This scam campaign involves a network of 6 phone numbers operating in coordination with debt collection activities, centering around Credit Corp Solutions Inc., which has received 2,743 consumer complaints filed with the Consumer Financial Protection Bureau. The phone numbers in this network include 833-382-7312, 229-213-0351, 844-630-1735, 844-693-0615, 888-788-4779, and 877-899-1809. Despite the extensive complaint history associated with Credit Corp Solutions Inc., none of these phone numbers...
844-693-0615
Last reported Apr 14, 2026
- 7 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign represents a sophisticated debt-related fraud operation spanning multiple phone numbers and debt collection companies, with over 896 documented FTC complaints and 92 FCC complaints across 16 connected phone numbers. The campaign primarily targets consumers with debt reduction scams, with the highest-volume number being 8335883819, which alone generated 577 FTC complaints and 27 FCC complaints for reducing debt schemes targeting credit cards, mortgages, and student loans. The s...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyDirect, Inc
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8557397810
campaign co-memberphone4154236379
campaign co-memberphone6782735206
campaign co-memberphone4097617631
campaign co-memberphone8882745552
campaign co-memberphone8773824357
campaign co-memberphone4092571942
campaign co-memberphone4806606572
campaign co-memberphone2603103075
campaign co-memberphone8446657222
campaign co-memberphone2233002233
campaign co-memberphone8967530024
campaign co-memberphone6055104392
campaign co-memberphone2289803131
campaign co-memberphone8887291403
campaign co-memberphone8502779873
campaign co-memberphone9148779868
campaign co-memberphone5715481682
campaign co-memberphone5162394413
campaign co-memberphone8008571567
campaign co-memberphone4046696656
campaign co-memberphone3486156058
campaign co-memberphone8888160224
campaign co-memberphone6503809008
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
saclaimingdpt@e-mail.ua
campaign co-memberemailvictor7@luckymail.com
campaign co-memberemailbsood@goodstart.org.au
campaign co-memberemailm0ercia1@yahoo.co.jp
campaign co-memberemailadmin@ibookingpms.com.br
campaign co-memberemailsupport@salesforce.com
campaign co-memberemail_reply@geico.com
campaign co-memberemailabuse@telus.com
campaign co-memberemailmailer-daemon@googlemail.com
campaign co-memberemailmem.....@....soft.com
campaign co-memberemailgeral@jogodigital.com
campaign co-memberemailaccount@microsoft.info
campaign co-memberCommunity Reports
Received notice in mail regarding your current mortgage Trailblazer Mortgage. Need to call us regarding this loan. This is a time sensitive matter call us at 844-693-0615.as soon as possible. The name listed on the card is not the current homeowner nor is the mortgage with Trailblazer Mortgage. I called my mortgage co. they informed me no fraud on our mortgage and this is probably a scam. The phone number listed on the card is not associated with trailblazer mortgage. [BBB Scam Type: Other] [Business: trailblazer mortgage] [Location: GA, USA - 30157]
Received postcard regarding my current mortgage and asked me to call 844-693-0615. [BBB Scam Type: Phishing] [Business: Mortgage Postcard Scam] [Location: IA, USA- 51503]
Started the Blue Post Cards... Important Notice: Immediate Response Needed regarding your mortgage with Usda Rural Development . Time sensitive please call ... 1st #833-382-7312 and then 2nd #844-693-0615. Both cards had Mortgage ID numbers that were different. At the bottom in very small print is information provided by Mortgage Services Group, LLC, 877-899-1809. This Final Notice came as a trifold letter with a fake mock-up check. The letter had no clear sender information. Only... Lender Info: Usda, Notice Date, Contact #1-888-788-4779, and a fake Property Code. Under the check in small letters, "Not affiliated with Usda." All numbers, when reverse searched, show a map of Coffeeville, Kansas. [BBB Scam Type: Phishing] [Business: Lender Info: Usda] [Location: MS, USA- 38852]
A blue postcard referencing a loan obtained. No company information but the postcard said Important Notice: Immediate Response Needed This notice is regarding your recently closed mortgage recorded on June xx, 2025. We need you to call us about an important matter regarding this loan. This us time sensitive so please call us at 844-693-0615 as soon as possible. A Mortgage ID# was listed above the mailing address. Nothing on the card indicated a company name and this phone number and Mortgage ID# ARE NOT associated with my Mortgage company or loan information. [BBB Scam Type: Phishing] [Business: Unknown] [Location: CA, USA- 95621]
Received postcard re: Notice regarding our mortgage with _________. They need us to call about an important matter regarding the loan. Time sensitive so call 844-693-0615 as soon as possible. In small print, said that all info provided by Mortgage Services Group, LLC, 877-899-1809. Not affiliated with, sponsored by, and loan info not provided by the same mortgage company __________. Also mis-spelled our last name. Assumed it was a scam, and now seeing that it indeed is a scam. f***ers !! [BBB Scam Type: Credit Cards] [Business: not given on postcard - US Postage paid out of Daytona Beach FL Permit #457] [Location: AZ, USA- 85210]
Blue post card in mail stating it is urgent we call the toll free number 844-693-0615 regarding our loan that we took out on our home 6 years ago. There is no return address or other identifiable information on who sent the communication. I assume within the USA as it is a prepaid post card. They wanted personal information for mortgage loan, nothing was provided. [BBB Scam Type: Phishing] [Business: Mortgage Services Group LLC IMPOSTER] [Location: MN, USA- 55376]
Recover green post card on mail about my mortgage “ this notice is regarding your March 10, 2026 mortgage. We need you to call us about an important matter regarding this loan. This is time sensitive so please call us at 844-693-0615 as soon as possible.” [BBB Scam Type: Phishing] [Business: Mortgage Services Group LLC Date Rep] [Location: OH, USA- 45424]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.