This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...
Domain
mdfpro.com
First seen Feb 24, 2026
Suspicious
- No SSL certificate
- 1 community report from users
Campaign Intelligence
This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...
This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...
This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...
This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
Details
Related Domains
No known connections to other entities yet.
Community Reports
Is this a crypto scam or a legit entity? I came under the influence of a manipulative scammer under the guise of some well-meaning person trying to help me when I am down on my luck. The pitch was that I could use Cryptocurrency trading on an exchange that supports derivatives to rapidly earn income to make up for the lost funds from these tragedies. The initial trading involved small amounts and I withdrew only small amounts to prove to myself that this was real. No issues there so far. Then I was encouraged by my scammer to enter some promotional campaign on the trading platform. This is where the trouble started. Because I didn't complete the goal of depositing a certain amount of money for the campaign by the deadline, my account was frozen for the first time. Then things quickly escalated to the point where I began to take out loans to deposit more and more money to "unlock" my account. First I needed $100k to unfreeze the account due to the campaign lock. Then I was told I had to pay taxes on all profits up front with more deposits to unlock it again. That's another $65k. Then again they come up with some "violation" against my account that requires even more deposits to lock it again. At this point, I have over $185,000 in personal loans as a result and have only been able to withdraw $1000 from the account. My credit is maxed out and I have no savings left. Worse still I have borrowed money from some family members in a failed attempt to unlock my account and withdraw all funds. It was at this point it occurred to me that I have been scammed. Domains: [global.mdfpro.com](https://global.mdfpro.com) [mdfpro.com](https://mdfpro.com) [mdfcoin.com](https://mdfcoin.com) Recovery Assistance: [https://gofund.me/4040e46f](https://gofund.me/4040e46f)
1056 days ago2 upvotes
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
Proton VPN — Block malicious sites and encrypt your connection
Proton VPN routes your traffic through encrypted servers and blocks known malware domains. Free plan available.
Get Proton VPNAffiliate link. We may earn a commission.