This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
888-204-8630
Last reported May 11, 2026
- 6 FTC complaints filed against this number
- 11 FCC robocall/robotext complaints
- 9 community reports from users
Campaign Intelligence
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2107 connected domains tagged as GuLoader, NorthKorea, censys. The domains include storage.googleapis.com, cdn.discordapp.com, pastes.io, s3.us-east-2.amazonaws.com, dl.dropboxusercontent.com, 188.137.230.45, touchskins.io, 158.94.208.7, 74.0.32.149, 74.0.32.141, api.touchskins.io, 80.89.237.190, 188.137.254.207, api.wewpwsw.su, 188.137.229.136, 196.251.107.24, 104.194.152.180, link.storjshare.io, s3.g.s4.mega.io, 62.60.226.159 and 2087 more. 562 of these domains have bee...
This cluster centers on 2121 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233, 41.146.1.154, 59.182.119.128, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, cdn.discordapp.com and 2101 more. 576 of these domains have been flagged by threat intelligence feed...
This cluster centers on 1630 connected domains tagged as BABADEDA, pw-2026, wsh. The domains include storage.googleapis.com, cdn.discordapp.com, implementing-theft-metal-justin.trycloudflare.com, staying-heavily-meaning-blowing.trycloudflare.com, creations-venture-traditional-stainless.trycloudflare.com, arilprivate.storexyz.web.id, 206.123.145.26, 103.125.219.204, 45.87.43.154, 10cricofficial.com, justwatch.life, 195.16.44.75, advise-visual-playstation-closer.trycloudflare.com, 91.92.241.197, 6...
This cluster centers on 2141 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 91.80.129.100, 123.28.175.23, 120.61.247.2, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 171.241.208.124, 120.157.229.220, 171.117.30.233, 91.80.136.9, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233 and 2121 more. 596 of these domains have been flagged by threat intelligence feeds incl...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign involves a coordinated network of three phone numbers operating in conjunction with Credit Corp Solutions Inc., a debt collection company that has generated 2727 CFPB complaints. The primary phone number 8665872406 has received 22 FTC complaints specifically related to debt reduction scams targeting credit cards, mortgages, and student loans, with victims reported in Glen Allen, Virginia, Fort Thomas, Kentucky, and Greensboro, North Carolina. This number is directly connected ...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyDirect, Inc
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
2233002233
campaign co-memberphone8883434868
campaign co-memberphone9297499563
campaign co-memberphone2133444742
campaign co-memberphone8886933330
campaign co-memberphone3468443520
campaign co-memberphone7543122908
campaign co-memberphone8883622821
campaign co-memberphone9737983665
campaign co-memberphone2206206994
campaign co-memberphone3096844401
campaign co-memberphone8006839049
campaign co-memberphone8665502212
campaign co-memberphone3213326021
campaign co-memberphone8557167029
campaign co-memberphone8775956256
campaign co-memberphone2532949762
campaign co-memberphone9843551551
campaign co-memberphone8302689832
campaign co-memberphone6803886466
campaign co-memberphone5889090822
campaign co-memberphone9547311611
campaign co-memberphone9288599211
campaign co-memberphone5672750369
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
saclaimingdpt@e-mail.ua
campaign co-memberemailvictor7@luckymail.com
campaign co-memberemailbsood@goodstart.org.au
campaign co-memberemailm0ercia1@yahoo.co.jp
campaign co-memberemailadmin@ibookingpms.com.br
campaign co-memberemailsupport@salesforce.com
campaign co-memberemail_reply@geico.com
campaign co-memberemailabuse@telus.com
campaign co-memberemailmailer-daemon@googlemail.com
campaign co-memberemailmem.....@....soft.com
campaign co-memberemailgeral@jogodigital.com
campaign co-memberemailaccount@microsoft.info
campaign co-memberCommunity Reports
Received a phone call from 1-888-204-8630 stating they are with Chase Fraud Prevention and I should call to verify my credit card application. [BBB Scam Type: Credit Cards] [Business: Chase - Impostor] [Location: MO, USA - 63701]
An official looking letter from Chase Card services was sent to my mother's address. I have no accounts tied to her address. The letter stated "We're concerned someone maybe using your personal information fraudulently and declined an application because of this. If you would like to discuss this application with a fraud specialist, please call us at 1-888-204-8630" I did not call the number; instead, I went to the chase website & did not see this number listed. Then I googled the # and saw it's a scam. I also called the real Chase number to confirm my account was ok. [BBB Scam Type: Credit Cards] [Business: Unknown] [Location: OH, USA - 44047]
I received a call to which I did not answer because I was on another call. However, the scammer left the following message: "This is Pooja. I'm calling from Chase card verification team to verify a credit card application. Please call us back at 1-888-204-8630. We work Monday to Sunday, 8 AM to 8 PM. Any representative at this number can assist you. Do have this reference number available when you call XXXX" [BBB Scam Type: Credit Cards] [Business: Chase card verification team- Imposter] [Location: TX, USA - 77318]
Hello, this message is for Lisa Foster. My name is Tony calling from Chase for prevention. I am calling to verify credit card application and we are looking to verify some information with you so please give us a call back at 888-204-8630 at your earliest convenience. We are open Monday through Sunday 8 AM to 8 PM Eastern. Any representative can assist you at that number just please provide them with the following reference. The reference is 251228538462. Thank you and have a great day. [BBB Scam Type: Bank/Credit Card Company Imposter] [Business: Chase Bank Imposter] [Location: CA, USA - 92107]
A woman called me saying she was from Chase Bank verification dept. I had just applied for a new credit card so my first reaction was to think it was a legitimate call. However, the phone number made me suspicious and I was on my way out anyway. I told her I would call her back when I got home. She told me to call 888-204-8630. I looked up that phone number and confirmed my suspicion: this is an attempt to gain banking and personal information. I never called her back. [BBB Scam Type: Credit Cards] [Business: Chase Bank verification] [Location: GA, USA- 30265]
I applied online for an Amazon/Chase credit card. The next day I received a phone message. The caller claimed to be Sisha from Chase Fraud Prevention. She had my full name including middle initial. She asked me to call her at 1-888-204-8630 with a 12-digit reference number she provided. [BBB Scam Type: Credit Cards] [Business: Shisa] [Location: CA, USA- 95014]
A voice message was left: This message is for Nicole Wright. This is Melvin calling from the Chase Fraud Prevention team. To verify information, please give us a call back at 1-888-204-8630 at your earliest convenience. We are open Monday to Sunday 8AM to 8PM Eastern time and any representative at that number can assist you. This is the reference number to use when you call, it's gonna be 260-306-524-915. Thank you for banking at Chase. Have a great day. [BBB Scam Type: Phishing] [Business: Chase Bank] [Location: IL, USA- 60201]
Hi, this message is for —-. My name is Christina. I'm calling from Chase fraud Prevention. We're looking to verify some information with you. Please give us a call back at 888-204-8630 at your earliest convenience. We open 7 days a week, 8 AM to 8 PM Eastern time, and any representative can assist you. Please provide them with the following reference number. Thank you and have a great day. [BBB Scam Type: Credit Cards] [Business: Chase Fraud Prevention] [Location: OK, USA- 74055]
Is this a scam? I applied for a chase card. Got a letter in the mail that it was denied for fraud. Called the number and they asked me a lot of odd questions, about my mothers maiden name and old addresses, eventually culminating in them sending me an email and asking for a photo of my utility bill and drivers license to confirm DOB and address. What I could find is that the number they had me call was legitimate (888-204-8630) but I just got a nagging feeling about it. The email (no.reply.alerts@chase.com) is supposedly legitimate as well, but I have heard they can make it look real if they want to. Just looking for anyone's feedback and whether I may want to consider freezing assets or such.
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.