The Omaha Steaks scam is a widespread phishing campaign that impersonates Omaha Steaks and claims the recipient has won a free meal kit or reward package. These emails are not sent by Omaha Steaks. They lead victims through deceptive survey pages and fake checkout portals designed to steal personal information and credit card details. Subjects, senders, and URLs vary between messages, but the overall structure of the scam remains consistent.
Overview of the Fake Omaha Steaks Reward Email
One example of the scam uses the subject line “You have won an Omaha Steaks Kit – Please Confirm.” The email displays the name “Omaha Steaks” but is actually sent from xjgournpvtx@brakus.mazdaisa.com, a domain unrelated to the company. The message claims the recipient has won an Omaha Steaks kit and urges them to confirm their reward by clicking the included image.
When clicked, the image redirects to an IP-hosted phishing page at:
http://ip130.ip-5-135-245.eu/mqnsdvqshdpqiosugoiuhsdrfs.html
IP redirects are common in phishing operations because they are cheap, disposable, and harder for filters to block. These redirects typically load a fraudulent survey claiming the visitor must answer a few questions before receiving their reward.
Fake Omaha Steaks Survey Page
After clicking the initial link, victims are sent to a fake survey hosted on:
https://fightingckmelic.makeup/
This site imitates promotional language and claims the visitor can claim a premium Omaha Steaks kit after completing a short questionnaire. These questions have no real purpose. They exist only to keep users engaged long enough to push them into the final phishing stage.
The survey page displays fabricated timers, fake availability counters, and promotional banners to create urgency, making it seem like the reward is limited or time sensitive.
Fraudulent Checkout Page
After completing the survey, victims are pushed to a fake checkout-style page that requests detailed personal and payment information. This page may appear to offer a “small shipping fee” or “verification charge,” usually around a few dollars, but its only purpose is to harvest data.
Information commonly requested includes:
- Full name
- Email address
- Home address
- Phone number
- Payment card number
- Expiration date and CVV
Submitting the form does not ship anything. Instead, scammers collect the data for unauthorized purchases, identity theft, or resale on criminal marketplaces.
Domains Used in This Scam
The Omaha Steaks scam uses multiple domains that change frequently. Common components include:
- ip130.ip-5-135-245.eu for redirect landing pages
- fightingckmelic.makeup for the fake survey portal
These domains typically appear newly registered, use privacy shielding, and provide minimal identifying information. Their short lifespan makes them difficult to track and ideal for repeated phishing campaigns. When investigating suspicious domains, users can perform a WHOIS Lookup to review registration details.
Red Flags in the Omaha Steaks Scam
- Unsolicited prize notifications. The recipient did not enter any Omaha Steaks contest.
- Sender addresses unrelated to Omaha Steaks. Legitimate messages come from official company domains.
- IP-based redirects. Official companies do not distribute promotions through raw IP links.
- Fake surveys with urgency tactics. Countdowns and scarcity warnings are used to pressure victims.
- Requests for personal and payment information. No real promotion requires full credit card details to claim a prize.
- Newly registered domains. Scam operators rotate domains to avoid detection.
Why This Scam Works
Gift boxes and sampler kits from Omaha Steaks are widely searched and frequently promoted, especially during holiday seasons. Scammers exploit that popularity and familiarity to make their messages appear more believable. The branding, rewards imagery, and urgency give recipients the impression of legitimacy, increasing the likelihood that they will click through and complete the fraudulent steps.
Similar reward scams have targeted many other recognizable brands. For example, scammers have also circulated fake giveaways impersonating Starbucks. See our report on the Starbucks Yeti Rambler scam for another example of this recurring tactic.
How to Protect Yourself
- Do not click links in unsolicited promotional emails.
- Verify offers directly on the official Omaha Steaks website.
- Check sender addresses carefully.
- Avoid entering payment details for supposed free rewards.
- Run a security scan using trusted software such as Malwarebytes if you clicked any suspicious links.
What to Do If You Submitted Information
- Contact your bank and report the fraudulent activity.
- Cancel your compromised card and request a replacement.
- Monitor your accounts for unauthorized transactions.
- Change passwords associated with affected accounts.
- Remain alert for follow-up phishing attempts.
How to Report the Scam
Victims can report the Omaha Steaks scam to:
- FTC Report Fraud
- IC3 Internet Crime Complaint Center
- Your local consumer protection agency
- Your email provider’s phishing reporting tools
For additional scam alerts, visit the Botcrawl scams category.
