoolCrate Tech)
  • (866) 901-5051 (Incontact Inc. line for Tenpeak Devices)
  • (888) 593-5072 (Incontact Inc. line for FleetFiltrate)
  • (888) 259-5310 (Incontact Inc. line for Dust Digital Concept)
  • (833) 607-1036 (Incontact Inc. line for CoolCrate Tech)
  • (833) 400-0354 (Twilo line for TopGadgets)
  • (833) 519-1698 (Twilo line for TopGadgets)
  • ‪(201) 484-0744‬ (Onvoy line for the Hype Style Co.)
  • (866) 979-9572 (Five 9 number for SureShot Innovations)

Associated Email Addresses:

6 Likes

Great research!!

4 Likes

Looks like Kowalski’s now going as far as to impersonate Apple.

3 Likes

BBB

Current Alerts For This Business

Alert:

BBB files indicate that the products listed in this BBB Business Profile have a pattern of complaints concerning unauthorized and/or unexpected charges and unresolved refund disputes. Complaints filed by consumers state that they signed up for what they thought was a free trial and later discovered additional unauthorized and/or unexpected charges to their credit cards for additional amounts. BBB contacted the business October 2023 about the pattern of complaints, but have not received a response at this time.

3 Likes

NEW POPUP - https://perfectoffernet.com/visitor_nst_us/index_4_d.php

Registered via NameCheap on June 3, 2024 - Whois perfectoffernet.com

The scammers are now impersonating UPS to falsely claim I was “chosen to receive a brand new exclusive offer reward.” After I completed their “survey,” I was presented with a variety of “awards” to choose from, such as:

Associated IP Address - 91.220.101.99 :ukraine:

OTHER DOMAINS HOSTED ON THE IP ADDRESS:

2 Likes

NEW POPUP - https://kika.adanalyticshub.com/vu/zabecu/neyapusa/index.php

Registered in Wyoming via Internet Domain Services BS Corp. on July 31, 2024 - https://kika.adanalyticshub.com/vu/zabecu/neyapusa/index.php\

I came across this popup whilst investigating a scam text I received earlier today, impersonating Lowes to falsely claim I won a Stanley toolset. One of the popups had a similar IP address to a popup that redirected me to the afforementioned popup, which is designed to impersonate CVS Pharmacy.

2 Likes

That is some incredible research, I sure am glad that your’re on our side… :grin:

1 Like

These numbers are active across random areas in vast numbers
I have heard this identical menu thousands of times while searches have been running
The Filipino call centers which have an ivr 9 are in vast numbers all over the place also
I suspect it doesn’t matter what number is dialed, because you are going to tell them what you are interested in anyway, which is why they never say what products or websites they represent. There are thousands of them

These are 86 more I was able to find easily in targeted searches

8336071009 (InContact)
8336071015 (InContact)
8336071022 (InContact)
8336071023 (InContact)
8336071024 (InContact)
8336071025 (InContact)
8336071026 (InContact)
8336071027 (InContact)
8336071028 (InContact)
8336071029 (InContact)
8336071030 (InContact)
8336071031 (InContact)
8336071032 (InContact)
8336071033 (InContact)
8336071034 (InContact)
8336071037 (InContact)
8336071038 (InContact)
8336071055 (InContact)
8336071056 (InContact)
8336071057 (InContact)
8336071062 (InContact)
8663783665 (InContact)
8668481908 (InContact)
8668481913 (InContact)
8668481915 (InContact)
8668481922 (InContact)
8668481923 (InContact)
8668481924 (InContact)
8668481925 (InContact)
8668481927 (InContact)
8668481928 (InContact)
8668481931 (InContact)
8668481932 (InContact)
8668481933 (InContact)
8668481951 (InContact)
8668481955 (InContact)
8668481957 (InContact)
8668481967 (InContact)
8668481968 (InContact)
8668481970 (InContact)
8668481978 (InContact)
8668481983 (InContact)
8668482015 (InContact)
8669014978 (InContact)
8669014987 (InContact)
8669014991 (InContact)
8669014992 (InContact)
8669014993 (InContact)
8669014994 (InContact)
8669014998 (InContact)
8669015006 (InContact)
8669015007 (InContact)
8669015012 (InContact)
8669015013 (InContact)
8669015037 (InContact)
8669015038 (InContact)
8669015039 (InContact)
8669015040 (InContact)
8669015041 (InContact)
8669015042 (InContact)
8669015043 (InContact)
8669015044 (InContact)
8669015049 (InContact)
8669015059 (InContact)
8669015075 (InContact)
8669015084 (InContact)
8669015092 (InContact)
8669015093 (InContact)
8669015094 (InContact)
8669015095 (InContact)
8669015096 (InContact)
8669015099 (InContact)
8669015119 (InContact)
8669015123 (InContact)
8669015124 (InContact)
8669015125 (InContact)
8669015126 (InContact)
8774678131 (InContact)
8774678134 (InContact)
8774678181 (InContact)
8774678209 (InContact)
8885930771 (InContact)
8885934684 (InContact)
8885934695 (InContact)
8885934698 (InContact)
8885934764 (InContact)

I also have reasonable suspeeshion to believe these 23 may also be the same thing with a different menu and brief hold music and are worth investigating further

8885930637 (Airespring)
8885930638 (Airespring)
8885930639 (Airespring)
8885930641 (Airespring)
8885930642 (Airespring)
8885930644 (Airespring)
8885930645 (Airespring)
8885930646 (Airespring)
8885930651 (Airespring)
8885930656 (Airespring)
8885930670 (Airespring)
8885930673 (Airespring)
8885930678 (Airespring)
8885930684 (Airespring)
8885930685 (Airespring)
8885930695 (Airespring)
8885930710 (Airespring)
8885930716 (Airespring)
8885930717 (Airespring)
8885930725 (Airespring)
8885930726 (Airespring)
8885930739 (Airespring)
8885930741 (Airespring)

3 Likes

Phone number don’t matter. All are spoofed. Site address is more trackable.
Send report to [email protected]
The getlowestools.com is out of Iceland. It directs to another site adperformancemonitor.com.
I’ve advised Lowe’s and cheapname.com.
Everyone else should also.