Elaborate web of scam sites

So the youtube videos get me interested in all this, and I know my old email address is on a list due to the amount of junk I get. A few make it through and sometimes I report them to whoever is being spoofed. Anyway I’m looking through my junk files and loads of vouchers coming up. This one in particular caught my attention because I went looking online for the first domain and it lead me to what I believe is another bunch of scams aimed at “removing” the first one. I know it was rightly identified as junk by outlook, but i don’t know if this is actually scamming anyone, and as it is recent I thought I would post it here for you…

Here goes;

Win your weekly groceries delivered at home!
Clubcard Member <[email protected]>
Tue 20/04/2021 04:28

Congratulations,

Your email has been pre-selected this week as a potential winner!

With this email, it is our pleasure to inform you that you now have the chance to win the £1,000 Tesco voucher!

You can shop from a fantastic range of groceries with this giftcard from Tesco. Enter the prize draw by confirming your details below.

Good luck!
Laura, Customer Service

Click Here » [http://fairmount.xyz/d1EySEVSMFMzZnVCdmYvRWNpWFVtZjFOSEx4OU5PNXo5aEV5QzRBcTV4V1RURUN1L2dTSXhTWnJmeWRoeXNQL1QrOGdMRlRabVBya1ArNzN3dHZURVE9PQ__]

click here [http://fairmount.xyz/Q2w2TkRiTTJIS0FZa1UxM0NSWC93R0R4VWsvWmg0eFZLVVc2VkQrejVEN3pBcXpxYWgvazByZVFSbkNOc1NaRW5GVitNRFNRai9NVStDQW01UVYrTkE9PQ__] to remove yourself from our emails list

So following the link takes me to a page that says I won a gift and asks me three very easy questions. There are several "reviews" under the "quiz" that proclaim how great it was to receive their free gift;

Congratulations Google User, you have won a gift!
April 25, 2021

Every day we select 10 lucky users at random to receive a gift from our sponsors. This is just our way to thank you for your continuous support.

Today you can choose a Macbook, a Samsung S21, or an iPhone 12.

To win all you need to do is to answer the following 3 questions.

Note: 10 randomly chosen users got this invitation and there are just a few prizes.

You just have 1 minutes and 36 seconds to answer the following questions before we give the prizes to another lucky user! Good luck!

Completing the quiz then gives me 3 options, the first being a macbook pro is blanked out, the last one didn't link, this link did work however; https://signup.mediahogs.net/en/html/sf/registration/s4.html#&sf=sweep&lng=en&m=sweepstakes&s=galaxy_s21_ultra_5g&ref=5266140&prod=1430&spid=wmug45ped0skg057ibejofe6&sub_id=-123&_sign=22a5a179d4db529c4cb942d7a5cf79df&_signt=1619309750&utm_expid= where

They are asking me to create an account. I am actually tempted to do so in order to get more phishing emails I can post here, as no doubt that email address will be back on active lists in no time. Please let me know if this is worth doing? Anyway meantime I did a startpage search for media hogs and the first result I got was Amounts of money withdrawn by MEDIAHOGS NET: why, how to stop the debits? https://aquoicorrespondleprelevement.com/en/sommes-dargent-prelevees-par-mediahogs-net-pourquoi-comment-stopper-les-debits/

This site starts by suggesting you log in and unsubscribe to whatever you subscribed to. Now I'm going to hazard a guess this is easier said than done. Their second suggestion is to contact SOS Internet registered in France. https://www.sos-internet.com/

I took a look around and they want to charge people to unsubscribe from various internet serviced. The spelling is suspicious and I'm wondering why anyone would. I could be wrong on this one, maybe it is legit, but I thought you guys will be better at figuring that one out than me.

The last point they make is as follows;

4/4 The banking / legal point: is it risky to renew your bank card?

What the law says ? : in March 2018, the court of cassation accepted the culpable negligence of a customer who had transmitted his data to a fraudulent site. Indeed, the General Conditions of Sale (GTC) clearly indicated that the trial offer was extended by a subscription if the Internet user was satisfied with the service and did not communicate to the company his desire to terminate the engagement. This court decision explains why a banker may refuse to block your card if you are the originator of the purchase.

If you are still in possession of your bank card, it is very unlikely that it is a card hack as explained above: blocking the card would therefore mean not honoring a contract for which you signed up. engaged. We therefore do not recommend blocking your credit card but carrying out the online procedures to cancel the current subscription.

Fraud point: of course, if your card has been stolen from you and you are therefore not at the origin of the purchase, contact your bank as soon as possible. In some cases, you will be able to open a fraud file to try toget a refund : this point is to be seen directly with your bank or your card issuer (Visa, Mastercard…).

I also found https://cancelguides.com/mediahogs/ which also looks a bit dodge, but again you guys will be able to decipher ore than me.

I know the original email was flagged as junk, but maybe this is still worth looking into?

I am willing to use this old email address as bait, it does have my name but I moved country and all my details so it is actually useless now. Please let me know if that would be useful. I have plenty more junk emails ranging from dating http://loveasier.space/uk_razn [Adult Dating <[email protected]>] to surveys Nespresso <[email protected]> http://2potatoes.xyz/cl/825_md/5/1833/201/330/273377 to bitcoin news Bitcoin News <[email protected]> http://chautemps.club/K0hjbkRrcjExazdTUFhNdlNOSk1DT0pmQ205MWZTaXlnK1NTUWtrdjVMWC9VemlTVnh6M1Z2NTIyNW05dE1yTTF3OTZuRkozSEFFcFROdTl1Y0Y3c2c9PQ__

Let me know if it is useful to post this, I will definitely post anything that makes it through the filters anyway, and feel free to contact me if you want me to actively go looking for trouble. I have a bit of technical knowledge and can take extra measures if needs be, but no expert and need guidance.

I’ve reported all of the active domains to Google Safe Browsing. I’m in the process of getting in touch with the domain registrars, but it will probably take a while because this isn’t just a simple phish.

>

@LionOfWISEIsles#189652 I took a look around and they want to charge people to unsubscribe from various internet serviced. The spelling is suspicious and I’m wondering why anyone would. I could be wrong on this one, maybe it is legit, but I thought you guys will be better at figuring that one out than me.

Yep, there's no way any site that makes you pay to unsubscribe is legit.

It seems like their scam is just a fancy way of making you pay to unsubscribe from their emails.

One more thing, here’s the domsoain registrars:

</s>sos-internet.com<e> => OVH

(https://www.sos-internet.com/)

</s>aquoicorrespondleprelevement.com<e> => OVH (they also use GTranslate)

(Amounts of money collected by MEDIAHOGS NET: why, how to stop the debits? - What does this levy correspond to?)

</s>includingfuture.com<e> => Name.com (they also use Cloudflare)

(https://includingfuture.com/?61f138c9dfb7d7628726fe869838c1ec)

</s>mediahogs.net<e> => Safenames

(https://www.mediahogs.net/)

The other websites (like https://36h.rh5r27ygve.top/t/fe312738ec36/80ff596a-a5d3-11eb-b61b-152ebdc80360?kw=1079&s1=196692076&s2=183_9) are ones that I have already reported.

All reports have been filed.

sent reports to NETCRAFT. They already blocked a bunch of the URLS. Flooding:[email protected]

The sites are still up.