This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
Phone Number
833-447-1291
Last reported Mar 30, 2026
Suspicious
- 3 FTC complaints filed against this number
- 2 community reports from users
- Most reports: Calls pretending to be government, businesses, or family and friends
Campaign Intelligence
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This cybersecurity analysis reveals a coordinated campaign involving seven phone numbers and two financial companies targeting consumers across multiple states with debt-related scams and impersonation schemes. The central phone number 8442853944 serves as a hub, connected through same-campaign relationships to five other numbers: 8669590096, 8334471291, 8889195404, 8557692926, and 3043090939. Together, these numbers have generated 28 FTC complaints, with the most active line 8889195404 accounti...
**Scam Campaign Report: Fraudulent Debt Collection and Document Services Operation** This scam campaign involves a coordinated network of five phone numbers operating in conjunction with Collections Inc, a debt collection company that has received 21 CFPB complaints. The primary phone numbers in this operation are 8556629143 (3 FTC complaints for calls pretending to be government, businesses, or family and friends), 8552217361 (4 FTC complaints in the "Other" category), and 8334471291 (3 FTC co...
This scam campaign involves a coordinated network of five phone numbers operating under the guise of debt collection and government impersonation schemes, targeting consumers across multiple states. The primary number, 8775800051, has generated 26 FTC complaints for "calls pretending to be government, businesses, or family and friends," with victims concentrated in Columbus, Georgia, Bonneau, South Carolina, and Bunker Hill, West Virginia. Four additional numbers in the same campaign include 888...
**Fraudulent Debt Collection and Government Impersonation Campaign** This scam campaign operates through three connected phone numbers that have generated 32 total complaints across FTC databases, utilizing deceptive tactics that impersonate both government agencies and debt collection operations. The primary number 8775800051 accounts for 26 FTC complaints categorized as "Calls pretending to be government, businesses, or family and friends," with significant activity reported in Columbus, Geor...
Details
Linked Company Activity
EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
BANK OF AMERICA, NATIONAL ASSOCIATION
173 BBB complaints
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CAPITAL ONE FINANCIAL CORPORATION
158 BBB complaints
CITIBANK, N.A.
23 BBB complaints
Resurgent Capital Services L.P.
1 BBB complaint
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C
FIFTH THIRD FINANCIAL CORPORATION
26 BBB complaints
Connected Entities
Linked Companies
company
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
phone
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone8669590096
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
domain
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
email
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
Received a call from somone claiming to be a process server because a lien was about to be placed on my property. Since I was not home, he advised me to call 833-447-1291 which was a law firm to see if I could resolve the matter. Called and spoke with Heather, who advised that this was regarding an outstanding debt on two credit cards. When I said that I didn't have any old debts, she sent me an email with the information. I did not read the information. Heather kept stating that I could settle the debt now, or go to court. I hung up. It bothers me that they have my name, the last 4 of my SSN, home address and car information. Fortunately, my credit files have been locked for over a year. Her information in the email: HEATHER LAWSON #213-210-2885. ECPROCESSING.NET MERCHANT WEBSITE- LAWFIRM [BBB Scam Type: Phishing] [Business: Belmontis Legal Group] [Location: FL, USA- 32257]
44 days ago
My name is Mia Johnson with Process Service Division. This message is intended for Ashley (maiden name used but I've been married for 10-years) regarding case number 25-10_97_. I am calling to notify you that 2 attempts are going to be made to serve you a notice of action pertaining to a property investigation being initiated and finalized against you. For further details on the case or to change its active status, please call the legal office hand in the case at 833-447-1291. Failure to contact immediately will result in further legal actions to be taken without their knowledge or consent. You have been notified. [BBB Scam Type: Debt Collections] [Business: Process Service Division Process Server Imposter Debt Collections Vishing and Identity Theft Scam] [Location: TX, USA- 75454]
48 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.