My e-mail box has plenty of Coronavirus/ COVID-19 frauds and rip-offs. I have actually Corona malware disguised as item brochures. I have fake World Health Organization e-mails asking me to contribute my Bitcoin to them. I have more than 30 fake breathing mask selling sites that my friends at ScamSurvivors and AA419 are assisting to track. But you understand what makes me REALLY MAD?
The monsters who are utilizing the same phony news sites to drive their affiliate-marketing program scams to offer Immunity Oil to people who are desperate to protect their households and loved ones. As a member of the CAUCE Board (the Union Versus Unsolicited Commercial Email) I immediately reached out to Neil Schwartzman, my personal spam battling hero and the founder of CAUCE. Even though we both understand these are the same snake oil charlatans who have actually remained in the spam business for a years, perhaps now that they are putting individuals’s lives in real danger somebody will lastly do something to shut these fraudsters and spammers down. (Note, I’m not promoting CAUCE here, I’m just pointing out that I’m happy to combat spammers with them.)
The very first claim we’ll deal with, of course, is that “we do not claim that our item battles the Corona Infection.”
My first refutation would be the e-mail topics being used to spam their products. The first email I got yesterday was this one, with the subject “Security From Corona Virus With Immunity Oil”
Delivery-date: Sat, 21 Mar 2020 17: 06: 42 -0500
Received: from [18.104.22.168] (port=-LRB- helo=urrmwipzqlpakl.xyz)
From: Miracle Infection Oil
Subject: Protection From Corona Virus With Resistance Oil
Here’s the screenshot of the email message I received this afternoon.
Please note the e-mail subject:
” Fight back against the coronavirus outbreak! Pure Herval Total Defense Resistance Blend”
Checking out numerous spammed URLs will lead to 404 pages, since they need to be visited through the correct chain of referring URLs, which is one protective procedure that Spamfighter Schwartzman and I are well familiar with.
The latter email consists of the URL:
which in turn forwards to
The “CID” “AFID” and “SID” are the Campaign ID, and the Affiliate ID. Affiliate 428186 is the one who will earn money for this sale, if I were silly sufficient to purchase it. The Campaign ID is necessary, due to the fact that the business is marketing the product with many different labels and “feel and look” packaging. Some of the Immunity Blend claims to be a “CBD Oil” that secures you from Corona Infection due to the fact that CBD has anti-inflammatory residential or commercial properties … like this ad, which claims it is a “Corona Mommy Advertorial.”
No matter which of the fake Immunity Blend appeals you begin with, you’ll end up (presently anyway) on the website Apusserum.com … among my click-throughs had this targeting label set:
Notice the little pop-ups in the bottom left … messages popping up non-stop about all
of the other customers purchasing this things non-stop!
Clicking through from a different affiliate, I end on a different looking sales page, but plainly the very same item being sold in a various bottle.
The claims made on the “orange cap” variation are shown here, however brief version. You can clean your counters, cleanse the air, and “enhance your immunity” by utilizing it as a skin cream. The Essential Oil Mommies will love this things, it has Cinnamon Leaf, Lemon, Clove Bud, Lime, Eucalyptus Globulus, Rosemary, Peppermint, Spearmint, and Oregano. None of which, last I inspected, are an alcohol based disinfectant, or an anti-viral.
Naturally they are thoroughly stating ABSOLUTELY NOTHING about it treating viruses of any sort on the real item page. We’ll simply put a huge coronavirus image on the page as a pretty medical picture without making any claim about that.
Phony Fox News?
No matter which entry point you check out to get started, a link in among the numerous spam messages, or a link from social networks (we’ve found sellers on both Facebook and twitter, and reported them for removal.) The very first site you visit will be a pseudo-news site that APPEARS to be in some way associated to Fox News, without EXACTLY saying that … while it isn’t saying you are on Fox News, it is offering the byline for this story to “Janine Puhak