Scam Detective
Domain

www.catenaintel.com

First seen Feb 24, 2026

Suspicious
  • No SSL certificate
  • 2 community reports from users

Campaign Intelligence

This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...

This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...

This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...

This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...

This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...

Details

First Seen
2/24/2026

Related Domains

No known connections to other entities yet.

Community Reports

Types of Crypto Scams - Pig Butchering *Hello everyone,* *Over the past year, I &* u/OlexC12 *have been working on a project to collect intelligence on crypto fraud and share the methods of crypto scam operations with the world. We do this under the name* [*Catena Intel*](https://www.catenaintel.com)*. In March 2023, I have posted an* [*introduction about us*](https://www.reddit.com/r/CryptoScams/comments/1214gup/recognize_crypto_scams_protect_your_coins/)*, for those of you who are interested.* *Since then, we have collected crypto fraud intelligence via online sources and by engaging with victims, which resulted in the identification of different types of crypto scams. So now I will do a weekly post about these various crypto scams, with the objective to raise the awareness on this global issue.* ​ # Pig Butchering A *pig butchering* scam is a scam in which the fraudster emotionally manipulates the victim in doing investments into fake crypto currencies, projects or services. The pig butchering scam is a type of online fraud in which the fraudster operates a long-term strategy. A scam like this can take up from a few weeks to several months up to a year, depending on the victims' emotional connection to the fraudster. Oftentimes, a pig butchering scam results in major financial impact and emotional distress for victims, while the scammer disappears with the stolen crypto funds. Fraudsters usually target potential victims on social media, dating apps or via phone text messages. Once a target has been found, the scammer initiates contact with the victim. At first, the initial contact between the victim and the fraudster starts off as innocent and friendly, and in many cases the fraudster also flirts with the victim, to establish trust between the two. As the two are getting to know each other digitally, there will be several moments where the fraudster mentions about his/her crypto investments and the profits made. The fraudster then continues with sha

894 days ago11 upvotes

Recognize crypto scams. Protect your coins. Hello everybody, Together with u/OlexC12, it is our objective to raise awareness on crypto scams, so that people can recognize them and protect their coins. We achieve this by interviewing people who have fallen victim to a crypto scam and investigating the threat actors. As a result of analyzing and investigating scams, we are able to reveal the methods of operations behind crypto scams. This includes information about the threat actors, the wallet addresses used by them, the modus operandi and many more details describing how the victim was manipulated to invest in fraudulent crypto exchanges and cryptocurrencies. This work could not be achieved without victims coming forward with their stories. We are very grateful for their help. You can read more on our website [Catena Intel](https://www.catenaintel.com) about various crypto scam operations and the stories of victims. Recognize crypto scams. Protect your coins.

1099 days ago8 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.

Proton VPN Block malicious sites and encrypt your connection

Proton VPN routes your traffic through encrypted servers and blocks known malware domains. Free plan available.

Is www.catenaintel.com safe? Check it now | Scam Detective