Scam Detective

Scam Campaign

Scam Reports for nerium.com

Identified on 6/27/2026

How This Campaign Connects

Domain: ses.recipesdirect.com — Suspicious, 0 complaintsses.recipes…Domain: sp2.wordthirst.com — Suspicious, 0 complaintssp2.wordthi…Domain: ses1.recipesdirect.com — Suspicious, 0 complaintsses1.recipe…Domain: sp1.wordthirst.com — Suspicious, 0 complaintssp1.wordthi…Domain: nerium.com — Suspicious, 0 complaintsDomainnerium.comHigh RiskSuspiciousConsumer ComplaintsLow Activity
The primary entity at the center and the rest of the cluster around it. Showing the 4 highest-risk connections; 7 more in this cluster.

Primary Entity

domain

nerium.com
Suspicious
  • No SSL certificate
  • 3 community reports from users

Campaign Narrative

This cluster centers on 7 connected domains identified through shared infrastructure and registration patterns. The domains include nerium.com, monthlyyouth.com, sp2.wordthirst.com, sp1.wordthirst.com, sp.wordthirst.com, ses.recipesdirect.com, ses1.recipesdirect.com.

The connected infrastructure includes 5 email addresses (words@sp1.wordthirst.com, cooking@ses.recipesdirect.com, cooking@ses1.recipesdirect.com).

This campaign was identified through automated analysis of threat intelligence feeds, email threat intelligence and entity relationship mapping.

Entity Roster

Domains (7)

Emails (5)

Data Sources

Scam Prevention Resources

By the Time Elder Fraud Looks Like Fraud, the Money Is Often Gone

A stranger calls an older woman, greets her as Grandma, and says her grandson is hurt and in police custody. The scariest part is how ordinary the next few minutes feel.

Seven 833-408 Numbers Are Tied to Fake Mortgage Servicer Mail and Calls

Consumers are reporting mailers and calls from numbers including (833) 408-1597 and (833) 408-1587 that impersonate mortgage servicers. Here is what the reports show.

Fake Chase Openers and Warm Transfers Feed a Three-Number Debt Fraud Operation

Callers impersonating Card Member Services are using intimidation tactics and transfer tricks to pressure consumers. Here is what the reports show.

Ignore Calls About an Unserved Summons Directing Contact to Janet Wilson

Callers posing as county process servers claim you have an unserved court summons and push you to contact a 'Janet Wilson' at toll-free numbers tied to a debt collection impersonation scheme.

833-382-5531 Is One of Eight Numbers on Fake Mortgage Postcards Hitting Homeowners

Postcards with real mortgage details and urgent language are being used to impersonate lenders including SmartFi. Here is what the reports show and how to protect yourself.

View all articles

Proton VPN — Block malicious sites and encrypt your connection

Proton VPN routes your traffic through encrypted servers and blocks known malware domains. Free plan available.

Get Proton VPNAffiliate link. We may earn a commission.
View all campaigns