This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
888-204-8630
Last reported May 11, 2026
- 6 FTC complaints filed against this number
- 11 FCC robocall/robotext complaints
- 9 community reports from users
Campaign Intelligence
This cluster centers on 2957 connected domains tagged as GuLoader, NorthKorea, censys. The domains include salelegalsteroids.com, 192.210.186.208, gharnt.com, cloflart.com, id3702579photo-image-docs.com, www.almacensantangel.com, 64.95.12.162, blue-oceans.net, sixmexicos.com, baritonclick.online, 185.252.24.15, un1rw11q4u.com, ameyiando.com, niril.sbs, bursaelektriktamir.com, blankeyeo.com, umxtxhub.za.com, sunchernical.com, 18.194.67.137, servecdn.my and 2937 more. 606 of these domains have bee...
This cluster centers on 2107 connected domains tagged as GuLoader, NorthKorea, censys. The domains include storage.googleapis.com, cdn.discordapp.com, pastes.io, s3.us-east-2.amazonaws.com, dl.dropboxusercontent.com, 188.137.230.45, touchskins.io, 158.94.208.7, 74.0.32.149, 74.0.32.141, api.touchskins.io, 80.89.237.190, 188.137.254.207, api.wewpwsw.su, 188.137.229.136, 196.251.107.24, 104.194.152.180, link.storjshare.io, s3.g.s4.mega.io, 62.60.226.159 and 2087 more. 562 of these domains have bee...
This cluster centers on 2121 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233, 41.146.1.154, 59.182.119.128, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, cdn.discordapp.com and 2101 more. 576 of these domains have been flagged by threat intelligence feed...
This cluster centers on 1630 connected domains tagged as BABADEDA, pw-2026, wsh. The domains include storage.googleapis.com, cdn.discordapp.com, implementing-theft-metal-justin.trycloudflare.com, staying-heavily-meaning-blowing.trycloudflare.com, creations-venture-traditional-stainless.trycloudflare.com, arilprivate.storexyz.web.id, 206.123.145.26, 103.125.219.204, 45.87.43.154, 10cricofficial.com, justwatch.life, 195.16.44.75, advise-visual-playstation-closer.trycloudflare.com, 91.92.241.197, 6...
This cluster centers on 2141 connected domains tagged as GuLoader, NorthKorea, censys. The domains include 59.182.90.199, 91.80.129.100, 123.28.175.23, 120.61.247.2, 178.50.166.61, 113.168.249.76, 123.209.193.86, 113.165.6.38, 120.157.72.234, 171.235.194.253, 120.157.159.171, 37.142.77.163, 171.241.208.124, 120.157.229.220, 171.117.30.233, 91.80.136.9, 46.124.33.133, 46.124.40.3, 83.224.151.243, 88.86.246.233 and 2121 more. 596 of these domains have been flagged by threat intelligence feeds incl...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
This scam campaign involves a coordinated network of three phone numbers operating in conjunction with Credit Corp Solutions Inc., a debt collection company that has generated 2727 CFPB complaints. The primary phone number 8665872406 has received 22 FTC complaints specifically related to debt reduction scams targeting credit cards, mortgages, and student loans, with victims reported in Glen Allen, Virginia, Fort Thomas, Kentucky, and Greensboro, North Carolina. This number is directly connected ...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone3186669555
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone8884260179
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone3025417253
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
diana@ierek.com
campaign co-memberemailcfjtfl@verxl.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailhr@teknfix.com
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailidentity@varomoney.com
campaign co-memberemailservicename@nickname.tld
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberCommunity Reports
Received a phone call from 1-888-204-8630 stating they are with Chase Fraud Prevention and I should call to verify my credit card application. [BBB Scam Type: Credit Cards] [Business: Chase - Impostor] [Location: MO, USA - 63701]
An official looking letter from Chase Card services was sent to my mother's address. I have no accounts tied to her address. The letter stated "We're concerned someone maybe using your personal information fraudulently and declined an application because of this. If you would like to discuss this application with a fraud specialist, please call us at 1-888-204-8630" I did not call the number; instead, I went to the chase website & did not see this number listed. Then I googled the # and saw it's a scam. I also called the real Chase number to confirm my account was ok. [BBB Scam Type: Credit Cards] [Business: Unknown] [Location: OH, USA - 44047]
I received a call to which I did not answer because I was on another call. However, the scammer left the following message: "This is Pooja. I'm calling from Chase card verification team to verify a credit card application. Please call us back at 1-888-204-8630. We work Monday to Sunday, 8 AM to 8 PM. Any representative at this number can assist you. Do have this reference number available when you call XXXX" [BBB Scam Type: Credit Cards] [Business: Chase card verification team- Imposter] [Location: TX, USA - 77318]
Hello, this message is for Lisa Foster. My name is Tony calling from Chase for prevention. I am calling to verify credit card application and we are looking to verify some information with you so please give us a call back at 888-204-8630 at your earliest convenience. We are open Monday through Sunday 8 AM to 8 PM Eastern. Any representative can assist you at that number just please provide them with the following reference. The reference is 251228538462. Thank you and have a great day. [BBB Scam Type: Bank/Credit Card Company Imposter] [Business: Chase Bank Imposter] [Location: CA, USA - 92107]
A woman called me saying she was from Chase Bank verification dept. I had just applied for a new credit card so my first reaction was to think it was a legitimate call. However, the phone number made me suspicious and I was on my way out anyway. I told her I would call her back when I got home. She told me to call 888-204-8630. I looked up that phone number and confirmed my suspicion: this is an attempt to gain banking and personal information. I never called her back. [BBB Scam Type: Credit Cards] [Business: Chase Bank verification] [Location: GA, USA- 30265]
I applied online for an Amazon/Chase credit card. The next day I received a phone message. The caller claimed to be Sisha from Chase Fraud Prevention. She had my full name including middle initial. She asked me to call her at 1-888-204-8630 with a 12-digit reference number she provided. [BBB Scam Type: Credit Cards] [Business: Shisa] [Location: CA, USA- 95014]
A voice message was left: This message is for Nicole Wright. This is Melvin calling from the Chase Fraud Prevention team. To verify information, please give us a call back at 1-888-204-8630 at your earliest convenience. We are open Monday to Sunday 8AM to 8PM Eastern time and any representative at that number can assist you. This is the reference number to use when you call, it's gonna be 260-306-524-915. Thank you for banking at Chase. Have a great day. [BBB Scam Type: Phishing] [Business: Chase Bank] [Location: IL, USA- 60201]
Hi, this message is for —-. My name is Christina. I'm calling from Chase fraud Prevention. We're looking to verify some information with you. Please give us a call back at 888-204-8630 at your earliest convenience. We open 7 days a week, 8 AM to 8 PM Eastern time, and any representative can assist you. Please provide them with the following reference number. Thank you and have a great day. [BBB Scam Type: Credit Cards] [Business: Chase Fraud Prevention] [Location: OK, USA- 74055]
Is this a scam? I applied for a chase card. Got a letter in the mail that it was denied for fraud. Called the number and they asked me a lot of odd questions, about my mothers maiden name and old addresses, eventually culminating in them sending me an email and asking for a photo of my utility bill and drivers license to confirm DOB and address. What I could find is that the number they had me call was legitimate (888-204-8630) but I just got a nagging feeling about it. The email (no.reply.alerts@chase.com) is supposedly legitimate as well, but I have heard they can make it look real if they want to. Just looking for anyone's feedback and whether I may want to consider freezing assets or such.
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.