Lead-Gen & Affiliate Fraud
21 postsLoan, credit, insurance, and health co-registration flows built to harvest PII at scale.
A Deposit That Was Never Coming: Inside a 56-Domain Lead-Gen Estate
An email from a bank you have never heard of says a deposit is pending. Behind it sit 56 domains, one hosting account, and a single affiliate offer.
One Mailbox, 178 Brand Costumes: Anatomy of a Consumer-Data Lead Broker
Between January and June 2026, a single email operator sent US consumers offers under 178 different sender names, 118 of them belonging to real companies.
Five Landers, One Template: An SMS PII-Harvest Operator
Between July 2025 and July 2026, one SMS lead-generation operator ran a paid-clinical-trial pretext across five landing pages built from a single template.
One Subdomain Per Message: A Warranty and Insurance Lead-Gen Network
Since January 2026, a single email operator has run warranty and insurance lead-gen lures from a fresh random subdomain on every message.
Borrowed Backends: Income-Scam Links on Shared API Gateway Trackers
Throughout spring 2026, a make-money-online email operator ran its click-tracking through AWS API Gateway endpoints owned by a legitimate email SaaS.
Renting Reputation: An Email-Fraud Ecosystem Built on ActiveCampaign
Since January 2026, more than a dozen independent operators have each rented a paid ActiveCampaign account to send authenticated fake-payout email fraud.
The Fake-Insurer Factory: Auto-Insurance Lead-Gen Smishing
Since early 2026, one operator has flooded US phones with auto-insurance rate-drop texts feeding fabricated-brand quote pages that harvest personal data.