This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
844-769-0783
Last reported Mar 25, 2026
- 3 community reports from users
Campaign Intelligence
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-membercompanyREGIONS FINANCIAL CORPORATION
campaign co-membercompanyThe Collection Agency LLC
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone3186669555
campaign co-memberphone8009220204
campaign co-memberphone6789998212
campaign co-memberphone8889194623
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberphone7656119812
campaign co-memberphone3473635189
campaign co-memberphone6095276573
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberphone8446863816
campaign co-memberphone2013652729
campaign co-memberphone4077347620
campaign co-memberphone8004727563
campaign co-memberphone6468099698
campaign co-memberphone2028008504
campaign co-memberphone8446312193
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
diana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberemailservicename@nickname.tld
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberCommunity Reports
Postal mail was received claiming the following: "Please call 1-844-769-0783 with VIN and current mileage before [DATE]. Our records indicate that you have not contacted us regarding the vehicle service contract on your vehicle. By neglecting to activate your coverage you will be at risk of being financially liable for any and all repairs after your factory warranty expires. However, you still may have time left to activate coverage on your vehicle before it's too late. Final acceptance is subject to your ability to meet eligibility requirements. This may be our only attempt to contact you about activating your vehicle service contract. We reserve the right to revoke your eligibility for your service coverage if you do not meet out criteria. Call withing 5 days to ensure eligibility. Sincerely, Michael Toplen Program Coordinator 1-844-769-0783, Para Español: 1-877-492-3420" It lists a car I've never owned, and know nothing about. Has my name and mailing address, but nothing else. It doesn't give the VIN for this vehicle, instead requesting I call and give it to them. [BBB Scam Type: Phishing] [Business: Michael Toplen] [Location: MI, USA- 49321]
Mailed "Time Sensitive" with my car/year and model but saying the letter was to inform me that my factory warranty has expired. Which I know it has not. Says to call the 844-769-0783 phone number right away and have VIN and mileage info when you call. By neglecting this letter, coverage will be at risk. I know my factory warranty and this is why this was caught as well as researching. [BBB Scam Type: Phishing] [Business: Unknown] [Location: MA, USA- 01062]
No company name. Titled letter: Time Sensitive. Important Vehicle Information. Bottom of letter signed Michael Toplen Program Coordinator. Received letter top left for their info has 2015 Chevrolet Camaro (mine is a 2011), Important Vehicle Information, Address change? Contact Customer service department. Letter center title: Time Sensitive. Letter trying to sale me an extended warranty or steal car info and money. Please call (844)769-0783 with VIN and mileage by March 26, 2026. (Operating hours M-F 7a-7p Sat 10a-3p). Records indicate you have not contacted us regarding the vehicle service contract.... Signed by a Michael Toplen, Program Coordinator. When I called and used *67 to hide/block my phone number. It auto hung up. [BBB Scam Type: Other] [Business: Unknown] [Location: TX, USA- 78412]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.