This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
Phone Number
855-915-0380
Last reported Apr 22, 2026
Low Activity
- 4 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
**Scam Campaign Report: Multi-Number Impersonation and Debt Collection Scheme** This scam campaign operates through a coordinated network of four connected phone numbers targeting consumers across multiple states with government impersonation and fraudulent debt collection calls. The primary number 8337279955 has generated the highest volume of complaints with 201 FTC reports and 55 FCC complaints, while 8889194623 has recorded 30 FTC complaints specifically for "calls pretending to be governme...
This scam campaign involves a coordinated network of five phone numbers operating under the guise of debt collection and government impersonation schemes, targeting consumers across multiple states. The primary number, 8775800051, has generated 26 FTC complaints for "calls pretending to be government, businesses, or family and friends," with victims concentrated in Columbus, Georgia, Bonneau, South Carolina, and Bunker Hill, West Virginia. Four additional numbers in the same campaign include 888...
This scam campaign involves a coordinated network of five phone numbers operating under the guise of government agencies and debt collection services, generating 41 FTC complaints across multiple states. The primary number 877-580-0051 has accumulated 26 FTC complaints for calls pretending to be government, businesses, or family and friends, with victims concentrated in Columbus, Georgia, Bonneau, South Carolina, and Bunker Hill, West Virginia. Phone number 888-687-2046, which serves as a centra...
Details
Linked Company Activity
EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
BANK OF AMERICA, NATIONAL ASSOCIATION
173 BBB complaints
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CAPITAL ONE FINANCIAL CORPORATION
158 BBB complaints
CITIBANK, N.A.
23 BBB complaints
Resurgent Capital Services L.P.
1 BBB complaint
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C
FIFTH THIRD FINANCIAL CORPORATION
26 BBB complaints
Connected Entities
Linked Companies
company
Collections Inc
reported togethercompanyCollection Solutions Inc.
reported togethercompanyACCOUNT SERVICES INC.
reported togethercompanyCredit Corp Solutions Inc.
reported togethercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-memberRelated Phone Numbers
phone
8553572202
campaign co-memberphone3186669555
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberRelated Domains
domain
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
email
diana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberemailservicename@nickname.tld
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberCommunity Reports
Convincing "Citizens Bank Debt Collection Deptartment" Scam. Number- (855)915-0380 I called the real Citizens Bank and they verified the number is not associated with them and the name and employee number I got from the scammer was not a bank employee / not found in their records
2296 days ago2 upvotes
Convincing "Citizens Bank Debt Collection Deptartment" Scam. Number- (855)915-0380 I called the real Citizens Bank and they verified the number is not associated with them and the name and employee number I got from the scammer was not a bank employee / not found in their records
2296 days ago2 upvotes
Fake Citizens Bank collections agency 855-915-0380 Fake phone call from Citizens Bank (confirmed with my bank that it's a phishing scam) stating that you owe a debt. Account numbers for Citizens Bank credit cards start with 5, so just make up a fake one to get the call going. They won't confirm your name, they won't confirm your address, they will say they can't mail you anything or did not as this is the "final notice" and try for your account number + the last 4 of your social security number. I dialed them 15 times before they gave up. They pick up on each and every call. Spoke with a Heather, Angela, Joe, and I think one other woman. They have to pick up the call and will hang up if you swear at them. Used a southern accent, a bayou accent, a Boston accent, and others, and they were none the wiser. Feel free to lead them on over and over again. If you push them into submission, they suggest you visit a local Citizens Bank branch or call their fraud number. They'll even make up fake dates and amounts that they said you owe.
2343 days ago10 upvotes
Fake Citizens Bank collections agency 855-915-0380 Fake phone call from Citizens Bank (confirmed with my bank that it's a phishing scam) stating that you owe a debt. Account numbers for Citizens Bank credit cards start with 5, so just make up a fake one to get the call going. They won't confirm your name, they won't confirm your address, they will say they can't mail you anything or did not as this is the "final notice" and try for your account number + the last 4 of your social security number. I dialed them 15 times before they gave up. They pick up on each and every call. Spoke with a Heather, Angela, Joe, and I think one other woman. They have to pick up the call and will hang up if you swear at them. Used a southern accent, a bayou accent, a Boston accent, and others, and they were none the wiser. Feel free to lead them on over and over again. If you push them into submission, they suggest you visit a local Citizens Bank branch or call their fraud number. They'll even make up fake dates and amounts that they said you owe.
2343 days ago10 upvotes
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.