This cluster centers on 420 connected domains tagged as iso, malware, stealer. The domains include dl.dropboxusercontent.com, s3.us-east-2.amazonaws.com, cdn.discordapp.com, aol.com, n9gov.com, 419scam.org, boardreader.com, consultant.com, weareelectricals.wordpress.com, guardian.co.uk, weareelectricals.com, grahamworthingtonspammer.wordpress.com, grahamworthingtonscammer.xanga.com, darkoozeripple.xanga.com, johnrlindensmith.blogspot.com, createspace.com, topix.com, img828.imageshack.us, img33.i...
480-624-2599
Last reported Jun 13, 2026
- 5 community reports from users
Campaign Intelligence
This cluster centers on 2 connected domains identified through shared infrastructure and registration patterns. The domains include domainsbyproxy.com, southernusahomebuyers.com. The connected infrastructure includes 1 phone numbers (4806242599) with 0 FTC complaints. This campaign was identified through automated analysis of FTC/FCC complaint databases, threat intelligence feeds and entity relationship mapping.
Details
Where These Reports Came From
States where people filed Better Business Bureau reports about this number. This shows where the people who were targeted live, not where the call comes from.
Linked Company Activity
Connected Entities
Linked Companies
EQUIFAX, INC.
campaign co-membercompanyBANK OF AMERICA, NATIONAL ASSOCIATION
campaign co-membercompanyTRANSUNION INTERMEDIATE HOLDINGS, INC.
campaign co-membercompanyJPMORGAN CHASE & CO.
campaign co-membercompanyCAPITAL ONE FINANCIAL CORPORATION
campaign co-membercompanyCITIBANK, N.A.
campaign co-membercompanyWELLS FARGO & COMPANY
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyAMERICAN EXPRESS COMPANY
campaign co-membercompanyPNC Bank N.A.
campaign co-membercompanyEarly Warning Services, LLC
campaign co-membercompanyLEXISNEXIS
campaign co-memberRelated Phone Numbers
9056283715
campaign co-memberphone8777058586
campaign co-memberphone5086371451
campaign co-memberphone3103658295
campaign co-memberphone8002305725
campaign co-memberphone3096844401
campaign co-memberphone8887729116
campaign co-memberphone9092565500
campaign co-memberphone9092565556
campaign co-memberphone8886016865
campaign co-memberphone9094561833
campaign co-memberphone6143889694
campaign co-memberphone8053084693
campaign co-memberphone5167049970
campaign co-memberphone6617480240
campaign co-memberphone8764479780
campaign co-memberphone8767730292
campaign co-memberphone8164603915
campaign co-memberphone2024566213
campaign co-memberphone3134030547
campaign co-memberphone4153201147
campaign co-memberphone5649148312
campaign co-memberphone5649136512
campaign co-memberphone5649111012
campaign co-memberRelated Domains
aol.com
campaign co-memberdomainn9gov.com
campaign co-memberdomain419scam.org
campaign co-memberdomainboardreader.com
campaign co-memberdomainconsultant.com
campaign co-memberdomainweareelectricals.wordpress.com
campaign co-memberdomainguardian.co.uk
campaign co-memberdomainweareelectricals.com
campaign co-memberdomaingrahamworthingtonspammer.wordpress.com
campaign co-memberdomaingrahamworthingtonscammer.xanga.com
campaign co-memberdomaindarkoozeripple.xanga.com
campaign co-memberdomainjohnrlindensmith.blogspot.com
campaign co-memberRelated Emails
_icf5sqvyxe@hastjyelkmydbga.m.gbhem
campaign co-memberemailscammer@scam.com
campaign co-memberemailofsrep.rumbbgw@wellsfargo.com
campaign co-memberemailhussain9710@hotmail.co.uk
campaign co-memberemailonline-motors@consultant.com
campaign co-memberemailautomated@airbnb-book.com
campaign co-memberemailleads@myhome.ie
campaign co-memberemaillima@mail.ru
campaign co-memberemailnora.warrior@yandex.com
campaign co-memberemailinfo@e.equifax.com
campaign co-memberemailsyndrome.s@hushmail.com
campaign co-memberemailfnbsouthafrica1920@financier.com
campaign co-memberCommunity Reports
I ordered an iron supplement from a company called Nivara. The order was delayed several weeks despite the website saying orders are typically processed within a few business days in the U.S.. I requested my order to be cancelled after two weeks but was assured the product was on the way - that it was "held up in the factory due to a routine inspection." I informed my credit card company (AMEX) that I had not received the order and they credited my account. When I finally received my order several weeks later, I noticed the supplemental facts label advertised on the website is inaccurate and does not depict the actual supplemental label on the physical boxes. I requested to return the product and the company gave me a physical address which appears to be a residential home: Gabbieh Medrano 748 Hilton Ave, El Paso TX 79907 United States. AMEX informed me they have charged my account again after reconciliation with the company. I have an email out to Nivara now to confirm this address including questioning why it appears to be a residential home. I also Googled their website address location and was given the information of it being located in Arizona with a telephone number of 4806242599. This telephone number appears in searched and has numerous complaints about varying types of businesses. [BBB Scam Type: Online Purchase] [Business: Nivara] [Location: AR, USA - 72223]
I ordered a supposed well documented dental dog treat. Real science backed it up as I researched the product ingredients. I signed up for a subscription. The key ingredient is listed last out of 23. There is no company name or contact on the product bag. Internet research does not recognize this url. Whois shows this domain site and phone number to be a site of frequent scams since 1999. The name listed for this site is “Domains by Proxy”. Whois Information: Name Registration Private Organization Domains By Proxy, LLC Phone tel:+1.4806242599 Fax ? Email https://www.godaddy.com/whois/results.aspx?domain=mydoggies.com&action=contactDomainOwner Mailing Address DomainsByProxy.com 100 S. Mill Ave, Suite 1600, Tempe, Arizona, 85281 [BBB Scam Type: Online Purchase] [Business: My Doggies] [Location: CA, USA - 92054]
No contact was directly by the scammer, instead, an unknown charge appeared on a credit card statement. Research shows the GoDaddy account was established during October 2025, but that the telephone number, (480) 624-2599, has been used repeatedly since 1999 for various scammer accounts. GoDaddy Whois information states the business location to be listed as DomainsByProxy.com 100 S. Mill Ave, Suite 1600, Tempe, Arizona, 85281. Other detailed information about the website by GoDaddy at https://www.godaddy.com/whois/results.aspx?itc=dlp_domain_whois&domain=recovercharge.com [BBB Scam Type: Credit Cards] [Business: Recover Charges] [Location: AL, USA- 35806]
Unsolicited mail arrived at my rental house in my name. Strange as I have never lived at that address. There was visible in the clear window, a fake check made out in my name. My house is not for sale and public data was scraped to associate the house in my name. The address showed Southern Home Buyers, 340 B Monroe Ave, Memphis, TN 38105 with a Presorted Standard US Postage Paid Sacramento, CA Permit 1935. An internet search revealed the scam. southernusahomebuyers.com Technical Analysis Key Facts Domain age 5 months Company Data Organization Domains By Proxy, LLC Owner Registration Private Address DomainsByProxy.com, 100 S. Mill Ave, Suite 1600 State Arizona Country US E-mail https://www.godaddy.com/whois/results.aspx?domain=southernusahomebuyers.com&action=contactDomainOwner Telephone +1.4806242599 Website Data Website southernusahomebuyers.com SSL certificate valid 2025-08-20 SSL issuer GoDaddy.com, Inc. WHOIS registration date 2025-01-21 WHOIS last update date 2025-01-21 WHOIS renew date 2026-01-21 Owner Name Registration Private Organization Domains By Proxy, LLC Street DomainsByProxy.com, 100 S. Mill Ave, Suite 1600 State Arizona Country US Telephone +1.4806242599 [BBB Scam Type: Other] [Business: Southern USA Home Buyers 340 B Monroe Ave Memphis TN 38112] [Location: MS, USA- 38680]
An unsolicited postal mail arrived to my rental house in my name. I have never lived there. Public records associated me with that property address. A fake check made out in my name was visible in a clear window on the mail The Return address on the mail was Southern USA Home Buyers 340 B Monroe Ave Memphis TN 38105, An internet search revealed these facts of the scam running for 5 months registered in Arizona. southernusahomebuyers.com Technical Analysis Key Facts Domain age 5 months Company Data Organization Domains By Proxy, LLC Owner Registration Private Address DomainsByProxy.com, 100 S. Mill Ave, Suite 1600 State Arizona Country US E-mail https://www.godaddy.com/whois/results.aspx?domain=southernusahomebuyers.com&action=contactDomainOwner Telephone +1.4806242599 Website Data Website southernusahomebuyers.com SSL certificate valid 2025-08-20 SSL issuer GoDaddy.com, Inc. WHOIS registration date 2025-01-21 WHOIS last update date 2025-01-21 WHOIS renew date 2026-01-21 Owner Name Registration Private Organization Domains By Proxy, LLC Street DomainsByProxy.com, 100 S. Mill Ave, Suite 1600 State Arizona Country US Telephone +1.4806242599 [BBB Scam Type: Other] [Business: Southern USA Home Buyers] [Location: MS, USA- 38680]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.