Scam Detective
Phone Number

883-285-1805

Last reported Apr 21, 2026

Low Activity
  • 2 community reports from users

Campaign Intelligence

This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...

This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...

This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...

This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...

Details

First Seen
2/22/2026
Last Reported
4/21/2026
Area Code
883

Linked Company Activity

EQUIFAX, INC.
1 BBB complaint · Credit Cards] [Business: Equifax Impersonator] [Location: MD, USA- 21207]
TRANSUNION INTERMEDIATE HOLDINGS, INC.
4 BBB complaints · Phishing] [Business: TransUnion Imposter Sc
JPMORGAN CHASE & CO.
16 BBB complaints
CITIBANK, N.A.
23 BBB complaints
SELECT PORTFOLIO SERVICING, INC.
1 BBB complaint · Advance Fee Loan] [Business: Said they were from Select Portfolio Servicing] [Location:
WELLS FARGO & COMPANY
204 BBB complaints · Bank/Credit Card C

Connected Entities

Community Reports

Is this a phishing email or from NYC Department of Finance? Hello, I live in Australia, and have never been to the USA. I just got an email directly mailed to my personal gmail account from [nycserv@finance.nyc.gov](mailto:nycserv@finance.nyc.gov), which appears to be a real email address? The email states: >This is confirmation that your hearing request has been submitted to the NYC Department of Finance. Please save this information in case you have questions about the hearing request you submitted. > >Request Submission Date: 03/18/2020 08:17 PM > >Name: XXXX (my actual name) > >Address: XXX Glendale, NY 11385 (removed specifics in case this is a real person) > >E-mail Address: XXX (my personal email address) > >Your hearing request was for the following item(s): > >Agency Item > >\------------------------------ ----------------------------------- > >Finance 8832851805 > > > >Your statement as to why you believe the violation should be dismissed: > >\---------------------------------------------------------------------- > >The registration sticker is on the windshield and the old one WAS on the dashboard > > > >Thank you for using New York City's mobile app to submit your hearing request. Please do not reply to this email. You may contact us by visiting [http://nycserv.nyc.gov/NYCServWeb/ContactUs.html](http://nycserv.nyc.gov/NYCServWeb/ContactUs.html) if you have questions or need further assistance. Any thoughts on what to think of this? I don't understand if it is phishing as that appears to be the actual link to their contact page, and all of it looks legit. But why would it be sent to me randomly with my name and personal email (which has my first name and last name in it). ​ Should I ignore it? Try and contact the NYC Finance people?

2246 days ago4 upvotes

Is this a phishing email or from NYC Department of Finance? Hello, I live in Australia, and have never been to the USA. I just got an email directly mailed to my personal gmail account from [nycserv@finance.nyc.gov](mailto:nycserv@finance.nyc.gov), which appears to be a real email address? The email states: >This is confirmation that your hearing request has been submitted to the NYC Department of Finance. Please save this information in case you have questions about the hearing request you submitted. > >Request Submission Date: 03/18/2020 08:17 PM > >Name: XXXX (my actual name) > >Address: XXX Glendale, NY 11385 (removed specifics in case this is a real person) > >E-mail Address: XXX (my personal email address) > >Your hearing request was for the following item(s): > >Agency Item > >\------------------------------ ----------------------------------- > >Finance 8832851805 > > > >Your statement as to why you believe the violation should be dismissed: > >\---------------------------------------------------------------------- > >The registration sticker is on the windshield and the old one WAS on the dashboard > > > >Thank you for using New York City's mobile app to submit your hearing request. Please do not reply to this email. You may contact us by visiting [http://nycserv.nyc.gov/NYCServWeb/ContactUs.html](http://nycserv.nyc.gov/NYCServWeb/ContactUs.html) if you have questions or need further assistance. Any thoughts on what to think of this? I don't understand if it is phishing as that appears to be the actual link to their contact page, and all of it looks legit. But why would it be sent to me randomly with my name and personal email (which has my first name and last name in it). ​ Should I ignore it? Try and contact the NYC Finance people?

2246 days ago4 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.