This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...
Domain
www.harms-inc.com
First seen Feb 22, 2026
Suspicious
- No SSL certificate
- 7 community reports from users
Campaign Intelligence
This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...
This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...
This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...
This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...
This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...
This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...
Part of: Other Robocall Campaign3/27/2026
This cluster centers on 1486 connected domains tagged as None, keylogger. 5 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1364 phone numbers (3124141737, 3163966869, 8553892999) with 17909 FTC complaints; 170 companies (EQUIFAX, INC., TRANSUNION INTERMEDIATE HOLDINGS, INC., BANK OF AMERICA, NATIONAL ASSOCIATION) with 8747332 CFPB complaints; 187 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grup...
Details
Related Domains
Community Reports
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
SCAM! - need your help to proceed with the scammer who pinged my profile in one of job ad site <tl;dr> scammer found my resume of ITJobsCafe and offered a job as Excel converter (lol), but first I need to send $700 to him to get notebook and printer that I need for the work. You decide what happens next </tl;dr> I'm a polish guy working currently in Dublin, Ireland. I'm currently looking for a job in the U.S. with an employer that would Sponsor an H1B Visa ... that's why I posted my resume on ITJobsCafe.com and he got to me with the potential job offer. His first email was to schedule a interview/screening on Yahoo messenger - I accepted and right on the start it started to smell scam. I continued to the very end - now I just need to send him $700 for an imaginary printer and notebook. I wonder if his name that he sent me is real. At the same time I need your help - best ideas (best comments) will be executed. Below is my correspondence with him. Email: Hello Applicant We are acknowledging receipt of your resume sent to us as per our job ad published on (ITJOBcafe.com) and we are pleased with your qualifications. Your details has been forward to the senior supervisor (Mr Nathan Lenon) He would like to conduct an on-line interview with you to discuss your duties and pay scale with our company.If you are interested in this position,go to (www.messenger.yahoo.com) and set up a screen name with the yahoo instant messenger,and ad up this screen name (nathan_lenon@yahoo.com) Report ASAP for an Interview/briefing. All further emails should be sent to Mr Lenon via the email (nathan_lenon@yahoo.com) HR CLERK Log from Yahoo Meggenger (I'm Jacek, the scammer is nathan): jacek.xxxxxxxxxx: Hi Nathan jacek.xxxxxxxxxx: this is Jacek, we exchanged few emails today nathan_lenon: Morning and how are you today? jacek.xxxxxxxxxx: vero good jacek.xxxxxxxxxx: *very nathan_lenon: here for interview/briefing? jacek.xxxxxxxxxx: yes nathan_lenon: Can you please state your f
4784 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.
NordPass — Stop reusing passwords across accounts
After a breach, attackers try stolen passwords on every site you use. NordPass generates and stores a unique password for each account.
Try NordPassAffiliate link. We may earn a commission.