This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
844-908-0174
Last reported Apr 14, 2026
- 7 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign centers around fraudulent debt collection attempts targeting former Charter Communications (Spectrum) customers through a coordinated network involving phone number 844-908-0174, two domains (pay-hh.com and hhcollect.co), and the debt collection company Charter Capital Corporation. The campaign operates under the name "Harris & Harris" and specifically targets individuals who previously held Spectrum cable services, with scammers claiming these consumers owe outstanding debts ...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
I received this text: Welcome! You will now receive texts from Harris & Harris, a Debt Collector on behalf of Charter Comms (Spectrum) #OfMsgsVaries Msg&DataRatesMayApply Terms: https://hhcollect.co/Harris 844-908-0174 To optout reply STOP [BBB Scam Type: Debt Collections] [Business: Harris Harris] [Location: NY, USA - 11229]
Harris & Harris-Debt Collector: RE: Charter Comms (Spectrum). Pay only 80% of your balance. We are not obligated to renew this offer. Visit ***************************** or call 844-908-0174. Our North Carolina permit number is 114009. Info: https://hhcollect.co/Harris STOP to optout [BBB Scam Type: Debt Collections] [Business: Harris and Harris debt collectors Da] [Location: NC, USA - 28303]
Got text messages stating- Harris & Harris-Debt Collector: Need payment options? https://PAY-HH.COM/p/Oeq1lKhQ or call 844-908-0174 to pay Charter Comms (Spectrum). To optout reply STOP [BBB Scam Type: Phishing] [Business: Harris Harris] [Location: OH, USA - 43410]
I've continually received this text; "Harris & Harris-Debt Collector: Reminder to return your Charter Comms (Spectrum) equipment for a credit to your account or to pay visit https://PAY-HH.COM/p/IAsyuMye or call 844-908-0174. To optout reply STOP" I have no association with this company [BBB Scam Type: Other] [Business: Harris Harris debt] [Location: FL, USA - 32811]
Harris & Harris-Debt Collector: Need payment options? https://PAY-HH.COM/p/AlirxYm2 or call 844-908-0174 to pay Charter Comms (Spectrum). Our North Carolina permit number is 114009. Info: https://hhcollect.co/Harris To optout reply STOP [BBB Scam Type: Phishing] [Business: Harris and Harris] [Location: DE, USA- 19808]
Welcome! You will now receive texts from Harris & Harris, a Debt Collector on behalf of Charter Comms (Spectrum) #OfMsgsVaries Msg&DataRatesMayApply Info: https://hhcollect.co/Harris 844-908-0174 To optout reply STOP Harris & Harris-Debt Collector: Need payment options? https://PAY-HH.COM/p/QYUjYGSB or call 844-908-0174 to pay Charter Comms (Spectrum). To optout reply STOP [BBB Scam Type: Debt Collections] [Business: Harris Harris Debt Collector Date R] [Location: WA, USA- 98597]
Same as complaint 1213778. I haven’t been a Spectrum customer for 10 years. 1st text. Welcome! You will now receive texts from Harris & Harris, a Debt Collector on behalf of Charter Comms (Spectrum) #OfMsgsVaries Msg&DataRatesMayApply Terms: https://hhcollect.co/Harris 844-908-0174 To optout reply STOP 2nd text Harris & Harris-Debt Collector: Reminder to return your Charter Comms (Spectrum) equipment for a credit to your account or to pay visit https://PAY-HH.COM/p/dc8KLKey or call 844-908-0174. Terms: https://hhcollect.co/Harris To optout reply STOP 3rd text. Harris & Harris-Debt Collector: Need payment options? https://PAY-HH.COM/p/p5Pb9l2m or call 844-908-0174 to pay Charter Comms (Spectrum). Terms: https://hhcollect.co/Harris To optout reply STOP [BBB Scam Type: Debt Collections] [Business: Harris Harris Debt Collector. Date] [Location: CO, USA- 80439]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.