This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
Phone Number
877-695-1552
Last reported Mar 27, 2026
Low Activity
- 4 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
**Debt Collection and Financial Services Scam Campaign** This cybersecurity investigation has identified a coordinated scam campaign operating through a network of seven interconnected phone numbers: 8557044480, 8447151402, 8334081586, 8889921058, 8776951552, 6096267053, and 8449547447. The campaign appears to center around fraudulent debt collection and financial services activities, with the phone number 8557044480 serving as the primary hub with connections to all other numbers in the networ...
**United Group Inc. Vehicle Warranty Scam Campaign** This scam campaign centers around United Group Inc., a company with 75 Consumer Financial Protection Bureau complaints in the vehicle loan or lease industry. The operation utilizes a coordinated network of three phone numbers: 833-330-5441, 877-695-1552, and 888-731-2187. These numbers are connected through same campaign relationships with confidence levels of 0.70, indicating they are part of a unified fraudulent scheme. Each phone number ha...
This scam campaign involves a coordinated network of five phone numbers operating under the guise of legal document delivery services, with connections to two companies that have generated significant consumer complaints. The central phone number 8776951552 serves as a hub, maintaining same_campaign relationships with confidence levels of 0.70 to four other numbers: 8333305441, 6148052524, 8889955185, and 3148048519. Despite these coordinated operations, none of the five phone numbers have gener...
This scam campaign involves a coordinated network of five phone numbers operating in conjunction with two companies to target consumers with fraudulent debt collection and payment decline schemes. The campaign centers around phone number 8885025824, which connects to all other numbers in the network including 8883380640, 8887070540, 6148052524, and 8776951552 through same-campaign relationships with 0.70 confidence scores. These numbers are linked to United Group Inc., which has accumulated 75 C...
Details
Linked Company Activity
EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
BANK OF AMERICA, NATIONAL ASSOCIATION
173 BBB complaints
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CAPITAL ONE FINANCIAL CORPORATION
158 BBB complaints
CITIBANK, N.A.
23 BBB complaints
Resurgent Capital Services L.P.
1 BBB complaint
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C
FIFTH THIRD FINANCIAL CORPORATION
26 BBB complaints
Connected Entities
Linked Companies
company
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-memberRelated Phone Numbers
phone
8553572202
campaign co-memberphone3186669555
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberRelated Domains
domain
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
email
diana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberemailservicename@nickname.tld
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberCommunity Reports
Voicemail from Paul Hansen, indicating United Courier Service has been retained to deliver legal documents to my home or residence and that I needed to call 877-695-1552. I did not call them back. [BBB Scam Type: Phishing] [Business: Unknown] [Location: MD, USA- 20657]
47 days ago
Hello, this message is solely intended for. Area sky. File number D as in delta, A as in alpha. 33416. Referencing the address on 1111 Topaz Place. My name is Paul Hansen. I am calling on behalf of United Courier Service. We have been retained to schedule and deliver legal documents to you tomorrow between the hours of 8 AM and 4 PM to either your home or place of employment. Will only be making 2 attempts to deliver these documents, which will require a signature as proof of delivery. If you are unable to deliver these documents after 2 attempts, it will be classified as a failed action to serve, which will result the pending matter to proceed without your consent. If you have any questions or if you need to reschedule the delivery, you will need to contact the firm directly at phone number. 877-695-1552. Reference your file number. Please be advised that this call has been logged, intimated as proof you have been notified of this pending legal matter. Have a good day“ They used an address that I haven’t lived at in over 5 years and my phone number was changed to my current on two years after I moved so it wouldn’t even be tied to that address and I see this “Paul Hansen” was reported on this site three days ago [BBB Scam Type: Phishing] [Business: Paul hansen] [Location: CO, USA- 81089]
47 days ago
Call from United Delivery Services attempting to deliver legal documents and to call directly at 877-695-1552. [BBB Scam Type: Phishing] [Business: Unknown] [Location: NV, USA- 89450]
50 days ago
name is Paul Hanson. I am calling on behalf of the United courier service. We have been retained to schedule and deliver legal documents to you tomorrow between the hours of 8 AM and 4 PM to either your home or place of employment will only be making two attempts to deliver these documents which will require a signature as proof of delivery. If you're unable to deliver these documents after two attempts, it will be classified as the failed action to serve with a result, pending matter to proceed about your consent if you have any questions or if you need to reschedule the delivery, you will need to contact the firm directly at phone number 877-695-1552. Reference your phone number please be advised that this called and logged and submitted as proof you have been notified of the pending legal matter. Have a good day.…” [BBB Scam Type: Other] [Business: the United courier service Date Repo] [Location: OH, USA- 43755]
54 days ago
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.