This cluster centers on 5 connected domains identified through shared infrastructure and registration patterns. The domains include ilsos.gov-wcr.hair, portal.averahealthjobs.org, portal.averahealthcareers.org, bequitiesgroup.com, cargovistausa.com. Do not click links to any of the flagged domains. If you have visited one, check your accounts for unauthorized activity and consider changing your passwords. You can report suspicious contacts to the FTC at reportfraud.ftc.gov or to the FCC at cons...
Domain
ilsos.gov-wcr.hair
First seen Apr 9, 2026
Suspicious
- Domain registered 77 days ago
- No SSL certificate
- WHOIS registration hidden
Campaign Intelligence
Details
Related Domains
Community Reports
On 3/27/26 I received a text telling me I was a day away from defaulting on a parking violation. There was a link that supposedly went to the State of IL Illinois: "DMV Violation Notice: Your unpaid parking citation must be settled by 3/28/2026 to avoid 35% late fee plus license/registration consequences. Payment portal: https://ilsos.gov-wcr.hair/dmv" I didn't click on the link, but did input the address manually which brought up a very realistic looking site "SKIP THE LINE". But, pulling up the legit "Skip the Line" site through a Google search reveals a rather different looking site and they don't take parking ticket payments. [BBB Scam Type: Phishing] [Business: Illinois DMV] [Location: IL, USA - 60098]
65 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.