This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
877-913-1764
Last reported Apr 28, 2026
- 15 community reports from users
Campaign Intelligence
This scam campaign centers around a sophisticated impersonation scheme targeting consumers through multiple coordinated tactics involving financial services fraud, debt collection scams, and home warranty schemes. The operation uses three primary phone numbers that are consistently reported together: 872-304-1490, 808-400-9543, and 877-913-1764. These numbers are systematically connected through consumer reports, indicating a coordinated campaign where scammers rotate between different contact m...
This scam campaign involves a coordinated mortgage protection scheme utilizing three connected phone numbers and impersonating legitimate financial institutions. The operation centers around phone numbers 8334020148, 8779131764, and 2312274002, all linked through same-campaign relationships with 0.70 confidence scores. These numbers are being reported together with two companies: FIRST MERCHANTS CORPORATION, which has 138 CFPB complaints in the checking or savings account industry, and My Mortga...
Details
Linked Company Activity
Connected Entities
Linked Companies
PENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-membercompanyFuture Financial Inc.
campaign co-membercompanyReady Capital Corporation
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone9096341137
campaign co-memberphone4122148209
campaign co-memberRelated Domains
buysell.com
campaign co-memberdomaintekutool.com
campaign co-memberdomainwww.groupon.com
campaign co-memberdomainaol.com
campaign co-memberdomainn9gov.com
campaign co-memberdomainwww.federalreserve.gov.
campaign co-memberdomainwww.419scam.org
campaign co-memberdomainboardreader.com
campaign co-memberdomainconsultant.com
campaign co-memberdomainidentified.com
campaign co-memberdomainscoresense.com
campaign co-memberdomainweareelectricals.wordpress.com
campaign co-memberRelated Emails
cbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberemaildarkc0de@exploit.im
campaign co-memberemailhussain9710@hotmail.co.uk
campaign co-memberemailqxl.support.013@yandex.com
campaign co-memberemailhxpgogidohfauo-kdxxjgcqdtqkjmsv@loyqyarg-11131902.ca
campaign co-memberCommunity Reports
I have received several letters in the mail with BOLD red lettering "RESPONSE TO THIS NOTICE REQUIRED" and "FINAL NOTICE". Signed by Andy Perkins, Program Director 1-877-913-1764. [BBB Scam Type: Phishing] [Business: National Home Warranty] [Location: OH, USA - 43229]
Letter addressed to me at my home address reads as follows: "This notice is to inform you that your home policy at [redacted], may be expiring or may have already expired. Our records indicate that: - there are two (2) active service advisories in your area (sec. code 33.1a & 35.2c); - you do NOT have the proper coverage and may be affiliated with a third party company. It is important to contact our office upon receiving this notice to avoid any unnecessary delays in your coverage before November 17thf, 2025. Please call immediately as this will be our final attempt to notify you about activating your home's warranty. Failure to call may potentially result in your coverage lapsing and you being financially liable for all costs associated with any service advisories and home repairs. However, you still may have time left to activate the policy on your home before it's too late. No inspection will be required, and final acceptance is subject to your ability to meet eligibility requirements. We reserve the right to revoke your eligibility for service coverage after the expiration date of November 17th, 2025. Please respond immediately by calling 1-877-913-1764. Sincerely, Andy Perkins, Program Director." The letter lists operating hours and has a disclaimer at the bottom that reads "Not all consumers have previous coverage. National Home Warranty is not affiliated with your current mortgage holder. Florida License G252467." [BBB Scam Type: Phishing] [Business: National Home Warranty] [Location: MN, USA - 55805]
"final notice-home warranty expired" FINAL NOTICE Attention: ******* This letter is to inform you about an important matter regarding the property at ********** secured by your current lender. We reserve the right to revoke allocated waiver after 7 days of receiving this notice. Please call IMMEDIATELY as this will be our FINAL ATTEMPT TO NOTICY YOU: (877) 913-1764 [BBB Scam Type: Phishing] [Business: Property Allocated Waiver Date Repor] [Location: ID, USA - 83221]
I received a letter with a heading "Final Notice", "Secured by: SOFI LNDG Corp" with my name and address. It stated, "This notice is to inform you that your home's policy at XXX address may be expiring or may have already expired. Our records indicated that: (1)there are two active service advisories in your area (sec. code 33a & 35.2c), (2)you have NOT contacted us to get your home warranty policy up to date." It also stated, "It is important to contact our office upon receiving this notice to avoid any unnecessary delays in your coverage before December 1st, 2025. Please call immediately as this will be our final attempt to notify you about activating your home's warranty. Failure to call may potentially result in your coverage lapsing and you being financially liable for all costs associated with any service advisories and home repairs. ...We reserve the right to revoke your eligibility for service coverage after the expiration date of December 1st, 2025. Please respond immediately by calling 1-877-913-1764." When I called this number, he asked for my customer ID on the letter and pulled up my information, and verified my name and address, which he already had, then asked for my zip code to confirm my identity. Now my first question was whether or not he was calling from SOFI as a lender or SOFI related home owner's insurance company. He stated that he is not part of SOFI or related to home owner's insurance company. He stated that he is calling from a National Home Warranty Company. I then asked what are these two active service advisories in my area. He repeated the code names and stated there are two service records on my street and nearby areas for water supply line and electric repairs. I stated that that has nothing to do with me or my property address. I said why does the letter state that I have NOT c [BBB Scam Type: Phishing] [Business: Andy Perkins] [Location: DC, USA - 20011]
Received a letter, "Final Notice Private and Confidential RESPONSE TO THIS NOTICE REQUIRED" which included various vailed threats if I did not respond. No address given, only a phone number 877-913-1764. I researched the company and found out it belongs to National Home Warranty. When I called the number an agent immediately started to threaten me with all the possible things that can happen if I don't purchase a warranty from them. I immediately hung up. [BBB Scam Type: Other] [Business: NOT GIVEN!] [Location: FL, USA - 33578]
Final notice of home warranty and asking to call 877-913-1764 to prevent warranty lapse. Author of letter is Andy Perkins, Program Director. The notice doesn't identify the agency or business. The notice does indicate that the property is secured by First Hawaiian Bank. [BBB Scam Type: Phishing] [Business: Andy Perkins] [Location: HI, USA - 96706]
I receive mail every week about Home Owners Warranty ,and to provide my Homme Owners Insurance Policy Information, to Andy Perkins,Program Director ,at 1-877-913-1764... [BBB Scam Type: Phishing] [Business: Reverse MTG FNDG LLC] [Location: NJ, USA - 07927]
I received a letter that had a customer ID on it and an expiration date. It was signed by Andy Perkins, Program director but it listed no company on the letter or the envelope. It listed operating hours at the bottom. ATTENTION: My name This notice is to inform you that your home's policy at (stated my address) may be expiring or may have already expired. Our records indicated that: - your reverse mortgage requires that you keep up the necessary repairs and maintenance - you do NOT have the proper coverage and my be affiliated with a third party company - there are two (2) active service advisories in your area (sec. code 33. 1a & 35.2C) It is important to contact our office upon receiving this notice to avoid any unnecessary delays in your coverage before March 30th, 2026 Please call immediately as this will be our final attempt to notify you about activating your home's warranty coverage. Failure to call may potentially result in your coverage lapsing and you being financially liable for all costs associated with any service advisories and home repairs. However, you still may have time left to activate the policy on your home before it's too late. No inspection will be required and final acceptance is subject to your ability to meet eligibility requirements We reserve the right to revoke your eligibility for service coverage after the expiration date of March 20th, 2026. Please respond immediately by calling 1-877-913-1764 [BBB Scam Type: Phishing] [Business: Property Allocated Waiver Date Repor] [Location: ID, USA - 83854]
National home warranty keeps sending scam letters to my parents. Each letter keeps getting more and more urgent. Says their home warranty on reverse mortgage is going to cancelled due to nonpayment. Only way to contact them is an 877-913-1764 number and you have to leave a message for them to call you back. The name on the letter is Andy Perkins, program director. Any person could easily fall for this scam. I also see a lot of scam alerts on this and wonder why it hasn't been dealt with. I am also going to contact USPS fraud dept. [BBB Scam Type: Phishing] [Business: National Home Warranty] [Location: ID, USA- 83854]
Our US Mail was the same, appearing to come from our lender and stating several reasons our reverse mortgage could be recalled if we did not respond promptly to "extend" our "expired" warranty, even though we did not have any such coverage with them. Marked in large red letters "FINAL NOTICE" No Company name, no address only the fake name Andy Perkins and an 877 913 1764 number. [BBB Scam Type: Phishing] [Business: Andy Perkins - Home Warranty Letter] [Location: NE, USA- 68845]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.