This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
877-332-1658
Last reported Mar 28, 2026
- 4 community reports from users
Campaign Intelligence
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This cybersecurity analysis reveals a concerning scam campaign that exploits the legitimate 2024 Conduent data breach to target consumers through coordinated phone operations. The campaign involves three phone numbers operating as part of the same scheme: 8773321658, 6786323160, and 3002495300, all connected through same-campaign relationships with 0.70 confidence levels. These numbers are being used to impersonate representatives from Credit Corp Solutions Inc. (2,727 CFPB complaints in debt co...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
I received a physical mailed letter stating that my personal information was involved in a data breach related to Conduent. The letter stated that my Social Security Number and address may have been exposed and provided an enrollment code and phone number (877-332-1658) to enroll in identity protection services. The letter directed me to enroll through a website associated with “Privacy Solutions.” When attempting to verify the enrollment website, I noticed multiple similar domain names and links being used, including variations of “privacysolutions” websites requesting entry of sensitive personal information such as Social Security Number. Due to the sensitive nature of the information being requested and the existence of multiple similar domains, I am concerned that scammers may be impersonating legitimate breach response services to collect additional personal data from victims. I am submitting this report to document the situation and help determine whether the website and enrollment process are legitimate or part of a potential phishing or identity theft scheme. I have not provided additional personal information beyond what was already included in the breach notice. [BBB Scam Type: Other] [Business: Conduent Secure Processing Center Da] [Location: TN, USA- 37027]
I received a physical letter stating that my personal information was involved in a data breach related to Conduent. The notice indicated that my Social Security number and address may have been exposed and provided an enrollment code and phone number (877-332-1658) to sign up for identity protection services. It directed me to a website associated with “Privacy Solutions” to complete enrollment. When attempting to verify the website, I found multiple similar domain names and links using variations of “Privacy Solutions,” all requesting sensitive information such as a Social Security number. Given the nature of the data requested and the presence of multiple similar domains, I am concerned that fraudulent websites may be impersonating a legitimate breach response service in order to collect additional personal information. I am submitting this report to document the situation and to request confirmation as to whether the enrollment website and process are legitimate or part of a potential phishing or identity theft scheme. I have not entered any additional personal information beyond what was already included in the breach notice. [BBB Scam Type: Phishing] [Business: Conduent] [Location: NC, USA- 28203]
I received a physical mailed letter stating that my personal information was involved in a data breach related to Conduent. The letter stated that my Social Security Number and address may have been exposed and provided an enrollment code and phone number (877-332-1658) to enroll in identity protection services. The letter directed me to enroll through a website associated with “Privacy Solutions.” When attempting to verify the enrollment website, I noticed multiple similar domain names and links being used, including variations of “privacysolutions” websites requesting entry of sensitive personal information such as Social Security Number. Due to the sensitive nature of the information being requested and the existence of multiple similar domains, I am concerned that scammers may be impersonating legitimate breach response services to collect additional personal data from victims. I am submitting this report to document the situation and help determine whether the website and enrollment process are legitimate or part of a potential phishing or identity theft scheme. I have not provided additional personal information beyond what was already included in the breach notice. [BBB Scam Type: Identity Theft] [Business: conduent] [Location: CA, USA- 91006]
I received a letter in the mail dated 12-31-25 mentioning a data breach involving my SSN from January 13th, 2025. The business claimed to be Conduent the company involved in the large scale data breach in 2025. The website listed is very suspicious along with the delay in processing from the supposed data breach. It also lists a fraudulent phone number of 877-332-1658. The letter lists all three credit bureaus along with FTC information in an attempt to legitimize the letter. [BBB Scam Type: Phishing] [Business: Conduent Business Services LLC Date] [Location: OH, USA- 44484]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.