Scam Detective
Domain

emailinfo.geeksquad.com

First seen Feb 22, 2026

Suspicious
  • No SSL certificate
  • 6 community reports from users

Campaign Intelligence

This cluster centers on 1 connected domains identified through shared infrastructure and registration patterns. Do not click links to any of the flagged domains. If you have visited one, check your accounts for unauthorized activity and consider changing your passwords. You can report suspicious contacts to the FTC at reportfraud.ftc.gov or to the FCC at consumercomplaints.fcc.gov. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapp...

This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...

This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...

Details

Registrar
MarkMonitor, Inc.
Registration Date
8/19/1995
First Seen
2/22/2026

Related Domains

Community Reports

Rules that work (for me) to keep phishing email out of the inbox I was getting lots of phishing email to my inbox that bypassed my Spam filter. It was driving me crazy. And it got even worse after I reported one to [spam.org](https://spam.org). They started doubling down (2-3x) on that email address (thankfully not my main one), from 50 to about 120+ every day. Phishers (e.g., [printdus.com](https://printdus.com)) send from 'spoofed' (well-formed) fake email addresses. Even though the subject lines were clearly SPAM (misspellings, letters replaced by numbers, lots of icons, odd spacing, etc.), these landed in my inbox. I've been to all the videos from the pundits saying don't bother with 'block sender'--because they will just change it (mostly True) and rules won't work (that says Maybe). Large email providers (gmail, outlook, etc.) check to see if sender domains are real as part of a Spam check. For example, ["geeksquad@emailinfo.geeksquad.com](mailto:"geeksquad@emailinfo.geeksquad.com)" fails because "[emailinfo.geeksquad.com](https://emailinfo.geeksquad.com)" is a fake domain name. The goal is to get you to click the link, not reply, so they don't use real email addresses that can lead back to them. It looks good to the user (even though it's an ad for toe fungus), but the authorization checks say it's *possibly* Spam. Why they get past Spam filters is that it might only "soft" fail. Soft fails are when a DNS (domain name server) times out or the Domain Keys Identified Mail (dkim) or Sender Policy Framework (spf) isn't provided. If any of them outright fail, it ends up in Junk folder, but soft fails (in my experience) sometimes get by. The rule I use checks for the following "words" in every received **email header**: "DNS Timeout", "dkim=none" or "spf=none" and send them to my Junk folder. So far, that's fixed it. And if you want to stop wading through your Junk folder for non-phishing emails, create a second rule to *permanently delete* emails by adding t

1022 days ago8 upvotes

Rules that work (for me) to keep phishing email out of the inbox I was getting lots of phishing email to my inbox that bypassed my Spam filter. It was driving me crazy. And it got even worse after I reported one to [spam.org](https://spam.org). They started doubling down (2-3x) on that email address (thankfully not my main one), from 50 to about 120+ every day. Phishers (e.g., [printdus.com](https://printdus.com)) send from 'spoofed' (well-formed) fake email addresses. Even though the subject lines were clearly SPAM (misspellings, letters replaced by numbers, lots of icons, odd spacing, etc.), these landed in my inbox. I've been to all the videos from the pundits saying don't bother with 'block sender'--because they will just change it (mostly True) and rules won't work (that says Maybe). Large email providers (gmail, outlook, etc.) check to see if sender domains are real as part of a Spam check. For example, ["geeksquad@emailinfo.geeksquad.com](mailto:"geeksquad@emailinfo.geeksquad.com)" fails because "[emailinfo.geeksquad.com](https://emailinfo.geeksquad.com)" is a fake domain name. The goal is to get you to click the link, not reply, so they don't use real email addresses that can lead back to them. It looks good to the user (even though it's an ad for toe fungus), but the authorization checks say it's *possibly* Spam. Why they get past Spam filters is that it might only "soft" fail. Soft fails are when a DNS (domain name server) times out or the Domain Keys Identified Mail (dkim) or Sender Policy Framework (spf) isn't provided. If any of them outright fail, it ends up in Junk folder, but soft fails (in my experience) sometimes get by. The rule I use checks for the following "words" in every received **email header**: "DNS Timeout", "dkim=none" or "spf=none" and send them to my Junk folder. So far, that's fixed it. And if you want to stop wading through your Junk folder for non-phishing emails, create a second rule to *permanently delete* emails by adding t

1022 days ago8 upvotes

Email messages received from geeksquad@emailinfo.geeksquad.com (geeksquad) I receive emails from [geeksquad@emailinfo.geeksquad.com](mailto:geeksquad@emailinfo.geeksquad.com). I have Outlook as my email providor. It used to be that you could see the email of the person sending them by hovering over the from tab over the message body. Now when receiving emails from Geeksquad that is no longer possible. You now have to right click on the email and view the message source. It takes a little bit of scrolling but you will find the geeksquad email as the sender. Since their email is no longer viewable when hovering I'm asuming that that is part of the reason why adding their email to blocked contacts will no longer block them. adding key wods to filter them out will not work either as they change their headers all the time. Like other users say, a lot of the time the message body is one big picture, so email filters cannot catch that as well. It gets so insidious, that they even put your own email upto the @ part in the From part.

1161 days ago3 upvotes

Email messages received from geeksquad@emailinfo.geeksquad.com (geeksquad) I receive emails from [geeksquad@emailinfo.geeksquad.com](mailto:geeksquad@emailinfo.geeksquad.com). I have Outlook as my email providor. It used to be that you could see the email of the person sending them by hovering over the from tab over the message body. Now when receiving emails from Geeksquad that is no longer possible. You now have to right click on the email and view the message source. It takes a little bit of scrolling but you will find the geeksquad email as the sender. Since their email is no longer viewable when hovering I'm asuming that that is part of the reason why adding their email to blocked contacts will no longer block them. adding key wods to filter them out will not work either as they change their headers all the time. Like other users say, a lot of the time the message body is one big picture, so email filters cannot catch that as well. It gets so insidious, that they even put your own email upto the @ part in the From part.

1161 days ago3 upvotes

Phishing Alert DO NOT OPEN ANY EMAIL from this address. This is a phishing attack. <[geeksquad@emailinfo.geeksquad](mailto:geeksquad@emailinfo.geeksquad.com)dotcom

1653 days ago

Phishing Alert DO NOT OPEN ANY EMAIL from this address. This is a phishing attack. <[geeksquad@emailinfo.geeksquad](mailto:geeksquad@emailinfo.geeksquad.com)dotcom

1653 days ago

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.

NordProtect Identity theft monitoring and recovery

NordProtect watches for your personal info on the dark web, monitors your credit, and covers up to $1M in identity theft insurance.