Scam Campaigns

**Scam Campaign Report: Trustmark Corporation Impersonation Scheme** This scam campaign involves fraudsters impersonating Trustmark Corporation, a legitimate mortgage industry company, using the phon...

4/30/2026

This scam campaign involves a coordinated operation using two phone numbers and a financial services company to target consumers with fraudulent calls and investment schemes. The primary phone number ...

4/30/2026

This phone number cluster involves 4 numbers linked to suspicious activity complaints. The numbers are 888-991-5588, 216-209-6837, 888-685-0640, 689-302-4177. Together, these numbers have accumulated ...

4/29/2026

This cluster involves 4 email addresses. The addresses include deals.john@deals.shop, support@hilmail.co, johns@socialsites.email, work.john@workin.email. 0 of them use disposable email providers. The...

4/29/2026

This phone number cluster involves 9 numbers linked to Other complaints primarily targeting consumers in Valencia, California. The numbers are 866-450-5849, 844-746-8908, 844-935-8071, 855-515-5857, 8...

4/29/2026

This phone number cluster involves 15 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Scottsdale, Arizona, Hampton, New Hampshi...

4/29/2026

**Impersonation Scam Campaign Targets Multiple States Through Connected Phone Network** A coordinated scam campaign operating through three connected phone numbers has been identified, with the prima...

4/29/2026

**Bank of America Impersonation Scam Campaign Analysis** This cybersecurity analysis reveals a sophisticated scam campaign targeting businesses through fraudulent invoicing while impersonating Bank o...

4/29/2026

This phone number cluster involves 2 numbers linked to suspicious activity complaints. The numbers are 213-562-4454, 219-805-4594. Together, these numbers have accumulated 0 consumer complaints across...

4/28/2026

This cluster involves 378 email addresses. The addresses include janiceholloway89@whalebank.org, christypena90@whalebank.org, jennastrawn81@whalebank.org, leannacrowley87@whalebank.org, wallacelamb99@...

4/28/2026

**Scam Campaign Report: Multi-Number Lottery Prize Operation** This scam campaign involves a coordinated network of 15 phone numbers operating together to perpetrate lottery and sweepstakes fraud. Th...

4/28/2026

**Scam Campaign Report: "Camellia K Talachi" Lottery Winner Fraud Network** This scam campaign centers around a lottery winner impersonation scheme using the fictitious identity "Camellia K Talachi,"...

4/28/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include carlsbadcamediaproducer.buzz, influencecraftmedia.site, carlsbadcame...

4/27/2026

**Mortgage Services Scam Campaign Report** This cybersecurity analysis identifies a coordinated mortgage-related scam campaign operating through two connected phone numbers: 833-408-1609 and 809-407-...

4/27/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include advertise.beincrypto.com, beincrypto.com. The connected infrastruct...

4/26/2026

This phone number cluster involves 6 numbers linked to suspicious activity complaints. The numbers are 806-305-2418, 888-885-2708, 888-524-5861, 805-246-4561, 818-293-0616, 858-355-4955. Together, the...

4/26/2026

This cluster centers on 9 connected domains identified through shared infrastructure and registration patterns. The domains include dep100v.com, spax20r.com, grokai-network.net, buyspacex.org, deepsti...

4/26/2026

This phone number cluster involves 11 numbers linked to suspicious activity complaints. The numbers are 888-457-7630, 877-533-5835, 888-217-5520, 866-227-7046, 888-350-6915, 888-924-8849, 844-693-5175...

4/26/2026

This cluster involves 378 email addresses. The addresses include clarencehenley78@whalebank.org, sylviafields70@whalebank.org, charleshollis95@whalebank.org, janiceholloway89@whalebank.org, christypen...

4/26/2026

Based on consumer reports and regulatory data, a sophisticated mortgage impersonation scam has emerged using a coordinated network of sequential phone numbers and multiple mortgage company identities....

4/26/2026

**Scam Campaign Report: National Document Services Fake Legal Papers Scheme** This scam campaign involves two connected phone numbers operating under the name "National Document Services" to intimida...

4/26/2026

**Debt Collection Impersonation Scam Campaign** This scam campaign involves two connected phone numbers operating a debt collection impersonation scheme: 844-255-4282 and 518-205-9827. While neither ...

4/26/2026

This cluster centers on 3 connected domains tagged as SantaStealer, exe. The domains include free-imgislropw.icu, gitlab.com, pastebin.com. 3 of these domains have been flagged by threat intelligence ...

4/25/2026

This cluster centers on 3 connected domains tagged as 91-92-242-236, exe, ua-wget. The domains include 89.45.6.18, 158.94.210.91, 91.92.242.236. 3 of these domains have been flagged by threat intellig...

4/25/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 855-288-0231, 888-576-2041, 833-457-7612. Together, these numbers have accumulated 0 consumer com...

4/25/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 858-310-8540, 805-518-3012, 820-587-9868. Together, these numbers have accumulated 0 consumer com...

4/25/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 855-288-0250, 808-493-3025, 323-554-0203. Together, these numbers have accumulated 0 consumer com...

4/25/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include illuminanceglobal.com, illuminanceglobal.org, illuminanceglobal.pro....

4/25/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 505-371-4789, 505-371-4085, 505-371-4060. Together, these numbers have accumulated 0 consumer com...

4/25/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 920-249-8482, 855-606-3196, 414-216-5918. Together, these numbers have accumulated 0 consumer com...

4/25/2026

This phone number cluster involves 3 numbers linked to Warranties & protection plans complaints primarily targeting consumers in Harrisburg, Pennsylvania. The numbers are 888-215-8402, 888-885-0540, ...

4/25/2026

This phone number cluster involves 5 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Los Angeles, California, Mission Viejo, Ca...

4/25/2026

This analysis reveals a sophisticated scam campaign exploiting the legitimate identitytheft.org domain (registered through NAMECHEAP INC since 1998-06-18) and phone number 833-796-8634 to impersonate ...

4/25/2026

**Lottery Prize Scam Network Targets Multiple U.S. Regions** This scam campaign operates through a network of 21 connected phone numbers that have been reported together by consumers across multiple ...

4/25/2026

This scam campaign centers around EDvantage LLC, a student loan company with 73 CFPB complaints, operating through a coordinated phone operation using numbers 216-714-4855 and 657-900-8133. The campai...

4/25/2026

**Scam Campaign Report: Multi-Number Lottery Prize Network** This cybersecurity analysis identifies a coordinated scam campaign involving 21 phone numbers connected through shared reporting patterns ...

4/25/2026

This scam campaign involves a coordinated network of four phone numbers operating together to conduct impersonation fraud targeting consumers across multiple states. The primary active number in this ...

4/25/2026

This scam campaign involves a coordinated network of 11 phone numbers operating in conjunction with Executive Lending Group, LLC, a mortgage company with 3 CFPB complaints. The network has generated a...

4/25/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include neimanmarcus.com, studionocta.com. The connected infrastructure inc...

4/24/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include avsquad.net, formassembly.com. The connected infrastructure include...

4/24/2026

This phone number cluster involves 13 numbers linked to Other complaints. The numbers are 845-990-0324, 270-814-7511, 385-496-6699, 970-292-9953, 302-403-9372, 434-512-2680, 970-721-2839, 540-551-1145...

4/24/2026

This cluster involves 378 email addresses. The addresses include brentvandyke79@whalebank.org, ernestinaparker95@whalebank.org, theresamount73@whalebank.org, clarencehenley78@whalebank.org, maryjones9...

4/24/2026

**Scam Campaign Report: Privacy Solutions ID Data Breach Notification Scheme** This campaign involves a sophisticated scheme using fraudulent data breach notifications that combine legitimate company...

4/24/2026

This cluster centers on 3 connected domains tagged as 178-16-55-23, exe, opendir. The domains include 94.156.102.255, 178.16.55.23, 147.93.3.139. 3 of these domains have been flagged by threat intelli...

4/23/2026

This cluster centers on 3 connected domains tagged as emotet, heodo, opendir. The domains include 7070-ppxcx-a1-3gg5ufwp666ee644-1300076834.tcb.qcloud.la, 62.60.226.97, 101.43.204.194. 3 of these doma...

4/23/2026

This cluster centers on 4 connected domains tagged as Kaiji, opendir, ua-wget. The domains include 130.12.182.211, 45.207.157.11, s3.mgirbvre.top, 176.65.149.237. 4 of these domains have been flagged ...

4/23/2026

This phone number cluster involves 5 numbers linked to suspicious activity complaints. The numbers are 857-402-3367, 610-894-0824, 804-667-1952, 502-837-2592, 502-848-6757. Together, these numbers hav...

4/23/2026

This phone number cluster involves 4 numbers linked to suspicious activity complaints. The numbers are 789-491-0785, 843-438-7912, 201-461-4815, 408-550-7395. Together, these numbers have accumulated ...

4/23/2026

This cluster centers on 59 connected domains tagged as autoconfig-atlcpatax-com, mips, opendir. The domains include arilprivate.storexyz.web.id, down.1756520.xyz, 10cricofficial.com, justwatch.life, e...

4/23/2026

**Mortgage-Related Scam Campaign Targeting Homeowners** This scam campaign involves two toll-free numbers, 8336721656 and 8336127094, that are being used in coordinated mortgage-related fraudulent ac...

4/23/2026

**Scam Campaign Report: Klyvera.com E-commerce Fraud Connected to Debt Collection Activity** This scam campaign centers around the fraudulent e-commerce website klyvera.com, which was registered on M...

4/23/2026

**Scam Campaign Report: Connected Domain Network Targeting Online Shoppers** Our analysis has identified a coordinated scam campaign involving four interconnected domains: jomhome.co, viraxpower.com,...

4/23/2026

**Sports Betting Scam Campaign Targeting US Consumers** This cybersecurity investigation has identified a coordinated sports betting scam campaign involving three interconnected domains: wintoni.com,...

4/23/2026

**Sports Betting Scam Campaign Report** Our analysis has identified a connected scam campaign involving two domains: vinsonsport.com and wintoni.com. Both domains share the same registrar, ENOM, INC....

4/23/2026

**Scam Campaign Report: Chinese Task Scam Network Targeting Instagram Users** This cybersecurity investigation has identified a connected scam network comprising three entities that have been reporte...

4/23/2026

This phone number cluster involves 4 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Ramona, California. The numbers are 877-34...

4/22/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include blesswitch.com, promax.com. The connected infrastructure includes 1...

4/22/2026

This phone number cluster involves 3 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Troy, Illinois. The numbers are 484-483-48...

4/22/2026

This phone number cluster involves 4 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints. The numbers are 877-527-7807, 800-365-2714, 270-649-8681, 833-991-7306. To...

4/22/2026

This phone number cluster involves 4 numbers linked to Work from home & other ways to make money complaints primarily targeting consumers in Greensboro, North Carolina, Chicago, Illinois. The numbers...

4/22/2026

This cluster centers on 649 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include lunme.onters.sbs, lungx.hollower.sbs, lun.marvek.live, lunt.revio.live, lunq.revio.live, lunts...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include charmfay.com, wearshes.com, intelligiblei.com. Do not click links t...

4/22/2026

This cluster centers on 4 connected domains identified through shared infrastructure and registration patterns. The domains include soaurel.com, toussn.com, obrightlighting.com, www.obrightlighting.co...

4/22/2026

This cluster centers on 3 connected domains tagged as None, remcos. The domains include lpi0ngge6c.ufs.sh, epaste.app, 192.3.176.237. 3 of these domains have been flagged by threat intelligence feeds ...

4/22/2026

This cluster centers on 4 connected domains identified through shared infrastructure and registration patterns. The domains include fashviora.com, deyrin.com, firearmspartshop.com, www.firearmspartsho...

4/22/2026

This cluster centers on 3 connected domains tagged as None, RapidStealer, obfuscated. The domains include estudarebomai.com, crm.razatelefonia.pro, ursosmart.lol. 3 of these domains have been flagged ...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include trynolvy.com, getjollydays.com, mitrophics.com. The connected infra...

4/22/2026

This cluster centers on 4 connected domains identified through shared infrastructure and registration patterns. The domains include vashale.com, www.vashale.com, viatimer.com, fionv.com. Do not click...

4/22/2026

This cluster centers on 4 connected domains identified through shared infrastructure and registration patterns. The domains include www.stanley1913sales.us.com, stanley1913us.com, stanleys-1913.com, s...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include starcici.com, www.loyaltyous.com, breeshe.com. Do not click links t...

4/22/2026

This phone number cluster involves 7 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Illinois, Illinois, Irwin, Pennsylvania, F...

4/22/2026

This phone number cluster involves 7 numbers linked to Vacation & timeshares complaints primarily targeting consumers in Honolulu, Hawaii. The numbers are 702-483-9411, 636-614-4845, 818-308-5164, 81...

4/22/2026

This phone number cluster involves 6 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Santa Clara, California, Mesa, Arizona, In...

4/22/2026

This phone number cluster involves 7 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Bethalto, Illinois. The numbers are 866-76...

4/22/2026

This phone number cluster involves 12 numbers linked to Other complaints primarily targeting consumers in San Diego, California, Bayfield, Colorado, Brooklet, Georgia. The numbers are 610-569-5676, 24...

4/22/2026

This phone number cluster involves 7 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Grampian, Pennsylvania, Lacey, Washington,...

4/22/2026

This phone number cluster involves 6 numbers linked to Medical & prescriptions complaints. The numbers are 854-202-8118, 291-351-6039, 998-872-9329, 993-603-7727, 917-825-9632, 552-868-8382. Together...

4/22/2026

This phone number cluster involves 18 numbers linked to Dropped call or no message complaints primarily targeting consumers in BAYFIELD, Colorado, Sauk City, Wisconsin, Madison, Wisconsin, Wisconsin. ...

4/22/2026

This cluster centers on 48 connected domains tagged as verification-google. The domains include space-time.theoristack.in.net, wave-point.beckonuncert.in.net, lab-access.bactergreat.in.net, flow-objec...

4/22/2026

This phone number cluster involves 15 numbers linked to Reducing your debt (credit cards, mortgage, student loans) complaints primarily targeting consumers in Westport, Massachusetts. The numbers are ...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include u.pc.cd, northcratelogistics.com, northcrate-hr.com. The connected ...

4/22/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include www.morerecruits.com, www.resumesats.com. The connected infrastruct...

4/22/2026

This cluster involves 347 email addresses. The addresses include tawandabrown98@whalebank.org, michellemccutchen96@whalebank.org, deloresreynolds82@whalebank.org, etheljackson87@whalebank.org, sharonv...

4/22/2026

This phone number cluster involves 5 numbers linked to Calls pretending to be government, businesses, or family and friends complaints. The numbers are 302-386-6205, 302-541-7135, 305-832-4210, 304-27...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include allowgrant.com, ncaytceh.com, christmashops.com. Do not click links...

4/22/2026

This cluster centers on 12 connected domains identified through shared infrastructure and registration patterns. The domains include xxx.profithost.net, earnyoga.biz, invitetown.com, payfunda.biz, reg...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include eliteerieapparel.shop, apparel.co, erieapparel.co. Do not click lin...

4/22/2026

This cluster centers on 3 connected domains tagged as SalatStealer, exe. The domains include dropmefiles.com, limewire.com, local-host.life. 3 of these domains have been flagged by threat intelligence...

4/22/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include email.customer.scop.io, scop.io. The connected infrastructure inclu...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include sitranis-jobs.com, terrafyx.com, faslix-hr.com. Do not click links ...

4/22/2026

This cluster centers on 687 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include lunq.revio.live, qploits.online, getryos.com, deusxeno.ws, visuals.trueblog.sbs, visual.truebl...

4/22/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include www.iyogi.com, msoft.com-scrfix26.info. The connected infrastructur...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include www.reliefchecknow.com, www.releasechecknow.com, www.reliefcheck.com...

4/22/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include eworksinc.com, join.eworksinc.com. The connected infrastructure inc...

4/22/2026

This cluster centers on 1 connected domains identified through shared infrastructure and registration patterns. The domains include rgs-4.com. The connected infrastructure includes 1 phone numbers (8...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include www.apple.com.ca.llhf.net, llhf.net, llhf.net,. The connected infra...

4/22/2026

This cluster centers on 673 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include repost.punto-viva.info, anondrop.net, openclaw.official-version.com, 45.59.113.84, visual.true...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include barenakedscam.com, hotmlmcompanies.com, sciencenordic.com. Do not c...

4/22/2026

This cluster centers on 3 connected domains tagged as SantaStealer, exe, remcos. The domains include lpi0ngge6c.ufs.sh, epaste.app, raw.githubusercontent.com. 3 of these domains have been flagged by t...

4/22/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include ityh.us, drive-ky.gov-sxj.org, drive-ky.gov-sxq.org. The connected ...

4/22/2026