Scam Detective
Phone Number

844-751-4226

Last reported Apr 21, 2026

Low Activity
  • 2 community reports from users

Campaign Intelligence

This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...

This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...

This cluster centers on 2107 connected domains tagged as GuLoader, NorthKorea, censys. The domains include storage.googleapis.com, cdn.discordapp.com, pastes.io, s3.us-east-2.amazonaws.com, dl.dropboxusercontent.com, 188.137.230.45, touchskins.io, 158.94.208.7, 74.0.32.149, 74.0.32.141, api.touchskins.io, 80.89.237.190, 188.137.254.207, api.wewpwsw.su, 188.137.229.136, 196.251.107.24, 104.194.152.180, link.storjshare.io, s3.g.s4.mega.io, 62.60.226.159 and 2087 more. 562 of these domains have bee...

This cluster centers on 2121 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233, 41.146.1.154, 59.182.119.128, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, cdn.discordapp.com and 2101 more. 576 of these domains have been flagged by threat intelligence feed...

This cluster centers on 1630 connected domains tagged as BABADEDA, pw-2026, wsh. The domains include storage.googleapis.com, cdn.discordapp.com, implementing-theft-metal-justin.trycloudflare.com, staying-heavily-meaning-blowing.trycloudflare.com, creations-venture-traditional-stainless.trycloudflare.com, arilprivate.storexyz.web.id, 206.123.145.26, 103.125.219.204, 45.87.43.154, 10cricofficial.com, justwatch.life, 195.16.44.75, advise-visual-playstation-closer.trycloudflare.com, 91.92.241.197, 6...

This cluster centers on 2141 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 91.80.129.100, 123.28.175.23, 120.61.247.2, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 171.241.208.124, 120.157.229.220, 171.117.30.233, 91.80.136.9, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233 and 2121 more. 596 of these domains have been flagged by threat intelligence feeds incl...

This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...

Details

First Seen
2/22/2026
Last Reported
4/21/2026
Area Code
844

Linked Company Activity

EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CITIBANK, N.A.
23 BBB complaints
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C

Connected Entities

Community Reports

Can reddit join forces to troll the sh*t out of these folks? I'm an IT Specialist for a small park system. One of our employees had their Edge browser 'spontaneously' display the following error message (link to screen shot https://drive.google.com/open?id=0B7sRtSHGmB2QUXRJaHR5bkt3NnM ) If you're suspect about opening my link, it's a screen printout of the Edge browser displaying what appears to be a Windows system readout (Windows Edition, System Specs, Computer name, etc...) all of which are bogus. There's a prominent message that reads "This Build of Windows 10 is Expired On March 03rd 2017 If it Expires, Your Windows 10 System will be locked or it will be restarted in every few minutes For Immediate Support Call Windows 10 Help Desk at Toll Free: [here's the best part] +1 (844) 751-4226" As one who LOVES to keep scammers on the line as long as possible and troll them till the regret their life choices, I called the number. Sure enough I get a prompt answer from tech support. Being at work, I hung up and didn't waste any time. But then they called back.... I denied the call. They called back again. I then had a nice chat with "William Johnson" about how I'm adjusting to life in the White House after letting him know he had the privilege of speaking with Donald Trump. After a quick stroll through the Google, I see other people have seen this same message today with THE SAME NUMBER. So I called it again to see if it still connected me to them. Sure enough "Clark Stevens" answered. Then "Stacy Watson" the next time. I get incoming calls like this all the time, and I keep them on as long as possible. The longer they're on the phone with me, the less time they have to scam poor souls who don't know better. But I've NEVER seen them use the same outgoing number. So I need reddit's help to call these idiots and make their day miserable. Call the number above. Use a free VOIP service if you're nervous about them tracking you. tl;dr Stupid scammers posted th

3358 days ago16 upvotes

Can reddit join forces to troll the sh*t out of these folks? I'm an IT Specialist for a small park system. One of our employees had their Edge browser 'spontaneously' display the following error message (link to screen shot https://drive.google.com/open?id=0B7sRtSHGmB2QUXRJaHR5bkt3NnM ) If you're suspect about opening my link, it's a screen printout of the Edge browser displaying what appears to be a Windows system readout (Windows Edition, System Specs, Computer name, etc...) all of which are bogus. There's a prominent message that reads "This Build of Windows 10 is Expired On March 03rd 2017 If it Expires, Your Windows 10 System will be locked or it will be restarted in every few minutes For Immediate Support Call Windows 10 Help Desk at Toll Free: [here's the best part] +1 (844) 751-4226" As one who LOVES to keep scammers on the line as long as possible and troll them till the regret their life choices, I called the number. Sure enough I get a prompt answer from tech support. Being at work, I hung up and didn't waste any time. But then they called back.... I denied the call. They called back again. I then had a nice chat with "William Johnson" about how I'm adjusting to life in the White House after letting him know he had the privilege of speaking with Donald Trump. After a quick stroll through the Google, I see other people have seen this same message today with THE SAME NUMBER. So I called it again to see if it still connected me to them. Sure enough "Clark Stevens" answered. Then "Stacy Watson" the next time. I get incoming calls like this all the time, and I keep them on as long as possible. The longer they're on the phone with me, the less time they have to scam poor souls who don't know better. But I've NEVER seen them use the same outgoing number. So I need reddit's help to call these idiots and make their day miserable. Call the number above. Use a free VOIP service if you're nervous about them tracking you. tl;dr Stupid scammers posted th

3358 days ago16 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.