**Scam Campaign Report: Multi-Domain Infrastructure Network Targeting Relief Checks and Appliance Services**
Our analysis has identified a connected network of three fraudulent domains operating on shared infrastructure through NAMECHEAP INC registrations. The domains www.myreliefcheck.com (registered 2025-08-09), appliancepickupnow.com (registered 2025-08-13), and theonerings.com (registered 2025-08-14) are linked through six same-infrastructure relationships with moderate confidence scores of 0.50, indicating coordinated campaign management by the same threat actors.
The primary scam operation involves fraudulent relief check notifications, with community reports documenting voicemails from an individual identifying himself as "Dan" claiming consumers have unclaimed relief checks worth $5,286 waiting for collection through www.myreliefcheck.com. Multiple victims reported receiving these robocalls with nearly identical messaging about funds "already issued in your name." Simultaneously, the network operates appliancepickupnow.com, which falsely claims nationwide presence including Sacramento, CA, and actively harvests personal information including addresses and phone numbers from unsuspecting consumers seeking appliance removal services.
Consumer reports indicate this campaign employs voice-based social engineering tactics combined with data harvesting websites to extract personal and financial information. The threat actors use specific dollar amounts ($5,286) and authoritative language about government-issued checks to create urgency and legitimacy. The appliance service front provides an additional vector for collecting victim contact information and physical addresses, potentially enabling identity theft or follow-up fraud attempts.
To protect yourself from these scams, never provide personal information to unsolicited callers or websites claiming you have unclaimed funds. Verify any relief program communications directly through official government websites like IRS.gov or your state's treasury department. If contacted by these scammers, hang up immediately, do not click any links in emails or texts, and report the incident to the FTC at reportfraud.ftc.gov or file a complaint with the FCC for unwanted calls. Before engaging with any unfamiliar website or phone number, check its legitimacy through consumer protection databases and search for scam reports online.
This campaign represents a moderate threat level given the coordinated infrastructure and active consumer targeting across multiple service categories. Consumers should exercise heightened caution when contacted about unclaimed government funds or unsolicited service offers. We recommend blocking the associated domains and reporting any contact attempts to federal authorities to support ongoing enforcement efforts against this fraudulent network.