Scam Campaign Report: Multi-Vector Financial and Malware Threat Cluster Consumer Protection Intelligence Report This report documents a cluster of 5,789 connected entities involved in a broad, multi-vector fraud and malware campaign targeting consumers across the United States and internationally. The cluster includes 1,271 phone numbers, 2,957 domains, 143 companies, and 281 email addresses, interconnected through 17 confirmed cross-entity relationships. The campaign appears to operate across ...
737-204-6760
Last reported Feb 24, 2026
- 1 community report from users
Campaign Intelligence
Scam Campaign Report: Multi-Vector Fraud and Malware Cluster (3,955 Connected Entities) This report documents a large and technically sophisticated scam campaign comprising 3,955 connected entities, including 651 phone numbers, 2,107 flagged domains and IP addresses, and 182 associated email addresses. The campaign spans multiple fraud categories, combining impersonation-based telephone scams, malware distribution infrastructure, phishing email operations, and consumer fraud documented across c...
Scam Campaign Analysis Report: Multi-Vector Fraud and Malware Cluster (3,969 Connected Entities) Investigators have identified a sprawling cluster of 3,969 connected entities operating across phone, email, and web-based infrastructure, comprising 651 phone numbers, 2,121 domains and IP addresses, and 182 email addresses. The campaign spans multiple fraud categories including impersonation calls, malware distribution, botnet operations, and overpayment scams. The most prominently documented phon...
Scam Campaign Report: Multi-Vector Fraud Network Involving Impersonation Calls, Malware Infrastructure, and Online Vehicle Purchase Fraud This report covers a cluster of 3,426 connected entities, including 619 phone numbers, 1,630 domains, and 181 email addresses, tied to a broad and technically sophisticated fraud campaign. The campaign combines government and business impersonation robocalls, malware distribution infrastructure, and consumer-facing vehicle purchase scams. The scale and divers...
Scam Campaign Report: Multi-Vector Fraud and Malware Network (Cluster of 3,989 Connected Entities) This report documents a large-scale fraud and malware campaign identified through a cluster of 3,989 connected entities, including 651 phone numbers, 2,141 domains and IP addresses, and 182 email addresses. The campaign operates across multiple attack surfaces simultaneously, combining impersonation phone calls, malware-laced infrastructure, and deceptive email outreach to target consumers across ...
Details
Linked Company Activity
Connected Entities
Linked Companies
EQUIFAX, INC.
campaign co-membercompanyBANK OF AMERICA, NATIONAL ASSOCIATION
campaign co-membercompanyTRANSUNION INTERMEDIATE HOLDINGS, INC.
campaign co-membercompanyJPMORGAN CHASE & CO.
campaign co-membercompanyCAPITAL ONE FINANCIAL CORPORATION
campaign co-membercompanyCITIBANK, N.A.
campaign co-membercompanyResurgent Capital Services L.P.
campaign co-membercompanyWELLS FARGO & COMPANY
campaign co-membercompanyAMERICAN EXPRESS COMPANY
campaign co-membercompanyPNC Bank N.A.
campaign co-membercompanyBlock, Inc.
campaign co-membercompanyEarly Warning Services, LLC
campaign co-memberRelated Phone Numbers
8777778906
campaign co-memberphone7752244093
campaign co-memberphone9403242974
campaign co-memberphone6107476623
campaign co-memberphone8885624662
campaign co-memberphone4108851598
campaign co-memberphone8574290438
campaign co-memberphone8556983241
campaign co-memberphone8882992230
campaign co-memberphone8883622821
campaign co-memberphone8334081586
campaign co-memberphone8554282329
campaign co-memberphone5093726429
campaign co-memberphone8554783289
campaign co-memberphone8063180091
campaign co-memberphone6823649131
campaign co-memberphone8335883768
campaign co-memberphone8163987032
campaign co-memberphone5303045825
campaign co-memberphone8775929892
campaign co-memberphone8773513659
campaign co-memberphone8883589914
campaign co-memberphone8888868044
campaign co-memberphone8888849116
campaign co-memberRelated Domains
144.172.102.83
campaign co-memberdomainosmconsultants358.onmicrosoft.com
campaign co-memberdomainbadbuyerlist.org
campaign co-memberdomainabout.telus.com
campaign co-memberdomaincommunity.gtst.gr
campaign co-memberdomaindomain-monitoring.cc
campaign co-memberdomainuspassportandvisa.org
campaign co-memberdomainconsumercomplaints.in
campaign co-memberdomainopenoffice.org
campaign co-memberdomainbristol.craigslist.co.uk
campaign co-memberdomaineverycarebd.com
campaign co-memberdomaindrvchairs.com
campaign co-memberRelated Emails
diana@ierek.com
campaign co-memberemailwords@sp.wordthirst.com
campaign co-memberemail1a5zghaij@mozmail.com
campaign co-memberemailhello@alitobit.com
campaign co-memberemailreportphishing@apwg.org
campaign co-memberemailallstate@service01.email-allstate.com
campaign co-memberemailsupport@astro-global.pro
campaign co-memberemailsensepin@jabber.at
campaign co-memberemailpaulspinelli@something.com
campaign co-memberemailheader.i-@aspiration.com
campaign co-memberemailheader.1-@sendgrid.info
campaign co-memberemailbanker@citizensbank.com
campaign co-memberCommunity Reports
Creative Scam Warning - "Free receive sms" websites with messages reading "Your login pass for 'crypto-scam-url.com' is uYsugjI for account 'joebob@gmail.com' and you have $95,000" Hi all, just stumbled on this sub reddit, not sure if this has been talked about much, but wanted to show a scam I have seen that I thought was pretty clever. Basically, I needed to receive an SMS and didn't have one, used one of those free websites such as [https://receive-smss.com/](https://receive-smss.com/) \- there are PLENTY of them, and they really do actually work, if all you need is a quick sms code to sign up for a random website, telegram, etc. (The biggest issue is most websites like google/telegram and so on already have flagged ALL the phone numbers they use, so it likely won't work, but years ago it was easier) But if you just need someone to text you once for some reason, they work, however, everyone sees the message. So the scam is relatively creative and simple. You see all the messages people are receiving on these 'burner online sms' numbers. Usually it's just : "Your one time code is 51235" and that's it. Or "Your 2factor for [xyz.com](https://xyz.com) is 512352" - something that by itself won't help anyone hack/scam you. Nothing about your account name is usually in these quick sms messages (you've all gotten these messages before) But one message I saw was like the title suggests, had the website, the login, the password, the dollar amount of crypto held. Out of curiosity, I dug in, with VPNs on and no wallets connected and no real emails used. The scam was probably like most others, a url that's pretty simple like '[trade247legit.com](https://trade247legit.com)' and a VERY SIMPLE interface. If you go to the website, you actually CAN register a new account, you put in an email and password, it sends you a confirmation email, you log in to a fresh account with zero assets, a user profile, the whole works. Then, if you log in with the account/password in
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.