Scam Detective
Phone Number

512-880-2969

Last reported Mar 20, 2026

Low Activity
  • 1 community report from users

Campaign Intelligence

This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...

Details

First Seen
3/20/2026
Last Reported
3/20/2026
Area Code
512

Linked Company Activity

EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CITIBANK, N.A.
23 BBB complaints
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C
AMERICAN EXPRESS COMPANY
105 BBB complaints
PNC Bank N.A.
22 BBB complaints

Connected Entities

Community Reports

Scammer posted a Craigslist ad for a relatively new LG refrigerator for $400, which was well below market value. I messaged the contact number, (512-880-2969) and the scammer responded with an address and a meeting time for later that day. Scammer claimed to be selling the refrigerator after a move because the new rental already had appliances. Soon thereafter, the scammer texted that another potential buyer was going to be meeting first. But with a deposit he could hold the refrigerator for me. He said he did not have access to typical pay apps (Venmo, PayPal, Zelle) and could only accept a Bitcoin payment. I offered to pay cash, but the scammer continued to reference the other buyer and needed an immediate payment. He even sent a supposed selfie of himself holding a Texas driver's license with the name Matthew *** *********. I sent $200 via crypto, He even called me and we spoke to confirm the meeting to complete payment. A short time later, he texted me again about the other buyer, who was now offering to pay the full amount. I could still get it if I paid in full, he said. I paid the remaining amount via crypto. When that transaction was delayed for processing, the scammer said I could deposit cash at an ATM inside a sketchy smoke shop. That's when I realized I had been scammed. A few key details that the scammer used that match another report: He constantly references checking with his wife about the other buyer, and he says they are at his in-laws' house for the day while working through the negotiation. [BBB Scam Type: Online Purchase] [Business: Matthew Jon Worthington] [Location: NV, USA- 89012]

54 days ago

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.