This cluster centers on 7 connected domains identified through shared infrastructure and registration patterns. The domains include nerium.com, monthlyyouth.com, sp2.wordthirst.com, sp1.wordthirst.com, sp.wordthirst.com, ses.recipesdirect.com, ses1.recipesdirect.com. The connected infrastructure includes 5 email addresses (words@sp1.wordthirst.com, cooking@ses.recipesdirect.com, cooking@ses1.recipesdirect.com). This campaign was identified through automated analysis of threat intelligence feed...
Part of: Scam Reports for nerium.com6/27/2026