First seen Apr 12, 2026
This cluster centers on 3 connected domains identified through shared infrastructure and registration patterns. The domains include store.com, lumen.store.com, account.wire.com. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.
REMOTE WORK OPPORTUNITY– Let’s Get You Set Up Inbox [email protected] 9:49?AM (4 hours ago) to me Dear Applicant, I hope this message finds you well. I’m reaching out on behalf of TORRENT PHARMACEUTICALS LTD, with some exciting news—you’ve been selected to move forward in the hiring process for our Remote Position ( DATA ENTRY CLERK / CUSTOMER SERVICE REPRESENTATIVE ). This opportunity offers flexible working hours and a competitive rate of $30.95per hour. To schedule your interview, please follow these steps: If you haven’t already, please download and sign up for Wire Secure Messenger. Once your account is set up, use the following this steps to connect with our HR Manager, DEVAL MODI: https://account.wire.com/user-profile/ [email protected] Username: @hr-deval.modi When prompted, enter the interview code: ALT-8050 If you experience any issues with the link, feel free to contact Deval Modi directly via email ( [email protected] ) We look forward to speaking with you and learning more about your background. Best regards, DEVAL MODI Torrent Pharmaceuticals, Ltd. Above is the actual email that was sent to me [BBB Scam Type: Employment] [Business: Torrent Pharmaceuticals LTD Date Rep] [Location: MI, USA - 48035]
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.