View difference between Paste ID: <a href="/xMEwz0B7">xMEwz0B7</a> and <a href="/YLwNH4by">YLwNH4by</a>

Reporting a scam attempt involving randomly generated email usernames and Gmail dot-variant abuse, likely to rotate identities and evade blocking.
1	-	Reporting a scam attempt involving randomly generated email usernames and Gmail dot-variant abuse, likely to rotate identities and evade blocking.
1	+	This report documents a coordinated fraud attempt involving randomly generated email usernames and dot-variant abuse across temporary and disposable email services, Gmail, iCloud, and Yahoo domains, used to evade blocking and identity correlation.
2		At least one transaction was successfully completed and confirmed as fraudulent, involving the use of compromised credit card details on a digital platform.
3	-	Emails observed:
3	+
4		Observed email addresses:
5
6		[email protected]
7		[email protected]
8		[email protected]
9		[email protected]
10		[email protected]
11		[email protected]
12		[email protected]
13		[email protected]
14		[email protected]
15		[email protected]
16		[email protected]
17		[email protected]
18		[email protected]
19		[email protected]
20		[email protected]
21		[email protected]
22		[email protected]
23		[email protected]
24		[email protected]
25		[email protected]
26		[email protected]
27		[email protected]
28		[email protected]
29		[email protected]
30		[email protected]
31		[email protected]
32		[email protected]
33		[email protected]
34		[email protected]
35		[email protected]
36		[email protected]
37		[email protected]
38	-	Common traits:
38	+	[email protected]
39		[email protected]
40	-	Random / nonsensical usernames
40	+	[email protected]
41		[email protected]
42	-	Same base names with dots added or removed
42	+	[email protected]
43		[email protected]
44	-	No consistent identity or legitimate business context
44	+	[email protected]
45		[email protected]
46	-	Attempted use of compromised credit card details
46	+	[email protected]
47
48	-	Posting for visibility so others can block and avoid engagement.
48	+	IPs:
49		146.75.146.1
50		146.75.146.187
51
52		Social accounts:
53		https://www.facebook.com/profile.php?id=100090889714149
54
55		Common indicators:
56		- Dot-variant abuse of the same base usernames
57		- Random or nonsensical local parts
58		- Mismatched names between email, account profile, and payment instrument
59		- No legitimate customer or business context
60		- Pattern consistent with automated card-testing and fraud attempts
61
62		Access was revoked on the merchant side and the payment processor has been notified.