Audi Norbert Kowalski, the American kingpin behind Filipino Netflix/CashApp/CBD Gummy scams

Wall of Shame Name and Shame
, , ,
1

Popup - https://sdsdfjhsdufhai.iamfrolov.com/Tm3Fpc

Registered by Roman Frolov of Frolov Productions in Moscow, Russia via Reg.Ru on July 19, 2019 (Updated July 31, 2024) - Whois iamfrolov.com

image
image954×1791 119 KB

The email came from [email protected], though I was asked to unsubscribe on List Armor, which the scammers used to try and circumvent violations of the CAN-SPAM Act. User complaints on TrustPilot indicates that the company doesn’t actually unsubscribe users from their fraudulent emails.

The popup redirects users to https://hefa.smsstoreonline.com/sacawa/vuyoga/mibejowe/index.php

Registered via Epik, LLC on April 8, 2024 - Whois smsstoreonline.com

image

After filling out a fake survey, users will be asked to complete “special deals” for

SureShot Innovations was reported by Snopes’ senior reporter Jordan Liles for being associated with a CashApp email scam alongside additional fraudulent products, such as Keto Ascend ACT/Adapt Slim Keto Gummies.

The Hype Style Co. also operates as ActivCiti Gadgets and was previously reported on May 31, 2022 for fraudulently posing as AT&T to send soliciting text messages from spoofed phone numbers.

All of the products are being promoted through Sling Ads, LLC, an affiliate marketing company listed on the Better Business Bureau with an A+ grade as operating under the leadership of Audi Norbert Kowalski at 20 Lake Wire Drive, Suite 150, Lakeland, Florida, 33815-1507

image

image

Kowalski is also listed as the owner of Save Rack, LLC, a dropshipping and 3PL fulfillment company listed as operating out of 3025 Whitten Rd, Lakeland, FL 33811, and TMDK Ventures, LLC

image

Associated Facebook Accounts:

Associated Instagram Accounts:

Associated TikTok Account - TikTok - Make Your Day

Associated LinkedIn Accounts:

Associated X Accounts:

Associated Phone Numbers:

  • +7 9777786899
  • (727) 255-4885 (AT&T mobile line for Sling Ads, LLC listed on the BBB listing for Save Rack)
  • (863) 937-6690 (Bright House Networks line for Sling Ads, LLC)
  • (515) 717-0429 (Bandwidth.com via Google Voice line for Save Rack)
  • (855) 227-2221 (Bandwidth.com line for Save Rack)
  • (833) 562-9291 (Incontact Inc. line for TrueTrack Systems, Filipino call center)
  • (833) 607-1040 (Incontact Inc. line for SureShot Innovations)
  • (866) 360-1222 (Incontact Inc. line for SKL Dynamics)
  • (877) 886-7311 (PNG Telecom line for Hype Style Co.)
  • (866) 379-9764 (Incontact Inc. line for PowerFlex Vision)
  • (888) 593-4768 (Incontact Inc. line for SKL Dynamics)
  • (866) 851-4165 (Incontact Inc. line for Powerflex Vision)
  • (855) 262-8014 (Twilo line for Vantage Technology, LLC, Indian call center)
  • (833) 607-1035 (Incontact Inc. line for CoolCrate Tech)
  • (866) 901-5051 (Incontact Inc. line for Tenpeak Devices)
  • (888) 593-5072 (Incontact Inc. line for FleetFiltrate)
  • (888) 259-5310 (Incontact Inc. line for Dust Digital Concept)
  • (833) 607-1036 (Incontact Inc. line for CoolCrate Tech)
  • (833) 400-0354 (Twilo line for TopGadgets)
  • (833) 519-1698 (Twilo line for TopGadgets)
  • ‪(201) 484-0744‬ (Onvoy line for the Hype Style Co.)
  • (866) 979-9572 (Five 9 number for SureShot Innovations)

Associated Email Addresses:

7 « J'aime »
Lowe's SCAM TEXT - (573) 881-5307 & (844) 907-9376
iCloud User: Winner
2

Great research!!

5 « J'aime »
3

Looks like Kowalski’s now going as far as to impersonate Apple.

image
image622×369 56.7 KB

4 « J'aime »
4

BBB

Current Alerts For This Business

Alert:

BBB files indicate that the products listed in this BBB Business Profile have a pattern of complaints concerning unauthorized and/or unexpected charges and unresolved refund disputes. Complaints filed by consumers state that they signed up for what they thought was a free trial and later discovered additional unauthorized and/or unexpected charges to their credit cards for additional amounts. BBB contacted the business October 2023 about the pattern of complaints, but have not received a response at this time.

4 « J'aime »
5

NEW POPUP - https://perfectoffernet.com/visitor_nst_us/index_4_d.php

Registered via NameCheap on June 3, 2024 - Whois perfectoffernet.com

image
image549×672 38.1 KB

The scammers are now impersonating UPS to falsely claim I was “chosen to receive a brand new exclusive offer reward.” After I completed their “survey,” I was presented with a variety of “awards” to choose from, such as:

Associated IP Address - 91.220.101.99 :ukraine:

OTHER DOMAINS HOSTED ON THE IP ADDRESS:

3 « J'aime »
6

NEW POPUP - https://kika.adanalyticshub.com/vu/zabecu/neyapusa/index.php

Registered in Wyoming via Internet Domain Services BS Corp. on July 31, 2024 - https://kika.adanalyticshub.com/vu/zabecu/neyapusa/index.php\

image

I came across this popup whilst investigating a scam text I received earlier today, impersonating Lowes to falsely claim I won a Stanley toolset. One of the popups had a similar IP address to a popup that redirected me to the afforementioned popup, which is designed to impersonate CVS Pharmacy.

3 « J'aime »
7

That is some incredible research, I sure am glad that you’re on our side… :grin:

2 « J'aime »
8

These numbers are active across random areas in vast numbers
I have heard this identical menu thousands of times while searches have been running
The Filipino call centers which have an ivr 9 are in vast numbers all over the place also
I suspect it doesn’t matter what number is dialed, because you are going to tell them what you are interested in anyway, which is why they never say what products or websites they represent. There are thousands of them

These are 86 more I was able to find easily in targeted searches

8336071009 (InContact)
8336071015 (InContact)
8336071022 (InContact)
8336071023 (InContact)
8336071024 (InContact)
8336071025 (InContact)
8336071026 (InContact)
8336071027 (InContact)
8336071028 (InContact)
8336071029 (InContact)
8336071030 (InContact)
8336071031 (InContact)
8336071032 (InContact)
8336071033 (InContact)
8336071034 (InContact)
8336071037 (InContact)
8336071038 (InContact)
8336071055 (InContact)
8336071056 (InContact)
8336071057 (InContact)
8336071062 (InContact)
8663783665 (InContact)
8668481908 (InContact)
8668481913 (InContact)
8668481915 (InContact)
8668481922 (InContact)
8668481923 (InContact)
8668481924 (InContact)
8668481925 (InContact)
8668481927 (InContact)
8668481928 (InContact)
8668481931 (InContact)
8668481932 (InContact)
8668481933 (InContact)
8668481951 (InContact)
8668481955 (InContact)
8668481957 (InContact)
8668481967 (InContact)
8668481968 (InContact)
8668481970 (InContact)
8668481978 (InContact)
8668481983 (InContact)
8668482015 (InContact)
8669014978 (InContact)
8669014987 (InContact)
8669014991 (InContact)
8669014992 (InContact)
8669014993 (InContact)
8669014994 (InContact)
8669014998 (InContact)
8669015006 (InContact)
8669015007 (InContact)
8669015012 (InContact)
8669015013 (InContact)
8669015037 (InContact)
8669015038 (InContact)
8669015039 (InContact)
8669015040 (InContact)
8669015041 (InContact)
8669015042 (InContact)
8669015043 (InContact)
8669015044 (InContact)
8669015049 (InContact)
8669015059 (InContact)
8669015075 (InContact)
8669015084 (InContact)
8669015092 (InContact)
8669015093 (InContact)
8669015094 (InContact)
8669015095 (InContact)
8669015096 (InContact)
8669015099 (InContact)
8669015119 (InContact)
8669015123 (InContact)
8669015124 (InContact)
8669015125 (InContact)
8669015126 (InContact)
8774678131 (InContact)
8774678134 (InContact)
8774678181 (InContact)
8774678209 (InContact)
8885930771 (InContact)
8885934684 (InContact)
8885934695 (InContact)
8885934698 (InContact)
8885934764 (InContact)

I also have reasonable suspeeshion to believe these 23 may also be the same thing with a different menu and brief hold music and are worth investigating further

8885930637 (Airespring)
8885930638 (Airespring)
8885930639 (Airespring)
8885930641 (Airespring)
8885930642 (Airespring)
8885930644 (Airespring)
8885930645 (Airespring)
8885930646 (Airespring)
8885930651 (Airespring)
8885930656 (Airespring)
8885930670 (Airespring)
8885930673 (Airespring)
8885930678 (Airespring)
8885930684 (Airespring)
8885930685 (Airespring)
8885930695 (Airespring)
8885930710 (Airespring)
8885930716 (Airespring)
8885930717 (Airespring)
8885930725 (Airespring)
8885930726 (Airespring)
8885930739 (Airespring)
8885930741 (Airespring)

3 « J'aime »
10

Phone number don’t matter. All are spoofed. Site address is more trackable.
Send report to [email protected]
The getlowestools.com is out of Iceland. It directs to another site adperformancemonitor.com.
I’ve advised Lowe’s and cheapname.com.
Everyone else should also.

11

These idiots have been dumping some numbers while adding a few more into the lists.

These have been added since this original search was run

8669015017 (InContact)
8669015051 (InContact)
8669015069 (InContact)

8774678080 (InContact)
8774678137 (InContact)
8774678206 (InContact)

These numbers are now dead

8336071009 (InContact)
8336071015 (InContact)
8336071055 (InContact)
8336071056 (InContact)
8336071057 (InContact)

8669015092 (InContact)
8669015093 (InContact)
8669015094 (InContact)
8669015095 (InContact)
8669015096 (InContact)
8669015099 (InContact)
8669015119 (InContact)
8669015123 (InContact)
8669015124 (InContact)
8669015125 (InContact)
8669015126 (InContact)

1 « J'aime »
13

NEW POPUP - Google

Registered via NameCheap on January 29, 2025 - Whois bestratedflashlight.com

image
image482×514 22.6 KB

Associated Phone Number: (641) 799-4173 (US Cellular)

Desktop users are redirected to Google, mobile users are redirected to https://www.premiumtechdiscounts.com/flashlight-stun-gun/Y64-EPO/mobile/?AFFID=4&C1=10189&C2=1010&C3=1027d9fafb7e9844d3f06e87874e9a&C4=&C5=795884386&click_id=3000ad04cd2d45278d4df0579f051ecb

Registered via PorkBun on April 16, 2024 - Whois premiumtechdiscounts.com

image
image476×851 40 KB

The website is fraudulently promoting the “Gadget Pro Flashlight Stun Gun” while operating under the identity of “Tech Rift Flashlight Stun Gun” from a UPS Store in Fullerton, California. I was asked to purchase the product for $8.95 with a Mastercard, but the purchase page only serves to sign me up for a “special deal club” for an additional $24-199 every 8-30 days.

I was able to trace this all back to TMDK Ventures Private Limited due to the PorkBun domain, InContact phone number and the discount for MasterCard users.

Associated Phone Number: (888) 259-3515 (InContact, “Rita” answers as “Customer Care for 200 companies”)

Associated Email Address: [email protected]

1 « J'aime »
14

NEW POPUP - Google

Registered via NameCheap on March 25, 2025 - Whois omahasteakkits.com

image
image397×532 18.8 KB

Associated Phone Number - (828) 696-6247 (US Cellular

The popup redirects desktop users to Google and mobile users to https://zaxepa.goldensurveyrewards.com/guga/bi/gi/xiheca/jezula/index.php

Registered via Spaceship, Inc. on February 7, 2025 - Whois goldensurveyrewards.com

image
image812×495 41.2 KB

After completing their fake “survey,” users will be redirected to https://colorfultunes.st/kufi/wewako/sufu/yewiha/index.php to claim their “Omaha Steaks kit,” but it’s “out of stock.” Instead, users can select:

Associated Phone Numbers:

  • (866) 399-8170 (InContact, Filipino call center)
  • (855) 431-3195 (Five9, Filipino call center)
  • (855) 584-0010 (Five9, Filipino call center)
  • (844) 212-3199 (Busy Telcoline)
  • (855) 686-2608 (RingCentral, Filipino call center)
  • (888) 220-0189 (Five9, Filipino call center)
  • (833) 817-0654 (Five9, Filipino call center)
  • (855) 431-9461 (Five9, Filipino call center)
  • (877) 445-4565 (PNG Telecom, Filipino call center)
  • (866) 726-7620 (Five9, Filipino call center)

Associated Email Addresses:

2 « J'aime »
15

Human dirt ripping people off. Great work researching!

2 « J'aime »
16

NEW POPUP - Google

Registered via NameCheap on April 26, 2025 - Whois emergencyaaakits.com

image
image423×578 21 KB

Associated Phone Number: (515) 250-5412 (US Cellular)

The popup redirects desktop users to Google and mobile users to https://hepi.cosmotry.com/xutikoji/mizu/tipa/masi/index.php

Registered in the Netherlands via Realtime Register B.V. on April 25, 2025 - Whois cosmotry.com

image
image485×533 61.4 KB

After completing their fake survey, users will then be able to “claim” their “car emergency kit,” which is actually “out of stock.” Instead, users can select any of the aforementioned “prizes,” including a “car emergency kit.”

2 « J'aime »
17

Popup - Google

Registered via NameCheap on April 26, 2025 - Whois egoleafblow.com

image
image484×605 27.7 KB

Associated Phone Number - (580) 559-9230 (US Cellular)

The popup redirects desktop users to Google and mobile users to a fake Ace Hardware survey registered via Nindo on March 20, 2025 - Whois prizecosmosmy.ma

image
image794×459 42.8 KB

Associated Email Address - [email protected]

After completing their fake “survey,” I “qualified” to receive an “Ego Power+ Leaf Blower” that was actually "out of stock.

2 « J'aime »
19

NEW POPUP - Google

image
image390×120 6.65 KB

Associated Phone Number - (833) 834-1214 (Bandwidth.com)

The website was a branded short domain for https://wristweardepot.shop/, a NameCheap domain registered on February 5, 2025 - Whois wristweardepot.shop

image
image936×900 59.6 KB

The popup is designed to impersonate Lowes and fraudulently use the likeness of Dwayne “the Rock” Johnson to promote a fake Milwaukee tool set giveaway hosted on https://www.wanderingcedarcollective.com/v1/milwaukeem18/, an Icelandic Internet Domain Service BS Corp domain registered on April 10, 2025 - Whois wanderingcedarcollective.com

image
image350×442 15.9 KB

There, users are asked to pay $14.93 to cover shipping and handling fees, though it is actually used to register users for a bingeworthydigitalread.com subscription that costs $15.41 down and $73.67/month for Visa cardholders or $11.67 down and $76.67/month for Mastercard holders, as well as the “level me up smart courses” app for an additional $45.59 every 45 days.

Associated Phone Numbers:

  • (877) 909-7516 (InContact, Filipino call center)
  • (866) 399-9139 (InContact, Filipino call center)

Associated Email Addresses:

2 « J'aime »
20

NEW POPUP - Redirecting...

image
image457×895 34.1 KB

Associated Email Address - [email protected]

The popup redirects users to https://incredabledeals.motorcycles/?sub5=27144&source_id=21051&encoded_value=223GDT1&sub1=2ed3c811f1a545d7ba618bb1483c8cbb&sub2=&sub3=&sub4=&sub5=27144&source_id=21051&domain=www.supname.com&ip=2603%3A7081%3A1505%3A7064%3A4553%3A1760%3A61f4%3Ae070

Registered via NameCheap on January 30, 2025 (updated March 30, 2025) - Whois incredabledeals.motorcycles

image
image810×444 75.8 KB

The popup is a fake State Farm survey, with users who complete it earning a “free fire safety kit” at Fire Safety Kit

There, users will be asked to pay $9.95 in shipping and handling fees, which is really to sign users app for a “fitness app portal” that costs $122.75/month

Associated Phone Number - (888) 683-9249 (PNG Telecom, Filipino call center)

Associated Email Address - [email protected]

2 « J'aime »
21

They just don’t give up in their efforts to steal, pretty disgusting.

2 « J'aime »