This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
855-403-0146
Last reported Apr 3, 2026
- 4 community reports from users
Campaign Intelligence
This debt collection scam campaign operates through a coordinated network of five phone numbers centered around 855-403-0146, which serves as the primary contact number connecting to four other numbers: 561-973-9204, 346-383-5698, 866-637-2482, and 861-662-1703, all linked through same campaign relationships with 0.70 confidence ratings. The operation utilizes the domain ac-pay.online as a payment portal, which has been reported together with the central phone number 855-403-0146 and is connecte...
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberRelated Domains
buysell.com
campaign co-memberdomaintekutool.com
campaign co-memberdomainwww.groupon.com
campaign co-memberdomainaol.com
campaign co-memberdomainn9gov.com
campaign co-memberdomainwww.federalreserve.gov.
campaign co-memberdomainwww.419scam.org
campaign co-memberdomainboardreader.com
campaign co-memberdomainconsultant.com
campaign co-memberdomainidentified.com
campaign co-memberdomainscoresense.com
campaign co-memberdomainweareelectricals.wordpress.com
campaign co-memberRelated Emails
cbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberemaildarkc0de@exploit.im
campaign co-memberemailhussain9710@hotmail.co.uk
campaign co-memberemailqxl.support.013@yandex.com
campaign co-memberemailhxpgogidohfauo-kdxxjgcqdtqkjmsv@loyqyarg-11131902.ca
campaign co-memberCommunity Reports
Received the following text: AssetCare, a DebtCollector: Your balance of $167.98 is due on account 23770426, which originated with Georgia Emergency Department Services and is now owned by our client CF Medical LLC. Please call us at 855-403-0146 to discuss payment options or visit https://ac-pay.online/SCbqD1. To Optout Txt STOP [BBB Scam Type: Debt Collections] [Business: Asset Care collecting on behalf of CF Medical LLC] [Location: VA, USA - 22580]
Text msg from 62919 saying AssetCare, a DebtCollector: Your balance of $584.00 is due on account 23433259 which originated with Radiology Partners Singleton P.A. and is now owned by our client CF Medical LLC. Please call us at 855-403-0146 to discuss payment options or visit https://ac-pay.online/YRKyz. To Optout Txt STOP. [BBB Scam Type: Other] [Business: AssetCare] [Location: TX, USA- 78633]
Got a text message a few times addressing me by name saying “ this is AssetCare, a Debt Collector. Pay $165.39 to resolve your $413.47 balance. Call 855-403-0146 or goto https://ac-pay.online/H262J7 to see how we can help you resolve your past due account. ToOptoutTxt STOP “ i paid them before thinking they were legit but messages just kept coming. I couldnt figure out if it was legit or not but i did know i owed medical bills around that cost so i didnt think it was fake at first until i saw other people saying it was happening to them. [BBB Scam Type: Debt Collections] [Business: AssetCare] [Location: PA, USA- 16226]
AssetCare, a DebtCollector: Your balance of $985.00 is due on account xxxx4547, which originated with Us Acute Care Solutions and is now owned by our client CF Medical LLC. Please call us at 855-403-0146 to discuss payment options or visit https://ac-pay.online/X39--. To Optout Txt STOP [BBB Scam Type: Debt Collections] [Business: Asset Care LLC] [Location: TX, USA- 78759]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.