Scam Campaigns

Whalebank.org Email Infrastructure Campaign Analysts have identified a large-scale fraudulent email campaign centered on the domain whalebank.org, registered on September 2, 2019, through the registr...

5/29/2026

Puppy Sale and Flight Nanny Scam Campaign — San Antonio Area Infrastructure Cluster This report details a connected cluster of five entities associated with an active online puppy scam campaign. The ...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Abuse A coordinated scam campaign has been identified operating through the domain whalebank.org, registered on September 2, 2019, through the...

5/29/2026

Blossom Flower Delivery Scam Campaign Report A consumer fraud campaign has been identified operating under the name "Blossom Flower Delivery," utilizing two closely related domains — blossomflowerdel...

5/29/2026

Whalebank.org Email Infrastructure Campaign A coordinated scam campaign has been identified centered on the domain whalebank.org, registered on September 2, 2019, through the registrar Mesh Digital L...

5/29/2026

Whalebank.org Email Infrastructure Campaign A cluster of 379 connected entities has been identified centered on the domain whalebank.org, which was registered on September 2, 2019, through registrar ...

5/29/2026

Scam Campaign Report: Multi-Number Impersonation and Debt Reduction Calling Operation This report details a cluster of ten interconnected phone numbers associated with an active scam calling campaign...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Abuse A coordinated scam campaign has been identified operating through the domain whalebank.org, which was registered on September 2, 2019, t...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Abuse The domain whalebank.org, registered on September 2, 2019, through registrar Mesh Digital Limited, sits at the center of a large-scale f...

5/29/2026

Scam Campaign Report: Multi-Number Debt Reduction and Financial Services Phone Fraud Network A cluster of 15 interconnected phone numbers has been identified as part of a coordinated phone-based scam...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network The domain whalebank.org sits at the center of a large-scale fraudulent email operation involving at least 378 confirmed malicious ema...

5/29/2026

Influence Craft Media Suspected Scam Campaign — Carlsbad, California Analysts have identified a cluster of connected entities operating under the name Influence Craft Media, presenting itself as a me...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A coordinated scam campaign has been identified centered on the domain whalebank.org, registered on September 2, 2019, through the reg...

5/29/2026

Debt Reduction and Harassment Campaign: 434/440 Number Cluster A coordinated telephone harassment campaign has been identified involving five phone numbers operating across two area codes: four numbe...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network Analysts have identified a large-scale fraudulent email campaign operating under the domain whalebank.org, registered on September 2, ...

5/29/2026

Mirai Botnet Infrastructure Campaign: Multi-Domain Malware Distribution Network A cluster of 59 malicious domains has been identified operating as a coordinated botnet infrastructure campaign, with a...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A coordinated scam campaign has been identified operating through the domain whalebank.org, registered on September 2, 2019, through r...

5/29/2026

Debt Reduction Scam Campaign Report This report details a cluster of 15 phone numbers identified as part of a coordinated scam campaign, likely targeting consumers with unsolicited calls related to d...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A coordinated scam campaign has been identified operating through the domain whalebank.org, registered on September 2, 2019, through r...

5/29/2026

Scam Campaign Report: Nexgen Services Inc. and Associated Digital Infrastructure Nexgen Services Inc., a debt collection company, has accumulated 2 formal complaints with the Consumer Financial Prote...

5/29/2026

Scam Campaign Report: Fraudulent Recruiting Operation Using Apple-Branded Domain Infrastructure This report documents a coordinated fraud campaign involving three connected entities: the phone number...

5/29/2026

Scam Campaign Report: Coordinated Robocall Cluster Targeting Multiple U.S. Regions A cluster of four toll-free telephone numbers — 888-889-7197, 844-406-3167, 888-467-7759, and 844-391-0254 — has bee...

5/29/2026

Debt Relief and Advance Fee Loan Scam Campaign Report A cluster of seven phone numbers has been identified as part of a coordinated scam campaign targeting consumers across multiple U.S. states. The ...

5/29/2026

Debt Relief and Advance Fee Loan Scam Campaign A cluster of seven toll-free telephone numbers has been identified operating in connection with what appears to be a coordinated debt relief and advance...

5/29/2026

Scam Campaign Report: Coordinated Travel and Impersonation Phone Cluster Analysts have identified a cluster of ten phone numbers operating in apparent coordination as part of what appears to be a mul...

5/29/2026

Scam Campaign Report: Coordinated Debt Reduction Robocall Network A coordinated scam campaign involving at least 12 phone numbers has been identified through a combination of FTC complaint records an...

5/29/2026

Scam Campaign Report: 337-214-XXXX Number Cluster — Lafayette, Louisiana Area A coordinated robocall or spoofed-number campaign has been identified involving 14 phone numbers sharing the prefix 337-2...

5/29/2026

Debt Relief and Personal Loan Scam Campaign — Cluster Analysis Report This report documents a cluster of 15 interconnected phone numbers tied to a suspected debt relief and fraudulent loan scheme. Th...

5/29/2026

Scam Campaign Report: Multi-Number Debt Relief Fraud Operation A coordinated telephone scam campaign has been identified involving a cluster of 15 phone numbers operating across multiple area codes, ...

5/29/2026

This scam campaign involves a coordinated network of 18 phone numbers operating primarily across Wisconsin, with activity documented in communities including Madison, Sauk City, Bayfield, Hollandale, ...

5/29/2026

Scam Campaign Report: Coordinated Malware Distribution Network Using Spoofed Verification Infrastructure A coordinated malicious domain campaign has been identified involving at least 48 domains oper...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure The domain whalebank.org sits at the center of a large-scale fraudulent email campaign involving at least 347 documented email addresses and a...

5/29/2026

Financial Services and Academic Impersonation Scam Cluster — Utah-Area Campaign A cluster of seven interconnected domains and one phone number has been identified operating what appears to be a multi...

5/29/2026

Debt Reduction Scam Campaign Analysis This report documents a cluster of 15 interconnected phone numbers associated with a suspected fraudulent debt reduction campaign. The operation spans area codes...

5/29/2026

Scam Campaign Report: whalebank.org Fraudulent Email Infrastructure The domain whalebank.org sits at the center of a large-scale fraudulent email campaign involving at least 243 identified email addr...

5/29/2026

Whalebank.org Fraudulent Email Infrastructure Campaign Investigators have identified a coordinated scam campaign built around the domain whalebank.org, registered on September 2, 2019, through the re...

5/29/2026

Threat Campaign Report: Multi-Vector Malware Infrastructure Cluster Prepared for Consumer Protection Publication This report details a large-scale malicious infrastructure cluster comprising 687 conn...

5/29/2026

Scam Campaign Report: Aloha Travel Vacation and Impersonation Phone Cluster This report documents a cluster of ten interconnected phone numbers linked to an active scam campaign that combines vacatio...

5/29/2026

Whalebank.org Financial Impersonation and Email Fraud Campaign The domain whalebank.org sits at the center of a sprawling email-based fraud campaign involving at least 207 identified email addresses ...

5/29/2026

Threat Campaign Narrative: Multi-Vector Malware Infrastructure Cluster (683 Entities) A large-scale malware campaign encompassing 683 connected entities has been identified, involving a diverse and l...

5/29/2026

Scam Campaign Report: whalebank.org Financial Impersonation Operation The domain whalebank.org sits at the center of a large-scale fraudulent email operation involving at least 195 identified email a...

5/29/2026

Scam and Malware Campaign Report: Multi-Vector Threat Cluster of 679 Connected Entities This report documents a large-scale, multi-vector malware and scam campaign comprising 679 connected entities, ...

5/29/2026

SCAM CAMPAIGN REPORT: Fraudulent Job Recruitment Operation Leveraging Spoofed Apple and Automotive Brand Infrastructure A cluster of three connected entities has been identified as part of a suspecte...

5/29/2026

Scam Campaign Report: Multi-Number Phone Cluster Linked to Repeated Robocall Activity This report documents a cluster of 15 interconnected phone numbers associated with a coordinated unsolicited call...

5/29/2026

Whalebank.org Scam Campaign Report The domain whalebank.org sits at the center of a large-scale fraudulent email operation involving at least 178 connected entities, including the domain itself and 1...

5/29/2026

Cybersecurity Threat Campaign Report: Multi-Vector Malware Distribution and Botnet Infrastructure Cluster This report documents a large-scale malicious infrastructure cluster comprising 673 connected...

5/29/2026

Publisher's Clearing House Impersonation Scam Campaign A consumer fraud campaign impersonating Publisher's Clearing House has been identified involving two phone numbers, 669-291-9327 and 929-682-116...

5/29/2026

Debt Relief Scam Campaign Report This report documents a cluster of 15 interconnected phone numbers associated with a debt relief and loan consolidation scam campaign. The anchor number in this clust...

5/29/2026

Scam and Malware Campaign Report: Multi-Vector Threat Cluster of 662 Connected Entities This report documents a large-scale, multi-vector malware and infrastructure abuse campaign comprising 662 conn...

5/29/2026

Debt Relief Impersonation Campaign — Cluster Analysis Report This report documents a coordinated telephone scam campaign involving eleven phone numbers operating under a debt relief pretense. The cam...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A coordinated scam campaign has been identified operating under the domain whalebank.org, registered on September 2, 2019, through the...

5/29/2026

Scam and Malware Campaign Report: Multi-Vector Threat Cluster of 662 Connected Entities This report details a large-scale, multi-vector malicious infrastructure campaign comprising 662 connected enti...

5/29/2026

Debt Relief and Loan Scam Campaign Report This report documents a cluster of 15 phone numbers linked to an apparent debt relief and fraudulent loan solicitation campaign. The network includes numbers...

5/29/2026

Cybersecurity Threat Campaign Report: Multi-Vector Malware Distribution Network Prepared for Consumer Protection Publication This report details a large-scale, multi-vector malware distribution campa...

5/29/2026

Scam Campaign Report: Multi-Number Robocall Cluster Targeting Townsquare Interactive Customers This report describes a connected cluster of 15 phone numbers associated with an ongoing scam campaign i...

5/29/2026

Scam Campaign Report: Multi-Number Debt Relief and Solicitation Cluster A coordinated telephone-based scam campaign has been identified involving a cluster of 15 phone numbers spanning multiple area ...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network The domain whalebank.org represents the central infrastructure of a coordinated fraudulent campaign built around a fabricated financia...

5/29/2026

Scam and Malware Campaign Report: Multi-Vector Threat Cluster Prepared for Consumer Protection Publication This report documents a cluster of 649 connected malicious entities identified as part of a ...

5/29/2026

Scam Campaign Report: soft.com Cluster A cluster of three connected entities has been identified involving the domain soft.com, the phone number 763-658-2452, and a partially redacted email address a...

5/29/2026

Scam Campaign Report: abccompany.com Infrastructure Cluster This report documents a low-confidence but noted connection between the domain abccompany.com and the email address noreply@abccompany.com,...

5/29/2026

Scam Campaign Report: Allstate Insurance Email Impersonation Consumer protection researchers have identified a suspicious email infrastructure operating under the domain service01.email-allstate.com,...

5/29/2026

IEREK.COM CLUSTER: SUSPICIOUS ACADEMIC OUTREACH CAMPAIGN Investigators have identified a cluster of connected digital entities operating under the ierek.com domain infrastructure, involving two domai...

5/29/2026

Scam Campaign Report: Impersonation and Debt Collection Fraud Cluster A cluster of five phone numbers has been identified operating in coordination as part of what appears to be a government and debt...

5/29/2026

Scam Campaign Report: Credit Europe Bank Impersonation Scheme This report details a connected cluster of entities associated with a fraudulent scheme impersonating a financial institution identified ...

5/29/2026

This report concerns a cluster of five connected entities operating under the Casting360 brand, consisting of two toll-free phone numbers (877-734-7331 and 800-508-0298), two domains (casting360.com a...

5/29/2026

SCAM CAMPAIGN REPORT: 4XFX TRADING PLATFORM CLUSTER Prepared for Consumer Protection Advisory Publication This report documents a cluster of five connected entities associated with a suspected fraud...

5/29/2026

Teknfix Campaign Report A cluster of six connected entities operating under the Teknfix brand has been identified as a likely fraudulent operation based on community reporting and cross-entity relati...

5/29/2026

SCAM CAMPAIGN REPORT: Rede1024 / SecureNetwork-Europe Infrastructure Cluster This report documents a connected cluster of eleven entities — seven domains and four email addresses — associated with a ...

5/29/2026

Analysts have identified a cluster of 12 connected entities — one phone number and eleven domains — associated with what appears to be a multi-vector fraud campaign operating primarily in Canada. The ...

5/29/2026

Debt Relief and Unsecured Loan Scam Campaign: Multi-Number Operation Targeting Consumers Analysts have identified a cluster of 14 interconnected phone numbers operating as part of a coordinated debt-...

5/29/2026

Cybersecurity Campaign Report: Cluster Analysis of Phone Number 406-443-3220 and Associated Domain Network This report examines a cluster of 18 connected entities, including one phone number — 406-44...

5/29/2026

Cybersecurity Threat Campaign Report: Multi-Vector Malware Infrastructure Cluster A cluster of 645 connected malicious entities has been identified forming a coordinated, multi-vector malware campaig...

5/29/2026

Scam Campaign Report: Multi-Vector Financial Fraud and Infrastructure Cluster This report covers a cluster of 3,157 connected entities identified through shared reporting, co-appearance in consumer c...

5/29/2026

Scam Campaign Report: Coordinated Subscription Fraud Network A cluster of at least twelve domains and two phone numbers has been identified as part of a coordinated subscription fraud campaign target...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A coordinated scam campaign has been identified centered on the domain whalebank.org, registered on September 2, 2019, through the reg...

5/29/2026

Scam Campaign Report: Multi-Vector Financial Fraud and Malware Infrastructure Cluster This report documents a cluster of 4,628 connected entities identified through cross-referencing complaint databa...

5/29/2026

CONNECTED SCAM INFRASTRUCTURE CLUSTER: WORK-FROM-HOME AND ONLINE EARNINGS FRAUD NETWORK A cluster of 13 connected entities — one phone number and twelve domains — has been identified as part of a coo...

5/29/2026

Scam Campaign Intelligence Report: Multi-Vector Financial and Malware Threat Cluster This report covers a cluster of 4,263 connected entities identified through aggregated complaint data, infrastruct...

5/29/2026

Scam Campaign Report: Debt Reduction and Impersonation Network This report covers a cluster of three phone numbers — 612-509-8635, 866-210-8338, and 800-498-5428 — that appear to be operating as part...

5/29/2026

Campaign Narrative: "Ken" Multi-Domain Email Cluster A coordinated email-based campaign has been identified involving a cluster of 56 connected entities, centered on a single actor or persona operati...

5/29/2026

Scam Campaign Report: whalebank.org Email Infrastructure Network A fraudulent email infrastructure operating under the domain whalebank.org has been identified as the backbone of a large-scale scam c...

5/29/2026

Valued Merchants Work-From-Home Scam Campaign A cluster of 14 phone numbers has been identified as part of a coordinated outbound calling campaign tied to an operation presenting itself as "Valued Me...

5/29/2026

SCAM CAMPAIGN REPORT: Automated Real Estate Lead Generation Operation Two phone numbers, 800-792-4060 and 732-633-2020, have been identified as part of a connected unsolicited telemarketing campaign ...

5/29/2026

Scam Campaign Report: Multi-Domain "Ken" Email Network A coordinated email-based campaign has been identified involving at least 27 domains and 28 email addresses, all sharing the first name "Ken" as...

5/29/2026

Scam Campaign Report: Multi-Vector Financial and Malware Threat Cluster Consumer Protection Intelligence Report This report documents a cluster of 5,789 connected entities involved in a broad, multi-...

5/29/2026

CYBERSECURITY THREAT REPORT: Hajime Botnet Infrastructure Cluster Analysts have identified a cluster of 76 IP addresses linked to an active malware distribution campaign associated with the Hajime bo...

5/29/2026

Scam Campaign Report: Multi-Vector Fraud and Malware Network (Cluster of 3,989 Connected Entities) This report documents a large-scale fraud and malware campaign identified through a cluster of 3,989...

5/29/2026

Scam Campaign Analysis Report: Multi-Vector Fraud and Malware Cluster (3,969 Connected Entities) Investigators have identified a sprawling cluster of 3,969 connected entities operating across phone, ...

5/29/2026

Scam Campaign Report: Multi-Vector Fraud and Malware Cluster (3,955 Connected Entities) This report documents a large and technically sophisticated scam campaign comprising 3,955 connected entities, ...

5/29/2026

Select Source International Scam Campaign: Multi-Number Contractor Impersonation Operation Analysts have identified a coordinated scam campaign involving four phone numbers — 952-546-3300, 651-371-32...

5/29/2026

Scam Campaign Report: Multi-Vector Fraud Network Involving Impersonation Calls, Malware Infrastructure, and Online Vehicle Purchase Fraud This report covers a cluster of 3,426 connected entities, inc...

5/29/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 609-339-0760, 720-313-8840, 833-809-0681. Together, these numbers have accumulated 0 consumer com...

5/29/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include flyodeals.com, vacationwares.com. The connected infrastructure incl...

5/29/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include thetailoredgents.com, tailoredgents.com, gents.com. Do not click li...

5/29/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include parts.com, replacementparts.com. The connected infrastructure inclu...

5/29/2026

This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include 2fvitalmarketinginc.com, vitalmarketinginc.com. The connected infra...

5/29/2026

This phone number cluster involves 3 numbers linked to suspicious activity complaints. The numbers are 843-438-7912, 201-461-4815, 408-550-7395. Together, these numbers have accumulated 0 consumer com...

5/29/2026

Scam Campaign Report: lumenpick.com and casinocoins.com Cluster This report details a consumer fraud campaign centered on the domain lumenpick.com, which was registered on March 24, 2026, through the...

5/29/2026

This cluster centers on 3 connected domains tagged as mirai, wraith, x86_64. The domains include 165.22.247.105, 94.26.106.29, 103.77.246.174. 3 of these domains have been flagged by threat intelligen...

5/28/2026

This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include vip.astrobargain.com, get.belicohatsofficial.com, belicohatsofficial...

5/28/2026