This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...
heatoor.com
First seen Mar 27, 2026
- No SSL certificate
- 1 community report from users
Campaign Intelligence
Details
Related Domains
Community Reports
on Feb.6,2026 Earl Benebyat approximately 6:30 pm attempted to purchase a tire inflator through his paypal account but his wife's (vernion Beneby) account defaulted and all these fraudulent items popped up for no apparent reason that were not chosen. The Brightstar credit union sent out a fraud alert within (approx. 10) minutes which I were responded to and the card was made inactive. On the next week day we went into the credit union spoke with an officer who promised to send it to dispute. six days later all this unorderd product was delivered with no packaging list and no return label. I spoke with the heatoor.com company and they want me to bear the cost of return with no packaging label and no written product instruction (. I want charges removed from my bank account/paypal account and to be reimbursed for the return and consequences for these scam artist that can use algorithms to default your account to their website even though you dont know who they are and certainly dont want their cheaply manufactured products. thank you vernion Beneby .css-1w6dufj{-webkit-box-flex:0;-webkit-flex-grow:0;-ms-flex-positive:0;flex-grow:0;-webkit-flex-basis:auto;-ms-flex-preferred-size:auto;flex-basis:auto;width:calc(100% * 12 / var(--Grid-parent-columns) - (var(--Grid-parent-columns) - 12) * (var(--Grid-parent-columnSpacing) / var(--Grid-parent-columns [BBB Scam Type: Online Purchase] [Business: pay pal Impostor] [Location: FL, USA- 33322]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordVPN — Block threats and hide your IP from trackers
NordVPN encrypts your internet traffic and blocks malicious websites, ads, and trackers before they reach your device.