This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
833-670-4397
Last reported May 7, 2026
- 1 FTC complaints filed against this number
- 7 community reports from users
- Most reports: Calls pretending to be government, businesses, or family and friends
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign involves a coordinated operation using three phone numbers (8336704397, 8558034910, and 7712473390) linked to fraudulent legal courier and legal document services, with connections to a mortgage-related entity called Direct, Inc. The phone number 7712473390 has generated 4 FTC complaints categorized as "Calls pretending to be government, businesses, or family and friends," while Direct, Inc has accumulated 4 CFPB complaints in the mortgage industry. Analysis reveals these enti...
This cybersecurity analysis reveals a multi-faceted scam campaign operating through a network of 5 connected phone numbers and 2 companies, targeting consumers with fraudulent government, debt collection, and mortgage-related schemes. The central phone number 7712473390 has generated 4 FTC complaints for calls pretending to be government agencies, businesses, or family members, with activity concentrated in Pharr, Texas. This number shows strong connections to four other numbers in the campaign:...
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-membercompanyREGIONS FINANCIAL CORPORATION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
Person named David Horton claiming to be a legal courier saying he had been retained to drop off legal documents at my personal home or place of business during a specific time. If I was unavailable, they would document it as refused and send it back to the county. Said to call 8336704397 with questions and gave a case number. [BBB Scam Type: Government Agency Imposter] [Business: David Horton] [Location: CO, USA - 80538]
recd a voicemail message from Jennifer David who states she is a legal courier based out of cook county. To advise that legal documentation she has been retained to issue to me and a final attempt to locate me. She stated she is scheduled to delivery these documents to my home tomorrow at my address , which she provided in the message. And if I will not be home to sign for documents they will be surrendered to my county as a direct refusal to comply and the process will not proceed without me. If I have questions or concerns re: said documents I can contact the plantiff office directly at 833-670-4397. This is a final attempt. So I called that number and they answered Leiman Landry & Associates. I could swear that it was the same woman's voice that just left me a message!! The same dry voice. She asked for a case # which they did not provide on message. I asked where they were located and she stated OH. So if this is the same woman that left me a message, she better start driving to get from OH to IL. Anwyay, she put me on hold to get me to legal dept. I was on hold for a bit and decided to hang up. I know this is a scam becuase I received one of these calls before and nobody showed up at my house the next day. I check my county's online case information and find nothing under my name. Looked up the number and the "law office" name and see that others have received this same scam call. A courier will not call you before hand to let them know they were coming to serve you. Plus I do not have any unpaid credit cards....they would have shown up on my on credit report anyway. [BBB Scam Type: Phishing] [Business: Legal Courier for Leiman Landry Associates] [Location: IL, USA - 60160]
I Received call from a restricted number. I answered to tell them to stop calling me because I've been receiving LOTS of "collection" calls in which I don't owe any place anything. The caller stated they have "legal documents" to deliver to me and asking if I'd be at the address they had, which she never gave. I asked her what were the "documents" and she only gave me a number to call to "reschedule/confirm delivery", 833-670-4397. I'm not going to call this number as I'm fed up with so called "collection" scammers. [BBB Scam Type: Phishing] [Business: Unknown] [Location: MS, USA - 39154]
I received a phone call and a voicemail. This message is solely intended for Diane Trosper. My name is David Horton. I a legal courier, and I'm giving you a call here out of your local jurisdiction, and I'm calling, we got legal core documents. I have been retained the issue to you, and I am scheduled to come out and deliver the documents tomorrow, March 24th between 3 and 5 PM, and that is at your home residence, or possible place of employment. Please make sure you are available, you'll need to valid forms of identification upon my arrival. If I'm unable to obtain your signature. I would be forced to document this as a direct refusal to comply. And I have the documents for it back over to your county. If you have any questions or concerns or if you need to reschedule your service and date, contact the filing party directly at 833-670-4397. Your case number side will letter S as in Frank 543099. Diane Trosper, you have been legally notified. I called the phone number and a woman asked for the case number. She said my correct address and correct last four digits of my social security number. Then she stated that I had fallen into default with a Citi credit card back in 2022. I informed her I still owned all the same credit cards from that time and that I check my Credit Karma regularly. She told me that this card wouldn’t show up on my Credit Karma. [BBB Scam Type: Phishing] [Business: Liam and Landry Associates Date Repo] [Location: IL, USA- 61020]
"This message is for (my name). My name is David Horton, I'm a legal carrier and I'm giving you a call here in _____County regarding legal court documents I have been retained to issue to you and I am scheduled to come out and deliver legal documents tomorrow Feb. 25 between 3 and 5 Pm at your home residence or possible place of employment. Please make sure you are available and you'll need two valid forms of identification upon my arrival. If I'm unable to obtain your signature I will be forced to document this as a direct refusal to comply. Documents will be turned back over to your county. If you have any questions or concerns or if you need to reschedule your service date contact the following party directly at phone number 833-670-4397. Your case number is __________ . (My name) ....you are legally notified." [BBB Scam Type: Phishing] [Business: Process Server] [Location: SC, USA- 29070]
received the call for my husband thinking this was his phone #. said William Casey out of Fat County, legal documents to be signed 3/10 between 3-5 pm at home resident or work. had the 4 last digits of SS#. for us to contact the Plaintiff office 833-670-4397 case # [BBB Scam Type: Other] [Business: William Casey -Legal courier 833-670-4397] [Location: TX, USA- 78956]
I received an voicemail that stated this call was solely intended for me they stated their name was David Horton who is a legal courier giving me a call out of my local San Diego County jurisdiction regarding legal court documents. Claimed he had been and scheduled to come out to serve documents the next day which was March 18th between 3 and 5:00 PM at our home residence where possible place of employments and to also make sure If unable to obtain my signature I would be forced to document this as a direct refusal to comply and forward the documents back to the county the phone number left was 833-670-4397 [BBB Scam Type: Phishing] [Business: Leiman Landry Associates Date Repor] [Location: CA, USA- 92103]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.