The Harbor Freight Badland Jack Email Scam is a phishing campaign that impersonates Harbor Freight and claims recipients have won a BADLAND 3 Ton Off-Road Jack. The scam uses fraudulent emails, fake survey pages, and deceptive checkout forms to harvest personal information and payment card details. None of the emails, domains, or reward pages involved in this operation are associated with Harbor Freight or the Badland tool brand.
These emails often appear with enticing subjects such as “You have won a Badland Car Jack.” Although variations exist, they typically contain a large promotional image that redirects users to a chain of phishing pages. The example examined here shows the email coming from LFRKtqNLJe@mante.biffalojp.com, a domain unrelated to Harbor Freight, but scammers frequently rotate sender names, domains, subject lines, and URLs to avoid detection.
The Scam Email
The email impersonates Harbor Freight and presents a simple reward message designed to encourage immediate interaction. The body commonly claims the recipient has won a BADLAND jack and must click a promotional image to claim the prize. Clicking the image leads to an IP-based redirect:
http://66-206-8-243.static.hvvc.us/sdfqsdfqdfgssdfh.html
IP-based redirects are frequently used in phishing operations because they are inexpensive, disposable, and bypass many domain reputation filters. Once loaded, the redirect sends victims to a fraudulent survey page that mimics Harbor Freight branding.
The Fake Harbor Freight Survey Page
The redirect leads to a counterfeit survey hosted on thegraymotors.sbs. The page imitates Harbor Freight’s visual design, displays a fabricated timestamp, and uses countdown timers to create urgency. Visitors are told they must answer a few quick questions to receive their BADLAND 3 Ton Off-Road Jack.
The survey has no legitimate function. The questions do not determine eligibility and exist only to advance victims to the next stage of the scam. This step is a standard tactic used in many reward-themed phishing campaigns.
The Fake Checkout Page
After completing the survey, victims are sent to a fraudulent checkout form hosted on electronquickline.store. The website displays a product photo, a fabricated description, false security badges, and a manufactured scarcity warning such as “5 in stock.” It instructs visitors to pay $9.95 in shipping to receive their reward.
The checkout form requests extensive personal and financial information, including:
- Name
- Email address
- Phone number
- Home address
- City and state
- Zip code
- Credit or debit card details
No product is shipped. Any information entered on this page is collected by scammers and may be used for unauthorized charges, identity theft, or resale on criminal marketplaces.
Domains Used in This Scam
The campaign uses multiple domains to separate each stage of the scam and evade takedowns. Examples include:
- thegraymotors.sbs for the fake Harbor Freight survey
- electronquickline.store for the fraudulent checkout page
- 66-206-8-243.static.hvvc.us for the initial redirect
A quick WHOIS Lookup shows that electronquickline.store was registered on July 9, 2025, uses privacy shielding, and is hosted on Cloudflare nameservers. Newly registered domains with masked ownership and short registration periods are common indicators of temporary phishing infrastructure.
Red Flags in the Harbor Freight Badland Jack Email Scam
- Sender domain mismatch. The email is not sent from an official @harborfreight.com address.
- Unsolicited prize claim. Recipients are told they won an item without entering any promotion.
- IP-based redirects. Clicking the image directs users to an IP address rather than a legitimate domain.
- Fake survey step. The survey on thegraymotors.sbs serves only to push victims forward.
- Fraudulent checkout form. Electronquickline.store requests sensitive financial information.
- Newly registered domains. Domains were created recently and use privacy masking.
- No real Harbor Freight promotion exists. Harbor Freight does not give away BADLAND jacks through email surveys or shipping-fee promotions.
Why the Offer Is Fake
The offer is fraudulent for several clear reasons. Harbor Freight does not notify customers of giveaways through unsolicited emails, and the company does not request shipping payments for promotional rewards. The domains used in this attack are unconnected to Harbor Freight, and each page in the funnel relies on deceptive design elements, urgency tactics, and requests for unnecessary personal and financial information. These characteristics align with known reward-themed phishing operations.
How to Protect Yourself
To avoid falling victim to the Harbor Freight Badland Jack Email Scam, follow these guidelines:
- Avoid clicking links or images in unsolicited reward emails.
- Check the sender’s domain. Only trust emails from @harborfreight.com.
- Verify promotions directly on the official Harbor Freight website.
- Do not provide personal or financial information to unfamiliar websites.
- Scan your device with a trusted security tool like Malwarebytes if you interacted with suspicious pages.
What to Do If You Submitted Information
If you entered personal or payment information on the fraudulent site, take the following steps:
- Contact your bank or card issuer to report unauthorized activity.
- Request a new card and monitor all transactions.
- Change any passwords that may be associated with the compromised email account.
- Run a full system scan to remove potential malware.
- Stay alert for additional phishing attempts, which are common after exposure.
How to Report the Scam
Reporting phishing campaigns helps prevent further victimization. You can report this scam to:
- FTC Report Fraud
- IC3 Internet Crime Complaint Center
- Your local or national consumer protection agency
- Your email provider by marking the message as phishing
For more scam alerts, visit the Botcrawl scams category.
