Spam warning - HelloFax, Someone Sent You a Fax

This email has been received in the last couple of days:

From: HelloFax <[email protected]>

Sent: Monday, July 9, 2018 3:22 PM

To: Recipient

Subject: HelloFax, Someone Sent You a Fax

The best way to sign and send faxes on-line

Dear Customer,

Here is Your HelloFax

Date and Time: 07/09/2018 08:10 AM
Number of pages: 9

Reference number: TGD656358K.

Thank you for going paperless!
- HelloFax Team

We think your workplace can be paperless!
HelloFax Send Documents Online
HelloSign Sign Documents Online
HelloSign for Gmail Sign with Gmail

504 Howard Street, Suite 350
San Diego , CA

The 'Get Your Fax' link points to http://wegetthelintout.ca?7v7Rh=QAUSY7h9d78h978hBsGSJTHS which no longer seems to respond, so the owners must have disabled it until the fraudulent pages have been removed.

Please report this message as spam anyway to get the source address blacklisted.

Patrick Klos

I'm getting these too. I think they're an "email verification" technique? I've seen a bunch of these over the past few months. The hostname in the URLs are different (probably hacked sites), but the parameter(s) after the '?' are usually the same (after the '=' sign). I wonder if the email address is somehow encoded in the parameter? Is your email address long? (like maybe around the same number of characters as 'QAUSY1CQVUFS1QXOBsGSJTHS'?) All the URLs show the same "404 Not Found nginx/1.12.1" error (which could be a complete fake) leaving you to think nothing happened, but in reality, you just verified your email address to them (again)?!?

29 October 2018 - Reply