![]() As business travel resumes around the world, organizations should provide this information to employees as an added precaution, before these Bulgarian cybercriminals can take advantage. While this scam mostly targets consumers, organizations that pay for or reimburse employees for TSA PreCheck and related services should be wary of these emails reaching employee inboxes. The site contains links to contact TSA Support for assistance with PreCheck, and Customs & Border Protection (CBP) Support for Global Entry, NEXUS, SENTRI, and FAST programs. The TSA website provides advice on what to do if you believe you have been victimized by this scam.įor information on actual costs and details of all United States Trusted Traveler Programs, the official DHS website provides links to apply directly. During their initial application, they “cannot pay the enrollment or application fee online,” and must complete their application and “pay in-person” to finish the application process. Note that “First time applicants for the TSA PreCheck program are not asked to provide payment information online,” according to the TSA website. ![]() Travelers can always apply for TSA PreCheck via the official website tsa.gov/precheck or the DHS website. This is not the first time this scam has appeared, and it's not likely to be the last. Between the email address and the IP address, 30 domains were identified in total.ĭomains we’ve linked to this group include the following: Performing a reverse IP address lookup for 69.16.204.17, associated with one of our original domains, links 153 travel program domains and subdomains. These specific families will receive these monthly payments directly from the Internal Revenue Service (IRS), whether that be through direct. As part of the American Rescue Plan Act, certain families will be receiving monthly payments beginning today, July 15, through December 2021. The listing also provided the WhatsApp phone number (19) 99280-8240 as the contact for the business, as well as an address located in a Sao Paulo high-rise condominium. Spot and Avoid Scams Related to American Rescue Plan Payments. In November 2017, the small travel business Immi Solutions was registered in Brazil by Renato Teodoro Gabeta using the same email address. Interestingly, the first domains registered using used the top-level domain “.com.br”. The websites themselves were registered between August 2020 and October 2021 and feature a very similar structure, targeting Global Entry, NEXUS, SENTRI, and FAST travel program applicants. The email address was located in WHOIS information and passive DNS records for nine domains.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |