Skip to content

CPA Tracker used in spam #1170

Description

@emperornemesis

Request

efianalytics.com

Location

https://intercodingwork.com/17612535ac86d8e6800/2_2010315_201825/278_1002173_673929_19/412422645_svoqvq

Tracker Company

Unknown

Company Website

efianalytics.com

Privacy Policy

No response

Describe the company

Not much information exists on this company. The website is ancient, but have been noticed in several spam emails and is used to track spam emails for CPA (cost per action) spam campaigns.

Category

Email

Request Type

speculative

Additional Information

Delivered-To: neelsmostert@gmail.com
Received: by 2002:a05:6f02:c710:b0:121:c237:bdc2 with SMTP id t16csp1000229rcf; Fri, 22 May 2026 01:10:55 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AFNElJ9W3QlbDF/CE8Y65v/8VqU5CDQAkxHLPenCUaiJVFeCU3X0DyJBzpu8iikXXCIFRaEfh8CYU8fbMbZJ3Pw=@gmail.com
X-Received: by 2002:ac8:5f8b:0:b0:510:4174:507d with SMTP id d75a77b69052e-516d58bd73fmr27157521cf.29.1779437455626; Fri, 22 May 2026 01:10:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779437455; cv=none; d=google.com; s=arc-20240605; b=RQbN6YceOX7psbiSTVKyG29hP9eeWm4lwEyiA8MD2hO+e8KoKowDY4lJ9bjiM+DLYn lBHhAKLUq8rz/9+/hWhdTGjqqGdb74omaBa4t5TL8AwEHtIMX9enADHUvw2L3XJ05YRD DBObagezGDbJ20Y5PQ7W1mFf3NX3tfJb2obGcPWGCKhXkMR+Wupp+aIOWNozukhLOM2q 995+YJeT7dEZDhFkXeN6AvQAgugU4Wgy8fLpDcMVCGFUS9aJazNLv+dy5b2J/dsSQiHp 9Ob8K9rJ3rumtQbLeRF+I1gwC3dunvAZ9ZAYeVs048s0V6KarG54NB+nhkwT6P+/61iF zRnA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:envelope-to:sender:date:subject:from:feedback-id:dkim-signature :message-id; bh=+wiDYqVIBjpfIcqCITaHZUt80q1YNkbTH+t6PqfpBAE=; fh=GMSS3jjCGonHKdIEfnKvsCy6Z0N1IFfgELPgutHS5/4=; b=j2FbzXDaCgkiZeElEhVkto5kC/bSFQa586vxnqegCSiRJym6YH+1d3ZuYpW7Ss/I9P riBZWF1gm3UiDJS+7nKj7d2EJHnBJsjqz6wpzvWcLhkz2eARZvzktUdmpz+txEl1h9Qe YwVkrkgODUAj2np4MU0Ohby4Z3m/eBhuQoTzhu3v8fq64ZCTDjjqysti/pq+Qlvl5moc NmRnzGcaL2Er6W0cxHgyjPTz57joaRcGI6+3cJmPs+sZ1k6Jn/1hO2D+UbtrmWZpG3p5 ey/dgxqszTrOI1EIaSzJp5RTILY2XPd8BxqyFXuPmY5EcDoz3bPDiVdpAxrBCOEMBHMs X6Tg==; dara=google.com
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@fightingfit.uk.com header.s=s1 header.b=tO3tC57N; spf=pass (google.com: domain of info@cgc.uk.com designates 104.128.58.226 as permitted sender) smtp.mailfrom=info@cgc.uk.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=cgc.uk.com
Return-Path: info@cgc.uk.com
Received: from csinvesting.org (manyfaced.huoneistopiste.com. [104.128.58.226]) by mx.google.com with ESMTPS id d75a77b69052e-516d8b007b1si8370621cf.20.2026.05.22.01.10.55 for neelsmostert@gmail.com (version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128); Fri, 22 May 2026 01:10:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@cgc.uk.com designates 104.128.58.226 as permitted sender) client-ip=104.128.58.226;
Authentication-Results: mx.google.com; dkim=pass header.i=@fightingfit.uk.com header.s=s1 header.b=tO3tC57N; spf=pass (google.com: domain of info@cgc.uk.com designates 104.128.58.226 as permitted sender) smtp.mailfrom=info@cgc.uk.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=cgc.uk.com
Message-ID: 6a100f8f.10b45caf.2d2dae.9ed5SMTPIN_ADDED_MISSING@mx.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=fightingfit.uk.com; h=From:Subject:Date:Sender:To:Content-Type; i=info@fightingfit.uk.com; bh=+wiDYqVIBjpfIcqCITaHZUt80q1YNkbTH+t6PqfpBAE=; b=tO3tC57NfWf2f61WmWy1qzfQZ4a+NYWsfPnqzqzikoCB6xstoGXA/gwivOCNJ4oybDpf1M+N8aBp IX1MalKCxaiE2bT04CPn107UxiGgOAjTFjhy+Q2i59P5OzVoC4O2F9MVSenRKzCOgyxK+NuoGPBs 51PfB2HvuOPr0tj/jA/LjuvHZUwjZ0n28f3oP0Qf0nH7JvpMCsUkg2W72+rfbJl9Wa8uvTrhFY5c UB1zGQFDOgMFxtGCe4PL6YxN2Uk5aoZokVxf+gkQsF23RBAPIBrp/Qe5xToj4X89uZ9y90Lc9GnB EUcOb0w+mXODBNHaOei3M1VxFqN+JD2CFPPWyg==
Feedback-ID: 1.us-east-1.psHyoMfnH8hkuQnF72JGzzQK1By9IkayShm7uIk1GIc=:AmazonSES
From: "#CashApp*"
info@cgc.uk.com
Subject: Congratulation Neelsmostert, 𝖸𝗈𝗎 𝗋𝖾𝖼𝖾𝗂𝗏𝖾𝖽 𝖺 𝗉𝖺𝗒𝗆𝖾𝗇𝗍 𝗈𝖿 $1000,𝟢𝟢 𝖴𝖲𝖣 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗮𝗰𝗰𝗼𝘂𝗻𝘁 ID : #𝖴s-39014👇️👇️
Date: Fri, 22 May 2026 08:10:55 +0000 (UTC)
Sender: info@fightingfit.uk.com
Envelope-To: support-931593017@googlemail.com
To: support_6724476@googlemail.com
X-PVIQ: mkto-RdMCgBVWW-NB6yqY-hZCeCx-FdLezk
Received: from efianalytics.com (efianalytics.com. 216.244.76.116)
X-EMMAIL: dt8q2n55ulgq@7prjbr4tgguu67.us
X-MarketoID: vKD-Gha-ownhcpal:0:jJKk4V:9:oB3EVd:besLKX8VE
Content-Type: text/html; charset=utf-8

<title>CashApp</title>

<a href="https://storage.googleapis.com/qf5l3ti2bi5667de/l9y0rtgladpn3bdq/a58bd29.html#eD236SU1fd.jspf?cbcg0klJcckjC8cc1DrcdchxcycgNqmtt2VcbbbbP"style=" font-family: 'Google Sans',Roboto,RobotoDraft,Helvetica,Arial,sans-seri; font-size: 15px; color: #181717; text-decoration:none;">






















Cash App






Hi
You are OUR LUCKY WINNER




Your $1000.00 Cash App PrePaid Card !


















<style>9yjf8g7o9ty7n5ym5x5xqm5hurb8mop8</style>
Date
:

22/05/2026
<style>9yjf8g7o9ty7n5ym5x5xqm5hurb8mop8</style> Balance: $1000.00 USD
Status :

Pending Confirmation



Congratulations You qualified !

?? FINAL MESSAGE ??
Your BONUS is ready to be addressed in your Name



Unsubscribe here

 <center> <p style="text-align:center;font-family: 'Open Sans','Arial','Helvetica',sans-serif;font-size:13px;"><br><br> 

The advertiser does not manage your subscription.

If you prefer not to receive further communication please unsubscribe here

Or write to: 6101 Long Prairie Rd,Ste 744 #511 Flower Mound TX 75028


Dear vmqwlgicisgihkzouqlqi ZUOIVJGCZCEPIVJDUUHLWS, Welcome to the Enterprise Plus? membership experience.

Your Enterprise Plus member number and user name is TYQMFHUVSUIHZQDQVUAQFWFXSXVT.

Your membership delivers faster reservations and rentals, a special members-only line at major airport locations and exclusive discounts.

In addition, you'll be able to start earning points you can redeem for Free Rental Days after you activate your rewards. Please allow 24 hours for system updates before activating.

To get the most from your next rental, simply go to http:// and log in with your member number.

Thank you for choosing Enterprise. We look forward to making your next rental experience more rewarding.

</title>

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions