Scam Detective
Phone Number

406-359-1564

Last reported Apr 22, 2026

Low Activity
  • 2 community reports from users

Campaign Intelligence

This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...

This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...

This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...

This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...

Details

First Seen
2/22/2026
Last Reported
4/22/2026
Area Code
406

Linked Company Activity

EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CITIBANK, N.A.
23 BBB complaints
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
205 BBB complaints

Connected Entities

Community Reports

Craigslist/paypal scamer hey guys first post on r/Scams! so i'm selling my car on craigslist and a get only a few hours after i made my post at 2am i get a text asking about the car first thing he says is how much. i put it in the post maybe like 4 times. then he goes on too tell me he wants to buy it. his reply was asking basic questions bout the car. i said it was all on my post. the next time i look at my phone i have 3 text saying he wants too buy the car but via paypal and he needs my paypal account so he can purchase the car and he has a private courier agent that will come for the pick up after payments. Me being surprised he didnt mention a lower price asked him if he was agreeing too $2200. and he said yes. I instantly think it's a scam so i google paypal scam and in yahoo answers i found a question if this email a guy got in reply to the car he posted on craigslist. the email read something very similar to my guys text but this email was more detailed and more background info like why he has to use paypal and why he wants the car but is out of state for something. and the top answer broke it down on why it was a scamer. Anyway i couldnt believe how similiar they were. i was convinced it was a scammer. I had to inform him of my findings and he send back "get lose" i think he meant get lost but again broke english ha. IF YOU RECIEVE A TEXT FROM 4063591564 BEWARE!!!

5129 days ago3 upvotes

Craigslist/paypal scamer hey guys first post on r/Scams! so i'm selling my car on craigslist and a get only a few hours after i made my post at 2am i get a text asking about the car first thing he says is how much. i put it in the post maybe like 4 times. then he goes on too tell me he wants to buy it. his reply was asking basic questions bout the car. i said it was all on my post. the next time i look at my phone i have 3 text saying he wants too buy the car but via paypal and he needs my paypal account so he can purchase the car and he has a private courier agent that will come for the pick up after payments. Me being surprised he didnt mention a lower price asked him if he was agreeing too $2200. and he said yes. I instantly think it's a scam so i google paypal scam and in yahoo answers i found a question if this email a guy got in reply to the car he posted on craigslist. the email read something very similar to my guys text but this email was more detailed and more background info like why he has to use paypal and why he wants the car but is out of state for something. and the top answer broke it down on why it was a scamer. Anyway i couldnt believe how similiar they were. i was convinced it was a scammer. I had to inform him of my findings and he send back "get lose" i think he meant get lost but again broke english ha. IF YOU RECIEVE A TEXT FROM 4063591564 BEWARE!!!

5129 days ago3 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.