Sweepstakes, Prize & Reward Scams

3 posts

Prize bait and welcome-bonus / reward credential phishing.

The Counter in the Fragment: Fingerprinting a Reward-Phishing Kit

Between March and May 2026, one operator ran Costco, Prime Video and UnitedHealthcare reward lures from 60 coined domains onto Amazon S3.

Published Jun 19, 2026Updated Jul 15, 2026

Sweepstakes, Prize & Reward Scams

mv388: Multi-Vertical Reward Phishing From a Single Google Cloud Bucket

Since December 2025, an operator we track as mv388 has run a single Google Cloud Storage bucket as the delivery point for rotating reward and benefits lures.

Published May 6, 2026Updated Jun 29, 2026

Sweepstakes, Prize & Reward Scams

Five Dashes and a Token: Inside a Multi-Brand Sweepstakes Email Kit

Since January 2026, one operator has run a multi-brand sweepstakes email kit that tags every message with a tracking token buried after five dashes.

Published Apr 25, 2026Updated Jul 20, 2026