This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
Phone Number
223-305-1896
Last reported Mar 28, 2026
Low Activity
- 2 community reports from users
Campaign Intelligence
Details
Linked Company Activity
EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
BANK OF AMERICA, NATIONAL ASSOCIATION
175 BBB complaints
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CAPITAL ONE FINANCIAL CORPORATION
161 BBB complaints
CITIBANK, N.A.
23 BBB complaints
Resurgent Capital Services L.P.
1 BBB complaint
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
205 BBB complaints
FIFTH THIRD FINANCIAL CORPORATION
26 BBB complaints
Connected Entities
Linked Companies
company
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
phone
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberRelated Domains
domain
buysell.com
campaign co-memberdomaintekutool.com
campaign co-memberdomainwww.groupon.com
campaign co-memberdomainaol.com
campaign co-memberdomainn9gov.com
campaign co-memberdomainwww.federalreserve.gov.
campaign co-memberdomainwww.419scam.org
campaign co-memberdomainboardreader.com
campaign co-memberdomainconsultant.com
campaign co-memberdomainidentified.com
campaign co-memberdomainscoresense.com
campaign co-memberdomainweareelectricals.wordpress.com
campaign co-memberRelated Emails
email
cbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberemaildarkc0de@exploit.im
campaign co-memberemailhussain9710@hotmail.co.uk
campaign co-memberemailqxl.support.013@yandex.com
campaign co-memberemailhxpgogidohfauo-kdxxjgcqdtqkjmsv@loyqyarg-11131902.ca
campaign co-memberCommunity Reports
I saw an online advertisement for the Cison the gasoline OHV V8 Small-block Engine Model kits. They charged a handling fee, which I contested by email a n received the handling fee refund. After weeks I again made contact by email (the phone number on the receipt 223-305-1896 is bad) to fine my oder. My order was sent and I received a one piece plastic toy, engine instead of the advertised kit. Now RUNKIKUS is offering a 20% refund or a substitute gift at www.cssalegloez.com/. [BBB Scam Type: Online Purchase] [Business: Runkikus] [Location: CO, USA- 80019]
46 days ago
Ordered a pair of white snow boots. on 1/25/2026. Received Gray boots on 2/17/2026. Tried to call company. Phone always busy. Chatbox goes in a loop and can't upload photos. Will not type credit card number in box either asked. Info: 14th floor, Cosco Tower 183 Queens Road Central Sheungwan, Hong Kong Boots label was USPS: MAT 1865 Baltimore Pike Gettysburg, PA. 17325 Phone - 223-305-1896 emails: [email protected] [email protected] [BBB Scam Type: Online Purchase] [Business: Ritzy Glitzy Wreaths] [Location: MO, USA- 65616]
47 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.