This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...
Domain
fraxcoin.com
First seen Feb 24, 2026
Suspicious
- No SSL certificate
- 1 community report from users
Campaign Intelligence
This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...
This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...
This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...
This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
Details
Related Domains
No known connections to other entities yet.
Community Reports
Is someone trying to scam me? Hello. Recently I was hired as an illustrator to work on a project. Everything was fine, we talked delivery date, style of the illustration, I was sent a few PDFs I had to look through to know what kind of work I would be doing. Everything seemed OK, and they asked me if I was fine with being paid in crypto. I said yes, as I have a wallet on [crypto.com](https://crypto.com/) (that I never use, but it was ready). They sent over a contract I had to sign, to make sure I would be delivering everything in a timely manner. In the contract, they would be sending 50% of the payment firsthand, and the other half they would pay as the work was done. However, they specified that all the payment would be made in [fraxcoin.com](https://fraxcoin.com/), and I would have to open a wallet there. I had no idea this site existed and found no credentials. However, I figured that once they made the payment, I would be able to send it over to my trustworthy wallet. I signed the contract and they sent me 50% of the payment in [fraxcoin.com](https://fraxcoin.com/). I went to withdraw to an external wallet, and found an error message saying I would have to deposit at least 0.008 BTC to this account, to verify my wallet. Which is pretty standard for most crypto wallets, but now I'm afraid that this money isn't even real and if I deposit, I will lose 0.008 BTC. I tried contacting the client, and they said that they made all the transactions through there, that this was a trustworthy wallet, and they had no means to pay me outside of it. What do you guys think? Does this seem legit?
908 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordProtect — Identity theft monitoring and recovery
NordProtect watches for your personal info on the dark web, monitors your credit, and covers up to $1M in identity theft insurance.
Get NordProtectAffiliate link. We may earn a commission.