This cluster centers on 2451 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include cdn.discordapp.com, 91.92.241.152, 91.92.240.222, 158.94.208.174, 178.16.52.44, 158.94.211.102, 158.94.210.93, 158.94.208.52, i.postimg.cc, s3.us-east-2.amazonaws.com, storage.googleapis.com, 178.16.52.18, 158.94.211.101, 158.94.211.100, local-host.life, dropmefiles.com, limewire.com, 62.60.226.159, id8965.com, valfanto.com and 2431 more. 633 of these domains have been flagged by threat int...
888-233-7130
Last reported May 10, 2026
- 50 FTC complaints filed against this number — top 1% of reported numbers
- 42 FCC robocall/robotext complaints
- 8 community reports from users
Campaign Intelligence
This cluster centers on 1486 connected domains tagged as AgentTesla, None, js. The domains include i.postimg.cc, cdn.discordapp.com, s3.us-east-2.amazonaws.com, pastes.io, dl.dropboxusercontent.com, ltcexchange.bitparking.com, bitcoin.sipa.be, litecoinpool.org, cryptocoincharts.com, sigaintevyh2rzvw.onion, toremail.net, lelantos.org, www.sigaint.org, epjhlyfgxenf2q4o.onion~~, inocncymyac2mufx.onion, torbox3uiot6wchz.onion, 344c6kbnjnljjzlz.onion, mailtor.net, bscscan.com, securitized.io and 1466...
This cluster centers on 2559 connected domains tagged as GuLoader, NorthKorea, trojan. The domains include 83.224.148.34, 14.236.247.68, 120.157.72.59, 95.127.248.192, 116.110.179.199, 116.101.73.68, 95.127.250.241, 152.173.199.182, 91.80.129.100, 59.88.45.188, 117.216.5.20, 182.60.11.164, 41.146.14.165, 120.157.46.38, 59.182.90.199, 113.168.249.76, 78.132.114.25, 171.241.208.124, 120.157.229.220, 14.236.84.25 and 2539 more. 640 of these domains have been flagged by threat intelligence feeds inc...
**Scam Campaign Report: Cross Country Financial Corporation Debt Collection Scheme** This campaign involves a coordinated debt collection and credit repair operation centered around phone number 8882337130, which has generated 48 FTC complaints and 30 FCC complaints specifically targeting consumers with debt reduction offers related to credit cards, mortgages, and student loans. The phone number has been reported together with Cross Country Financial Corporation, a company that has received 3 C...
**Debt Relief and Business Loan Scam Campaign** This scam campaign centers around aggressive debt relief solicitations and fraudulent business loan offers, operating through a network of phone numbers, companies, and deceptive unsubscribe mechanisms. The primary phone number 8882337130 has generated 48 FTC complaints and 32 FCC complaints, specifically targeting consumers with "reducing your debt" offers related to credit cards, mortgages, and student loans. This number is closely connected to ...
Details
Linked Company Activity
Connected Entities
Linked Companies
Flagstar Bank, N.A.
campaign co-membercompanyFirst Credit Services Inc.
campaign co-membercompanyPENTAGON FEDERAL CREDIT UNION
campaign co-membercompanyFIFTH THIRD FINANCIAL CORPORATION
campaign co-membercompanyCredit Services Corporation, LLC
campaign co-membercompanyIntegrity Group Inc
campaign co-membercompanyDirect, Inc
campaign co-membercompanyThe Bureaus, Inc.
campaign co-membercompanyEVERBANK, NATIONAL ASSOCIATION
campaign co-membercompanyTime Investment Corporation
campaign co-membercompanyCheckr, Inc
campaign co-membercompanyMOUNTAIN AMERICA FEDERAL CREDIT UNION
campaign co-memberRelated Phone Numbers
8553572202
campaign co-memberphone8667715844
campaign co-memberphone8339086865
campaign co-memberphone8009220204
campaign co-memberphone4097617631
campaign co-memberphone6789998212
campaign co-memberphone6512042449
campaign co-memberphone5187704680
campaign co-memberphone8887291403
campaign co-memberphone8889194623
campaign co-memberphone9805107108
campaign co-memberphone7712473445
campaign co-memberphone5858247925
campaign co-memberphone8009993355
campaign co-memberphone8007715361
campaign co-memberphone8009033637
campaign co-memberphone2025582508
campaign co-memberphone9297499563
campaign co-memberphone8887910954
campaign co-memberphone8334471291
campaign co-memberphone7656119812
campaign co-memberphone8669591188
campaign co-memberphone8442446363
campaign co-memberphone3473635189
campaign co-memberRelated Domains
130.12.180.43
campaign co-memberdomainimplementing-theft-metal-justin.trycloudflare.com
campaign co-memberdomainstaying-heavily-meaning-blowing.trycloudflare.com
campaign co-memberdomaincreations-venture-traditional-stainless.trycloudflare.com
campaign co-memberdomain103.125.219.204
campaign co-memberdomain206.123.145.26
campaign co-memberdomainarilprivate.storexyz.web.id
campaign co-memberdomain14.236.182.73
campaign co-memberdomain83.224.162.132
campaign co-memberdomain123.31.81.229
campaign co-memberdomain120.157.56.105
campaign co-memberdomain113.176.132.141
campaign co-memberRelated Emails
cfjtfl@verxl.com
campaign co-memberemaildiana@ierek.com
campaign co-memberemailhr@teknfix.com
campaign co-memberemailcbx-df@ceszx.com
campaign co-memberemailj.thompson8822@ymail.com
campaign co-memberemailbb.adige@libero.it
campaign co-memberemailpangmyiuhk@yahoo.co.jp
campaign co-memberemailmarydavis09@zoho.com
campaign co-memberemailxxxxxxxxxxxxxxxxxxxxxxxx@vmh5.grupoaldama.com.mx
campaign co-memberemaila4084163@trbvm.com
campaign co-memberemaillegalnotice@facebookmail.com
campaign co-memberemailleads@myhome.ie
campaign co-memberCommunity Reports
Constantly sends our business faxes from 1-707-230-6735 asking for business information and monthly bank deposit information. Faxing back form to 888-233-7130 with message to remove from list does nothing and the included website www.pleaseunsubscribe.com is fake. [BBB Scam Type: Other] [Business: Cross Country Loans] [Location: FL, USA - 34655]
We receive numerous scam/spam faxes from this entity monthly. The unsubscribe website is not a real unsubscribe site. It gives a fax number of 888-233-7130 to respond to. [BBB Scam Type: Phishing] [Business: Cross Country Loans] [Location: GA, USA- 30114]
Faxing cross country loan information forms asking to complete information Name-Business Name- Business Phone- Cell phone- Email Address- Monthly Bank Deposits $. Then fax back to 888-233-7130 stating they can give you credit lines & business loans for $30,000-$5,000,000 [BBB Scam Type: Advance Fee Loan] [Business: Cross Country loans] [Location: FL, USA- 32504]
We have gotten multiple single-page faxes from this mystery company, saying our business is qualified for up to $250,000. It says it's a limited time offer with flexible terms, no hidden fees, 90% approval rate etc. It says for a free evaluation, complete the form and fax to (888) 233-7130. The form asks for general company information as well as annual revenue, amount requested, and use of funds. At the bottom, it says, "to unsubscribe, please fax visit to www.PleaseUnsubscribe.com." Upon visiting this URL, a program with a series of popups generated to make it look like we were locked out of our computer. The popups looked like Microsoft error windows and said not to restart the machine, and that we would need to enter our Microsoft ID and password and call Microsoft tech support to get it unlocked. The "Microsoft Support" number given was 1-877-348-2175. Upon restarting, the computer was fine. Be careful, there's multiple ways to fall for this scam fax! [BBB Scam Type: Phishing] [Business: pleaseunsubscribe.com] [Location: NE, USA- 68137]
The unsolicited fax Shows company name as "Trust Business Capital" Tells you "How you can use the funds borrowed" "Simple qualification requirements" "Straight forward, hassle-free process" Wants the following information faxed to (888) 233-7130 1. Business Name 2. Business Phone 3. email address 4. Best time to call 5. First and Last name 6. Cell phone 7. Monthly bank deposits $ 8. Requested loan amount $ List BBB rating of A+ and the FOX business Chanel LOGO List the "PleaseUnsubscribe.com" to stop faxes [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: Trust Biz Capital /Trust Business Capital] [Location: WA, USA- 99403]
We receive faxes from different companies using the phone number 888-233-7130. I have filed numerous complaints with the FCC and blocked them from our fax, but the faxes still come through. They are always for a different business Targe [BBB Scam Type: Phishing] [Business: Trust Business Capital] [Location: WA, USA- 98444]
Fax Received from Cross Country Loans offering $150,000 loan to get working capital for my business, promising approval in 24 hours, same day funding for inventory, renovations, temporary cash flow. Or, revolving lines of credit starting at 6.9% or term loans 5- 10 yeears with rates staring at 7.9%. I have to fill out a very short from and fax to 888-233-7130. [BBB Scam Type: Bank/Credit Card Company Imposter] [Business: Cross Country Loans] [Location: OH, USA- 43215]
Our business receives on a near daily basis phishing faxes from "Cross Country Loans", "Affordable Loans", and "Trust Business Capital" offering to provide small business loans. The fax included a form and requested that you fill out the forms, including providing the name of your business, your first and last name, cell & business phone number, and email address. Each of the supposed different companies listed above nevertheless lists the same number to fax the filled out form to, that being 888-233-7130. Additionally the faxes include the same website for supposedly unsubscribing: PleaseUnsubscribe.com, which asks that your provide your phone number so they can take you off their fax list. The website itself has no identifiable information, and the GoDaddy WHOIS database lists "Domains By Proxy, LLC" as the registrant. Examples of Phishing faxes are attached. [BBB Scam Type: Advance Fee Loan] [Business: Cross Country Loans Affordable Loans Trust Business Capital] [Location: NC, USA- 28739]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.